The EU importer (as 'authorised CBAM declarant') buys and surrenders certificates. Commercially the cost flows into the trade price, so exporters feel it in negotiations.
From our guide: Carbon Pricing & CBAM — full context, charts and sources there.