In response to growing scrutiny surrounding commodity-driven deforestation, companies have introduced zero-deforestation commitments (ZDCs) with ambitious environmental and social targets. However, such initiatives may not effectively reduce deforestation if they are not aligned with the spatial extent of remaining forests at risk. They may also fail to avert socio-economic risks if ZDCs do not consider smallholder farmers’ needs. We assess the spatial and functional fit of ZDCs by mapping commodity-driven deforestation and socio-economic risks, and comparing them to the spatial coverage and implementation of ZDCs in the Indonesian palm oil sector. Our study finds that companies’ ZDCs often underperform in four areas: traceability, compliance support for high-risk palm oil mills, transparency, and smallholder inclusion. In 2020, only one-third of companies sourcing from their own mills, and just 6% of those sourcing from external suppliers, achieved full traceability to plantations. Comparing the reach of ZDCs adopted by downstream buyers with those adopted by mill owners located further upstream, we find that high-quality ZDCs from buyers covered 62% of forests at risk, while mill owners’ ZDCs only covered 23% of forests at risk within the mill supply base. In Kalimantan and Papua, the current and future deforestation frontiers, the forests most at risk of conversion were predominantly covered by weak ZDCs lacking in policy comprehensiveness and implementation. Additionally, we find that only 46% of independent smallholder oil palm plots are in mill supply sheds whose owners offer programs and support for independent smallholders, indicating that smallholder inclusion is a significant challenge for ZDC companies. These results highlight the lack of spatial and functional alignment between supply chain policies and their local context as a significant gap in ZDC implementation and a challenge that the EU Deforestation Regulation will face.