The regulation is part of the European Green Deal and responds to one of the biggest environmental drivers of climate change: global deforestation. Between 1990 and 2020, over 420 million hectares of forest were lost, an area larger than the entire EU. Most of this loss has been driven by agricultural expansion tied to just a handful of commodities, including those now regulated under the EUDR.

As supply chains stretch across borders and become more complex, risks around deforestation and illegal sourcing increase. The EUDR addresses this with a single, enforceable framework that makes companies directly responsible for verifying the origin of their products.

Why this matters for your business

If you're sourcing, manufacturing, or selling in-scope products in the EU, you'll need to verify where your products come from and prove they meet strict environmental and legal standards. This guide will help you make that assessment and outline what compliance looks like for your sector and role.

Note: In December 2025, the EU formally adopted Regulation (EU) 2025/2650, which postpones the EUDR application date to 30 December 2026 for large and medium operators, and to 30 June 2027 for small operators (fewer than 50 employees and under €10 million in relevant product turnover). The regulation also introduces simplified obligations for micro and small primary operators and removes certain printed products from scope.

{{custom-cta}}

Who is affected by the EUDR?

How your supply chain activity defines your EUDR role

The EUDR distinguishes between two core market activities. While the legal definitions may sound technical, here's what they mean in practical terms:

• Placing on the market: You're placing a product if you're the first to bring it into the EU, either by importing it from outside the EU or manufacturing it within the EU and offering it for sale.
• Making available on the market: You're making a product available if it's already been placed on the EU market and you're selling or distributing it. This applies to wholesalers and retailers sourcing from EU-based suppliers.

Based on these activities, companies fall into one of two roles:

• Operators: Companies that place regulated products on the EU market or export them outside the EU. This includes importers, EU manufacturers, and exporters.
• Traders: Companies that buy and sell regulated products that have already been placed on the EU market. This includes distributors and retailers sourcing from within the EU.

Note: The amendments adopted by the European Parliament in November 2025 were finalized through trilogue negotiations and formally adopted as Regulation (EU) 2025/2650 in December 2025. These changes are now legally binding and entered into force on 26 December 2025.

How company size changes your EUDR responsibilities

You're considered an SME (small or medium-sized enterprise) if you meet two out of three of the following:

• Fewer than 250 employees
• Annual turnover below €50 million
• Annual balance sheet total below €25 million

Large companies exceed these thresholds and face full due diligence requirements, whether acting as operators or traders, while small operators benefit from a simplified process.

Understanding your role for each product type and transaction is essential to determining your obligations. If you've already confirmed your role, explore how to comply with the EUDR step-by-step.

Parliament amendments for SMEs (November 2025):

Under Regulation (EU) 2025/2650, the compliance deadline for small operators (fewer than 50 employees, under €10 million relevant turnover) is 30 June 2027. Micro and small primary operators can submit a one-time simplified declaration (instead of a DDS), use postal codes instead of precise geolocation coordinates, and are no longer required to pass on DDS numbers downstream.

How to determine your role under EUDR 

To figure out your role under EUDR, consider the following checkpoints for each of your products:

Key responsibilities by role

Your obligations under the EUDR depend on three factors: 1) your company's role in the supply chain (operator or trader), 2) your company size (SME or non-SME), and 3) whether you're first in line or further down the supply chain.

Note: In December 2025, Regulation (EU) 2025/2650 was formally adopted, confirming deadline extensions and simplified obligations for small operators and certain downstream traders. These changes are now in force. The European Commission must also present a simplification review report by 30 April 2026.

Non-SME operators first in the supply chain

Large companies that import, manufacture, or export in-scope products for the first time carry the most extensive responsibilities. These businesses must conduct full due diligence for each product before it enters or leaves the EU market (Article 8). This includes collecting geolocation data and verifying that the product is legally produced and deforestation-free (Article 9), assessing and mitigating any risks (Articles 10 and 11), and submitting a DDS through the EU Information System (Article 3).

In addition, they must review their due diligence system annually and publicly report on their efforts (Article 12). All documentation must be retained for at least five years (Article 12).

Example: An Italian company importing timber from Brazil to manufacture flooring in the EU qualifies as an operator. Because it places the product on the EU market for the first time, it must carry out full due diligence and submit a DDS. See our EUDR reporting guide for operators for a step-by-step breakdown.

Confirmed (Regulation 2025/2650): This group retains full due diligence obligations. The compliance deadline is 30 December 2026.

SME operators first in the supply chain

Small and medium-sized enterprises that import or produce in-scope goods must also carry out due diligence when placing a new product on the market (Article 8). Their obligations include collecting geolocation data and verifying legality (Article 9), assessing and mitigating risks (Articles 10 and 11), submitting a DDS (Article 12), and maintaining their internal due diligence system (Article 12). They must keep relevant documentation for five years but are not required to publish annual reports (Article 12).

