ESG reporting is the structured disclosure of how a company performs on environmental, social and governance (ESG) matters, and how those matters affect the company’s own financial position and its impact on the world around it. What began as a voluntary communications exercise has become a data-intensive, audit-ready reporting discipline that touches finance, operations, procurement, HR \u2014 and, critically, the IT function that has to supply, integrate and govern the underlying data.<\/p>\n
This guide covers the full picture: the origin and definition of ESG reporting, the three pillars, the frameworks and regulations that shape it, the process for producing a report, the data and systems architecture that makes it possible, the misconceptions that derail programmes, and where the discipline is heading. It is written for the people who have to make it work \u2014 CTOs, IT managers, sustainability leads and digital transformation teams in the CEE region and across Europe.<\/p>\n
Definition:<\/strong> ESG reporting is the process of collecting, calculating, verifying and publishing quantitative and qualitative information about a company’s environmental impact, its social and workforce performance, and the quality of its governance \u2014 in a format that investors, regulators, customers and other stakeholders can compare, trust and act on.<\/p><\/blockquote>\n
What Is ESG Reporting?<\/h2>\n
At its core, ESG reporting is disclosure. A company measures defined indicators, explains its policies and targets, and publishes the results in a report that sits alongside \u2014 and increasingly inside \u2014 the annual financial report. The purpose is not to celebrate sustainability initiatives but to make performance measurable and comparable.<\/p>\n
The Three Letters and What They Cover<\/h3>\n
The acronym splits corporate performance into three non-financial dimensions:<\/p>\n
\n
- Environmental (E)<\/strong> \u2014 greenhouse gas emissions, energy consumption, water use, waste, biodiversity, pollution and climate-related risk.<\/li>\n
- Social (S)<\/strong> \u2014 workforce health and safety, diversity and inclusion, pay equity, human rights, labour standards in the supply chain and community impact.<\/li>\n
- Governance (G)<\/strong> \u2014 board composition and oversight, executive remuneration, business ethics, anti-corruption, whistleblowing, data protection and cybersecurity.<\/li>\n<\/ul>\n
Each dimension is expressed through metrics. That is the key distinction between ESG reporting and a corporate values statement: a metric has a definition, a unit, a boundary, a calculation method and an owner. A statement of intent has none of those things.<\/p>\n
How Is ESG Reporting Different From Sustainability Reporting and CSR?<\/h3>\n
The three terms are frequently used interchangeably, which creates confusion in board rooms and procurement processes. They are related but not identical.<\/p>\n
\n\n
\n \nDimension<\/th>\n ESG Reporting<\/th>\n Sustainability Reporting<\/th>\n Corporate Social Responsibility (CSR)<\/th>\n<\/tr>\n<\/thead>\n \n Primary audience<\/td>\n Investors, lenders, regulators, rating agencies<\/td>\n Broad stakeholders: communities, NGOs, employees, customers<\/td>\n Communities, employees, customers, public opinion<\/td>\n<\/tr>\n \n Orientation<\/td>\n Risk, materiality and financial relevance<\/td>\n Environmental and social impact and stewardship<\/td>\n Ethics, philanthropy and corporate citizenship<\/td>\n<\/tr>\n \n Format<\/td>\n Structured, metric-driven, standardised, machine-readable<\/td>\n Narrative-heavy narrative plus selected indicators<\/td>\n Narrative, campaign and programme-based<\/td>\n<\/tr>\n \n Typical assurance<\/td>\n Third-party limited or reasonable assurance<\/td>\n Often none or partial<\/td>\n Rarely any<\/td>\n<\/tr>\n \n Regulatory weight<\/td>\n Increasingly mandatory (for example CSRD in the EU)<\/td>\n Mixed \u2014 partly mandatory, partly voluntary<\/td>\n Largely voluntary<\/td>\n<\/tr>\n \n Primary question answered<\/td>\n “How does ESG affect our value, and how do we affect the world?”<\/td>\n “What is our impact on the planet and society?”<\/td>\n “What do we give back to society?”<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n The practical implication is straightforward: ESG reporting is the output<\/em> of sustainability and CSR activity, translated into the language of capital markets and regulation. Sustainability and CSR describe the motivation and the programmes; ESG reporting describes the measurable result and makes it auditable.<\/p>\n
Where Did ESG Reporting Come From and How Has It Evolved?<\/h2>\n
