Making Your Supply Contract CBAM-Ready: A Clause-by-Clause Drafting Guide

Most long-term supply agreements in force today were signed before carbon had a price at the EU border. They say nothing about embedded emissions, verification, or who absorbs the certificate cost. That silence is now a financial exposure - and it compounds every year.

The CBAM definitive period started 1 January 2026. Certificate sales open 1 February 2027, and the first annual declaration and certificate surrender falls on 30 September 2027, covering all 2026 imports. A contract signed today for a five-year steel or aluminium supply will still be running when that bill lands - and the CBAM factor ramps upward every year through 2034 as EU ETS free allocation is phased out. A fixed price agreed now silently absorbs a rising carbon cost that the parties never priced.

This guide is for procurement leads, commercial counsel, and category managers who need to make existing or new supply agreements CBAM-ready. It focuses on the contract and Incoterms angle - not on the mechanics of reporting, verification, or certificate buying, which are covered in separate posts.

This is drafting guidance, not legal advice. CBAM secondary legislation is still moving fast. Have any clause language reviewed by qualified trade compliance counsel before you execute.

---

1. Why the urgency is real right now

The cost is not hypothetical. Authorised declarants who fail to surrender sufficient certificates by the 30 September 2027 deadline face a penalty of €100 per tonne of CO₂ not covered - and paying the fine does not extinguish the underlying surrender obligation. That exposure sits with the EU importer, not the non-EU supplier. But the importer's ability to calculate, budget, and manage that exposure depends entirely on data the supplier holds.

The CBAM phase-in factor for 2026 is only 2.5% of embedded emissions, but it escalates steeply - reaching 48.5% by 2030 and 100% by 2034 as EU ETS free allocation is withdrawn. A fixed price agreed today that looks manageable in 2026 will be materially wrong by 2029. The contract needs to anticipate that ramp, not ignore it.

The secondary legislation is also still moving. On 17 July 2026, the European Commission tabled its EU ETS Phase 5 reform proposal, which would reintroduce 15% of free allocation for CBAM-covered sectors from 2028 and extend the full phase-out to 2038 - potentially slowing the CBAM cost ramp. That proposal is not yet law. Contracts signed now need a mechanism to absorb changes like this, in either direction.

---

2. The emissions-data clause

This is the foundation of every other CBAM clause. Without installation-level actual embedded emissions data from the supplier, the importer must fall back on Commission default values - and those defaults are deliberately punitive.

Default values carry a mark-up above actual emissions that escalates from 10% in 2026 to 30% by 2028 for iron, steel, and aluminium - so the gap between defaults and actuals widens every year a supplier stays off actual data. Missing supplier data is not a paperwork nuisance; it is a direct, quantifiable cost increase.

What the clause should require:

• The supplier must provide installation-level actual embedded emissions, calculated in accordance with Implementing Regulation (EU) 2025/2547, using the Commission's Communication Template (Annex IV format).
• Data must be delivered per consignment or per production period (specify which), by a defined date before the importer's annual declaration deadline.
• The data must cover direct (Scope 1) and indirect (Scope 2) components, broken down by source stream, as required by the regulation.
• The supplier must notify the importer within [X] days of any material change in production methodology, fuel mix, or system boundary that would affect reported emissions.

Data-failure remedy: If the supplier fails to deliver compliant data by the agreed deadline, the contract should specify that:

1. The importer may use Commission default values for the affected consignment or period.
2. The incremental certificate cost attributable to the default mark-up (i.e., the difference between the default-based certificate cost and the estimated actual-based cost) is passed to the supplier as a liquidated sum, invoiced with supporting calculation.

This converts the data obligation from a best-efforts aspiration into a commercially enforceable commitment.

---

3. Verification and warranty clause

From 1 January 2026, third-party verification of actual embedded emissions by an accredited verifier is mandatory under the CBAM definitive regime. Unverified data - even if accurate - cannot be used in place of defaults. The contract must reflect this.

