Your supplier can offer competitive pricing and a strong sample, yet missing origin records or weak labour controls can still block the product from its destination market. Compliance and environmental, social and governance (ESG) checks therefore need to begin before supplier approval, rather than after production starts.
JTMAsia’s guide below helps you identify which requirements affect your product, what evidence to request and how to test supplier readiness before committing more resources.
Executive summary
- Start with the destination market, product classification and material composition. These factors determine the requirements that follow the goods.
- Separate legal compliance from ESG performance. A supplier needs evidence for both, although each serves a different sourcing decision.
- Connect every claim to the actual product, production site, upstream source and order records.
- Test the evidence through a pilot order before increasing volume or accepting long-term commitments.
Why compliance and ESG now shape ASEAN sourcing decisions
Compliance determines if a product, production process or shipment meets applicable legal and contractual requirements. ESG assesses how a supplier manages environmental impact, labour conditions and corporate controls.
The two areas now meet inside the same sourcing decision. Product safety rules determine market entry, while deforestation, carbon and forced labour requirements demand evidence from deeper parts of the supply chain.
Requirements from the destination market still apply when production takes place in ASEAN. The European Commission’s Access2Markets guidance states that products imported into the European Union must meet relevant health, safety, environmental and technical rules, including requirements that also apply to products made inside the EU. Supplier approval therefore needs to begin with the target market and the product’s Harmonized System (HS) code, the international classification used by customs authorities.
ASEAN also lacks one regional law that proves a supplier is ESG compliant. The ASEAN Simplified ESG Disclosure Guide for SMEs in Supply Chains, known as ASEDG, provides a common structure for smaller businesses to report ESG information to customers, financiers and investors. Adoption remains voluntary, so the guide supports data collection rather than replacing national laws or destination-market requirements.
Which 2026 requirements affect goods sourced from ASEAN
The most relevant regulations depend on the product and its destination. Map them before contacting suppliers because each rule requires a different evidence chain.
European Union Deforestation Regulation
The European Union Deforestation Regulation (EUDR) requires covered commodities and derived products placed on the EU market to be legally produced and free from recent deforestation or forest degradation (Regulation on Deforestation-free Products).
It covers cattle, cocoa, coffee, palm oil, rubber, soy and wood, together with selected derived products such as leather, chocolate, tyres and furniture. The regulation applies from 30 December 2026 to large and medium operators. Most micro and small operators follow from 30 June 2027.
A supplier’s country of export provides limited evidence under EUDR. Buyers need traceability back to the farm, plantation or forest source connected to the material.
Carbon Border Adjustment MechanismThe Carbon
Border Adjustment Mechanism (CBAM) is the EU system that places a carbon cost on selected imported goods according to their embedded emissions. Its definitive regime began on 1 January 2026.
CBAM currently covers selected goods in cement, iron and steel, aluminium, fertilisers, electricity and hydrogen. EU importers face authorisation, emissions reporting and certificate obligations.
ASEAN producers supplying covered goods need reliable emissions data linked to the actual installation and production process. A corporate sustainability report combining several factories does not prove the emissions of one shipment.
Uyghur Forced Labor Prevention Act
The Uyghur Forced Labor Prevention Act (UFLPA) is a US law that restricts imports connected to forced labour in China’s Xinjiang Uyghur Autonomous Region or entities included on the UFLPA Entity List.
Final assembly in ASEAN does not remove the risk when covered raw materials or components enter the product through upstream suppliers. US Customs and Border Protection updated its importer guidance in June 2026 with supply chain tracing documentation for high-priority sectors.
Buyers serving the US market need visibility beyond the ASEAN factory into material processors and other upstream production points.
European Union Forced Labour Regulation
The European Union Forced Labour Regulation prohibits products made with forced labour from being sold in or exported from the EU. It applies to every product category and companies of all sizes from 14 December 2027 (Forced Labour Single Portal).
The European Commission launched its preparedness package in June 2026. During an investigation, authorities can request information showing how a company identifies and addresses forced labour risks.
Supplier recruitment practices, worker access and upstream traceability therefore need attention during 2026 sourcing decisions, especially when a contract will continue into 2027.
Corporate sustainability due diligence
The Corporate Sustainability Due Diligence Directive (CSDDD) creates an EU framework for covered companies to address human rights and environmental impacts across their operations and global value chains.
A revised version entered into force on 18 March 2026. EU member states have until 26 July 2028 to transpose it into national law, with application beginning on 26 July 2029.
