EU Deforestation Regulation Supplier Onboarding Template
A supplier intake structure for collecting the EUDR facts needed before products are placed or made available on the EU market, or exported.
Use it to connect each supplier to products, origin and evidence, chain-of-custody records, risk review, mitigation actions, and DDS reference handling.
Approve a supplier only for named product-and-origin combinations, not for EUDR work in general. The intake record must establish the exact product, the supplier's role, every production origin and plot or cattle establishment, the production period, the evidence for deforestation-free and lawful production, chain traceability, the risk conclusion, and the DDS reference or simplified-declaration identifier that covers the flow. Finish onboarding before covered movements from 30 December 2026. The 30 June 2027 date applies only to operators that were established as natural persons or micro or small undertakings by 31 December 2024, and it does not apply to products covered by the EU Timber Regulation annex.
1
Section 1
Supplier identity, role, and approval status fields
Create one onboarding record per supplier legal entity and link it to the product rows and origins it supplies. Classify the role for the specific transaction: operator, downstream operator, trader, qualifying , or an upstream evidence provider outside those EU-market roles. A supplier's label or certificate does not decide the legal role.
Do not approve a supplier for an EUDR product flow until the record identifies who will provide Article 9 information, who will provide any reference number or identifier, and who owns updates when new risk information appears.
Supplier approval is an internal control, not an EUDR approval or transfer of responsibility. The operator must test the evidence for the relevant product flow and remains responsible when it submits the , even if a supplier or authorised representative supplied the data.
Supplier legal identity: legal name, registration or tax identifier, operating address, production-country contact, and EUDR compliance contact.
Supplier EUDR role: operator, downstream operator, trader, , authorised representative support, or evidence provider for your own operator due diligence file.
Product-flow owner: procurement owner, trade compliance owner, sustainability reviewer, and business approver for each supplier-product combination.
Approval status: not started, evidence requested, evidence received, risk review open, mitigation open, approved for named product rows, or blocked from EUDR use.
Supplier update trigger: new product, new country or part of country of production, changed plot or establishment data, changed supplier role, new DDS reference, or new information indicating non-compliance risk.
Articles 2 and 4 to 6 support transaction-specific actor classification, authorised-representative submission, and the distinct obligations attached to each role.
2
Section 2
Commodity, product, and Annex I intake rows
Supplier onboarding is not complete until every product the supplier may provide has an EUDR product-scope row. Use the supplier's commercial product name only as a starting point; the onboarding record should map the product to the relevant commodity family and the product line used by trade or customs master data.
The seven commodity families are cattle, cocoa, coffee, oil palm, rubber, soya, and wood, with the derived products listed under them in . Keep out-of-scope conclusions separate from in-scope approvals so later purchases do not reuse the wrong evidence file.
Read together with Commission Delegated Regulation (EU) 2026/2102, in force from 18 September 2026. Its product removals, exclusions and revised descriptions affect the scope match. Specific added products, including frozen cattle tongues and coffee extracts, separately apply from 30 December 2027. Record the exact amended entry, Combined Nomenclature (CN) code, product description and applicable date for each scope decision.
Product row identifier: supplier item number, internal stock-keeping unit (SKU), contract line, purchase category, lot or batch reference, and intended EU market placement, EU availability, or export use.
Commodity family: cattle, cocoa, coffee, oil palm, rubber, soya, wood, or derived product listed in .
mapping: product description, customs or product code used by the trade record, Annex I line selected, and reviewer who approved the mapping.
Product composition link: which relevant commodity the product contains or has been fed with, or which relevant commodity or product it was made using, with the supplier document that supports the link.
Scope conclusion: in scope, out of scope, needs legal or trade review, or cannot be sourced until the mapping is resolved.
Binding Annex I amendment in force from 18 September 2026; specific added product entries separately apply from 30 December 2027.
3
Section 3
Origin, geolocation, and legality evidence fields
For each supplier-product row, collect the Article 9 origin record: country of production; of every production plot or cattle establishment; production date or time range; and adequately conclusive and verifiable information supporting deforestation-free and lawful production. For plots larger than four hectares used for commodities other than cattle, the geolocation is a perimeter polygon.
Treat a supplier's claim to the micro or small primary-operator route as an exception that requires evidence. Only a qualifying operator may replace Article 9 with the postal address of the plots or establishment, and the address must clearly correspond to the geographic location.
Country or part of country of production for each product row, plus the supplier's source document for that origin claim.
Production-unit identifier: plot, farm, plantation, forest, ranch, or cattle establishment in the supplier's records; track mills and processing facilities separately from the Article 9 production location.
evidence: point or required polygon with at least six decimal digits; date received; validation owner; and product rows and production periods covered.
Deforestation-free evidence: records supporting no production on land subject to deforestation after 31 December 2020 and, for wood, no forest degradation after that date.
Country-of-production legality evidence: identify the applicable rules and documents for land-use rights, environmental protection, wood-harvesting forest rules, third-party rights, labour and protected human rights, free prior and informed consent, and tax, anti-corruption, trade and customs law.
