CBAM record keeping is a mandatory legal obligation under Article 6(6) of Regulation (EU) 2023/956, requiring authorized declarants to retain 7 categories of documentation for a period ending at the close of the 4th year following the declaration year. For calendar year 2026 imports, that retention window extends to December 31, 2031. Understanding precisely which records must be kept, and for how long, determines whether an importer can survive a National Competent Authority (NCA) inspection with zero liability exposure.
The obligation is not merely administrative. NCAs hold sweeping inspection rights under Article 15 and may request any retained document at any point during the retention period without advance notice. Customs authorities simultaneously forward import data to the CBAM Registry, meaning discrepancies between customs records and CBAM declarations are automatically flagged for NCA review. Importers who cannot produce the required documentation on demand face the same financial penalties as those who failed to comply in the first place.
This guide covers every document category, the precise retention timeline, how audit inspections work, and the practical steps for building a documentation system that holds up under scrutiny. Understanding the broader compliance framework starts with the EU CBAM guide, which explains the certificate-based mechanism and how record-keeping connects to the annual declaration cycle.
Caption: Organizing CBAM documentation by declaration year is the most effective structure for audit readiness across the 4-year retention window.
What the CBAM Record Keeping Obligation Requires
CBAM record keeping is the legal duty of every authorized declarant to preserve all documentation supporting their annual CBAM declaration for a minimum period defined by Article 6(6) of Regulation (EU) 2023/956, as amended by Regulation (EU) 2025/2083.
The obligation applies from the moment the definitive phase began on January 1, 2026. Every import transaction involving Annex I goods, every emissions data exchange with a non-EU producer, every verifier report, and every certificate purchase confirmation becomes part of the mandatory record set. The law does not permit selective retention. Each document category listed in Article 6(6) must be retained in full.
Seven categories of records fall within the CBAM documentation requirements. The table below lists each category alongside its legal source and the specific content it must contain.
| Record Category | Legal Basis | Required Content |
|---|---|---|
| Customs declarations for CBAM goods | Article 6(6); Article 25 | CN code, net mass, country of origin, importer EORI, release date |
| Embedded emissions data from producers | Article 7; IR 2025/2547 | Specific direct and indirect emissions (tCO₂e/t), production route, monitoring plan reference |
| Verification reports | Article 8; IR 2025/2546 | Verifier identity, accreditation number, verified emissions figures, site visit confirmation |
| CBAM certificate purchase and surrender confirmations | Article 22; Article 6 | Certificate IDs, purchase dates, prices paid, surrender date, registry transaction reference |
| Article 9 deduction supporting documentation | Article 9 | Carbon price scheme name, legally binding proof, amounts effectively paid, Commission recognition reference |
| Internal compliance calculations | Article 6; Article 15 | CBAM factor applied, SEFA adjustment, embedded emissions totals by goods type and country of origin |
| Correspondence with producers, verifiers, and NCAs | Article 15 | All written communications relevant to emissions data accuracy or compliance positions taken |
The retention period calculation follows a consistent formula. Take the calendar year of importation, add 1 year (to reach the declaration year), then add 4 more years. For 2026 imports declared by September 30, 2027, records must be retained until December 31, 2031. For 2027 imports declared by September 30, 2028, retention runs to December 31, 2032.
How Long Must CBAM Records Be Retained
The retention period ends at the close of the 4th year following the declaration year, as stated in Article 6(6) of Regulation (EU) 2023/956, as amended. This is not 4 years from the import date or 4 years from the purchase of certificates. The clock starts from the declaration year, which is the year after the import year.
The 3 retention periods currently active or approaching for EU importers are listed below, with exact window dates.
- 2026 imports: Declared by September 30, 2027. Retain records until December 31, 2031.
- 2027 imports: Declared by September 30, 2028. Retain records until December 31, 2032.
- 2028 imports: Declared by September 30, 2029. Retain records until December 31, 2033.
The practical implication is that an importer active from 2026 onward accumulates overlapping retention windows. By 2030, that importer holds live retention obligations for 2026, 2027, 2028, and 2029 import years simultaneously. A document management system that cannot separate records by declaration year creates an unacceptable audit risk.
