CSDDD compliance guide for Bangladesh garment sourcing — Germany brands
In brief: CSDDD does not ask German brands for audit certificates. It asks for evidence of ongoing monitoring. A factory can hold a current BSCI A grade, a valid Sedex SMETA, and still leave a brand exposed under CSDDD if there is no documented monitoring trail between those audit dates.
Tier 2
Who's in scope
CSDDD reaches buying house (direct), factory (Tier 2), and fabric mills upstream — not just your contract counterparty.
6 / qtr
Monitoring activities
Bank solvency, wage timing, utilities, subcontracting clause, midpoint photos, pre-shipment inspection.
364 days
Gap between audits
What happens between annual audit dates is what CSDDD asks German brands to show.
The Corporate Sustainability Due Diligence Directive does not ask German brands for audit certificates. It asks for evidence of ongoing monitoring. That distinction is what most CSDDD compliance Bangladesh garment sourcing Germany conversations miss. A factory can hold a current BSCI A grade, a valid Sedex SMETA, and still leave a brand exposed under CSDDD if there is no documented monitoring trail between those audit dates.
What CSDDD actually requires from a Germany-based brand?
CSDDD requires in-scope companies to identify, prevent, and remedy adverse human rights and environmental impacts across their supply chain — including Tier 2 suppliers, which in garment sourcing means the cut-and-sew factory and its upstream fabric mills. The directive treats annual audits as a starting point, not the compliance itself. What it expects is an active monitoring record: documented checks between audits, records of issues identified and resolved, and evidence the brand acted when risk emerged.
For a German fashion brand sourcing from Bangladesh, that operational burden lands in three places. First, the buying house is treated as a direct supplier and falls in scope. Second, the factory is in scope as Tier 2. Third, the brand must be able to produce the monitoring documentation on request — not point to certificates and hope. This is also where CSDDD and the German Supply Chain Act overlap; brands already managing German Supply Chain Act documentation for mid-market brands have most of the architecture in place already.
Why audit certificates alone fail the test?
A BSCI audit is a point-in-time assessment. It captures conditions on the day the auditor walks the floor. It does not capture what happens in the 364 days between audits, and it does not capture financial risk that creates the conditions for subcontracting, wage delays, or worker safety shortcuts. I have written separately on why BSCI audit scores don't predict delivery — the same logic applies to CSDDD risk.
Three specific gaps recur. Finishing is frequently subcontracted in Bangladesh to facilities not covered by the main BSCI audit, which creates a REACH compliance hole. Wage payment timing — healthy factories pay by the 7th of the month; stressed factories slip to the 15th or beyond — is a leading indicator of worker harm that no annual audit catches. And capacity utilisation above 95% removes the buffer factories need to handle problems without cutting corners. None of this appears on a certificate. All of it is the kind of thing CSDDD expects a brand to know about its Tier 2.
What ongoing monitoring looks like in practice?
Operational CSDDD monitoring for a Bangladesh supply chain breaks into roughly six recurring activities. A bank solvency certificate from every factory before any order is placed, refreshed every six months, to confirm an active working capital facility. Quarterly checks on wage payment timing and utility payment status across active factory relationships. A written subcontracting prohibition embedded in every purchase order and service agreement, with a midpoint report at 50% production including floor photographs to verify it. Pre-shipment inspection at AQL 2.5 by SGS, Bureau Veritas, or Intertek — never by the factory itself. Capacity utilisation logged per factory per quarter. And a documented escalation pathway when any indicator turns amber.
This is the architecture a CSDDD Bangladesh buying house should be operating on the brand's behalf. The point is not that the brand must do all of this itself — the point is that someone must, and the documentation must exist when the regulator asks.
What CSDDD asks for — vs what audits give you
Bank solvency certs every 6 months
Wage payment timing logs (quarterly)
Subcontracting prohibition (PO + SA)
50% midpoint floor photographs
AQL 2.5 third-party inspection
Capacity utilisation log per factory
Bank credit deterioration mid-year
Wage timing slippage
Quiet subcontracting between audits
REACH gaps in finishing facilities
Capacity above 95% overcommitment
Tier 2 visibility entirely
What is the Tier 2 documentation a German auditor will want?
When a Germany-based brand is examined under CSDDD, the document set that holds up is concrete. Factory bank solvency certificates, dated within the last six months. The signed service agreement and purchase orders showing the subcontracting prohibition clause. Midpoint reports with timestamped floor photographs. Pre-shipment inspection reports from accredited third parties. Quarterly financial monitoring logs showing wage timing, utility status, and capacity utilisation per factory. Records of any factory that was downgraded or removed, and why.
LEED certification adds a separate, useful layer because it is independently assessed against documented metrics — exactly what the Green Claims Directive is being tightened to require. The full list of what LEED actually covers is in what LEED Gold certification measures at a garment factory. Fewer than 50 Bangladesh factories hold LEED Gold or Platinum, which is one reason factory selection is itself a CSDDD decision.
What This Means for European Brands
For a German brand sourcing from Bangladesh, CSDDD compliance is less a project than a process. The decision worth making early is who carries the monitoring burden. Brands large enough to put compliance staff in Bangladesh can run this themselves. Most mid-market brands cannot, and end up either accepting audit certificates as a proxy — which CSDDD does not — or working with a buying house structured to produce the documentation continuously. Germany sustainable garment sourcing under CSDDD ultimately rests on whether the brand can show a regulator the monitoring trail. Certificates without that trail are decoration, not defence.
The practical next step for a brand reviewing its Bangladesh exposure is to ask each supplier and buying house for the last two quarters of monitoring records — not the latest audit certificate. The answer to that single request tells you whether your current setup is CSDDD-ready or whether you are exposed. Further reading on the operational side is at bengalorigin.co/sourcing-intelligence/.
If you are reviewing whether your Bangladesh sourcing setup will hold up under CSDDD scrutiny, I am happy to walk through what ongoing monitoring looks like in practice.
Talk through your setup →