Timber traceability has evolved from a voluntary sustainability initiative to a legal requirement across the European market. The EU Deforestation Regulation (EUDR), building on the earlier EU Timber Regulation (EUTR), demands that every piece of timber entering the European market can be traced to its forest of origin with documented evidence of legal and deforestation-free harvesting.
For timber dealers, contractors, and specifiers participating in construction tenders, demonstrating robust traceability is no longer a differentiator — it is a prerequisite. This guide provides practical guidance on meeting due diligence requirements, maintaining compliant documentation systems, and preparing for the audits that verify compliance.
The Regulatory Landscape
Evolution of Timber Legality Requirements
| Year | Regulation | Key Requirement | Scope |
|---|---|---|---|
| 2003 | EU FLEGT Action Plan | Voluntary Partnership Agreements with producer countries | EU imports from VPA countries |
| 2010 | US Lacey Act Amendment | Prohibition on illegally sourced timber | All US timber trade |
| 2013 | EU Timber Regulation (EUTR) | Due diligence for first placers on EU market | All timber entering EU |
| 2022 | UK Timber Regulation | Post-Brexit continuation of EUTR | UK market |
| 2025 | EU Deforestation Regulation (EUDR) | Deforestation-free + geolocation + enhanced due diligence | All timber and derived products in EU |
EUDR: The New Standard
The EUDR represents a step-change in traceability requirements:
| EUTR (Previous) | EUDR (Current) |
|---|---|
| Legal harvesting only | Legal AND deforestation-free |
| Country of origin sufficient | Geolocation (GPS coordinates) required |
| Risk assessment | Risk assessment + mitigation + monitoring |
| No specific cut-off date | Deforestation-free after 31 December 2020 |
| Operators only | Operators AND large traders |
| No central reporting | Due diligence statements to EU information system |
| Penalties varied by member state | Harmonised penalties (up to 4% of turnover) |
Products Covered by EUDR
| Product Category | HS Codes | Examples |
|---|---|---|
| Wood in the rough | 4403 | Logs, roundwood |
| Sawn timber | 4407 | Boards, planks, beams |
| Veneer and plywood | 4408, 4412 | Decorative veneer, structural plywood |
| Particle board and fibreboard | 4410, 4411 | Chipboard, MDF, OSB |
| Wood charcoal | 4402 | Charcoal products |
| Pulp and paper | 47xx, 48xx | All paper and packaging |
| Printed matter | 49xx | Books, newspapers |
| Furniture | 9403 | Wooden furniture |
Key point: The regulation covers not just raw timber but ALL derived products. A timber dealer selling C24 structural timber, glulam beams, plywood, and MDF must have traceability for all of these products.
The Due Diligence System
Three Pillars of Due Diligence
1. Information Gathering
For each product/consignment, collect:
| Information Required | Source | Format |
|---|---|---|
| Product description (species, HS code) | Supplier invoice/specification | Text + scientific name |
| Country of production | Supplier declaration | Country name |
| Geolocation of harvest | Supplier/forest manager | GPS coordinates (lat/long) |
| Quantity and volume | Delivery note/invoice | m³, tonnes, or pieces |
| Supplier identity | Business records | Name, address, registration |
| Compliance documentation | Supplier | Certificates, permits, licences |
| Date of harvest | Supplier/forest manager | Date or date range |
2. Risk Assessment
Evaluate the risk that the timber is non-compliant:
| Risk Factor | Low Risk Indicators | High Risk Indicators |
|---|---|---|
| Country of origin | EU/EEA, low corruption index | High deforestation rate, weak governance |
| Certification | FSC/PEFC certified, valid CoC | No certification, expired certificates |
| Species | Common plantation species | CITES-listed, high-value tropical |
| Supplier history | Long relationship, no issues | New supplier, limited information |
| Complexity of supply chain | Direct from sawmill | Multiple intermediaries, mixed origins |
| Geolocation data | Precise coordinates provided | Vague or missing location data |
| Satellite verification | No deforestation detected | Forest loss detected in area |
Risk classification:
| Risk Level | Action Required |
|---|---|