Importers working with multiple suppliers across multiple CBAM sectors, including iron and steel, cement, aluminium, fertilizers, electricity, and hydrogen, face the highest documentation volume. An importer sourcing from 20 production installations in 4 countries generates verification reports, monitoring plans, and emissions data sets for each installation, each year. That volume makes systematic filing essential from day one of the definitive phase.
The compliance obligations that produce these records are detailed in CBAM for EU importers, which covers the full 10-step process from authorization through to the annual declaration and certificate surrender.
What Happens During a CBAM Documentation Audit
NCA inspections operate on a risk-based selection model under Article 15 of Regulation (EU) 2023/956. The NCA does not announce audits in advance. Inspectors may request any retained document within the active retention period on demand. An importer who cannot produce requested records within a reasonable response window faces the same financial exposure as one who failed to comply with the underlying obligation.
The Commission runs a parallel cross-border analysis. Customs authorities automatically transmit import data to the CBAM Registry under Article 25, meaning the NCA already holds the importer's declared CN codes, quantities, and countries of origin before any inspection begins. The NCA compares those customs records against the CBAM declaration figures. A discrepancy of more than a de minimis margin triggers automatic escalation for review.
Three types of discrepancy most commonly trigger NCA attention.
- Embedded emissions figures that are systematically lower than the country-specific default values published in Implementing Regulation (EU) 2025/2621, without a corresponding verification report from an accredited verifier.
- Article 9 deductions claimed for countries where the Commission has not yet recognized the carbon pricing scheme as qualifying.
- Certificate surrender totals that do not match the product-adjusted embedded emissions calculation after applying the SEFA free allocation factor.
An importer who has retained all 7 record categories and can produce them in organized form resolves each of these points within hours. An importer without systematic record keeping faces weeks of reconstruction effort, with no guarantee of avoiding penalties. The penalty for authorized declarants who fail to surrender sufficient certificates is €100 per tonne CO₂e not covered, and the certificate surrender obligation remains outstanding even after the penalty is paid.
How to Build a CBAM Record-Keeping System
Building an audit-ready CBAM record-keeping system requires 5 structural decisions made before the first import shipment is processed. Each decision determines whether the system can respond to an NCA information request within days rather than weeks.
- Define the folder structure by declaration year, not calendar year. The retention period is tied to the declaration year. Every document for 2026 imports belongs in the "Declaration Year 2027" folder, regardless of when the document was created or received.
- Assign one named compliance owner per declaration year. Inspection requests arrive addressed to the authorized declarant account. A named owner ensures no request goes unanswered due to staff turnover or organizational change.
- Capture customs declaration data at the point of import. Retrospective reconstruction from customs authority records is possible but slow and incomplete. The CN code, net mass, country of origin, and production installation identifier must be logged at the time the customs declaration is filed.
- Request emissions data from producers in writing, at least once per quarter. Written requests and producer responses form the correspondence record required under Article 15. A single annual data request creates a documentation gap if the producer later disputes the figures.
- Store verification reports with the corresponding emissions data sets. Accredited verifiers issue reports tied to specific embedded emissions figures for specific installations and specific periods. Separating these creates a matching problem during audit that can delay clearance.
The record-keeping obligation connects directly to the verification process. Verification reports produced under Implementing Regulation (EU) 2025/2546 require a physical site visit to each non-EU production installation for the first verification period. Those reports must be retained in the same folder as the emissions data they verify. CBAM verification explains the accreditation requirements verifiers must meet and what a compliant verification report must contain.
Caption: The 4-year retention window starts from the declaration year, not the import date, creating rolling multi-year obligations for active importers.
CBAM Record Keeping: Common Questions
What documents count as CBAM documentation requirements under Article 6(6)?
The 7 mandatory document categories under Article 6(6) are customs declarations for CBAM goods, embedded emissions data from producers, verification reports, certificate purchase and surrender confirmations, Article 9 deduction supporting documentation, internal compliance calculations, and all correspondence with producers, verifiers, and NCAs. No category is optional. An importer who cannot produce a complete set from any one category faces inspection liability.
Does the 4-year retention period apply from the import date or the declaration date?
