Deforestation accounts for roughly 12% of global greenhouse gas emissions, according to the IPCC. European consumption is estimated to drive approximately 10% of tropical deforestation worldwide through imports of agricultural commodities. The European Union has responded by conditioning market access: any product derived from land deforested after 31 December 2020 will be banned from the EU market from 30 December 2026.
This is Regulation (EU) 2023/1115, universally known as the EUDR (*EU Deforestation Regulation*). It covers seven strategic commodities, cocoa, coffee, soya, palm oil, wood, rubber, and cattle, along with hundreds of derived products. It directly affects importers, traders, manufacturers, retailers, and exporters operating in these supply chains within the EU.
Two successive delays, in December 2024 and December 2025, pushed the enforcement date back to 30 December 2026 for large companies. Those delays created confusion: many businesses concluded they could afford to wait. That reading is a mistake. This guide explains why, and what EUDR compliance genuinely requires for a mid-cap company or industrial group, whether you are based in the EU or exporting into it.
Table of Contents
Part 1, What the EUDR Says: Text, Scope, and Core Definitions
Regulation (EU) 2023/1115: Origin and Legal Framework
Regulation (EU) 2023/1115 carries the official date of 31 May 2023, the date of adoption by the European Parliament and the Council. It was published in the Official Journal of the European Union on 9 June 2023 and entered into force on 29 June 2023. Its legal basis is Article 192(1) of the Treaty on the Functioning of the European Union, which underpins EU environmental policy. As a regulation, not a directive, it applies directly across all Member States without national transposition.
The EUDR is explicitly anchored in the European Green Deal and the EU Biodiversity Strategy for 2030. The underlying logic is direct: if forests are irreplaceable carbon sinks and biodiversity reserves, and if European consumption is driving their destruction through commodity imports, then the EU has both the responsibility and the legal instrument to break that link.
This is also a textbook illustration of the "Brussels effect" in action. Any company wishing to access the European market, regardless of its nationality or country of incorporation, must comply. A Brazilian soya exporter, an Indonesian palm oil processor, a US timber trader, or a UK confectionery group importing Ghanaian cocoa: all are within scope the moment their products enter the EU supply chain. For companies headquartered outside the EU, EUDR is not a remote European compliance item, it is an immediate operational constraint.
The Seven Commodities and Their Derived Products
Annex I of the Regulation lists covered products with their Harmonised System (HS) customs nomenclature codes. Knowing these codes is operationally critical: they are mandatory in the customs declaration linked to the Due Diligence Statement (DDS) submitted on TRACES NT.
Several points of scope deserve attention. Rubber draws the automotive and medical equipment sectors directly into compliance obligations. Wood encompasses cardboard and unprinted paper, but following amending Regulation 2025/2650, printed products (books, newspapers, magazines) have been removed from scope, under pressure from the publishing industry. Recycled or recovered wood is similarly out of scope, since Article 2(26) defines "placing on the market" in a way that excludes products not requiring new production. Soya primarily concerns animal feed, which creates indirect exposure for pork, poultry, and aquaculture operations that source compound feeds containing Brazilian or Argentine soya meal.
Three Operational Definitions to Understand Precisely
Deforestation (Art. 2(3)): the conversion of forests into agricultural land, regardless of cause. The definition of "forest" follows the FAO standard: an area exceeding 0.5 hectares, tree canopy cover above 10%, trees capable of reaching 5 metres in situ. This FAO definition, innocuous at first glance, contains a structural blind spot that few companies have fully absorbed.
Forest degradation (Art. 2(4)): the structural conversion of a primary forest or a naturally regenerating forest into a planted forest or other type of forest. This provision targets the conversion of old-growth forests, with their irreplaceable biodiversity, into monoculture plantations.
The cut-off date: 31 December 2020 (Art. 3). Any placing on the EU market, or export from the EU, is prohibited if the products originate from land that was deforested or degraded after that date. This date is a deliberate policy choice: it aligns with the adoption of the Green Deal and establishes a fixed evaluation threshold that is entirely independent of the Regulation's application timetable. In other words, even though companies have until 30 December 2026 to comply, the deforestation assessment date remains 31 December 2020. Any plot cleared between 1 January 2021 and today is already out of compliance.
