Ecoembes Audit Guide for E-commerce 2026

What is an Ecoembes Audit and Why is E-commerce a Target in 2026?

You shipped 40,000 orders into Spain last year. You're registered with Ecoembes, you filed your declaration, and you paid your fees. Job done, right? Not quite — because if your business turns over enough to require a statutory financial audit, Ecoembes now requires your packaging data to be independently verified too. And in 2026, e-commerce brands are firmly in scope.

The audit we're talking about here is not the facility inspection that recyclers and recovery operators go through. That's a different process entirely. What producers — companies that place packaged goods on the Spanish market — face is a data verification audit of their annual packaging declaration. Under Royal Decree 1055/2022, every company selling packaged goods in Spain must report the weight and type of packaging it puts on the market. Ecoembes then uses those figures to calculate your membership fees and report aggregate data to Spain's Ministry for Ecological Transition. Inaccurate declarations don't just affect your bill — they distort national recycling statistics and can trigger enforcement action from MITECO.

Here's the thing: e-commerce brands have historically been under-scrutinised compared to traditional retailers. Many assumed that because they were shipping from outside Spain or operating through marketplaces, the rules didn't fully apply. They do. And regulators — and Ecoembes itself — have been tightening up on cross-border sellers and digital-first brands specifically. We wrote about the broader picture in our EPR Requirements for E-commerce: A 2026 Global Overview if you want context on how Spain fits into the wider regulatory environment.

The specific trigger for a formal audit is straightforward: if your company is subject to a statutory financial audit (i.e., you meet the thresholds under Spanish company law that require an external auditor to sign off your accounts), Ecoembes requires you to submit what's called an "Informe de Procedimientos Acordados" — an Agreed Procedures Report — prepared by a registered auditor. This report verifies that your packaging declaration matches your actual business data. No wiggle room, no self-certification.

The companies most at risk of a discrepancy — and therefore most at risk of a difficult audit — are fast-growing e-commerce brands that scaled quickly, changed their packaging mix mid-year, or rely on manual processes to track what they're shipping. Sound familiar?

The Ecoembes Audit Process: A Step-by-Step Walkthrough

Understanding what actually happens during the process removes a lot of the anxiety around it. The audit isn't a surprise inspection where someone shows up at your warehouse. It's a structured data verification exercise, and it follows a predictable sequence.

Step 1: Determine Whether You're Subject to the Audit

The obligation to submit an Agreed Procedures Report applies to Ecoembes member companies that are also subject to a statutory financial audit under Spanish legislation (specifically, companies meeting the thresholds in Article 263 of the Spanish Companies Act — generally, those exceeding two of the following three criteria: assets over €2.85 million, turnover over €5.7 million, or more than 50 employees). If that's you, the audit is mandatory, not optional.

But even if you're below those thresholds, Ecoembes retains the right to request verification of your data. It's rare, but it happens — particularly if your declaration shows unusual year-on-year swings.

Step 2: Appoint a Registered Auditor

The Agreed Procedures Report must be prepared by an auditor registered with the Instituto de Contabilidad y Auditoría de Cuentas (ICAC) — Spain's official audit regulator. This doesn't have to be the same firm auditing your financial accounts, but using the same firm is often more efficient since they already understand your business structure and transaction volumes.

Brief your auditor early. Don't wait until March. The auditor needs to understand your packaging categories, your sales channels, and how your ERP or order management system records packaging data. The more context they have upfront, the faster the fieldwork goes.

Step 3: Compile Your Packaging Data

This is where most of the work happens — and where most errors originate. Your declaration to Ecoembes covers all household packaging you've placed on the Spanish market in the previous calendar year, broken down by material type (plastic, cardboard, glass, steel, aluminium, wood, composite) and by packaging category (primary, secondary, tertiary). Your auditor will cross-reference this declaration against your source data.

The source data they'll want to see includes: sales records, purchase orders for packaging materials, bills of lading or customs documents for imported goods, and any internal packaging specifications. If your data lives across three spreadsheets, your Shopify back-end, and a shared drive folder from 2022, that's going to slow everything down considerably.

Step 4: The Agreed Procedures Fieldwork

Unlike a full audit, agreed procedures work is narrower in scope — the auditor is specifically checking that the procedures you've followed to compile your declaration are consistent with your underlying data. They'll sample transactions, check that packaging weights assigned to products are accurate, and verify that nothing material has been omitted. They're not forming an overall opinion on your compliance; they're verifying specific data points against specific procedures.