The 4-year period begins from the end of the declaration year, not from the import date or the date records were created. For 2026 imports (first declaration deadline: September 30, 2027), the retention window runs until December 31, 2031. This is confirmed by Article 6(6) of Regulation (EU) 2023/956, as amended by Regulation (EU) 2025/2083.
Are digital records acceptable for CBAM compliance purposes?
Regulation (EU) 2023/956 does not specify a format requirement. NCAs in the member states where most importers are established accept digital records, provided the records are accessible, legible, and reproducible on request. Scanned copies of physical documents are accepted. The key criterion is that records can be produced promptly upon NCA request during the active retention period.
What is the CBAM penalty for failure to retain records?
The regulation does not set a standalone penalty for failure to retain records as a separate offense. The practical consequence of missing records is that an importer cannot defend an NCA challenge to their embedded emissions figures or certificate surrender calculations, which exposes them to the €100 per tonne CO₂e shortfall penalty under Article 26(1). For unauthorized importers, the exposure is €300–500 per tonne CO₂e. The CBAM penalties page sets out the full penalty structure and how NCA enforcement proceedings work.
Do importers using default values still need to retain records?
Importers who use the default values from Implementing Regulation (EU) 2025/2621 rather than actual verified emissions still retain the same record categories. The customs declarations, certificate purchase records, internal calculations, and NCA correspondence obligations apply regardless of which emissions methodology is used. The difference is that verification reports are not required when using defaults. The default values carry a mark-up of 10% above country-specific averages in 2026, rising to 20% in 2027 and 30% from 2028 onward. Importers who choose defaults to avoid verification costs still face a documentation obligation, just a smaller one.
Is there a connection between record keeping and the authorized declarant authorization?
Authorization as a CBAM declarant under Article 17 and Implementing Regulation (EU) 2025/486 includes an ongoing compliance condition. An authorized declarant who repeatedly fails to maintain adequate records, or who is found to have submitted declarations that cannot be supported by retained documentation, is subject to authorization revocation in addition to financial penalties. The CBAM authorized declarant page explains the authorization conditions and the grounds on which an NCA may revoke status.
Does the record-keeping obligation change if imports fall below the de minimis threshold mid-year?
The 50-tonne annual de minimis threshold under Article 2(3a) of Regulation (EU) 2023/956, as amended, exempts importers whose total annual CBAM imports fall below 50 tonnes. If an importer falls below this threshold in a given year and therefore has no declaration obligation, the record-keeping obligation does not apply for that year. However, the importer must retain evidence that they were below the threshold, including the customs records showing the annual volumes, so that the exemption claim can be defended if the NCA later questions it. Electricity and hydrogen have no de minimis threshold regardless of volume.
How do embedded emissions calculations connect to the record-keeping requirement?
Every specific embedded emissions figure submitted in the annual CBAM declaration must be traceable back to a retained source document. For actual values, the source is the verification report and the underlying monitoring plan data from the non-EU producer. For default values, the source is the customs declaration identifying the country of origin, which determines which row of IR 2025/2621 applies. The how embedded emissions are calculated page explains the calculation methodology under Implementing Regulation (EU) 2025/2547 and how importers document each step.
Does the record-keeping obligation apply if the CBAM declaration is filed early?
The declaration deadline is September 30 of the year following import (Article 6, as amended). Filing early does not shorten the retention period. The 4-year window starts from the end of the declaration year regardless of when the declaration was submitted. An importer who files their 2026 declaration in June 2027 still retains records until December 31, 2031.
Summary: CBAM Documentation Requirements at a Glance
The 4 facts every authorized declarant must have memorized about CBAM record keeping are listed below.
- The retention period ends at the close of the 4th year after the declaration year, not the import year.
- All 7 document categories under Article 6(6) are mandatory, including correspondence with producers and NCAs.
- NCAs inspect without advance notice; the response window is short, and missing documents have the same practical effect as missing certificates.
- Importers using default values retain all document categories except verification reports.
The CBAM declaration guide covers what the annual CBAM declaration must contain, how to calculate the certificate surrender quantity, and how the retained records connect to each line of the declaration form.