Skip to content

Compliance

Product Carbon Footprint (ISO 14067)

Every major sustainability regulation coming out of the European Union — from the ESPR to the Green Claims Directive to CBAM — converges on one measurement: the Product Carbon Footprint (PCF).

Corporate buyers, retail platforms, and regulators are no longer satisfied with corporate-level sustainability reports. They want the specific carbon footprint of your individual product — quantified in kilograms of CO₂ equivalent (kg CO₂e) per unit, calculated using a standardized methodology, and verified by credible evidence.

But for most MSMEs, calculating a PCF feels like a PhD-level exercise in industrial ecology. Life Cycle Assessment (LCA) software is expensive, the data requirements are daunting, and the difference between "verification" and "validation" is often unclear. This guide demystifies the process and shows you how to build a defensible PCF that satisfies your buyers and regulators.

Surviving US Customs: UFLPA & Prop 65

Selling into the United States market is highly lucrative, but it is also one of the most legally treacherous environments for international MSMEs. Without a dedicated compliance department, a small manufacturer can easily see their entire container seized at the border, or receive a devastating lawsuit in the mail weeks after a successful sale.

The two biggest threats facing exporters to the US right now are the Uyghur Forced Labor Prevention Act (UFLPA) and California's Proposition 65.

Why Compliance Is Your Competitive Advantage

Walk into any SME manufacturing facility, and you'll hear the same thing: compliance is a tax. A drain on resources. A pile of paperwork that doesn't add a single euro to the bottom line.

This mindset is not just wrong — it's dangerous. The companies that treat compliance as a cost center are the ones losing contracts to competitors who understood something they didn't: compliance is the most underrated competitive weapon in the modern global economy.

In a world where supply chains are weaponized, where retail buyers drop suppliers overnight over a single missing certificate, and where consumers scan QR codes on packaging to verify sustainability claims before purchase — your compliance file isn't paperwork. It's your license to compete. It's your pitch deck. And increasingly, it's the only thing standing between your business and market exclusion.

EUDR: EU Deforestation Regulation Compliance Guide

In 2025, Dutch authorities conducted pilot inspections across 20 operators and found widespread shortcomings in due diligence documentation. Dry runs led by German, Belgian, Dutch, and French regulators confirmed that authorities expect a complete "paper trail" for each specific shipment — not just a general due diligence system on paper. Rotterdam, Europe's largest port, is now a regulatory checkpoint where shipments without verified geolocation data can be stopped.

A cocoa importer we onboarded last quarter had their entire shipment flagged at Rotterdam port. The problem wasn't that their supply chain was deforestation-linked — it was that they couldn't produce the geolocation data fast enough. On the Sustalium platform, we see this pattern repeat across commodities: the legal burden is on the importer, not the supplier.

The EU Deforestation Regulation (EUDR — Regulation [EU] 2023/1115) is now fully enforced. Unlike voluntary sustainability pledges, it makes it a criminal offense to import commodities produced on land deforested or degraded after December 31, 2020. The burden of proof is entirely on your business.

Beyond the PDF: EU DPP Requires Structured Data

For years, the EU Digital Product Passport (DPP) has been discussed as a futuristic, abstract concept under the Ecodesign for Sustainable Products Regulation (ESPR). As we navigate mid-2026, the theory has violently collided with reality.

With the mandatory EU Battery Passport taking effect in February 2027, manufacturers and importers are currently in a mad dash to collect, format, and host their supply chain data. If you are still relying on shared folders full of PDFs and Excel spreadsheets to manage your compliance, you are on a collision course with EU Customs.

How NGOs Prove Impact and Governance Without PDFs

Every NGO has an annual report. It is typically a 50-page PDF, beautifully designed, full of impact statistics and donor names and photographs of the communities served. It lives on a "Reports" page of the NGO's website, buried three clicks deep, updated once a year, read by almost nobody.

Now imagine a donor considering a €10,000 grant. They visit the NGO's website. Instead of downloading a PDF from 2023, they scan a QR code on the homepage. They land on a live page showing: the current year's impact metrics, the organisation's governance structure, its code of conduct, its DEI declaration, its modern slavery statement, and its financial audit — all hashcode-verified, all current, all accessible without creating an account.

That is the difference between a PDF and a Trust Center. For NGOs, that difference is measured in donor confidence.

UK Packaging Tax: Avoiding HMRC Fines

If your small business manufactures or imports goods into the United Kingdom, the product itself is no longer your only regulatory concern. The box, the plastic wrap, and even the tape holding it together are now subject to intense scrutiny under the UK Plastic Packaging Tax (PPT) and the Extended Producer Responsibility (EPR) framework.

Many MSMEs assume these taxes only apply to massive retail giants. This misconception is leading to devastating financial penalties.

Marketplace Requirements for Dropshippers

Dropshipping built an entire industry on a simple premise: sell products you never touch. The supplier manufactures, stores, and ships. You list, market, and collect the margin.

That model worked when marketplaces only cared about delivery times and customer reviews. It is breaking now that marketplaces — and regulators — care about compliance documentation. And the dropshipper is the one holding the liability.

How to Build a RoHS Compliance System

Manufacturing electronic and electrical equipment (EEE) involves complex global supply chains, often requiring thousands of individual components to build a single finished product. If just one of those components—down to the smallest resistor, capacitor, or plastic casing—contains a restricted hazardous substance above the legal threshold, your entire product is barred from entering the European Union.

This is the reality of the Restriction of Hazardous Substances (RoHS) Directive (2011/65/EU), commonly referred to as RoHS 2 (and updated by RoHS 3). Ensuring that your products are compliant is not a one-time event; it requires a continuous, dynamic RoHS Compliance Management System (CMS).

In this guide, we will break down the exact technical steps required to build a system that satisfies market surveillance authorities and ensures uninterrupted market access.

The EU's War on Greenwashing

For years, the European Union asked corporations nicely to be honest about their environmental impact. They introduced voluntary guidelines and encouraged self-regulation. But when the European Commission conducted a massive sweep of the market, the results were disastrous: over 50% of environmental claims on products were vague, misleading, or completely unfounded.

The market was broken. Companies spending millions to truly decarbonize their supply chains were being out-competed by fast-fashion brands slapping a fake "Green Choice" sticker on heavily polluting products.

In response, the EU launched a regulatory war on greenwashing, culminating in two massive pieces of legislation: The Empowering Consumers for the Green Transition (ECGT) Directive and the Green Claims Directive (GCD).