An independent register of commodity origin and due diligence
EUDR.help

Risk assessment and mitigation

How to Perform an EUDR Risk Assessment

Build a product-specific EUDR risk assessment, test evidence, investigate contradictions and document the decision before release.

Published 16 October 2026 · Reviewed 16 October 2026 · Independent educational guidance

Filed under EUDR Risk Assessment and Mitigation Explained

Define the decision before scoring anything

An EUDR risk assessment asks whether the particular relevant product may fail the deforestation-free or legality conditions in Article 3. It is not a general sustainability rating of a supplier. Article 10 requires an operator undertaking full due diligence to verify and analyse the information collected under Article 9 before reaching a conclusion about the product.

Begin by identifying the goods covered by the decision: product description, quantity, production period, production origins and the chain connecting those origins to the goods. A purchase order can contain several distinct origin sets. Conversely, one assessed origin set may support several shipments if the evidence actually covers them and no relevant circumstances change.

The broader risk assessment and mitigation framework explains the relationship between assessment and corrective action. Here the practical aim is to create a decision file that another competent reviewer can follow, including why information was accepted, what remained uncertain and whether the goods could proceed.

Build an evidence map

Arrange the Article 9 evidence around propositions that need support. One proposition concerns the actual production location. Another concerns the land history after the regulatory cutoff. Others concern applicable production-country law and whether the goods really derive from those locations. Identify the documents, imagery, records or corroborating sources supporting each proposition.

Then assess reliability rather than counting attachments. Check who produced each record, its date, geographical coverage, validity and connection with other information. A genuine permit may concern a neighbouring parcel. A recent satellite image may show present tree cover without resolving the relevant historical conversion date. Both limitations matter even when the files look professional.

Preserve discrepancies in a working issues log. For example, if a farm polygon covers less area than the cultivation area stated in a lease, request an explanation and supporting material. Do not silently choose whichever figure produces the easier conclusion. An inconsistency can be a clerical error, but that explanation itself needs an evidential basis.

Apply the criteria together

Use Article 10 as a structured set of questions about country conditions, forests, Indigenous peoples, deforestation, evidence quality, governance and the supply chain. Include relevant concerns, previous non-compliance, expert-group conclusions and complementary certification information. A factor can be immaterial in a particular case, but the reason should be recorded rather than hidden by an empty box.

Consider interactions. A long chain is not automatically unacceptable; a long chain with unrecorded aggregation may make plot linkage unreliable. A land certificate may be more difficult to rely on where credible falsification concerns affect the issuing office. Country context helps decide which records require corroboration, while product-specific findings determine whether the concern actually affects the goods.

A numerical dashboard can organise work, but it cannot average away a material unresolved issue. A favourable score for supplier responsiveness does not neutralise a credible claim that the production parcel was cleared after the cutoff. Read the assessment criteria alongside the individual evidence map.

Investigate, mitigate and reassess

Where the assessment reveals more than negligible risk, identify the exact question that prevents release. Article 11 measures can include additional information, independent surveys or audits and other measures addressing the information requirements. Choose an action capable of resolving that question. A generic supplier training session cannot establish the historical land cover of a disputed parcel.

Consider a coffee lot with complete producer names but overlapping farm boundaries. The response could involve checking cadastral information, contacting the cooperative to reconcile identifiers and commissioning a competent mapping review. If the correction reveals additional supplying plots, assess those plots too. The task is not complete merely because a replacement spreadsheet has been received.

Reassess the evidence after the action and state what changed. Distinguish a measure planned for next harvest from evidence resolving the current goods. If an affected source cannot be reliably separated from the lot, improvements for future purchases do not make the current mixture compliant. Products with non-negligible unresolved risk must not be placed on the market or exported.

Record a defensible outcome

Article 2(26) ties negligible risk to a full consideration of general and product-specific information and necessary mitigation, resulting in no cause for concern about the substantive conditions. This is a reasoned evidential conclusion. It does not demand a claim of absolute certainty, nor does a software green status establish it without the supporting assessment.

Date the conclusion, identify the reviewer, define the covered goods and retain the sources and reasoning. Article 10 assessments must be documented, reviewed at least annually and made available to competent authorities on request. Link reassessment to changed origins, disputed documents and new concerns, rather than relying only on the annual calendar.

Check the route and actor first: qualifying low-risk sourcing can fall under Article 13, while downstream operators and traders have distinct Article 5 duties. Article 13 still requires the complexity and circumvention or mixing assessment; relevant adverse information triggers full Articles 10 and 11 duties and immediate communication to the competent authority.

Primary sources on the record

Articles 2(26), 3, 4, 5 and 9 to 13. This entry was checked against the consolidated text dated 18 September 2026. Consolidated texts are documentation tools; the authentic acts are those published in the Official Journal.

Check the current sources and the guidance of the relevant competent authority for your situation. This page is not legal advice or a compliance determination.