Draft points for the clause:

Obligation	Who	Timing
Warrant accuracy of emissions data	Supplier	At delivery of each dataset
Procure accredited third-party verification	Supplier	Before importer's declaration deadline
Notify importer of any restatement	Supplier	Within [X] business days of restatement
Provide verifier credentials and confirmation of registry upload	Supplier	With each verified dataset
Step-in / audit rights	Importer	On [X] days' notice

Step-in and audit rights deserve particular attention. The importer should have the right to:

• Access the installation (or appoint a representative to do so) if the supplier's verifier raises a qualified opinion or if data is materially inconsistent with prior periods.
• Request the verifier's working papers, subject to appropriate confidentiality protections.
• Engage an independent verifier at the importer's cost if the supplier's verifier is not accredited in a Member State or does not meet the requirements of the applicable verification regulation.

If the supplier restates verified data after the importer has already filed its annual declaration, the contract should allocate the cost of any amended declaration and any additional certificates required.

---

4. Price and pass-through mechanics

This is where most existing contracts are silent - and where the commercial negotiation is hardest. There are three main structures:

Option A - Carbon-inclusive fixed price. The simplest structure but the most dangerous for long-term contracts. The CBAM cost is baked into the unit price. The problem: the CBAM factor ramps every year, so a fixed price agreed at a 2.5% factor in 2026 will be significantly under-recovered by 2029 at a 22.5% factor. Use only for short-term contracts with annual price reviews.

Option B - Explicit CBAM surcharge. The surcharge is calculated as:

CBAM surcharge per tonne = Embedded emissions (tCO₂/t) × CBAM factor × CBAM certificate price

The surcharge is invoiced separately, indexed to the published CBAM certificate price and the applicable CBAM factor for the relevant import period. This is the most transparent structure and the easiest to audit. The contract should specify: (i) which published source governs the certificate price (the CBAM Registry); (ii) which CBAM factor applies (the factor in force at the date of customs release); and (iii) the invoicing and payment timeline relative to the importer's certificate purchase obligation.

Option C - Shared-band / collar. A midpoint surcharge is agreed, with a collar: if the actual CBAM cost falls within ±[X]% of the midpoint, each party absorbs the variance. If it falls outside the band, the excess is shared or passed through in full. This gives both parties cost predictability while avoiding the open-ended exposure of a pure pass-through.

Worked example (illustrative):

Structure	Volume	Emissions intensity	CBAM factor	ETS price	Annual CBAM cost
A - Fixed (2026 rate frozen)	10,000 t steel	1.8 tCO₂/t	2.5%	€75/tCO₂	€33,750
A - Fixed (2029 rate, same price)	10,000 t steel	1.8 tCO₂/t	22.5%	€75/tCO₂	€303,750
B - Surcharge (indexed)	10,000 t steel	1.8 tCO₂/t	22.5%	€75/tCO₂	€303,750 (passed through)
C - Collar (±15%)	10,000 t steel	1.8 tCO₂/t	22.5%	€75/tCO₂	Buyer absorbs up to €349,313; supplier absorbs above

Under Option A with a frozen rate, the importer absorbs a €270,000 annual cost increase that was never negotiated. Under Option B, the surcharge adjusts automatically. The collar in Option C caps the buyer's upside exposure while giving the supplier some certainty.

---

5. Carbon price paid abroad: the deduction hook

If the supplier's installation is subject to a binding carbon price in its country of production - an ETS, a carbon tax, or a levy - the importer may be able to deduct that cost from its CBAM certificate obligation under Article 9 of Regulation (EU) 2023/956. The European Commission published draft implementing rules on this deduction mechanism on 13 May 2026, with the public consultation closing on 10 June 2026; the rules are intended to apply retrospectively from 1 January 2026.

The deduction is only available when actual embedded emissions are used (not defaults), and the foreign carbon price must come from a binding mechanism - a tax, levy, or ETS imposing compliance obligations on the installation. Rebates and compensation are netted out, and international Article 6 credits are capped at 10% of reported emissions.

The contract should include a clause requiring the supplier to:

• Disclose any carbon price paid at the installation level, with supporting documentation (tax receipts, ETS surrender records, or equivalent).
• Certify that no rebate or compensation has been received that would reduce the net carbon price paid.
• Cooperate with the importer's verification of the deduction claim.

