our services:
Enlighta Solutions
were on social media:
CSRD & Scope 3 ESG Reporting: Why Your Supplier Data Strategy Is Now a Legal Requirement
Sustainability reporting has crossed a critical threshold — it is no longer a voluntary commitment or investor relations exercise. For enterprises operating in or doing business with the EU, the Corporate Sustainability Reporting Directive (CSRD) has made ESG disclosure, including emissions across your entire supply chain, a binding legal obligation.
What Is CSRD?
Adopted by the European Commission in November 2022, CSRD replaces the older Non-Financial Reporting Directive (NFRD) and dramatically expands both the scope of companies that must report and the depth of data they must disclose. It covers environmental, social, and governance (ESG) metrics — but its most operationally complex requirement is Scope 3 emissions, which includes all indirect greenhouse gas emissions across a company’s entire value chain.
Approximately 50,000 companies globally — including non-EU headquartered companies with significant EU operations — will ultimately fall under CSRD.
Updated Timelines: What Changed in 2025
The EU’s Omnibus Simplification Package (April 2025) adjusted reporting timelines for most companies:
Wave | Who | Reports For FY | Filing Year |
Wave 1 | Large listed companies (NFRD reporters, 500+ employees) | FY 2024 | 2025 normative |
Wave 2 | Large companies (250+ employees) | FY 2027 | 2028 normative |
Wave 3 | Listed SMEs | FY 2028 | 2029 normative |
Wave 1 companies are already reporting now. For everyone else, the two-year delay is not a reprieve — it is a window that is closing fast.
Scope 3: The Supplier Data Problem
Scope 3 emissions are the hardest — and most strategically significant — part of CSRD compliance. Under the ESRS E1 Climate Change framework embedded in CSRD, companies must:
- Quantify all material Scope 3 categories across their supply chain
- Justify any exclusions with transparent reasoning
- Set emission reduction targets that cover Scope 1, 2, and 3 together
- Document supplier engagement strategies to close data gaps
- Provide data quality assessments and ongoing improvement plans
The challenge: only 41% of companies currently report Scope 3 emissions, according to CDP data. The gap between what regulators now require and what most procurement teams can actually deliver is significant.
Why Procurement Teams Are Now on the Front Line
CSRD has effectively made procurement a compliance function. Your suppliers’ emissions performance directly shapes your regulatory reporting — meaning vendor selection, contract terms, and ongoing supplier monitoring must now incorporate ESG criteria alongside cost and quality.
Three core friction points are emerging across enterprise supply chains:
- Data availability — Many suppliers, especially SMEs, lack the digital systems to measure or share emissions data accurately
- Data quality — Industry averages and estimates still dominate, which undermines audit-readiness and third-party assurance requirements
- Multi-tier complexity — Tracing emissions through Tier 2 and Tier 3 vendors across fragmented global supply chains is operationally demanding without a centralized supplier data platform
Third-Party Assurance Is Mandatory
CSRD goes further than any prior sustainability framework by requiring independent third-party assurance of all reported sustainability data. Companies must initially obtain limited assurance (a high-level review), with a roadmap toward reasonable assurance (a full comprehensive audit) as the regulation matures. This means the emissions and ESG data you collect from suppliers must be credible, structured, and audit-ready — not pulled from spreadsheets weeks before the reporting deadline.
What Enterprises Must Do Now
- Run a Double Materiality Assessment — identify which sustainability topics are material to your business and to the environment and society
- Map your Scope 3 categories — identify which supplier tiers contribute most significantly to your emissions footprint
- Update supplier contracts — embed ESG data-sharing obligations, emission targets, and audit rights into vendor agreements
- Build supplier engagement programs — proactively help key suppliers measure and report their Scope 1 and 2 emissions, which feed into your Scope 3
- Centralize ESG supplier data — fragmented data collection via email or spreadsheets will not survive third-party assurance scrutiny
The Bottom Line
CSRD and Scope 3 reporting are reshaping procurement from a cost-optimization function into a sustainability governance function. Enterprises that build supplier ESG data collection, monitoring, and reporting capabilities now will not only meet their legal obligations — they will gain a strategic advantage as sustainability performance increasingly influences pricing, contract negotiations, and supply chain resilience. Those that wait for the Wave 2 deadline in 2028 will find themselves scrambling to collect years of missing supplier data under regulatory pressure.
