Phytosanitary certification maturity · Regulation (EU) 2016/2031
Your phytosanitary certification set-up, measured by theme and turned into a costed action plan.
10 themes, a 5-level scale. And the action that moves each level to the next.
The framework’s 10 themes, already written from L1 to L5. One company, one business unit, or 300 at once.
Phytosanitary certification maturity · Regulation (EU) 2016/2031
10 themes, 5-level scale.
Nordhavn Industries
53 / 100
They measure their maturity with Datamensio
An example
This could be your situation.
Take one company as an example: three sites, three spreadsheets, no shared answer.
Nobody can consolidate.
Nordhavn Industries, 2,400 people in Hamburg, Lyon and Porto. A client asks where the group stands. Each site answers in its own spreadsheet, with its own scales.
Three weeks, a single base.
One Regulation (EU) 2016/2031 on protective measures against pests of plants assessment launched across all three sites at once, from the managers’ interview notes. The framework was already written, its 10 themes and levels L1 to L5 too.
Two costs avoided before being committed.
A score of 53 out of 100, with the gap concentrated on three themes. The AI companion spotted that two actions duplicated those of another audit. The committee report took one sentence to request.
What it saved them
- 3sites measured on the same base, instead of three questionnaires to reconcile
- 2duplicate actions caught before the spend
- 1committee report, with no manual rework
These figures are an example. They could be yours.
The standard imposes processes. Datamensio says where you stand.
01
The framework is already written
Themes, questions and levels L1 to L5, all written. You do not start from an empty spreadsheet.
02
The score lands the same day
Online, by self-assessment link or in interview. Theme by theme, comparable over time.
03
The gap becomes a costed plan
Every step up carries its action. The AI prioritises on expected effect, not on the order of the standard.
04
Progress can be demonstrated
Campaign after campaign, against your target and against your own past. That is what your board asks for.
The maturity scale
One level, the next, and the action that links the two.
It is this mechanism (a level, a higher level, and the action linking the two) that turns a finding into a trajectory.
Does traceability allow, for a given batch, the upstream supplier and downstream customers to be identified?
- N1
No structured record of plants received and dispatched. Reconstructing a batch relies on invoices and staff memory.
- N2
Records exist for part of the flows. Tracing back to the supplier is possible, tracing forward to customers takes several days and manual cross-checking.
- N3
Records cover all incoming and outgoing flows, with batch identification. Upstream and downstream reconstruction is carried out on request, following a written procedure.
- N4
Traceability is tested periodically through batch withdrawal exercises, with measured timeframes and corrected gaps. Internal movements between sites are covered.
- N5
Records are integrated into the information system, traceability exercises are planned and documented, and results feed into procedure reviews and supplier selection.
Action to move from level 2 to level 3
Extend the record to cover all incoming and outgoing flows with a unique batch identifier, formalise the upstream and downstream reconstruction procedure, and test it on a real batch during the monthly quality review.
« With Datamensio, we meet our objectives far more efficiently. The ERDF inspection services and our supervising ministry particularly appreciated an approach that gives them reliable data. »

Director, CCI 94CCI Île-de-France
« We believe this is the most suitable solution to scale our transformation project and measure impact according to our needs. »

Maja SucekChief Operating Officer, Interreg Danube
Rarely on its own
Frameworks combine. Put several together to cover your business, or have the AI write yours.
Take your first measurement
What this framework covers
Regulation (EU) 2016/2031, applicable since 14 December 2019, replaces Directive 2000/29/EC and overhauls the Union’s phytosanitary regime. It classifies harmful organisms (Union quarantine pests, priority pests, protected zone quarantine pests, regulated non-quarantine pests), requires the registration of professional operators, and entrusts authorised operators with issuing the plant passport for internal movements. Trade with third countries falls under the phytosanitary certificate. The regulation also sets upstream and downstream traceability obligations, surveillance and notification to the competent authority.
In practice, the challenge is not knowing the text but keeping the set-up running day to day, across several sites and product ranges. Who decides that a batch is eligible for a passport, and on what evidence? Are the passport templates affixed to trade units the ones from the current version of the implementing regulation, with the four required elements? Does traceability allow the batch to be traced back to the supplier and forward to the customer within the timeframe an inspector expects? And when a harmful organism is suspected, does the notification go out in hours or in days?