Simplified primary-operator substitute: Annex III declaration identifier and postal address clearly corresponding to the location, only when Article 4a eligibility is established.
Articles 2, 4a, and 9 support the cut-off date, geolocation precision and coverage, production period, legality evidence, and limited postal-address option.
Recommended next step
Build an EUDR supplier evidence pack
This template helps connect supplier approval to Annex I product rows, origin and geolocation evidence, risk conclusions, mitigation records, and DDS reference handoffs.
Operators must communicate associated statement reference numbers or declaration identifiers further down the supply chain. Downstream operators and traders must hold the Article 5 supplier and business-recipient details; collecting a reference or identifier is mandatory when the direct supplier is an operator. Record any additional voluntary reference handoff separately from that duty.
Use a separate row for each upstream statement reference, identifier, or evidence package. That prevents one supplier approval from being reused across products, production origins, or shipments it does not support.
Immediate supplier link: supplier legal entity, supplied product row, purchase order or contract reference, invoice or delivery reference, and chain-of-custody document.
Upstream evidence package: origin file, file, deforestation-free evidence, legality evidence, audit or survey record, and supplier attestation.
DDS support: reference number, identifier, date received, associated operator, and product rows covered.
Downstream handoff: customer, distributor, trader, or downstream operator that receives the product; date the DDS reference or declaration identifier was passed on; and the covered shipment or sales-order reference.
Mismatch check: hold the supplier-product row if the DDS reference, declaration identifier, file, origin evidence, or mapping does not cover the same product flow.
Current amendment to the Information System rules for due diligence statements, simplified declarations, and grouped records.
5
Section 5
Risk assessment and mitigation intake fields
Supplier approval should not be final while the risk conclusion is unresolved. The standard EUDR due diligence route includes information collection, risk assessment, and mitigation where risk is not negligible before placement or export. Article 13 permits qualifying low-risk production to omit Articles 10 and 11 only after the required complexity, circumvention, and mixing checks.
For Article 13, confirm low-risk production for every relevant input and retain documentation of negligible circumvention or mixing risk. If new information points to non-compliance or circumvention, perform Articles 10 and 11 and immediately communicate the information to the competent authority.
Risk inputs: country or part-of-country production risk, source reliability and validity, supply-chain complexity, mixing or circumvention risk, substantiated concerns, and whether the evidence covers the exact product row.
Risk conclusion: no risk, negligible risk, non-negligible risk, missing information, or blocked from sourcing.
Mitigation request: additional information, independent survey or audit, supplier corrective action, product segregation, change of source, or decision not to place/export.
Low-risk path evidence: country or part-of-country classification used, assessment of supply-chain complexity, assessment of circumvention or mixing risk, and documentation kept for authority request.
Articles 8 to 13 support information collection, the Article 10 criteria, mitigation of non-negligible risk, and the limited low-risk route.
6
Section 6
Records, retention, and authority-response fields
Close onboarding with records reusable for purchases, shipments, filing, downstream communication and authority requests. Operators retain due diligence documentation for at least five years and statement records for five years from submission. Downstream operators and traders retain Article 5 information for at least five years from placing, making available, or export.
Store the record at the supplier-product level, not only at the supplier level. A supplier may be approved for one commodity, product, origin, or DDS reference while another product row remains blocked.
Retained record index: supplier identity file, product and mapping, origin and evidence, legality evidence, deforestation-free evidence, risk assessment, mitigation record, DDS reference or declaration identifier, and downstream handoff log.
Authority-response owner: person responsible for retrieving the evidence package and providing information when competent authorities request it.
Five-year clock: date the was submitted, date of the Article 5 placing, making available, or export, or date of the Article 9 placing or export, as applicable.
Reopen trigger: new information indicating non-compliance risk, changed supplier source, changed production origin, changed product composition, missing DDS reference coverage, or expired supplier evidence.
Final onboarding outcome: approved only for named product rows, approved with mitigation complete, approved for low-risk simplified due diligence, blocked, or retired.
Primary source for actor definitions, Article 3 conditions, Annex I scope, geolocation, due diligence, simplified declarations, handoff, and recordkeeping.
Articles 2 and 4 to 6 support transaction-specific actor classification, authorised-representative submission, and the distinct obligations attached to each role.
Article 1 and the current Annex I support the named commodity families and exact product-code scope test.
Show 4 more
Articles 2, 4a, and 9 support the cut-off date, geolocation precision and coverage, production period, legality evidence, and limited postal-address option.
Articles 4 and 5 support supply-chain information, DDS reference or declaration-identifier handoff, and retention.
Articles 8 to 13 support information collection, the Article 10 criteria, mitigation of non-negligible risk, and the limited low-risk route.
Articles 4, 5, 9, and 12 support five-year DDS retention, at-least-five-year Article 5 retention, authority access, and due-diligence-system records.