Skip to content

The EU's new limit on supplier ESG requests: what your customers can now ask you for

From 2027, large EU companies reporting under the CSRD may not ask suppliers with 1,000 or fewer employees for more than a fixed list of ESG data. Here is what is on the list, what you can decline and how to prepare.

Supply chainOctober 2026 · 6 min read

If you sell to a large European company, you may have had long sustainability questionnaires asking for everything from emissions to human rights policies. The EU has now set a ceiling on those requests. On 21 September 2026 the European Commission published the list of data that companies reporting under the Corporate Sustainability Reporting Directive (CSRD) may require from smaller firms in their supply chain. It applies to their reports for financial years starting on or after 1 January 2027, so the questionnaires you receive in 2027 should start to change.

What changed this year

Two pieces of EU law set this up. The Omnibus I Directive (Directive (EU) 2026/470), agreed on 24 February 2026, narrowed the CSRD so that only companies with more than 1,000 employees and net turnover above €450 million have to publish a sustainability report. It also created what the law calls the value chain cap: a limit on what those companies may demand from suppliers with an average of 1,000 employees or fewer.

The directive left the detail to the Commission. Commission Delegated Regulation (EU) 2026/1560, adopted on 3 July 2026 and published on 21 September 2026, sets out a voluntary reporting standard for smaller firms and, in its Annex II, the exact datapoints the cap covers. The standard is based on VSME, the voluntary standard for small and medium-sized businesses that EFRAG developed and the Commission recommended in July 2025.

EU countries have until 19 March 2027 to write the directive's reporting changes into national law. The cap itself applies from financial years beginning on or after 1 January 2027.

Whether the cap covers your business

The directive calls a supplier a protected undertaking if it is in the value chain of a company that reports under the CSRD and had an average of no more than 1,000 employees during the previous financial year. Nothing in that definition requires the supplier to be based in the EU, so a UK manufacturer selling to an EU company in scope can rely on it.

Your customer can rely on a simple self-declaration from you that you are under the 1,000 employee line. It does not have to check it, unless the statement is obviously wrong.

Three limits matter:

  • The cap only applies to requests made for the customer's CSRD report. Requests for other reasons, such as the customer's risk management or its due diligence duties, are outside it.
  • You can still share more if you choose to. The cap stops customers requiring extra data, not you volunteering it.
  • UK requests are unaffected. A Carbon Reduction Plan for a central government contract, a CDP questionnaire or a UK customer's own reporting sit outside the EU rule.

What customers can ask you for

For a supplier with more than 10 employees, Annex II of the regulation lists the following. Some items come from the standard's Basic module and some from its Comprehensive module.

Area
About your business
What a customer may require
Which module you report under, whether figures are for one company or a group, legal form, sector code, balance sheet total, turnover, number of employees, country of operation and where your sites are
Area
Energy and emissions
What a customer may require
Total energy use in MWh; Scope 1 and location-based Scope 2 emissions in tonnes of CO2 equivalent
Area
Water
What a customer may require
Total water withdrawn
Area
Materials and waste
What a customer may require
Whether you apply circular economy principles; total waste by weight, split into hazardous and non-hazardous; the share sent for recycling or reuse
Area
Your workforce
What a customer may require
Employees by contract type and by gender; number and rate of recordable work accidents; whether pay is at or above the minimum wage; share of staff covered by collective agreements; average training hours per employee
Area
Business and conduct
What a customer may require
Your main products or services, markets and business relationships; staff turnover rate; whether you have a code of conduct or human rights policy; whether you have a complaints process; confirmed human rights incidents
Summarised from Annex II of Commission Delegated Regulation (EU) 2026/1560. Firms with 10 or fewer employees have a shorter list.

Two things stand out. Scope 3 emissions are not on the list, so a customer cannot require your Scope 3 figure for its CSRD report. And the emissions asked for are the ones you can work out from your own fuel and electricity bills.

If a request goes beyond the list

The directive gives protected suppliers a right to decline information beyond the voluntary standard when it is requested for CSRD reporting. It also puts duties on the customer:

  • It must tell you which items in its request go beyond the standard, and that you have a legal right to decline them.
  • It must not write contract terms requiring more than the standard for CSRD purposes. Any such term is not binding, although the rest of the contract stands.
  • If it reports its supply chain using only data within the cap, it is treated as having met its own reporting duty, so it has no legal need to push you further.

Declining is a right, not a requirement. If a customer asks for something you already hold and are happy to share, sharing it may help the relationship. The point is that you can now plan around a known list instead of a new questionnaire from every buyer. If a contract clause is in dispute, take advice from your own legal adviser.

How to get ready before the 2027 requests arrive

  1. Check your headcountWork out your average number of employees for the last financial year and keep a short signed statement ready to send customers.
  2. Pull a year of energy billsTotal your electricity, gas and other fuels in MWh. The standard asks for a split between renewable and non-renewable electricity as shown on your utility bills, where you can get it.
  3. Calculate Scope 1 and 2Apply the UK government's greenhouse gas conversion factors, published each year by the Department for Energy Security and Net Zero. Its UK grid electricity factor gives the location-based Scope 2 figure the standard asks for.
  4. Collect the rest from records you holdWater from water bills, waste weights from your waste contractor's transfer notes, and workforce figures from payroll and your accident book.
  5. Keep the evidence behind each figureStore the bills, the factor used and the calculation together. From your second year of reporting, the standard expects last year's figures alongside this year's, so a clear trail saves work later.

Our footprint guide walks through the energy and emissions steps in more detail.

How ESGen helps

The ESGen platform has a VSME lens. It calculates Scope 1 and 2 from your own bills using the UK government conversion factors, keeps each bill in an evidence library, records every calculation in a log and locks a reporting period once you sign it off. Our team prepares VSME reports and answers customer questionnaires with you from the same records.

The platform does not produce CSRD reports, and it does not calculate Scope 3 beyond the upstream energy share it adds automatically. ESGen helps prepare structured reporting evidence; it does not give legal advice and no software makes a business compliant on its own. See ESG reporting for more, or read what ESG reporting covers for the wider picture.

If an EU customer has sent you a questionnaire, send it to our team and we will show you which questions fall inside the new list.

Sources

  • Directive (EU) 2026/470 of the European Parliament and of the Council of 24 February 2026 (Omnibus I Directive), Official Journal of the European Union L, 26 February 2026
  • Commission Delegated Regulation (EU) 2026/1560 of 3 July 2026 establishing sustainability reporting standards for voluntary use by undertakings protected by the value chain cap, Official Journal of the European Union L, 21 September 2026
  • Commission Recommendation (EU) 2025/1710 of 30 July 2025 on a voluntary sustainability reporting standard for small and medium-sized undertakings, Official Journal of the European Union L, 5 August 2025
  • Department for Energy Security and Net Zero, Greenhouse gas reporting: conversion factors 2026

This article is general information, not legal or financial advice. Rules change, so check the current guidance before you rely on a threshold or a date.

See how we would handle this with you

Book a 30-minute walkthrough and we will show you how the platform and our team handle it with data like yours.