Step 5: Submit the Report to Ecoembes

Once the auditor signs off the Agreed Procedures Report, it's submitted to Ecoembes via the member portal alongside your annual declaration. The deadline aligns with your declaration submission window — typically by the end of March for the prior year's data, though you should always verify the current year's deadline directly with Ecoembes since these can shift. Our guide on filing your 2026 Ecoembes Declaration in Spain covers the submission process in detail.

Essential Documents: What You MUST Have Ready for Auditors

No audit goes smoothly without good documentation. Here's what to have organised before your auditor begins fieldwork — not the day they ask for it.

The packaging specifications per SKU deserve special attention. Many e-commerce brands — particularly those using fulfilment centres or third-party logistics providers — genuinely don't know the exact weight of their packaging at the unit level. They declare an approximate figure. An approximation isn't automatically wrong, but it needs to be a defensible approximation backed by a documented methodology. "We estimated" is not a methodology. "We weighed 50 representative units across each SKU category and applied the average" is.

And if you sell across Shopify, Amazon, and a wholesale channel simultaneously — which many of the brands we work with do — you need to make sure you're not double-counting. Packaging placed on the market by Amazon as the importer of record is Amazon's liability, not yours. Documenting the split clearly will save you from a very awkward conversation with your auditor. This is exactly the kind of operational complexity that solid EPR packaging compliance software is built to handle.

Top 5 Mistakes E-commerce Brands Make in Ecoembes Audits

Mistake 1: Treating the Declaration as a One-Off Annual Task

Most brands compile their Ecoembes declaration in February or March by pulling together whatever data they can find from the previous year. That approach works until it doesn't. An auditor wants a clear, consistent trail from your sales data through to your declared figures. If you're reconstructing that trail retrospectively across 12 months of messy records, you'll miss things — and so will they, but not in your favour. Compliance data needs to be tracked continuously, not assembled in a panic.

Mistake 2: Using Packaging Weights That Were Accurate Once

You set up your SKU packaging weights in 2022 when you launched in Spain. Since then, you've changed your mailer boxes twice, added void fill, and switched your inner carton supplier. But the weights in your system haven't changed. This is extraordinarily common, and it's one of the first things an experienced auditor will probe — particularly if your declared weight per order looks inconsistent with your current packaging specification. Update your packaging data every time you make a change, not annually.

Mistake 3: Ignoring Tertiary Packaging

Primary packaging (the product box), secondary packaging (the outer carton), and tertiary packaging (pallet wrap, strapping, corner boards) all count under Royal Decree 1055/2022 — as long as the tertiary packaging is considered household packaging that eventually ends up with the consumer. E-commerce brands often forget that branded tissue paper, branded tape, and inner packing material all need to be assessed for inclusion. It's a genuine grey area in some cases, but "we didn't think about it" isn't a defence.

Mistake 4: Not Aligning with Your Financial Auditor Early

If the same firm is handling both your statutory financial audit and your Ecoembes Agreed Procedures Report, they need to know this before they start fieldwork — not after. The two engagements have different scopes, different documentation requirements, and different timelines. A lack of coordination between your finance team and your compliance team is the single fastest way to create conflicting data sets that confuse everyone involved.

Mistake 5: Assuming Marketplace Sales Aren't Your Problem

Look — the responsibility for EPR compliance depends on who is the "producer" for each transaction, which is defined under Royal Decree 1055/2022 as the entity placing the packaging on the market for the first time in Spain. For Amazon FBA sellers where Amazon is the importer of record, Amazon handles the EPR obligation for those sales. But if you're fulfilling orders yourself through your own Shopify store and shipping directly to Spanish consumers, that's your obligation entirely. Brands that assume their marketplace presence covers their DTC channel are setting themselves up for a significant underreporting problem. We cover this jurisdictional split in our broader e-commerce EPR compliance guide.

How to Streamline Audit Prep with Compliance Software

When we were running our own e-commerce brands, the annual compliance crunch was genuinely painful. Exporting order data, matching it against packaging specs, reconciling with supplier invoices — it was a multi-day exercise that always found at least one discrepancy we couldn't fully explain. The root problem wasn't carelessness. It was that the data lived in too many places.

Dedicated packaging compliance software solves this by connecting your sales channels directly to your compliance reporting. Instead of exporting data manually, the system calculates your packaging tonnage per market in real time — so when March comes and your auditor asks for the workings behind your Ecoembes declaration, you have a clean, documented audit trail rather than a collection of spreadsheets with unexplained formulas.