| Negligible | Proceed — document assessment |
| Low | Proceed with standard monitoring |
| Medium | Additional verification required before proceeding |
| High | Do not proceed until risk is mitigated to acceptable level |
3. Risk Mitigation
For medium or high-risk assessments:
| Mitigation Measure | Application |
|---|---|
| Request additional documentation | Harvest permits, transport documents, export licences |
| Independent verification | Third-party audit of supplier, field inspection |
| Satellite imagery check | Verify no deforestation in stated harvest area |
| Alternative sourcing | Switch to certified/low-risk supplier |
| Reduced volumes | Limit exposure while verification proceeds |
| Enhanced monitoring | Increased frequency of checks and audits |
Documentation Chain
The Paper Trail
Every timber transaction should generate and maintain:
| Document | Created By | Contains | Retention |
|---|---|---|---|
| Purchase order | Buyer | Species, grade, quantity, origin requirement | 5 years |
| Order confirmation | Supplier | Confirmed specification, origin, certification | 5 years |
| Delivery note | Supplier/carrier | Quantities, species, CoC reference, batch ID | 5 years |
| Invoice | Supplier | Financial record, product description | 7 years (tax) |
| CoC certificate | Certification body | Supplier's valid certification scope | Current + 5 years |
| Due diligence statement | Operator | EUDR compliance declaration | 5 years |
| Geolocation data | Forest manager/supplier | GPS coordinates of harvest area | 5 years |
| Risk assessment | Buyer (operator/trader) | Documented risk evaluation | 5 years |
Linking Documents
The traceability chain must be unbroken:
Forest (GPS coordinates) → Harvest permit → Transport document →
Sawmill intake record → Production batch → Sales invoice →
Delivery note → Dealer intake record → Customer sale →
Site delivery note → Building record
Each link must reference the previous one. If any link is broken (missing document, unverifiable claim), traceability fails and the product cannot be demonstrated as compliant.
Practical Record-Keeping
For each incoming delivery, record:
- Date received
- Supplier name and CoC certificate number
- Species (common AND scientific name)
- Product description (dimensions, grade, treatment)
- Quantity (m³ and/or pieces)
- Country of origin
- Geolocation reference (if available from supplier)
- Certification claim (FSC 100%, FSC Mix, PEFC, none)
- EUDR due diligence statement reference (from supplier)
- Delivery note number
- Invoice number
- Storage location in yard
For each outgoing sale, record:
- Date dispatched
- Customer name and address
- Product description (matching intake record)
- Quantity
- Certification claim passed to customer
- Delivery note number
- Invoice number
- Link to intake record (batch/lot traceability)
Chain-of-Custody Certification
FSC Chain of Custody
FSC certification provides a robust traceability framework:
| Element | Requirement |
|---|---|
| Annual audit | Third-party audit of CoC system |
| Transaction certificates | Document-level verification for each sale |
| Credit system | Volume accounting for mixed inputs |
| Percentage system | Minimum certified content per product |
| Transfer system | 1:1 matching of input to output |
| Due diligence | Risk assessment for controlled wood inputs |
FSC claims hierarchy:
- FSC 100%: All input from FSC-certified forests
- FSC Mix: Minimum 70% from FSC-certified or controlled sources
- FSC Recycled: Minimum 70% from post-consumer recycled sources
- FSC Controlled Wood: Not from unacceptable sources (but not certified)
PEFC Chain of Custody
PEFC operates a similar but distinct system:
| Element | Requirement |
|---|---|
| Annual audit | Third-party audit of CoC system |
| Percentage method | Volume credit accounting |
| Physical separation | Alternative to percentage method |
| Due diligence | For non-certified inputs |
| Logo use | Rules for product labelling |
Certification and EUDR Interaction
| Scenario | EUDR Compliance Status |
|---|---|
| FSC 100% from low-risk country | Simplified due diligence likely sufficient |
| FSC Mix from low-risk country | Standard due diligence required (non-certified portion) |
| PEFC certified from low-risk country | Simplified due diligence likely sufficient |