The Cerrado Problem: A Structural Gap in the Forest Definition
Brazil produces roughly 70% of the world's soya. A significant share is cultivated on the cerrado, the Brazilian wooded savanna, the second most biodiverse biome on the planet after the Amazon. The cerrado, as a savanna, does not meet the FAO forest definition: its canopy cover is insufficient, its woody stratum too sparse.
The direct consequence: soya grown on cerrado land cleared after 31 December 2020 is, under the strict definition of Regulation (EU) 2023/1115, legally importable into the European Union. There is no "deforestation" in the EUDR sense, there was no forest. This gap has been highlighted by the Brazilian government and certain agribusiness interests. Discussions are underway in Brussels to extend the definition to cover "other natural ecosystems" in a future revision, but nothing is settled as of this writing.
For soya buyers and compound feed manufacturers: EUDR compliance does not guarantee the absence of biodiversity destruction if sourcing originates in the cerrado. Companies subject to CSRD will need to account for this under ESRS E4 (biodiversity), independently of strict EUDR compliance. It is a gap that responsible procurement teams in Amsterdam, Hamburg, and London are increasingly aware of.
Part 2, Who Is Affected: Operators, Traders, SMEs, and Non-EU Companies
The Fundamental Distinction: Operator versus Trader
Regulation (EU) 2023/1115 defines two types of actors, with asymmetric obligations.
An operator (Art. 2 and Art. 4) is any natural or legal person who, in the course of a commercial activity, places covered products on the EU market or exports them from the EU. The operator is the first link in the EU chain, the company importing cocoa from Côte d'Ivoire, soya from Brazil, or leather from Argentina. The operator bears full responsibility for the complete due diligence process and must submit its own DDS.
A trader (Art. 2 and Art. 5) is any person who, in the course of a commercial activity, makes covered products available on the market after they have already been placed on it. The trader operates downstream: it resells, distributes, or processes from an already-qualified consignment. Under amending Regulation 2025/2650, traders may reference the upstream operator's DDS in their own simplified declaration, avoiding the need to restart due diligence for the same products.
SME Thresholds and Their Real Reach
The SME definition under EUDR draws on Recommendation 2003/361/EC: fewer than 250 employees and annual turnover below €50 million. The extended application date (30 June 2027) more precisely targets micro and small undertakings as defined in Accounting Directive 2013/34/EU (small undertaking: fewer than 50 employees, less than €10 million net turnover, less than €5 million balance sheet total, meeting at least two of the three criteria). Regulation 2025/2650 adds a further mechanism: a company that exceeds these thresholds overall can still qualify if the share of its activity linked to EUDR-covered products (turnover, headcount, balance sheet) stays under the same thresholds. This is distinct from the most streamlined declarative regime (one-time simplified declaration, Art. 4a), which is reserved for "micro or small primary operators" established in a country classified as low risk under the benchmarking system (Art. 29).
Rapid readings of the SME provisions frequently lead to misunderstanding. This small-undertaking status means an extended application date (30 June 2027 rather than 30 December 2026) and a slightly simplified due diligence process. It does not mean exemption from substantive obligations. A 120-employee company is still an SME under Recommendation 2003/361/EC, but it exceeds the 50-employee threshold that unlocks the extended deadline: it remains fully subject to EUDR, with the 30 December 2026 deadline.
The Brussels Effect: Non-EU Companies in Scope
The Regulation applies to any company, regardless of nationality, as long as it places covered products on the European market or exports them from the EU. A Brazilian, Indonesian, or American company that exports to the EU via a European subsidiary or authorised representative falls within scope. This is the Brussels effect operating at full force: EU regulation becomes a de facto global standard for any business that wants access to the world's largest consumption market.
