CSRD Supplier Requirements: What SMEs Should Expect in 2026

Small and growing businesses across Europe are entering a new phase of sustainability expectations. Your business is almost certainly not legally required to report under the Corporate Sustainability Reporting Directive (CSRD), but you may already be feeling the ripple effects.

The first CSRD reports were published in 2025, and the rules have since changed in your favour. The Omnibus I directive, in force since 18 March 2026, narrowed CSRD to companies with more than 1,000 employees and more than €450 million turnover. It also introduced something every supplier should know about: a legal cap on how much ESG data those companies may demand from smaller business partners.

The result is simple: suppliers are still being asked for data, but there is now a defined ceiling on what a reasonable request looks like. This guide explains why the requests happen, what the cap does and does not cover, and how your business can prepare without complexity or consultants.

1. Why Suppliers Are Suddenly Being Asked for ESG Data

Under CSRD, large companies must report not only on their own operations but also on their value chain impacts. This includes emissions, workforce practices, resource use, and social risks connected to suppliers.

This shift is driven by:

Scope 3 emissions requirements, especially purchased goods and services
Workforce disclosures covering workers in the value chain
Pollution, waste, and water metrics tied to upstream activities
Sustainability risk assessments in procurement and due diligence
New assurance requirements, meaning auditors will test supplier data quality

Large companies now need reliable information from SMEs to comply with ESRS. If suppliers can’t provide data, these companies face reporting gaps, risk flags, and potentially higher audit costs.

This is why ESG data requests have gone from “nice to have” to an urgent operational need.

For a high-level introduction to the pressure SMEs face, see: How SMEs Can Handle Sustainability Data Requests from Large Clients

2. The Value-Chain Cap: The Legal Limit on What Buyers Can Ask

Omnibus I did more than narrow who reports. It wrote a value-chain cap into the directive: a CSRD-reporting company may not ask a business partner with fewer than 1,000 employees for more sustainability information than the voluntary SME standard defines. On 3 July 2026 the European Commission adopted the delegated act that pins this ceiling to the standard’s Annex II, with an even lower cap for micro-enterprises of 10 or fewer employees. The cap applies fully to financial years starting 1 January 2027, which is why many buyers are redesigning their supplier questionnaires right now.

In practice, this means the VSME Standard is the definition of a reasonable request. If you can answer the VSME Basic Module, you can answer the core of what any CSRD-reporting customer is entitled to collect from you for their own report.

Be aware of what the cap does not cover, so a legitimate extra request does not catch you off guard:

Information customarily exchanged in your sector, or required by other EU law (for example product rules or banking regulation), sits outside the cap
GHG reduction targets and climate-risk questions (VSME’s C3 and C4 areas) sit outside the cap, and banks and large customers ask for them often
Platform assessments such as EcoVadis or CDP invitations continue as before; a VSME report helps you answer them but does not replace them

The practical conclusion stays the same either way: collect your core data once, in VSME structure, and reuse it for every request.

3. What Large Companies Must Disclose About Their Supply Chain

The ESRS standards (revised by a delegated act adopted on 3 July 2026) still require companies in scope of CSRD to disclose quantitative and narrative information linked to their value chain — they simply may not demand more than the capped set from smaller suppliers to get it.

Below are the areas where supplier data is most essential.

Scope 3 GHG emissions (Purchased Goods & Services)

Companies must report emissions associated with:

Materials they buy
Components and packaging
Services such as logistics, IT, maintenance, and contractors

This is often the biggest emissions category for manufacturing, retail, technology services, and logistics.

Worker conditions in the value chain

Companies must understand potential risks such as:

Health and safety incidents
Working hours
Gender representation
Fair pay practices

ESRS explicitly requires disclosures on workers in the value chain, not only direct employees.

Environmental impacts linked to suppliers

Including:

Waste generated during production
Water withdrawal/consumption
Pollution
Use of hazardous materials

Sustainability governance and business conduct

Companies must disclose if suppliers have:

Anti-bribery policies
Ethics codes
Any convictions or fines related to corruption or misconduct

Transition planning and resilience

Companies must explain how their supply chain contributes to — or risks — their long-term sustainability strategy.

This means suppliers who cannot provide even basic ESG data may become procurement risks.

4. Common Requests SMEs Are Already Receiving

SMEs across Europe consistently report the same types of CSRD-driven requests. The format varies, but the underlying information is almost identical.

Environmental data

Electricity consumption (kWh)
Fuel use (litres or MWh)
Renewables vs non-renewables
Waste volumes (hazardous/non-hazardous)
Recycling or recovery rates
Water withdrawal or usage
Scope 1 and Scope 2 emissions
Emission factors used for calculations

Useful methodology support: GHG Protocol for SMEs: Complete Methodology Guide

Workforce data

Number of employees
Permanent vs temporary
Gender breakdown
Health and safety incidents
Training hours
Working hours or shift structures
Access to collective bargaining

Governance information

Business conduct policies
Anti-corruption measures
Compliance breaches or fines

Narrative information

Sustainability actions already taken
Future plans or efficiency initiatives
Certifications (ISO 14001, ISO 45001, etc.)

Structured templates

Many buyers now send suppliers ESRS-aligned forms or VSME-style questionnaires. Some request full VSME Basic Module reports because the structure aligns with what they must provide internally.

For a full overview of VSME, see: CSRD vs VSME: Which Applies to Your Company

5. What Information SMEs Don’t Need to Provide

Not every ESG request is reasonable, and since March 2026 the value-chain cap gives you a legal basis for pushing back. SMEs are not required to provide:

1. Double materiality assessments

Only CSRD-reporting companies must perform full double materiality analyses.

