EUDR Explained: What the EU Deforestation Regulation Means for Coffee and Cacao Buyers

After years of debate, the EU Deforestation Regulation landed as the most operationally demanding trade compliance requirement the agricultural commodity sector has faced in decades. For buyers of Indonesian coffee and cacao, it is no longer sufficient to hold an organic or Rainforest Alliance certificate, pay a premium price, or work with a reputable exporter. The regulation demands verifiable, plot-level evidence that the land where each batch was grown had not been deforested after a hard cut-off date.

This article explains the EUDR's scope, the specific data buyers must collect before placing an order, who bears legal responsibility, the risk-benchmarking system, and the current compliance timeline — so that importers, roasters, and private-label manufacturers can assess what they need to ask of their supply partners today.

Which commodities and products does EUDR cover?

The EUDR applies to seven commodities: cattle, cocoa, coffee, palm oil, soya, wood, and rubber. Each commodity also captures a broad range of derived products defined by their Combined Nomenclature (CN) codes. For coffee and cacao buyers specifically, coverage extends well beyond raw green beans or unprocessed cacao pods:

• Coffee: green coffee, roasted coffee, soluble (instant) coffee, coffee husks, coffee substitutes containing coffee — covering HS codes under Chapter 09 and selected headings in Chapter 21.
• Cocoa/Cacao: cacao beans, cacao paste, cacao butter, cacao powder, cocoa preparations, and chocolate products above a threshold cocoa content — drawn from HS Chapters 18 and selected headings in 19.

Products manufactured using covered commodities as an ingredient — including compound chocolate, coffee-flavoured spirits, or cosmetics containing cocoa butter — fall within scope if the commodity is present. If you are a European manufacturer sourcing cacao butter or cocoa mass as an input, you are an operator under the regulation, not merely a downstream buyer.

Who is the "operator" and who is a "trader"?

The regulation assigns compliance obligations primarily to operators: any natural or legal person who places relevant products on the EU market or exports them from the EU for the first time. In practice, this means the EU-based importer is typically the operator — even if the physical logistics are handled by a third-party freight company.

A trader is any person in the supply chain who, in the course of commercial activity, makes relevant products available on the market but is not the first importer. Traders who are not micro or small enterprises must exercise simplified due diligence: they must verify that a valid DDS reference number exists for the goods and keep records. Micro and small enterprises (fewer than 50 employees, annual turnover below EUR 10 million) acting only as traders have lighter obligations, but they cannot claim ignorance if the DDS does not exist.

The deforestation cut-off: 31 December 2020

The single most critical factual point in the regulation is its temporal boundary. Coffee and cacao are only EUDR-compliant if the land on which they were produced was not subject to deforestation after 31 December 2020. Land that was cleared before that date — even if recently — is outside the scope of the deforestation criterion for EUDR purposes (though it may still be subject to national laws or other certification requirements).

"Deforestation" under the regulation means the conversion of forest to agricultural use, whether induced by humans or not. "Forest degradation" — a related concept covering significant structural change to forest — is also within scope for wood but applies more limitedly to agricultural commodities; buyers should nonetheless be alert to how sourcing regions are classified in national forest maps.

For Indonesian coffee and cacao grown in long-established smallholder gardens — many of which have been cultivated for generations — the cut-off date is generally favourable. However, the burden of proof lies with the operator; it is not sufficient to assume that a plot predates 2020. You need documentation.

Geolocation and polygon data: the practical core of compliance

The EUDR mandates that operators collect geolocation data — GPS coordinates — for every plot of land where the relevant commodity was produced. The format depends on plot size:

• Plots below 4 hectares: a single latitude/longitude point (WGS 84 coordinate system) is accepted.
• Plots 4 hectares and above: a full polygon — a sequence of at least four coordinate points tracing the boundary — is required.