Many ASEAN suppliers sit outside its direct company scope. They still receive evidence requests when covered customers assess risks across their supply relationships.
Modern slavery reporting requirements
The UK Modern Slavery Act requires qualifying organisations to publish annual statements on actions taken to manage modern slavery risks in their operations and supply chains. Updated UK guidance from December 2025 also states that smaller suppliers often receive information requests from customers covered by the law.
Australia applies a similar annual reporting requirement to entities operating in Australia with consolidated annual revenue above A$100 million. ASEAN suppliers serving these buyers often need to provide workforce, recruitment and supply chain information even when the supplier has no direct Australian reporting obligation.
How compliance risk changes by product category
Each product category places the main evidence burden at a different point in the supply chain.
Agriculture, rubber, timber and furniture
The main risk begins at the land or forest source. You need visibility into where the commodity was produced and how it moved through processors, traders and manufacturers.
EUDR exposure applies to products such as coffee, palm oil, rubber, wood and selected downstream goods. A furniture factory audit therefore provides limited value when timber origin remains unclear.
Metals and industrial materials
The main risk sits in production emissions and installation identity. You need to know which plant produced the material, which production route it used and how embedded emissions were calculated.
CBAM creates the most direct requirement for covered EU imports. Emissions data from another facility or a regional average weakens the buyer’s reporting position.
Textiles, garments and footwear
The main risk sits in labour conditions and unauthorised subcontracting. Recruitment fees, wage deductions, excessive working time and restricted worker movement require deeper review than a standard health and safety inspection.
The Organisation for Economic Co-operation and Development’s garment and footwear guidance treats due diligence as an ongoing process across company operations and supply relationships. A social audit provides one source of evidence rather than a complete decision.
Electronics and vehicle components
The main risk often sits several tiers above final assembly. Components, minerals and processed materials can pass through several countries before reaching the ASEAN factory.
Map high-risk inputs to their processors or original sources. Factory ownership and final assembly location alone provide limited visibility into forced labour or mineral sourcing exposure.
How current ASEAN frameworks support supplier assessment
ASEAN frameworks help suppliers organise sustainability data, although they do not certify legal compliance. After identifying which 2026 requirements affect your product and destination market, use these frameworks to assess how well a supplier can provide the ESG information needed for further due diligence.
The ASEAN Taxonomy for Sustainable Finance, a regional classification system for environmentally sustainable economic activities, helps companies structure environmental information around recognised ASEAN criteria. Version 4, released in November 2025, completed technical criteria across sectors including agriculture, manufacturing and waste management.
For sourcing teams, taxonomy alignment can indicate that a supplier already tracks environmental activities in a structured way. It does not replace product certificates, factory permits, emissions records or traceability evidence required under specific regulations.
The ASEAN Simplified ESG Disclosure Guide, a regional ESG reporting guide designed for SMEs in supply chains, provides a more practical starting point for supplier assessment. Version 2 covers areas such as emissions, energy, water, waste, workforce conditions and governance controls.
Use the guide to identify which ESG data a supplier already records, then compare those available records with the evidence required by your product and destination market. Gaps in the supplier’s data show where deeper verification is needed before approval.
National developments also affect how prepared suppliers are to provide sustainability information. The table below focuses on data readiness rather than legal compliance, helping you understand what information a supplier is more likely to have available during assessment.
| Market | Relevant development | What it tells you about supplier readiness |
|---|---|---|
| Vietnam | Extended Producer Responsibility assigns covered producers and importers responsibility for recycling or treating specified products and packaging placed on the Vietnamese market. | Suppliers affected by these rules may already maintain records on packaging, product categories or waste responsibilities. Check if the data connects to your specific product. |
| Thailand | Thailand Taxonomy Phase 2 covers sectors including agriculture, manufacturing, construction and waste management. | Suppliers using the taxonomy may have more structured environmental activity data. Confirm the information applies to the facility and process under review. |
| Malaysia | The National Sustainability Reporting Framework introduces International Sustainability Standards Board reporting requirements through a phased schedule. | Larger suppliers may have more developed climate and sustainability reporting systems. Check the reporting boundary before using group-level data for a factory assessment. |
| Indonesia | Financial Services Authority Regulation 51 requires issuers and public companies to implement sustainable finance principles and publish sustainability reports. | Larger corporate suppliers may already produce formal ESG information. Factory-level records are still needed when the sourcing decision depends on a specific production site. |
The practical use of these frameworks is therefore straightforward: first define the evidence your sourcing decision requires, then assess how much of that information the supplier already collects. Strong data readiness reduces verification work, while missing or overly general records identify where supplier checks need to go deeper.
