What does O3CI mean in CBAM?

O3CI stands for Operator of Third-Country Installation. Under CBAM Regulation 2023/956, an O3CI is any legal entity operating a production facility outside the EU that exports CBAM-covered goods to the EU. O3CIs can register voluntarily in the EU CBAM portal to share verified emission data with EU declarants.

Is registration in the O3CI portal mandatory?

No. O3CI registration is voluntary. However, without registration, EU declarants cannot access your verified emission data through the portal and will use EU default values — which are set at the 90th percentile of EU production and are typically much higher than actual values for efficient non-EU producers.

What is EU Access Admin-Ext?

EU Access Admin-Ext is the external access management system for EU Login. It allows organisations outside the EU to manage user accounts and delegate access rights to the CBAM O3CI portal. Every O3CI must designate at least one EU Access Admin-Ext administrator before accessing the portal.

How long does AMM authorisation take?

AMM authorisation processing times vary by National Competent Authority. Based on operator reports, typical processing times range from 4–12 weeks. Some NCAs have backlogs of 3–6 months. This is a significant risk for operators who delay registration.

What is the difference between Admin Operator and Simple Operator roles in O3CI?

Admin Operator has full access to all portal functions including AMM authorisation requests, data sharing, and user management. Simple Operator has read-only access and can view data but cannot submit reports or manage authorisations. Only Admin Operators can delegate access rights to other users.

What happens if an EU buyer cannot access my O3CI data?

If your EU declarant cannot access your verified emission data through the O3CI portal, they must use EU default values for your products. Default values are set at the 90th percentile of EU production — typically 2–5x higher than actual values for efficient non-EU producers. This increases their CBAM certificate cost significantly.

Is there an alternative to the O3CI portal for sharing embedded carbon data?

Yes. embeddedcarbonrecord.com provides a private vault where non-EU manufacturers store their verified embedded carbon calculations. A single permanent URL is shared with all EU buyers simultaneously. No EU Login required. 15-year retention. SHA-256 hash provides forensic proof of data integrity.

What documents are required for AMM authorisation?

AMM authorisation typically requires: company registration documents, proof of production facility location, contact details of the designated EU declarant, and the verification report from an ISO 14065 accredited verifier. Specific requirements vary by National Competent Authority.

Can I use the O3CI portal without an EU declarant?

No. The O3CI portal is designed to facilitate data sharing between non-EU operators and their EU declarants. You must have at least one EU declarant (importer, customs agent, or authorised representative) to use the portal. The AMM authorisation is linked to a specific EU declarant's NCA.

What XML schema does the O3CI portal use for quarterly reports?

The O3CI portal uses the CBAM XML schema defined in the EU Commission's technical specifications. The schema requires installation-level data including production volumes, direct and indirect emissions, fuel inputs, and precursor materials. See /cbam-xml-upload-guide for the full technical guide.

EU O3CI Portal: The Complete Guide for Non-EU Installation Operators

Q: What is the Authorisation Management Module (AMM)?

The AMM is the module within the CBAM O3CI portal where operators request authorisation from the National Competent Authority (NCA) of the EU member state where their primary EU declarant is registered. AMM authorisation is required before an O3CI can share emission data through the portal.

The O3CI Portal is the EU Commission's official system for non-EU manufacturers to register as Operators of Third-Country Installations and share verified embedded carbon data with EU importers. This guide covers everything the EU Commission's own documentation does not — in plain English.

Truth Anchor: CBAM Regulation 2023/956 Article 5 defines authorised declarants and their obligations. The EU Commission's October 2025 CBAM FAQ document (available at taxation-customs.ec.europa.eu) provides supplementary guidance on O3CI registration.

What Does O3CI Mean? The Exact Definition

The Operator of Third-Country Installation (O3CI) is defined in CBAM Regulation 2023/956 as any legal entity that operates a production installation located in a country outside the European Union that produces goods covered by Annex I of the Regulation. The O3CI is the non-EU manufacturer — the steel mill in Turkey, the aluminium smelter in the UAE, the cement plant in India, the fertiliser producer in Egypt.

The O3CI concept was created because CBAM needed a mechanism for non-EU manufacturers to voluntarily share their verified emission data with EU importers. Without this mechanism, EU declarants (importers) would have no access to actual emission data and would be forced to use EU default values — which are set at the 90th percentile of EU production and are typically 2–5x higher than actual values for efficient non-EU producers.