This data must be aggregated across the entire supply chain back to the level of individual farms or smallholder plots. For Indonesian coffee, which is predominantly grown by smallholders on plots of 0.5–2 ha, a single GPS point per farm is technically sufficient — but the logistical challenge of collecting those points from potentially thousands of smallholders feeding a single cooperative or wet mill is substantial.

The geolocation data is used to cross-reference plots against satellite-derived forest cover maps, principally Global Forest Watch (GFW) data and national land-use classifications. The EU Commission's information system (the EUDR Registry, available through the EU Trade Single Window) will provide tooling to upload this data and generate a DDS reference number for each consignment.

The due-diligence statement (DDS)

Before placing goods on the EU market, the operator must submit a due-diligence statement through the EU's official information system. The DDS must contain:

1. Description of the product (CN code, quantity, country of production).
2. Geolocation data for all plots of production.
3. Confirmation that the operator has carried out due diligence and found no more than a negligible risk of non-compliance.
4. Supporting documentation: supplier identity, dates of production, chain-of-custody records.

Once submitted, the system generates a DDS reference number (also described as a "reference code"). This number must accompany the goods and be passed to all subsequent traders in the EU supply chain. Customs authorities will, once implementation is fully operational, check for a valid DDS reference at the point of EU import clearance.

Risk classification: country benchmarking

The EUDR establishes a three-tier country benchmarking system that determines the intensity of due-diligence checks an operator must perform:

As of mid-2026, the European Commission has not yet finalised the country classification list; the benchmarking methodology was published but individual country assignments remain pending. Indonesia is currently treated at the standard risk tier by default until a formal classification is issued. Operators sourcing from Indonesia should assume the full standard due-diligence process applies and collect complete geolocation data accordingly — it is far safer to over-comply now than to retrofit data collection once classifications are confirmed.

Compliance timeline: large versus micro and small operators

The original application date was 30 December 2024. Following intense lobbying from producer countries and industry, the Commission issued a delegated regulation extending the deadline:

• Large companies (those that do not qualify as micro or small enterprises under EU Recommendation 2003/361/EC): compliance required from 30 December 2025.
• Micro and small enterprises (fewer than 50 staff, annual turnover or balance sheet below EUR 10 million): compliance required from 30 June 2026.

These deadlines apply to placing products on the EU market, not to when contracts are signed. Practically, operators should work backwards: collecting geolocation data from an Indonesian supply chain can take three to six months if traceability systems are not yet in place. Buyers who have not yet started supply-chain mapping are already behind.

Penalties and enforcement

Member States are responsible for enforcement and must apply penalties that are effective, proportionate and dissuasive. The regulation specifies minimum penalty floors:

• Fines of at least 4% of total annual EU-wide turnover for the preceding financial year — with the fine scaled to actual environmental harm.
• Temporary exclusion from public procurement and access to public funding for up to 12 months.
• Confiscation of the non-compliant products and any revenue derived from them.
• Temporary prohibition from placing the relevant commodity on the EU market.

Enforcement procedures, competent authorities, and specific fine scales vary by Member State. Germany, the Netherlands, France, and Belgium — major coffee and cacao import hubs — are expected to implement active inspection regimes. Operators should not assume a grace period beyond the statutory deadlines.

What buyers must collect from their Indonesian suppliers

For importers sourcing coffee or cacao from Indonesia, the minimum documentation package to support a valid DDS should include:

1. Farm-level geolocation data — GPS coordinates (WGS 84) for each farmer or plot contributing to the lot, with polygon data for any plot of 4 ha or more. Data should be linked to the farmer's name or farm ID.
2. Land-status declaration — a signed statement (or supplier attestation) that the named plots were not converted from forest after 31 December 2020. Supporting evidence might include historical satellite imagery, national land registry entries, or land-use permits predating 2020.
3. Chain-of-custody records — lot tracking from farm-gate collection through processing (wet mill / dry mill / fermentation station), export warehouse, and shipment, including weights and dates at each stage.
4. Supplier identity documents — business registration, export licence number, and contact details for every intermediary in the chain.
5. Processing facility records — HACCP certificates, warehouse hygiene records, and pest-control logs for the facility handling the goods before export; these are required for EU food import compliance independently of EUDR but travel with the same documentation set.