For UK-based companies, which lost the EU single market benefits after Brexit but continue to trade substantially with the bloc, EUDR is an immediate compliance requirement. UK importers of cocoa, coffee, timber, or leather who then re-export or supply EU-based clients are directly in scope. UK entities that are first importers into the EU (via an EU distribution subsidiary, for instance) carry the full operator obligations. This is a dimension that many UK sustainability and procurement teams have been slow to engage with, given the general post-Brexit regulatory divergence narrative.
For US companies, EUDR affects any operation with EU-facing product flows. Given that the US is classified as "low risk" in the country benchmarking system, the due diligence burden is lighter, but it is not zero.
Practical Cases: Who Is Affected in Your Sector?
A Dutch commodity trader importing cocoa from Côte d'Ivoire: operator, first placing on the EU market. Must submit a DDS with plot-level geolocation data from Ivorian farmers. The country is standard risk; full due diligence applies.
A Belgian chocolate manufacturer buying cocoa butter from the Dutch trader: trader. May reference the trader's DDS in its own simplified declaration, provided the consignment is identifiable and the upstream DDS reference number from TRACES is communicated.
A German furniture retailer importing products from Indonesia: operator for wood-based products. Must trace wood origin to the forest plot, verify the harvest date against the 31 December 2020 cut-off, and submit a DDS on TRACES. Indonesia is standard risk; full due diligence applies.
An Italian leather goods brand sourcing cattle leather from Brazil: operator. Brazil is standard risk. Traceability must extend back to the birth plot of the animal, not merely to the abattoir or tannery (see the indirect cattle problem, Part 7).
A French compound feed manufacturer purchasing Brazilian soya meal: operator for the soya component. Brazil is standard risk; full due diligence applies. Its downstream customers, livestock farmers, farming cooperatives, are traders and may reference upstream DDS.
A Swedish pulp importer sourcing from Finnish forests: Finland is an EU Member State, classified low risk. Simplified due diligence applies. The probability that sustainably managed Finnish forests were cleared after 2020 is negligible, but the operator must still document that conclusion, even if the documentary burden is light.
Part 3, The Real Timeline After Two Delays: Reading the Calendar Correctly
The Complete Regulatory Timeline
Why the Two Delays Happened
The first postponement, adopted in December 2024, was driven by two distinct pressures. The Commission's stated justification was the lack of operator readiness and delays in delivering implementation tools, particularly guidance on geolocation requirements and an incomplete country benchmarking system. The less-stated reason, documented in European Parliament hearings, was serious doubt about TRACES NT's technical capacity to absorb the anticipated volume of DDS submissions.
TRACES, Trade Control and Expert System New Technology, was originally designed for phytosanitary and veterinary border checks. Extending it to the EUDR represents a radical scale change: hundreds of thousands of DDS per year for cocoa and coffee supply chains alone, compared to a few tens of thousands of veterinary certificates. The platform, built for phytosanitary flows, is not natively dimensioned for these volumes. Its potential instability under real-world conditions is one of the concrete arguments for not waiting until the final quarter of 2026 to test your first DDS submissions.
The second postponement, in December 2025, was linked to the publication of the country benchmarking list in May 2025 and the structural simplifications introduced by Regulation 2025/2650 (cascading DDS referencing, simplified regime for micro-operators, removal of printed products). Intense diplomatic pressure, from Brazil, Indonesia, and the United States, weighed heavily on the negotiations.
"30 December 2026" Does Not Mean "We Have Time"
This is the most widespread misreading. Treating the application date as the moment to *begin* preparing is an operational error. Here is why.
EUDR due diligence requires collecting historical data that proves production plots were not deforested after 31 December 2020. GPS plot coordinates, production histories, legal documentation from third countries, none of this exists in standard importer ERP systems. Assembling it requires supplier engagement across multiple tiers of a supply chain, often with significant communication barriers.
Submitting your first DDS on TRACES NT also demands a learning curve: creating an EU Login account, configuring your organisation profile, testing the interface. In a context where the platform is already under strain, companies connecting for the first time in November 2026 will encounter delays.
