CSRD for SMEs: The Complete Guide

If you run a small or medium-sized business (SME) and are wondering what the Corporate Sustainability Reporting Directive (CSRD) means for you, the answer has changed. Since the Omnibus I directive came into force on 18 March 2026, no SME reports under CSRD. The directive now applies only to companies with more than 1,000 employees and over €450 million turnover.

That does not make CSRD irrelevant to you. Your large customers, your bank, and your investors may report under it, and they may ask you for sustainability data as a result. EU law caps what they can ask at a proportionate standard built for SMEs: the Voluntary Sustainability Reporting Standard for SMEs (VSME).

This guide explains in plain language who reports under CSRD now, why SMEs still receive data requests, what the cap protects you from, and how to take manageable first steps without expensive consultants.

1. What CSRD Is (In Simple Terms)

CSRD is the EU’s sustainability reporting law. It updates earlier non-financial reporting rules and requires in-scope companies to publish structured information about their environmental, social, and governance impacts, using the European Sustainability Reporting Standards (ESRS).

CSRD sets the expectations for what good sustainability reporting looks like: clear, comparable, and aligned with EU climate and social goals. Because in-scope companies must also describe their value chain, the data expectations flow down to their suppliers, which is where SMEs meet the directive in practice.

If you want a plain-language introduction, you can also review the overview in CSRD for Beginners.

2. Does CSRD Apply to Your SME? (No, and Here Is Why)

Post-Omnibus, a company is in CSRD scope only if it meets both thresholds:

• More than 1,000 employees, and
• Net turnover above €450 million

Three consequences for smaller businesses:

• SMEs were never brought into scope, and the planned track for listed SMEs was eliminated entirely.
• Mid-sized companies (250 to 1,000 employees) dropped out of scope under the new thresholds.
• Roughly 90% of the companies previously expected to report no longer do.

So there is no CSRD filing, deadline, or audit in your future at your current size. The full story of how the thresholds changed is in The EU Omnibus: What Changed for CSRD in 2026, and the size question is answered directly in Is My Company Too Small for CSRD?.

Being out of scope does not mean doing nothing, though. The pressure now comes from other directions.

3. Why SMEs Are Asked for Data Anyway

Even with no legal obligation, SMEs receive sustainability data requests from several directions:

Large customers reporting under CSRD

In-scope companies must disclose the impacts of their value chain, including suppliers. The ESRS require them to collect Scope 3 emissions, workforce data, and information on environmental and social practices. When suppliers cannot provide this data, the customer’s own reporting suffers, so procurement teams ask.

For a deeper look at handling these requests, see How SMEs Can Handle Sustainability Data Requests from Large Clients.

Banks and investors

Banks integrate sustainability risks into financing decisions and increasingly use SME-level data to assess exposure to climate and social risks. A 2025 EC Recommendation asks banks to cap their SME data requests at the VSME standard too.

Procurement and public tenders

Public buyers increasingly require sustainability disclosures. Even simple metrics, such as energy use, waste volumes, and workforce breakdowns, are becoming routine tender questions.

Parent companies and groups

Subsidiaries often contribute data to group-wide sustainability reporting, which requires structured data from smaller entities.

The result: SMEs are not in scope, but they are in demand.

4. The Value-Chain Cap: Your Legal Protection

The trickle-down described above has a legal limit. Under Omnibus I, a CSRD-reporting company may not require more from a value-chain partner with fewer than 1,000 employees than the data defined by the VSME-based standard. The cap is statutory, not advisory.

Practical consequences:

• One VSME report can answer nearly every request from CSRD-reporting customers, instead of a different bespoke questionnaire each time. The mechanics are explained in One VSME Report for Every ESG Request.
• Some requests lawfully go beyond the cap: data customarily exchanged in your sector, data required by other EU law, and the VSME disclosures on climate targets and risks (C3 and C4) sit outside it. Platform questionnaires such as EcoVadis also continue.
• The standard is becoming law-adjacent: the Commission adopted the VSME-based Voluntary Standard (VS) as a delegated act on 3 July 2026, applying to financial years starting 1 January 2027. “VSME” remains the common name today.

5. CSRD vs VSME (Clear Comparison)

The VSME Standard, published by EFRAG in 2024, gives SMEs a voluntary, simplified format aligned with what CSRD reporters need. It is designed so a business can respond consistently to data requests without taking on a reporting burden built for large companies.

CSRD vs VSME: At a Glance

For help deciding which side of the table you sit on, see CSRD vs VSME: Which One Applies to My Business?

6. What Data SMEs Should Start Collecting

The VSME Basic Module gives a practical starting set of metrics across environment, social topics, and governance. Key disclosures include:

Environmental data

• Energy use (electricity, fuels) in MWh

• GHG emissions (Scope 1 and location-based Scope 2)

  • For methodology support, see GHG Protocol for SMEs: Complete Methodology Guide

• Water withdrawal and consumption

• Waste generation: hazardous and non-hazardous

• Circular economy practices

• Sites near biodiversity-sensitive areas

Social data

• Workforce breakdown (gender, contract type, location)
• Health and safety indicators
• Training hours and remuneration structure

Governance data

• Any fines or convictions related to corruption or bribery
• Existing policies or practices related to sustainability

Narrative information

• Existing sustainability practices
• Future initiatives and targets
• Overall approach to transitioning to a more sustainable economy

For SMEs that want to go further, the Comprehensive Module adds the datapoints banks and large customers request most, notably climate targets (C3) and climate risks (C4).