Two confusions come up often. The first is conflating the plant passport with the phytosanitary certificate: the former accompanies movements within the Union and is the authorised operator’s responsibility, the latter is issued by the national plant protection organisation of the exporting country. The second is treating 2016/2031 in isolation, whereas Regulation (EU) 2019/2072 sets out the lists of harmful organisms and the requirements by plant, and Regulation (EU) 2017/625 organises official controls, including those at border control posts.
A compliance audit concludes with a gap or no gap: the passport is compliant, or it is not. The maturity assessment answers a different question: what level of control does the practice sit at, and what precise action moves it to the next level. A site may be free of any recorded non-conformity and still depend on a single person to issue passports. The assessment makes that fragility visible, places it on a scale, and costs it in the action plan.
The framework is ready to use in Datamensio and adapts to your scope: nursery, seeds, plants for planting, timber or fruit imports. The AI adjusts the themes, questions and levels, or builds a variant from your procedures and inspection reports. The models used can be selected, including from European solutions.
Reference standard: Regulation (EU) 2016/2031 on protective measures against pests of plants
The themes assessed
Operator registration and authorisation
Registration on the list of professional operators, declared scope of activities and plants, authorisation to issue passports, updating of information with the competent authority.
Knowledge of regulated harmful organisms
Identification of Union quarantine, priority, protected zone and regulated non-quarantine pests applicable to production, monitoring of the lists in Regulation (EU) 2019/2072 and emergency measures.
Issuing the plant passport
Batch eligibility criteria, decision-making and responsibility for issuing, passport content and format, affixing to the trade unit, cases of replacement and plants received from a third party.
Import and export certificates
Specific requirements by origin and by plant, obtaining the phytosanitary certificate or the pre-export certificate, prior notification of batches, coordination with controls at border control posts.
Traceability and records
Batch identification, records of plants received and dispatched, retention for the required period, ability to trace back to the supplier and forward to the customer, traceability of internal movements between sites.
Crop and premises surveillance
Visual inspection programme, frequency and authorised personnel, sampling and use of laboratory diagnostics, recording of observations, monitoring of buffer zones and places of production.
Notification and management of suspected cases
Internal alert pathway, timeframe and form of notification to the competent authority, immediate containment measures, withdrawal and recall of affected batches, cooperation with official services.
Competence and responsibilities
Designation of staff responsible for phytosanitary certification, initial training and maintenance of competence, cover arrangements, formalisation of delegations and authorisations.
Premises hygiene and prevention
Cleaning and disinfection of tools, substrates and containers, management of water and plant waste, separation of flows, control of risks linked to vehicles and packaging.
Documentation and continuous improvement
Written procedures, internal reviews, follow-up of observations from official controls, indicators, comparison of sites over time and incorporation of lessons learned.
A short version of the framework is available for the online self-assessment.
Frequently asked questions
Does this assessment grant authorisation to issue plant passports?
No. Authorisation is granted by the competent authority, after registration of the professional operator. The assessment measures the maturity of the set-up and prepares for the official control: it documents gaps and provides the action plan to address them.
What is the difference between this maturity assessment and a compliance audit?
The audit checks whether requirements are met and concludes with a gap or compliance. The assessment places each practice on a progressive scale and indicates the action that moves it to the next level. The two complement each other: the assessment prepares for the inspection, the inspection validates it.
How long does the assessment take?
The short version can be completed in a single working session. The full version, run collaboratively with the phytosanitary focal point, quality, and dispatch managers, spans one to two weeks, with most of the time spent gathering evidence.
Can the framework be adapted to our activity?
Yes. The questions, levels and themes can be modified, and you can add your own customer or third-country requirements. The AI can also build a variant from your procedures and inspection reports.
How does 2016/2031 fit with 2019/2072 and 2017/625?
Regulation 2016/2031 sets the framework, 2019/2072 provides the lists of harmful organisms and requirements by plant, and 2017/625 organises official controls. A cross-cutting roadmap consolidates several assessments and avoids duplicating shared actions.
Can several production sites be compared?
Yes. The score by theme allows business units to be compared with one another and each site with its own past results. Reporting takes place in a collaborative space branded to your organisation.
Does answering require expertise in plant protection?
The questions cover organisation, evidence and responsibilities, not biological diagnostics. Some require input from the technical focal point or the laboratory: the collaborative mode allows these questions to be assigned directly to them.
Where is the data hosted?
In France, with OVH, backed up with Scaleway. No transfer outside the European Union. The AI models used can be selected, including from European solutions.




