← Back to Blog

EUDR Compliance Checklist: 7 Steps Before December 2026

A practical step-by-step checklist for EU importers to achieve EUDR compliance. From identifying your regulated products to establishing long-term record retention — everything you need to do before enforcement begins.

7-Step EUDR Compliance Checklist

The EU Deforestation Regulation (EUDR) enforcement date of 30 December 2026 is approaching fast. For operators and traders placing regulated commodities on the EU market, the time to prepare is now — not when enforcement begins. This checklist breaks down the compliance process into seven actionable steps, each with the detail you need to get started.

Step 1: Identify your regulated products

The first step is determining which of your products fall within the scope of Regulation (EU) 2023/1115. The regulation covers seven commodity groups — palm oil, soya, cattle, coffee, cocoa, wood, and rubber — along with a wide range of derived products listed in Annex I.

Start by reviewing your product catalogue against the Combined Nomenclature (CN) codes and Harmonised System (HS) codes listed in the regulation's Annex. These codes are the same ones used in your customs declarations, so your trade compliance or logistics team should be able to cross-reference them quickly.

Key things to check:

  • Products that directly contain a regulated commodity (e.g., roasted coffee beans, chocolate bars, leather goods)
  • Products that were fed with a regulated commodity (e.g., beef from cattle fed with soya)
  • Products that were made using a regulated commodity (e.g., furniture made from tropical timber, tyres containing natural rubber)
  • Products containing derived ingredients (e.g., palm oil in cosmetics, soya lecithin in processed foods)

Create a master list of all in-scope products with their HS codes, annual import volumes, and countries of origin. This list becomes the foundation for everything that follows.

Step 2: Map your supply chain

Once you know which products are in scope, you need to trace each one back to its point of production. The EUDR requires operators to know the specific plot of land where the commodity was grown, harvested, or raised — not just the country or region.

For most companies, this means going beyond Tier 1 suppliers:

  • Tier 1 — Your direct suppliers (exporters, trading houses, processors)
  • Tier 2 — Their suppliers (cooperatives, aggregators, local traders)
  • Tier 3+ — The actual producers (farms, plantations, forest concessions, ranches)

Document the full chain of custody for each product. Record the names and addresses of all entities in the chain, the quantities handled at each stage, and the traceability systems in place. Pay particular attention to mixing and blending points where commodities from different origins may be combined — these are the highest-risk points for losing traceability.

For complex supply chains (common in cocoa, coffee, and palm oil), consider using a phased approach: start with your highest-volume or highest-risk supply chains and expand from there. Engage your suppliers early — they will need time to collect and share the required data.

Step 3: Collect geolocation data

This is often the most operationally challenging step. Article 9 of the EUDR requires the geolocation of all plots of land where the commodity was produced. The technical requirements are specific:

  • Format: GeoJSON (RFC 7946 specification)
  • Coordinate system: WGS84 (EPSG:4326)
  • Precision: At least 6 decimal places (~11 cm accuracy)
  • Small plots (<4 ha): A single GPS point (latitude, longitude) is sufficient
  • Large plots (≥4 ha): Full polygon boundaries are required

In practice, collecting this data means working directly with producers or their cooperatives. Many smallholder farmers in tropical regions do not have formal plot boundaries recorded digitally. You may need to support them with GPS data collection tools, mobile apps, or field mapping services.

Once collected, validate every geolocation dataset against the EUDR v1.5 specification before submission. Common errors include wrong coordinate systems, insufficient decimal precision, self-intersecting polygons, and coordinates that fall outside the declared country of origin. Automated validation tools can catch these issues before they become compliance problems.

Step 4: Set up satellite monitoring

The EUDR effectively requires satellite-based verification of deforestation-free status. While the regulation does not mandate a specific technology, satellite imagery is the only practical way to verify land-use change across thousands of production plots spanning multiple countries.

The European Commission has pointed to the Copernicus programme — the EU's own Earth observation system — as a key data source. Specifically, Sentinel-2 satellites provide:

  • 10-metre spatial resolution in visible and near-infrared bands
  • 13 spectral bands for vegetation analysis
  • 5-day revisit time at the equator (combined constellation)
  • Free and open data access for all users

The core analysis involves comparing vegetation indices — primarily NDVI (Normalized Difference Vegetation Index) and NDMI (Normalized Difference Moisture Index) — between a baseline period around the cutoff date (31 December 2020) and the present. A significant drop in these indices indicates potential forest loss or degradation.

