EUDR enforcement begins for large and medium operators on 30 December 2026. SMEs follow on 30 June 2027. From early submissions through the EU Information System we already see two failure modes accounting for most rejections — and neither has anything to do with deforestation itself.
Failure mode 1 — Geolocation that doesn't resolve
EUDR requires plot-level geolocation for production above 4 hectares. We see suppliers submitting mill-level coordinates, group-of-concessions polygons, or — most commonly — geolocation files that technically validate but resolve to nonsense (centroids of provinces, coordinates 200km offshore, polygons with self-intersecting boundaries). All of these get bounced.
Failure mode 2 — Legality evidence that names the wrong entity
Legality documentation must name the producer of the lot, not the parent group, not the trader, not the mill. We routinely see permits and licences submitted in the name of a holding company whose subsidiary actually farmed the plot. EU competent authorities don't read past the mismatch.
30 Dec 2026
Large/medium operator deadline
30 Jun 2027
SME deadline
2
Failure modes accounting for >80% of rejections
12 weeks
Median delay per rejected submission
What readiness actually looks like
- Plot-level geolocation that round-trips through a GIS sanity check, not just JSON validation.
- Legality evidence indexed to the operating entity, not the parent group.
- Risk assessments dated within the same reporting period, not carried over from prior years.
- An internal due-diligence statement signed by a named officer, not a department.
"EUDR is not asking suppliers to prove they're sustainable. It's asking them to prove they have their data in order. Most of the rejections we see are the latter problem."
The deadline isn't far. The work is unglamorous — registry cleanup, plot mapping, evidence indexing. Start it now or start it after your first rejection. Either way, it's the same work.