Finally, if a first DDS is rejected or stalled for documentary reasons, correction, resubmission, and obtaining a valid DDS reference number all take time. Without that reference number, the consignment is held at the border. For a company with fast-moving inventory, a customs hold has immediate financial consequences.
Part 4, The Concrete Obligations: The Three Pillars of Due Diligence
EUDR due diligence is defined in Articles 8 to 10 of Regulation (EU) 2023/1115. It is structured around three sequential, mandatory pillars.
Pillar 1, Information Collection (Art. 9)
This is the most demanding pillar in practice. For each consignment of covered products, the operator must collect and retain:
The granularity of geolocation requirements deserves particular attention. For the millions of smallholders, cocoa producers in Côte d'Ivoire with fewer than 2 hectares, coffee farmers in Ethiopia, obtaining GPS coordinates requires a structured collection infrastructure organised by cooperatives or large buyers. Initiatives exist (the Cocoa & Forests Initiative, mapping programmes by Barry Callebaut, Nestlé, and Olam), but coverage remains partial. EU-facing cocoa and coffee supply chains will need to invest in these programmes if they have not already done so.
Pillar 2, Risk Assessment (Art. 10)
Based on the information collected, the operator must assess three risk dimensions:
The assessment also incorporates the country benchmarking system (see below). Third-party certifications such as FSC for wood, RSPO for palm oil, or RTRS for soya are elements in the risk assessment, but they are insufficient on their own to establish EUDR compliance. Holding RSPO certification does not substitute for a complete DDS.
The "negligible risk" concept, properly understood
Article 9 of the Regulation introduces the concept of negligible risk. This is the conclusion the operator must reach in order to place the product on the market. The formulation is precise: *the operator concludes that the risk is negligible*. It is not an automatic threshold or a conferred status. It is the outcome of a documented demonstration.
A frequent error consists in reasoning: "my supplier is in a low-risk country, so negligible risk is automatic." This is incorrect. A "low risk" country classification enables simplified due diligence, fewer geolocation data points required, lighter assessment, but the operator must still demonstrate, with documentation, that its assessment concludes to negligible risk. The logic is quasi-judicial: it is a reasoned conclusion, not a legal presumption.
The Country Benchmarking System (Art. 29)
The first official classification list was published by the European Commission in May 2025 (DG ENV / Green Forum). Three categories:
High risk (4 countries): Belarus, Myanmar/Burma, North Korea, Russia.
Standard risk (major producing countries): Brazil, Indonesia, Malaysia, Côte d'Ivoire, Ghana, Vietnam, Colombia, Argentina.
Low risk (approximately 140 countries): all EU Member States, the United Kingdom, the United States, Canada, Australia, Japan, China, South Africa.
China classified as low risk: a functional anomaly
The classification of China as low risk merits careful analysis. China's domestic deforestation rate is indeed limited. But its role in global value chains creates a significant blind spot: China imports and processes Indonesian palm oil (standard risk country), Burmese timber (high risk), and other commodities sourced from areas with confirmed deforestation, before re-exporting the processed products to the EU.
EUDR benchmarking is applied to the country of final production, not to the origin of the raw materials. A palm oil derivative processed in China enters the EU market with China's "low risk" status as the country of transformation, even if the underlying raw material originates from Indonesian plantations established after 2020. This potential for circumvention is acknowledged by several observers and will need to be addressed during the first benchmarking revision (expected 2026-2027).
TRACES NT and the Due Diligence Statement (DDS)
TRACES NT is the European Commission's official platform (managed by DG SANTE) for cross-border movements of animal and plant products. It is accessible via EU Login (eIDAS) authentication, available in 24 languages.
The DDS, Due Diligence Statement is the pivotal compliance document. It gives material form to the three-pillar conclusion. Its content, defined in Annex II of the Regulation, includes: reference to the information collected, conclusion of the risk assessment, mitigation measures taken, declaration of negligible risk, product data and volumes, country of production.
Once submitted on TRACES, the DDS generates a DDS reference number, a unique identifier. This number is mandatory in the customs declaration. Without a valid DDS reference number, the consignment is held at the EU border. This is the most direct operational control point: no valid DDS = no customs clearance.
