Does FSC Certification Cover EUDR? An Honest Answer for Sawmills — and the 5 Gaps You Still Need to Close

The Misconception: "We're FSC — We're Covered"

It's the single most common thing we hear from sawmill owners when EUDR comes up: "We've been FSC-certified for years — surely that's enough?"

It's an understandable assumption. Your FSC Chain of Custody audit cost time and money. It proves your timber comes from responsibly managed forests. Your buyers already require it. Why would the EU ask for something on top of that?

Because EUDR is not a certification scheme — it's a regulation. And the European Commission has been explicit: voluntary certification, including FSC and PEFC, cannot substitute for the operator's own due diligence obligations. A certification label can support your risk assessment. It cannot replace it.

That distinction matters, because if you treat your FSC certificate as an EUDR ticket, you will be non-compliant on 30 December 2026 — and enforcement includes fines, product confiscation, and temporary exclusion from EU markets.

This article maps the 5 specific gaps between what FSC/PEFC gives you and what EUDR demands — and the concrete steps to close them.

What EUDR Actually Requires (That Certification Doesn't)

EUDR (Regulation 2023/1115) applies to every operator placing timber products on the EU market. "Operator" includes sawmills that buy logs and sell sawn lumber — you are placing a processed timber product on the market. The regulation requires you to demonstrate three things per product, per shipment:

1. Deforestation-free. The timber was not harvested from land deforested after 31 December 2020.
2. Legal. The timber was produced in compliance with the laws of the country of harvest.
3. Due diligence completed. You collected the required information, assessed the risk, and — if the risk is non-negligible — mitigated it. You then filed a Due Diligence Statement (DDS) in the EU Information System before the product enters or exits the EU market.

FSC Chain of Custody addresses point 2 (legality) strongly and point 1 (deforestation-free) partially. It does not address point 3 at all — because FSC was never designed to file regulatory statements with EU authorities on your behalf.

The 5 Gaps Between FSC/PEFC and EUDR

Here's what your certification gives you — and what it doesn't. Every "gap" column entry is work you must do yourself or through a system, regardless of your certification status.

EUDR requirement	What FSC/PEFC gives you	The gap
1. Plot-level geolocation — GPS coordinates for every harvest plot (point for <4 ha, polygon for >4 ha)	CoC tracks origin at the forest-management-unit level, not the plot level. No GPS coordinates in the certificate.	You must collect and store GPS data from your log suppliers — point or polygon per plot.
2. Due Diligence Statement (DDS) — filed in the EU Information System before product is placed on the market	No equivalent. FSC audits are private, voluntary, and between you and your certification body.	You must file a DDS per product/shipment. The EU system is not yet fully operational — but the obligation stands.
3. Country-of-harvest risk assessment — based on the EU benchmarking system (standard / high / low risk)	FSC Controlled Wood has its own risk-assessment framework, but it doesn't map 1:1 to the EU's country benchmarking.	You must assess risk per the EU's own categories, not FSC's. High-risk countries require additional mitigation.
4. Deforestation-free proof — evidence that land was not deforested after 31 Dec 2020	FSC certified forests are managed sustainably, which implies no deforestation — but the certificate itself does not contain a deforestation-cutoff statement.	You need a documented link between the geolocation data, satellite imagery or land-use records, and the 2020 cutoff date.
5. Traceability through processing — batch-level link from raw logs to sawn products, maintained through cutting and drying	CoC covers the chain from forest to your gate. Once logs enter your mill and become boards, the CoC model (credit/percentage/transfer) doesn't track physical batches through your saws and kilns.	You need internal batch traceability — linking each output pack to the input log batch, DDS reference, and geolocation data.

The bottom line: FSC/PEFC gives you roughly 40–60% of the information base EUDR needs. The other half — geolocation, DDS filing, EU-specific risk assessment, deforestation-cutoff documentation, and internal batch traceability — is your responsibility as the operator.

To close that other half on paper, start from the DDS worksheet and supplier declaration form — free, and built around exactly the fields above.