What compliance and ESG evidence to request before supplier approval
Once you know which regulations and ESG requirements affect the product, convert them into a supplier evidence request. Ask only for records connected to the product, factory and destination market under review.
A practical pre-approval file can include:
| Evidence area | Records to request | Why you need it |
|---|---|---|
| Legal entity and factory scope | Company registration, factory licence, operating permits, factory address and ownership information | Confirms which company and site will manufacture the product |
| Product compliance | Product specifications, test reports, certificates, technical files and destination-market declarations | Shows that the product is supported by the required technical and regulatory documentation |
| Material and origin traceability | Bill of materials, upstream supplier list, source locations, purchase records and chain-of-custody documents | Shows where regulated or high-risk materials enter the supply chain |
| Environmental records | Energy data, emissions calculations, water records, waste documentation and relevant environmental permits | Provides the operating data behind environmental and carbon claims |
| Labour and social records | Employment contracts, payroll records, working-time records, recruitment policies and grievance procedures | Provides evidence of how labour conditions are managed at the production site |
| Subcontracting disclosure | List of subcontractors, outsourced processes, production locations and responsibility allocation | Identifies work performed outside the declared factory and the additional sites that need consideration |
Match the evidence request to the regulatory risk
Avoid sending the same ESG questionnaire to every supplier. The evidence request needs to follow the requirement identified earlier in the sourcing assessment.
For example:
- EUDR-covered products: request commodity origin, plot or source information, chain-of-custody records and upstream supplier details.
- CBAM-covered products: request installation-level emissions data, production route information and the methodology used to calculate embedded emissions.
- Forced labour exposure: request recruitment records, payroll information, worker policies and upstream supplier information for higher-risk inputs.
- Product market access: request the test reports, technical files and declarations required for the destination market.
A shorter, targeted request usually gives more decision value than a long general questionnaire.
Request evidence at the right level
Supplier documents often exist at different organisational levels. Ask for records that match the level of the sourcing decision.
A group sustainability report describes the company overall. A sourcing decision usually needs evidence linked to the specific factory, production process, product and upstream material source involved in your order.
For example, a corporate emissions report provides useful background, while CBAM-related sourcing requires data connected to the installation producing the covered goods. A company-wide labour policy also needs supporting site-level employment records when the assessment concerns one factory.
Separate required evidence from supporting evidence
Classify requested documents into two groups:
- Required evidence: Documents needed to satisfy a legal, customer or product requirement. Missing records can prevent supplier approval.
- Supporting evidence: Documents that strengthen the ESG assessment, such as sustainability reports, voluntary certifications or internal policies.
The distinction keeps the supplier review focused. A strong voluntary certification cannot compensate for missing mandatory product, origin or labour evidence.
How to verify compliance and ESG evidence before ordering
Supplier evidence becomes reliable when the documents, declared factory and actual transaction tell the same story. Verification therefore needs to test consistency rather than simply confirm that files exist.
Step 1: Build a product compliance map
Turn the requirements identified earlier into one verification sheet with four fields:
- Applicable requirement
- Responsible company
- Evidence owner
- Verification status
The purpose is to show where each compliance obligation sits across the supply chain. Product testing may depend on the manufacturer, while material origin can sit with an upstream processor or plantation.
For example, An EU buyer sourcing rubber components from Thailand may need EUDR-related origin information from the upstream rubber source, while the component factory remains responsible for product specifications and manufacturing records. Treating both requirements as one factory responsibility creates an evidence gap before verification even begins.
Tip: Mark any requirement that depends on a company you have never contacted directly. Those points deserve deeper attention because the final supplier does not fully control the underlying evidence.
Step 2: Cross-check documents against independent details
Verify more than the document itself. Compare the legal entity, facility address, issuing body, dates and scope with information from other records or the issuing organisation.
Then connect important documents to a real transaction.
For example, a material certificate becomes stronger evidence when its reference appears consistently across:
- Supplier invoice
- Delivery record
- Production batch
- Finished order documentation
For example, A supplier presents an environmental certificate covering “ABC Manufacturing Co., Ltd.” The planned product is produced at Factory 2, while the certificate only covers Factory 1. The certificate is authentic, although it does not support the factory under review.
Tip: Authenticity and relevance are separate checks. A genuine document still fails verification when it covers the wrong company, site or process.
Step 3: Test if documented controls operate in normal production
If an on-site review is part of the approval process, use it to test the controls described in the submitted records rather than repeat document collection.