O3CI registration is voluntary. There is no legal obligation for a non-EU manufacturer to register. However, the financial consequences of not registering — and therefore having EU default values applied to your products — can be severe. See the CBAM Savings Calculator to quantify your specific exposure.

Who Must Register as an O3CI?

Sector	Products covered	Annual threshold for CBAM reporting	O3CI registration recommended?
Iron & Steel	Pig iron, DRI, flat-rolled, bars, rods, wire, tubes	No threshold — all imports	Yes — if actual emissions < 2.18 tCO2/t
Aluminium	Unwrought, bars, rods, profiles, wire, plates, sheets	No threshold — all imports	Yes — if actual emissions < 12.40 tCO2/t
Cement	Clinker, Portland cement, aluminous cement	No threshold — all imports	Yes — if actual emissions < 0.766 tCO2/t
Fertilisers	Ammonia, nitric acid, urea, mixed fertilisers	No threshold — all imports	Yes — if actual emissions < 2.326 tCO2/t (ammonia)
Electricity	Electricity imports	No threshold — all imports	Yes — if actual grid emission factor < EU default
Hydrogen	Hydrogen	No threshold — all imports	Yes — if actual emissions < 5.14 tCO2/t

EU Login: The First Barrier to O3CI Registration

Before you can access the O3CI portal, every user who needs access must have an EU Login account. EU Login is the European Commission's single sign-on system. It is used across all EU Commission digital services — not just CBAM. This creates the first major friction point for non-EU operators.

EU Login accounts are created at webgate.ec.europa.eu/cas/login. The account creation process requires a valid email address and phone number for two-factor authentication. This is straightforward. The complexity begins when you need to manage multiple users within your organisation.

EU Access Admin-Ext: Managing Your Organisation's Users

EU Access Admin-Ext is the external access management system for EU Login. It allows organisations outside the EU to create and manage user accounts and delegate access rights to EU Commission digital services including the CBAM O3CI portal.

Every O3CI must designate at least one EU Access Admin-Ext administrator (also called the "External Administrator") before they can access the O3CI portal with multiple users. The External Administrator is responsible for:

Creating EU Login accounts for employees who need O3CI portal access
Assigning roles (Admin Operator or Simple Operator) to each user
Revoking access when employees leave the company
Managing the delegation chain for the organisation

The External Administrator role is created by submitting a request through the EU Access Admin-Ext registration form. This process typically takes 5–10 business days. The External Administrator must be a named individual — not a generic company email address.

Admin Operator vs Simple Operator: Role Definitions

Role	Portal access	Can submit reports?	Can request AMM authorisation?	Can delegate access?
Admin Operator	Full access	Yes	Yes	Yes — to Simple Operators
Simple Operator	Read-only + limited submission	Yes (if delegated)	No	No

The Admin Operator role should be assigned to the compliance officer or senior manager responsible for CBAM. Simple Operator roles are appropriate for data entry staff or external consultants who need to input production data but should not have administrative control over the account.

How to Delegate Access Rights to Employees: Step by Step

Once your External Administrator has been approved and your organisation is registered in EU Access Admin-Ext, delegation works as follows:

Log in to EU Access Admin-Ext at webgate.ec.europa.eu/admin-ext
Navigate to "User Management" → "Create User"
Enter the employee's name, email address, and phone number for 2FA
The employee receives an activation email and sets up their EU Login account
Return to EU Access Admin-Ext → "Role Assignment"
Select the employee's account and assign the appropriate role (Admin Operator or Simple Operator)
Select the specific CBAM O3CI portal service from the service list
Confirm the role assignment — the employee now has access to the O3CI portal with the assigned role

Critical: When an employee leaves your company, their EU Login access must be revoked immediately through EU Access Admin-Ext. If access is not revoked, the former employee retains the ability to log in to the O3CI portal and view or modify your CBAM data. This is a compliance and data security risk.

The Authorisation Management Module (AMM)

The Authorisation Management Module (AMM) is the section of the O3CI portal where operators request formal authorisation from the National Competent Authority (NCA) of the EU member state where their primary EU declarant is registered. AMM authorisation is required before an O3CI can share verified emission data with EU declarants through the portal.

