A retail buyer's vendor agreement lands with one clause: packaging shall be FSC certified. You forward it to your carton factory. Back comes a PDF certificate with a logo and a code on it, everyone relaxes, and the artwork goes to plate with the tick-tree mark in the corner of the box.

Eleven months later a compliance audit at the retailer asks for the invoice that carried the claim. There isn't one. The certificate was real, it belonged to a company in the supply chain, and the claim on your box was still invalid — because a certificate held by somebody else does not put the logo on your carton unless your specific product was inside that certificate's scope and the claim travelled to you on paper.

FSC chain of custody is one of the few packaging requirements where the mechanism is genuinely simple and almost everyone gets it wrong anyway. Here is how it actually works, and the five-minute check that settles it.

The two halves of the system

Forest certification splits into two certificate types, and buyers routinely conflate them.

Forest management certification applies to the forest. It says a defined area of woodland is managed to the scheme's standard. It is not something a box factory holds.

Chain of custody (CoC) certification applies to every organisation that takes legal ownership of the certified material as it moves from that forest to your carton — the pulp mill, the paper mill, the corrugator, the box plant, and sometimes a trader in between. Each of them must hold its own CoC certificate, must keep the certified material accounted for through its own process, and must pass the claim forward on its sales documents.

The chain is exactly that: a chain. It breaks at the first link that is not certified, and it cannot be repaired retrospectively by a certificate held further upstream. A mill's certificate does not extend to a converter. A group headquarters' certificate does not automatically cover a subcontracted site. If board is bought in from an uncertified trader, the claim is dead by the time it reaches the corrugator, whatever the mill's own status.

Why "our paper is FSC" is not an answer

The sentence a buyer hears most often from a supplier is that the paper is FSC certified. That may be perfectly true and still leave you unable to print the label, because the question is not whether certified fibre exists somewhere upstream. The question is whether the organisation that sells you the finished box holds a valid CoC certificate covering that box, and states the claim when it invoices you.

The three things that must all be true

For the logo to go legitimately on your carton, all three of the following have to hold. Any one missing and the claim fails.

1. The supplier holds a valid CoC certificate. Valid at the date of your order, not expired, not suspended, and issued to the legal entity that will invoice you — not to an affiliate, a sister company or a trading arm.

2. Your product is inside the certificate's scope. Every CoC certificate lists product groups. A certificate covering printed paper products may not cover corrugated shipping cartons; one covering corrugated may not cover a rigid gift box with a laminated wrap. The scope also names the material category the supplier is entitled to sell — 100% certified, mixed, or recycled — and the control system it uses. This is where most claims quietly die, and it takes about ninety seconds to check.

3. The claim appears on the sales invoice and delivery documents. This is the part nobody expects. The scheme requires the certificate holder to state the claim — the certificate code and the specific claim being made — on the sales invoice or delivery documentation for that shipment. If your invoice says "corrugated cartons, 20,000 pcs" with no claim line, then as far as the system is concerned no certified product was sold to you, regardless of what is printed on the box. The invoice is the claim. Everything else is decoration.

Credit, percentage and transfer — and why your retailer may care

Suppliers running a mixed material category do not necessarily put certified fibre in your specific box. Under a credit system, the supplier accumulates credits from certified inputs and sells an equivalent output volume with the claim — a book-and-claim mechanism, wholly legitimate under the standard, but it means your carton may contain no certified fibre at all. Under a percentage system, a minimum share of certified input runs through a defined production period. Under transfer, the claim of the input passes to the output directly.

Some retail specifications accept any of these. A few, particularly in categories with consumer-facing sustainability messaging, specifically require a transfer-system or 100% claim. Read the vendor manual before you accept a quotation, because the three systems can price quite differently. There is a real cost in certified fibre and in maintaining the system either way, but the larger commercial risk is not the premium — it is discovering mid-programme that the claim was never valid, which means relabelling live stock and a difficult conversation with a retail customer.

The five-minute verification, step by step

Do this yourself. Do not accept a screenshot.

  1. Get the certificate code from the supplier in writing, along with the legal entity name and site address that will produce and invoice the cartons.
  2. Look the code up in the scheme's public certificate database. Certificates are published and searchable; a code that returns nothing is the end of the conversation.
  3. Check status and dates. Look for a valid status rather than expired, suspended or terminated, and check the expiry against your production schedule, not against today.
  4. Check the certified entity and site against the name and address on your proforma invoice. A mismatch between the certificate holder and the invoicing party is the single most common finding.
  5. Open the product scope and find the product group that covers your item — the box construction, not just "paper products". Note the material categories and control system listed against it.
  6. Distinguish the certificate code from the trademark licence code. They are different identifiers: one records the chain-of-custody certification, the other authorises use of the marks and is the code that appears in the label artwork. Buyers frequently print one where the other belongs.
  7. Ask for a sample invoice from another customer, redacted, showing how the claim is stated. If the supplier cannot produce one, it may hold a certificate it has never actually traded against.
  8. Get artwork approval in writing before plates are cut. Label artwork has to be approved through the certificate holder's approved process or its certification body. Discovering that at plate stage costs a week and a plate.

