Interactive self-assessment
Take the 10-question quiz below to score your export readiness and identify your gaps before December 2026.
Your rubber shipment lands at Rotterdam in January 2027. A competent authority runs a spot check on your Due Diligence Statement. They pick one batch and trace it back. Three of the twelve source plots are above four hectares — but the polygon boundaries you filed are village-level approximations, not field-captured farm perimeters. The authority flags the DDS as unsubstantiated. Your goods sit at port while you scramble to produce evidence that does not exist.
This is not a hypothetical. The EU Deforestation Regulation (EUDR) begins enforcement on December 30, 2026 for large and medium operators. Micro and small enterprises follow on June 30, 2027. Two delays have not changed the core obligations.
The delay gave exporters time. Most used it to wait.
The readiness gap no one is talking about
The upstream problem becomes real when you compare rubber readiness across Southeast Asia's two largest producing countries. Thailand has mapped 3.1 million hectares and registered 95% of its producers. Indonesia — which produces more rubber — has registered less than 0.3% of its smallholder land.
Same commodity. Same regulation. Radically different readiness.
This is the exporter's real problem. You do not control the upstream. You depend on hundreds or thousands of smallholders who may never have held a GPS device, farming plots with hand-drawn boundaries and informal tenure. Without geolocation data for every source plot, a DDS cannot be submitted — and without a DDS, the product cannot legally enter the EU market.
Yes, this is a lot to ask of exporters who did not create the deforestation problem. But the regulation does not care about fairness. It cares about evidence.
What happens when your shipment gets flagged
Customs authorities screen every shipment against its DDS before goods enter the EU market. A missing geolocation field, a polygon that does not match the declared plot, a gap in documentation — any of these can trigger a hold. Your goods sit at port. Warehousing costs pile up. No revenue.
Competent authorities can also inspect without warning — desk-based or physical, including site visits. EU law sets minimum inspection thresholds: 9% of operators sourcing from high-risk countries annually, 3% for standard-risk, 1% for low-risk.
The core test is simple: show me how this product links back to a specific production plot. If any link in that chain requires a phone call or a "we would need to check with the supplier," the chain is broken.
Under Article 25, fines are proportionate to the environmental damage and the value of the commodities concerned. For serious or repeated violations, member states must ensure fines can reach at least 4% of total annual EU-wide turnover — a mid-sized exporter with €50 million in EU revenue faces a ceiling of €2 million. Beyond fines: product seizure, public procurement bans, trading licence suspension, and public disclosure. Criminal penalties are possible in some member states.
Five assumptions that will get exporters caught
What enforcement requires
Certifications inform your risk assessment — they do not replace plot-level geolocation, deforestation screening, or your own DDS. RSPO has acknowledged gaps and is reassessing its standards. The operator placing the product on the EU market retains primary liability.
What enforcement requires
Coordinates without independent verification, collection timestamps, and device attestation are supplier claims, not evidence. A competent authority will ask how you validated them — and “we trusted our supplier” is not a methodology.
What enforcement requires
Declaration in excess means every declared plot is subject to investigation. If one plot out of a thousand is non-compliant, the entire DDS is invalidated. All or nothing. Mass balance approaches that mix compliant with unknown-origin commodities are explicitly prohibited.
What enforcement requires
Legality covers land-use rights, environmental protection, labour rights, human rights, FPIC, tax, anti-corruption, and customs regulations — for every producer in your chain. Regardless of country risk classification.
What enforcement requires
Five years. On demand. Complete file. Chain of custody maintained across every document. If your current system is email attachments and shared drives, you do not have an evidence retention system. You have a search problem.
The exporter's readiness checklist
Structured around the exporter's workflow — not the regulation's article numbers.
Phase 1 — Know your exposure (now through April 2026)
1. Confirm you are in scope and what role you play
The EUDR covers seven commodity groups — cattle, cocoa, coffee, oil palm, rubber, soy, and wood — plus derived products listed in Annex I by CN/HS code. Scope is determined by product classification, not commodity presence. Operators (first to place or export) carry full DDS responsibility. Traders (buy and resell within the EU) have lighter obligations: collect upstream DDS references and ensure traceability. Start by confirming your CN/HS codes against Annex I.
2. Map every supplier to plot level
Not cooperative level. Not district level. Plot level. For rubber in Southeast Asia, this means working directly with smallholders or cooperatives to establish which plots supply your facility. "Sourced from southern Thailand" is not an answer a competent authority will accept. This is the longest-lead item. If you have not started, start now.
Phase 2 — Close the upstream gaps (April through July 2026)
3. Get geolocation data from your suppliers — or help them produce it
For plots under four hectares, a single GPS point suffices. For plots over four hectares, polygon boundaries are required in GeoJSON format. Many smallholders cannot produce this data without support. Your options:
- Deploy field data capture tools — mobile apps that capture GPS points and polygons offline, with timestamped collection and device attestation at point of capture.
- Use drone or satellite mapping for remote areas where mobile coverage is unreliable.
- Set contractual deadlines with suppliers. Build geolocation requirements into purchase agreements now.
- Replace non-compliant suppliers as a last resort. No geolocation, no market access.
4. Establish deforestation baselines against the December 31, 2020 cutoff
The EUDR requires operators to demonstrate that source land was not deforested or degraded after December 31, 2020. The most defensible approaches combine multi-spectral satellite imagery anchored to the cutoff date, independent deforestation alert systems (such as the EC JRC benchmark dataset), and corroborating data for high-risk jurisdictions.
