An EU buyer isn't going to ask whether you're "fully traceable." They're going to hand you one lot number and ask you to trace it back to where it came from and forward to every customer it went to — then time how long that takes.
Article 18 of Regulation (EC) No 178/2002, the EU's General Food Law, is the rule behind that test. Buyers usually call it by its short name: one step back, one step forward. For spice and ingredient exporters, it isn't background reading — it's the exact thing a buyer's compliance team is checking when they review your lot records, supplier files, and recall plan, and whether all three actually connect.
Three questions decide whether you pass:
- Can you say exactly where the lot came from?
- Can you say exactly where it went?
- Can you pull the records that prove both, fast enough to be useful in an audit or a recall?
If any of those answers is slow, vague, or depends on someone digging through email, the system is weaker than the buyer needs it to be.
What EU buyers usually mean by “traceability”?
Most buyers aren't asking for your company history or a page about where your spices are grown. When they say traceability, they mean something narrower: can you support legal traceability, product release, incident response, and a targeted recall if one is ever needed.
The legal backbone is Article 18, which requires traceability of food, feed, food-producing animals, and anything meant to end up in food or feed, at every stage from production to distribution.
The legal minimum: one step back, one step forward
Article 18 sets a specific floor. A food business has to be able to name the supplier it received the product, or a relevant input, from, and the business customer it supplied the product to — and it has to have systems in place to hand that information to the relevant authorities the moment they ask for it.
That's the legal minimum. Most EU buyers expect more.
What buyers expect on top of the legal minimum
The European Commission's own guidance on Article 18 puts the minimum on-hand records at the name and address of the supplier, the name and address of the customer, what the product is, and the date of the transaction or delivery.
In practice, that's rarely enough to satisfy a buyer's own due diligence. They're also managing risks the law doesn't spell out directly: lot integrity, spec consistency, how you'd handle a contamination investigation or a complaint, authenticity, keeping customer orders properly segregated, and how fast you can put your hands on the paperwork during an audit.
So the records worth keeping usually go further than the legal minimum — a batch or lot reference, quantity, a more precise product description, and links to your own production, packing, and dispatch records. For ingredient buyers, those extra fields are often the difference between a system that looks compliant on paper and one that actually holds up when something goes wrong.
Why speed matters more in traceability
A supplier can have clean paperwork, lot codes on every label, and a well-designed spreadsheet — and still fail a real traceability test. What buyers are actually checking is speed and reliability under pressure: if there's a complaint, an MRL exceedance, an undeclared allergen, or a documentation mismatch, can you produce a consistent, complete answer without delay?
That means being able to pull, by lot, your incoming raw material records, production or blending records, packing records, finished-goods release, COAs and test reports, shipping and dispatch records, and a list of which customers received that lot. A system that needs two days and three conflicting spreadsheets to answer a basic lot query won't survive serious scrutiny. It's also how recalls go wrong in both directions — too little action, because nobody can pin down what's actually affected, or too much, because nobody can tell where the lot boundaries are.
These records aren't just internal paperwork, either. Regulation (EU) 2017/625 is what lets EU authorities inspect and act on exactly this kind of evidence, so when a buyer asks for traceability proof, they're often asking the authority's own question in commercial language: can you prove you were in control of this product and where it moved?
What a working system actually looks like
For a food ingredient exporter, a system that tends to pass buyer scrutiny includes a unique lot or batch ID for every lot, a clear link between incoming raw material and the finished lots it went into, supplier approval records for the farms, collectors, processors, or intermediaries you buy from, dates that connect packing through to dispatch, the ability to name every customer who received a given lot, document control tight enough that specs, COAs, and labels can't drift out of sync, and — ideally — a mock recall or trace exercise on file that proves the system works, not just that it exists.
If the product is blended, reprocessed, repacked, or pulled together from more than one source, that logic needs to survive every one of those steps. It's the point where most systems quietly start to fail.
Where multi-origin supply chains usually break
Most traceability failures aren't the result of bad intent. They're the result of commercial shortcuts that seemed harmless at the time:
- pooling material from several farms without disciplined lot coding
- relabelling stock without carrying the original source reference forward
- leaning on a broker's paperwork that never actually ties back to the physical goods
- testing one composite sample while shipping several lots that are, operationally, different products
- switching warehouses, packers, or subcontractors without updating the records to match
These are exactly the weak points an EU buyer's due diligence team knows to probe.
Questions to be answered for traceability
- Can you complete a one-step-back, one-step-forward trace in hours, not days?
- What lot code is actually on the shipped goods, and does it match the one on the documents?
- Can you connect a finished lot back to the raw materials and production records that made it?
- How do you handle multi-origin or aggregated supply, and where does source visibility start to blur?
- Have you run a mock recall or trace exercise — and what did it turn up?
- How fast can you name every customer who received an affected lot?
- Are quantity, batch, delivery date, and customer records all in one working system, or scattered across several?
If the honest answer to more than one of these is "it would take a while," that's the gap a buyer will find first.
FAQ
What does "one step back, one step forward" mean under Article 18? It means a food business should be able to name the immediate supplier it got a lot from and the immediate business customer it supplied that lot to, and hand both over to authorities quickly when asked.
Are those records enough on their own for an EU buyer to approve you? Usually not. Buyers expect that legal minimum to connect cleanly to your batch coding, COAs, dispatch records, complaint handling, and recall testing — not sit as a standalone file.
Why do EU buyers focus so specifically on this one rule? Because it's what lets them isolate an affected lot, defend a release decision, and respond without guessing if something goes wrong — a food safety issue, an authenticity question, or just a documentation gap.
Where can you check the official Article 18 text? The consolidated text of Regulation (EC) No 178/2002 is on EUR-Lex; Article 18 is the traceability provision, inside the broader General Food Law.
Does Article 18 require full farm-level traceability for every ingredient? No, not as a blanket rule. The legal floor is identifying the immediate supplier and immediate customer, backed by procedures that make that information retrievable fast. Farm-level detail is something a buyer may ask for on top of that — it isn't something the law demands outright.
The bottom line
Passing EU due diligence isn't about being able to say you're "fully traceable" in a brochure. It's about proving, quickly and consistently, what a lot is, where it came from, what happened to it, and where it went next. For an EU buyer, that isn't a nice-to-have. It's the baseline for sourcing they're willing to put their name behind.
Based on: Regulation (EC) No 178/2002 (Article 18 and the wider withdrawal/recall framework), the consolidated EUR-Lex text of that regulation, the European Commission's traceability factsheet and General Food Law materials, Regulation (EU) 2017/625 on official controls, and Commission Implementing Regulation (EU) No 931/2011 for the additional rules that apply to animal-origin ingredients.