Select a live production order and ask the relevant employees to show how the records are created during normal work. Then compare what happens on the floor with the documented procedure. Useful checks include:
- Following one material from receipt into production
- Selecting one finished item and tracing its production record backwards
- Confirming which processes leave the factory
- Asking who approves exceptions when normal procedures fail
For example, A garment factory declares that all embroidery is produced internally. Production records show embroidery work, although no embroidery equipment is present at the facility. The discrepancy indicates an undeclared subcontracting step that needs resolution before approval.
Tip: Choose the sample yourself. Records selected in advance by the supplier are useful background, while randomly selected records provide a stronger test of day-to-day control.
Step 4: Run a pilot-batch trace before commercial approval
A pilot batch tests how the supplier’s compliance system performs under a real order rather than an audit scenario.
Trace one batch backwards from the finished product to its relevant material source, then follow the same records forwards through production and shipment preparation.
Set the pass criteria before the pilot begins. Focus on 4 questions:
- Can every required record be retrieved?
- Do identifiers remain consistent across the chain?
- Can the supplier explain discrepancies quickly?
- Does the evidence cover the exact batch being tested
For example, A furniture supplier provides legal timber documentation during onboarding. During the pilot trace, one timber batch cannot be connected to the purchase record shown for the finished order. The supplier may have the correct documents at company level, although the transaction-level trace is incomplete.
The right response is to hold commercial approval for that batch, identify where the record connection failed and repeat the trace after correction.
Tip: Use the pilot to test response quality as well as paperwork. A supplier that identifies the source of an evidence gap and produces a clear correction path presents less execution risk than one that repeatedly replaces documents without explaining the discrepancy.
Use verification results to make an approval decision
Do not convert the exercise into a general ESG score. Record each requirement separately so the approval team knows exactly what is confirmed and what still creates risk.
- Verified: Evidence and operating records are consistent.
Example: The supplier reports renewable electricity use, and the claim matches utility invoices and renewable energy certificates for the same facility and period. - Gap: Evidence exists, although one control needs correction.
Example: Working-time records are available and payroll data matches, while several overtime approvals are missing the required supervisor sign-off. - Unverified: The claim cannot be connected to reliable evidence.
Example: The supplier states that all timber comes from responsible sources, yet purchase records do not identify the upstream source or provide chain-of-custody documentation. - Critical issue: The finding creates a legal, market-access or serious ESG risk.
Example: A regulated material originates from an undisclosed subcontractor, leaving the buyer unable to confirm traceability required for the destination market.
Use the result to set the next action: approve verified requirements, correct gaps, investigate unverified claims and block approval where a critical issue remains open.
How to maintain compliance after production starts
Compliance after approval depends on controlling what changes from one order to the next. The main risks come from supplier substitutions, missing shipment records and unresolved exceptions that enter production after the initial review.
Control supplier changes before implementation
Require written approval before the supplier changes its factory, subcontractor, raw material source or production process. Define the notification requirement in the manufacturing agreement and purchase terms.
Each change request needs to state:
- What will change
- Which compliance requirement is affected
- Which supporting evidence has changed
- When the new arrangement enters production
Based on JTM’s experience, you should tie every approved change to the relevant SKU, purchase order or material code. Avoid broad approvals such as “new supplier accepted” when several products use different sourcing routes.
Maintain a compliance file for each shipment
Keep the evidence supporting each shipment under one identifiable order or batch reference. The file needs to show which records apply to the goods actually shipped, rather than provide a collection of company-wide certificates.
Depending on the product, the file can include:
- Batch or lot reference
- Material origin records
- Required test or emissions data
- Shipment-specific declarations
Use the same identifier across purchase orders, production batches and compliance records. One traceable reference reduces the time needed to respond to a customs or customer query.
Define when production or shipment must stop
Not every compliance issue deserves the same response. Set escalation rules before production begins so the supplier and buyer know which findings block shipment.
Stop or hold the affected order when:
- A mandatory document is missing or invalid
- Material origin cannot be established
- An unauthorised factory or subcontractor appears
- Evidence has been falsified
Operational filing errors or correctable process gaps can follow a corrective action process when they do not affect the legality or traceability of the shipment.
Tip: Define the release condition at the same time the issue is raised. “Supplier to fix” is too vague. State the exact record, approval or retest required before shipment resumes.
Reassess only the controls affected by a material change
A new product, destination market, factory or upstream source can change the compliance profile after approval. Reopen the specific controls affected by that change rather than repeating the full onboarding process.
