Preparing for an EPR Audit: Documents, Records, and What Regulators Check

Most brands think about EPR compliance in terms of the annual cycle: register, declare, pay, move on. What they do not think about is the audit. Producer Responsibility Organisations and national enforcement authorities can request your compliance records at any point — not just at declaration time, not just when something goes wrong. A German Zentrale Stelle audit letter, a French DGCCRF inquiry, or a Spanish MITERD documentation request can arrive without warning.

When it does, you have a limited window to respond with complete, accurate, and well-organized records. If your packaging data is scattered across spreadsheets, supplier emails, and the memory of whoever used to handle this, that window becomes a crisis. This article covers exactly what regulators check, what records you need, how long to keep them, and how to structure a compliance file that survives scrutiny.

What regulators are actually looking for

An EPR audit is not a criminal investigation. In the vast majority of cases, auditors are checking one thing: do your declared packaging quantities match reality? Specifically, they want to verify that:

• The total kilograms of each material you declared are consistent with the number of units you sold and the actual weight of your packaging components.
• Every packaging level (primary, secondary, tertiary) is accounted for and correctly classified.
• Your figures cover all the markets where you placed packaging on the market, not just the ones you chose to report.
• You hold a valid, current registration with the relevant PRO or national register.
• Fee payments correspond to the declared volumes and were made on time.

The methodology is straightforward: the auditor cross-references your declaration against your sales data (order volumes by country), then checks whether the packaging weights per unit are plausible and documented. If your declaration says you shipped 300 kg of cardboard to France but your sales records show 4,000 orders with an average box weight of 200g, the math produces 800 kg. That discrepancy needs an explanation.

The five document categories you must hold

1. Sales records by destination country

This is the starting point of any audit reconciliation. You need to be able to produce, for each reporting period and each EU country, the total number of orders (or units) shipped. Order exports from your Shopify store, WooCommerce backend, Amazon Seller Central, or ERP system serve this purpose. The records need to show the ship-to country and ideally the order date so auditors can verify you are reporting the correct period.

If you sell through multiple channels (D2C website plus Amazon plus wholesale), you need combined records. Auditors do not care which channel an order came through. They care about the total packaging that reached consumers in their jurisdiction.

2. Packaging Bills of Materials (BOMs)

For each SKU you sell, you need a documented packaging BOM: a list of every packaging component (product box, mailer bag, tissue paper, void fill, tape, labels), the material type of each component, and its weight in grams. This is the core technical document in an EPR audit. Without it, you cannot demonstrate how you arrived at your declaration numbers.

BOMs need to be dated and versioned. If your packaging changed mid-year — you switched from a plastic poly bag to a paper mailer in March — you need BOMs for both versions with the changeover date documented. Auditors will flag a single BOM applied to a full year if the packaging clearly changed during that period.

See our packaging BOM guide for a complete walkthrough of building and maintaining BOMs correctly.

3. Packaging weight verification records

A BOM that says "cardboard box: 185g" is only as credible as the evidence behind it. Regulators want to see how you determined that weight. Acceptable verification records include:

• Your own measurement records: a log showing that you weighed the packaging component on a calibrated scale, the date, and the result.
• Supplier specification sheets or technical data sheets that include the weight per unit, with the supplier's name and document date.
• Purchase invoices for packaging materials that specify weight or grammage (e.g., 80 g/m² corrugated board).

Your own measurements carry more weight than supplier spec sheets alone, because spec sheets represent nominal values that can vary in practice. Ideally, you have both.

4. Registration certificates and PRO contracts

Keep a copy of your current registration certificate (or confirmation email) from each PRO in each country. In Germany, this means your LUCID registration confirmation and your dual-system contract. In France, your CITEO or Leko adherence confirmation. In Spain, your ECOEMBES "código de adherido" documentation.

Also retain copies of any PRO contracts or adhesion agreements you signed. These documents confirm the scope of your compliance arrangement and the terms of your fee obligations.

5. Declaration submissions and fee payment records

For each declaration period and each country, retain:

• A copy of the declaration as submitted — the actual numbers by material category and packaging level.
• Confirmation of submission (email confirmation, portal receipt, or export of the submitted data).
• The fee invoice from the PRO.
• Proof of payment (bank transfer confirmation, payment receipt).

If you amended a declaration after initially submitting it, keep records of both the original and the amended submission, along with the reason for the amendment. Unexplained amendments without supporting documentation raise red flags.

How long to keep records

The PPWR specifies a minimum five-year record-keeping obligation for all documentation related to packaging declarations. Individual countries may have longer requirements.

The practical recommendation: retain all EPR-related records for seven years, which covers the stricter national requirements. The cost of storage is trivial compared to the risk of being unable to defend a declaration from six years ago.

Structuring your compliance file

A compliance file is the organized collection of documents that lets you respond to an audit request quickly and completely. The goal is to be able to answer the question "show me how you calculated your 2024 declaration for Germany" within hours, not days.

A good compliance file structure looks like this:

• Folder per country, per year. Top level: country (Germany, France, Spain). Within each: one folder per reporting year.
• Registration documents. Current registration certificate, PRO contract, and any correspondence about registration status.
• BOMs. All packaging BOMs in use during the reporting period, with version dates and notes on any changes.
• Weight evidence. Measurement logs or supplier spec sheets supporting each BOM component weight.
• Sales data extract. The order data used to calculate the declaration, exported from your platform with a clear date range.
• Calculation workbook. The spreadsheet or software export showing how you multiplied sales volumes by BOM weights to arrive at material totals.
• Declaration submission. Copy of what was submitted to the PRO, with submission confirmation.
• Fee invoice and payment. PRO invoice and bank payment confirmation.

