EUDR sets Indonesian exporters two linked tests: prove your coffee, cocoa, rubber or wood is legal under Indonesian law, and prove exactly where it was grown so a buyer can check it is deforestation-free after 31 December 2020. One due-diligence engagement, ending in a filed Due Diligence Statement, can satisfy both at once.
Legality and traceability trip up otherwise well-run Indonesian supply chains. They sound similar and overlap in the paperwork, but the EU treats them as separate questions with separate proof. This piece is an outlook on how those obligations are shaping up for 2027, not a prediction of exact enforcement dates. As always, this is general guidance, not legal advice; confirm current EUDR requirements with the European Commission, your EU importer, and a licensed customs/legal adviser before acting.
What is the difference between legality and traceability under EUDR?
The EU Deforestation Regulation (EU Regulation 2023/1115) entered into force on 29 June 2023. It covers seven commodities plus their derivatives — cattle, cocoa, coffee, oil palm, rubber, soya, and wood — with named downstream products in current guidance summaries including plywood, LVL (laminated veneer lumber), veneer, pulp, paper, furniture, leather, and charcoal. For most Indonesian exporters the four practical commodities are coffee, cocoa, rubber, and wood or furniture.
Before goods enter or leave the EU market, three conditions must all be met: the goods must be deforestation-free, meaning not produced on land deforested after the 31 December 2020 cut-off date; they must be legal under Indonesian law; and they must be covered by a filed Due Diligence Statement (DDS). Legality is one condition. Traceability is the machinery that lets a buyer test the deforestation-free condition against that 2020 baseline.
| Question the EU asks | Legality obligation | Traceability obligation |
|---|---|---|
| What it proves | The commodity was produced in line with Indonesian law | Where the commodity was produced, plot by plot |
| Core evidence | Certificates, land-tenure and land-use-rights documents, permits, farmer contracts | GPS points or polygon boundaries, chain-of-custody records from farm to export lot |
| Baseline it is tested against | National and regional legal frameworks | The 31 December 2020 deforestation cut-off, checked by satellite and remote sensing |
| Where it lands | Supporting evidence inside the DDS | Geolocation dataset inside the DDS |
Why isn’t an Indonesian legality certificate enough on its own?
This is the most common misread on the ground. Indonesia’s legality schemes matter, but none of them is an automatic EUDR pass. SVLK supports timber and furniture legality, ISPO supports palm, and voluntary schemes such as FSC and Rainforest Alliance can feed the due-diligence system. What they do not do is prove your land was deforestation-free against the December 2020 baseline, and most of them do not carry plot-level geolocation.
In other words, a certificate answers the legality question and leaves the traceability question open. A structured engagement — the kind offered by due diligence services for exporters — treats those certificates as inputs, not endpoints, layering geolocation and a deforestation-free check on top so both obligations close together rather than one at a time.
What does traceability look like for a real coffee, cocoa, rubber or wood lot?
Traceability under EUDR is concrete, not a slogan. The DDS requires plot-level geolocation: GPS point coordinates for plots under 4 hectares and polygon boundaries for larger plots, plus a negligible-risk assessment and mitigation measures where risk is not negligible. On top of that, EU buyers typically want a supply-chain map showing partner farms, collection points, and processing sites.
Privacy is not a blocker. The European Commission’s practical guidance notes that operators do not have to publish exact coordinates publicly — a regional map with sub-district (kecamatan) names and an area scale can reassure a buyer’s compliance team while protecting farmer identity. The coordinates still sit inside your records; they just do not have to be broadcast.
| Commodity | Typical legality anchor | Traceability artifact needed |
|---|---|---|
| Coffee | Land-use rights, farmer contracts, cooperative records | GPS points for smallholder plots under 4 ha; collection-point log |
| Cocoa | Land-tenure documents, purchase records | Plot coordinates plus farm-to-warehouse chain of custody |
| Rubber | Land legality, tapping-area permits | Polygon boundaries for estates; smallholder GPS points |
| Wood / furniture | SVLK legality documentation | Harvest-plot geolocation plus mill and processing records |
How does one due-diligence engagement satisfy both obligations?
The DDS is where legality and traceability converge into a single filing. A due-diligence engagement gathers the geolocation dataset, runs the negligible-risk assessment against the December 2020 baseline, sets out mitigation where risk is not negligible, and bundles the legality evidence — legal certificates, land-tenure and land-use-rights documents, farmer contracts, field photos, independent surveys, and audit results. Records must be retained and produced during enforcement inspections.
Each DDS carries a unique reference number. That number must be quoted on the EU import or export customs declaration and shared with the logistics operator before customs clearance in the EU. Usefully, a single DDS can in practice cover repeat shipments of the same verified supply base while the data stays current, so the heavy lifting happens once per supply base rather than once per container. The stakes are real: penalties for non-compliance can reach up to 4% of an operator’s EU-derived turnover, on top of rejected shipments and goods blocked at EU customs.
- Collect — plot geolocation (GPS or polygon), legality documents, and supply-chain map.
- Assess — negligible-risk check against the 31 December 2020 baseline using satellite and remote sensing.
- Mitigate — close any risk that is not negligible before filing.
- File and cite — submit the DDS, then quote its reference number on the customs declaration and pass it to your logistics operator.
What 2026 signals point to the 2027 obligations?
Here the honest framing is outlook, not forecast. As announced, large and medium operators must comply by 30 December 2026 and micro and small operators by 30 June 2027 — but enforcement timing has shifted before, and several Indonesian sources still cite 30 December 2025 and a 30 June 2026 transition for micro and small operators. So treat every date as of 2026, subject to change, and confirm the current position with the European Commission at environment.ec.europa.eu and your EU importer.
What is already visible in 2026 points the same direction. The operational shift across Bali and wider Indonesia is toward farmer-plot registries, GPS and polygon collection, satellite verification against the December 2020 baseline, and digitized chain-of-custody from farm to export lot. The Indonesian government is preparing a national response strategy, and EU buyers are already requesting plot-level proof ahead of formal enforcement. Exporters who build the legality-plus-traceability record now are doing in 2026 what 2027 is expected to require — which is why the SME deadline, whenever it lands, tends to reward early movers.
None of this replaces professional advice. To repeat the guardrail that belongs on every EUDR page: this is general guidance, not legal advice; confirm current EUDR requirements with the European Commission, your EU importer, and a licensed customs/legal adviser before acting.
Frequently Asked Questions
Does SVLK certification satisfy the EUDR traceability obligation?
No. SVLK supports legality for Indonesian timber and furniture, which is one EUDR condition, but it does not prove your wood is deforestation-free against the 31 December 2020 baseline, and it carries no plot geolocation. You still need GPS or polygon coordinates and a filed Due Diligence Statement. Confirm current rules with the European Commission.
Do I need GPS coordinates for every smallholder plot in my supply base?
Yes, geolocation is required for each plot: GPS point coordinates for plots under 4 hectares and polygon boundaries for larger ones. EU buyers increasingly ask for plot-level proof ahead of enforcement. The European Commission’s guidance says you need not publish exact coordinates publicly; a regional map with kecamatan names and area scale can reassure compliance teams.
Can a single Due Diligence Statement cover both legality and traceability for repeat shipments?
In practice, yes. One DDS bundles plot geolocation, a negligible-risk assessment, mitigation measures, and legality documents such as land-tenure records and farmer contracts. It carries a unique reference number quoted on the EU customs declaration, and a single statement can cover repeat shipments of the same verified supply base while the data stays current.