ESG reporting did not appear fully formed. It is the product of roughly six decades of gradual convergence between ethical investment, environmental accounting and financial disclosure.<\/p>\n
From Ethical Investment to a Formal Framework<\/h3>\n
The lineage begins with socially responsible investment in the 1960s and 1970s, when investors began excluding certain industries on ethical grounds. The 1980s added environmental pressure: industrial disasters and the emergence of environmental liability made pollution a balance-sheet issue rather than only a moral one. The 1990s brought standardisation attempts \u2014 the Global Reporting Initiative was founded in 1997, and the triple bottom line concept of “people, planet, profit” entered management vocabulary.<\/p>\n
The decisive step came in 2004, when the UN Global Compact published the report Who Cares Wins<\/em>, which proposed integrating environmental, social and governance factors into asset management and research. That report is widely credited with popularising the term “ESG”. From that point, the focus shifted from screening out bad actors to systematically evaluating how ESG factors influence financial performance.<\/p>\n
From Voluntary Disclosure to Legal Obligation<\/h3>\n
The 2010s were the decade of voluntary frameworks and investor demand. The Sustainability Accounting Standards Board (SASB) issued industry-specific standards; the Task Force on Climate-related Financial Disclosures (TCFD) published its four-pillar recommendations in 2017; the EU adopted the Non-Financial Reporting Directive (NFRD) in 2014, requiring large public-interest entities to disclose non-financial information.<\/p>\n
The 2020s are the decade of consolidation and enforcement. The EU’s Corporate Sustainability Reporting Directive (CSRD), which entered into force in January 2023, replaced the NFRD and made sustainability reporting a legally mandated, assured disclosure regime governed by European Sustainability Reporting Standards (ESRS). In parallel, the International Sustainability Standards Board (ISSB) published IFRS S1 and S2 in 2023 to create a global baseline, and jurisdictions from the UK to Japan, Brazil and Australia began adopting or aligning with them. By April 2026, 28 jurisdictions had adopted ISSB standards on a voluntary or mandatory basis, with a further 12 planning to do so.<\/p>\n
The trend line is unambiguous: ESG reporting has moved from the margins of corporate communications to the core of corporate reporting, and it now depends on the same discipline as financial reporting \u2014 defined data, documented controls, and independent verification.<\/p>\n
Why Does ESG Reporting Matter to the Business?<\/h2>\n
Treating ESG reporting purely as a compliance cost is a strategic error. The disclosure itself is a requirement; the capability that produces it \u2014 reliable, integrated, traceable ESG data \u2014 is an asset.<\/p>\n
Capital Access, Cost of Capital and Investor Pressure<\/h3>\n
Institutional investors, asset managers and banks increasingly use ESG data to price risk and allocate capital. Where ESG data is missing or unreliable, the market applies a discount rather than assuming good performance. Beyond equity, sustainability-linked loans tie interest margins to ESG metrics, which means the quality of the underlying data has a direct financial consequence. Failure to take ESG risk seriously can trigger shareholder action at annual general meetings and divestment by asset managers.<\/p>\n
Operational Efficiency and Risk Management<\/h3>\n
Measurement exposes waste. Energy, water, materials and logistics are cost lines as well as emissions sources; the discipline of measuring them frequently identifies efficiency gains that had been invisible. On the risk side, climate and social factors increasingly translate into physical risk, transition risk (policy, technology, market shifts), litigation risk and supply chain risk. Reporting forces these into a managed framework instead of leaving them as unquantified exposure.<\/p>\n
Commercial Access, Talent and Reputation<\/h3>\n
Large customers subject to CSRD can only report their own Scope 3 emissions and value chain impacts if their suppliers provide data. In practice, this means sustainability questionnaires flow down the supply chain whether or not the supplier is legally in scope \u2014 a small company’s ESG data can be a precondition for winning or retaining a contract. The same dynamic applies to talent: employees and candidates increasingly evaluate employers on verifiable ESG performance rather than statements.<\/p>\n
\n\n
