EUDRTemplateEU

EU Deforestation Regulation Supplier Onboarding Template

A supplier intake structure for collecting the EUDR facts needed before products are placed or made available on the EU market, or exported.

Use it to connect each supplier to Annex I products, origin and geolocation evidence, chain-of-custody records, risk review, mitigation actions, and DDS reference handling.

Back to main artifact Review sources

Author

Sorena AI

Published

May 9, 2026

Updated

Jul 25, 2026

Sections

Structured answer sets in this page tree.

Primary sources

Cited legal and guidance references.

Publication metadata

Sorena AI

Published May 9, 2026

Updated Jul 25, 2026

Overview

Approve a supplier only for named product-and-origin combinations, not for EUDR work in general. The intake record must establish the exact product, the supplier's role, every production origin and plot or cattle establishment, the production period, the evidence for deforestation-free and lawful production, chain traceability, the risk conclusion, and the DDS reference or simplified-declaration identifier that covers the flow. Finish onboarding before covered movements from 30 December 2026. The 30 June 2027 date applies only to operators that were established as natural persons or micro or small undertakings by 31 December 2024, and it does not apply to products covered by the EU Timber Regulation annex.

Section 1

Supplier identity, role, and approval status fields

Create one onboarding record per supplier legal entity and link it to the product rows and origins it supplies. Classify the role for the specific transaction: operator, downstream operator, trader, qualifying , or an upstream evidence provider outside those EU-market roles. A supplier's label or certificate does not decide the legal role.

Do not approve a supplier for an EUDR product flow until the record identifies who will provide Article 9 information, who will provide any reference number or identifier, and who owns updates when new risk information appears.

Supplier approval is an internal control, not an EUDR approval or transfer of responsibility. The operator must test the evidence for the relevant product flow and remains responsible when it submits the , even if a supplier or authorised representative supplied the data.

Supplier legal identity: legal name, registration or tax identifier, operating address, production-country contact, and EUDR compliance contact.
Supplier EUDR role: operator, downstream operator, trader, , authorised representative support, or evidence provider for your own operator due diligence file.
Product-flow owner: procurement owner, trade compliance owner, sustainability reviewer, and business approver for each supplier-product combination.
Approval status: not started, evidence requested, evidence received, risk review open, mitigation open, approved for named product rows, or blocked from EUDR use.
Supplier update trigger: new product, new country or part of country of production, changed plot or establishment data, changed supplier role, new DDS reference, or new information indicating non-compliance risk.

Sources for this answer

Consolidated Regulation (EU) 2023/1115

Articles 2 and 4 to 6 support transaction-specific actor classification, authorised-representative submission, and the distinct obligations attached to each role.

Section 2

Commodity, product, and Annex I intake rows

Supplier onboarding is not complete until every product the supplier may provide has an EUDR product-scope row. Use the supplier's commercial product name only as a starting point; the onboarding record should map the product to the relevant commodity family and the product line used by trade or customs master data.

The cited source material identifies cattle, cocoa, coffee, oil palm, rubber, soya, and wood as covered commodity families, together with derived products listed in . Keep out-of-scope conclusions separate from in-scope approvals so later purchases do not reuse the wrong evidence pack.

As of 26 July 2026, the Commission's delegated act changing is still subject to European Parliament and Council scrutiny before it can enter into force. Use the legally effective Annex I for current scope decisions, track the proposed removals and exemptions separately, and prepare for the proposed additions to apply from 30 December 2027 if the act enters into force.

Product row identifier: supplier item number, internal SKU, contract line, purchase category, lot or batch reference, and intended EU market placement, EU availability, or export use.
Commodity family: cattle, cocoa, coffee, oil palm, rubber, soya, wood, or derived product listed in .
mapping: product description, customs or product code used by the trade record, Annex I line selected, and reviewer who approved the mapping.
Product composition link: which relevant commodity the product contains or has been fed with, or which relevant commodity or product it was made using, with the supplier document that supports the link.
Scope conclusion: in scope, out of scope, needs legal or trade review, or cannot be sourced until the mapping is resolved.

Sources for this answer

Consolidated Regulation (EU) 2023/1115

Article 1 and the current Annex I support the named commodity families and exact product-code scope test.

European Commission - July 2026 EUDR product-scope update

Commission update on the July 2026 proposed Annex I changes and their pending scrutiny status.

Section 3

Origin, geolocation, and legality evidence fields

For each supplier-product row, collect the Article 9 origin record: country of production; of every production plot or cattle establishment; production date or time range; and adequately conclusive and verifiable information supporting deforestation-free and lawful production. For plots larger than four hectares used for commodities other than cattle, the geolocation is a perimeter polygon.

Treat a supplier's claim to the micro or small primary-operator route as an exception that requires evidence. Only a qualifying operator may replace Article 9 with the postal address of the plots or establishment, and the address must clearly correspond to the geographic location.