Note: SME status does not exempt companies from due diligence obligations when placing a product on the market.

Example: An SME importing cocoa beans from out of EU and producing cocoa powder must conduct due diligence and submit a DDS.

Confirmed (Regulation 2025/2650): Small operators have until 30 June 2027 to comply. Micro and small primary operators (in a low-risk country) need only submit a one-time simplified declaration instead of a DDS. Read our dedicated guide for SME reporting for a full breakdown of obligations.

Non-SME operators further down the supply chain

Even if a company is working with materials that have already been covered by a DDS upstream, it must still meet certain compliance requirements if it transforms those materials into new products and places them on the market. In these cases, the company must verify that upstream due diligence was properly conducted (FAQ 3.4), submit a new DDS that references the upstream DDS and includes its verification number (FAQ 3.4), maintain an internal due diligence system (Article 12), and retain documentation for at least five years (Article 12).

Example: A large furniture manufacturer using timber from an EU sawmill must file its own DDS when placing finished furniture on the market, even though the raw material was already covered by a DDS.

Confirmed (Regulation 2025/2650): No specific changes were made to this group; full responsibilities remain.

SME operators further down the supply chain

When SMEs use inputs that have already been assessed upstream, their role focuses on traceability rather than repeating due diligence. They are not required to submit a new DDS for the covered components. However, they must retain and pass along DDS reference numbers and verification codes (FAQ 3.5), include them in customs declarations when exporting (FAQ 3.5), and share them with customers or authorities upon request (FAQ 3.5). If they become aware of non-compliance, they are required to inform authorities immediately. Any new inputs not previously covered must go through due diligence and be documented in a new DDS (Article 8).

Example: An SME purchasing cocoa beans that were already covered by a DDS can rely on the upstream documentation when selling chocolate products, but must ensure any additional cocoa inputs meet EUDR requirements.

Confirmed (Regulation 2025/2650): SMEs in this role are no longer required to pass on DDS numbers unless they are the first downstream operator. This reduces admin burden in multi-step chains.

Non-SME traders

Large distributors and retailers that sell regulated products already placed on the market must also comply. These traders are responsible for verifying that upstream due diligence was properly conducted (FAQ 3.4), submitting a new DDS that references the existing DDS and its verification number (FAQ 3.4), maintaining a system that supports this verification (Article 12), and keeping all documentation for at least five years (Article 12).

Example: A major supermarket selling chocolate made by another company must file its own DDS referencing the manufacturer's DDS, even though the product has already been placed on the EU market.

Confirmed (Regulation 2025/2650): Under the final regulation, only businesses that first place a product on the EU market are required to submit a DDS. Downstream non-SME traders are responsible for traceability and record-keeping but are no longer obligated to submit their own DDS.

SME traders

SMEs distributing regulated products already placed on the market carry the lightest obligations. They are not required to perform due diligence or submit a DDS. However, they must obtain and retain DDS references from their suppliers (Article 5), pass this information to customers or authorities upon request (Article 5), and keep transaction records for at least five years (Article 5). If they suspect non-compliance, they must notify authorities immediately (Article 5).

Example: A small German wholesaler buying coffee from an EU-based importer and reselling it to local roasters qualifies as an SME trader. It isn't required to conduct due diligence but must store and share the upstream DDS reference.

Read our dedicated guide to EUDR reporting traders to understand what you're expected to document, retain, and submit.

Important:

Under Regulation (EU) 2025/2650 (which builds on the October 2025 proposal), both SME and non-SME traders share the same simplified responsibilities. All traders must:

• Collect and store DDS or declaration identifiers from their suppliers,
• Maintain traceability records for at least five years, and
• Pass on this information downstream to customers or authorities upon request.

Confirmed (Regulation 2025/2650): SME traders are no longer required to pass on DDS references to customers if they are not the first downstream operator. They must still store them and cooperate with checks.

Dual-role companies

Some companies will act as both operator and trader, depending on the transaction. When importing or producing in-scope goods, they are operators and must follow full due diligence. When reselling goods already placed on the market by another EU entity, they are traders and only responsible for traceability.

Example: A Polish furniture manufacturer importing timber from Indonesia is an operator and must comply fully. If that same company also buys finished wood panels from a French supplier and resells them, it acts as a trader for that specific transaction.

Confirmed (Regulation 2025/2650): No specific changes apply to dual-role companies, but they should evaluate each activity individually to determine if small-operator simplifications or DDS exemptions apply.

{{product-tour-injectable}}

Sector overview: Which industries are impacted?