\n \nValue Driver<\/th>\n What ESG Reporting Enables<\/th>\n Who Feels the Impact<\/th>\n<\/tr>\n<\/thead>\n \n Cost of capital<\/td>\n Better ESG data supports access to sustainable finance and improved lending terms<\/td>\n CFO, treasury, board<\/td>\n<\/tr>\n \n Operational cost<\/td>\n Emissions and resource data reveal waste and inefficiency<\/td>\n Operations, plant management, procurement<\/td>\n<\/tr>\n \n Risk management<\/td>\n Climate, social and governance risks become quantified and governed<\/td>\n Risk, internal audit, board<\/td>\n<\/tr>\n \n Market access<\/td>\n Supplier ESG data is increasingly a contractual precondition<\/td>\n Sales, procurement, key account teams<\/td>\n<\/tr>\n \n Talent retention<\/td>\n Verified performance supports employer brand credibility<\/td>\n HR, executive leadership<\/td>\n<\/tr>\n \n Legal exposure<\/td>\n Documented, defensible data reduces greenwashing and misstatement risk<\/td>\n Legal, compliance, investor relations<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n What Are the Three Pillars of ESG Reporting?<\/h2>\n
Each pillar follows its own logic, has its own metrics and its own internal owner. Understanding the differences prevents the common mistake of treating ESG as one undifferentiated project.<\/p>\n
Environmental: Measuring Impact on Natural Systems<\/h3>\n
The environmental pillar is the most mature and the most technically demanding, because it requires physical measurement rather than administrative reporting. Its centre of gravity is greenhouse gas accounting under the GHG Protocol, which divides emissions into three scopes:<\/p>\n
\n
- Scope 1<\/strong> \u2014 direct emissions from sources the company owns or controls: combustion in boilers, furnaces and vehicles, and fugitive emissions.<\/li>\n
- Scope 2<\/strong> \u2014 indirect emissions from purchased electricity, steam, heat and cooling.<\/li>\n
- Scope 3<\/strong> \u2014 all other indirect emissions in the value chain, across 15 categories covering purchased goods and services, upstream and downstream transport, business travel, commuting, use of sold products and end-of-life treatment.<\/li>\n<\/ul>\n
Scope 3 is where most of the difficulty lives. For many organisations it accounts for the large majority of total emissions, yet the data sits with suppliers, logistics providers and customers rather than inside the company’s own systems. Beyond climate, the pillar covers water withdrawal and discharge, waste generation and circularity, biodiversity, pollutant releases and the physical and transition risks associated with climate change.<\/p>\n
Social: Measuring Impact on People<\/h3>\n
The social pillar covers the company’s own workforce, workers in the value chain, affected communities and consumers. Typical topics include occupational health and safety, gender pay gaps, diversity at board and management level, working time, freedom of association, child and forced labour in supply chains, product safety, customer privacy and data protection.<\/p>\n
Much of the raw data already exists inside HR, payroll and procurement systems. The challenge is rarely availability; it is comparability, scope boundaries and the willingness to publish uncomfortable numbers. The social pillar also carries the highest risk of inconsistency between narrative claims and underlying data, which is precisely where regulatory attention now focuses.<\/p>\n
Governance: Measuring How the Company Is Directed<\/h3>\n
Governance is the control environment that makes the other two pillars credible. It covers board composition, independence and ESG competence; executive remuneration and its link to sustainability targets; business ethics and anti-corruption; whistleblowing mechanisms; internal control and risk management; and increasingly data governance, cybersecurity and responsible use of artificial intelligence.<\/p>\n
Governance is also where the IT function is most directly implicated. If ESG data flows through enterprise systems, those systems need access controls, change management, audit trails and segregation of duties that satisfy the same standards as financial reporting.<\/p>\n
\n\n
\n \nPillar<\/th>\n Representative Topics<\/th>\n Example Indicators<\/th>\n Typical Data Owner<\/th>\n<\/tr>\n<\/thead>\n \n Environmental<\/td>\n Climate change, pollution, water, biodiversity, circular economy<\/td>\n Scope 1\/2\/3 GHG emissions (tCO2e), energy consumption (MWh), water withdrawal (m\u00b3), waste diverted from disposal (%)<\/td>\n Operations, EHS, facilities, procurement<\/td>\n<\/tr>\n \n Social<\/td>\n Own workforce, value chain workers, communities, consumers<\/td>\n Lost-time injury rate, gender pay gap (%), training hours per employee, supplier audit coverage (%)<\/td>\n HR, HSE, procurement, legal<\/td>\n<\/tr>\n \n Governance<\/td>\n Corporate culture, ethics, control, cybersecurity<\/td>\n Board independence (%), anti-corruption training completion (%), confirmed incidents of corruption (count), data breach incidents (count)<\/td>\n Company secretary, legal, internal audit, CISO<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n How Does the ESG Reporting Process Work in Practice?<\/h2>\n