Country or part of country of production for each product row, plus the supplier's source document for that origin claim.
Production-unit identifier: plot, farm, plantation, forest, ranch, or cattle establishment in the supplier's records; track mills and processing facilities separately from the Article 9 production location.
evidence: point or required polygon with at least six decimal digits; date received; validation owner; and product rows and production periods covered.
Deforestation-free evidence: records supporting no production on land subject to deforestation after 31 December 2020 and, for wood, no forest degradation after that date.
Country-of-production legality evidence: documents tied to the categories in Article 2(40), selected for the commodity, location, and applicable local law rather than copied from a generic list.
Simplified primary-operator substitute: Annex III declaration identifier and postal address clearly corresponding to the location, only when Article 4a eligibility is established.

Sources for this answer

Consolidated Regulation (EU) 2023/1115

Articles 2, 4a, and 9 support the cut-off date, geolocation precision and coverage, production period, legality evidence, and limited postal-address option.

Recommended next step

Build an EUDR supplier evidence pack

This template helps connect supplier approval to Annex I product rows, origin and geolocation evidence, risk conclusions, mitigation records, and DDS reference handoffs.

Research workflow

Open Research Copilot

Answer EUDR implementation questions with cited source material.

Explore next step

Talk to Sorena

Discuss EUDR supplier onboarding

Review supplier fields, product-scope mapping, and evidence-pack design with Sorena.

Explore next step

Section 4

Chain-of-custody and DDS support fields

The onboarding record should show how the supplier's evidence travels with the product. Downstream operators and traders need supply-chain information, and operators must communicate reference numbers or declaration identifiers further down the supply chain.

Use a separate row for each upstream statement reference, identifier, or evidence package. That prevents one supplier approval from being reused across products, production origins, or shipments it does not support.

Immediate supplier link: supplier legal entity, supplied product row, purchase order or contract reference, invoice or delivery reference, and chain-of-custody document.
Upstream evidence package: origin file, file, deforestation-free evidence, legality evidence, audit or survey record, and supplier attestation.
DDS support: reference number, identifier, date received, associated operator, and product rows covered.
Downstream handoff: customer, distributor, trader, or downstream operator that receives the product; date the DDS reference or declaration identifier was passed on; and the covered shipment or sales-order reference.
Mismatch check: hold the supplier-product row if the DDS reference, declaration identifier, file, origin evidence, or mapping does not cover the same product flow.

Sources for this answer

Consolidated Regulation (EU) 2023/1115

Articles 4 and 5 support supply-chain information, DDS reference or declaration-identifier handoff, and retention.

Commission Implementing Regulation (EU) 2026/1565

Current amendment to the Information System rules for due diligence statements, simplified declarations, and grouped records.

Section 5

Risk assessment and mitigation intake fields

Supplier approval should not be final while the risk conclusion is unresolved. The EUDR due diligence system includes information collection, risk assessment, and, where risk is not negligible, risk mitigation before the product is placed on the market or exported.

For production in countries or parts of countries classified as low risk, keep the supplier evidence that supports the simplified due diligence path. The cited source material still requires attention to supply-chain complexity and risks of circumvention or mixing before relying on that path.

Risk inputs: country or part-of-country production risk, source reliability and validity, supply-chain complexity, mixing or circumvention risk, substantiated concerns, and whether the evidence covers the exact product row.
Risk conclusion: no risk, negligible risk, non-negligible risk, missing information, or blocked from sourcing.
Mitigation request: additional information, independent survey or audit, supplier corrective action, product segregation, change of source, or decision not to place/export.
Mitigation evidence: request date, supplier response, reviewer, approval decision, affected product rows, and residual risk conclusion.
Low-risk path evidence: country or part-of-country classification used, assessment of supply-chain complexity, assessment of circumvention or mixing risk, and documentation kept for authority request.

Sources for this answer

Consolidated Regulation (EU) 2023/1115

Articles 8 to 13 support information collection, the Article 10 criteria, mitigation of non-negligible risk, and the limited low-risk route.

Section 6

Records, retention, and authority-response fields

Close onboarding with a record structure that can be reused for purchases, shipments, statement preparation, downstream communications, and authority questions. Operators keep records for five years, and downstream operators and traders keep Article 5 supply-chain information for at least five years.

Store the record at the supplier-product level, not only at the supplier level. A supplier may be approved for one commodity, product, origin, or DDS reference while another product row remains blocked.

Retained record index: supplier identity file, product and mapping, origin and evidence, legality evidence, deforestation-free evidence, risk assessment, mitigation record, DDS reference or declaration identifier, and downstream handoff log.
Authority-response owner: person responsible for retrieving the evidence package and providing information when competent authorities request it.
Five-year clock: date the was submitted, date of the Article 5 placing, making available, or export, or date of the Article 9 placing or export, as applicable.
Reopen trigger: new information indicating non-compliance risk, changed supplier source, changed production origin, changed product composition, missing DDS reference coverage, or expired supplier evidence.
Final onboarding outcome: approved only for named product rows, approved with mitigation complete, approved for low-risk simplified due diligence, blocked, or retired.