| Certified from high-risk country | Full due diligence required despite certification |
| Uncertified from any country | Full due diligence mandatory |
Tender Compliance
What Tender Documents Require
Construction tenders increasingly specify traceability requirements:
| Requirement Level | Typical Wording | Evidence Required |
|---|---|---|
| Basic | "All timber shall be legally sourced" | Supplier declaration, EUDR compliance |
| Standard | "FSC or PEFC certified timber required" | Valid CoC certificate, certified delivery notes |
| Enhanced | "100% FSC certified, with full traceability to forest of origin" | FSC 100% claim, transaction certificates, origin data |
| Maximum | "Full supply chain transparency with EPD and carbon data" | All above + EPD + embodied carbon calculation |
Responding to Tender Traceability Requirements
Documentation to include in tender submission:
- Company CoC certificate (FSC and/or PEFC) — current, valid, correct scope
- Sourcing policy — company policy on legal and sustainable timber
- Due diligence procedure — summary of your EUDR compliance system
- Supply chain map — showing typical supply routes for specified products
- Supplier list — key suppliers with their certification status
- Non-conformance procedure — how you handle traceability failures
- Training records — evidence that staff understand traceability requirements
Common Tender Pitfalls
| Pitfall | Consequence | Prevention |
|---|---|---|
| Claiming certification you don't hold | Tender disqualification, reputational damage | Verify certificate scope covers tendered products |
| Promising 100% certified when supply is mixed | Contractual breach, penalties | Be honest about achievable certification levels |
| Outdated certificates in submission | Rejection, credibility loss | Check validity dates before submitting |
| No system for project-specific reporting | Cannot demonstrate compliance during contract | Establish reporting capability before tendering |
| Assuming supplier compliance without verification | Liability if supplier is non-compliant | Verify supplier certificates independently |
Digital Traceability Tools
System Requirements
A fit-for-purpose traceability system should provide:
| Function | Requirement | Benefit |
|---|---|---|
| Intake recording | Capture all required data at goods receipt | Complete records from day one |
| Batch/lot tracking | Link output sales to input deliveries | End-to-end traceability |
| Certificate management | Track supplier certificate validity, alert on expiry | Prevent compliance gaps |
| Risk assessment | Structured risk evaluation workflow | Consistent, documented due diligence |
| Reporting | Generate compliance reports per project/customer | Tender and audit support |
| Audit trail | Immutable record of all changes | Audit readiness |
| Integration | Connect to purchasing, sales, stock systems | Reduce double-entry, improve accuracy |
Technology Options
| Solution | Cost Range | Best For | Limitations |
|---|---|---|---|
| Spreadsheet (Excel/Sheets) | Free | <50 transactions/month | Manual, error-prone, no audit trail |
| Dedicated traceability platform | €200–500/month | 50–500 transactions/month | May not integrate with ERP |
| ERP module (SAP, Dynamics) | €500–2,000/month | >500 transactions/month | Complex implementation |
| Blockchain platform | €300–1,000/month | Multi-party supply chains | Early stage, limited adoption |
| Custom development | €20,000–100,000 | Unique requirements | Maintenance burden |
Implementation Roadmap
| Phase | Duration | Activities |
|---|---|---|
| 1. Assessment | 2–4 weeks | Map current processes, identify gaps, define requirements |
| 2. Selection | 2–4 weeks | Evaluate options, select system, negotiate contract |
| 3. Configuration | 4–8 weeks | Set up system, configure workflows, import data |
| 4. Training | 2–4 weeks | Train all users, create procedures, test scenarios |
| 5. Parallel running | 4–8 weeks | Run new system alongside existing, verify accuracy |
| 6. Go-live | 1 week | Switch to new system, decommission old |
| 7. Optimisation | Ongoing | Refine processes, address issues, extend capability |
Audit Preparation
Types of Audit
| Audit Type | Conducted By | Frequency | Focus |
|---|---|---|---|
| FSC/PEFC CoC audit | Accredited certification body | Annual | CoC system compliance |
