Operators retain due diligence documentation for at least five years and statement records for five years from submission. Downstream operators and traders retain Article 5 information for at least five years from placing, making available, or export and provide it to competent authorities on request.
A practical evidence file should let a reviewer move from the Annex I product decision to the role classification, supplier data, geolocation or permitted address data, legal-production evidence, risk assessment, mitigation, DDS or declaration filing, and downstream communications.
Operators must also review the due diligence system at least once a year and whenever new developments could affect it, updating the system when necessary. Keep a record of those updates for five years and identify which open or completed product files need reassessment.
Operators outside the SME and natural-person categories must also report publicly each year on their due diligence system, including product and production-country information, risk conclusions, mitigation, and relevant consultation. Article 12 allows the required information to be included in reporting under other applicable Union value-chain due diligence laws.