EU CBAM Verification Is Now an Indian Factory-Level Obligation: Five Steps Exporters Must Complete Before Their 2026 Data Is Locked

A mid-sized steel exporter in Ludhiana ships structural sections to a long-standing buyer in Rotterdam. In July, the buyer's compliance team sends a polite email: under the definitive CBAM regime, please confirm your installation's embedded emissions for 2026, calculated on the corrected default values, supported by a written monitoring plan, and verified by an EU-accredited verifier who will want to visit the plant. The exporter's first instinct is that this is the buyer's customs problem. It is not. The buyer can only surrender certificates against data the factory produces, and if the factory cannot produce verified data, the buyer will price in the EU's default values, which sit deliberately above typical actual emissions. The contract, the margin and eventually the relationship follow the data.

Through July and August 2026, the European Commission completed the definitive-period implementation package for the Carbon Border Adjustment Mechanism (CBAM): corrected default values that apply retrospectively from 1 January 2026, ten new guidance documents aimed directly at non-EU operators, and the first comprehensive guidance on verification and accreditation. For Indian producers of iron and steel, aluminium, cement, fertilisers, hydrogen and covered electricity, the message is unambiguous: CBAM compliance now happens at the installation, in India, under European rules.

At Vera Causa Legal, our International Corridors practice advises exporters and manufacturers on exactly this class of cross-border regulatory exposure. This guide maps the complete definitive-period architecture: what the Commission changed, why the burden sits at factory level, the five steps exporters must complete before 2026 data is locked, the timeline to the first declaration on 30 September 2027, and what the pending scope expansion means for contract strategy.

What the Commission Changed: The Three-Part 2026 Package

Three instruments issued across July and August 2026 converted CBAM from a framework exporters could track at a distance into an operational compliance system with named documents and dates:

Two properties of this package deserve emphasis. First, the corrected default values are retrospective: every 2026 estimate computed against the superseded annexes of Regulation (EU) 2025/2621 must be recalculated, including estimates already shared with EU customers. Second, the guidance package is aimed at non-EU operators, which is the Commission's term for the Indian factory. The regulatory conversation is no longer between Brussels and the EU declarant; it runs straight through to the installation in Punjab, Odisha or Gujarat.

Why This Is a Factory-Level Obligation, Not an Importer Problem

Formally, CBAM obligations rest on the authorised CBAM declarant, the EU importer. It files the annual declaration, surrenders the certificates and answers to the Member State authorities. On paper, the Indian exporter owes the EU nothing.

In practice, that legal architecture is irrelevant to where the work sits. The declaration is built from the installation's embedded emissions. The certificate cost is a function of those emissions. And the declarant has exactly two ways to obtain the number:

1. Actual emissions data from the installation, calculated under the definitive methodology and verified by an accredited verifier; or
2. Default values set by the Commission, which are deliberately conservative and corrected upward where the earlier annexes understated them.

An Indian producer that cannot deliver verified actual data does not escape CBAM; it simply pays the default-value price through its customer's certificate costs, which the customer will pass back through pricing, contract deductions or supplier selection. Producers whose verified carbon intensity is genuinely lower than the defaults hold a measurable commercial advantage. Producers who treat this as the importer's problem donate that advantage to competitors who did not.

There is also a timing lock. Emissions data for 2026 is generated day by day, through the instruments, meters and records the installation runs now. A monitoring plan written in 2027 cannot reconstruct what was never measured in 2026. That is why the compliance window is this year, not the declaration year.

What This Means for You: The question for your board is not "does CBAM apply to us" but "can our installation produce verifier-grade emissions data for calendar 2026." If the answer depends on records your plant does not currently keep, the gap has to be closed while 2026 is still running.

Step One: Recalculate Your 2026 Estimates Against the Corrected Default Values

Any 2026 CBAM estimate computed against the original Annexes I and IV of Regulation (EU) 2025/2621 is now superseded. Regulation (EU) 2026/1740 replaces those annexes and applies from 1 January 2026, so every quarter of 2026 data is affected, including emissions already reported to EU customers during the year.

