Due diligence — OpenStamps

Scope

Who you are and what you declare yourself to be. The regulation asks the operator to know its role and size (Art. 2, Art. 4); this page records the declaration and derives what follows from it. It does not decide either for you.

Operator

Legal name

EORI number

Street

Number

Postcode

City

Country of establishment

Email

Phone

Declaration

Role

Size class

Activity

Due diligence system last reviewed on

Timber Regulation I am a primary operator under the amended RegulationDeclared, not decided here. Only a micro or small primary operator files the one-time simplified declaration and may give a postal address instead of a geolocation. Confirm the definition with your adviser. Override: this product line was covered by the EU Timber RegulationThe carve-out in Art. 38(3) is by product, not by operator: wooden furniture headings (9401, 9403, 9406) and most wood headings are covered automatically and keep the 30 December 2026 date for micro and small operators. Tick only for a line the heading table cannot see.

Enrolled phones · the reader roster

Phones whose sealed field records this desk treats as its own capture points, by key hash — the SHA-256 of the phone's signing key, which is the device id in every record it seals. Enrolment is your policy and lives only here; it is written into no field record and proves nothing about the phone. A reply on the Collect tab offers its phone with one click; a phone that is lost is revoked here.

Reader policy

The thresholds this desk applies when it reads a chain. Pre-selected to the profile's defaults; change if your policy differs. They are digested into the roster record so an auditor can see what was applied.

Loose GNSS fix (m) pre-selected · change if wrong

Offline queue (days) pre-selected · change if wrong

Amber SLA (days) pre-selected · change if wrong

Product

One relevant product and the records behind it. Art. 9 lists what to collect; the Collect tab shows which of those items are on file here.

Product name

Trade name

HS heading

Other HS heading (digits)

Description of the goods

Species

Wood products must name the species by scientific name (Art. 9(1)(a)).

Scientific name	Common name	Remove

Quantity

Net mass (kg)

Volume (m³)

Units

Unit qualifier

Country of production

Add a country

Production period from

Production period to

A circumvention concern is recorded for this productMixing with wood of unknown origin, or a chain built to look low-risk. Recording it keeps the full Art. 10 assessment even when every country is low risk, and Art. 13(2) also requires you to inform your competent authority without delay.

Suppliers

Every business or person the product was supplied by, with postal address and email (Art. 9(1)(e)). The three fields are committed to on Save (a salted digest, lib/commit.js); sealed records carry the commitment and the disclosure stays here for an auditor.

Name	Postal address	Email	Role	Commitment	Remove

Buyers

Every business or person the product is supplied to (Art. 9(1)(f)).

Name	Postal address	Email	Remove

Statements you were given by suppliers

Reference and verification numbers of due diligence statements upstream of you. A statement you file may refer to them; a downstream operator or trader keeps them.

Reference number	Verification number	Remove

Plots

Geolocation of every plot the wood came from: six decimals, a polygon above 4 ha (Art. 2(28)). The picture is drawn from the declared coordinates without a basemap. Capture at the plot on a phone (the farmer's page, in their language), then bring the file here or ask for it on the Collect tab. The map beside each picture loads tiles only after you allow it.

Add a plot

Declared-plot JSON from the plot tool, or GeoJSON

Its .cts stamp, if you have one

Paste GeoJSON instead

GeoJSON (Point, Polygon, Feature or FeatureCollection)

Address only applicable micro or small first operator

An applicable micro or small first operator may give a postal address instead of geolocation when it clearly identifies the plot. This page records the claim; whether it holds is derived from the role and size you declared on Scope.

Postal address or official reference I am using the simplified primary-operator routeOnly recorded here. It holds only when the Scope tab declares a micro or small primary operator; eligibility is yours to confirm with your adviser or competent authority.

Evidence

Documents behind Art. 9(1)(g) and (h). Each file is fingerprinted on this device; only the SHA-256, a kind and a label are kept, never the bytes. A .cts for the same file is checked here, offline.