You can build this capability in-house if you have remote sensing expertise, or use a compliance platform that automates the satellite analysis. Either way, ensure your monitoring covers the baseline period (June–August 2020 is commonly used for cloud-free composites) and provides clear, auditable risk classifications for each plot.

Step 5: Conduct risk assessments

Article 10 of the EUDR requires operators to assess the risk that their products are non-compliant. This goes beyond satellite analysis — it is a holistic evaluation of multiple risk factors:

  • Country risk: Deforestation rates, governance quality, rule of law, and corruption indices in the country of production. Once the Commission publishes its benchmarking list, this will be formalised into low/standard/high categories.
  • Supply chain complexity: Longer, more complex chains with multiple intermediaries carry higher risk of traceability gaps.
  • Supplier track record: Previous compliance issues, audit findings, or concerns raised by NGOs or media.
  • Certification status: Whether the supplier holds recognised sustainability certifications (FSC, PEFC, Rainforest Alliance, etc.). Note: certifications alone are not sufficient for EUDR compliance, but they are a positive risk indicator.
  • Indigenous peoples and local communities: Whether the production area overlaps with territories of indigenous peoples or areas with known land tenure conflicts.
  • Third-party concerns: Substantiated concerns raised by civil society organisations, whistleblowers, or media reports.

Where the risk assessment identifies non-negligible risk, you must implement risk mitigation measures before placing the product on the market. These may include requesting additional documentation from suppliers, commissioning independent field audits, switching to alternative suppliers, or engaging in supplier development programmes.

The risk assessment must be documented and retained. It forms a core part of your Due Diligence Statement and may be reviewed by competent authorities during inspections.

Step 6: Prepare Due Diligence Statement documents

The Due Diligence Statement (DDS) is the formal declaration that operators must submit through the EU Information System (built on the existing TRACES NT platform) before placing regulated products on the EU market or exporting them. Each DDS must contain:

  • Product description and HS/CN codes
  • Quantity and unit of measurement
  • Country of production
  • Geolocation data for all production plots
  • Supplier information (names, addresses, registration numbers)
  • Date or time range of production
  • Confirmation that due diligence was exercised
  • Declaration that the risk of non-compliance is negligible

The DDS receives a unique reference number from the EU Information System. This reference number must accompany the product through the supply chain — downstream traders need it to fulfil their own obligations.

Prepare your DDS workflow well before the enforcement date. This means:

  • Setting up access to the EU Information System (TRACES NT)
  • Defining internal approval workflows for DDS submission
  • Training staff on the submission process
  • Testing with sample submissions if the system allows
  • Integrating DDS generation with your existing trade compliance or ERP systems where possible

Step 7: Establish record retention

Article 12 of the EUDR requires operators and traders to retain all due diligence information for at least 5 years from the date of the Due Diligence Statement. This includes:

  • The DDS itself and its reference number
  • All geolocation data collected
  • Satellite imagery and analysis reports used for deforestation verification
  • Risk assessment documentation
  • Supplier correspondence and contracts
  • Certificates and audit reports
  • Any risk mitigation measures taken
  • Records of any changes or updates to the due diligence

These records must be made available to competent authorities upon request. In practice, this means you need a document management system that is:

  • Searchable — Authorities may request records for specific products, time periods, or origins
  • Tamper-evident — Records should have audit trails showing when they were created and modified
  • Backed up — Five years is a long retention period; ensure your storage is resilient
  • Access-controlled — Only authorised personnel should be able to modify compliance records

Consider whether your existing document management or compliance systems can handle these requirements, or whether you need a dedicated EUDR compliance platform with built-in record retention.

Getting started

The seven steps above may seem daunting, but the key is to start early and take an iterative approach. Begin with your highest-volume or highest-risk supply chains. Engage your suppliers now — they need lead time to collect geolocation data and establish traceability. And invest in the right tools: satellite monitoring, geolocation validation, and DDS generation can all be automated with modern compliance platforms.

The December 2026 deadline will arrive faster than expected. Companies that have their systems, data, and processes in place will not only avoid penalties — they will have a competitive advantage as the market shifts toward verified, deforestation-free supply chains.

Ready to automate your EUDR compliance?

See how Plotwiser's AI-powered solution handles your entire due diligence pipeline.