With exclusive insights from 250+ companies, we break down how businesses are responding to the Omnibus Proposal, the growing role of voluntary reporting, and what it all means for your ESG strategy.
The EU Deforestation Regulation (EUDR) is a law designed to ensure that certain commodities placed on or exported from the EU market are deforestation-free. This means that companies must ensure their products are not linked to deforestation or forest degradation after December 31, 2020, and that they comply with local laws in their countries of origin.
EUDR applies to cattle, wood, cocoa, coffee, palm oil, soy, and rubber, including many derived products. To comply, companies must trace their supply chains, assess risks, mitigate issues, and submit official due diligence statements. For most companies, the law will apply from December 30, 2025 while small and micro-enterprises have until June 30, 2026.
This article provides a comprehensive seven step guide for business users to comply with EUDR, dividing the process into data collection, risk assessment, risk mitigation, traceability, due diligence, and ongoing monitoring.
The obligations of companies under EUDR are formed based on the different roles they play in their value chain and their size. Therefore, identifying your role is the number one step in the process.
Your first task is to determine whether your company is considered an operator or a trader, as obligations differ:
Operator
Places in-scope products on the EU market for the first time in the product’s value chain, or exports them. The term operator covers multiple business cases – here is an overview with examples:
Trader
Buys and resells in-scope products already on the EU market without transforming them. A typical example is a German wholesaler who purchases bulk unroasted coffee beans from a Dutch importer and sells the same coffee beans (still unroasted) to small roasters and cafés across Germany and Austria, without altering the product.
Some businesses may act as both operator and trader depending on the transaction.
Your company is an SME if it meets at least two of the following:
SME operators benefit from simplified obligations under EUDR by skipping some of the due diligence steps.
Non-SME traders, though, must fulfill full due diligence obligations like operators. SME traders face simpler obligations that include mainly retaining and passing on information. You can find an overview below of the basic responsibilities per role.
Not all products are subject to the EUDR. Only certain commodities and their derived products are covered. So the next step is to identify which of your company’s products fall under the EUDR. This involves mapping both the products and their supply chains (origins).
EUDR requires you to exercise due diligence on the products you intend to sell in the EU market or export. However to do so you need to understand which raw materials you use to produce these products unless you are the producer yourself. Here is a simple list of what you should check:
Example: A chocolate company should link cocoa and palm oil inputs to each final product to ensure traceability and compliance.
After you have identified the exact product codes and raw materials used (if any) you are ready to identify the suppliers involved and the countries where the materials come from.
In order to trace your supply chain:
Identify suppliers and countries of origin:
The suppliers are key stakeholders you will need to collaborate with to collect the needed information for EUDR compliance. The country of origin of your materials is one of the core factors that you should consider in order to address deforestation and legality. If you are the producer yourself you can skip this step.
Furthermore, if you are sourcing from specific countries benchmarked as low risk for deforestation by the EU you can benefit from a simpler due diligence process.
Determine complexity and depth (e.g., number of intermediaries):
This exercise can help you understand where you might have difficulties accessing information, where important risks in the supply chain might lie.
{{custom-cta}}
Once you know what and where you’re sourcing, you can move on to collecting the specific data that the EUDR requires for compliance. Operators must gather a comprehensive set of data – as outlined in Article 9 – about each shipment of commodity they handle.
Collecting this data can be challenging, especially if your supply chain has many small farmers or intermediaries. Start by creating a standardized data collection process for suppliers, explain EUDR needs, and use traceability tools where feasible. Store data securely and retain it for at least five years.
Once your data is complete, based on Article 10, you need to assess whether there is more than negligible risk of deforestation or illegality before placing products on the EU market or exporting them.
Assess each dimension. If any indicator suggests non-negligible risk, mitigation is required before proceeding. Remember: due diligence is not a check-box exercise, it must be tailored to your context and thorough.
If your risk assessment finds anything other than negligible risk for a product, the EUDR in Article 11, requires you to take risk mitigation measures before proceeding. In practical terms, this means you must actively reduce the risk to a negligible level, or else you cannot place the product on the market.
Here’s how businesses can approach risk mitigation:
After mitigation, you should re-evaluate the risk. If negligible, you can move forward to the next step. If not, further mitigation or exclusion is needed. By the time you’re done with this step, any product you intend to sell should have a negligible deforestation risk profile and full compliance documentation.
Once you have completed the due diligence process (information collection, risk assessment, and needed mitigation), the EUDR requires a final formal step: submitting a due diligence statement (DDS). This is basically an official declaration that you have fulfilled your obligations and that the product meets EUDR requirements. Think of it as signing off that “we did our homework, and to the best of our knowledge, this product is deforestation-free and legal.”
Each DDS has a unique reference and verification number. Track each DDS by its unique reference number and ensure it is linked to each shipment.
EUDR compliance isn’t a one-time task. Companies must continuously ensure that supply chains remain deforestation-free and legally compliant.
Non-SME operators must publish annual summaries of due diligence activities. First reports are due by the end of 2026.
To wrap up the step-by-step guide, here’s an EUDR compliance checklist distilling the key actions. Use this as a quick-reference to ensure you’ve covered all bases:
By following this EUDR checklist, businesses can systematically work through compliance and ensure nothing is overlooked. Early preparation is key – each of these steps can take time, especially for complex supply chains.
Managing EUDR compliance manually can quickly become overwhelming especially as supply chains grow. Digital tools make a difference by:
In short, investing in a digital due diligence system turns a complex compliance burden into a more automated, trackable process. It also helps with other sustainability reporting synergies – for example, the data collected for EUDR (like supply chain traceability) can feed into broader ESG reporting or upcoming regulations like CSDDD.
Leveraging technology ensures that the foundation remains strong and less labor-intensive over time. Scalable solutions like Coolset are designed to support mid-market companies in exactly this way – by providing an all-in-one platform to manage data, due diligence workflows, and reporting for regulations such as EUDR. The result is not only saved time and reduced risk of error, but also actionable insights that can improve your supply chain transparency beyond just compliance.
Moving forward, evaluate how prepared your business is across the seven steps. Identify gaps in supplier data, internal processes, or reporting systems and decide whether additional support is needed. If managing this manually seems unsustainable, consider whether a platform like Coolset could help streamline your compliance, reduce risk, and scale with your operations.
Would you like to discover how Coolset can help you streamline your compliance across frameworks such as CSRD, EU Taxonomy or EUDR? Reach out to us and explore how we can support your ESG reporting journey.
Get a clear, practical introduction to the EU Deforestation Regulation (EUDR) with a step-by-step guidance.
Note: This article is based on the original CSRD and ESRS. Following the release of the Omnibus proposal on February 26, some information may no longer be accurate. We are currently reviewing and updating this article to reflect the latest regulatory developments. In the meantime, we recommend reading our Omnibus deep-dive for up-to-date insights on reporting requirements.
Updated on March 24, 2025 - This article reflects the latest EU Omnibus regulatory changes and is accurate as of March 24, 2025. Its content has been reviewed to provide the most up-to-date guidance on ESG reporting in Europe.