EUDR Maturity · Compliance with EU Deforestation-Free Products · Regulation (EU) 2023/1115
Your EUDR due diligence system, measured theme by theme and turned into a costed action plan.
12 themes, a 5-level scale. And the action that moves each level to the next.
The framework’s 12 themes, already written from L1 to L5. One company, one business unit, or 300 at once.
EUDR Maturity · Compliance with EU Deforestation-Free Products · Regulation (EU) 2023/1115
12 themes, 5-level scale.
Nordhavn Industries
53 / 100
They measure their maturity with Datamensio
An example
This could be your situation.
Take one company as an example: three sites, three spreadsheets, no shared answer.
Nobody can consolidate.
Nordhavn Industries, 2,400 people in Hamburg, Lyon and Porto. A client asks where the group stands. Each site answers in its own spreadsheet, with its own scales.
Three weeks, a single base.
One Regulation (EU) 2023/1115 of 31 May 2023 (EUDR) assessment launched across all three sites at once, from the managers’ interview notes. The framework was already written, its 12 themes and levels L1 to L5 too.
Two costs avoided before being committed.
A score of 53 out of 100, with the gap concentrated on three themes. The AI companion spotted that two actions duplicated those of another audit. The committee report took one sentence to request.
What it saved them
- 3sites measured on the same base, instead of three questionnaires to reconcile
- 2duplicate actions caught before the spend
- 1committee report, with no manual rework
These figures are an example. They could be yours.
The standard imposes processes. Datamensio says where you stand.
01
The framework is already written
Themes, questions and levels L1 to L5, all written. You do not start from an empty spreadsheet.
02
The score lands the same day
Online, by self-assessment link or in interview. Theme by theme, comparable over time.
03
The gap becomes a costed plan
Every step up carries its action. The AI prioritises on expected effect, not on the order of the standard.
04
Progress can be demonstrated
Campaign after campaign, against your target and against your own past. That is what your board asks for.
The maturity scale
One level, the next, and the action that links the two.
It is this mechanism, one level, the level above, and the action linking the two, that turns a finding into a trajectory.
Do you hold plot geolocation coordinates for the entire volume you place on the market?
- N1
No geolocation data is collected. Origin is known at country or supplier level, not at plot level.
- N2
Geolocation is obtained from a handful of pilot suppliers, through file exchanges, with no set format or consistency checks.
- N3
A format is imposed on all suppliers, points and polygons depending on area. Coverage is majority and missing data is identified and tracked.
- N4
Collection is built into the systems, coordinates are checked automatically (geometric validity, overlap, consistency with volumes) and linked to received batches.
- N5
Data is cross-checked against earth observation sources every campaign, anomalies trigger a documented procedure and results feed into the review of the system.
Action to move from L2 to L3
Publish a single plot declaration format, attach it to the procurement specifications, send it to all suppliers of the commodities concerned before the next campaign opens, and track volume coverage at the monthly procurement committee.
« With Datamensio, we meet our objectives far more efficiently. The ERDF inspection services and our supervising ministry particularly appreciated an approach that gives them reliable data. »
Director, CCI 94CCI Île-de-France
« We believe this is the most suitable solution to scale our transformation project and measure impact according to our needs. »
Maja SucekChief Operating Officer, Interreg Danube
Rarely on its own
Frameworks combine. Put several together to cover your business, or have the AI write yours.
Take your first measurementon EUDR.
What this framework covers
Regulation (EU) 2023/1115 replaces the Timber Regulation (EU) No 995/2010 and extends its principle to seven commodities: wood, cocoa, coffee, palm oil, soy, cattle and rubber, plus a list of derived products set out in Annex I. Three cumulative conditions establish a product’s compliance: it is deforestation-free, meaning it comes from land not deforested after 31 December 2020, it was produced in accordance with the relevant legislation of the country of production, and it is covered by a due diligence declaration. Operators and certain traders must collect information, including plot geolocation coordinates, assess risk and mitigate it to a nil or negligible level.
The difficulty is not understanding the text, it is applying it to a real supply chain. Tracing back to the plot requires visibility that few organisations have beyond their first-tier supplier. Three questions come up systematically: do you hold polygons for all plots over four hectares, and geolocation points for the rest? On what basis do you establish that production complies with land tenure law, labour law and the rights of indigenous peoples in the country of origin? What happens when a batch arrives with no usable data, and who decides to block it?
