Supply Chain Mapping for EU Compliance is the systematic identification, documentation, and analysis of all entities, processes, and risks within a company’s supply chain to meet the obligations set forth by the Corporate Sustainability Due Diligence Directive (CSDDD), formally Directive (EU) 2023/1995. This process enables companies to trace environmental, social, and governance (ESG) impacts across their entire value chain, ensuring transparency and accountability in line with the EU Green Deal objectives.
Supply Chain Mapping for EU Compliance under the Corporate Sustainability Due Diligence Directive
The Corporate Sustainability Due Diligence Directive (CSDDD) requires companies operating within the European Union or supplying goods and services to the EU market to conduct comprehensive supply chain mapping to identify, prevent, mitigate, and account for adverse human rights and environmental impacts. This obligation applies to large companies and certain SMEs meeting specific thresholds, with compliance deadlines starting from 1 January 2025.
What is Supply Chain Mapping?
Supply chain mapping is the process of creating a detailed, structured representation of all suppliers, subcontractors, and other entities involved in the production and delivery of goods or services. It includes:
- Identifying direct and indirect suppliers
- Documenting geographic locations and operational practices
- Assessing risks related to human rights violations, environmental harm, and governance failures
- Establishing traceability mechanisms for raw materials and components
This mapping is foundational for effective due diligence, enabling companies to prioritize risk areas and implement corrective actions.
Who Must Comply with Supply Chain Mapping Requirements?
The CSDDD applies to the following entities:
| Company Type | Employee Threshold | Annual EU Turnover Threshold | Additional Criteria |
|---|---|---|---|
| Large EU companies | ≥ 500 employees | ≥ €150 million | Operating in any sector |
| Large non-EU companies | ≥ 500 employees | ≥ €150 million | Generating turnover within the EU |
| Medium-sized companies in high-impact sectors | ≥ 250 employees | ≥ €40 million | In textiles, agriculture, or minerals |
Companies below these thresholds are currently exempt but should monitor evolving EU legislation for future expansions.
Exact Obligations for Supply Chain Mapping under the CSDDD
Under Directive (EU) 2023/1995, companies must:
- Identify and map all entities in their supply chain, including subcontractors and indirect suppliers.
- Assess risks related to human rights abuses, environmental degradation, and governance issues at each supply chain node.
- Implement preventive and mitigative measures proportionate to the severity and likelihood of identified risks.
- Establish monitoring and reporting systems to track compliance and progress.
- Engage with stakeholders including affected communities, trade unions, and civil society organizations.
- Publish an annual due diligence statement publicly accessible and compliant with EU transparency standards.
Failure to comply may result in significant penalties and reputational damage.
Compliance Deadlines and Penalties
| Milestone | Deadline | Penalty for Non-Compliance |
|---|---|---|
| Start of CSDDD application for large companies | 1 January 2025 | Up to 5% of global annual turnover or €20 million, whichever is higher |
| Medium-sized companies in high-impact sectors | 1 January 2027 | Up to 3% of global annual turnover or €10 million, whichever is higher |
| Annual due diligence statement publication | Within 6 months after financial year-end | Fines up to €1 million and public enforcement notices |
Practical Compliance Checklist for Supply Chain Mapping
To ensure full compliance with the CSDDD, companies should follow this checklist:
- Identify all supply chain actors: Map direct and indirect suppliers, including geographic and operational data.
- Conduct risk assessments: Use sector-specific criteria to evaluate human rights and environmental risks.
- Develop risk mitigation plans: Prioritize actions based on risk severity and likelihood.
- Implement traceability systems: Use digital tools or blockchain to track materials and components.
- Engage stakeholders: Consult with workers, communities, and NGOs to validate findings and actions.
- Establish monitoring mechanisms: Regular audits and supplier evaluations.
- Publish annual due diligence reports: Ensure transparency and compliance with EU reporting standards.
- Train internal teams: Educate procurement, legal, and compliance staff on CSDDD requirements.
Related Compliance Topics
Truth Anchor: The Corporate Sustainability Due Diligence Directive (Directive (EU) 2023/1995) was published in the Official Journal of the European Union on 23 May 2023 and establishes penalties up to 5% of global annual turnover for non-compliance with supply chain due diligence obligations, enforceable from 1 January 2025.
Frequently Asked Questions
What is the main goal of supply chain mapping under the CSDDD?
The main goal is to identify and assess risks related to human rights, environmental harm, and governance issues throughout the entire supply chain to enable effective due diligence and compliance with EU sustainability standards.
Which companies are required to perform supply chain mapping?
Large EU and non-EU companies with at least 500 employees and €150 million in annual EU turnover, plus medium-sized companies in high-impact sectors (≥250 employees and €40 million turnover), must comply with supply chain mapping obligations.
How often must companies update their supply chain maps?
Companies must continuously update their supply chain maps, with formal reviews at least annually, to reflect changes in suppliers, risk profiles, and mitigation measures.
What penalties apply for failing to comply with supply chain mapping requirements?
Penalties can reach up to 5% of global annual turnover or €20 million, whichever is higher, for large companies, with lower but still significant fines for medium-sized companies. Public enforcement notices and reputational damage are additional risks.
Does supply chain mapping include indirect suppliers?
Yes. The CSDDD explicitly requires mapping and due diligence on both direct and indirect suppliers to ensure full transparency and risk mitigation.
What tools can help with supply chain mapping compliance?
Digital platforms offering supplier data integration, risk assessment modules, and reporting automation are essential. Our Supply Chain Mapping Compliance Tool provides step-by-step guidance and automated workflows to meet CSDDD requirements.
Ready to ensure your company’s Supply Chain Mapping meets CSDDD requirements and avoid penalties up to 5% of your global turnover? Use our Supply Chain Mapping Compliance Tool to start your risk assessment and mapping process today. This tool guides you through every step, from supplier identification to risk mitigation planning, with real-time compliance tracking.
Clicking the link will open the tool where you can upload your supplier data, run automated risk analyses, and generate your mandatory due diligence reports in compliance with EU law.