Regulation 2025/2650 introduces an important simplification: only the operator that places the product on the EU market for the first time must submit a full DDS with geolocation data and risk assessment. Downstream operators and traders may reference that DDS in their own simplified declaration, provided the consignment is identifiable and the upstream DDS reference number is communicated.
Pillar 3, Risk Mitigation (Art. 10(4))
Where the assessment identifies a non-negligible risk, the operator must implement mitigation measures: requesting additional information or documentation from suppliers, commissioning independent third-party audits, taking corrective action (including changing suppliers where the risk persists), and updating the risk assessment. The Regulation does not prescribe a single method, the proportionality principle applies according to the complexity of the supply chain.
Part 5, Sanctions and Controls: What Non-Compliance Actually Costs
The Sanctions Regime (Art. 25)
Regulation (EU) 2023/1115 requires Member States to establish sanctions that are "effective, proportionate, and dissuasive." The minima are set directly by the Regulation:
The calculation of the penalty on 4% of total EU turnover, not merely turnover from covered products, is a severe provision. For an industrial group generating €400 million in European revenues, the theoretical penalty ceiling is €16 million, even if the non-compliance concerns only a fraction of its product portfolio.
Controls by National Competent Authorities (Art. 17)
Each Member State designates national competent authorities responsible for controls. These will vary by country: in France, the likely authorities are the DGCCRF for market controls and the customs administration (DGDDI) for border controls; in the Netherlands, the NVWA (Netherlands Food and Consumer Product Safety Authority); in Germany, the BLE (Federal Office for Agriculture and Food). At customs, the DDS reference number is checked at clearance: without a valid number, the consignment does not pass.
The Regulation sets minimum annual control rates per covered product (Art. 16(8) to (10)): at least 1% of operators in low-risk countries, 3% in standard-risk countries, 9% in high-risk countries. These are floors, not aspirational targets, which signals that enforcement will not be symbolic.
Part 6, Interaction with CSRD, CS3D, and CBAM
The EUDR does not stand alone. It sits within a broader European regulatory architecture that, taken together, is fundamentally reshaping the conditions of market access for any company operating in environmentally sensitive supply chains.
CSRD / ESRS: A Direct Data Articulation
For companies already subject to sustainability reporting under the CSRD (Corporate Sustainability Reporting Directive), the connection is immediate. ESRS E4 (Biodiversity and ecosystems) requires a policy against imported deforestation, with indicator ESRS E4-2 as the operational data point. The data collected through EUDR due diligence (plot geolocation, deforestation risk assessment) feeds directly into ESRS E4 reporting.
ESRS E1 (Climate change) is also engaged: forest destruction affects a company's Scope 3 carbon footprint through emissions linked to land use change (LULUCF, Land Use, Land-Use Change and Forestry). A company whose suppliers clear tropical forests after 2020 will see its Scope 3 increase accordingly.
The operational synergy is tangible: a company that invests in a supplier data collection system for EUDR compliance will hold the same underlying data needed for its CSRD reporting. The dual regulatory burden strengthens the business case for an integrated ESG data infrastructure.
CS3D: Corporate Due Diligence as the Overarching Layer
Directive (EU) 2024/1760 on Corporate Sustainability Due Diligence (CSDDD, or CS3D) requires holistic due diligence across the entire value chain, covering both human rights and environmental impacts, across all sectors. The EUDR can be read as a sector-specific product-level component of CS3D, applied to seven forest commodities. Both instruments share the same conceptual framework (information collection, risk assessment, mitigation), though their control architectures are distinct.
For companies already subject to comparable national legislation, the French duty of vigilance law (loi n° 2017-399 of 27 March 2017, applicable to companies with 5,000+ employees in France or 10,000+ worldwide), the UK Modern Slavery Act 2015 (supply chain transparency), or the German Supply Chain Due Diligence Act (LkSG 2023), EUDR adds a layer of commodity-specific product control. The methodologies differ, but the documentary logic is closely aligned. Companies with mature supply chain due diligence processes can extend them to cover EUDR requirements more efficiently than those starting from scratch.
