Skip to content

July 2026

EUDR Compliance: Due Diligence & Key Deadlines

In 2025, Dutch authorities conducted pilot inspections across 20 operators and found widespread shortcomings in due diligence documentation. Dry runs led by German, Belgian, Dutch, and French regulators confirmed that authorities expect a complete "paper trail" for each specific shipment — not just a general due diligence system on paper. Rotterdam, Europe's largest port, is now a regulatory checkpoint where shipments without verified geolocation data can be stopped.

A cocoa importer we onboarded last quarter had their entire shipment flagged at Rotterdam port. The problem wasn't that their supply chain was deforestation-linked — it was that they couldn't produce the geolocation data fast enough. On the Sustalium platform, we see this pattern repeat across commodities: the legal burden is on the importer, not the supplier.

The EU Deforestation Regulation (EUDR — Regulation [EU] 2023/1115) is now fully enforced. Unlike voluntary sustainability pledges, it makes it a criminal offense to import commodities produced on land deforested or degraded after December 31, 2020. The burden of proof is entirely on your business.

The QR Code on Your Product Is Your Best Salesperson

A customer stands in a store, holding two products. Same category. Similar price. One has a QR code on the label. The other doesn't.

They scan the QR code. A page loads. It shows the product's certifications — CE Marking, OEKO-TEX Standard 100, ISO 14001. It shows the country of origin, the material composition, the carbon footprint. Every claim on the packaging is backed by a document on the page, and every document carries a hashcode proving it hasn't been altered.

The customer puts down the other product. They buy the one with the QR code.

That QR code just did what no salesperson could do in 30 seconds: it proved every claim the brand made.

How B2B Buyers Verify Supplier Compliance

Ask any procurement manager how they verify supplier compliance today, and the answer is the same across every industry: "We email them and ask for their certificates."

Then the waiting begins. The supplier finds the PDF — hopefully the current version. They email it. The buyer files it in a shared drive, or a SharePoint folder, or their inbox. Six months later, when an auditor asks for proof of supplier compliance, someone searches for the attachment. It may have the wrong date, the wrong version, or both. So they email the supplier again.

This is not a process. It is a ritual — one that every procurement team performs and that every audit exposes as insufficient.

Beyond the PDF: EU DPP Requires Structured Data

For years, the EU Digital Product Passport (DPP) has been discussed as a futuristic, abstract concept under the Ecodesign for Sustainable Products Regulation (ESPR). As we navigate mid-2026, the theory has violently collided with reality.

With the mandatory EU Battery Passport taking effect in February 2027, manufacturers and importers are currently in a mad dash to collect, format, and host their supply chain data. If you are still relying on shared folders full of PDFs and Excel spreadsheets to manage your compliance, you are on a collision course with EU Customs.

How NGOs Prove Impact and Governance Without PDFs

Every NGO has an annual report. It is typically a 50-page PDF, beautifully designed, full of impact statistics and donor names and photographs of the communities served. It lives on a "Reports" page of the NGO's website, buried three clicks deep, updated once a year, read by almost nobody.

Now imagine a donor considering a €10,000 grant. They visit the NGO's website. Instead of downloading a PDF from 2023, they scan a QR code on the homepage. They land on a live page showing: the current year's impact metrics, the organisation's governance structure, its code of conduct, its DEI declaration, its modern slavery statement, and its financial audit — all hashcode-verified, all current, all accessible without creating an account.

That is the difference between a PDF and a Trust Center. For NGOs, that difference is measured in donor confidence.

UK Packaging Tax: Avoiding HMRC Fines

If your small business manufactures or imports goods into the United Kingdom, the product itself is no longer your only regulatory concern. The box, the plastic wrap, and even the tape holding it together are now subject to intense scrutiny under the UK Plastic Packaging Tax (PPT) and the Extended Producer Responsibility (EPR) framework.

Many MSMEs assume these taxes only apply to massive retail giants. This misconception is leading to devastating financial penalties.

Marketplace Requirements for Dropshippers

Dropshipping built an entire industry on a simple premise: sell products you never touch. The supplier manufactures, stores, and ships. You list, market, and collect the margin.

That model worked when marketplaces only cared about delivery times and customer reviews. It is breaking now that marketplaces — and regulators — care about compliance documentation. And the dropshipper is the one holding the liability.

How to Build a RoHS Compliance System

Manufacturing electronic and electrical equipment (EEE) involves complex global supply chains, often requiring thousands of individual components to build a single finished product. If just one of those components—down to the smallest resistor, capacitor, or plastic casing—contains a restricted hazardous substance above the legal threshold, your entire product is barred from entering the European Union.

This is the reality of the Restriction of Hazardous Substances (RoHS) Directive (2011/65/EU), commonly referred to as RoHS 2 (and updated by RoHS 3). Ensuring that your products are compliant is not a one-time event; it requires a continuous, dynamic RoHS Compliance Management System (CMS).

In this guide, we will break down the exact technical steps required to build a system that satisfies market surveillance authorities and ensures uninterrupted market access.

The EU's War on Greenwashing

For years, the European Union asked corporations nicely to be honest about their environmental impact. They introduced voluntary guidelines and encouraged self-regulation. But when the European Commission conducted a massive sweep of the market, the results were disastrous: over 50% of environmental claims on products were vague, misleading, or completely unfounded.

The market was broken. Companies spending millions to truly decarbonize their supply chains were being out-competed by fast-fashion brands slapping a fake "Green Choice" sticker on heavily polluting products.

In response, the EU launched a regulatory war on greenwashing, culminating in two massive pieces of legislation: The Empowering Consumers for the Green Transition (ECGT) Directive and the Green Claims Directive (GCD).

How Restaurants Prove Food Safety Digitally

Walk into most restaurants and you'll find what the industry hides well: a binder. Somewhere behind the counter, a plastic-sleeved folder contains the health inspection certificate, an allergen matrix printed six months ago, and maybe — if the owner is diligent — an organic certification that expired last quarter.

This is restaurant compliance in 2026. Paper certificates pinned to a corkboard. PDFs buried on a website nobody visits. And a customer who wants to know whether the "sustainable seafood" on the menu is actually MSC-certified has no way to check without asking the server, who asks the manager, who digs through the binder.

There is a better way. And it fits on a QR code sticker on your menu.