The recalculation exercise has three parts:

• Recompute embedded emissions for each covered product using the corrected annexes and the Commission's workbook published on 10 August 2026.
• Quantify the delta between the old and new figures. Where the correction moves the number upward, certificate-cost projections shared with customers change with it, and silence on that delta is a commercial risk of its own.
• Restate and communicate revised figures to EU customers in writing, with the calculation basis identified. The customer who discovers a restatement during verification will assume the exporter's data discipline is weak everywhere else.

This is also the moment to make the strategic calculation: for your products and your plant, does the corrected default value sit above or below your actual emissions? If your verified actual emissions would beat the default, every tonne you ship on defaults is margin surrendered. That comparison, product by product, is the business case for the remaining four steps, and it is exactly the kind of analysis our Corporate Advisory team builds into an exporter's CBAM readiness review.

Step Two: Build the Written Installation-Level Monitoring Plan

The Commission expects each installation to operate under a written monitoring plan, and expects an English version to be available to the verifier. This is the single most important document in the CBAM file, because it is both the methodology statement and the audit trail.

A compliant monitoring plan documents, at the level of the individual installation:

Three features of this requirement catch Indian producers off guard. First, the plan is installation-level: a group with three plants needs three plans, not a corporate policy. Second, the precursor chain reaches into your own procurement: the embedded emissions of purchased inputs must come from your suppliers under the same discipline, which means CBAM clauses now belong in domestic purchase contracts as well. Third, the plan must exist in English for the verifier, so a plant whose operating records live in Hindi or a regional language needs a translation layer built into the compliance process, not improvised during the site visit.

What This Means for You: Treat the monitoring plan as a legal document, not an engineering annex. It will be read by a European verifier against European methodology expectations, and every gap between the plan and plant practice becomes a finding. Have it drafted or reviewed by counsel working with your plant engineers, not delegated to the boiler house.

Step Three: Engage an EU-Accredited Verifier Early

If you supply actual emissions data, the verification report must come from a verifier meeting three cumulative conditions:

1. Accredited by an EU national accreditation body under the CBAM framework. Accreditation from a non-EU body, however reputable, does not qualify.
2. Accreditation valid at the time the verification report is issued, not merely at engagement. A verifier whose accreditation lapses or is suspended between engagement and report date leaves you with an unusable report.
3. Scope covering the relevant activity. Accreditation is sector-specific; a verifier accredited for cement cannot sign off a hydrogen installation.

The market reality behind these conditions is that accredited verifier capacity is finite, European, and in heavy demand across every exporting country that sells into the EU. Indian producers competing for verifier slots are competing with Turkish steel, Vietnamese aluminium and North African cement for the same pool. Engagement lead times will stretch as the declaration deadline approaches, and the verifier needs months of data access before it can opine on a full calendar year.

The commercial point is sharper: verification fees, travel, and the internal cost of supporting the engagement are real money, and the question of who pays, exporter or importer, belongs in the contract renegotiation at Step Five. Exporters who lock in verifier capacity early negotiate from strength; exporters who call in mid-2027 will find the market priced for desperation.

Step Four: Prepare for Physical Site Verification

The Commission's verification guidance makes physical presence at the installation the default, not the exception. Virtual visits and waivers are available only under limited, risk-based conditions, and ordinarily depend on prior physical visits. A first-year installation should therefore assume a physical visit and plan for it.

Preparation runs on four tracks:

• Physical readiness. The verifier will walk the process: meters, sampling points, fuel storage, production lines. Every instrument named in the monitoring plan must exist, be identifiable, and match the plan's description.
• Records readiness. Source data for 2026 must be retrievable: calibration certificates, fuel invoices, production logs, laboratory reports, supplier precursor data. A records gap is a verification finding, and findings attach to the report your customer files.
• People readiness. The plant personnel who actually run the measurement systems must be able to explain them to a European verifier, in English, through the plan. A dry-run audit before the real visit pays for itself.
• Access logistics. Visas, site safety inductions, insurance and scheduling for a European verification team visiting an Indian plant are not trivial, and they are your problem to solve, not the verifier's.

