Cobalt Supply Chain: Mapping, Risks & Traceability (Battery Passport-ready)
-
Cobalt supply chains are easiest to manage when you map beyond tier-1 and anchor traceability at the refinery and upstream sites.
-
The highest risk concentration typically sits around origin integrity, midstream capacity concentration, and ESG exposure in upstream sourcing.
-
Mixing and relabeling can happen at multiple handoff points, so batch identity and mass balance logic matter early.
-
Strong due diligence looks like repeatable evidence: supplier declarations, audits, transport documentation, and a clear corrective action process.
-
Battery Passport readiness improves when you standardize core data fields and document workflows from day one.
-
Miningsource conditions and origin integrity define the risk baseline.
-
Processing/Intermediates first transformation steps introduce mixing risks and documentation gaps.
-
Refiningmidstream concentration can create bottlenecks and increases dependency risk.
-
Battery materialschemical specifications and supplier qualification become critical.
-
Cells/Packstraceability often weakens without consistent part and batch identifiers.
-
Useproduct identity must remain stable for reporting and end-of-life tracking.
-
Collectionrecovery rates depend on systems, incentives, and compliance processes.
-
Recyclingsecondary cobalt can reduce exposure, but still needs provenance and quality evidence.
- A practical map of the cobalt supply chain with clear checkpoints at each step
- A list of red flags to detect hidden risks early
- A simple set of minimum data fields for traceability and reporting
- A due diligence evidence checklist: what to request and how to store it
- A readiness path for audits and Battery Passport-style disclosure
Why cobalt matters for batteries
Cobalt remains a key material in many lithium-ion battery cathodes, especially in chemistries used for electric vehicles and consumer electronics where energy density, performance, and safety requirements are high. While some chemistries reduce cobalt intensity, demand and risk exposure stay relevant because battery markets are large, supply chains are complex, and quality requirements are strict. Two trends shape supply chain management:
-
Lower cobalt intensity per kWh in some chemistriespressure to optimize cost and reduce upstream risks
-
Persistent operational and compliance exposuresourcing practices, geopolitical dependencies, and audit expectations still require strong traceability and documentation
Cobalt supply chain map
-
Step 1: Mining (industrial and ASM)
What happens
- Cobalt is produced via industrial mining and, in some regions, through artisanal and small-scale mining (ASM).
- Upstream conditions influence human rights exposure, safety risks, and the credibility of origin claims.
Evidence to collect
- Site identification details: mine name, location, ownership or operator, license references
- Origin declarations tied to lots or shipments
- Supplier policies and codes of conduct for responsible sourcing
- Records of grievance mechanisms and how complaints are handled
- Audit reports or third-party assessments where available
Red flags
- Missing mine-level information or vague origin language
- Inconsistent documentation across shipments
- No escalation path for grievances or incidents
-
Step 2: Processing / intermediate products
What happens
- Ore and concentrates move into intermediate products through processing steps that may involve multiple facilities and traders.
- Material can be blended, stored, resold, or redirected, which complicates traceability.
Evidence to collect
- Chain of custody records across handoffs
- Transport documents that align with lot identifiers
- Material specifications and weight reconciliation
- Counterparty lists and facility details for each transformation step
Red flags
- Unexplained changes in lot IDs, weights, or grades
- Gaps in transport and customs documentation
- Sudden supplier substitutions without clear explanation
-
Step 3: Refining
What happens
- Refining converts intermediates into higher purity chemicals used in battery materials.
- Capacity concentration in midstream can create dependency risk and raise the impact of disruptions.
Evidence to collect
- Refiner identity, facility location, and production scope
- Quality control documentation: certificates of analysis, batch test results
- Due diligence coverage: audits, management systems, supplier screening methods
- Traceability logic: mass balance or segregated sourcing where applicable
Red flags
- No clear method for linking input sources to output batches
- Limited transparency on upstream suppliers
- Weak corrective action practices after findings
-
Step 4: Cathode active materials → Cells → Packs
What happens
- Refined cobalt becomes part of cathode active materials, then moves into cell manufacturing and pack assembly.
- Traceability often weakens at tier-2 and tier-3 where component complexity increases.
Minimum data fields for traceability
- Supplier and facility identifiers for each tier
- Material type and specification (including grade)
- Batch or lot ID at each conversion step
- Quantity, unit, and date of transaction
- Linkages between input batches and output batches
- Certificates of analysis for critical material lots
Red flags
- Tier mapping stops at direct suppliers only
- Batch IDs exist but do not connect across steps
- Quality documents are not consistently tied to the shipment
-
Step 5: Use phase
What matters for passport readiness
- Stable identity for the battery and its critical components supports downstream reporting, warranty, recalls, and end-of-life obligations.
