The Hidden Compliance Gap in CMRT Submissions: When Smelter Data Doesn't Match Supplier Claims

The CMRT says it is conflict-free. The smelter data says otherwise.

A supplier returns their Conflict Minerals Reporting Template. The declaration tab says "conflict-free." The smelter list tab names four facilities. The compliance team files the CMRT, rolls it into the annual SEC Form SD or EU Conflict Minerals Regulation report, and moves on.

This is the compliance gap Regilient was built to close and it starts with smelter IDs that nobody cross-checked against the RMI Standard Smelter List.

• Nobody verified that Smelter actually processes the metal the supplier declared.
• Nobody noticed that Smelter lost its RMAP conformant status eight months ago or that Smelter doesn't exist in RMI's database at all.

This is the hidden compliance gap in conflict minerals reporting: the space between what suppliers declare and what the smelter data actually supports. It's not a gap created by bad intent — most suppliers complete CMRTs in good faith. It's a gap created by structural problems in how smelter data is collected, validated, and maintained across multi-tier supply chains.

With CMRT 6.6 released on April 17, 2026 (bringing updated Smelter Reference and Standard Smelter Lists), and the EU Commission's formal recognition of RMAP as the first compliant due diligence scheme under the EU Conflict Minerals Regulation in October 2025, the bar for smelter validation has risen. Regulators and OEM customers are no longer accepting CMRTs at face value. They're auditing the smelter data underneath.

This article examines why CMRT smelter data is structurally unreliable, what validation actually looks like, and how manufacturers can close the gap before their next reporting cycle.

Why CMRT Smelter Data Is Structurally Unreliable

1. Suppliers copy forward last year's CMRT without updating smelter entries

This is the single most common data quality issue. A supplier completed a CMRT in 2023 using version 6.3. In 2024, they received a new request, opened their old file, updated the declaration date, and returned it. The smelter list tab, the most critical section for due diligence, was never touched. The smelter entries reflect a supply chain snapshot from two years ago, not the current reporting period.

CMRT 6.6, released April 17, 2026, introduced a new "Requester Product Number" and "Requester Product Name" field in the Product List tab, making it harder to reuse generic submissions across different customer requests. But the smelter list itself still depends on the supplier actively verifying their entries against the current RMI Standard Smelter List and most don't.

2. RMAP status changes faster than supplier declarations

The Responsible Minerals Assurance Process is not a permanent certification. Smelters and refiners undergo periodic assessments, and their status can change from "conformant" to "active" (assessment in progress), "due for re-audit," or removed from the conformant list entirely. A smelter that was RMAP conformant when the supplier last completed their CMRT may no longer hold that status.

Understanding the distinction between RMAP statuses is critical:

• Conformant: The smelter has passed an independent third-party audit against the RMAP standard and is currently in good standing.
• Active: The smelter is currently undergoing an RMAP assessment, it has engaged with the process but has not yet achieved conformant status.
• Not enrolled / not listed: The smelter has never participated in RMAP, or has been removed from the programme.

A CMRT that lists a smelter as "conformant" based on information from 12 months ago may be presenting a status that no longer exists. The only way to verify is to check the smelter against RMI's current published facility lists which update continuously, not annually.

3. Smelter-to-metal mismatches go undetected

A smelter listed for gold appearing in a tin-only supply chain is not a harmless data entry error — it's a validation failure that signals the supplier didn't actually trace their mineral sourcing. These mismatches are common in multi-tier supply chains where Tier-1 suppliers aggregate smelter data from their own sub-suppliers without verifying consistency. The resulting CMRT may contain a technically complete smelter list that doesn't correspond to the minerals actually present in the products being supplied.

4. "Unknown" smelters accumulate without escalation

The CMRT allows suppliers to declare smelters as "unknown" when they cannot identify the facility. In a single declaration, one or two unknowns may be reasonable — particularly for complex sub-assemblies with deep supply chains. But when unknowns accumulate across multiple CMRTs, and the same supplier reports "unknown" year after year without improvement, it signals weak supplier engagement rather than genuine supply chain complexity.

