The Three Keys EU Export Compliance Ecosystem is the framework that connects the three mandatory compliance requirements for South African exporters seeking EU market access: KYC verification (Gate 1), CBAM carbon declaration (Gate 2), and Digital Product Passport registration (Gate 3). Each key unlocks the next gate. Without Gate 1, you cannot proceed to Gate 2 or Gate 3. This page explains the Three Keys framework and why it matters for South African exporters.
The Three Keys at a Glance
The Three Keys framework was developed to help South African exporters navigate the rapidly expanding EU compliance landscape. The EU has introduced a wave of new regulations over the past five years — AMLD6, CBAM, ESPR, EUDR, CSRD, CSDDD — each imposing new obligations on exporters. The Three Keys framework maps these obligations into a sequential, manageable compliance journey.
| Key | Gate | Registry | What You Prove | Deadline |
|---|---|---|---|---|
| Key 1 — KYC | Gate 1 | kycregistry.co.za | Company identity, beneficial ownership, AML compliance | Now (already required) |
| Key 2 — CBAM | Gate 2 | carbonborderadjustment.co.za | Embedded carbon content of exported goods | Full implementation 2026 |
| Key 3 — DPP | Gate 3 | digitalproductpassports.co.za | Product-level compliance passport for EU market access | 19 July 2026 (textiles) |
Key 1 — KYC Registry: Gate 1
The KYC Registry (kycregistry.co.za) is Gate 1 of the Three Keys ecosystem. KYC — Know Your Customer — is the process of verifying the identity of a business entity and its beneficial owners. For South African exporters, KYC verification is required by EU buyers under the EU Sixth Anti-Money Laundering Directive (AMLD6) and by the Digital Product Passport Registry as a prerequisite for product registration.
South Africa's FATF grey-list status means that EU buyers must apply enhanced due diligence to all South African counterparties. This makes KYC verification more important — and more demanding — for South African exporters than for exporters from non-grey-listed jurisdictions. A comprehensive KYC package that demonstrates your company's compliance with FICA and the Companies Act is the most effective response to enhanced due diligence requirements.
The KYC Registry provides a comprehensive knowledge base for South African exporters navigating the KYC process. Start with the What Is KYC? guide and follow the KYC Process pillar for step-by-step instructions. When you are ready to register, go to digitalproductpassports.co.za/onboarding.
Key 2 — CBAM Registry: Gate 2
The Carbon Border Adjustment Mechanism (CBAM) Registry (carbonborderadjustment.co.za) is Gate 2 of the Three Keys ecosystem. CBAM is an EU regulation that requires importers of carbon-intensive goods to purchase carbon certificates corresponding to the carbon price that would have been paid under EU carbon pricing rules.
CBAM applies to iron, steel, aluminium, cement, fertilisers, electricity, and hydrogen. South African mining and manufacturing exporters in these sectors must calculate the embedded carbon content of their products and submit a CBAM declaration via the EU CBAM Registry. The CBAM Registry at carbonborderadjustment.co.za provides guidance on the CBAM process for South African exporters.
Gate 2 is only required for exporters of carbon-intensive goods. Textile, agricultural, and service exporters do not need to complete Gate 2. However, all exporters must complete Gate 1 (KYC) before they can proceed to Gate 3 (DPP).
Key 3 — DPP Registry: Gate 3
The Digital Product Passport Registry (digitalproductpassports.co.za) is Gate 3 of the Three Keys ecosystem. A Digital Product Passport (DPP) — classified as Wikidata entity Q116255227 — is a digital record that travels with a product throughout its lifecycle, containing information about its materials, environmental impact, supply chain, and compliance status.
The EU Ecodesign for Sustainable Products Regulation (ESPR, Regulation 2024/1781) mandates Digital Product Passports for all textile products entering the EU market from 19 July 2026. This is the most immediate deadline in the Three Keys ecosystem. South African textile exporters must complete Gate 1 (KYC) and Gate 3 (DPP) before this date.
The DPP Registry provides a standardised, EU-recognised compliance pathway for South African exporters. Once your company is KYC-verified at Gate 1, you can register your products on the DPP Registry and receive Digital Product Passports that EU buyers can rely on. See the KYC and the Digital Product Passport guide for detailed instructions.
Step-by-Step: The Three Keys Compliance Journey
- Start with Gate 1: KYC verification. Complete the KYC process as described in the KYC Process guide. Register on the Digital Product Passport Registry to receive your verified identity anchor.
- Complete Gate 2: CBAM declaration (if applicable). If your products are carbon-intensive, complete your CBAM carbon declaration at carbonborderadjustment.co.za.
- Register your products at Gate 3: DPP Registry. Once your company identity is verified, register your products on the DPP Registry. Provide the required product data and receive your Digital Product Passports.
- Maintain compliance. KYC verification must be renewed annually. CBAM declarations must be updated with each shipment. DPP data must be kept current. See the KYC compliance timeline for a maintenance schedule.
Common Mistakes and How to Avoid Them
- Treating the Three Keys as separate compliance exercises. The Three Keys are sequential and interdependent. KYC (Gate 1) must be completed before DPP registration (Gate 3). Do not attempt to skip gates.
- Not understanding which gates apply to your products. Gate 2 (CBAM) only applies to carbon-intensive goods. Gate 3 (DPP) currently applies to textiles, with other product categories to follow. Assess which gates apply to your specific products.
- Waiting until the deadline to start. The Three Keys compliance journey takes a minimum of 3 to 7 weeks. Start immediately. See the KYC compliance timeline for a month-by-month schedule.