Products, documents and risk assessments

A due diligence statement is one line in the Information System. Behind it, the regulation expects the operator to hold the information of Article 9, to have assessed the risk against the criteria of Article 10(2), to have mitigated what was not negligible, and to keep all of it for five years. This is where that record lives.

Products

Each product you place on the market or export (its commodity, HS code, trade name and, for wood, the species), linked to the suppliers and plot files it comes from. Its plots are always the current version of those files, and the statement form fills a commodity line from a product in one click.

Documents

Land titles, permits, certificates, supplier declarations, invoices and audit reports, uploaded by you or sent by the supplier through their link. Each has its kind, number, issuer and dates; documents that have expired, or expire within 60 days, are flagged on the dashboard and on every product that relies on them. Files are encrypted before they are stored, like saved plot files.

Supplier declarations

On Team, suppliers answer a short declaration through the same link they send plot files with: their company details, and whether production followed each heading of "relevant legislation of the country of production", land use rights, environmental protection, forest rules, third parties' rights, labour and human rights, free, prior and informed consent, tax, trade and customs. Anything other than "yes" is flagged for follow-up. On Starter you record declarations received on paper.

Risk assessments

One assessment per product, criterion by criterion of Article 10(2), with what the app already knows next to each: the country's classification under the Commission's list of low- and high-risk countries, plot errors, documents and their validity, declarations, overlaps between suppliers. You rate each criterion, say how you checked it, record the mitigation, and conclude. Concluding records your name and the time, freezes the assessment with those facts, sets a review date a year on, and gives you a PDF record.

Simplified due diligence (Article 13) is offered only when every country of production is low risk, and still asks you to assess supply-chain complexity and the risk of mixing.

Readiness

Every product shows what it still needs before you file: plots without errors, the country of production, supplier declarations, current legality evidence, documents in date, and a risk assessment that is concluded and not due for review.

The app records your due diligence; it does not decide whether a product complies. The conclusion is yours, as the regulation makes it.