Bridge Tools: FSC Regulatory Module & PEFC DDS

Both certification bodies know the gap exists, and both have released tools to help close it.

FSC Regulatory Module

Launched in 2024, the FSC Regulatory Module is a framework that layers onto your existing FSC Chain of Custody. It adds procedures for information collection, risk assessment, risk mitigation, and geolocation data transmission — essentially the due diligence steps EUDR requires. If you're already FSC-certified, your certification body can audit this module as an add-on.

The catch: adoption is voluntary. The module helps you organize your EUDR work within a familiar audit framework, but it does not file your DDS, and it does not exempt you from the operator's obligation. Think of it as scaffolding, not a finished building.

PEFC EUDR Due Diligence System (DDS)

PEFC published its EUDR DDS module standard (PEFC ST 2002-1:2024) in July 2024. It's designed for PEFC Chain of Custody-certified companies and covers deforestation-free verification, national-law compliance, and DDS documentation. Certification bodies like Preferred by Nature already offer audits against this module.

Same limitation: voluntary, not a substitute for the operator filing their own DDS. It's a structured way to prepare — not a compliance stamp.

Should you adopt these modules?

If you're already certified and plan to stay certified: yes, probably. They reduce the incremental effort by building on records you already keep. But go in with clear eyes — they're process frameworks, not compliance shortcuts. You still need the geolocation data, the DDS filing capability, and the internal traceability.

Mini-Case: A Central European Softwood Mill

A real, FSC-certified softwood mill in Central Europe — ~120,000 m³ annual intake, buying from 40+ forest owners — ran a gap assessment in Q1 2026. Here's what they found:

EUDR requirement	Status before gap assessment	Action needed
Geolocation	0 of 40 suppliers provided GPS data	Standardized a simple intake form; 32 of 40 suppliers delivered within 6 weeks
DDS filing	No system in place	Set up digital DDS workflow tied to each intake batch
Risk assessment	Relied on FSC Controlled Wood assessment	Mapped suppliers to EU country-risk benchmarks (all low-risk in this case)
Deforestation-free proof	Assumed via FSC certificate	Cross-referenced geolocation with Copernicus land-use data to confirm post-2020 status
Internal traceability	FSC credit system (no physical batch tracking)	Introduced batch IDs at log intake, carried through cutting and drying to pack level

Result: the mill closed all 5 gaps in under 3 months. The hardest part wasn't technical — it was getting the first few suppliers to understand why GPS data was needed. Once the template was in place, the rest followed.

What This Is NOT

• This is not an argument against FSC or PEFC. Certification remains valuable for market access, buyer requirements, and demonstrating responsible sourcing. EUDR doesn't replace it — it adds a parallel, regulatory layer.
• This is not a reason to panic. If you're certified, you're ahead of uncertified mills. You have documented supply chains, auditable records, and a compliance culture. The incremental work is real but manageable.
• This is not legal advice. We're summarizing publicly available regulatory text and certification-body guidance. For your specific situation — especially if you source from high-risk countries — consult a compliance specialist.

Week-1 Checklist: Close the Gaps

1. Run a gap assessment. Take the free EUDR Self-Check to see which of the 5 requirements you already cover and which need work.
2. Ask your certification body about the bridge module. If you're FSC, ask about the Regulatory Module. If you're PEFC, ask about the EUDR DDS module. Get a timeline and cost estimate for the add-on audit.
3. Send a geolocation request to your top 10 suppliers. Don't wait for all 40. Start with the biggest volumes. A simple form — "provide GPS point or polygon for each harvest compartment" — is enough.
4. Map your internal batch flow. Trace one log batch from intake to finished packs on paper. Where does the batch identity break? That's where you need a system change.
5. Check the EU Information System status. The DDS filing system is still being rolled out. Monitor the EC's implementation page for updates and test-access windows.
6. Book a 30-minute internal review with your production manager and quality/compliance lead. Share this article and the gap-assessment results. Assign owners for each gap.

Frequently Asked Questions