If you use compliance software like Pack Declare, the calculation workbook and sales data extract are generated automatically and can be exported as PDF or CSV. Store these exports in your compliance file alongside the submission confirmation. Do not rely on always having access to the live software system — archive exports at the time of each declaration.

The most common audit findings

Based on the pattern of EPR enforcement actions across major EU markets, these are the issues that come up most often:

Underreporting shipping packaging

Many brands correctly report their product packaging (the box their product comes in) but forget or underweight their e-commerce shipping packaging — the outer mailer, the void fill, the tape. For direct-to-consumer brands, e-commerce packaging often constitutes 40-60% of total packaging weight. Missing it substantially understates your declaration.

Using nominal rather than actual weights

Declaring packaging weights based on what you think they are, or what a supplier's catalogue says, rather than what you have actually measured. Nominal weights are often 10-20% lower than actual weights due to manufacturing tolerances and specification rounding. Auditors sometimes physically weigh packaging samples to verify.

Missing country coverage

Registering and reporting for your top three EU markets but not the others. If your order data shows sales to Belgium and Sweden but you only have declarations for Germany, France, and Spain, that is an obvious gap that any auditor will flag. Every country that received at least one order needs to be addressed — even if the volumes are small.

Gaps in packaging level classification

Declaring all packaging as "secondary" or misclassifying your shipping box as "tertiary." For D2C e-commerce, packaging level classification follows specific rules that differ from B2B logistics. Getting this wrong affects not just your fee calculation but your legal compliance status.

No documentation trail for weight evidence

Having the right declaration numbers but being unable to demonstrate how you arrived at them. Numbers without a traceable calculation are not auditable. Even if your figures happen to be correct, an auditor who cannot verify the methodology treats the declaration as unsubstantiated.

Responding to an audit request

When an audit request arrives, the process is typically:

• Read the request carefully. Understand exactly which reporting period, which country, and which documentation is being requested. Do not send more than is asked for.
• Acknowledge receipt promptly, even if you need time to compile the documents. Most requests have a 10-30 day response window. Confirm you received the request and state when you will respond.
• Prepare a clean, indexed document package. Number the documents, add a cover sheet explaining what each document is, and make it easy for the auditor to follow the calculation chain from sales data to declaration numbers.
• If you identify discrepancies while preparing your response, consult a compliance advisor before submitting. Voluntary correction submitted with your audit response is treated more favorably than discrepancies the auditor finds themselves.

If you are not compliant for prior years — you have gaps in your registrations or missed declarations — the PPWR audit environment is not the time to hope nobody notices. The better approach is proactive self-correction: register retroactively, file amended or late declarations, and pay the fees owed. Most PROs and authorities treat voluntary correction significantly more leniently than detected non-compliance.

Understanding what auditors look for is inseparable from understanding the underlying requirements. If you have not yet read what the PPWR requires or the full guide to EPR compliance for e-commerce, those are your foundations. The PPWR compliance checklist is also a useful reference for verifying you have covered all the bases before an audit request forces the issue. If you claim eco-modulation bonuses for recyclable or recycled-content packaging, the eco-modulation optimization guide and recyclability grades explainer describe the documentation you will need to support those claims.

Frequently asked questions

How far back can EPR authorities audit my packaging declarations?

Most EU countries allow authorities to audit declarations going back five years. Germany can assess back-liability for up to five years under its packaging act. France's DGCCRF has a similar limitation period. The PPWR reinforces a five-year record-keeping minimum across all member states. Some countries have longer periods for cases involving deliberate misrepresentation.

What triggers an EPR audit?

Audits are triggered by several factors: routine random checks by the PRO or national authority, a significant discrepancy between your declared volumes and what authorities estimate based on your sales data, a complaint from a competitor or trade association, a tip from a marketplace enforcement report, or a failure to submit a declaration on time. Companies that register late or amend prior declarations also attract additional scrutiny.

Do I need original supplier invoices or are copies acceptable?

Copies are generally acceptable for record-keeping purposes, but you should retain original invoices (or certified copies) where possible. Scanned PDF copies stored in an organized digital archive are standard practice. What matters is that the document clearly shows the material, weight, and date of purchase. For packaging weight certificates from suppliers, originals are preferable but certified scans are usually accepted.

What happens if my audit reveals I underdeclared packaging volumes?

If an audit reveals underdeclaration, the most common outcome is a demand to pay the additional fees owed plus interest. Many PROs also apply a penalty surcharge, typically 10-25% of the underpaid amount. Criminal or regulatory fines from national authorities are reserved for cases of deliberate fraud or repeated non-compliance. Self-correcting your declarations before an audit almost always results in significantly lighter treatment than being caught during an audit.

Can I use compliance software records as audit evidence?

Yes. Records generated by compliance software are acceptable audit evidence, provided they can be traced back to primary source data. Auditors want to see that your declaration numbers can be reconstructed from sales order data, packaging BOMs, and material weight measurements. If your software stores these calculation inputs and outputs with timestamps, that creates the audit trail regulators look for. Export and archive records regularly rather than relying solely on access to a live software system.