EUDR vs CSDDD product due diligence vs corporate due diligence

EUDR starts with Annex I: cattle, cocoa, coffee, oil palm, rubber, soya, wood, and the listed derived products. The trigger is placing, making available, or exporting relevant products, not a general sustainability program label.

CSDDD applies at company or group level and covers adverse human-rights and environmental impacts in the company's own operations, subsidiaries, and business partners in its chains of activities. It is not limited to EUDR commodities or market transactions.

Build the EUDR scope register at product and commodity level, then cross-reference any corporate due-diligence work only as supporting context.

EUDR distinguishes operators, downstream operators, traders, and micro or small primary operators. Operators place relevant products on the market or export them; traders make relevant products available on the market without being operators.

CSDDD duties attach to companies meeting Article 2 scope, including qualifying EU companies, non-EU companies based on EU turnover, and certain franchise or licence models. Member States must designate supervisory authorities; internal ownership does not change legal scope.

Assign EUDR accountability by transaction role, not by sustainability department ownership. A corporate due-diligence owner can coordinate evidence but should not obscure who is the EUDR operator, downstream operator, or trader.

EUDR is triggered by a covered product flow: relevant commodities and products cannot be placed, made available, or exported unless they are deforestation-free, legally produced, and covered by the required statement or declaration.

For an EU company, the main Article 2 threshold is more than 5,000 employees on average and more than EUR 1.5 billion net worldwide turnover. For a non-EU company, the main threshold is more than EUR 1.5 billion net turnover in the EU. Article 2 also contains separate group and franchise or licence routes.

Use EUDR for product-flow gating and use a separately sourced CSDDD analysis for corporate-scope gating. Keep the two trigger tests in different rows of the compliance inventory.

EUDR requires operators to exercise due diligence before placing on the market or exporting. Due diligence covers information collection, risk assessment, and risk mitigation where risk is not negligible.

CSDDD requires in-scope companies to integrate due diligence into policies and risk management, identify and assess adverse impacts, prioritise them where necessary, prevent or mitigate potential impacts, bring actual impacts to an end or minimise them, provide remediation where required, maintain notification and complaints procedures, monitor measures, and communicate publicly.

Do not collapse the EUDR workflow into a generic supplier questionnaire. The EUDR record needs the Article 9 information and evidence, the risk assessment outcome, any mitigation, and the statement or declaration route.

EUDR evidence must be concrete enough for competent-authority review: product and supplier information, geolocation of plots or establishments where required, documentation of deforestation-free and legal production, statement reference numbers or declaration identifiers, and retained records.

CSDDD evidence may overlap with supplier due-diligence files, but a corporate evidence file is not enough unless it also contains the EUDR product, geolocation, legality, risk, and statement data required for the product flow.

Reuse evidence only at field level. A supplier policy, audit, or questionnaire can support EUDR work only where it maps to a specific EUDR data requirement and product flow.

EUDR timing is tied to market action. The main obligations apply from 30 December 2026, with a limited 30 June 2027 date for qualifying operators and non-EUTR products. Operators exercise due diligence and submit the required statement before placing on the market or exporting, then keep statement records for five years.

Member States must transpose CSDDD by 26 July 2028 and apply the national measures from 26 July 2029. Article 16 reporting applies for financial years starting on or after 1 January 2030. These dates do not change EUDR application or filing dates.

Create separate clocks: one for EUDR product release/export gates and record retention, and one for any separately verified CSDDD corporate due-diligence milestones.

EUDR evidence must stand up to competent-authority requests. Operators, downstream operators, and traders must provide required information on request, and relevant new information or substantiated concerns can require authority and downstream notifications or verification before products move.

CSDDD is enforced through Member State supervisory authorities under transposing law. Directive (EU) 2026/470 requires the maximum limit for pecuniary penalties to be set at 3% of net worldwide turnover; civil liability remains governed by national law, subject to the Directive's compensation rules.

Prepare EUDR evidence as an authority-response pack, not only as an internal ESG file: show the product flow, actor role, statement or declaration identifier, supply chain information, and risk conclusion.

EUDR may reuse corporate supplier data only if it proves the EUDR facts: Annex I product mapping, supplier and downstream recipient details, due diligence statement reference numbers or declaration identifiers, geolocation where required, production legality, and no or negligible risk.

CSDDD programs can use EUDR findings as inputs about commodity supply chains, but they should not change EUDR scope, actor classification, statement submission, simplified declaration availability, or country-risk treatment.

Use a crosswalk with one row per evidence field. Mark whether each field is EUDR-required, corporate-due-diligence-supporting, or shared, and do not mark it shared unless the same cited fact supports both uses.

Use EUDR when the question is whether a relevant commodity or Annex I product can be placed, made available, or exported with the required due diligence, geolocation or address data where applicable, risk conclusion, and statement or declaration record.

Use CSDDD when the company meets an Article 2 scope route and the question concerns adverse human-rights or environmental impacts across its operations or chains of activities. Use EUDR separately to decide whether a covered product may move.

If both workstreams touch the same supplier, let EUDR set the product evidence gate and let the corporate due-diligence workstream consume those facts only after a cited crosswalk confirms the shared use.