Which regulations attach to a supplier relationship is a decided fact, not a reader's inference. This is the catalog Tieron decides from — every row with its legal source, effective date and version — followed by every change we have made to it, and the latest movement on the US forced-labor goods list. Applicability is computed by deterministic rules, never by a model.
Catalog version 2026-08-10 · 4 obligations. Each row is scored nowhere: obligations are a display and filter layer, deliberately kept out of the risk score.
| ID | Regime | Obligation | Cadence | In force from | Version | Source |
|---|---|---|---|---|---|---|
| O-001 | UFLPA | screening | continuous | 2022-06-21 | 1 | Uyghur Forced Labor Prevention Act, Pub. L. 117-78 — CBP enforcement |
| O-002 | UFLPA | due diligence | continuous | 2022-06-21 | 1 | UFLPA §3 rebuttable presumption — due diligence per CBP operational guidance |
| O-010 | CSDDD | due diligence | annual | 2024-07-25 | 1 | Directive (EU) 2024/1760 (CSDDD) — chain-of-activities due diligence |
| O-020 | CSRD_VSME | reporting | annual | 2023-01-05 | 1 | Directive (EU) 2022/2464 (CSRD) — value-chain data via EFRAG VSME |
A catalog edit is the regulatory-change event: when a rule moves, the row's version is bumped and the line below is written in the same commit. Tenants holding an affected supplier see it as an alert on their own feed.
| Date | ID | Version | What changed |
|---|---|---|---|
| 2026-08-10 | O-001 | new | Catalog opened with continuous UFLPA screening: every supplier relationship is screened against the current entity-list snapshot, and a match is a gap until it is resolved. Uyghur Forced Labor Prevention Act, Pub. L. 117-78 — CBP enforcement |
| 2026-08-10 | O-002 | new | Catalog opened with UFLPA due diligence on a China nexus — supplier country, a manufacturing site, or a registered upstream supplier in China each trigger it. UFLPA §3 rebuttable presumption — due diligence per CBP operational guidance |
| 2026-08-10 | O-010 | new | Catalog opened with the CSDDD chain-of-activities duty on direct suppliers, satisfied by a completed supplier assessment and renewed annually. Directive (EU) 2024/1760 (CSDDD) — chain-of-activities due diligence |
| 2026-08-10 | O-020 | new | Catalog opened with CSRD value-chain reporting, satisfied by a published EFRAG VSME report for the most recent completed financial year. Directive (EU) 2022/2464 (CSRD) — value-chain data via EFRAG VSME |
Watching the entity lists instead? Weekly sanctions list changes publishes what moved on OFAC, EU, UK, UN, UFLPA and debarment each week.