A credible ESG report is produced by a repeatable process, not by an annual scramble. The process has five stages, and the quality of the output depends almost entirely on how well the first two are executed.<\/p>\n
Stage 1: Scoping and Materiality Assessment<\/h3>\n
Materiality determines what the report covers. The concept of materiality guides organisations to focus on ESG issues that are relevant to them and have a measurable impact on the business. A materiality assessment starts by identifying the universe of potentially relevant topics, mapping them against the company’s sector, business model and geography, and then assessing which of them are significant.<\/p>\n
Under the EU regime, the relevant test is double materiality<\/strong>, which requires two distinct assessments:<\/p>\n
\n
- Financial materiality (outside-in)<\/strong> \u2014 how sustainability matters create or affect financial risks and opportunities for the company.<\/li>\n
- Impact materiality (inside-out)<\/strong> \u2014 how the company’s activities affect people and the environment, regardless of whether that impact is financially material to the company.<\/li>\n<\/ul>\n
A topic is reportable if it is material from either perspective. This is a stricter test than pure financial materiality, and it is the reason ESG reporting requires input from functions that financial reporting never touches.<\/p>\n
Stage 2: Data Collection Across the Value Chain<\/h3>\n
This is where most programmes struggle. ESG data originates in dispersed systems \u2014 energy meters, fleet telematics, ERP purchase ledgers, HR systems, supplier questionnaires, facility management platforms \u2014 and much of it sits outside the reporting entity’s own boundary. Practical requirements include a defined data dictionary, a clear boundary (which legal entities, which sites, which supply chain tiers), named data owners for every metric, and a documented calculation methodology with emission factors that are versioned and traceable.<\/p>\n
Stage 3: Calculation, Consolidation and Reporting<\/h3>\n
Raw activity data is converted into reported metrics using defined methodologies \u2014 emission factors for greenhouse gases, established formulas for intensity ratios, consolidation rules for group structures. The consolidated result is then structured according to the chosen reporting framework, whether that is ESRS, GRI, ISSB or a combination.<\/p>\n
Stage 4: Review, Assurance and Publication<\/h3>\n
Before publication, the data passes through internal controls and, increasingly, external assurance. Sustainability information under CSRD is subject to third-party assurance; the Omnibus simplification package deferred the deadline for adopting the European limited assurance standard to 1 July 2027, but the assurance requirement itself remains. Publication usually takes the form of a sustainability statement integrated into the management report, supported by machine-readable tagging so that regulators and analysts can process the data at scale.<\/p>\n
Stage 5: Feedback Into Strategy and Operations<\/h3>\n
The value of the cycle appears here. Reported metrics feed target setting, capital allocation, procurement criteria and product decisions. An ESG reporting programme that produces a report and nothing else is a compliance exercise; one that changes operational decisions is a performance management system.<\/p>\n
\n\n
\n \nStage<\/th>\n Core Activity<\/th>\n Primary Owner<\/th>\n Typical Output<\/th>\n Common Failure Mode<\/th>\n<\/tr>\n<\/thead>\n \n 1. Scope & materiality<\/td>\n Identify and prioritise ESG topics; double materiality assessment<\/td>\n Sustainability lead with risk and finance<\/td>\n Materiality matrix, list of reportable topics, ESRS datapoint mapping<\/td>\n Copying a peer’s topic list without stakeholder engagement<\/td>\n<\/tr>\n \n 2. Data collection<\/td>\n Gather activity data across entities and value chain<\/td>\n Data owners per metric; IT as enabler<\/td>\n Structured datasets with documented sources<\/td>\n Spreadsheets with no version control or audit trail<\/td>\n<\/tr>\n \n 3. Calculation & consolidation<\/td>\n Apply methodologies and factors; consolidate group figures<\/td>\n Finance, sustainability, data team<\/td>\n Calculated metrics, reconciliation to financial data<\/td>\n Inconsistent factors and boundaries across sites<\/td>\n<\/tr>\n \n 4. Review & assurance<\/td>\n Internal controls, then external assurance<\/td>\n Internal audit, external assurance provider<\/td>\n Assured sustainability statement<\/td>\n Late discovery that evidence was never retained<\/td>\n<\/tr>\n \n 5. Strategy feedback<\/td>\n Feed metrics into targets and decisions<\/td>\n Executive committee, board<\/td>\n Updated targets, investment and procurement criteria<\/td>\n Report published and forgotten until next year<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n Which ESG Reporting Frameworks and Standards Should You Use?<\/h2>\n
