Under Regulation (EU) 2025/2650, large and medium operators and traders as well as micro and small undertakings already covered by the EU Timber Regulation (EUTR) placing cattle, cocoa, coffee, palm oil, rubber, soy, wood, or their derivatives on the EU market must comply with the main obligations of Regulation (EU) 2023/1115 from 30 December 2026, with other micro and small enterprises following on 30 June 2027. That leaves roughly five months to close the plot-level data gap between suppliers and Due Diligence Statements (DDS), and the constraint that will decide who files on time is supplier readiness, not the text of the regulation.

The Council's own justification for the postponement is instructive: member states and stakeholders flagged administrative burden and the readiness of the EU IT system, not any ambiguity in what companies must do. The obligations still apply. The Article 9 information set is still fixed. The 31 December 2020 deforestation cut-off is still the benchmark. Operators that spend the remaining months chasing every supplier for every data field equally will run out of runway before high-risk plots are validated.

Why supplier data, not the regulation, is the binding constraint

Whether an operator can file a valid DDS on 30 December 2026 depends on what its suppliers deliver, because Article 9 of the EUDR requires operators to collect the commodity, quantity, supplier, country of production, evidence of legal harvest, and the geographic coordinates of every plot of land where the commodity was produced before that product is placed on the EU market. None of those fields can be assembled inside the operator's four walls. Each one has to travel up the chain, plot by plot.

Most Tier 1 suppliers can already state a country of harvest and a supplier name, but far fewer can hand over polygon coordinates for plots larger than four hectares or point coordinates for smaller plots in the format the EU Information System expects. For a full walkthrough of the technical bar, see the Coolset guide on EUDR geolocation requirements. Where a cooperative, aggregator, or trader sits between the operator and the primary producer, the data has to hop twice, and the operator loses direct control over collection quality at the point that matters most.

Treating every supplier as equally urgent spreads procurement bandwidth thin. A commodity buyer with 400 direct suppliers and a two-person sustainability team cannot personally escalate 400 accounts before the deadline. The suppliers that will block a DDS in Q4 2026 are a subset, and they need to be identified now.

{{product-tour-injectable}}

How to segment suppliers by data gap and deforestation risk

Segment the supplier base on two axes at once: how complete the Article 9 data set is per supplier, and how the country of production is classified under the EU benchmarking system. The EUDR country benchmarking system was adopted by the European Commission in 2025 and classifies sourcing countries as low, standard, or high risk for deforestation. Low-risk origins receive reduced levels of scrutiny, but they are not exempt: commodities from low-risk countries must still come from land that was not deforested or degraded after 31 December 2020.

That distinction changes the escalation order. Suppliers producing in standard-risk or high-risk countries move to the top of the queue regardless of their production volume, because those flows carry a full risk assessment and mitigation obligation on the operator's side. A low-volume cocoa supplier in a standard-risk origin can generate more compliance risk than a high-volume wood supplier in a low-risk origin. Financial spend is not a proxy for EUDR exposure.

Commodity mix compounds this. A supplier delivering both rubber and cocoa derivatives sits in two commodity categories under the regulation and needs plot-level data for each. A four-tier segmentation gives procurement a manageable escalation path:

• Ready: supplier has confirmed plot geolocation, quantity, and legal harvest evidence in a machine-readable format aligned with the EU Information System.
• Partial-geo: supplier has coordinates for some plots but not all, or has points where polygons are required.
• No-geo: supplier can name country and quantity but has no plot-level coordinates.
• Indirect-via-aggregator: supplier is a trader or cooperative that must collect from primary producers before it can hand over Article 9 data.

Cross-tabulating that tier with country risk classification produces a small number of cells that deserve weekly attention and a larger number that can move on a slower cadence.

Escalation paths when suppliers cannot or will not provide plot data

When a Tier 1 supplier cannot or will not provide geolocation, the operator has three options: contractual escalation, substitution, or exit. Filing a DDS with incomplete plot data is not one of them, because the Commission's guidance on due diligence requires the full Article 9 information set to be submitted into the DDS in the EU Information System before the product is placed on the market.

Contractual escalation means amending purchase agreements so that Article 9 data becomes a delivery condition. That includes defined remediation windows, an agreed data format, and a named responsible party on the supplier side. For most operators this needed to be in place by mid-2026. Any operator that has not yet made Article 9 data a contractual delivery condition should treat it as the most urgent step now, because the window to substitute a supplier that misses its remediation deadline is already narrow.

