A palm oil refinery in Johor holds a valid sustainability certificate, has a published no-deforestation policy and can name every mill that supplies it. Its European customer still sends back a request it cannot fully answer: the geolocation of every plot of land that produced the fruit in a given shipment, and evidence that none of those plots was cleared after 31 December 2020.
This gap between having a sustainability commitment and being able to prove the origin of a specific product is where many Asian suppliers now find themselves. The EU Deforestation Regulation (EUDR) applies from 30 December 2026 for large and medium-sized operators. Exporters of palm oil, rubber, timber, cocoa, coffee and soy across the region have a short window to turn policies and certificates into shipment-level evidence.
What the EUDR Actually Requires, and Who It Reaches
The regulation covers seven commodities: cattle, cocoa, coffee, oil palm, rubber, soy and wood, along with listed derived products such as chocolate, tyres, leather and furniture. Any company placing these goods on the EU market must be able to show three things about them:
- Deforestation-free: the commodity was produced on land that was not deforested after the cut-off date of 31 December 2020.
- Legal: it was produced in line with the relevant laws of the country of production.
- Covered by due diligence: the operator has collected the required information, assessed the risk, and submitted a due diligence statement to the EU’s information system.
The timeline has moved twice, but it is now settled. Following an amendment in December 2025, the obligations apply from 30 December 2026 for large and medium operators. Micro and small operators outside the timber sector have until 30 June 2027. In May 2026, the European Commission published a simplification package of updated guidance, FAQs and IT changes, and confirmed it would not reopen the legal text or postpone again. A separate delegated act brings additional products, including certain palm oil derivatives, into scope from 30 December 2027.
Legally, the obligation falls on the company placing the product on the EU market, not on the Asian producer. In practice, that company can only meet it with information that originates upstream. A plantation, mill, dealer or rubber processor that cannot supply plot-level data becomes a risk the buyer must either mitigate at its own cost or avoid altogether.
Why “Standard Risk” Matters for Asian Exporters
In May 2025, the Commission classified countries into three risk tiers. Only four countries, Belarus, Myanmar, North Korea and Russia, were placed in the high-risk category. Around 50 countries, including Malaysia and Indonesia, are classified as standard risk. EU authorities are expected to check 1% of operators sourcing from low-risk countries, 3% for standard-risk countries and 9% for high-risk ones.
For Southeast Asian suppliers, standard risk means EU buyers cannot use the simplified due diligence available for low-risk origins. They must run a full risk assessment. Where the risk is more than negligible, they must also take mitigation steps such as additional documentation, independent audits or satellite checks. Suppliers who can hand over clean, structured evidence reduce that burden directly, and this is likely to influence which suppliers buyers keep.
Certificate or Evidence? Understanding the Difference
Asian producers have invested heavily in certification. Malaysia’s Plantation and Commodities Minister reported in February 2026 that about 90% of oil palm estates and 85% of independent smallholders had obtained Malaysian Sustainable Palm Oil (MSPO) certification. The government is also finalising a National Traceability System that is intended to link geolocation, licensing, certification status and supplier-to-mill transactions. In 2025, the Malaysian government reported that the EU had acknowledged MSPO as a credible standard that can help operators meet the regulation.
Certification helps, but it does not replace shipment-level evidence. The two answer different questions.
| Question | What a sustainability certificate typically shows | What EUDR evidence must show |
|---|---|---|
| Unit of proof | A company, site or management system met a standard at the time of audit | A specific product or shipment came from identified plots of land |
| Location data | Often site or concession level | Geolocation of every production plot: a point for plots up to four hectares, a full boundary polygon for larger plots (other than cattle) |
| Time reference | The audit cycle and the scheme’s own cut-off date | No deforestation after 31 December 2020 |
| Mixing | Some supply chain models, such as mass balance, permit certified and uncertified material to be mixed | Material of unknown origin cannot be mixed with compliant material |
| Who relies on it | Buyers, investors and the certification body | The EU operator, which remains legally responsible for its due diligence statement |
A certificate is therefore an input to the buyer’s risk assessment, not a substitute for it. Suppliers should present certification as supporting evidence alongside plot data rather than in place of it.
The Evidence Chain: Where Traceability Usually Breaks
A useful way to test readiness is to follow a single shipment backwards and ask what evidence each link in the chain holds. The questions are the same whether the product is crude palm oil, natural rubber or sawn timber.
- Plot: Is there a geolocation point or polygon for every plot, in the required format, and has each been checked against forest cover at the end of 2020?