CBAM: The Same Philosophy, Applied to Carbon
Regulation (EU) 2023/956 establishing the Carbon Border Adjustment Mechanism conditions EU market access on a carbon levy for imports with high GHG intensity (steel, cement, aluminium, fertilisers, hydrogen, electricity). EUDR and CBAM share the same philosophy of environmental conditionality of trade, one targeting deforestation, the other targeting carbon. The two instruments can apply cumulatively for certain products (a tropical wood panel is subject only to EUDR; steel is subject to CBAM but not EUDR).
For sustainability, compliance, and procurement directors, the signal is coherent: the European Union is methodically building a regime of environmental conditionality at its borders. The EUDR is one brick in that structure, not a one-off measure.
Part 7, Sector Impact: A Commodity-by-Commodity Review
Cocoa: The Smallholder Challenge
Côte d'Ivoire (approximately 43% of EU imports) and Ghana (approximately 17%) together account for roughly 60% of cocoa imported into Europe, both classified standard risk. Both countries have experienced significant deforestation linked to cocoa expansion since the 1990s. Compliance is particularly challenging here because supply chains are composed of millions of smallholders (producers farming fewer than 2 hectares) who are difficult to geolocate without an organised collection infrastructure. Rainforest Alliance or Fairtrade certification provides a useful foundation but is insufficient for EUDR compliance on its own. Large houses, Barry Callebaut, Nestlé, Olam, Mondelēz, are investing in mapping programmes, but coverage remains partial as the deadlines approach.
Coffee: The Multi-Origin Blend Problem
Brazil, Vietnam, and Colombia dominate European coffee imports, all standard risk. The complexity in coffee lies in the industry practice of multi-origin blending: a commercial espresso blend may combine five to eight origins in a single consignment. Lot-level, origin-specific traceability is a major industrial challenge for roasters and large-scale buyers. Batch management systems will need to be adapted to link each origin to its corresponding DDS.
Wood and Paper: A Sector Already Accustomed to Traceability
The wood and paper sector is probably the most advanced in terms of traceability: FSC and PEFC certifications are broadly deployed, and the EU Timber Regulation (EUTR, 995/2010) had already introduced due diligence requirements since 2013. The rupture with Russia and Belarus (both high risk) in 2022, following sanctions, de facto redirected procurement flows towards North America (low risk) and Central Europe. The EUDR challenge for this sector is primarily about systematic documentation and TRACES submission, rather than finding new supply sources.
Leather and Beef: The Indirect Cattle Problem
Brazil is the world's largest exporter of beef and cattle leather (standard risk). Brazil's leading abattoirs, JBS, Marfrig, Minerva, have developed traceability systems for "direct cattle", animals purchased directly from registered landowners. But the EUDR requires tracing back to the birth plot, not merely to the last farmer in the chain.
This is where the indirect cattle problem arises: an animal may be born on a fazenda in a sensitive area, sold to an intermediary, then fattened at a certified feedlot before slaughter. Traceability of indirect cattle is the structural gap in Brazilian beef supply chains for EUDR compliance. Animal-level tracking systems exist (GTA, Animal Transit Guide, SISBOV), but their coverage and reliability for indirect transactions remain insufficient at the scale of total production.
Soya: Indirect Exposure Across European Agri-Food
The Netherlands and Germany are the principal entry points for Brazilian soya into Europe via their Atlantic ports, with volumes subsequently redistributed across the continent. The agri-food sector is exposed indirectly through purchases of compound feeds containing soya meal. Animal feed manufacturers (aquafeed, pork, poultry nutrition) purchasing Brazilian or Argentine soya meal (both standard risk) are EUDR operators. Their downstream customers, livestock farmers, farming cooperatives, are traders and may reference upstream DDS, but the upstream chain must be operationally compliant first.