| EUDR inspection | National competent authority | Risk-based (random or triggered) | Due diligence compliance |
| Customer audit | Client/main contractor | Per project or annual | Contract compliance |
| Internal audit | Own staff or consultant | Quarterly recommended | System effectiveness |
| Supplier audit | You auditing your suppliers | Annual for key suppliers | Supplier compliance |
Audit Readiness Checklist
Documentation:
- All transaction records complete for audit period
- Supplier certificates current and filed
- Due diligence assessments documented for all consignments
- Risk mitigation actions recorded where applicable
- EUDR due diligence statements filed
- Training records for all relevant staff
- Procedure documents current and accessible
- Previous audit findings closed out
System:
- Traceability system can produce end-to-end trace for any product
- Stock records match physical stock (spot-check 10 items)
- Certified and non-certified stock physically separated
- Claims on sales documents match system records
- Volume reconciliation balances (inputs ≥ outputs + waste)
Staff:
- All relevant staff briefed on audit process
- Staff can explain their role in the traceability system
- Key contact available throughout audit period
- Access to all areas and systems arranged for auditor
Common Audit Findings
| Finding | Severity | Corrective Action |
|---|---|---|
| Missing delivery notes | Minor | Obtain from supplier, improve intake process |
| Expired supplier certificate | Major | Verify renewal, suspend purchases until confirmed |
| Certified/non-certified stock mixed | Major | Physical separation, stock reconciliation |
| No risk assessment for new supplier | Major | Conduct assessment, document, implement monitoring |
| Species not identified (scientific name) | Minor | Update records, train intake staff |
| Volume reconciliation imbalance | Minor/Major | Investigate cause, adjust records, improve controls |
| No evidence of management review | Minor | Schedule and document regular reviews |
| Staff unaware of procedures | Minor | Retrain, improve communication |
Best Practice Recommendations
For Timber Dealers
- Invest in systems early — retrofitting traceability is harder than building it in
- Know your suppliers — visit key suppliers, understand their sourcing
- Maintain certification — FSC/PEFC CoC is the foundation of credible traceability
- Document everything — if it's not recorded, it didn't happen (for audit purposes)
- Train all staff — everyone handling timber must understand their traceability role
- Review regularly — quarterly management review of traceability system effectiveness
- Prepare for EUDR — don't wait for enforcement; build compliance now
- Communicate to customers — make your traceability capability a selling point
For Contractors/Specifiers
- Specify clearly — state exactly what traceability evidence you require in tenders
- Verify claims — check supplier certificates independently (FSC/PEFC databases)
- Request project-specific reporting — ask for traceability reports per delivery
- Include in contracts — make traceability a contractual obligation with consequences
- Audit suppliers — periodic verification that systems work in practice
- Plan ahead — certified/traceable timber may have longer lead times; allow for this
Industry Collaboration and Information Sharing
Trade Associations and Resources
| Organisation | Role | Resources for Dealers |
|---|---|---|
| Timber Trade Federation (TTF) | UK trade body | Due diligence guidance, training, legal updates |
| European Timber Trade Federation (ETTF) | European coordination | EUDR implementation guidance, market data |
| FSC International | Certification governance | Standards, trademark guidance, dispute resolution |
| PEFC International | Certification governance | Standards, chain-of-custody guidance |
| FLEGT Independent Market Monitor | Market intelligence | Trade flow data, legality verification |
| NEPCon/Preferred by Nature | Verification services | Risk assessments, sourcing hub, training |
Collaborative Due Diligence
Individual dealers can reduce due diligence costs through collaboration:
- Shared risk assessments: Industry associations publish country and species risk assessments that individual companies can reference rather than duplicating
