Three regulations, one workflow, built on your supply chain.

Not necessarily. The regulations that apply depend on your company’s size, where it’s headquartered, where it sells, and what it sources. Many companies fall under only one or two of these regimes at first, but scope tends to expand over time as thresholds are revised. Prewave’s platform is built so the same supplier and supply-chain data can support whichever regulations currently apply, and can extend as new ones do.

Prewave’s underlying data model, supplier network, and risk-monitoring engine aren’t built around a single regulation. They’re built to map supply chains, screen for the same categories of risk, and produce audit-ready evidence for whichever due diligence law applies. If a specific new or non-EU regulation isn’t covered yet, talk to an expert to walk through it directly.

It depends on where your company is headquartered, its size (employee count and turnover), and where it sells or sources. As a starting point: LkSG applies to companies with 1,000+ employees in Germany; CSDDD (post-Omnibus) applies to EU companies above 5,000 employees and €1.5bn turnover, or non-EU companies with over €1.5bn in EU turnover; EUDR applies to any company placing covered commodities (cattle, cocoa, coffee, palm oil, rubber, soy, wood and derivatives) on the EU market, regardless of size; and UFLPA / the EU Forced Labor Regulation apply based on where goods are imported. A scoping assessment specific to your company is the most reliable next step.

Yes. All of these regulations ultimately require the same core capability: knowing who your suppliers are, several tiers deep, and being able to prove what you know about them. Prewave runs supplier mapping, risk screening, and documentation on one shared data layer, so a single supplier record and its evidence can serve EUDR, LkSG, CSDDD, and forced labor requirements at once, rather than requiring separate systems and separate supplier outreach.