This is the same discipline as reading any Chinese conformity certificate or checking what an ISO certificate actually covers: the document is only as good as its scope, its dates and the entity named on it.

What a certificate is not

The document says What it does not tell you
A management system certificate for quality Anything about fibre origin — a different scope entirely
Products are environmentally tested and meet national packaging-material standards Anything about forest certification; these test material properties and substance limits, not provenance
A third-party material test report The chain of custody; a test report describes a sample, not a supply chain
A recycled-content declaration An FSC Recycled claim, which is a scheme claim with its own audit requirements
A mill's certificate held upstream Whether your converter is certified, or whether the claim reached your invoice
A certificate held by a trading company Whether the physical factory producing your cartons is inside any chain

That first block matters especially for Chinese carton suppliers, because a listing line about environmental testing and national packaging-material standards reads, to a buyer skimming quickly, like an environmental credential that covers everything. It does not touch fibre origin. Two entirely separate regimes, two entirely separate audits.

Where PEFC fits

PEFC is a parallel scheme with its own chain-of-custody standard, its own certificate database and its own marks. Many retail specifications accept either; some name one specifically. If your supplier holds PEFC and your customer wrote FSC into the contract, that is a contract conversation to have early — the two are not interchangeable as a matter of wording, even where they are equivalent as a matter of practice.

And where the deforestation regulation does not fit

The EU's deforestation-free products regulation is a separate regime with separate evidence: geolocation of the harvest plot, a due-diligence statement, and liability that sits with the operator placing the product on the market. A forest-certification certificate is useful supporting evidence and is not a substitute for that due diligence. The treatment of packaging used solely as packing material for another product, and the applicable dates for different sizes of operator, are worth confirming with counsel for your specific case rather than inferring from a supplier's assurances.

Common questions

Do I need my own chain-of-custody certificate?

Usually not, if you buy finished cartons already carrying a valid label and sell the packaged product on without altering the packaging or the claim. You generally do need your own certificate if you take certified material and convert, re-pack or re-label it, or if you want to make the claim in your own name on your own documents. If your brand appears as the claimant, get advice before assuming you are covered by your supplier's certificate.

The factory says it can get certified. How long does that take?

It is an audit process through an accredited certification body, followed by annual surveillance, and the timeline depends on the site's existing record-keeping more than anything else. Treat any promise of certification inside a single order cycle with caution, and do not release artwork containing the marks until the certificate and the artwork approval both exist.

Can I just print "made from recycled material" instead?

You can make a factual recycled-content statement without any scheme certification, provided the statement is accurate and substantiated and does not use scheme trademarks. What you cannot do is use scheme marks or scheme wording. If your customer's requirement is genuinely about recycled content rather than forest certification, that distinction may save you the whole exercise — ask them which one the clause is really for.

What to ask your carton supplier next

Send these seven before you accept a quotation on any FSC-specified job:

  1. What is your chain-of-custody certificate code, and which legal entity and site address does it name?
  2. Which product group on that certificate covers my carton, and what material categories and control system are listed against it?
  3. Will the claim appear on the sales invoice and delivery note, and can you show me a redacted example from another customer?
  4. What is your trademark licence code for artwork use, and who approves the label artwork before plates?
  5. Do you buy board in, or produce it, and where does the certified fibre enter the chain?
  6. If the answer is PEFC rather than FSC, say so now, so the contract wording can be checked against my customer's specification.
  7. What happens to the claim if you substitute the liner mid-programme — is that a re-declaration?

Jindong Packaging is a fair illustration of why question five sits on that list. The factory works on an ODM full-material basis — it sources the board and materials itself and manufactures to your drawing or sample — and runs its own automatic corrugated board production lines rather than buying board in, from a 12,000 m² plant in Xinqiao, Bao'an, Shenzhen operating since 2007, with Europe and the Americas among its listed export markets. In-house board production is a genuine advantage for control and lead time, and it also means the fibre enters the chain at a mill you have never met, chosen by the factory rather than by you. Nothing in Jindong's published information states a forest-certification chain of custody or a licence code, and nothing in it should be read as implying one — that is precisely what questions one and two are for, with the answers checked in the public certificate database rather than accepted as a PDF. Run the same lookup on every shortlisted supplier, keep it with the rest of your supplier verification file, and read the wider packaging sourcing guide before you write the clause into a purchase order. The box specification itself — construction, board grade, measured board properties — is a separate conversation, and a certified box that fails in transit helps nobody.