CBAM is now in the definitive regime, but the first commercial exposure is still hiding in the value chain.
For UK manufacturers selling into the EU, the question is not only who files the declaration. It is where embedded emissions data, supplier behaviour and customer pass-through will change margin before the invoice arrives.
What changed
The EU CBAM definitive regime applies from 1 January 2026. EU importers above the mass threshold must move from reporting into a system that requires authorised declarants, embedded-emissions records and CBAM certificates. GOV.UK guidance for UK exporters says EU importers may ask manufacturers and suppliers for emissions data and evidence of carbon prices already paid. That makes CBAM a supply-chain information test, not a border-formality footnote.
The exposure does not sit in one function
A compliance team can monitor the regulation, but it cannot control supplier data quality, customer contract language, product-level margin or the timing of cash settlement by itself. The practical exposure usually enters through four doors: input materials, verified emissions evidence, pricing discipline and customer confidence.
Use the value chain, not the invoice
We would map CBAM by where exposure enters the business: supplier inputs, production data, logistics records, customer requests and finance assumptions. The certificate price matters, but the more immediate risk is an EU customer deciding that an exporter without credible data is harder to buy from.
What to ask now
Ask for one product-line view: which CBAM-covered inputs are in the bill of materials, which suppliers can provide usable emissions evidence, which customers have asked for data, which contracts allow pass-through and which finance model owns the cost sensitivity.
Boundary. This is a commercial framework, not customs, tax, legal or financial advice. A company-specific position needs current official guidance, product codes, supplier evidence, customer terms and specialist review.