Conflict Minerals & CBAM: Compliance at the Material Level

Most supply chain regulation is about companies: know your supplier, assess your supplier, monitor your supplier. A second, harder class of rules is about materials — what a product is physically made of, and how and where the raw material was produced. Two of the most consequential examples are conflict-minerals rules and the EU's Carbon Border Adjustment Mechanism (CBAM). They look unrelated — one is a human-rights regime, the other a climate one — but they share a structure that makes them uniquely demanding: compliance depends on tracing a material back through the tiers to its origin.

That shared structure is why they belong together in a procurement risk conversation. A supplier list gets you nowhere; you need to follow the substance itself down the chain.

Conflict-minerals rules — the EU Conflict Minerals Regulation (EU) 2017/821 and, in the US, Dodd-Frank §1502 — target the "3TG" metals: tin, tantalum, tungsten, and gold, whose trade has financed armed conflict and human-rights abuses, notably around the Democratic Republic of the Congo. The obligation is due diligence aligned with the OECD guidance: identify the smelters and refiners in your chain, assess the risk that the minerals are conflict-linked, and report.

The difficulty is depth. 3TG typically enters a product as a tiny component many tiers down, aggregated across many mines and smelters. Establishing which smelters are in your chain — and whether they are responsibly sourced — is a sub-tier discovery and monitoring problem before it is a reporting one.

The Carbon Border Adjustment Mechanism (Regulation (EU) 2023/956) works differently but demands the same kind of upstream visibility. It places a carbon cost on imports of certain carbon-intensive goods — including iron and steel, aluminium, cement, fertilisers, electricity, and hydrogen — to stop carbon leakage as the EU tightens its own carbon pricing. Importers must report the emissions embedded in those goods, and eventually pay for them via CBAM certificates.

Embedded emissions are, again, supplier data: the figure depends on how a specific supplier, at a specific installation, produced a specific quantity of material. If you cannot identify the producing site and obtain or estimate its emissions, you cannot report accurately — and inaccurate CBAM reporting is a compliance exposure of its own.

For conflict minerals, the pragmatic entry point is the smelter list. Because 3TG converges on a relatively small global set of smelters and refiners, identifying which ones are in your chain — and checking them against recognised responsible-sourcing programmes — narrows an impossibly broad problem to a tractable one. The work is then keeping that list current and watching for a smelter losing its status, rather than re-surveying thousands of downstream suppliers each year.

For CBAM, the entry point is scope and data readiness. Map which of your imported goods fall into the covered categories, identify the producing installations, and establish how you will obtain or, where permitted, estimate their embedded emissions. The transitional phase is deliberately a reporting-and-learning period; using it to build reliable installation-level data pipelines is what avoids a scramble when the financial obligation and tighter data requirements arrive.

In both cases the durable capability is the same: a maintained, monitored map of the upstream sites and entities that matter, so compliance is a query against current data rather than an annual reconstruction from scratch.

The common thread is that conflict-minerals and CBAM compliance both require you to answer a question about origin: which smelter, which installation, which mine — and then to attach a risk or a number to it. That is the same capability that underpins multi-tier visibility and supplier location intelligence: resolving a material or a product back through the tiers to the specific sites and entities that produced it.

Continuous, open-source monitoring supports that work by keeping the map of who-and-where current, and by watching for the risk signals — a smelter losing its responsible-sourcing status, an installation's emissions profile changing, a conflict flaring in a sourcing region — that turn a compliant material into a non-compliant one. To see how material- and site-level intelligence works across a supplier network, request a demo, or read more in the Risk Center.