For example:
- A new EU destination can introduce additional product or traceability requirements.
- A new material source can affect origin or deforestation evidence.
- A new subcontractor can change labour or production-site exposure.
- A revised production process can change emissions or technical compliance data.
Maintain a simple trigger register with 4 fields: change event, affected requirement, required action and completion status. It gives your team a clear reason for reopening due diligence instead of relying only on annual reviews.
Monitor the controls that matter to each product
Post-approval monitoring works best when it follows the risks identified during supplier approval. Avoid asking every supplier for the same monthly ESG information.
A rubber product affected by origin requirements needs stronger attention to material-source changes. A CBAM-covered metal product needs consistent installation and emissions information. Labour-intensive production needs closer control over subcontracting and workforce-related exceptions.
With JTM advice, you should set the monitoring plan when the supplier is approved. Define which changes require notification, which records stay attached to each shipment and which findings immediately stop release. The supplier then knows the operating rules before commercial volume increases.
Strengthen compliance checks with JTMAsia sourcing support
Compliance and ESG requirements become easier to manage when supplier claims are connected to the actual factory, production process and upstream sourcing route. Local verification also helps resolve document gaps or unclear subcontracting before they affect production.
JTMAsia supports supplier scouting, factory validation and sourcing execution across ASEAN. Our team helps buyers assess supplier readiness, verify critical sourcing information and build a clearer path from supplier selection to commercial production.
Planning an ASEAN sourcing project? Contact JTMAsia to discuss the supplier and compliance checks your project requires.
FAQs
A formal ESG report is optional unless a buyer, regulator or contract specifically requires one.
For smaller suppliers, site-level records often provide stronger sourcing evidence. Review energy data, waste records, payroll information and material sourcing documents against the risks identified for the product.
Treat the refusal as a sourcing risk when upstream identity is necessary for traceability or regulatory compliance.
Use a non-disclosure agreement or controlled third-party verification to protect commercial confidentiality. If critical origin information remains unavailable, hold approval for the affected material or product.
Compliance responsibility needs to be divided clearly between the buyer, trader, factory and relevant upstream supplier.
The trader can coordinate document collection, while product, origin and factory evidence still needs to come from the party that controls that information. Keep contractual access to critical records when the sourcing decision depends on them.
An order can continue only when the gap does not create a legal restriction or serious sourcing risk.
Use a corrective action plan for control weaknesses that have a clear owner, deadline and closure evidence. Hold the affected order when the gap involves false documentation, prohibited origin or serious labour concerns.
Start with your product, destination market, material composition and buyer requirements.
Map these four factors before approaching the supplier. A rubber product entering the EU, for example, can fall under the European Union Deforestation Regulation (EUDR), which requires covered products to meet deforestation-free and legality requirements. A covered aluminium product entering the EU instead brings Carbon Border Adjustment Mechanism (CBAM) emissions requirements into the sourcing process.
So, build a product-level compliance map rather than asking, “Which ESG rules apply in Vietnam or Thailand?” Destination market and product characteristics often determine the most important requirements.
Maintain a regulatory register and update it whenever your product, market, supplier or relevant regulation changes.
Record the rule, products affected, effective date and evidence required. Review official regulator updates periodically and add a contract clause requiring suppliers to notify you when production sites, materials or upstream sources change.
Also, use event-based reviews alongside scheduled reviews. A new EU regulation, new destination market, different material source or new subcontractor gives you a clear reason to reopen the affected compliance check.
There is no single ASEAN market with the strictest ESG rules because requirements differ by company type, sector and activity.
Singapore has relatively developed mandatory sustainability reporting requirements for listed issuers, including climate-related disclosures under Singapore Exchange rules. Malaysia is also implementing its National Sustainability Reporting Framework using International Sustainability Standards Board standards as the reporting baseline. These frameworks indicate stronger corporate reporting requirements, rather than proving that every supplier in either market faces stricter sourcing rules.
Compare suppliers by the requirements attached to your product and factory rather than selecting an ASEAN country based on an overall ESG ranking.
Compliance and ESG checking does not need to be expensive when the assessment follows the actual risk of the sourcing project.
A document review and supplier questionnaire require relatively limited resources. Costs rise when the project requires laboratory testing, factory visits, specialist audits or deep upstream traceability. High-risk products therefore justify deeper checks, while lower-risk suppliers can start with targeted document review.
Spend verification resources where failure has the greatest commercial impact. Prioritise requirements linked to market access, regulated materials, serious labour risks and evidence that depends on several supply-chain tiers.
