hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us

FSC-STD-40-004 · PEFC ST 2002 · Forest-based products

FSC and PEFC chain of custody certification for forest claims your buyers can trace.

Sell paper, packaging, timber, furniture or print with an FSC or PEFC claim that holds up when a customer checks it. Sterling's expert and experienced consultants set up the product groups, material records, supplier checks and labelling controls your certification body will examine, train the people who handle certified material and stay with you through the evaluation audit and after it. We ensure successful certification for our clients.

  • An all-inclusive proposal for a fixed scope: consulting, Effivity software, Sterling Academy access and internal auditor training, as applicable to your standard, set out in one proposal
  • A team of expert and experienced forest-products and supply chain consultants, with management system consulting across sectors and countries since 2003
  • The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements. Sterling does not certify; an accredited body audits and decides

8,100+ client engagements in 60+ countries.

Chain of custody client experience
  • Allianz
  • Emirates Flight Catering
  • Etihad Rail
  • Haier
  • Whirlpool
  • Emerson
  • Olam
  • Piramal Pharma Solutions

What it is

What is FSC and PEFC chain of custody certification?

Chain of custody (CoC) certification proves that a company buying, processing and selling forest-based products keeps certified material identified, counted and correctly claimed at every step it controls. The Forest Stewardship Council (FSC) sets its requirements in FSC-STD-40-004, which FSC calls the core standard for anyone sourcing, processing, labelling or selling products as FSC certified. The Programme for the Endorsement of Forest Certification (PEFC) sets its requirements in PEFC ST 2002.

Forest management certification covers the forest itself. Chain of custody covers everyone after it: the sawmill, the merchant, the converter, the printer and the brand. Each company that takes legal ownership of certified material and passes a claim on needs its own certificate, otherwise the claim stops at the last certified link.

Current versions. FSC-STD-40-004 V3-1 was approved on 14 January 2021 and took effect on 1 September 2021, with the transition from V3-0 closing on 31 December 2022. FSC is revising its chain of custody standards: a second draft of V4-0 went to public consultation from 15 May to 15 June 2026, and FSC has not yet announced an approval or effective date. PEFC ST 2002:2020 entered into force on 14 February 2020, with a transition deadline of 14 August 2022; its 2020 revision widened the definition of controversial sources to cover forest protection, indigenous peoples' rights, biodiversity and sustainable harvesting levels. Your certification body confirms which version it audits against.

Who it is for

Who needs FSC or PEFC chain of custody certification?

Any business that wants to put an FSC or PEFC claim on its sales documents, or a logo on its products, needs a valid chain of custody certificate covering that activity. The requirement most often reaches a business in one of four ways:

  • A retailer or brand owner makes it a supplier condition. Packaging, print and furniture buyers often ask for your certificate code before they list a product.
  • A tender asks for certified timber or paper. Check which claim, which scheme and which products it actually requires before you scope the certificate.
  • Regulation raises the bar on legality and traceability. The FSC standard has a section on timber legality legislation, but certification does not replace your own legal obligations.
  • A parent company or group wants one approach. Several sites may suit a multi-site certificate, and small independent companies may join a group certificate; each has its own eligibility rules.

The value lies in claims that hold up under a customer's check, which depends on records kept carefully between audits.

Requirements

What are the main FSC and PEFC chain of custody requirements?

FSC-STD-40-004 V3-1 is set out in four parts. The list below maps its sections in plain language; PEFC ST 2002:2020 covers the same ground in its own structure and terms, and we map your system against each scheme you certify to.

  • CoC management system: responsibilities, procedures, training and records for everything the certificate covers.
  • Material sourcing: confirming that suppliers hold valid certificates and that the claims on their invoices match what you ordered.
  • Material handling: keeping certified, controlled and other inputs apart, or accounted for, wherever there is a risk of mixing.
  • Material and products records: inputs, outputs and volume summaries that let an auditor follow a claim from purchase to sale.
  • Sales: the correct claim and certificate code on invoices and delivery documents.
  • Compliance with timber legality legislation: the requirements the standard sets where timber legality laws apply to your products and markets.
  • FSC core labour requirements: the FSC commitments on workers' rights, applied to your own operation.
  • Control of claims: product groups and one control system per group, chosen from the transfer, percentage or credit system.
  • Labelling and outsourcing: approved use of the on-product label, and control of any work contractors carry out on certified material.
  • Eligibility: criteria for single, multi-site and group chain of custody certification.

What does useful chain of custody evidence look like?

A list of approved suppliers with certificate codes confirmed with the scheme owner, purchase invoices carrying the right claims, a product group schedule, conversion factors that match real yields, volume summaries that reconcile inputs and outputs, sales invoices with the correct claim and code, and training records for the people who receive, store and invoice certified material. We build these into your existing purchasing, stores and sales steps and keep them in Effivity, so the auditor follows one trail rather than several spreadsheets.

Certification process

How do you get FSC or PEFC chain of custody certified?

Build the controls first, run them long enough to create records, then apply to an independent certification body. Sterling prepares your system and your team; the evaluation and the certificate belong to the certification body.