The methodology matters as much as the conclusion — a regulator will ask which data sources you used, at what resolution, and what thresholds triggered further review. The further from the 2020 cutoff you establish your baseline, the harder it becomes to demonstrate continuity. Do not wait until Q3 2026.
5. Verify legality across every producer in your chain
Beyond deforestation, the EUDR requires proof of compliance with all applicable laws of the producer country: land-use rights, environmental protection, labour rights, human rights, FPIC, tax, anti-corruption, and customs regulations. This applies regardless of risk classification — a low-risk designation reduces inspection frequency, not the obligation. For Indonesian rubber, where many smallholders lack formal title, this means documenting how informal tenure intersects with national law. Supplier self-attestations are not sufficient.
Phase 3 — Build your internal systems (July through October 2026)
6. Decide your mixed-shipment strategy
Declaration in excess: one DDS covers multiple shipments over up to a year, listing all possible source plots. Lower admin burden, higher enforcement exposure — if one plot is non-compliant, everything under that DDS is invalidated. Shipment-level DDS: each shipment gets its own statement. Higher admin burden, lower per-filing risk. Either way, you cannot mix compliant with unknown-origin commodities.
7. Register on TRACES NT and run test submissions
TRACES NT is the EU Information System for DDS filings. The production server reopens mid-April. Register immediately, submit test filings with real data, and confirm your GeoJSON format, CN/HS codes, and risk assessment fields all work. Do not discover formatting problems in December.
8. Build your evidence retention infrastructure
Every DDS field must trace to its source data, stored with chain of custody intact, retrievable on demand for five years. If a competent authority requests substantiation of a January 2027 filing, you need to produce the geolocation records, satellite methodology, deforestation screening, and legality documentation — within hours, not weeks. If your current system is email chains and shared drives, that is the gap to close.
Phase 4 — Prove you are ready (October through December 2026)
9. Simulate a competent authority audit
Pick one shipment. Walk it backwards. Trace each DDS field to its evidence — geolocation to field-capture record, deforestation assessment to satellite data, legality to source authority. Time the exercise. If any link takes longer than an hour or requires a phone call to a supplier, that is the gap enforcement will find.
10. Brief your logistics and customs teams
Your compliance team may understand the EUDR. Your freight forwarders and customs brokers probably do not. They need to know what a DDS hold looks like and who in your organisation produces the evidence file within hours. A compliance manager unreachable when a container is flagged at Antwerp on a Friday afternoon is a single point of failure.
What this will actually cost
A February 2025 analysis by Profundo — authored by Gerard Rijk and Barbara Kuepper — estimated average EUDR compliance costs at 0.10% of company revenue, with SMEs facing roughly 0.17%. Industry groups have challenged these figures, arguing they ignore supply chain reorganisation and upstream compliance expenses.
The real cost is operational: supplier engagement across hundreds of smallholders, field mapping in limited-coverage areas, system buildout, ongoing satellite monitoring, annual legality audits. These consume organisational capacity — people, time, management attention — not just budget. And demand for compliance tools and verification services is growing faster than supply. Exporters who wait until Q3 2026 may find themselves at the back of the queue.
How ResourceLedger addresses the exporter's gap
We built ResourceLedger for the exporter caught between a fragmented upstream and a regulator who expects structured evidence. Most platforms focus on data collection. But a competent authority will not ask whether you collected data — they will ask whether you can prove due diligence was exercised.
In practice: a rubber exporter sources from 200 smallholders across southern Thailand and Sumatra. Each farm's GPS polygon boundary is captured through ResourceLedger's mobile field capture app — on the farmer's phone, offline, with timestamped collection and device attestation. Automated satellite analysis runs against the 2020 cutoff baseline for every plot. Each land title links to its parcel with an integrity hash. The platform generates a complete DDS package with every field traceable to source data. When a competent authority requests substantiation eighteen months later, the traceability test takes minutes, not days.
ResourceLedger does not certify compliance — that belongs to operators and regulators. What it provides is evidence infrastructure: traceable provenance, integrity assurance, documented methodology, reproducible conclusions. See how the platform works or explore the technical architecture.
Frequently asked questions
What if my suppliers cannot provide polygon data?
No geolocation means no EU market access. For plots under four hectares a single GPS point suffices. For larger plots, exporters can deploy mobile field capture tools that work offline, allowing farmers to walk boundaries and record polygons with timestamped evidence. Drone surveys cover remote areas. Build geolocation into supplier contracts with clear deadlines.
Does a low-risk country classification reduce my obligations?
It reduces inspection frequency (1% vs 9% for high-risk) but not the due diligence requirement. You must still file a DDS, provide plot-level geolocation, verify deforestation-free status, and prove legality. Classifications are not permanent — reclassifications can take effect with three months notice.
Can a single DDS cover multiple shipments?
Yes, over up to one year, provided due diligence is complete and risk is negligible across all items. But declaration in excess is all-or-nothing: if any declared plot is non-compliant, every product under that DDS is at risk. Shipment-level filings offer lower per-filing exposure despite higher admin cost.
What are the actual penalties for a non-compliant DDS?
Fines are proportionate to environmental damage and commodity value, escalating with repeated infringements. For the most serious violations, fines can reach 4% of total annual EU-wide turnover — €3.2 million for an exporter with €80 million in EU revenue. Beyond fines: product seizure, public procurement bans, licence suspension, and public disclosure. Criminal prosecution is possible in some member states.
If you are preparing for December 2026 and want to see what a defensible evidence chain looks like for your commodity flows, request a platform walkthrough.