First it was carbon. Now the big retail buyers have added a water tab to their supplier questionnaires, and small manufacturers are discovering they don't actually know how much water their product "uses" — or what number the buyer is even asking for.
The answer, increasingly, is a water footprint aligned with ISO 14046. Here's what that means in plain terms and how to produce one without hiring a consultancy for six months.
Your hangtag says "organic cotton." Your marketing says "sustainable." Then a department store buyer asks for your GOTS certificate, and you discover that "our supplier told us the cotton is organic" is not, in fact, a certificate.
The Global Organic Textile Standard (GOTS) is the reference for organic textiles worldwide. Here's what it actually is, who gets certified, and what it costs a small brand to do it right.
The email usually arrives from a retail buyer or a hotel group: "Can you confirm your palm oil is RSPO certified?" And the founder, who runs a six-person granola or cosmetics brand, types "RSPO" into a search engine for the first time.
Here's the thing nobody explains clearly: brands don't get "RSPO certified" in the way they get certified for other things. RSPO certifies palm oil production and its supply chain. Your job as a brand is to make claims that follow RSPO's rules — and there are four different ways to do it, with very different price tags.
Three markets, roughly 1.7 billion consumers between them, and three marks that decide whether your electronics get sold or returned. Korea's KC, Japan's PSE, and India's BIS all sit on top of international safety standards, which means the good news up front: one test program can feed all three. What follows is what each mark actually requires.
Say you sell furniture into Mexico City through a distributor and it goes fine for a year. Then you add a lamp with a USB port to the range, and the next shipment is held at customs. The furniture sails through. The lamp needed a NOM certificate.
Mexico's Normas Oficiales Mexicanas, the NOM standards, apply selectively: some categories sail through, others can't cross the border without a certificate. These are the ones that matter, and what to do about them.
It usually goes like this: a distributor in São Paulo is selling your product well, and then a second container gets held at Santos for three weeks while customs keep asking for something called INMETRO.
Brazil has one of the strictest product certification regimes in the Americas, and it catches first-time exporters who assumed a CE mark or an FCC ID would be enough. It isn't. Here's how the system works and what to do about it before you ship.
Six countries, one customs union, and one mark for your power adapters. The Gulf region gets treated as a single market in trade agreements, but most small exporters learn the details one rejected shipment at a time. Here is the version we wish every electronics brand got before their first Dubai order.
The Gulf Cooperation Council (GCC) — Saudi Arabia, the UAE, Qatar, Kuwait, Bahrain and Oman — requires the G-Mark for low-voltage electrical equipment sold in the region. If you sell chargers, appliances, lighting or AV gear there, this is your entry ticket.
Look at the label of any iPhone sold in mainland China and you'll see the CCC mark stamped next to the model number. It's a condition of sale, and Apple complies because there is no alternative: China has its own compulsory certification system, and it doesn't care about your CE mark or your FCC ID. Goods without the right certificate don't clear customs.
If you sell physical products into mainland China, the China Compulsory Certification (CCC) system decides whether your goods cross the border. This post covers how it works, what it costs, and what a small company can realistically do.
The biggest packaging law in EU history already applies. If you missed that one, you're not alone — it arrived on 12 August 2026 and most small businesses didn't notice. The next eighteen months bring a cluster of deadlines that will do more to change what you can sell than anything in the last five years. Here they are, in one place, with what each one actually means for a small company.
Case studies are usually about customers. This one is about us, and that's why we can publish it without asking anyone's permission: Sustalium's own compliance runs on Sustalium. Our public Trust Hex is live at the same address our customers use, holding the same kind of assets we sell. Seven of them, from GDPR to the EU AI Act to our accessibility statement.