Manufacturer, Importer or Distributor? A Role Matrix for Online Retailers

OnlinehandelProduktsicherheitGPSRHerstellerImporteurHändlerMarktplatz

AI-generated

A role matrix prevents blind spots across the catalogue

A shop can have polished product pages and still fail at the decisive point: nobody knows whether it is the manufacturer, importer, or distributor for a product. Those terms determine which information must exist, who obtains evidence, who acts on a safety problem, and which escalation starts in the shop. A role matrix for each product family connects supply route, own brand, responsible person, and evidence location. The online retail industry package provides an operational framework. The General Product Safety Regulation, or GPSR, has applied since 13 December 2024 and aims to ensure that only safe products are made available on the market.

The first practical rule is this: do not assign one role to the whole shop. Check the product, supply chain, and market presentation. The same company may distribute a branded item, import a third-country product, and market its own line as manufacturer. A business that markets a product under its name or trademark, or materially changes it, may also fall into the manufacturer role. The Regulation contains the definitions and duties. The matrix translates them into work steps for purchasing, content, customer care, marketplace operations, and compliance. See also: GPSR definitions and obligations.

Decide the role before the listing goes live

Do not start with the question of which documents happen to be in the folder. Start with five facts: who first places the product on the EU market? From whom does the business source it? Does it arrive from a third country? Under which name and trademark does it appear in the offer? Is it changed technically, functionally, or in a safety-relevant way? Record the answers for each SKU, or at least for a homogeneous product family. This creates a decision that purchasing and product-data teams do not have to reinterpret every time. Ambiguous cases need a review status in the matrix. An unresolved status is not a release signal. It is a task with an owner and due date.

A sound matrix also separates product role from sales-channel role. A marketplace account, a fulfilment provider, or an agency does not automatically change the company’s role for the product. Conversely, the way an offer is presented can trigger additional communication and response paths. Each matrix row therefore needs more than the legal role. It also needs operational contacts: supplier, internal category owner, product-data owner, complaint channel, and release authority. The published guide to product documentation shows how this information can be brought together in a usable file for both shop and marketplace.

Manufacturer: manage safety and technical documentation

A manufacturer makes a product, or has it designed or made, and markets it under its own name or trademark. Before placing it on the market, the business must carry out an internal risk analysis and create or retain technical documentation, among other duties. The GPSR also sets requirements for marking, contact details, and safe product information. For an online team, this means that the page is fed only from an approved source: identification, relevant warnings, instructions, contact details, and version status are checked against the product file before publication or change. See also: manufacturer obligations under Article 9 GPSR.

In practice, a manufacturer checklist with four release stops works well: no listing without a clear product ID, no image change without checking the marking, no claim change without expert approval, and no new variant without reviewing risk and documents. Also define the event that reopens the file. It may be a changed bill of materials, a new production version, a cluster of complaints, or a Safety Gate notice. The European Commission’s official information service brings together product alerts and explains that businesses should make only safe products available. The matrix turns this into a controllable routine rather than a frantic search for ownership. See also: European Commission product-safety information service.

Team reviews documents and responsibilities at a tableAI-generated
The role decision needs a traceable path from supplier data to approval and evidence.

Importer: actively secure the EU interface

An importer is a person established in the Union who places a product from a third country on the Union market. This is not merely receiving goods. Before offering the item, the importer must verify that the manufacturer has met relevant requirements and that marking, required documentation, and product information are available. The specific duties arise from Article 11 GPSR and, depending on the product group, other sector rules. Purchasing needs a repeatable review path that connects order, goods receipt, content approval, and replenishment. See also: importer obligations under Article 11 GPSR.

A typical error arises with fast-changing suppliers. The first delivery is reviewed, but later the factory, packaging, or responsible contact address changes. If the role is attached only to the supplier master record, the deviation remains invisible. Link the matrix to change events instead: new supplier, new country of origin, new packaging, new brand, new product variant, or new safety signal. Each event triggers focused questions: must the role be reassessed, must product data change, and who records closure? This approach also protects catalogue speed because clear cases do not have to be escalated every time.

Distributor: check plausibility, pass on information, react

A business that further distributes products without being the manufacturer or importer is generally a distributor. This role is active as well. Distributors must act with due care before making a product available on the market. In practice, this means not ignoring visible inconsistencies: missing marking, conflicting safety information, missing contact details, or an obviously unclear product identity belong in a stop-and-clarify process. Article 12 GPSR describes these distributor duties. The matrix helps turn the open phrase due care into concrete checks that a category manager or marketplace operator can actually complete. See also: distributor obligations under Article 12 GPSR.