Hundreds of ESG frameworks exist, but only around a dozen are considered major. They divide into voluntary frameworks, which allow reporters to select relevant disclosures, and regulatory frameworks, which mandate full responses and are enforced by a public authority.<\/p>\n
Voluntary Frameworks and the Global Baseline<\/h3>\n
\n
- GRI Standards<\/strong> \u2014 the most widely used global framework for impact-focused sustainability reporting. Modular and topic-based, with three universal standards that apply to every reporter plus topic-specific standards covering economic, environmental and social issues.<\/li>\n
- ISSB (IFRS S1 and S2)<\/strong> \u2014 the investor-focused global baseline, absorbing the substance of the former TCFD recommendations and SASB industry standards. Designed for interoperability with jurisdictional regimes, which is why adoption has spread quickly.<\/li>\n
- CDP<\/strong> \u2014 a disclosure system rather than a framework in the strict sense, with scored questionnaires on climate change, water and forests. Scores are used by investors and increasingly by procurement teams.<\/li>\n
- GHG Protocol<\/strong> \u2014 the foundational accounting standard for greenhouse gas inventories, providing the Scope 1, 2 and 3 architecture that most other frameworks reference.<\/li>\n<\/ul>\n
Regulatory Frameworks<\/h3>\n
\n
- CSRD and ESRS<\/strong> \u2014 the EU regime, applying to companies above defined size thresholds and requiring reporting in accordance with 12 ESRS standards: two general, five environmental, four social and one governance.<\/li>\n
- VSME<\/strong> \u2014 the voluntary standard for small and medium-sized enterprises, designed to provide a proportionate, simplified disclosure set and to serve as the accepted format when large customers request value chain data.<\/li>\n
- Jurisdictional regimes<\/strong> \u2014 national frameworks such as Streamlined Energy and Carbon Reporting (SECR) in the UK, the National Greenhouse and Energy Reporting scheme in Australia, and various Asian and Latin American regimes aligned with ISSB standards.<\/li>\n<\/ul>\n
\n\n
\n \nFramework<\/th>\n Type<\/th>\n Primary Audience<\/th>\n Focus<\/th>\n Scoring<\/th>\n Typical Use<\/th>\n<\/tr>\n<\/thead>\n \n GRI<\/td>\n Voluntary<\/td>\n Broad stakeholders<\/td>\n Impact materiality<\/td>\n No<\/td>\n Standalone sustainability report<\/td>\n<\/tr>\n \n ISSB \/ IFRS S1 & S2<\/td>\n Voluntary, becoming mandatory in many jurisdictions<\/td>\n Investors<\/td>\n Financial materiality, climate<\/td>\n No<\/td>\n Global baseline for investor disclosure<\/td>\n<\/tr>\n \n TCFD<\/td>\n Voluntary (now absorbed into ISSB)<\/td>\n Investors, regulators<\/td>\n Climate risk: governance, strategy, risk, metrics<\/td>\n No<\/td>\n Climate risk narrative and scenario analysis<\/td>\n<\/tr>\n \n CDP<\/td>\n Voluntary disclosure system<\/td>\n Investors, customers<\/td>\n Climate, water, forests<\/td>\n Yes<\/td>\n Annual scored disclosure<\/td>\n<\/tr>\n \n SASB<\/td>\n Voluntary (now part of ISSB)<\/td>\n Investors<\/td>\n Industry-specific financial materiality<\/td>\n No<\/td>\n Sector benchmarking<\/td>\n<\/tr>\n \n GHG Protocol<\/td>\n Voluntary accounting standard<\/td>\n All reporters<\/td>\n Emissions accounting<\/td>\n No<\/td>\n Scope 1, 2 and 3 inventory<\/td>\n<\/tr>\n \n CSRD \/ ESRS<\/td>\n Regulatory (EU)<\/td>\n Regulators, investors, public<\/td>\n Double materiality<\/td>\n No, but assured<\/td>\n Statutory sustainability statement<\/td>\n<\/tr>\n \n VSME<\/td>\n Voluntary standard (EU)<\/td>\n SMEs, banks, large customers<\/td>\n Proportionate basic and comprehensive modules<\/td>\n No<\/td>\n Value chain data requests<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n In practice, most large organisations use more than one framework. The efficient approach is to build a single data model that maps internal metrics to the datapoints required by each framework, so that a new requirement becomes a mapping exercise rather than a new data collection project.<\/p>\n
Who Is Required to Report on ESG, and Under Which Rules?<\/h2>\n
