Sourcing regulation has been moving in one direction for some time: more evidence required, further up the supply chain, with the obligation resting on the company placing the product on the market rather than on the supplier who caused the problem. The specifics differ by jurisdiction and change frequently, but the direction has been consistent enough to plan around.

What this means practically is that claiming you didn’t know is progressively less available as a position.

The Categories of Requirement

Rather than tracking individual regulations, it helps to understand the types, because the data requirements are similar within each.

Origin and provenance rules require you to know where material came from, sometimes to the level of the extraction or production site. Restricted substance rules require you to know what’s in your product at material level. Labour and human rights due diligence requires assessment of practices in your supply chain, often beyond tier one. Environmental due diligence requires similar assessment of environmental practices. Carbon-related border measures require emissions data attached to specific imported goods.

All of them need the same foundation: knowing what you buy, from whom, from where, containing what.

Building the Foundation

Supplier data at site level, not head office. A company registered in one country may produce in several, and it’s the production site that determines your exposure.

Material composition through the BOM, at a level that supports substance declarations. If your BOM records a purchased assembly without its composition, you can’t answer a substance question about it.

Batch traceability linking supplier lots through production to finished goods, in both directions.

Sub-tier visibility for materials where origin matters, which is the hardest element and the one most often deferred.

Documentary evidence stored against transactions rather than in a separate folder — certificates, declarations, test reports, linked to the specific deliveries they cover.

Prioritise by Exposure

Full traceability across every component is unachievable for most manufacturers. Concentrate where the risk concentrates: materials from regions with known concerns, substances subject to restriction, categories your customers already ask about, and anything sold into jurisdictions with active enforcement.

Customers Usually Arrive First

In practice, the pressure often comes from major customers before it comes from regulators, because they’re passing down their own obligations. Being able to respond quickly and completely is a commercial advantage, and being unable to respond can quietly cost you a tender you never knew you were disqualified from.

Check the Current Position

Requirements in this area have been introduced, amended, delayed, and rescoped repeatedly across major jurisdictions. Anything you read — including this — should be checked against the current state for your markets, sectors, and company size before you design a compliance programme around it.

The underlying data work, though, is stable regardless of how the rules settle. Knowing your supply chain in detail is useful under every version, and useful commercially even where no obligation applies.

ticktick.ai holds supplier site data, material composition, and batch linkage with documentary evidence attached to transactions.