The EUDR targets seven commodities widely linked to deforestation:

Cattle, cocoa, coffee, oil palm, rubber, soy, and wood.

But the regulation extends beyond raw materials. Any product listed in Annex I falls under the EUDR regardless of whether it's raw, processed, or finished. For the complete list, see our sector-by-sector product overview. This includes everything from chocolate and tyres to wooden furniture and leather goods. Note that Regulation (EU) 2025/2650 removed certain printed products (books, newspapers, printed pictures) from scope due to their limited deforestation risk.

If a commodity is transformed into a product with a different HS code, for example, turning soybeans into soy meal or timber boards into wooden chairs, it's considered a new product under EUDR. This triggers new due diligence requirements, even if the original commodity was already assessed.

Examples of EUDR-regulated goods by industry

Below, we break down the seven commodities with real-world product examples, use cases, and sector-specific risks to help you assess what's relevant in your supply chain.

Special cases and common misunderstandings

Composite products
If a product contains multiple EUDR commodities, due diligence may only be required for the commodity linked to the product's final HS code.

Example: Chocolate bars (HS 1806) fall under cocoa, not palm oil even if both are ingredients.

Recycled content
Products made entirely from recycled or waste material (like 100% recycled paper) are not subject to EUDR. However, any portion that contains newly sourced material, even in small amounts, must still be traced and verified.

Packaging
Wooden or paper-based packaging is in scope if sold as a product. If it's simply used to ship another item, it's not in scope.

Example:

• Wooden crate sold as a standalone item → in scope
• Same crate used only to transport coffee → not in scope

What happens if you don't comply?

The EUDR isn't optional. For a detailed overview of how compliance and enforcement works in practice, see our dedicated guide. If your company fails to meet its obligations, the consequences can be immediate and costly.

First, your products won't make it to market. Without a valid DDS, customs authorities will block your shipment. Even if a DDS has been submitted, any identified risk that hasn't been fully mitigated makes it illegal to place that product on the EU market. In practice, that means shipments can be held at the border or pulled from shelves.

Once on the market, non-compliant goods may be seized. EU Member States have the authority to inspect, withdraw, or destroy products linked to deforestation or insufficient due diligence. They can also halt further sales or temporarily suspend business operations tied to those goods. A batch of timber linked to illegal logging, for example, could be confiscated while the remainder is locked from sale until corrective steps are taken.

Financial penalties are steep. Depending on the Member State, serious or repeated breaches can lead to fines of up to 4% of your EU revenue, with additional penalties for each non-compliant shipment. In cases of fraud, such as submitting false documents, criminal prosecution may apply.

Even without formal penalties, operational disruption is a real risk. Companies sourcing from high-risk areas face regular inspections. If documentation is incomplete or flagged, expect delays, added costs, and potential contract losses. These knock-on effects, from missed delivery deadlines to dissatisfied customers, can quickly add up.

Finally, there's the reputational cost. EUDR compliance is fast becoming a baseline requirement in contracts and procurement. Falling short can damage relationships, attract unwanted media attention, and invite scrutiny from NGOs, consumers, and investors.

Changing penalty enforcement timelines

Under Regulation (EU) 2025/2650, enforcement powers - including inspections, seizures, and fines - apply from the moment obligations take effect: 30 December 2026 for large operators and traders, and 30 June 2027 for small operators. No grace period was included. Companies should prepare their compliance systems well ahead of these deadlines.

Next steps

Understanding your EUDR obligations is only the first step. The next is applying the framework to your own operations.

Start by identifying which of your products fall under the scope of the regulation. Are you placing a product on the EU market for the first time either by importing it or manufacturing it within the EU? Are you transforming a commodity into something new with a different HS code? Are you reselling goods already placed on the EU market by another EU-based supplier? And do you qualify as a SME, or exceed the thresholds that define a large company?

Answering these questions will clarify your role whether you're acting as an operator or a trader and determine your specific obligations. That could mean conducting full due diligence and submitting a DDS, or ensuring you retain and pass along traceability documentation.

Once your role is clear, you can start building the internal systems, supplier workflows, and documentation processes needed to stay compliant. Our risk assessment guide and supplier data collection guide can help you set up these workflows.

At Coolset, we help companies simplify EUDR compliance by making traceability actionable. Whether you're just getting started or preparing for full implementation, our platform is designed to support every step of the process.

Coolset's EUDR product helps companies collect the right data, check for deforestation risk, and file Due Diligence Statements without chasing suppliers or working in complex spreadsheets. With Coolset, companies can import product and order data from your ERP, request documents from suppliers, and track everything in one place. The system flags missing or at-risk shipments and generates audit-ready DDS files that follow the mandatory EU TRACES format.

Comply with EUDR with Coolset's platform here.