Mandatory ESG reporting is now a reality in the EU and in a growing number of other jurisdictions, but the scope has narrowed considerably since the original CSRD text \u2014 and understanding the current thresholds is essential for planning.<\/p>\n
CSRD and ESRS: The European Baseline<\/h3>\n
EU law requires companies above a certain size to disclose information on the risks and opportunities arising from social and environmental issues, and on the impact of their activities on people and the environment. The CSRD entered into force on 5 January 2023 and replaced the earlier Non-Financial Reporting Directive. Companies subject to the CSRD report according to ESRS, developed in draft form by EFRAG, an independent body bringing together multiple stakeholder groups.<\/p>\n
The rollout was originally structured in waves. Wave 1 \u2014 large EU listed companies and other public-interest entities already covered by the NFRD \u2014 published their first CSRD reports in 2025 covering financial year 2024. Wave 2 covered large non-listed companies, and Wave 3 covered listed SMEs.<\/p>\n
The Omnibus Simplification and the New Thresholds<\/h3>\n
The Omnibus package, agreed politically in December 2025 and signed off by the Council in February 2026, materially changed the picture. It did not repeal the CSRD; it narrowed who must report, adjusted when, and reduced the reporting burden.<\/p>\n
\n\n
\n \nElement<\/th>\n Position Before Omnibus<\/th>\n Position After Omnibus<\/th>\n<\/tr>\n<\/thead>\n \n Employee threshold<\/td>\n 250+ employees<\/td>\n 1,000+ employees<\/td>\n<\/tr>\n \n Turnover threshold<\/td>\n \u20ac40 million net turnover<\/td>\n \u20ac450 million net turnover (with an equivalent EU turnover trigger for non-EU groups)<\/td>\n<\/tr>\n \n Listed SMEs (Wave 3)<\/td>\n In mandatory scope from 2026\/2027<\/td>\n Removed from mandatory scope; encouraged to report voluntarily using VSME<\/td>\n<\/tr>\n \n Wave 2 first report<\/td>\n 2026, covering FY2025<\/td>\n 2028, covering FY2027<\/td>\n<\/tr>\n \n ESRS datapoints<\/td>\n Full original standard set<\/td>\n Reduced by roughly 61% under the revised standards, with greater emphasis on materiality and judgement<\/td>\n<\/tr>\n \n Climate transition plans<\/td>\n Mandatory disclosure obligation<\/td>\n Obligation removed<\/td>\n<\/tr>\n \n Assurance<\/td>\n Limited assurance, with standards to be adopted<\/td>\n Limited assurance retained; deadline for adopting the European standard deferred to 1 July 2027<\/td>\n<\/tr>\n \n Value chain data requests<\/td>\n Full ESRS data could be requested from partners<\/td>\n Companies with fewer than 1,000 employees can only be asked for data within the VSME scope<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n Member states are required to transpose the amended directive into national law, with a transposition deadline of March 2027. For Slovak and Czech companies, the CSRD has been implemented through amendments to national accounting legislation \u2014 in Slovakia, through Act No. 431\/2002 Coll. on Accounting \u2014 so local filing and publication rules follow the national transposition rather than the directive directly.<\/p>\n
What About Companies Below the Threshold?<\/h3>\n
Falling outside mandatory scope does not mean falling outside the data flow. Companies that are out of scope are still routinely asked for sustainability data by banks, insurers, large customers and value chain partners who need it to meet their own obligations. The practical consequence is that for most mid-market companies, ESG reporting becomes a commercial requirement rather than a legal one \u2014 driven by contracts and credit rather than by regulators. The VSME standard exists precisely for this situation, providing a proportionate disclosure set that large customers are expected to accept.<\/p>\n
The Global Picture<\/h3>\n
Outside the EU, the landscape is converging around the ISSB baseline but at different speeds and with different degrees of legal force. Adoption of IFRS S1 and S2 has proceeded across Asia, Latin America, Africa and Oceania, with 28 jurisdictions having adopted the standards on a voluntary or mandatory basis as of April 2026 and a further 12 planning to do so. In the United States, the picture moved in the opposite direction: the SEC adopted climate disclosure rules in 2024, stayed them pending litigation, and in 2026 proposed to rescind them. That does not eliminate climate disclosure obligations for US companies operating in Europe or in value chains serving European customers \u2014 it simply shifts the source of the obligation from domestic securities law to EU regulation and commercial contracts.<\/p>\n
How Do You Build the Data and IT Foundation for ESG Reporting?<\/h2>\n