- Passport-style reporting benefits from consistent identifiers that survive distribution and integration into products.
Data to retain
- Pack and cell identifiers, production dates, and manufacturer information
- Bill of materials references for critical minerals reporting
Links between product ID and underlying material evidence
-
Step 6: Collection & Recycling (closing the loop)
How cobalt returns to the chain and why it reduces risk
- Collection and recycling can supply secondary cobalt, reducing dependency on high-risk sourcing pathways.
- Secondary material still needs quality verification and provenance records to support reporting and customer requirements.
Three practical circularity levers
- Design for easier disassembly and material recovery
- Improve collection rates through partner networks and incentives
- Standardize recycled content evidence: input source, process records, quality tests
Where risks concentrate (5 risk groups)
|
Risk
|
Where in chain
|
What it looks like
|
What to ask suppliers
|
|---|---|---|---|
| Geographic concentration (mining/refining) | Mining, processing, refining | Supply depends on a small set of regions and facilities. Disruptions, export controls, or local instability quickly affect availability and lead times. | Which countries and sites supply our cobalt inputs? Which refineries process your material? Provide site list, facility locations, and a breakdown of volumes by region and facility. |
| By-product dependency (Cu/Ni) | Mining, primary processing | Cobalt output is tied to copper or nickel production. When Cu or Ni economics shift, cobalt availability can change even if cobalt demand is stable. | Is cobalt produced as a by-product or a primary product in your chain? Which host metal drives the operation economics? Provide production type, host metal linkage, and scenario risks that may reduce cobalt output. |
| ESG and human rights (especially around ASM) | Mining and early trading, processing | Elevated exposure to unsafe working conditions, child labor risks, informal trading channels, and weak grievance processes. Evidence may be fragmented or inconsistent across shipments. | Do you source from ASM or mixed channels? What controls exist to prevent and detect severe human rights issues? Provide due diligence process, site assurance coverage, grievance mechanism details, and corrective action examples. |
| Company network and chokepoints (centrality) | Processing and refining, sometimes cathode materials | A small number of companies and hubs control critical steps. A single disruption, sanction, or capacity constraint can ripple through the whole chain. | Who are your key upstream and midstream counterparties? Which facilities are single points of failure? Provide counterparty list, contingency options, and capacity and lead-time assumptions. |
| Environmental impact hotspots (processing/refining/LCA) | Processing, refining, and chemical conversion | High energy intensity, emissions, and waste management challenges. Environmental performance may vary significantly by facility and energy mix. | What is your environmental management approach at processing and refining sites? Provide energy and emissions data where available, permits or certifications, waste handling evidence, and improvement plans. |
Traceability and due diligence: what “good” looks like
Strong traceability and due diligence are built on two foundations: consistent data that links inputs to outputs across tiers, and reliable evidence that holds up in audits. The best programs combine governance, supplier engagement, documentation, and a repeatable process for finding and fixing risks.
The OECD 5-step framework
Standards and initiatives you’ll see in cobalt
You will often encounter industry programs and standards that support responsible sourcing and verification across the chain. They typically cover one or more of the following areas:
- Responsible mining and site-level practices
- Chain due diligence systems and supplier screening
- Refinery-level due diligence and assurance approaches
- Reporting, documentation, and traceability expectations
A practical approach is to map each standard or initiative to the specific risk it helps manage, then request evidence that shows how it is applied in daily operations.
Mine-site assurance (IRMA): what it provides and what it does not
Mine-site assurance standards can provide structured expectations and independent assessment of mining practices, including labor conditions, health and safety, community impacts, and environmental management. When implemented well, they can strengthen confidence in upstream practices and improve consistency in how risks are identified.
However, mine-site assurance alone does not solve end-to-end traceability. It does not automatically prove that a specific downstream batch came from a specific assessed site. You still need chain mapping, batch logic, transport documentation, and controls that prevent mixing and mislabeling across processing and trading steps.
Practical playbook: how to control cobalt risks (step-by-step)
-
Step 0: Define scope
Start by defining what your program covers:
- Product scope: which batteries, components, or materials are in scope
- Supplier scope: tier-1 suppliers and the priority upstream links you need visibility into
- Geographic scope: countries and regions involved in mining, processing, and refining
- Tier scope: the depth required, from tier-1 down to refiner and, where possible, mine sites
Write down the decision rule for depth. For example, higher-risk geographies and mixed sourcing channels require deeper mapping and tighter evidence requirements.
-
Step 1: Map the chain
Build the chain map from your direct suppliers upstream:
- Identify the refiner for cobalt inputs, then connect the refiner to upstream processors and mining sources where possible
- Document every handoff point where ownership changes or material can be blended
- Capture facility identifiers, locations, and the role each party plays in the chain
- Update the map on a defined cadence and after supplier changes
A useful output is a tier map plus a facility list that includes refineries and key processors, with volumes linked to each facility where feasible.
-
Step 2: Collect evidence (minimum document set)
Collect evidence that ties sourcing claims to verifiable records. A minimum set typically includes:
- Supplier questionnaire: ownership, sites, sourcing channels, controls, and escalation paths
- Policy and contract clauses: responsible sourcing requirements, audit rights, corrective action commitments
- Certificates and audit reports: site assessments, due diligence summaries, assurance reports
- Chain of custody and transport documents: shipment records, customs documents, lot identifiers, weight reconciliation
- Grievance mechanism information: how concerns are reported, investigated, resolved, and documented
Store evidence with consistent naming and linking so it can be retrieved by supplier, facility, product, and time period.
-
Step 3: Risk scoring and red flags
Use a simple scoring model that your team can apply consistently. Common dimensions include:
- Geography risk: origin and transit regions
- Ownership and counterparty risk: sanctions exposure, related-party structures, concentration
- ASM exposure: direct or indirect, including mixed sourcing channels
- Audit coverage: presence, relevance, frequency, and quality of independent assurance
- Traceability strength: ability to link inputs to outputs with documented controls
Track red flags that trigger escalation:
- Missing upstream facility disclosure
- Evidence that cannot be linked to shipments or batches
- Large unexplained weight or grade changes
- Sudden route changes or counterparty substitutions
-
Step 4: Mitigation plan
Define the response based on severity and evidence quality:
- Continue: risks are low or well controlled, evidence is complete, monitoring cadence is defined
- Suspend: evidence is incomplete or risk is elevated, pause new volumes until corrective actions are verified
- Disengage: severe risks, repeated non-compliance, or inability to remediate within agreed timelines
For each case, document the decision, required actions, deadlines, owners, and what proof is needed to close the issue.
-
Step 5: Audit readiness and reporting
Most audit failures stem from documentation and linkage problems, not from a lack of intent. The most common issues include:
- Evidence gaps: missing questionnaires, outdated policies, absent transport records
- Inconsistencies: facility names and IDs do not match across documents, conflicting origin claims
- No chain linkage: documents exist but do not connect to specific shipments or batches
- Weak corrective action records: actions are described but not evidenced with follow-up proof
Stay audit-ready by maintaining a clear evidence trail, updating the tier map regularly, and running periodic internal checks that simulate external audit questions.
How ReSource helps
ReSource supports teams that need a repeatable way to manage cobalt traceability and due diligence across suppliers, facilities, and documents, especially when requirements evolve and audit expectations increase.
- Build and maintain tier maps, including key processors and refiners
- Store evidence and link documents to suppliers, facilities, shipments, and batches
- Standardize data fields for traceability and reporting consistency
- Run risk scoring and track red flags across the chain
- Manage corrective actions with owners, deadlines, and closure proof
- Prepare structured exports for audits and Battery Passport-style readiness
FAQ
-
Where is cobalt mined and refined, and why does it matter?
Cobalt supply risk often depends on where mining and refining capacity is concentrated. When upstream production or midstream refining is concentrated in a limited number of regions or facilities, disruptions can create rapid impacts on availability, lead times, and compliance exposure. Strong chain mapping helps you understand where your dependencies sit and which links require tighter controls.
-
What documents do I need for cobalt traceability?
Most programs rely on a consistent evidence set: supplier declarations tied to specific facilities, chain mapping that reaches processing and refining, shipment and transport documentation that matches batch identifiers, certificates of analysis for critical lots, audit reports where available, and records of grievance mechanisms and corrective actions. The key is linkage: documents need to connect to shipments and batches, not sit in a separate folder without context.
-
How do IRMA and OECD fit together?
OECD provides a process framework for due diligence across the supply chain, including risk assessment, mitigation, audits, and reporting. IRMA focuses on mine-site level practices and assurance. They work best together when mine-site assurance strengthens upstream confidence while OECD-based due diligence connects that assurance to end-to-end mapping, traceability data, and documented corrective actions.
-
What are the main ASM risks and how are they addressed?
Common risks include unsafe working conditions, child labor exposure, informal trading channels, weak oversight, and limited grievance access. Addressing them requires clear sourcing channel transparency, focused supplier controls, credible assurance or assessments where relevant, and documented corrective actions. Programs are strongest when they measure evidence quality and continuously verify controls, not only collect policies.
-
How does recycling change cobalt supply risk?
Recycling can reduce dependency on high-risk upstream sources by adding secondary material to the supply mix. It also supports circularity goals and can lower exposure to certain upstream disruptions. Recycled cobalt still requires quality evidence and provenance records, especially when claims about recycled content or environmental benefits are part of customer or regulatory reporting.