  1. 01
    Choose the scheme and certificate type.Decide on FSC, PEFC or both, the sites in scope, and whether a single, multi-site or group certificate suits your structure.
  2. 02
    Gap analysis: trace a real order end to end.We follow material from supplier to customer, list the gaps in segregation, records and claims, and agree actions and owners.
  3. 03
    Set up product groups and control systems.Define product groups, pick transfer, percentage or credit for each, write the procedures and train the people involved.
  4. 04
    Internal audit and the certification body's evaluation.An internal audit tests the trail before the certification body evaluates your system on site and decides on the certificate.
  5. 05
    Keep the certificate valid.Maintain records, volume summaries and supplier checks between audits and host surveillance audits on the schedule your certification body sets.

Check the route before you sign. For FSC, confirm that the certification body is FSC-accredited for chain of custody; for PEFC, confirm that it is recognised to certify under the PEFC scheme. Confirm any certificate code, yours or a supplier's, with the scheme owner rather than relying on a PDF. How to choose a credible chain of custody provider

Cost

How much does FSC or PEFC chain of custody certification cost?

Cost follows the complexity of your material flows more than headcount: a single-site trader on the transfer system needs far less work than a converter running credit accounts across several mills. Every Sterling proposal shows each component and states everything that is included.

Cost componentWhat affects it
Consulting and implementationNumber of product groups, control systems, sites and outsourced processes, and whether your team leads the work (Design™) or we do (Drive™)
Independent certificationThe certification body's evaluation time, sites, sampling for multi-site or group certificates, travel and surveillance audits
Scheme chargesAny charges the scheme owner applies to certificate holders, confirmed with the scheme or your certification body
Internal resourcesTime from purchasing, stores, production and sales staff, and any changes to storage or ERP set-up
Software and learningIncluded in a Sterling engagement: Effivity for records and Sterling Academy access for your people, confirmed in the proposal

What moves the price

  • One scheme or both, audited together or separately
  • Transfer only, or percentage and credit accounts
  • Sites, subcontractors and outsourced printing or processing
  • Use of the on-product label and the approvals it needs

What a Sterling proposal always shows

  • Deliverables, assumptions and exclusions in writing
  • Certification-body fees shown separately for comparison
  • Effivity and Academy access itemised at no additional cost
  • Milestone payments tied to deliverables
  • One all-inclusive proposal, with no surprises

Timeline

How long does FSC or PEFC chain of custody certification take?

Most companies take an estimated two to four months from gap analysis to the evaluation audit. The system must run long enough to produce certified purchases and sales that an auditor can sample.

PhaseWhat determines the pace
Scope and gap analysisAccess to purchase and sales records, stores and the people who run them
Controls and trainingProduct group design, ERP changes, supplier certificate checks and staff availability
Records and internal auditEnough certified transactions to test the trail, then an internal audit
Evaluation auditThe certification body's diary, the number of sites and time to close any findings

If a customer has given you a deadline, tell us on the first call. We will say plainly whether it is realistic and which decisions need to be made early.

Your engagement

What your FSC and PEFC chain of custody engagement includes

Your engagement follows Sterling OS™. Choose Design™ if your team wants to do the work with our guidance, or Drive™ if you want Sterling to manage it for you; both lead to the same audit-ready system. After certification, Sustain™ keeps records, supplier checks and internal audits on track, and Automate™ runs it all in Effivity. Sterling does not certify; the certification body evaluates your system and decides.

  • Scope, gap analysis and plan

    Scheme choice, certificate type, sites and product groups agreed before work starts.

  • Procedures and records

    Written around your purchasing, stores, production and invoicing, not a generic manual.

  • Effivity ISO & GRC software

    Supplier certificates, product groups and volume summaries in one place, included with the engagement at no additional cost.

  • Training for the people who touch the claim

    Internal auditor training as applicable to your standard, and preferential Sterling Academy access, including complimentary awareness training for your people as part of the engagement.

  • Internal audit

    A full trace of real orders, with findings closed before the certification body visits.

  • Audit readiness and support

    Preparation for the evaluation audit and support until the certificate is issued.

Certification decisions remain with the independent certification body.

How Sterling implements ISO and GRC standards

Effivity · ISO and GRC software, included in every engagement

How Effivity helps you fulfil, automate and simplify the requirements of FSC-STD-40-004 and PEFC ST 2002.

Every Sterling chain of custody engagement includes Effivity, the ISO and GRC automation platform built by the Sterling group and used in 50+ countries. Your consultant sets up the workspace within the agreed scope, so supplier certificates, product groups, training, internal audits, nonconformities and the records behind each claim sit in one place and are updated as the work happens. Sterling consulting clients receive their Effivity subscription included with the engagement, at no additional cost.

Effivity: Context of the Organisation dashboard with issues, interested parties and scope
Effivity · Context of the Organisation dashboard
CoC management system

Responsibilities, procedures and scope

The certificate scope, the person responsible and the procedures for each site are kept current and approved, so a change of staff or product does not leave a gap.