Under SEC guidance for Dodd-Frank Section 1502, companies are expected to perform reasonable due diligence — not simply collect declarations. An accumulation of "unknown" smelter entries, without documented escalation or supplier engagement efforts, undermines the credibility of the entire due diligence programme.

5. Closed or acquired smelters persist in declarations

Smelters close, merge, or are acquired — and their processing capabilities change accordingly. A tin smelter that ceased operations in 2022 may still appear on supplier CMRTs in 2026 because the supplier's internal records were never updated. Similarly, a smelter that was acquired and rebranded may appear under its old name, making it unverifiable against the current Standard Smelter List.

What Changed: RMAP EU Recognition and CMRT 6.6

Two developments in the past six months have raised the stakes for smelter validation:

RMAP recognized as the first EU-compliant due diligence scheme (October 2025)

In October 2025, the European Commission formally recognised RMI's Responsible Minerals Assurance Process as the first supply chain due diligence scheme fully aligned with the EU Conflict Minerals Regulation and the OECD Due Diligence Guidance. This recognition covers the RMAP Tin and Tantalum Standard, the RMAP Tungsten Standard, and the RMAP Gold Standard.

For EU importers, this is operationally significant: providing evidence of conformity with RMAP to Member State Competent Authorities is now a recognised pathway for demonstrating CMR compliance. Conversely, smelters in your supply chain that are not enrolled in RMAP or have lost their conformant status — represent a due diligence gap that EU competent authorities can flag.

The practical implication: RMAP status is no longer just an industry best practice. It's a regulatory compliance signal in the EU. Smelter validation against RMAP is no longer optional for companies selling into the European market.

CMRT 6.6 released (April 17, 2026)

The latest CMRT version, released just one week ago, includes updated Smelter Reference List and Standard Smelter List reflecting RMI's most recent facility data. It also introduces "Requester Product Number" and "Requester Product Name" fields in the Product List tab — a structural change designed to improve product-level traceability and reduce generic, copy-forward submissions.

CMRT 6.6 replaces version 6.5 (April 2025). Companies still collecting on older versions are working against outdated smelter lists and missing the product-level fields that OEMs are increasingly requiring.

What Proper CMRT Smelter Validation Looks Like

Validation means more than checking that the smelter list tab is filled in. It means verifying that every smelter entry is real, current, correctly matched to the declared mineral, and assessed against its RMAP status. Five checks constitute a defensible validation:

1. Verify every smelter ID against the current RMI Standard Smelter List

Every smelter or refiner listed in a CMRT should have a valid Smelter Identification Number in RMI's database. If a smelter doesn't appear in the Standard Smelter List, it's either misidentified (wrong name or alias), a facility RMI hasn't catalogued, or fictitious. Each of these scenarios requires different follow-up — but none should be silently accepted.

2. Confirm mineral-to-smelter consistency

A gold refiner should not appear in a supply chain declaration for tin components. Cross-reference every smelter's processed metal (as listed in RMI's database) against the mineral declaration in the CMRT. Mismatches indicate that the supplier aggregated smelter data without tracing it to the specific product or material being declared.

3. Check current RMAP status, not the status at time of declaration

The smelter's RMAP status at the time the supplier completed the CMRT may differ from its status today. Pull the current status from RMI's published facility lists and flag any smelter that has moved from conformant to active, under review, or removed. A single non-conformant smelter in a supply chain doesn't necessarily mean the product is "conflict-affected" — but it does mean additional due diligence is required.

4. Flag persistent "unknowns" and escalate

If a supplier reports unknown smelters in consecutive reporting periods without improvement, the issue isn't supply chain complexity — it's supplier engagement. Document the escalation: what questions were asked, what follow-up was provided, and what the supplier's response was. This documentation is part of the "reasonable due diligence" standard under both Dodd-Frank and the EU CMR.

