EUDR reporting straight into the EU TRACES system
A due diligence statement is submitted to an EU authority and includes plot polygons. From the plots and the risk assessment the system builds the XML statement, signs the SOAP request with a WS-Security header, sends it to EU TRACES, and then reads the statement status and reference numbers back from TRACES. The EU test server is not always available, so next to the real client there is a fake one that simulates a wrong key, an outage or a withdrawn statement. The customer's key is stored encrypted with libsodium. Old evidence attached to statements is removed by a separate command.