- Supplier audits: Multiple buyers can share the cost of auditing a common supplier
- Information platforms: Online databases of verified suppliers and certified sources
- Group certification: Small dealers can join group CoC certificates, sharing audit costs
- Industry guidance: Sector-specific interpretation of regulations, reducing legal costs
Emerging Technologies for Traceability
| Technology | Application | Maturity | Cost |
|---|---|---|---|
| DNA testing | Species verification, origin confirmation | Commercial | €50–200/test |
| Isotope analysis | Geographic origin verification | Commercial | €100–300/test |
| Satellite monitoring | Deforestation detection, harvest verification | Mature | Included in certification |
| Blockchain | Immutable transaction records | Early commercial | €5–20/transaction |
| RFID/NFC tags | Physical product tracking through supply chain | Mature | €0.50–2/tag |
| AI image recognition | Species identification from wood surface | Emerging | Variable |
| Timber fingerprinting | Matching sawn timber to specific logs | Research | Not yet commercial |
DNA and isotope testing are increasingly used by enforcement authorities to verify claims. Dealers should be aware that their products may be tested — ensuring accurate species and origin claims is essential.
Building a Traceability Culture
Traceability is not just a compliance exercise — it is a business capability that creates value:
Internal benefits:
- Faster response to customer queries about origin and certification
- Reduced risk of non-compliance penalties (up to 4% of turnover under EUDR)
- Better stock management through improved data quality
- Competitive advantage in specification-driven markets
- Foundation for carbon reporting and EPD provision
External benefits:
- Customer confidence in sourcing claims
- Specification by architects and engineers who require traceability
- Access to public sector contracts (mandatory sustainability requirements)
- Premium pricing for verified, traceable products
- Brand reputation as a responsible supplier
Cultural elements:
- Leadership commitment (visible support from directors/owners)
- Staff training (everyone understands why traceability matters)
- Continuous improvement (regular review and enhancement of systems)
- Transparency (willingness to share information with customers and auditors)
- Investment (adequate resources for systems, staff, and verification)
Future Outlook
Regulatory Direction (2025–2030)
| Development | Timeline | Impact on Dealers |
|---|---|---|
| EUDR full enforcement | 2025–2026 | Mandatory compliance, penalties for non-compliance |
| Digital product passports (EU) | 2027–2028 | Product-level traceability data in digital format |
| UK Forest Risk Commodities regulation | 2025–2026 | UK equivalent of EUDR for post-Brexit market |
| Enhanced EPD requirements | 2026–2028 | More detailed origin and processing data in EPDs |
| Carbon border adjustment mechanism | 2026–2030 | May affect pricing of imported timber |
| Biodiversity reporting | 2027–2030 | Supply chain biodiversity impact assessment |
Preparing for the Future
Dealers who invest in traceability now will be well-positioned for future requirements:
- Digital-first: Build systems that can accommodate additional data fields as regulations evolve
- Supplier relationships: Work with suppliers who are investing in their own traceability
- Data quality: Ensure current data is accurate and complete — future requirements will build on this foundation
- Staff capability: Develop in-house expertise rather than relying entirely on external consultants
- Customer communication: Make traceability a visible part of your value proposition
- Industry engagement: Participate in trade association working groups shaping future standards
Related Resources
- FSC vs PEFC Certification — certification scheme comparison
- Sustainable Forestry in Scandinavia — Nordic supply chain
- Tropical Timber Sourcing — high-risk origin management
- EPD for Timber — environmental product declarations
- Embodied Carbon in Timber — carbon reporting
- Timber Tender Requirements — tender documentation
- C24 Structural Construction Timber — traceable structural product
- BSH Glued Laminated Beams — certified engineered products