One common confusion is worth clearing up: a voluntary sustainability certification does not equal compliance. Certification schemes can feed into risk assessment, but they replace neither the due diligence declaration nor the operator’s responsibility. Another point of context: the country benchmarking system, which distinguishes low, standard and high risk levels, adjusts the mitigation obligation but never exempts an operator from collecting information. The application timetable has also been pushed back since the text was adopted, which led several organisations to pause their work, then resume it under pressure.
A compliance audit asks a binary question: is the file complete, yes or no. A maturity assessment asks a different question: what level of control does each building block of the system sit at, and what specific action moves it up a level. Between geolocation data collected by hand from a handful of pilot suppliers and an automated, controlled data flow across the entire supplier base, there are three maturity levels and a transformation programme.
In Datamensio, the framework is ready to use and remains adaptable. AI adjusts the themes, questions and level wording to your scope, sector by sector, or builds a variant from your own procedures, supplier contracts and procurement specifications. The models used can be selected, including from European providers.
Reference standard: Regulation (EU) 2023/1115 of 31 May 2023 (EUDR)
The themes assessed
Scope and product qualification
Identification of the commodities covered, mapping of references to Annex I codes, qualification as operator or trader, SME status, import, export and market placement flows.
Governance of the system
Appointment of the person responsible at management level, internal policy, allocation of resources, coordination with procurement, quality and legal functions, periodic review of the system.
Information collection
Description and quantity of products, country of production, identification of suppliers and downstream customers, data completeness, turnaround times, handling of supplier refusals.
Plot geolocation
Coordinate points and polygons depending on area, production period, data quality and format, coverage of volumes, handling of smallholder chains, updates from one campaign to the next.
Verification of production legality
Land use rights, environmental and forestry legislation, third-party and indigenous peoples’ rights, labour law, tax and customs, evidence retained.
Risk assessment
Analysis criteria, factoring in country and area risk levels, presence of forests and indigenous peoples, chain complexity, indicators of mixing with unknown-origin products, documented conclusion.
Risk mitigation
Measures applied when risk is not nil or negligible, additional investigations, supplier audits, imagery and third-party data, suspension decisions, reassessment after mitigation.
Due diligence declaration
Registration in the Commission’s information system, content and accuracy of declarations, reference number passed downstream, handling of corrections, five-year retention.
Traceability and information systems
Keeping the batch-plot link through processing stages, handling of blends, interfaces with ERP and supplier tools, data integrity and auditability.
Supply chain and supplier engagement
Contractual clauses, procurement specifications, supplier capacity-building plan, arrangements for smallholders, handling of intermediaries and cooperatives.
Inspections, authorities and penalties
Readiness for inspections by competent authorities, responses to information requests, handling of substantiated concerns, penalty regime and corrective measures, handling of non-compliant products.
Communication and continuous improvement
Annual public report on the due diligence system, stakeholder information, monitoring indicators, lessons learned and procedure updates.
A short version of the framework is available for the online self-assessment.
Frequently asked questions
Does Regulation 2023/1115 lead to a certification?
No. It requires a due diligence system and a declaration filed by the operator, under the oversight of competent authorities. Datamensio measures the maturity of your system and prepares you for inspections, it does not issue any compliance certificate.
What is the difference between this assessment and an EUDR compliance audit?
An audit checks that required elements are present and concludes with a gap or a pass, at a given date. The assessment places each building block of the system on a maturity scale and indicates the action that moves it up a level. The assessment prepares the audit, the audit validates it.
Is a sustainability certification from our suppliers enough?
It is a useful piece of information for risk assessment, nothing more. Responsibility for collection, assessment, mitigation and declaration remains with the operator. The framework also assesses how these schemes are used, and their documented limitations.
How long does the assessment take?
The short version takes 20 to 30 minutes to complete. The full version, run collaboratively, involves procurement, quality, supply chain and legal: most of the time goes into gathering input from these teams, not into data entry.
Can the framework be adapted to our supply chains?
Yes. Questions, levels and themes can all be adjusted, and you can create a version of the framework per commodity, since cocoa, soy or wood do not share the same pain points. AI can also build a variant from your own procedures and procurement specifications.
How do we consolidate several business units or sites?
Each entity runs its assessment on the same framework. Scores can be compared by theme, across entities, and against previous campaigns. A cross-entity roadmap groups common actions rather than duplicating them entity by entity.
Is the action plan costed?
Every gap between the score and the target generates an action. AI groups these actions into a prioritised roadmap, and the service catalogue lets you attach a cost, a timeframe and the expected effect on the score to each one.
Where is the data hosted?
In France, with OVH, backed up with Scaleway. No transfer outside the European Union. The AI models used can be selected, including from European providers.