We have covered the deduction mechanics in detail in a separate post. The contractual hook here is simply ensuring the supplier is obligated to provide the evidence - because without it, the deduction cannot be claimed regardless of whether a carbon price was actually paid.

---

6. Incoterms: the hidden mismatch

The delivery term in a supply contract determines who acts as the customs declarant - and that, in turn, determines who needs authorised CBAM declarant (ACD) status. This is where many contracts have a structural problem they have not yet noticed.

The DDP trap. Under DDP (Delivered Duty Paid), the seller clears goods for import in the destination country and pays all duties. In practice, non-EU sellers selling DDP into the EU often use an indirect customs representative to lodge the import declaration. Under CBAM, importers not established in the EU cannot themselves hold authorised CBAM declarant status - they must use an indirect customs representative who is EU-established and holds ACD status, and that representative assumes the CBAM obligations and potential penalties jointly.

This creates two problems:

1. The indirect representative's exposure. The customs agent or freight forwarder acting as indirect representative becomes jointly liable for CBAM compliance. Many agents are not yet set up for this, and some are declining to take on the role. If the contract assumes DDP delivery but no compliant indirect representative is in place, the import cannot proceed.

2. The Incoterms/CBAM clause mismatch. A contract may specify DDP in the commercial terms while separately allocating CBAM obligations to the buyer in a CBAM clause. These provisions can contradict each other: under DDP, the seller (via its representative) is the customs declarant and therefore the ACD; under the CBAM clause, the buyer may be assuming data and certificate obligations that legally sit with the ACD. The contract needs to resolve this explicitly.

Practical options:

• Switch from DDP to DAP or FCA, so the EU buyer is the importer of record and holds ACD status directly.
• If DDP is commercially necessary, identify and contractually appoint a named indirect representative who holds ACD status, and allocate CBAM obligations (data delivery, declaration filing, certificate purchase) clearly between seller, representative, and buyer.
• Ensure the Incoterms clause and the CBAM clause in the same contract are consistent - they should name the same party as the ACD or explain the delegation chain.

---

7. Indemnity, change-in-law, and termination

Indemnity for supplier data failure. The importer should have a clear contractual right to recover from the supplier any penalty, additional certificate cost, or regulatory fine that results directly from the supplier's failure to deliver compliant emissions data or verified actual values. The €100/tonne penalty for certificate shortfall is the headline figure, but the more common exposure is the incremental certificate cost from defaulting to Commission values - which is a direct, calculable loss attributable to the supplier's breach.

Change-in-law clause. CBAM secondary legislation is moving fast. The July 2026 ETS reform proposal, the May 2026 draft carbon price deduction rules, and the December 2025 implementing act package all affect the cost and mechanics of compliance. A standard change-in-law clause should:

• Define "CBAM Change" broadly: any amendment to Regulation (EU) 2023/956, any implementing or delegated act under it, or any change in the CBAM factor, certificate pricing methodology, or scope of covered goods.
• Require the affected party to notify the other within [X] days of becoming aware of a CBAM Change that materially affects the contract economics.
• Trigger a good-faith renegotiation period of [X] days, after which either party may escalate to the dispute resolution mechanism.

Right to renegotiate or exit. If the supplier persistently fails to deliver compliant emissions data - say, for two consecutive reporting periods - the importer should have a right to:

• Renegotiate the price to reflect the default-value cost basis; or
• Terminate the affected purchase orders (or the agreement) on [X] days' notice, without penalty.

This is not punitive. A supplier who cannot provide verified actual data is, in effect, imposing a hidden cost increase on the importer every year the CBAM factor rises. The exit right simply makes that consequence explicit.

---

8. CBAM-ready contract checklist

Use this as a clause-level audit of any supply agreement covering CBAM goods.

---

The bottom line

CBAM has moved from a reporting exercise to a live financial obligation. The contracts that govern your steel, aluminium, cement, fertiliser, and hydrogen supply chains were written for a world without a carbon price at the EU border. Most of them are not fit for the world that started on 1 January 2026.

The good news is that the fixes are not exotic. They are standard commercial drafting - data obligations, warranties, price adjustment mechanics, indemnities, and exit rights - applied to a new regulatory cost. The time to make those changes is before the first certificate surrender deadline, not after.