There is a longer-horizon benefit buried in this step: because waivers ordinarily depend on prior physical visits, a clean first verification builds the track record that reduces the burden in later years. The 2026 cycle is the expensive one; it is also the one that sets your risk profile in the verifier's and the accreditation system's eyes.

Step Five: Rewrite the CBAM Clause in Your Exporter-Importer Contracts

Every contract governing EU-bound sales of covered goods now needs a CBAM allocation clause, and most legacy contracts have none. The clause must settle six questions:

Two traps recur in the drafts crossing our desk. First, open-ended liability for emissions data accepted by exporters who do not yet control their precursor supply chains: you cannot warrant data your suppliers have not warranted to you, so the liability clause and the procurement contracts must be negotiated together. Second, silence on the free-allocation adjustment: as EU free allowances phase down, the certificate cost per tonne of embedded emissions rises, and a fixed price signed in 2026 without a pass-through mechanism absorbs that escalation in the exporter's margin.

This is squarely contract-drafting work, and it is where CBAM stops being a compliance topic and becomes a deal topic. Our Corporate Advisory practice drafts CBAM allocation clauses as part of supply-contract renegotiations, and where a dispute over certificate costs or data warranties has already crystallised, our Litigation and Dispute practice handles the enforcement side.

The Timeline: From Today to the First Declaration

The definitive regime runs on a fixed calendar, and the milestones compress the exporter's work into the next twelve months:

Work backwards from 30 September 2027 and the exporter's real deadlines arrive far earlier. The verifier needs the full 2026 dataset and a completed site visit before it can issue a report, which puts the site visit in the first half of 2027, which puts the monitoring plan, the records discipline and the verifier engagement in late 2026. The plants that will sail through the first declaration are the ones whose compliance architecture is already running this year.

What Is Still Pending: Scope Expansion and Anti-Circumvention

One element of the package is deliberately excluded from today's compliance build because it is not yet operative: the proposed extension of CBAM to specified downstream products, together with stronger anti-circumvention rules. Parliament's first-reading vote was scheduled for 15 September 2026, with trilogue negotiations expected to follow before the extension takes effect.

For Indian exporters, the planning significance is in the direction of travel, not the current legal position. Downstream extension would pull products made from covered goods, steel structures, aluminium components, fabricated assemblies, into the CBAM perimeter, which is precisely where much of India's value-added engineering exports sit. Anti-circumvention rules will target routing and light-transformation strategies, closing the gap between paper restructuring and real emissions performance.

The contract drafting implication is immediate: supply agreements with terms running beyond 2027 should carry change-in-scope mechanics that allocate certificate costs if the buyer's product category enters CBAM coverage mid-contract. Exporters negotiating multi-year framework agreements today are pricing a regulatory perimeter that will not stand still, and the clause that ignores that is a clause written for 2026 alone.

The Bottom Line

CBAM's definitive period has moved the compliance frontier from the EU border to the Indian factory floor. The rules of the game are now concrete: corrected default values applying to every tonne of 2026 production, a written installation-level monitoring plan in English, verification by an EU-accredited verifier who will physically visit the plant, and a first declaration due 30 September 2027. The exporters who treat this as a pricing opportunity, because their verified emissions beat the defaults, will take margin from the exporters who treat it as someone else's paperwork.

The five steps form a single project: recalculate against the corrected defaults, build the monitoring plan, engage the verifier, prepare for the site visit, and rewrite the contracts. Run as one programme with a named owner, it is entirely achievable before the data year closes. Run as five disconnected reactions, it ends with your customer buying from someone whose documentation is better.

If your products fall within the six CBAM sectors, speak to our International Corridors team about a combined legal and contractual readiness review covering your monitoring plan, verifier engagement, precursor data chains and CBAM contract allocation. For the ongoing compliance calendar that follows the first declaration, our Corporate Advisory practice and Startup Hub support exporters through the operating years ahead.