Risk & Compliance

CSRD supplier data: what ESG information procurement teams must start collecting now

The EU's CSRD rewrites two decades of procurement scorecards. Cost, quality, and speed are no longer enough — supplier-level data on emissions, diversity, working conditions, and human rights is now a regulatory requirement. You have ~18 months to build the pipeline.

70–90%

Share of emissions that are Scope 3

Like the hidden calories in a restaurant meal — most emissions sit in purchased goods, not your own operations

ESRS standards companies must report against

Three directly implicate procurement: climate (E1), workers in the value chain (S2), and materiality assessment

200+

Data points required under ESRS S1 alone

That's just the workforce standard — supplier-level data multiplies this across your entire value chain

The five data clusters procurement must build

Scope 3 greenhouse gas emissions (ESRS E1). For most manufacturers, 70–90% of emissions sit in purchased goods. Procurement must collect supplier emissions data or use auditable estimates — like counting every ingredient's carbon footprint in a recipe.

Workforce diversity and inclusion (ESRS S2). Supplier-level data on workforce composition, non-discrimination policies, and diversity outcomes. Think of it as a background check — but for your supplier's entire workforce, not just their financials.

Working conditions, fair wages, and health & safety. Procurement must verify — not just ask — whether Tier 1 suppliers meet these standards. Self-reported data without verification is like a self-graded exam: auditors won't accept it.

Forced labor and human rights due diligence + double materiality documentation. CSRD overlaps with the separate CSDDD, creating a dual compliance burden. Procurement must also document which suppliers are material under both environmental and financial lenses — and justify exclusion decisions.

Two approaches, one regulatory clock

Common

Send one email to suppliers, record zero responses, rely on a one-dimensional EcoVadis score, and hope auditors accept it.

Qualified audit opinion — same investor scrutiny as a failed financial audit

Correct

Run a structured data collection program: materiality pre-assessment, ESG fields in supplier onboarding, contractual data rights, and third-party verification budget.

Defensible compliance + audit-ready data pipeline by 2028

What procurement leaders must do before 2027

Run a double materiality pre-assessment. Work with sustainability and finance to map which supplier categories are material under ESRS E1 and S2. Turns an overwhelming mandate into a focused exercise — like triaging patients, not treating everyone at once.

Add ESG fields to supplier onboarding now. Five fields — non-discrimination policy, workforce diversity, living wage certification, Scope 1&2 emissions, forced-labor self-assessment — cost almost nothing today. Retroactive collection from 500 suppliers in 2027 costs orders of magnitude more.

Contract for ESG data access + budget for verification. Update supplier agreements with data-provision clauses and third-party verification rights. Budget for a verification partner — the cost is a fraction of a qualified audit opinion.

The risk of waiting

Risk

The cost of non-compliance is not a fine — it is a qualified audit opinion. CSRD reports must be digitally tagged and machine-readable. Gaps in supplier data will be visible not just to auditors but to every investor, competitor, and NGO that downloads the report. A company that sends one email and records zero responses has no defensible position — like showing up to an exam with a blank page and saying you couldn't find the textbook.

Jargon Decoder

CSRD Corporate Sustainability Reporting Directive — EU rule requiring companies to publicly report ESG data across their entire value chain, like a mandatory sustainability tax filing for suppliers too.

ESRS European Sustainability Reporting Standards — the 12 rulebooks that spell out exactly what data companies must collect and report under CSRD.

Scope 3 Indirect emissions from your supply chain — everything your suppliers burn to make what you buy. For most manufacturers, this is 70–90% of their total carbon footprint.

Double Materiality The requirement to assess both how your business affects the environment AND how environmental changes affect your business — like checking both sides of a coin.

Omnibus I The EU's 2026 revision that narrowed CSRD scope (1,000+ employees, €450M+ turnover) but gave Wave 2 companies a two-year delay — reporting FY2027 data in 2028.

CSDDD Corporate Sustainability Due Diligence Directive — a separate EU rule requiring companies to audit their supply chain for human rights and environmental risks, overlapping with CSRD.

Sources: IBM — CSRD Overview and Timeline, Deloitte — Placing People First: CSRD and the Social Standards, EcoVadis — CSRD Reporting: How to Comply, Code Gaia — Importance of Diversity for the ESRS, Sophare AI — EU CSRD Complete Overview, SEC — Proposed Rescission of Climate-Related Disclosure Rules (May 2026), Supplier.io — 2024 State of Supplier Diversity Report. Analysis and intelligence from Rzzro.

Rzzro

Procurement, quantified.