Dejan Jasnic · Co-founder & Compliance Lead, Trusty · 20+ years anti-fraud & compliance · ACFE Swiss Chapter Board
For businesses buying or selling certified timber, the distinction between PEFC certification and EUDR due diligence can be confusing.
PEFC already addresses sustainable forest management, chain of custody and traceability. The EUDR also asks companies to demonstrate that relevant wood products are legal and deforestation-free.
So why isn’t a PEFC certificate enough?
Because one is a voluntary certification system and the other is EU law.
€90 per product profile
Buying or selling PEFC-certified timber? The certificate is a starting point, not your due diligence. EUDR Passport records plot data, risk assessment and your due diligence statement in one audit-ready product profile.
EUDR vs PEFC at a glance
EUDR | PEFC | |
|---|---|---|
Type | EU regulation | Voluntary certification system |
Mandatory? | Yes, where applicable | No |
Main purpose | Prevent deforestation-linked commodities/products entering or leaving the EU market | Promote sustainable forest management and certified forest supply chains |
Commodities | Seven commodity groups and relevant derived products | Forest/tree-based products |
Due diligence | Legal requirement for relevant operators | PEFC offers an EUDR-specific DDS module |
Certification sufficient by itself? | N/A | No |
Legal responsibility | Relevant economic actor | Remains with the company |
What is the PEFC EUDR due diligence system?
PEFC developed PEFC ST 2002-1:2024, its EUDR Due Diligence System (DDS) module.
It is a voluntary module for organizations applying for or holding PEFC-recognized Chain of Custody certification.
Its purpose is to help those organizations implement a due diligence system capable of supporting EUDR compliance.
That distinction matters.
The PEFC EUDR DDS is designed around the Regulation. Ordinary PEFC certification and the EUDR DDS module are not exactly the same thing.
Can PEFC certification support EUDR compliance?
Absolutely.
PEFC systems may provide valuable evidence relating to:
- forest origin;
- supply-chain traceability;
- chain of custody;
- legality;
- forest management;
- supplier information;
- risk assessment.
The European Commission expressly allows certification and third-party verification information to be considered as part of EUDR risk assessment.
But operators must still evaluate the quality and relevance of that evidence.
Why doesn't PEFC create automatic compliance?
Because the EUDR places legal obligations on economic actors, not certification bodies.
The Regulation requires covered companies to satisfy specific conditions for the relevant products they place on or export from the EU market.
Where full due diligence applies, this includes information collection, risk assessment and, when necessary, risk mitigation.
A certification scheme can support those steps.
It cannot transfer the company’s legal responsibility to PEFC or the certification body.
PEFC has itself explained this principle: voluntary certification cannot offer automatic EUDR compliance because legal responsibility remains with the relevant company.
PEFC-certified does not necessarily mean EUDR-ready
Suppose you buy PEFC-certified timber from a supplier.
The certificate tells you something valuable about that supply chain.
But your EUDR process may still require information such as:
- the exact product and commodity;
- country of production;
- plot geolocation;
- production date or time range;
- relevant supplier information;
- evidence of legality;
- evidence supporting deforestation-free status.
The important question is therefore not simply:
“Is this supplier PEFC certified?”
It is:
“Does the evidence available for this product satisfy the information and risk requirements that apply to us under EUDR?”
into evidence
Supplier sent a PEFC certificate? EUDR Passport collects certificates, geolocation and supplier data in one place, and you pay only when a risk needs assessing. Building profiles is free. Or book a walkthrough.
What if the supplier uses the PEFC EUDR DDS?
That is more useful.
PEFC’s dedicated EUDR DDS was created specifically to help Chain of Custody-certified organizations structure the information and processes needed for EUDR.
It can therefore reduce duplication and provide a standardized compliance framework.
However, using the PEFC EUDR DDS does not transfer legal responsibility away from the company.
Think of it as compliance infrastructure, rather than a legal exemption.
PEFC vs FSC for EUDR
Both FSC and PEFC have developed systems intended to support EUDR compliance.
Neither creates a blanket exemption from the Regulation.
From an EUDR perspective, the more important questions are whether the evidence is reliable, whether it relates to the actual products concerned, whether required geolocation and supply-chain information is available, and whether any identified risk has been properly assessed and mitigated.
The logo on the certificate should not be the end of the analysis.
Frequently asked questions
PEFC has adapted its standards and developed an EUDR-specific Due Diligence System to support companies in demonstrating compliance. However, certification does not automatically make an individual company or shipment EUDR compliant.
No. Where an operator is required to submit a due diligence statement under the EUDR, certification does not replace that legal requirement.
Yes. The EUDR allows certification and other third-party verified schemes to be considered as supporting information in risk assessment.
No. Neither PEFC nor FSC certification is mandatory for EUDR compliance.
EUDR responsibility remains with the economic actor subject to the relevant legal obligation. Certification does not transfer that responsibility to PEFC.
PEFC vs FSC for EUDR
PEFC can support EUDR due diligence. It does not replace it.
For PEFC-certified companies, the certification system may provide a valuable head start, particularly when combined with PEFC’s dedicated EUDR DDS.
But EUDR compliance ultimately depends on whether the required information, risk assessment and applicable legal steps have been completed for the relevant products. EUDR Passport records that evidence per product profile, PEFC documents included, and files the due diligence statement.
Sources: European Commission EUDR guidance; PEFC EUDR Due Diligence System.
Related reading: whether FSC certification makes you EUDR compliant, what changed from the EU Timber Regulation, and what a single plot must contain under the geolocation requirements.
Looking for EUDR software? EUDR Passport collects your supplier data, runs the risk assessment and files unlimited due diligence statements, from €90 per product profile per year.
30 DECEMBER 2026
FREE EUDR Obligations Checker: Answer a few simple questions and get an instant assessment of your EUDR obligations.