EUDR for Small Businesses: What Importers Need to Know

The EU Deforestation Regulation (EUDR) does not treat every operator the same. If you run a small or micro business that imports covered commodities into the EU, you benefit from extended deadlines and simplified due-diligence obligations. This guide explains exactly which businesses qualify, what the lighter requirements look like, and what you should be doing right now.

1. Which Businesses Qualify as SME or Micro?

The regulation does not define its own SME thresholds. Instead, it refers to the categories established by Commission Recommendation 2003/361/EC. In practice, a micro enterprise has fewer than 10 employees and annual turnover or balance sheet total below EUR 2 million. A small enterprise has fewer than 50 employees and annual turnover or balance sheet total below EUR 10 million.

What matters for EUDR is not just your headcount but your role in the supply chain. You must be an importer or a downstream operator placing a covered commodity or derived product on the EU market for the first time. If your annual import volumes are below certain thresholds you may still qualify for simplified obligations, but you must still register and submit a due-diligence statement.

2. The Extended Deadline: June 30, 2027

Large operators and traders were required to comply with the EUDR by December 30, 2024 for large companies and June 30, 2025 for certain transitional provisions. Micro and small enterprises received an extended deadline of June 30, 2027. This gives smaller businesses an additional 12 to 18 months beyond the standard compliance date.

However, this extra time is not a reason to delay preparation. Your suppliers in producing countries must already be collecting geolocation data and maintaining traceability records. If you wait until 2027 to engage your supply chain, you will find it much harder to get the information you need.

3. Simplified Due Diligence Obligations

Article 10(4) of the regulation provides that micro and small enterprises may fulfil their due-diligence obligations through a simplified procedure. Instead of conducting a full risk assessment for every shipment, small operators can rely on a simplified declaration that confirms the key information has been collected and verified.

The simplified procedure still requires you to collect geolocation data, verify legal compliance, and maintain traceability records. What changes is the depth of the risk-assessment process and the format of the declaration you submit to the competent authority.

4. What "Simplified Declaration" Means

A simplified declaration is a streamlined version of the standard due-diligence statement. Under the standard procedure, operators must submit detailed information covering all five criteria of Article 10(2): traceability, geolocation, applicable legislation, verifiable information, and risk assessment. For small businesses, the declaration focuses on the core elements — traceability, geolocation, and a summary risk determination.

The declaration must still be submitted through the EU information system before goods are placed on the market. It must include a unique reference number per shipment, the operator identification details, and confirmation that the simplified procedure has been followed. Competent authorities can still audit your records, so the declaration is not a shortcut around compliance — it is a lighter reporting format.

5. Downstream Operator Obligations (December 2025 Revision)

The December 2025 revision of the EUDR implementing regulation clarified obligations for downstream operators — companies that buy from an already-compliant importer rather than importing directly. If you purchase a product that has already been subject to a due-diligence statement, your obligations as a downstream operator are lighter. You must verify that the supplier has fulfilled their obligations and maintain records of that verification.

For small businesses this is significant. Many SMEs do not import raw commodities directly but buy processed or semi-processed goods from EU-based wholesalers. In those cases, the downstream operator pathway means you may not need to collect geolocation data yourself — you need to confirm that your supplier has done so and retain documentation proving it.

6. Key Differences from Full Compliance

7. Common Misconceptions SMEs Have About EUDR

• "It does not apply to me because I am small." False. If you import or place covered commodities on the EU market, you are an operator under the regulation regardless of size. The simplified procedure is a benefit, not an exemption.
• "I only buy from EU-based suppliers, so I am not responsible." If the original commodity was imported into the EU and you are the first to place it on the market, you may still have obligations as a downstream operator. Verify with your supplier.
• "The deadline is 2027, so I have plenty of time." Your upstream suppliers in producing countries are already required to collect and provide geolocation and traceability data. If you wait, getting this information becomes significantly harder and more expensive.
• "Simplified means I do not need geolocation data." Not true. Geolocation data is a core requirement regardless of operator size. What simplifies is the risk-assessment depth and the declaration format, not the underlying data you must collect.

8. Step-by-Step: What to Do Right Now

Step 1: Determine your operator status. Are you importing directly, or are you a downstream operator? Check whether your products fall under the seven covered commodities (cattle, cocoa, coffee, oil palm, rubber, soya, wood) and their derivatives.

Step 2: Map your supply chain. Identify every supplier, from the plot of origin to your warehouse. Document the chain of custody for each product line. Note where you currently lack information.

Step 3: Request geolocation data. Contact your suppliers now and request GPS coordinates (point or polygon) for every production plot. Set a deadline for delivery and build this requirement into your purchase agreements.

Step 4: Conduct a baseline risk assessment. Even under the simplified procedure, you need a documented risk assessment. Start with a country-level assessment using the EU benchmarking system and refine it with supplier-specific information.

Step 5: Build your compliance system. Set up a centralised repository for traceability records, geolocation data, supplier attestations, and risk assessments. This does not need to be expensive — a well-structured spreadsheet is better than nothing, but a dedicated platform scales better as your import volumes grow.

Step 6: Test your process. Run a mock due-diligence exercise on one shipment. Can you produce the required information for a specific batch within 24 hours? If not, identify the gaps and fix them.

9. How Antaios Helps Small Businesses

Antaios was built for operators who need compliance without complexity. Our platform automates the collection of geolocation data from suppliers, maintains a centralised evidence repository, and generates the declarations required by the EU information system. For small businesses, this means you can meet the simplified due-diligence requirements without hiring a dedicated compliance team or building manual processes from scratch.

We also provide country-level risk assessments, supplier scorecards, and real-time deforestation alerts so you can make informed sourcing decisions. Our free diagnostic tool gives you a compliance score in three minutes, showing exactly where your gaps are and what to prioritise.

10. Key Takeaways

• Micro and small enterprises benefit from extended deadlines (June 30, 2027) and simplified due-diligence obligations under the EUDR.
• Simplified does not mean exempt. You still need geolocation data, traceability records, and a documented risk assessment.
• Start preparing now. Your suppliers in producing countries need time to collect and provide the required information.
• If you buy from EU-based suppliers, check whether you are a downstream operator with lighter obligations.
• Use the free diagnostic to assess your current compliance status and build a step-by-step action plan.