5. Validate country of origin against conflict-affected and high-risk areas

For smelters sourcing from the DRC and adjoining countries (the "covered countries" under Dodd-Frank) or from CAHRAs under the EU CMR, additional due diligence applies. Confirm that the country of origin declarations in the CMRT are consistent with the smelter's known sourcing patterns and any available RMAP assessment reports.

Company-Level vs Product-Level: Getting the Scope Right

A persistent structural weakness in CMRT reporting is the mismatch between company-level and product-level declarations. Many suppliers submit a single company-level CMRT listing every smelter in their entire supply chain — regardless of which smelters are relevant to the specific product being supplied.

This creates two problems:

Over-reporting: The CMRT includes smelters that have nothing to do with the declared product, inflating the smelter list and making validation more complex than necessary. A supplier with 200 smelters across all product lines may submit all 200 for a single component, burying the handful that are actually relevant to the component being sourced.

Under-scrutiny: Because the smelter list is so broad, the compliance team can't determine which smelters are actually in the product's supply chain. A non-conformant smelter in the list might be irrelevant to the product — or it might be the primary source. Without product-level granularity, there's no way to know.

OEMs are increasingly requiring product-level CMRT declarations — smelter data tied to specific part numbers or product families. CMRT 6.6's new product identification fields support this shift. Manufacturers who continue accepting company-level declarations are accepting a level of ambiguity that OEM customers and regulators are moving away from.

A Self-Check for Your CMRT Validation Process

Six questions to pressure-test your conflict minerals due diligence before your next reporting cycle:

• Template currency: Are you collecting on CMRT 6.6 (released April 17, 2026) or an older version with outdated smelter lists?
• Smelter ID verification: Is every smelter in your consolidated CMRT data verified against the current RMI Standard Smelter List?
• RMAP status check: Have you pulled current RMAP status for every listed smelter — not relying on the status at the time the CMRT was completed?
• Mineral consistency: Have you cross-checked that every smelter's declared metal matches the mineral reported in the CMRT?
• Unknown escalation: For suppliers reporting "unknown" smelters, have you documented escalation efforts and follow-up in consecutive reporting periods?
• Product-level scope: Are your CMRTs product-specific, or are you accepting company-level declarations that don't tie smelters to the parts you actually source?

If more than two answers reveal gaps, the smelter data underlying your Form SD or EU CMR report may not survive audit scrutiny.

Where Regilient fits in

CMRT smelter validation at scale across hundreds of suppliers, thousands of smelter entries, and continuously changing RMAP statuses is where manual processes collapse. A compliance analyst can validate ten CMRTs per day. A supply chain with 500 suppliers returning CMRTs annually generates a validation workload that exceeds any team's capacity without automation.

Regilient's agentic sustainability platform handles the parts of conflict minerals compliance that don't scale manually:

• Automated smelter ID validation against the current RMI Standard Smelter List, with alias matching and facility database cross-referencing
• Real-time RMAP status monitoring that flags changes in smelter conformance status between reporting periods
• Mineral-to-smelter consistency checks that detect mismatches between declared metals and smelter processing capabilities
• Supplier escalation workflows for persistent unknowns, with documented inquiry trails that satisfy Dodd-Frank and EU CMR due diligence standards
• Product-level CMRT aggregation that rolls supplier smelter data up to specific part numbers, not company-level catch-all declarations
• CMRT version management that ensures all suppliers are reporting on the current template (6.6) with the latest smelter reference data

The EU Commission's recognition of RMAP in October 2025 turned smelter validation from an industry best practice into a regulatory compliance signal. The release of CMRT 6.6 on April 17, 2026 updated the smelter reference baseline. The compliance teams that validate at the smelter level not the declaration level, will produce reports that hold up under audit. The teams that file CMRTs without checking will produce reports that look complete but aren't defensible.

Book a Regilient demo to see how agentic smelter validation closes the gap between supplier CMRT declarations and verified conflict minerals data.

Regilient provides agentic sustainability software for product compliance, supplier engagement, and regulatory intelligence across REACH, RoHS, PFAS, CMRT, SCIP, and global chemical regulations.