- Short answer
- Yes — for an importing operator only Article 10–11 risk steps fall away, and only when every relevant product was produced in a low-risk country.
- Where the list lives
- Annex to Commission Implementing Regulation (EU) 2025/1093. Check your own country there, not in a blog table.
- Default tier
- The Annex names most countries low risk; standard risk is only what it leaves out.
- High risk
- Belarus, Democratic People’s Republic of Korea, Myanmar, Russian Federation. Annex read September 2, 2026.
- Mixing
- One input of unknown, standard-risk or high-risk origin in the batch and the full risk work returns.
- New information
- Article 13(2): information pointing to non-compliance brings back Articles 10 and 11 and requires immediate notice to the authority.
- Not binding yet
- Operator duties under Articles 3 to 13 apply from 30 December 2026; 30 June 2027 only under Article 38(3).
- Shopify
- Shopify’s own docs name no EUDR feature (read September 2, 2026); at least one App Store app stores EUDR records.
Which risk tier is your source country in?
Under Article 29 of the EU Deforestation Regulation, the Commission classifies countries as low or high risk by implementing act; the list lives in the Annex to Commission Implementing Regulation (EU) 2025/1093: check your country there.
The high-risk tier holds four countries: Belarus, the Democratic People’s Republic of Korea, Myanmar and the Russian Federation. Any country the Annex does not name is standard risk — but the Annex names most countries low risk.
The European Parliament’s 2025 objection did not undo the list, which the Commission had already adopted and which is in force.
What does low-risk sourcing actually remove?
When every relevant commodity and product was produced in a low-risk country and your supply-chain assessment finds only a negligible risk of circumvention or of mixing with material of unknown, standard-risk or high-risk origin, two obligations fall away: the Article 10 risk assessment and the Article 11 risk mitigation. For an importing operator nothing else falls away; on request you must show the authority documentation that the risk is negligible.
The relief also ends early: under Article 13(2), information pointing to non-compliance or circumvention brings back Articles 10 and 11 and requires immediate notice to the competent authority. In the other direction, a micro or small primary operator established in a low-risk country who grew the goods themselves has a lighter lane — which simplified lane is yours depends on your role.
What stays the same wherever you buy?
For an importing operator, everything else stays. Article 9 still asks for the same information on every relevant product, geolocation included, kept for five years; Article 12 still asks for a due diligence system; and you still file a due diligence statement.
The seven commodities stay in scope whatever the tier. Articles 3 to 13 apply from 30 December 2026, and 30 June 2027 reaches only operators under Article 38(3) — natural persons or micro or small undertakings established as such by 31 December 2024, and even then not for products covered by the Annex to Regulation (EU) No 995/2010.
Shopify itself documents no EUDR feature or workflow (help.shopify.com, shopify.dev, changelog — read September 2, 2026); at least one Shopify App Store app stores EUDR records, so records live in your own files or in an app you choose.
This article was written entirely by AI under human editorial direction. The editor sets the topic and structure, runs multi-stage validation on facts, links, and interactive elements, and verifies the output is useful from a business perspective. All claims are checked against official Shopify sources. Details may change — always confirm critical data at shopify.com.
Editorial Policy