What “negligible risk” means under EUDR, and how to prove it.

Last updated: 23 August 2026

Why the whole regulation turns on this phrase

The EU Deforestation Regulation does not ask you to be certain your coffee or cocoa is deforestation-free. It asks you to reach a defined level of risk that it is not, and that level is negligible risk. Everything an operator does under the rule (collecting plot data, screening for deforestation, checking legality) exists to support a single conclusion: that the risk of non-compliance is no more than negligible. Only then may you place the product on the market, and only then is your Due Diligence Statement an honest one.

Negligible risk is the threshold, not a formality. It is the thing your Due Diligence Statement asserts, the thing an authority tests, and the thing your whole evidence file exists to support.

What the Regulation actually says

The term is defined precisely. Article 2, point (26) of Regulation (EU) 2023/1115 defines negligible risk as:

“the level of risk that applies to relevant commodities and relevant products, where, on the basis of a full assessment of product-specific and general information, and, where necessary, of the application of the appropriate mitigation measures, those commodities or products show no cause for concern as being not in compliance with Article 3, point (a) or (b).”

Unpack that and three things fall out. It rests on a full assessment, not a glance. It expects mitigation “where necessary”: the definition itself anticipates that you may have to act to reach the bar. And the standard it measures against is Article 3, point (a) or (b): that the product is deforestation-free, and that it was produced in accordance with the relevant laws of the country of production. “No cause for concern” on both of those is the target.

Negligible is not zero, and not “acceptable”

Two misreadings cause most of the trouble here, in opposite directions.

• It is not zero risk. The regulation does not demand proof of a negative or absolute certainty, an impossible standard for any real supply chain. “No cause for concern” is a judgement that residual risk is insignificant, not that it is nil.
• It is not “acceptable” or “low” risk either. There is no tier below the threshold you are allowed to settle for. The regulation offers exactly one passing grade: negligible. A risk you have assessed as “low but real,” or “probably fine,” has not met the bar, and you may not place the goods until mitigation brings it down to negligible.

There is one line, and it is drawn at negligible. Anything you would honestly describe as more than negligible is, for the purposes of the regulation, too much, until you have done something about it.

The two things that must be negligible

The definition points at Article 3(a) and (b), and they are separate tests. A lot of coffee or cocoa clears the bar only if both are negligible:

• Deforestation-free. The commodity must come from land that was not deforested after the 31 December 2020 cut-off. This is the test the plot geolocation and the satellite screening exist to answer, and, for coffee and cocoa specifically, the one where a naive read of the maps goes wrong.
• Legally produced. Production must comply with the relevant legislation of the country of production: land-use rights, environmental and forest rules, third-party rights, labour and trade law, and more. This is not satellite work; it is documentary due diligence on the origin.

A plot can be spotless on deforestation and still fail on legality, or vice versa. Both have to reach negligible, independently, before the consignment does. Skipping the legality leg because the satellite picture looks clean is a common and serious gap.

How you get there: assess, mitigate, re-assess

Negligible risk is a destination, and the regulation lays out the road to it in two steps that you repeat until you arrive.

• Risk assessment (Article 10). You take the information you have collected and weigh the risk of non-compliance against a defined list of criteria: among them the assigned risk of the country or region of production, the presence of forests and of Indigenous peoples there, the complexity of the supply chain, the risk of mixing with product of unknown origin, and any concerns about the commodity itself. The output is a reasoned view: negligible, or not yet.
• Risk mitigation (Article 11). Where the assessment lands on anything above negligible, you must take mitigating measures (gathering more or better information, independent surveys or audits, supplier engagement) and then re-assess. You keep going until the risk is negligible, or you do not place the product.

Assessment and mitigation are a loop, not a one-off. “Not yet negligible” is not a verdict of non-compliance: it is an instruction to do more and check again.

Where country benchmarking fits, and doesn’t

The regulation classifies countries into three tiers (low, standard, or high risk) and that classification feeds your assessment. It does not replace it. Two points matter for a coffee or cocoa importer, and both are widely garbled:

• A standard-risk origin still requires the full assessment. Most of the world’s coffee and cocoa origins sit at standard risk, which means the full due-diligence path (assessment and, where needed, mitigation) applies in the ordinary way.
• Even a low-risk origin is not a free pass. The simplified due-diligence route for low-risk countries removes the assessment and mitigation steps, but you must still collect the information and satisfy yourself there is no more than negligible risk of the rules being circumvented, for instance through mixing with product of unknown origin. And the late-2025 simplification that lets certain small primary operators skip geolocation does not reach an EU business importing from a non-EU origin. If that is you, you are on the full path. We explain exactly who that carve-out covers in the FAQ.

Documenting it: what makes “negligible” defensible

Here is the part most guidance skips. Concluding “negligible risk” is only half the duty; being able to show how you got there is the other half. Your Due Diligence Statement records the conclusion, but the conclusion is only as good as the file behind it, and you must keep that file for five years and produce it if a competent authority asks.

A defensible negligible-risk determination leaves a trail that lets someone else follow your reasoning:

• the plot data and the screening result for each plot: what was checked, against which sources, and what it showed;
• the legality evidence for the origin: permits, land-use rights, the documents that support Article 3(b);
• the risk assessment itself: the criteria you weighed and the reasoning that led to “negligible”;
• any mitigation you applied, and the re-assessment that followed it.

An inspector does not audit your conclusion; they audit your reasoning. “Negligible” with no retrievable evidence behind it is a weak statement, however confident the wording.

Where this is hard for coffee and cocoa

For a single estate with clean paperwork, reaching a documented negligible-risk conclusion can be straightforward. For the supply chains most small importers actually run, three things make it genuinely hard.

The first is the deforestation read itself. Coffee and cocoa are often grown under shade, as agroforestry, and a naive satellite overlay routinely mistakes ordinary canopy management for deforestation, throwing a false alarm that turns a genuinely negligible-risk plot into an apparent fail. Telling real post-2020 clearing apart from shade-tree management is the crux, and it is the subject of its own guide on why shade-grown plots get false-flagged. The second is smallholder aggregation: a cooperative lot draws on many farms, each its own plot and its own legality question, and mixing risk has to be assessed across all of them. The third is simply the legality leg, which no satellite can answer and which is easy to under-document.

This is the work we do. We take the origin data in whatever shape it arrives, run each plot through a type-aware deforestation screen that will not confuse agroforestry with clearing, assess the risk against the regulation’s criteria, and assemble the evidence file that makes a negligible-risk conclusion defensible, then, if you ask, file the statement in TRACES under your operator identity. What we do not do (what no one honestly can) is assume the legal responsibility, which stays with you as the operator. We build a defensible determination; we do not sell a guarantee. That line is deliberate, and we hold it across the full importer guide.