EUDR Deforestation Compliance Checklist for Suppliers (Downloadable)
If your company sources or supplies cattle, cocoa, coffee, oil palm, rubber, soya, wood or any product derived from them, the EU Deforestation Regulation (EUDR) requires you to confirm scope, collect geolocation data for every production plot, assess country-level risk, document mitigation where risk is not negligible, and submit a due diligence statement through the EU's TRACES NT system before placing goods on the EU market. Because EUDR's enforcement date has already been postponed twice, always re-verify the current applicable date before acting on any deadline below.
The EU Deforestation Regulation (Regulation (EU) 2023/1115) is one of the most operationally demanding pieces of supply chain legislation manufacturers and traders have faced in years — not because the legal text is long, but because compliance depends on data most companies have never systematically collected: exact geographic coordinates for the land where raw materials were grown or reared. This article is not a legal explainer. It is a working checklist you can hand to a compliance manager, a procurement lead, or a supplier and use today to assess how ready your due diligence file actually is.
Who this checklist is for
Any operator or trader placing EUDR-covered commodities — or products derived from them — on the EU market, or exporting them from the EU, falls within scope. This includes manufacturers using palm-derived surfactants in cleaning products, furniture makers sourcing wood or wood-based panels, food and beverage producers using cocoa or coffee, tyre and rubber component manufacturers, and leather or livestock-derived goods producers. If any tier of your supply chain touches cattle, cocoa, coffee, oil palm, rubber, soya, wood, or a product made from them, this checklist applies to you.
The EUDR compliance checklist
- Confirm scope. Identify every product line, component, and ingredient in your supply chain that falls under one of the seven EUDR commodity categories (cattle, cocoa, coffee, oil palm, rubber, soya, wood) or is derived from them — including sub-components sourced from third-party suppliers who may not realise they are covered.
- Gather product, quantity and supplier information. For each covered product, record the relevant customs (HS) code, the quantity placed on the market, and the identity and contact details of every supplier and, where applicable, the operator who first placed the raw commodity on the market.
- Collect geolocation data for every production plot. Obtain coordinates for the land where the commodity was produced — a single point for smaller plots, and polygon boundaries for larger plots, following the thresholds set out in the regulation. This is typically the hardest and most time-consuming step, especially across multi-tier or smallholder supply chains.
- Check the current country/region risk classification for each sourcing origin. The European Commission maintains a benchmarking system that classifies countries and regions as standard, low, or high risk. This classification determines the level of due diligence and the rate of checks applied, so it needs to be checked per origin, not assumed from prior sourcing.
- Complete a risk assessment where required. For sourcing origins that are not low risk, assess the likelihood that the commodity is linked to deforestation, forest degradation, or non-compliance with the country of production's relevant laws, using the geolocation, supplier, and origin-risk data gathered above.
- Document mitigation steps for any non-negligible risk finding. Where the risk assessment does not conclude negligible risk, record the specific mitigation measures applied — such as requesting additional supplier evidence, independent verification, or excluding the affected plot or supplier — before the product can be placed on the market.
- Prepare the due diligence statement for submission via TRACES NT. Compile the product, supplier, geolocation, risk assessment, and mitigation information into a due diligence statement and submit it through the EU's TRACES NT information system, generating the reference number required to move the product through the supply chain.
- Track the current applicable enforcement date. EUDR's enforcement timeline has already been postponed twice since the regulation was adopted. Before treating any date as a hard deadline, re-verify it against the current official EU source — do not rely on a date seen in an older article, including this one.
Practical impact: where companies actually get stuck
In practice, the bottleneck is rarely legal interpretation — it is data logistics. Geolocation collection (step 3) is the single most common blocker, particularly when a supply chain runs through several intermediaries or aggregators who have never had to trace commodities back to an individual plot. Companies that start early typically build a supplier questionnaire that requests geolocation data, origin country, and supporting documentation as a standard onboarding condition, rather than chasing it retroactively once a shipment is ready to move.
The second most common friction point is evidence retrieval. Once a due diligence statement is challenged — by a customer, an auditor, or a customs authority — the operator needs to produce the underlying geolocation records, supplier declarations, and risk assessment notes for the exact batch in question, quickly and with a clear source trail. This is where tools like IgeraIndustria are useful in practice: instead of digging through spreadsheets, shared drives, and email threads for the supporting file behind a specific due diligence statement, teams can ask a direct question and get an answer sourced from the company's own compliance and geolocation records, with the exact document cited — turning a due diligence file from a static archive into something that can actually answer questions under pressure.
Common mistakes
- Treating the enforcement date as fixed. Because the timeline has already shifted twice, planning a compliance rollout against a single remembered date — without checking it again close to go-live — is one of the most common and costly mistakes companies make.
- Collecting geolocation data too late. Waiting until a shipment is ready to move to request plot coordinates from suppliers creates bottlenecks that are avoidable if geolocation is captured at the point of sourcing or contracting.
- Assuming a supplier's country risk classification carries over between sourcing seasons. Risk classifications can be updated, so each origin should be checked against the current classification rather than the one used in a previous due diligence statement.
- Submitting a due diligence statement without a documented mitigation trail. A statement that concludes negligible risk without recorded reasoning, or one covering a non-negligible finding without documented mitigation steps, is a weak point in an audit.
- Confusing "point" and "polygon" geolocation requirements. Applying the wrong geolocation format for a given plot size is a frequent and avoidable data-quality error.
Frequently asked questions
What products are covered by EUDR?
Cattle, cocoa, coffee, oil palm, rubber, soya, and wood, along with a defined list of products derived from them, such as leather, chocolate, furniture, and palm-oil derivatives. The exact scope of derived products is set out in the regulation's annex.
Do I need a polygon or a point for geolocation data?
It depends on the size of the production plot: smaller plots can be identified with a single point, while larger plots require polygon boundaries, as set out in the regulation's geolocation rules. Confirm the applicable size threshold against the current official guidance before classifying a plot.
What is TRACES NT and why do I need it?
TRACES NT is the European Commission's information system used to submit due diligence statements under EUDR. Submitting through it generates the reference number that confirms a due diligence statement has been filed for a given product and shipment.
When does EUDR actually come into force?
EUDR's enforcement timeline has already been postponed twice since the regulation was adopted, so we are deliberately not stating a specific date here. Always check the current applicable date against the official EU source immediately before you rely on it for planning.
Do small and medium-sized enterprises get more time?
EUDR includes differentiated treatment for smaller operators in parts of its framework. Because eligibility and timing details can change alongside broader postponements, confirm your company's specific status and applicable dates with a qualified compliance adviser rather than assuming SME treatment automatically applies.
What happens if my risk assessment finds non-negligible risk?
You must document and apply mitigation measures before the product can be placed on the market or exported, and that mitigation record should be kept alongside the due diligence statement as part of your audit trail.
Can I reuse geolocation data across multiple due diligence statements?
Where the same plot and supplier relationship supplies multiple shipments, previously collected geolocation and risk data can typically support later statements, provided it remains accurate and current. Treat this as a practical starting point, not a substitute for verifying the specific requirements with a compliance adviser.
Disclaimer: This article is provided for general informational purposes and does not constitute legal, regulatory, or certification advice. EUDR requirements, risk classifications, and enforcement dates are subject to change, and this checklist should not be relied upon as a substitute for professional guidance. Consult a qualified compliance consultant or lawyer to confirm how EUDR applies to your specific products, supply chain, and timeline before making compliance decisions.