Palm Oil: Indonesian Peatland Deforestation
Indonesia and Malaysia (both standard risk) produce approximately 85% of the world's palm oil. Deforestation of Indonesian forested peatlands in Kalimantan and Sumatra is at the centre of the most contentious compliance cases. Peatlands are particularly carbon-dense ecosystems, their drainage and conversion generate GHG emissions for decades. RSPO certification, already widespread, is not sufficient for EUDR compliance: it must be complemented by geolocation documentation and a completed risk assessment.
Rubber: The Agroforestry Distinction
Indonesia, Thailand, and Côte d'Ivoire (all standard risk) dominate global production. The automotive sector (tyres) is directly in scope. The complexity lies in the nature of rubber cultivation: grown in agroforestry systems, rubber tree plantations can themselves function as carbon sinks. The distinction between degraded forest and rubber agroforestry is an interpretive challenge under the "forest degradation" definition of Article 2(4), on which the Commission has not yet published consolidated guidance.
Part 8, How to Prepare in 2026: A Six-Step Roadmap
Step 1, Map Your EUDR Exposure
Before any action, identify your exact exposure perimeter. For each product you purchase or sell: does it contain a commodity listed in Annex I of the Regulation? What is the corresponding HS code? Are you an operator (first to place on the EU market) or a trader? Where do the raw materials originate, and what is the risk classification of the countries concerned? This mapping is the foundation of the entire compliance effort, it determines the resources to mobilise.
Step 2, Identify and Prioritise Exposed Suppliers
Classify your suppliers according to EUDR risk: standard or high-risk countries first, followed by suppliers for whom you lack plot-level geolocation data. Open a dialogue with your direct suppliers to assess their capacity to produce the required data. For commodities in complex supply chains, cocoa smallholders, multi-origin coffee blends, anticipate the need to engage with third-party mapping programmes.
Step 3, Upgrade Your Data Systems
EUDR data does not live in traditional ERP systems. GPS plot coordinates, deforestation histories, proof of production legality: this information must be collected, stored, and associated with precise lot references, HS codes, and volumes. If your company already uses a supplier data collection platform for CSRD or CS3D reporting, assess whether it can accommodate EUDR data. If not, evaluate the EUDR traceability solutions available on the market.
Step 4, Get on TRACES NT Without Delay
Create an EU Login account now. Explore the TRACES NT interface and simulate the submission of a test DDS. Identify your customs contacts in your country of import (e.g., DGDDI in France, HMRC / Border Force in the UK, the relevant port authority in your jurisdiction) and verify the interconnection between TRACES and your national customs clearance system. Getting to grips with the platform takes time, and that time will not be available in late 2026 when the entire industry is connecting simultaneously.
Step 5, Qualify Alternative Supply Sources Where Necessary
For suppliers whose compliance is uncertain, high-risk country origins, supply chains without plot-level traceability, identify compliant alternatives now. Alternative sourcing takes time: it requires audits, quality tests, and commercial renegotiation. A supplier switch decided in September 2026 will not be operational by the December deadline.
Step 6, Build a Compliance Governance Structure
The EUDR is not a one-time certification exercise, it is a continuous process. Due diligence must be updated regularly, particularly at each revision of the country benchmarking system (scheduled every two years). Designate an EUDR lead within your organisation (ESG, procurement, or compliance, depending on your structure), train procurement and supply chain teams, and document your procedures. In the event of an inspection, you will need to produce the full history of your due diligence for the past five years.
FAQ, Frequently Asked Questions on EUDR
What exactly is the EUDR?
The EUDR (EU Deforestation Regulation) refers to Regulation (EU) 2023/1115 of the European Parliament and of the Council, published 9 June 2023. It prohibits placing on the EU market, or exporting from the EU, seven commodities and their derived products if they originate from land deforested or degraded after 31 December 2020. The regulation requires operators to conduct documented due diligence and to submit a Due Diligence Statement (DDS) on the European Commission's TRACES NT platform.
Which products are covered by EUDR?
Seven commodity categories and their derivatives: cattle (leather, beef), cocoa (chocolate), coffee, palm oil, rubber (tyres), soya (animal feed meal), and wood (unprinted paper, furniture, plywood). Printed products (books, newspapers) were removed from scope by Regulation 2025/2650.
