EUDR Compliance for Timber Suppliers in Southeast Asia

The Deadline

The EU Deforestation Regulation applies from 30 December 2026 for large and medium operators, and 30 June 2027 for small and micro operators. After two postponements, that date is now fixed and close. If you supply timber, furniture, plywood, paper or other wood-based products into the European Union, your EU customers will need documentation from you well before their own deadline. In practice this is several months before. Most of the work falls on you, not on them. This page sets out what the regulation actually requires, what your buyers will ask for, and where existing PEFC or FSC certification helps — and where it does not.

Who	Applies from
Large and medium operators and traders	30 December 2026
Small and micro operators	30 June 2027

EUDR entered into force in June 2023 and was originally due to apply from December 2024. It has been postponed twice, most recently by the Council and Parliament in December 2025, alongside a package of simplifications. The Commission published its simplification review in May 2026.

One practical consequence of the delays: enforcement now begins in the same month for everyone large enough to matter, so there is no soft entry. EU buyers who intend to keep importing will be asking their suppliers for data during autumn 2026.

What EUDR compliance actually requires

The regulation asks the operator placing goods on the EU market to prove three things about every consignment: where the material was grown, that the land was not deforested after 31 December 2020, and that it was produced legally under the laws of the producing country.

To do that, they must run a due diligence system with three steps:

1. Collect information

Plot-level geolocation of where the material was grown, the supplier’s identity, the production date, and evidence of legal production.

Geolocation means GPS coordinates for each plot. For plots larger than 4 hectares, polygon coordinates mapping the full boundary are required. This applies regardless of which risk category the producing country sits in.

2. Assess risk

Evaluate the likelihood that the material is non-compliant, taking account of the country’s risk classification, the complexity of the supply chain, and any concerns raised.

3. Mitigate risk

Where risk is more than negligible, take steps to reduce it before proceeding — additional information, independent verification, supplier audits.

A Due Diligence Statement must then be submitted through the EU Information System (TRACES) before the product enters the EU market. Your buyer cannot file a compliant statement without plot-level geolocation from you. That single fact drives most of what follows.

What EUDR compliance means if you supply the EU from Southeast Asia

The regulation does not treat the region as a single bloc. Under the Commission’s country benchmarking system, in force since May 2025, Southeast Asian producers fall into three different tiers.

Only four countries worldwide are classified high risk: Belarus, Myanmar, North Korea and Russia.

This chart shows only the Southeast Asian countries whose classification we have verified against published EU sources. Cambodia, Brunei, the Philippines, Singapore and Timor-Leste are not shown as currently we cannot confirm their tier. Standard risk is the default for any country not named on the official low-risk or high-risk list, so an unlisted country is most likely standard.

If you export from Vietnam or Thailand (low risk)

Low risk means simplified due diligence, not exemption. This is the most common and most costly misreading of the regulation.

You still must collect the information — including plot-level geolocation — and your EU buyer must still submit a Due Diligence Statement. What changes is that the risk assessment and mitigation steps are reduced, and the inspection rate drops to 1%. If a national authority does check, the underlying data has to be there.

Vietnam is the region’s largest exporter of wood furniture to the EU, and its low-risk status is a genuine commercial advantage — provided suppliers can actually produce the traceability data when asked.

If you export from Malaysia (standard risk)

Full due diligence applies. No simplified route. Member State authorities must inspect 3% of operators sourcing from standard-risk origins each year, and your EU customers will ask for more from you than they would from a low-risk supplier.

Assume complete plot-level data and full documentation will be required, and assume it will be checked.

Does PEFC or FSC certification make you EUDR compliant?

No — and this is the most expensive misunderstanding in the market right now.

Certification and EUDR are different instruments. Chain of custody certification demonstrates that your material handling and claims are controlled and audited. EUDR requires geolocated proof of origin and legality for every consignment. A valid PEFC or FSC certificate does not by itself satisfy an EU operator’s due diligence obligation.

What certification does give you:

A functioning management system, documented procedures and audit discipline — the foundation EUDR data collection sits on
Supplier relationships and traceability records already in place
Credibility with buyers assessing supply chain risk

PEFC has published an EUDR Due Diligence System module (PEFC ST 2002-1:2024) designed to sit alongside chain of custody certification and address the regulation’s requirements directly. That is the closest thing to a certified route to EUDR readiness, but it is an additional standard — not something your existing CoC certificate automatically covers.

Your readiness checklist

☐Confirm whether you are an operator or a trader under the regulation, and which deadline applies
☐ Map your supply chain back to plot level — every source, every consignment
☐Collect GPS coordinates for each plot, and polygon boundaries for plots over 4 hectares
☐Verify no deforestation on those plots after 31 December 2020
☐Assemble legal production documentation under your national system — VNTLAS in Vietnam, MTCS in Malaysia, and equivalent legality evidence elsewhere
☐Set up a repeatable process for passing this data to EU customers in a usable digital format
☐Assess whether the PEFC EUDR DDS module is worth adding to your existing certification
☐Agree with each EU buyer, in writing, exactly what they need and by when

Most suppliers discover the difficult part is not understanding the rules — it is producing plot-level traceability from a supply chain that was never designed to record it. That work takes months, which is why starting now matters.

Get TimberChain's EUDR Checklist

Where to start

If you are unsure whether your current systems will satisfy your EU customers, a readiness review is the quickest way to find out. I look at your supply chain, your existing certification and your documentation, and tell you plainly what is missing and how long it will take to fix.