For the listing, a distributor should not simply pass through supplier data. It needs a release view: is the role recorded? Do manufacturer or importer details match the product file? Are warnings and instructions available for the target market? Is a complaint or suspension process reachable? Especially on marketplaces, it must be clear who corrects faulty data and who may pause an offer. The marketplace seller compliance guide shows how product data, safety notices, and escalation can be assigned to a named owner. This turns a ticket question into a repeatable control point.

Meeting about supply chain and responsibilitiesAI-generated
Purchasing, product data, and service need the same role decision but different work instructions.

Handle mixed cases cleanly

The hardest cases are often not exotic legal questions but ordinary trading models. A retailer sources goods in the EU but applies its own brand. A supplier delivers from a third country to an EU warehouse while the shop creates the product page. A bundle combines several products with different economic operators. Or a separate safety function is changed through modification. In such cases, the matrix should not become a collection of free text. Use fixed decision fields and a short fact pattern. Then add an expert assessment, release date, and reference to evidence. If unclear, do not stop the entire shop. Stop the affected SKU or variant.

Also separate the role decision from any claim that the team itself finally assesses every risk. The matrix names the person who obtains expert advice, requests missing information, or suspends the offer. It does not replace product-specific conformity assessment or advice for complex individual cases. That boundary creates speed. Teams can handle routine cases independently because the threshold for escalation is visible. Keep every decision versioned. If a complaint, recall, or authority inquiry arrives later, you can show which information was available at what time and who made the decision.

Turn role knowledge into day-to-day work

The best role matrix remains ineffective if only compliance knows it. Train around decisions instead. Purchasing practises supply route and change events. Product data learns which details may be taken only from an approved source. Customer care recognises which complaints trigger a product review. Marketplace operations trains suspension and data correction. Management receives a view of open high-risk cases. The method for audit-ready training records helps document role, learning objective, completion, and refresh so that teams show the ability to act, not only attendance.

Define an escalation path for every critical case that also works outside office hours: who can suspend an SKU, who informs the supplier, who checks orders in fulfilment, and who drafts customer information? These questions overlap with incident response. The online-store incident-response guide shows how to set up owners, communication paths, and evidenced closure for data, payment, and account events. Apply the same discipline to product safety: capture the signal, obtain risk assessment, control the offer, inform affected parties, and document closure. Not every complaint is a safety case, but every real safety case needs a practised workflow.

A small matrix that is used every day

Start with the twenty highest-revenue or highest-risk product families, not with the whole catalogue. Each row needs product family, SKU rule, role, supply route, brand, owner, evidence location, open point, and next review event. Test the matrix on a real case: a supplier changes a warning, a review reports a potential defect, or a listing is to be added to another marketplace. If no clear decision follows within one working day, the missing element is usually an owner or escalation rule. The matrix becomes valuable when it makes that problem visible.

Review the matrix on a fixed cadence and after defined events. Do not measure only how many rows are filled in. Measure how many products have a clear role status, how many open evidence items close on time, and how quickly an offer can be controlled after a confirmed problem. These measures encourage the right collaboration between purchasing, category, content, and service. They also help avoid treating fair customers as automatically suspicious when returns or complaints occur, because the facts for each product remain traceable. Product safety then becomes part of sound retail operations rather than an appendix after publication. See also: fair customers in returns or complaints.

ConformBase

Turn knowledge into training that works.

Bring compliance, privacy and security awareness into a format your people want to complete — with certificates and audit-ready evidence.

Start free trialAsk about custom courses →

Frequently asked questions

When is an online retailer a manufacturer?

Typically when it makes a product, or has it made, and markets it under its own name or trademark. A material modification can also matter. The concrete classification depends on the product and supply route and should receive expert review in unclear cases.

Is it enough to copy the supplier’s manufacturer details onto the product page?

No. The team should check the details against the approved product file and define who stops or corrects a listing when information is missing, inconsistent, or changed. The applicable duties depend on the particular role and product group.

How can a small shop start with a role matrix?

Start with the most important or highest-risk product families. Record the role, supply route, brand, responsible person, evidence location, and next review event. Test the process on a supplier or product change and add only fields that are needed for a decision.

← All posts

Ready for training that sticks?

Try it free for 14 days — from 1 user, no credit card, ends automatically.

Start free trial