2. Detailed transition plans or climate scenario analyses

These apply to large companies with high environmental impact, not small suppliers.

3. Financially quantified risk modelling

SMEs do not need to estimate financial exposure to climate or social risks.

4. Value-chain mapping beyond your own operations

You only need to report about your activities, not your suppliers’ suppliers.

5. Assurance-ready datasets

Only CSRD-reporting companies must obtain assurance. SMEs only need reasonable, transparent data.

6. Full ESRS reports

No SME reports under CSRD. Since Omnibus I, only companies with more than 1,000 employees and more than €450 million turnover are in scope; the former listed-SME reporting track was removed entirely.

7. Highly precise measurements

The VSME Standard explicitly allows estimates, industry averages, and reasonable approximations where exact data is not available.

This keeps the supplier burden proportionate.

6. How to Prepare a Simple Supplier Report (Low Effort, High Value)

A supplier report does not need to be long or complicated. Most SMEs manage with 2–4 pages or a structured template. Below is a simple approach.

Step 1 — Gather your core numbers

Collect:

12 months of electricity and gas invoices
Fuel receipts or fleet mileage
Waste contractor summaries
Water bills
Workforce headcount
Safety incident logs

This is usually 1–2 hours of work the first time.

Step 2 — Convert your numbers into basic disclosures

Examples:

Electricity: 38,200 kWh
Gas use: 9,800 kWh
Waste: 6.2 tonnes (90% non-hazardous)
Water withdrawal: 120 m³
Employees: 12 (7 men, 5 women)
Safety incidents: 0 lost-time injuries

Step 3 — Use the VSME structure

The simplest option is the VSME Basic Module, whose eleven disclosures (B1 to B11) cover exactly what large companies are entitled to ask for under the value-chain cap.

Its structure mirrors the expectations under CSRD, making it easy for procurement and sustainability teams to use.

If you want a deeper overview of the Basic Module, you can explore: CSRD for Beginners: A Plain-Language Guide for Small Businesses

Step 4 — Publish your report annually

You do not need a website or fancy layout. A PDF or shared document with the latest year’s numbers is enough.

Step 5 — Keep everything consistent year to year

Consistency is more important than perfection. Buyers look for clarity, not complexity.

7. Free Sample Supplier Disclosure (Simple & Reusable)

Below is a short, fictional supplier disclosure SMEs can use as a base.

# Supplier Sustainability Disclosure (Sample)

Company: BrightLine Fabrication Ltd
Year: 2024
Employees: 14 (8 men, 6 women)
Location: Denmark

## Environmental Data
- Electricity consumption: 42,300 kWh (grid supply)
- Gas consumption: 7,900 kWh
- Scope 1 emissions: 1.9 tCO2e (estimated)
- Scope 2 emissions: 8.6 tCO2e (location-based)
- Waste: 4.8 tonnes (4.4 t non-hazardous, 0.4 t hazardous)
- Waste recycled: 71%
- Water withdrawal: 98 m³

## Workforce & Social Data
- Total employees: 14 (all permanent)
- Training hours: 212 hours in 2024
- Lost-time injuries: 0
- Overtime practices: monitored monthly, capped by policy
- Collective bargaining: Covered under national agreement

## Governance & Business Conduct
- Anti-corruption policy: Yes
- Data protection officer: Appointed
- Fines or convictions: None

## Sustainability Initiatives
- Replaced three gas heaters with electric models
- Introduced monthly energy tracking
- Evaluating rooftop solar for 2026

This data is provided to support clients’ sustainability reporting obligations (including CSRD).

This simple structure meets 90% of common procurement requests and aligns with both ESRS and VSME expectations.

Frequently Asked Questions

Will CSRD require SMEs to publish full sustainability reports?

No. Since the Omnibus I directive took effect in March 2026, no SME is required to report under CSRD — the earlier plan to phase in listed SMEs was dropped. SMEs can use the VSME Standard, which is voluntary and much lighter. For a comparison, see: CSRD vs VSME: Which Applies.

What happens if a supplier cannot provide emissions data?

Large companies will often use estimates, but repeated gaps may lead to risk flags or procurement disadvantages. SMEs do not need perfect data — reasonable estimates are acceptable. For help choosing emission factors, see: Emission Factor Selection: How to Choose Data Sources.

Why are clients asking multiple times for similar data?

Procurement, sustainability, finance, and audit teams all need aligned information. Preparing a simple annual supplier report prevents repeated ad-hoc requests.

Key Terms

CSRD — Mandatory EU sustainability reporting for large companies.
ESRS — Detailed standards used under CSRD.
VSME — Voluntary reporting standard for non-listed SMEs.
Scope 3 — Indirect emissions from the supply chain.
Supplier data — ESG information required from businesses providing goods or services.

Conclusion & Next Steps

Supplier expectations are settling into a clear shape. Large companies must publish CSRD-aligned disclosures, they cannot complete them without input from suppliers, and from financial year 2027 the value-chain cap defines exactly how much they may ask of you. Buyers are rebuilding their questionnaires around that ceiling now, so a supplier who can already answer in VSME structure is ahead of the curve.

Your business does not need complex tools or consultants to keep up. A simple annual file using the VSME Basic Module structure is enough to satisfy most buyers.

If you would rather not build it by hand, a free VSME report tool walks you through every Basic and Comprehensive Module question in plain English and generates the finished report at no cost. The answers you save become reusable, so the next customer questionnaire starts half-answered.

To continue, you may want to revisit: How SMEs Can Handle Sustainability Data Requests from Large Clients