Material sourcing

Supplier certificate register

Each supplier's certificate code, scope and expiry date, with reminders before a certificate lapses or a product falls out of scope.

Material handling

Segregation and stores checks

Routine checks of receiving, storage and production areas, with photos and findings logged where mixing could occur.

Records

Product groups and volume summaries

Product groups, control systems, conversion factors and periodic input and output summaries held together, ready for the auditor's sample.

Sales

Claims on sales documents

Checks that invoices and delivery notes carry the correct claim and certificate code, with corrections recorded when they do not.

Core labour requirements

Commitments and follow-up actions

Your labour commitments, the checks you carry out against them and any actions arising, reviewed on a schedule you set.

Labelling and outsourcing

Label use and contractors

Records of label and trademark use, outsourcing agreements and contractor controls, kept together so every mark on a product can be explained.

Across the system

Training, audits and corrective action

Training records, internal audits, complaints and nonconformities closed with evidence, alongside your other management systems.

What this means at the audit

The auditor will pick a sale, ask for the purchase behind it, the supplier's certificate on that date, the product group and the volume summary. In Effivity each of those is a linked record rather than a hunt through email and spreadsheets. After certification, Sustain™ uses the same workspace, so surveillance audits find records that were kept all year.

In your engagement

  • Subscription included with the engagement, at no additional cost
  • Configured by your Sterling consultant within the agreed scope
  • Your existing supplier lists and records migrated, not retyped
  • Admin and user training for your team
  • Modules for EMS, OHSMS, ISMS, FSMS and more when you integrate other standards

Sterling Academy · e-learning for your people

Train everyone who handles certified material, not just the CoC manager.

Sterling Academy offers e-learning with video lessons, practice checkpoints, a final exam and a numbered Certificate of Completion for each learner, verifiable online. Sterling consulting clients receive preferential Sterling Academy course access and special pricing through their Sterling consultant, including complimentary awareness training for their people as part of the engagement.

  • Awareness training for receiving, stores, production and sales staff, with training records the auditor can see
  • Internal auditor training for the people who will audit the system, as applicable to your standard, as part of the engagement
  • Progress reports by department and site
  • New starters trained as they join, so records stay current between audits

Why Sterling

Why choose Sterling for FSC and PEFC chain of custody certification?

Chain of custody lives in purchasing, stores and invoicing, not in a manual. Sterling builds the controls into the systems your people already use, whether you run one depot or mills and print sites in several countries.

Working in 60+ countries since 2003

One engagement team accountable for your certificate, with offices in 21 countries to support sites wherever they are.

All-inclusive proposal

Consulting, Effivity, training and Academy access in one proposal, with certification-body fees listed separately.

Both schemes, one system

FSC and PEFC controls designed together where you need both, so staff follow one set of steps.

Expert and experienced consultants

Consultants who understand material flows, conversion and supplier assurance, and who set up the trail correctly the first time.

Sterling vs the rest: the full comparisonExplore chain of custody client experience

The Sterling Promise

What our FSC and PEFC chain of custody certification success guarantee means

100%on-time completion · success · 8,100+ client engagements

We stay with you until your agreed FSC or PEFC chain of custody certification outcome is achieved, supporting implementation, preparation and the resolution of audit findings. Clear explanations, practical delivery, included software and employee learning turn the investment into lasting capability rather than a certificate on a wall.

The engagement identifies the scheme, scope, outcome and responsibilities. Your organisation supplies accurate information and puts the agreed controls into use. The independent certification body assesses conformity and retains its certification decision. Our commitment concerns the agreed certification support, not a promise of every future tender award or error-free delivery.

FAQs

Frequently asked questions about FSC and PEFC chain of custody

What is the difference between FSC and PEFC chain of custody?

They are separate schemes with separate standards, logos and certificates. FSC uses FSC-STD-40-004 and PEFC uses PEFC ST 2002. Both track certified material through the supply chain, and a company can hold one or both depending on what its customers ask for.

Can one audit cover both FSC and PEFC?

Often, yes, if your certification body is able to certify under both schemes. You still receive two certificates with two codes, and each scheme's rules apply to its own claims.

Do we need chain of custody if we only resell certified products?

Generally yes, if you take legal ownership and sell the product on with an FSC or PEFC claim. Some trading situations are treated differently, so confirm your position with the scheme or your certification body before you drop a claim from your invoices.

Which control system should we use: transfer, percentage or credit?

It depends on your process. Transfer suits companies that keep batches separate; percentage and credit suit operations that mix certified and other inputs. Each product group uses one system, and we help you pick the one that matches how your plant actually works.

Does Sterling issue the FSC or PEFC certificate?

No. Sterling provides consulting and hands-on support. An independent certification body evaluates your system and decides whether to issue the certificate.

Keep exploring

More on FSC and PEFC chain of custody and related standards

More in Environment, energy & climate

Talk to a consultant

Plan your FSC or PEFC chain of custody certificate with confidence.

Tell us your products, sites and customer deadline. We’ll help you define the scheme, scope, timeline and next steps.

hello@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice