A procurement manager qualifying a new desiccated coconut or coconut milk powder supplier will not find a coconut-specific cadmium or lead limit in EU Regulation 2023/915, nor in Codex Alimentarius CXS 193. That gap does not mean heavy metals are not a risk in coconut ingredients. It means the buyer has to write the limit into the contract, because no regulator has done it for them yet.
Cocoa went through the same gap and closed it the hard way. EU Regulation 2023/915 set a 0.60 mg/kg cadmium ceiling for cocoa powder sold to final consumers, with full enforcement from 1 January 2026. Cocoa buyers spent the two years before that date re-qualifying origins, rejecting non-compliant lots at port, and paying more for verified-clean supply. Coconut has not had its regulatory moment yet. Buyers who specify ahead of it avoid paying the compliance premium later, and multi-origin qualification (see our note on supply security across origins) is the mechanism that makes that possible.
Is there an EU or Codex limit for cadmium or lead in coconut?
No. Regulation 2023/915 lists maximum levels by commodity category, and coconut products are not a named category the way cocoa powder, cereals, or leafy vegetables are. Codex CXS 193 works the same way: cadmium is capped at 0.1 mg/kg in cereals and 0.2 mg/kg in leafy vegetables, but there is no coconut line item. Absent a specific limit, a shipment can clear customs on paperwork alone even if metals content would fail the standard applied to a comparable tree crop. That is the buyer’s exposure, not the supplier’s problem to solve unprompted.
Why do some origins carry more risk than others?
Cadmium in tree and palm crops tracks the metal already present in the soil, not just factory hygiene. A 2025 peer-reviewed soil study of a Philippine island province with a history of small-scale mining found median cadmium concentrations of 0.750 mg/kg, far above background levels for uncontaminated agricultural land. That figure describes soil, not finished coconut meat, and it does not prove carryover into copra or desiccated coconut at that same ratio. It does show that origin selection matters: a plantation on volcanic or historically mined soil in the Philippines or Indonesia starts from a higher baseline than one on alluvial soil elsewhere, and no amount of factory-level food safety management removes a soil-driven load. This is exactly why multi-origin sourcing functions as a risk control, not just a cost lever.
What does a workable buyer spec look like?
Absent a coconut-specific regulatory number, most serious buyers borrow the closest analog and apply it contractually. The table below is not a coconut regulation; it is what buyers are actually specifying, benchmarked against the nearest regulated comparables.
| Reference point | Contaminant | Limit | Status for coconut |
|---|---|---|---|
| EU Reg. 2023/915, cocoa powder | Cadmium | 0.60 mg/kg | Not binding on coconut, used as directional ceiling |
| Codex CXS 193, cereals | Cadmium | 0.10 mg/kg | Not binding on coconut, stricter reference point |
| US FDA Closer to Zero, baby food purees/mixtures | Lead | 10 ppb | Binding only for infant/toddler food, not adult ingredients |
| US FDA Closer to Zero, dry infant cereal | Lead | 20 ppb | Binding only for infant/toddler food |
| Industry buyer spec, coconut sugar | Cadmium | ≤ 0.5 ppm | Voluntary, contract-driven precedent for coconut-derived goods |
Most CPG buyers we see land between the cocoa ceiling and the cereal floor for cadmium in desiccated coconut and coconut milk powder: roughly 0.10-0.30 mg/kg, tightened further if the end product is aimed at an infant or toddler line. Lead specs typically sit at or below 0.5 mg/kg for adult-food coconut ingredients, tightened to single-digit ppb only when the ingredient feeds a baby-food SKU covered by Closer to Zero.
What should the COA actually prove?
A certificate of analysis that lists “heavy metals: pass” proves nothing. A usable COA states the method (ICP-MS is now standard; older AAS methods can miss low-level cadmium), the lab’s accreditation (ISO/IEC 17025), the specific figure in mg/kg for cadmium, lead, arsenic, and mercury, and the batch or lot number it covers. Origin product standards do not always fill this gap on their own: the Philippine National Standard for desiccated coconut (PNS/BAFPS 25:2007) sets moisture, oil content, and microbiological limits, but does not carry a built-in heavy metals clause. If the buyer wants metals data, it has to be a separate line in the purchase contract, not an assumption baked into “meets PNS.”
Per-batch or per-shipment testing?
Per-batch testing costs more up front and catches soil-driven variation between lots from the same supplier. Per-shipment testing is cheaper and standard for buyers running a qualified, repeat-origin program with a clean two-year track record. New suppliers, new origins, and any origin flagged for elevated background soil metals should sit on per-batch testing until enough data exists to justify stepping down.
What this means for buyers
- Procurement managers (CPG/food manufacturer): Write a numeric cadmium and lead limit into the purchase spec now. Do not rely on “compliant with local standard” language; PNS-type product standards often exclude metals.
- Importers/distributors: Ask each origin supplier for their last four quarters of COA data before adding a new SKU to a consolidated container. A single bad lot in a mixed container risks the whole load.
- Brand owners scaling past a co-packer: Confirm who holds the COA obligation in writing once you move past your co-packer’s house supplier. Direct sourcing shifts that liability to you.
- Traders/brokers: Track which origins carry a documented soil-metals history. It is a pricing input, not just a compliance footnote.
FAQ
Does EU Regulation 2023/915 set a cadmium limit for coconut? No. The regulation names cocoa, cereals, and other specific commodities but has no coconut-specific entry, so coconut shipments are not screened against a mandatory EU cadmium ceiling today.
Is cadmium risk the same across all coconut origins? No. Cadmium tracks background soil levels, and some regions in the Philippines and Indonesia with volcanic or mining-affected soil carry a higher baseline than others.
What testing method should a COA use for coconut heavy metals? ICP-MS from an ISO/IEC 17025-accredited lab. Older AAS methods can miss cadmium and arsenic at the low concentrations that matter for compliance decisions.
Do FDA Closer to Zero lead limits apply to coconut ingredients sold to adult food manufacturers? No. Those 10-20 ppb action levels apply only to processed food marketed for babies and children under two. Adult-food coconut ingredients are not covered.
Should a buyer test every batch or every shipment? New suppliers and higher-risk origins should test every batch. Established, repeat-origin programs with a clean history can generally move to per-shipment testing.
Need a heavy metals spec locked into a multi-origin coconut contract before your next shipment? Send the desk an RFQ.