For commodities sourced through cooperatives, escalation runs through the aggregator's collection system. Cocoa and coffee cooperatives often need funding or technical support to run polygon mapping across thousands of smallholder plots. Operators that fund that work in this year's remaining procurement cycle keep options open. Operators that assume the cooperative will absorb the cost tend to discover, late, that it will not.

Substitution should be evaluated against the country benchmarking published under the EU classification before switching origin. Moving from a standard-risk country with weak supplier data to a low-risk country with equally weak supplier data does not reduce non-compliance risk. It only changes which fields the competent authority will focus on. If a substitution decision is on the table, the deforestation status of the new origin's plots since 31 December 2020 has to be verified before contracts are signed.

Document every escalation step. Competent authorities carrying out checks will ask for the audit trail behind the DDS, including which suppliers were contacted, when, what evidence they provided, and what mitigation was applied. A checklist for that documentation is set out in the Coolset guide on how to conduct a EUDR compliance audit.

{{custom-cta}}

Closing the data gap between now and December 2026

Working backwards from 30 December 2026, plot-level data collection needs to be substantially complete before risk assessment and mitigation start. With roughly five months left, that collection should already be well advanced and attention shifting to risk assessment and mitigation; origins where geolocation is still missing are now the critical path. The DDS itself is filed per shipment through the EU Information System, so the data has to be structured for machine submission, not held as PDFs or spreadsheet attachments.

Two calibration points matter. First, geolocation should be validated against publicly available deforestation datasets before it enters the DDS, so that a coordinate error on a plot boundary does not surface as a market-blocking failure at shipment time. Second, the SME timeline set by Regulation (EU) 2025/2650 gives micro and small enterprises until 30 June 2027 to comply with their own obligations, but SMEs that supply large operators still need to deliver Article 9 data on the large operator's 30 December 2026 timeline. That mismatch is a common source of misalignment: small suppliers assume the later date applies to them in all contexts, and large operators discover the gap only when the first shipments approach.

The regulation also confirms which product lines are no longer in scope. Under Regulation (EU) 2025/2650, Annex I entry for printed books, newspapers, pictures and other printing-industry products has been deleted from the EUDR product scope. Operators still handling those product lines can deprioritize supplier engagement on those flows and redirect that time to commodities that remain in scope. Coolset covers the full change in the note on EUDR product scope changes.

With the deadline five months out, a monthly supplier readiness review keeps decisions ahead of it. Each review should update the four-tier segmentation, log escalation status, and flag any supplier whose remediation window has passed without a resolution. Operators phasing this work across the remaining months can follow the sequence set out in the Coolset EUDR compliance roadmap.

Where to focus supplier work right now

The most useful move for a sustainability or procurement lead right now is to tag the existing supplier list by commodity and by the country risk classification the Commission has published, then start engagement with the segment that combines missing plot geolocation and a standard-risk or high-risk country of production. That segment is the smallest, the hardest, and the one that determines whether the December 2026 deadline is met.

Frequently asked questions

When does the EUDR apply to large operators?

Large operators and traders must comply with the main obligations of Regulation (EU) 2023/1115 from 30 December 2026, following the postponement set out in Regulation (EU) 2025/2650. Micro and small enterprises have until 30 June 2027. The Due Diligence Statement is filed per shipment through the EU Information System.

Are commodities from low-risk countries exempt from EUDR obligations?

No. The EU benchmarking system adopted on 22 May 2025 assigns countries to low, standard, or high risk categories, and low-risk imports receive reduced scrutiny. All in-scope commodities must still come from land that was not deforested or degraded after 31 December 2020, and a DDS is still required.

What information must a Due Diligence Statement contain?

Under Article 9 of the EUDR, the DDS must include the commodity or product, quantity, supplier, country of production, evidence of legal harvest, and the geographic coordinates of all plots of land where the commodity was produced. For cattle, geolocation covers the establishments where the animals were kept.

Are printed books still in scope of the EUDR?

No. Regulation (EU) 2025/2650 deleted the Annex I entry covering printed books, newspapers, pictures and other products of the printing industry from the EUDR product scope, reflecting the limited deforestation risk of those flows. Operators handling only those lines can reallocate compliance effort to in-scope commodities.

Can we file a DDS if a supplier has not delivered plot coordinates?

No. The Article 9 information set, including plot geolocation, must be submitted into the DDS in the EU Information System before the product is placed on the EU market. If a supplier cannot deliver coordinates, the operator's options are contractual escalation with a defined remediation window, substitution to a supplier that can deliver, or exit from that supply flow.

‍