What is the EUDR application date?
After two postponements, the current application dates are: 30 December 2026 for large companies (operators and traders) and 30 June 2027 for SMEs and micro primary operators. The deforestation assessment cut-off date remains fixed at 31 December 2020, independent of these application dates.
My company is an SME. Does EUDR apply to me?
Yes, unless you fall below the strictest thresholds (fewer than 50 employees and less than €10 million in turnover from covered products). Even then, you benefit from an extended deadline (30 June 2027) and a simplified declaration, but the substantive obligations, traceability, risk assessment, documentation, still apply.
Is FSC or RSPO certification sufficient for EUDR compliance?
No. Third-party certifications (FSC for wood, RSPO for palm oil, RTRS for soya, Rainforest Alliance for cocoa and coffee) are useful elements in the risk assessment, but they do not replace EUDR due diligence. An operator must still collect geolocation data, submit a DDS on TRACES NT, and document its conclusion of negligible risk.
What is a DDS and what is a DDS reference number?
The DDS (Due Diligence Statement) is the pivotal document submitted on the Commission's TRACES NT platform. It summarises the conclusions of the three-pillar due diligence process. Once submitted, TRACES generates a DDS reference number, a unique identifier that is mandatory in the customs declaration. Without a valid reference number, the consignment is held at the EU border.
What are the penalties for non-compliance?
The Regulation requires financial penalties with a maximum level of at least 4% of annual EU turnover, calculated on total EU turnover, not only turnover from covered products. Additional penalties include confiscation of products and revenues, temporary exclusion from public procurement, and publication on a public list of sanctioned companies (name and shame).
Does a supplier in a "low risk" country exempt me from due diligence?
No. A "low risk" classification enables simplified due diligence, but the operator must still document its conclusion of negligible risk. Under Article 9, that conclusion must be reasoned and retained. "Low risk" reduces the documentary burden, it does not create an automatic exemption.
My company is based outside the EU but exports to Europe. Am I in scope?
Yes. The Regulation applies to any company placing covered products on the EU market, regardless of nationality. If you have a European subsidiary, representative, or if your products are imported into the EU via a European entity, EUDR applies to that entity. This is the Brussels effect: complying with EUDR is a condition of EU market access, not an option for non-EU operators.
Conclusion, EUDR as a Competitive Issue, Not Just a Regulatory One
The EUDR is not simply an administrative constraint to manage before a deadline. It is a structural signal: the European Union is embedding environmental conditionality into its trade law. The texts that follow, CS3D, CBAM revisions, a prospective regulation on natural ecosystems, follow the same logic.
For mid-cap companies and industrial groups that move ahead of the curve, the constraint becomes an advantage. Mastering supply chain traceability, holding reliable data on production plots, maintaining a roster of EUDR-qualified suppliers: these capabilities will become competitive differentiators in tender processes, in commercial negotiations with major retailers and brand owners, and in the credibility of CSRD reports. Companies that wait until November 2026 to begin compliance will pay the price, in time, in emergency costs, and in the risk of customs holds.
The 30 December 2026 date is an operational deadline, not a starting point.
Kabaun and EUDR Compliance
EUDR obligations require structuring supplier data collection (plot geolocation, production histories, legal documentation), linking that data to lot references and HS codes, and feeding a compliant DDS on TRACES NT. These data flows form part of a broader ESG data infrastructure, CSRD, Scope 3, ESRS E4 biodiversity, that mid-cap companies and industrial groups need to build regardless.
Kabaun helps mid-cap groups and industrial leaders structure their ESG data collection and operationalise the chain-of-custody required for EUDR compliance, supplier collection, plot-level geolocation, documented due diligence. kabaun.com
Further Reading
Updated 29 April 2026. This article is produced for informational purposes and does not constitute legal advice. Data marked [TO VERIFY] in the source regulatory file from leon-norme should be confirmed against consolidated EUR-Lex texts before final publication.
