REACH compliance isn't optional. It's your licence to operate in the EU. If you're a manufacturer, importer, or supplier handling chemicals in the European market, good intentions don't hold up in an audit. You need a system: one that tells you your role, screens your substances, and produces evidence on demand.

Why a Checklist Alone Isn't Enough

REACH (Registration, Evaluation, Authorisation and Restriction of Chemicals) is one of the most comprehensive chemical regulations in the world. It touches every player in the supply chain, from substance manufacturers to the assembler putting together a finished article three tiers downstream.

A misstep doesn't just mean a fine. It can block a shipment at the border, damage a customer relationship, or force a last-minute redesign. A checklist tells you what "done" looks like. It doesn't, by itself, keep you done as the Candidate List updates twice a year and your BOMs change underneath you. That's the gap the implementation workflow below is meant to close.

The 2026 REACH Compliance Checklist

1. Determine Your Role in the Supply Chain

Before anything else, know your position under REACH:

• Manufacturer: you produce substances in the EU
• Importer: you bring substances, mixtures, or articles into the EU
• Downstream user: you use substances professionally but don't produce or import them
• Only Representative (OR): you represent a non-EU manufacturer to fulfil EU obligations

Action: map your supply chain role for each product line, since a company can hold different roles for different products.

2. Check Whether Your Substance Needs Registration

REACH registration applies to substances manufactured or imported at ≥1 tonne per year. Check:

• Is it already on the ECHA registration database?
• Has it been registered previously (legacy pre-registration data)?
• Is it exempt (for example, polymers, or non-isolated intermediates)?

Action: use ECHA's REACH-IT portal, or work through your Only Representative if you're a non-EU manufacturer.

3. Compile Your Chemical Safety Report (CSR)

Substances registered at ≥10 tonnes per year generally require a Chemical Safety Report, covering:

• Hazard assessment
• Exposure scenarios
• Risk characterisation

Action: build or validate your CSR using a recognised template, such as IUCLID.

4. Ensure Substance Traceability

Track every substance across the product lifecycle:

• CAS numbers
• Composition data
• Safety data sheets (SDS)
• Supplier declarations

Action: keep a digital trail through a PLM system or dedicated FMD management tooling, not a shared spreadsheet with no version history.

5. Monitor the Candidate List for SVHCs

The SVHC Candidate List currently stands at 253 substances (ECHA's 4 February 2026 update), and it typically updates twice a year.

Action: screen your BOMs and supplier materials against the current list every time it updates, not just at onboarding. Bonus: automate the alert so a list update triggers a re-screen without someone having to remember to check.

6. Disclose SVHCs in Articles (Article 33)

If an SVHC is present above 0.1% w/w in an article:

• Notify customers with enough information for safe use
• Update the SDS
• Submit data to ECHA's SCIP database under the Waste Framework Directive, where the threshold applies

Action: build a standing workflow for SVHC screening and customer disclosure, since this repeats every time the Candidate List moves.

7. Check Annex XVII Restrictions

Substances restricted under Annex XVII cannot be manufactured, used, or placed on the market unless specific conditions are met (concentration limits, use bans, or usage conditions).

Action: verify restricted substances against your BOMs and confirm you're operating within any applicable thresholds.

8. Identify Annex XIV Authorisation Needs

If you use an SVHC that has progressed to Annex XIV (the Authorisation List):

• Check the sunset date
• Apply for authorisation well ahead of the Latest Application Date (LAD)

Action: start the authorisation process at least 18 months in advance. Authorisation dossiers take time to prepare and ECHA's review isn't instant.

9. Maintain a Robust Document Trail

Your documentation should include:

• Registration dossiers
• CSRs
• SDS and labels
• SVHC declarations
• Evidence of downstream communication

Action: retain everything for at least 10 years after the product is placed on the market.

10. Audit Your Supply Chain

Your compliance is only as strong as your weakest supplier.

Action: run supplier audits at least annually and maintain supplier scorecards.

Tip: standardise on IPC-1752A or IEC 62474 for data exchange so supplier submissions are comparable instead of a pile of inconsistent spreadsheets.

Implementation Workflow: Turning the Checklist Into a Programme

A checklist tells you what to check. This is how most teams actually roll it out, in three phases:

Phase 1: Assess (roughly 1–2 weeks) Scope your article categories, map current supplier evidence, and identify where the biggest data gaps sit. This is where you'll usually find that 30–40% of your BOM has no recent supplier declaration on file.

Phase 2: Enable (roughly 2–6 weeks) Configure your screening process against the current Candidate List, launch structured supplier outreach (IPC-1752A or IEC 62474, not open-ended email threads), and get your first Article 33 notice or SCIP dossier through the pipeline end to end. This phase is where most of the manual pain lives if you're not automating it.

Phase 3: Operate (ongoing) Move to continuous monitoring: policy tracking for Candidate List and Annex updates, automatic re-screening on BOM changes, and periodic supplier audits. The goal here is that a Candidate List update triggers your process, rather than your team discovering it three months later during a customer audit.

Where This Fits in Your Compliance Journey

Not every reader here is in the same place, so here's how to use this guide depending on where you are:

• New to REACH, figuring out if it applies to you: start with step 1 and step 2. If you're still working out your obligations, our explainer on what REACH actually requires is a good next stop.
• Already registered, managing SVHC exposure day to day: focus on steps 5–8, and see our breakdown of how the Candidate List, Annex XIV, and Annex XVII relate to each other.
• Running a mature programme, looking to cut manual effort: you're the audience for the software section below. Skip ahead.

The 2026 REACH Compliance Checklist: Printable Summary

Automating the Checklist With Regilient

Every step above can be run manually. Most REACH programmes start that way, and most of them hit a wall once product lines multiply and the Candidate List keeps moving underneath a static spreadsheet.

Regilient's platform is built around the checklist itself, not a separate tool bolted on top of it:

• Automated Candidate List screening: BOMs are re-screened automatically whenever ECHA updates the list, so a list update doesn't sit unnoticed for months.
• Supplier declaration management: structured outreach and validation in IPC-1752A and IEC 62474 formats, replacing the email-thread approach to FMD collection.
• SCIP dossier preparation: article-level data assembled and ready for submission once the 0.1% w/w threshold is met.
• Annex XIV and XVII tracking: authorisation sunset dates and restriction updates surfaced against your specific product portfolio, not a generic regulatory bulletin.
• Audit-ready documentation: a centralised, version-controlled record that holds up whether the request comes from ECHA or from a customer's compliance team.

This isn't a replacement for the judgement calls in steps 1, 2, and 3. Those still need a person who understands your specific products. It's built for steps 5 through 10, where the work is repetitive, time-sensitive, and exactly where manual programmes tend to fall behind.

Want to Automate Your REACH Compliance?

Regilient helps you track REACH updates in real time, automate SVHC screening and supplier data validation, prepare SCIP dossiers and registration files, and stay audit-ready across EU, UK, and global markets.

Book a REACH compliance strategy call →