For e-commerce brands specifically, the integration layer matters enormously. If your orders are coming through Shopify, Amazon, and a wholesale channel simultaneously (as covered in our piece on multichannel inventory management), you need a system that can disaggregate your Spanish sales from your UK and German sales automatically — not one that forces you to do it manually. Ceendesis Packaging Compliance pulls order data from your connected channels and maps it against your packaging specifications at the SKU level, so your declared weights are always derived from real transaction data rather than estimates.

The practical difference for an audit is significant. Instead of saying "we estimated our cardboard weight based on our average order size," you can say "every order that shipped to a Spanish address was logged with its exact SKU combination, and each SKU has a documented packaging weight that was last verified in [date]. Here's the methodology document." That's the kind of answer that ends an auditor's line of questioning quickly.

If you're also managing textile or fashion products alongside your packaged goods — which a growing number of brands are — you'll want to think about how textile EPR obligations (covered in our textile EPR compliance guide) interact with your packaging compliance workflow. They're separate obligations, but they share the same underlying data problem: sales volume per market, product category, and material composition. A unified compliance platform handles both without duplicating your data management effort.

Frankly, most brands overthink the technology question and underthink the data quality question. The best compliance software in the world won't save a declaration built on inaccurate packaging weights. Get the underlying data right first — accurate SKU-level specs, clear channel attribution, documented methodology — then let the software automate the calculation and reporting layer.

For brands managing inventory across multiple channels and warehouses, keeping your operational data clean is the foundation of everything. Ceendesis IMS keeps your stock data accurate across channels, which feeds directly into your compliance calculations — because if your sales data is unreliable, your packaging declaration will be too. See the full list of integrations to check whether your current stack is covered.

Frequently Asked Questions

What triggers an Ecoembes audit in Spain?

An Ecoembes audit is triggered when a member company is also subject to a statutory financial audit under Spanish company law — specifically, companies exceeding two of the three thresholds in Article 263 of the Spanish Companies Act (assets over €2.85 million, turnover over €5.7 million, or more than 50 employees). These companies must submit an Agreed Procedures Report prepared by an ICAC-registered auditor alongside their annual packaging declaration. Ecoembes can also request data verification from smaller companies if there are material inconsistencies in their reported figures.

What documents are needed for a packaging compliance audit in Spain?

The core documents required for an Ecoembes Agreed Procedures Report include your sales records for the declaration year (broken down by Spanish orders), packaging specifications per SKU showing material type and weight, supplier invoices for packaging materials, import/customs documentation for goods entering Spain, and a written methodology explaining how you calculated your declared tonnage. You'll also need your previous year's declaration for year-on-year comparison and evidence of your Ecoembes membership and fee payment history. Having these organised before fieldwork begins — not during — is what separates a smooth audit from an extended one.

What are the penalties for failing an Ecoembes audit?

Inaccuracies discovered during an Ecoembes audit can result in retroactive fee adjustments, formal reporting to Spain's Ministry for Ecological Transition (MITECO), and regulatory sanctions under Royal Decree 1055/2022 and Spain's waste law framework — which classifies serious EPR infringements as subject to significant financial penalties. Beyond the direct fines, a failed audit can result in loss of your Ecoembes membership, which effectively means you cannot legally place packaged goods on the Spanish market until compliance is restored. The reputational and operational consequences of that outcome are considerable for any e-commerce brand with meaningful Spanish revenue.

How do I prove my packaging declarations to Ecoembes are accurate?

Accuracy is demonstrated through a documented, reproducible methodology — not just a correct final number. You need to show that your declared weights are derived from actual transaction data (sales records matched to SKU-level packaging specifications), that your packaging weights are based on verified measurements rather than estimates, and that your methodology consistently applied the same approach across the entire declaration year. Compliance software that logs every Spanish order against its packaging specification in real time provides the strongest possible audit trail — it transforms a declaration from a calculation into a data export.

An Ecoembes audit doesn't have to be the stressful exercise it is for most brands. The preparation isn't complicated — it's just continuous. Keep your packaging specifications current, track your Spanish sales separately from other markets, document your methodology clearly, and brief your auditor before they start asking questions you haven't prepared for. If your data is clean and your audit trail is clear, the Agreed Procedures Report is a formality rather than a threat. And if you want to make that the permanent state of your compliance operation — rather than something you scramble to achieve each February — our packaging compliance platform is built exactly for that.