ESG reporting is fundamentally a data problem dressed in regulatory language. The organisations that report smoothly are not the ones with the largest sustainability teams; they are the ones whose data architecture was designed for it.<\/p>\n
Why ESG Data Is Inherently Difficult<\/h3>\n
Four characteristics make ESG data harder to manage than financial data:<\/p>\n
\n
- It originates outside the finance function.<\/strong> Energy, HR, procurement, logistics and facilities all own data that finance must eventually report.<\/li>\n
- It crosses the entity boundary.<\/strong> Scope 3 emissions and supply chain social data come from third parties with their own systems, definitions and incentives.<\/li>\n
- It is estimated as often as it is measured.<\/strong> Spend-based estimates, industry averages and proxy factors are legitimate but must be documented and versioned so that restatements are explainable.<\/li>\n
- It changes definition frequently.<\/strong> Standards are revised, thresholds move, factors are updated. A static spreadsheet model cannot absorb that rate of change.<\/li>\n<\/ol>\n
These characteristics explain why data quality dominates the list of reported obstacles: in Deloitte’s research on the topic, more than half of executives cited data quality as their top ESG data challenge.<\/p>\n
A Reference Architecture for ESG Data<\/h3>\n
A workable ESG data architecture separates concerns into layers, so that a change in reporting standards affects only the presentation layer, and a change in source systems affects only the ingestion layer.<\/p>\n
\n
- Source layer<\/strong> \u2014 meters and sensors, ERP, HR and payroll systems, fleet and travel data, procurement records, facility management platforms, supplier portals.<\/li>\n
- Ingestion and integration layer<\/strong> \u2014 automated extraction from source systems, APIs and file-based interfaces for third-party data, validation rules applied at the point of entry.<\/li>\n
- Calculation layer<\/strong> \u2014 a central emissions factor engine holding recognised factor sets, calculation logic per metric, unit conversion, and boundary and consolidation rules.<\/li>\n
- Data and governance layer<\/strong> \u2014 a master data model for ESG metrics, documented lineage from reported figure back to source transaction, version control, and role-based access.<\/li>\n
- Reporting and disclosure layer<\/strong> \u2014 framework mappings (ESRS, GRI, ISSB), report generation, and machine-readable tagging for digital submission.<\/li>\n
- Assurance and audit layer<\/strong> \u2014 evidence repository, control documentation, change logs and audit trails that allow an external assurer to test the numbers without reconstructing them by hand.<\/li>\n<\/ul>\n
Where this architecture exists, the annual reporting cycle becomes a controlled process. Where it does not, the cycle depends on a small number of people and a set of spreadsheets whose lineage nobody can reconstruct under scrutiny \u2014 which is exactly the situation that assurance is designed to detect.<\/p>\n
Build Versus Buy: Selecting ESG Software<\/h3>\n
Dedicated ESG platforms exist and are maturing, particularly for carbon accounting and framework mapping. The realistic selection criteria are rarely about features and almost always about fit with the existing landscape: whether the platform integrates with the ERP and HR systems already in place, whether emission factors and methodologies can be configured and versioned, whether the audit trail is strong enough for assurance, whether it supports the frameworks actually in scope, and whether data can be exported without vendor lock-in.<\/p>\n
The most common architectural mistake is to buy a reporting tool before defining the data model. A reporting layer on top of undefined data produces attractive reports built on unverifiable numbers \u2014 which is a worse outcome than a plain report built on solid ones.<\/p>\n
Testing, Controls and Assurance Readiness<\/h3>\n
Because sustainability information is now assured, ESG data pipelines need the same treatment as any other system of record. That means defined controls with owners, reconciliation between ESG metrics and financial data where they overlap (for example energy spend versus energy consumption), exception handling and correction procedures, evidence retention for the full assurance period, and \u2014 for the reporting platform itself \u2014 functional testing, data migration testing and regression testing whenever standards or factor sets change. Organisations that treat the ESG platform as a critical business system, and test it accordingly, avoid the most expensive failure mode in this discipline: discovering during assurance that the numbers cannot be evidenced.<\/p>\n