Cakglo's supplier survey and pre-shipment inspection services are designed to support exactly this kind of traceability audit — verifying that the Indonesian supply partners we work with can provide credible farm-level data before shipment is arranged.

How EUDR interacts with existing certifications

A common question from buyers is whether Rainforest Alliance, UTZ, Fairtrade, or organic certification satisfies EUDR. It does not — at least not automatically. These certification schemes do not systematically collect or verify the precise GPS data required under the regulation, nor do they use the EUDR Registry system. They may, however, provide useful supplementary evidence of sustainable land management and can reduce the residual risk score in an operator's due-diligence assessment.

The Commission has indicated it will publish guidance on how existing certification systems can contribute to — but not replace — EUDR due diligence. Operators should monitor Commission implementing acts in this area, as recognised certification schemes may ultimately be granted a formal supporting role. Until then, treat certification as complementary, not sufficient.

Buyers sourcing Indonesian cacao alongside coffee should note that the same data-collection infrastructure can serve both commodities. Building a unified traceability programme covering all EUDR-relevant products in your Indonesian supply base is more cost-efficient than managing separate compliance tracks per commodity.

Frequently asked questions

Does EUDR apply to coffee roasted outside the EU and then imported as finished product?

Yes. Roasted coffee is explicitly listed within the EUDR's scope via the relevant CN codes in Chapter 09 (and Chapter 21 for soluble coffee). The regulation applies at the point of first placing on the EU market, regardless of where processing occurred. If you are an EU importer bringing in roasted coffee packaged in Indonesia or another third country, you are the operator and must file a DDS backed by geolocation data for the green beans used as input. The origin of roasting does not affect the obligation.

What happens if an Indonesian smallholder cannot provide GPS coordinates?

This is the central practical challenge of EUDR for origins dominated by smallholders. The regulation requires operators to make reasonable efforts to collect geolocation data and to assess whether any remaining gaps create more than a negligible risk. In practice, many cooperatives and exporters are now deploying mobile-based GPS collection tools (e.g., KoboCollect, USAID Geodata) during farm visits. If a supplier genuinely cannot provide plot-level coordinates, the operator must assess whether the risk can be mitigated through other means — such as corroborating satellite evidence — or whether that sourcing relationship cannot currently support a compliant DDS. Inability to collect data is not itself a defence against a compliance failure.

Is Indonesia classified as high-risk under EUDR, and will that change?

As of mid-2026, the European Commission has not published its finalised country-risk tier list. Indonesia currently falls under the standard-risk default, meaning full due-diligence applies but enhanced checks are not yet triggered. Indonesia has engaged actively with the EU on the benchmarking process and has argued for low-risk status in certain certified production zones. Buyers should monitor Commission implementing acts, as reclassification — upward or downward — would materially affect the due-diligence workload. Regardless of final classification, collecting complete geolocation data now is the prudent course; it satisfies standard-risk requirements and will exceed any low-risk threshold if reclassification occurs.

Conclusion

The EUDR is a structural shift in how agricultural commodities enter the EU — not a temporary administrative hurdle but a permanent change to import law with significant penalties for non-compliance. For buyers of Indonesian coffee and cacao, the practical work begins well before the first DDS is filed: it begins by ensuring your supply partners can provide auditable, farm-level geolocation data and credible land-history documentation. Cakglo's direct-from-origin model, German-managed quality oversight, and supplier traceability services are built to meet exactly this standard. To discuss how we can support your EUDR compliance documentation for Indonesian coffee, cacao, or other commodities in our range, visit our contact page or explore our supplier survey and inspection services.