Skip to content

Compliance

How to Verify a Supplier Certificate

Every manufacturer relies on supplier certificates. A Global Recycled Standard (GRS) certificate proves your recycled content. An FSC certificate validates your wood sourcing. An Oeko-Tex certificate confirms your textiles are free of harmful substances. An ISO 14001 certificate demonstrates your supplier's environmental management credentials.

But here is the uncomfortable truth: not every certificate your supplier sends you is genuine. Certificates can be expired, forged, altered, or simply issued to a different legal entity than the one selling you materials. If your compliance audit file contains a fraudulent certificate, the liability falls on you — not on the supplier who sent it. Market surveillance authorities, customs agencies, and retail buyers hold the importer or manufacturer responsible for verifying their supply chain evidence.

This guide shows you how to independently verify the authenticity of the most common supplier certificates, spot the red flags, and build an audit file that withstands scrutiny.

Circularity Declaration for Product Design

Most manufacturers now understand that recycled content is a compliance metric. But the European Union's vision for product sustainability extends far beyond the percentage of recycled plastic in your packaging. The EU Circular Economy Action Plan (CEAP) and the Ecodesign for Sustainable Products Regulation (ESPR) are pushing companies toward a comprehensive approach known as circularity — and they are creating a new documentation requirement to prove it: the Circularity Declaration.

A Circularity Declaration is a structured document that demonstrates your product has been designed and manufactured for the circular economy. It covers material selection, design-for-disassembly, repairability, spare parts availability, material recovery rates, and end-of-life processing instructions. This is not a marketing claim. Under ESPR, specific circularity metrics will become mandatory for product categories covered by Digital Product Passports.

The Compliance Maturity Model

Every business has a compliance capability. The question is whether it is adequate for the world the business is about to enter — a world of mandatory Digital Product Passports, real-time customs data verification, automated retailer compliance checks, and supply chain due diligence obligations that extend down to Tier 4 suppliers.

Most SMEs are operating at a compliance maturity level that was sufficient five years ago and is now dangerously inadequate. The gap between where they are and where they need to be is growing — not because they are getting worse, but because the bar is rising faster than they are.

This article presents a Compliance Maturity Model — a framework to assess your current capabilities and build a roadmap to where you need to go.

Australia: Illegal Logging & Modern Slavery Laws

Australia boasts some of the world's most rigorous biosecurity and environmental import laws. For MSMEs in the furniture, packaging, paper, or construction materials sectors, importing timber products into the country is a regulatory minefield.

Under the Illegal Logging Prohibition Act 2012 (and the updated 2024 Rules), the Australian government places the absolute burden of proof on the importer to ensure that their timber was legally harvested. Ignorance of your supply chain is a criminal offense.

GDPR Compliance for Manufacturers: A Practical Guide

In June 2026, the UK's Information Commissioner's Office announced a formal probe into how smart TV manufacturers use consumer data and published final guidance on IoT products, warning that most IoT data processing "is likely to result in a high risk." The same month, Italy's antitrust authority opened proceedings against Vorwerk over the shutdown of cloud services for Neato robot vacuums — a landmark case examining whether manufacturers can devalue connected products through service termination.

Product manufacturers consistently tell us GDPR is a "tech company problem." Then we show them the connected product they're shipping — the one collecting sensor data and communicating with a smartphone app — and it clicks.

If your company places products on the EU market, you are almost certainly processing personal data in ways that trigger the General Data Protection Regulation (GDPR). Connected devices, supplier records, employee data — all of it counts. On the Sustalium platform, we handle GDPR declarations for IoT manufacturers, industrial equipment makers, and consumer goods companies. Here is what actually applies to product businesses.

How to Read a Safety Data Sheet (SDS/GHS)

Every chemical product that enters the supply chain must be accompanied by a Safety Data Sheet. If you manufacture, import, ship, store, or use chemicals — even indirectly, as a component in a finished product — you have held an SDS in your hands. And if you are like most people, you have skimmed the first page and filed the rest.

An SDS is not compliance theatre. It is a structured, legally mandated document designed to communicate hazard information quickly and consistently across every language and jurisdiction. Knowing how to read one — all 16 sections — can prevent a warehouse fire, a customs detention, or a worker injury.

Here is how to read every section of an SDS, with the Globally Harmonized System (GHS) as the standard reference.

Sustainability as a Market Access Strategy

There is a moment in the life of every growing SME manufacturer when they realize the game has changed. They submit a bid for a public tender — competitive pricing, strong references, better lead times than the incumbent — and lose. The feedback: "Insufficient sustainability credentials." They apply for shelf space with a major retailer. The buyer reviews their product catalog and asks for their carbon footprint data, their recycled content verification, their supplier code of conduct. They don't have it. The shelf space goes to a competitor.

Sustainability isn't just about being a better corporate citizen. It is about market access. And the doors it opens — or closes — are bigger than most SMEs realize.

Toy Safety Directive vs CPC: EU & US Compared

Toys are one of the most heavily regulated consumer product categories in the world — and for good reason. A defective toy can cause choking, lacerations, chemical poisoning, or strangulation in a matter of seconds. Because the end-user is a child, regulators apply a zero-tolerance approach to non-compliance.

If you manufacture, import, or sell toys in the European Union or the United States, you must navigate two distinct but equally demanding regulatory regimes: the EU Toy Safety Directive (2009/48/EC) and the US Consumer Product Safety Act (CPSIA), which mandates a Children's Product Certificate (CPC). Understanding the differences — and producing compliant documentation for both markets — is essential for uninterrupted market access.

FCC Part 15 Declaration of Conformity: US Guide

In July 2026, the FCC fined eight companies $25,000 each for failing to respond to inquiries about imported wireless devices. The same month, an FCC enforcement notice detailed how a modified handheld radio caused harmful interference to a county's 911 emergency communications channel. Non-compliance with Part 15 is not theoretical — the FCC investigates and fines regularly.

A company recently shipped 5,000 units of a smart home device to a US distributor. The shipment was held at customs because their FCC Supplier's Declaration of Conformity referenced the wrong test standard. That mistake cost them two weeks and $12,000 in storage fees.

FCC Part 15 is mandatory federal law enforced by the FCC, and it applies to virtually every product containing digital circuitry — from a simple microcontroller to the most advanced wireless device. We process FCC declarations for hundreds of electronics clients on the Sustalium platform, and the most common mistakes are almost always avoidable. Here is exactly what you need to know.

What Is a Declaration of Conformity?

Every product that enters the European market under a CE marking directive must be accompanied by a Declaration of Conformity. It is the single most important compliance document a manufacturer signs — and yet most first-time importers and SME manufacturers cannot answer three basic questions: what it is, what it must contain, and who is legally responsible for signing it.

This guide answers all three.