The AMM authorisation process works as follows:

Log in to the O3CI portal with Admin Operator credentials
Navigate to "Authorisation Management" → "New Authorisation Request"
Select the EU member state of your primary EU declarant (e.g., Germany, Netherlands, France)
Enter your installation details: name, address, production sector, CN codes of exported goods
Upload required documents: company registration, proof of installation location, verifier's ISO 14065 certificate
Submit the request — you receive a reference number
The NCA reviews the request and may request additional documents
Upon approval, you receive an O3CI Identification Number (O3CI-ID)
Your EU declarant can now link their CBAM declaration to your O3CI-ID

AMM Processing Times by National Competent Authority

EU Member State (NCA)	Reported processing time	Notes
Germany (Zollkriminalamt)	6–12 weeks	High volume — Germany is the EU's largest steel importer
Netherlands (Douane)	4–8 weeks	Rotterdam port — high volume of CBAM goods
France (DGDDI)	6–10 weeks	Significant backlog reported in H1 2026
Italy (Agenzia delle Dogane)	8–16 weeks	Longest reported processing times
Spain (AEAT)	6–10 weeks	Significant steel and aluminium import volumes
Poland (Izba Administracji Skarbowej)	4–8 weeks	Growing CBAM import volumes
Belgium (FOD Financiën)	4–6 weeks	Antwerp port — efficient processing reported

O3CI Portal Limitations: What It Cannot Do

The O3CI portal is a data sharing mechanism — not a calculation tool. Understanding its limitations is essential for compliance planning:

Limitation	Practical impact
Cannot perform carbon calculations	You must calculate your embedded carbon separately using ISO 14067 methodology before uploading to the portal
Requires separate data sharing with every EU declarant	If you sell to 10 EU buyers, each must individually link to your O3CI-ID — there is no broadcast sharing
Requires active EU Login for every staff member	If a key employee leaves or their EU Login expires, access is interrupted
Subject to EU login security policies	EU Login enforces 2FA and periodic re-authentication — access can be revoked by the EU Commission at any time
No SHA-256 hash or forensic audit trail	The portal stores data but does not provide cryptographic proof that data has not been altered after submission
15-year retention not guaranteed independently	CBAM requires 15-year record retention. The O3CI portal's data retention policy is subject to EU Commission IT policy changes
AMM authorisation is NCA-specific	If your EU declarant changes to a different member state, you may need to re-apply for AMM authorisation with the new NCA

Common EU Access Admin-Ext Errors and Fixes

The most common failure point in O3CI registration is EU Access Admin-Ext authentication. For a complete step-by-step troubleshooting guide, see How to Fix EU Access Admin-Ext Authentication Errors for CBAM O3CI →

The most frequently reported errors include:

"Your account is not linked to any organisation" — The External Administrator has not yet linked your EU Login account to the organisation in EU Access Admin-Ext
"You do not have the required role to access this service" — The role assignment in EU Access Admin-Ext has not been completed or has not propagated (can take up to 24 hours)
"Two-factor authentication required" — EU Login requires 2FA for all CBAM portal access. Ensure your phone number is registered and verified in EU Login
"Session expired" — EU Login sessions expire after 8 hours of inactivity. Re-authenticate and resume
"Service temporarily unavailable" — The O3CI portal has scheduled maintenance windows. Check the EU Commission's CBAM status page

XML Upload for Quarterly Reports

O3CIs must submit quarterly embedded carbon reports through the portal using the EU Commission's XML schema. This is technically complex and error-prone. For the complete technical guide including schema requirements, validation steps, and common errors, see How to Upload CBAM Quarterly Reports via XML to the O3CI Portal →

An Alternative to the O3CI Portal: embeddedcarbonrecord.com

The O3CI portal is a government system with government-system limitations: complex registration, EU Login dependency, NCA authorisation queues, and no cryptographic audit trail. For manufacturers who need a faster, simpler, and more resilient solution, embeddedcarbonrecord.com provides a private vault for verified embedded carbon records.

Feature	EU O3CI Portal	embeddedcarbonrecord.com
Setup time	4–16 weeks (AMM authorisation)	Instant — minutes
EU Login required	Yes — for every user	No
NCA authorisation required	Yes	No
Data sharing model	Per-declarant linkage	One permanent URL — share with all EU buyers simultaneously
Cryptographic audit trail	No	Yes — SHA-256 hash at time of storage
15-year retention	Subject to EU IT policy	Contractually guaranteed 15 years
Independence from government login	No — EU Login dependency	Yes — fully independent
Cost	Free (but compliance cost of delays)	From $499/year

The two systems are not mutually exclusive. Many manufacturers use both: the O3CI portal for official EU declarant data sharing, and embeddedcarbonrecord.com as the permanent, forensically hashed backup that proves data integrity regardless of what happens to EU Commission IT systems.

Store Your Verified Embedded Carbon Record for CBAM Compliance →