Drop evidence files or tap to choose · fingerprinted on this device · never uploaded

Collect

Art. 9(1): the eight items of information the operator collects before placing the product on the market. Each row below is derived from what is on file for the selected product. ◇ nothing contradicted it · ◔ missing or not checked · ✕ a contradiction.

Ask the field

Ask a supplier to capture a plot on their phone a link they open at the plot; no account, no app

This desk creates a request. You send the link by message. The person at the plot opens it in their language, taps each corner, stamps on their phone, and the sealed record comes back here through a mailbox on this origin that holds it for 14 days. The seal is made on their phone; this page checks it offline when it arrives, and records what the check found.

Supplier

Species (scientific name) pre-selected · change if wrong

Country of the plot

Language on their phone pre-selected · change if wrong

Assess

Art. 10: the operator assesses the risk that the product does not comply, against the criteria in Art. 10(2), and concludes. Art. 13: when every plot is in a low-risk country and no circumvention concern is recorded, only complexity and mixing are assessed. You record each finding; the page derives the rows.

Country benchmark

Criteria

Conclusion

Operator's conclusion (Art. 10(1)) Reasoning

Mitigate

Art. 11: where the assessment finds a risk that is not negligible, the operator takes measures until the risk is negligible or does not place the product. Record each measure and the residual risk; the rows are derived from the assessment.

Measures

Residual risk

After the measures, the risk is

Note

Statement

Annex II: the due diligence statement the first operator files in the Information System before placing the product on the market. Built from the records on this device; the six lines below are what would be filed.

Internal reference number

Country of activity

Border-cross country

Country of entry recorded locally, not filed

Comment Keep the geolocation confidentialRecorded in the statement as geoLocationConfidential.

Signatory, name and function

Signed on

Due diligence statement — Annex II

Gaps

Payload preview submission-service field names

Record a filing done elsewhere

If you filed this statement in your own Information System account, record what it returned so the retention clock and the authority pack carry it.

Reference number

Verification number

Filed on

A downstream operator or trader does not file its own statement. You keep the reference numbers you were given for this product; nothing is filed from here.

Reference number	Verification number

Records

Art. 12: the due diligence system is documented, reviewed at least once a year, and its records are kept for five years. Sealed records below are the ones this browser sent a fingerprint of to the timestamp relays; nothing else left the device. The authority pack ships the verifier and a one-page CHECK.txt beside the records, so an auditor in 2031 needs no website.

Unchooseable sample

Experimental: record a plot population and nominate a future public randomness round. This version prepares sampling terms; the reader does not yet establish that the population was fixed before that round or reproduce the sample draw. Do not use this record as evidence of independent sample selection. A plot omitted from the population remains outside its scope.

How many plots to visit (k)

Round publishes in

What the population is (mandatory — the one sentence an omission can be argued against)

Sealed records

Each row is a Cosmic Time Stamp this browser made: the bracket is what the seal fixes — not before the drand round, not after the timestamp authorities. "Original" says whether the sealed JSON is still held beside the stamp; a stamp without it can be timestamp-renewed and nothing else. Renew asks a timestamp authority for a fresh link over the seal and keeps it beside the stamp; the bytes and the content id never change.

Record	Product	Sealed at	Bracket	Original	Signer	Content id	Download

Custody

Field records, read as a chain

Every plot and harvest record that came in with a stamp, handed to the OSFP evaluator under this desk's own roster and policy — offline, on this device. The digest names the policy that was applied.

Disclosures for an auditor

The openings of the commitments this desk made: supplier tuples and the buyer's own party tuple. They live only here. Hand one to an auditor off-band; never paste it into a record.

Due diligence, one product at a time.

Scope

Operator

Declaration

Enrolled phones · the reader roster

Reader policy

Product

Species

Quantity

Country of production

Suppliers

Buyers

Statements you were given by suppliers

Plots

Add a plot

Evidence

Collect

Ask the field

Assess

Country benchmark

Criteria

Conclusion

Mitigate

Measures

Residual risk

Statement

Due diligence statement — Annex II

Gaps

Records

Unchooseable sample

Sealed records

Custody

Field records, read as a chain

Disclosures for an auditor