Home / Regulations / EUDR
What Is EUDR? The EU Deforestation Regulation Explained
Written by Johannes Cornelis de Boer, founder of Software Lantern
An explainer on the regulation itself: for software-specific guidance, see EUDR compliance software.
EUDR, the EU Deforestation Regulation (formally Regulation (EU) 2023/1115), requires companies placing certain commodities on the EU market, or exporting them from it, to prove those commodities weren't grown on land deforested after 31 December 2020, and were produced legally. It applies regardless of company size, though the deadline differs by size.
Who does EUDR apply to?
EUDR defines two roles, and which one applies to you determines the scope of your obligations:
Operator
The business that first places a covered product on the EU market, or makes it available on the market if it was produced within the EU. This covers importers and EU-based producers. Operators carry the full due diligence burden.
Trader
Any other business that makes the product available further down the supply chain, after an operator has already placed it on the market (for example, distributing or retailing it within the EU). Traders have narrower obligations than operators.
The regulation also applies to exporting these products from the EU, which carries its own due diligence obligation similar to an operator's.
EUDR covers seven commodities and their derived products:
EUDR requirements
Full due diligence under EUDR has four parts:
Information collection
Commodity type and quantity, supplier details, and plot-level geolocation data for where the commodity was produced (points for smallholder plots under 4 hectares, polygons for larger areas).
Risk assessment
Assessing the risk that the product isn't deforestation-free or wasn't produced legally, based on the collected information and the country's risk classification.
Risk mitigation
Where risk isn't negligible, taking steps to reduce it before the product can be placed on the market.
A due diligence system
Maintaining the internal procedures and records that make the above auditable, on an ongoing basis, not just once.
The regulation also sets up a country-level risk benchmarking system (low, standard, or high risk). Operators sourcing exclusively from countries classified as low risk can use a simplified procedure that skips the risk assessment and risk mitigation steps. The information collection and due diligence system requirements still apply. Only a small number of countries are currently classified high risk; most others are low or standard risk by default.
EUDR deadlines
Large and medium operators & traders
Due diligence obligations apply from 30 December 2026 for large and medium operators and traders.
Micro and small operators
Micro and small operators, established as such by 31 December 2024, have until 30 June 2027. This later date is specific to operators; the regulation's text doesn't extend it to traders regardless of size.
These dates reflect Regulation (EU) 2025/2650, which amended the original regulation and superseded an earlier delay (Regulation (EU) 2024/3234). If you've seen different dates elsewhere, they're likely referencing that earlier, now-outdated timeline.
The due diligence statement
Before placing a covered product on the EU market (or exporting it), operators must submit a due diligence statement confirming the due diligence process was carried out and the risk was found to be negligible. It's filed through the EU's official information system, built on the TRACES platform, and generates a reference number that downstream traders can cite rather than repeating the process themselves.
Frequently asked questions
What's the difference between an operator and a trader under EUDR?
An operator is the business that first places a covered product on the EU market, or makes it available if it was produced within the EU, and carries the full due diligence burden. A trader is any other business further down the supply chain that makes the product available afterward, and has narrower obligations than an operator.
Do micro and small businesses get more time to comply with EUDR?
Micro and small operators, established as such by 31 December 2024, have until 30 June 2027, compared to 30 December 2026 for large and medium operators and traders. This later date applies to operators specifically; the regulation's text doesn't extend it to traders regardless of size.
What happens if I source only from low-risk countries?
Operators sourcing exclusively from countries the EU classifies as low risk can use a simplified procedure that skips the risk assessment and risk mitigation steps. The information collection and due diligence system requirements still apply either way.
Where do I file an EUDR due diligence statement?
Through the EU's official information system, built on the TRACES platform. Filing generates a reference number that downstream traders can cite rather than repeating the process themselves.
Has the EUDR compliance deadline changed?
Yes. Regulation (EU) 2025/2650 amended the original regulation and superseded an earlier delay set by Regulation (EU) 2024/3234. If you've seen different dates elsewhere, they're likely referencing that earlier, now-outdated timeline.
This article is a general guide, not legal advice. Confirm your specific obligations against the regulation itself or with a qualified advisor.
Not sure if EUDR applies to you?
Use the scope checker on our EUDR page: a few questions, a plain-language answer on your role and deadline.