For guidance on common data challenges, explore Why Your CSRD Data Doesn’t Match Industry Benchmarks.

7. How Much Work This Actually Is

For most SMEs, VSME-format reporting is manageable when broken into smaller actions. What takes large enterprises months can often be addressed by an SME in a few dozen hours spread across the year, depending on:

• Number of sites
• Maturity of existing data systems
• Complexity of operations
• Requests from major customers

A typical SME’s time investment:

Businesses using spreadsheets tend to manage reporting manually, while others move to dedicated tools after their first cycle; free tools now generate a complete VSME report at no cost. If you are exploring how to collect environmental data efficiently, this guide may help: Emission Factor Selection: How to Choose Data Sources.

8. A Practical 3-Step Approach for Small Businesses

Small businesses often worry sustainability data will become overwhelming. A simple three-step model keeps progress achievable.

Step 1: Map Your Requests

Identify what customers, banks, or parent companies are asking for.

Common requests:

• Energy use (kWh or MWh)
• Total emissions or emission factors
• Workforce indicators
• Waste volumes or recycling rates

Where the pressure comes from determines how much detail you actually need, and the value-chain cap sets the ceiling.

Step 2: Build a Simple Annual Data File

Your business can track core data using a single spreadsheet or simple tool. Include:

• Monthly electricity and fuel invoices
• Water bills
• Waste contractor summaries
• Workforce headcount and contract types
• Notes on sustainability initiatives

This becomes your single source of truth, saving time each year and keeping every customer’s answers consistent.

For supply-chain-specific reporting guidance, see CSRD Reporting for Niche & Craft Manufacturers: A Supplier’s Guide.

Step 3: Publish in VSME Format (Basic Module)

The Basic Module is proportionate and designed for SMEs. It includes:

• B1: Basis for preparation
• B2: Practices, policies, and initiatives
• B3–B11: Environmental, social, and governance metrics

This structure ensures alignment with what large companies need for their own CSRD disclosures, while keeping your effort reasonable. One report, prepared once a year, becomes the answer to nearly every request.

Frequently Asked Questions

Do SMEs really need to prepare anything if they are not in scope for CSRD?

There is no obligation, but most SMEs supplying large companies now receive structured data requests from CSRD-reporting customers. Preparing a light VSME-format file helps you respond quickly and avoids repeated ad-hoc requests. You can learn more in How SMEs Can Handle Sustainability Data Requests from Large Clients.

Is VSME enough to satisfy supplier questionnaires from large customers?

In most cases yes, and the value-chain cap makes it the legal ceiling for what CSRD reporters may require from suppliers under 1,000 employees. Some requests lawfully continue beyond it, such as sector-standard exchanges and platform assessments. For the comparison, see CSRD vs VSME: Which One Applies to My Business?

How accurate do SME emissions and resource-use figures need to be?

SMEs providing supporting data are allowed to use estimates when direct measurement is not feasible. The key is consistency year-to-year and transparent methods. For methodologies, see GHG Protocol for SMEs: Complete Methodology Guide.

What if we do not have all the data yet?

Most SMEs begin with partial datasets. You can start by collecting utility invoices, workforce figures, and waste summaries. The VSME Standard is proportionate and lets you note where information cannot yet be obtained. Over time, your dataset naturally becomes more complete.

Key Terms

• CSRD – Corporate Sustainability Reporting Directive: EU law requiring sustainability disclosures from companies with over 1,000 employees and €450m turnover.
• VSME Standard – Voluntary EFRAG standard for non-listed micro, small, and medium-sized companies; the capped format for supplier data requests.
• Value-chain cap – The post-Omnibus rule capping what CSRD reporters may request from sub-1,000-employee suppliers at the VSME standard.
• ESRS – European Sustainability Reporting Standards used under CSRD.
• Scope 1 emissions – Direct emissions from owned or controlled sources.
• Scope 2 emissions – Indirect emissions from purchased electricity, heating, cooling, or steam.
• Value chain – Suppliers, distributors, and other partners whose data affects a company’s sustainability impacts.

Conclusion & Next Steps

CSRD is your customers’ obligation, not yours. What reaches your business is the request for data, and EU law now shapes that request around a standard built for companies your size.

Start by mapping the requests you receive, gathering a few core metrics, and creating a simple annual data file. Each cycle becomes easier, and your business gains credibility with the customers and banks that increasingly expect sustainability readiness. Free VSME report tools can turn that data file into a finished report at no cost.

If you would like a next step, you might explore CSRD for Beginners: A Plain-Language Guide for Small Businesses.