- Producer: Is the grower identified, licensed where required, and holding documents that establish legal land use?
- Collector or dealer: Can the intermediary show which producers supplied which loads, or does it aggregate fruit, latex or logs from many sources without records?
- Mill or primary processor: Does the intake system link each delivery to its source plots, and is untraced material kept physically or administratively separate?
- Refinery, manufacturer or exporter: Can each outbound lot be linked back to the inbound deliveries that went into it?
- EU operator: Can the buyer receive all of this in a structured, consistent format that it can rely on for its own due diligence?
In palm oil and rubber, the weakest links are usually the second and third. Independent smallholders and the dealers who aggregate their crop often operate on small plots with informal records. A mill may know its direct suppliers well and still be unable to say which plots produced the fruit that arrived through a dealer on a particular day. In timber and furniture, the difficulty usually comes later, when multiple wood sources are combined into a single finished product.
Five Mistakes That Undermine Deforestation-Free Claims
- Treating a policy as proof. A no-deforestation commitment shows intent. A buyer needs evidence that specific land was not cleared.
- Using concession boundaries instead of plot boundaries. A polygon drawn around a large area that may contain several plots does not meet the requirement for individual plot geolocation.
- Allowing untraced material into the flow. A small volume of fruit or latex of unknown origin can compromise an otherwise traceable lot if it is not kept separate.
- Collecting data once and never updating it. New smallholders, changes in dealers and changes in land use can make last year’s supplier map unreliable.
- Calling a product “deforestation-free” before the evidence exists. Using the term as a marketing claim ahead of verification creates both commercial and reputational risk.
A Ten-Week Readiness Plan
With the December 2026 application date approaching, suppliers can prioritise in this order:
- Map current EU-bound volumes. Identify which customers, products and lots are destined for the EU, and focus there first.
- Close plot-level gaps for those volumes. Collect or validate geolocation for the plots that supply them, beginning with dealers and smallholders.
- Run a cut-off check. Compare plot locations against forest cover data for the end of 2020, using public sources such as the EU Forest Observatory or a qualified provider, and record the result.
- Document legality. Gather land title or land use documents, licences and other evidence relevant to production law in the country of origin.
- Set up segregation rules. Decide how untraced material will be kept out of EU-bound lots, and train intake staff to apply those rules.
- Agree a data format with buyers. Confirm what your customers need and how they want to receive it, rather than assuming a certificate will be enough.
- Keep records. The regulation requires operators to retain due diligence information for five years. Suppliers should expect to support that with their own records.
Suppliers already responding to customer climate and ESG data requests will recognise the discipline involved. The approach described in our guide to answering supplier ESG questionnaires with evidence applies here too. The same applies to the upstream data work covered in our article on building a practical Scope 3 supplier data strategy.
Beyond Compliance: What Deforestation-Free Evidence Is Worth
EUDR readiness is primarily about keeping access to a major export market, but the evidence has wider value. Plot-level data supports more credible nature-related disclosures. Our discussion of biodiversity metrics for business in Asia explains why location-specific data matters before any nature-positive claim. The same data also helps companies distinguish between avoiding deforestation and restoring land. These are separate achievements that should be measured separately, as our article on proving a reforestation programme worked sets out.
Some organisations will go well beyond the minimum. A mill group may bring its entire independent smallholder supply base into verified plot-level traceability, or a cooperative may map and verify thousands of member farms. Where a result like this is specific, measurable and backed by independent evidence, it can stand among the region’s genuine Asian business achievements. It may also be the kind of milestone that qualifies for record recognition in Asia. Asia Record documents measurable achievements by businesses and organisations across the region and assesses each proposal against a clearly defined claim and its supporting evidence, as described in Asia Record’s verification process.
The order matters, however. An Asia Record application should only follow an achievement that has already been proven through the compliance and verification work. Becoming an Asia Record holder does not satisfy the EUDR, replace MSPO, RSPO or ISPO certification, or stand in for an operator’s due diligence statement. Recognition can document an exceptional result. It cannot create one.
The Practical Test
The question that matters for any Asian supplier before 30 December 2026 is simple. If an EU customer selected one shipment at random, could you show the plots it came from, prove those plots were not deforested after 2020, and demonstrate that nothing untraced entered the lot? Companies that can answer yes with documents rather than assurances will hold their place in the supply chain. Companies that cannot should use the remaining weeks to close the gaps that matter most.
