“My Customer Sent an ESG Spreadsheet”: a 30-Minute Triage

It arrived this morning: a spreadsheet with tabs called “Environment”, “Social”, and “Governance”, a covering email from a customer’s procurement team, and a deadline. You have never measured an emission in your life, and the sender matters to your revenue.

Here is what the next 30 minutes should look like. Not answering the questionnaire — that comes later, and takes days, not hours — but triaging it: understanding what you are holding, what it will genuinely take, and sending the one reply that puts you in control of the timeline.

The short version: this is routine, it is answerable from records you already hold, you almost certainly have no legal obligation of your own, and there is a legal cap on what the sender may demand. Now the 30 minutes.

Minutes 0–5: Identify What This Is

Read the covering email, not the spreadsheet. Establish three things:

• Who wants it and why. Almost always, your customer reports under the EU’s CSRD or is preparing to, and their report must cover their supply chain. Your data feeds their disclosure; you are not being audited and you are not filing anything.
• What kind of request it is. A one-off onboarding form, an annual refresh, or an invitation to a platform (EcoVadis, CDP, a supplier portal). A spreadsheet attached to an email is the most common and the most flexible kind.
• The deadline, and its softness. Two to three weeks is typical, and extensions are routinely granted. Note it; you will use it in minute 25.

If the sender is a bank rather than a customer, the shape is similar but the emphasis differs; see bank ESG questionnaires for SMEs.

Minutes 5–15: Skim and Sort the Questions

Do not answer anything yet. Go through the questions once, fast, sorting each into one of four buckets:

Two reassurances as you sort. First, most spreadsheets are padded with questions that do not apply to your sector; “not applicable” with a one-line reason is a legitimate answer. Second, EU law caps what a CSRD reporter may require from a business partner with fewer than 1,000 employees at the VSME standard — a defined, finite disclosure set. If the spreadsheet demands far more, that is their problem to justify, not yours to absorb; see how the value-chain cap protects you.

Minutes 15–25: Size the Real Work

Count what landed in each bucket and convert to effort:

• Buckets 1 and 2 are clerical: finding documents and copying figures. For most small businesses this is a few hours.
• Bucket 3 is arithmetic with published emission factors: bills × factor = tonnes. Budget half a day the first time; our Scope 1 vs Scope 2 guide covers the split every spreadsheet asks for.
• Bucket 4 is judgement: what to estimate, what to answer “not yet tracked, planned for next year”. An honest gap with a plan reads as competence, not failure.

A typical first questionnaire for a 20–100-person business is two to four days of part-time effort spread over two weeks. It is not a consulting project, and nothing in it requires software you do not own. If the count says otherwise — hundreds of fields, product-level carbon data — that is your cue to query scope rather than start typing.

Minutes 25–30: Send the Reply That Buys Control

One short email now does more for the relationship than a perfect submission later:

Thank you for the questionnaire — we’re glad to support your reporting. To make sure our data matches what you need: could you confirm the reporting period, and whether estimates are acceptable where we don’t yet have measured figures? We expect to return the completed sheet by [date ~3 weeks out]; let us know if you need any sections sooner.

This does four quiet things: confirms you will cooperate, fixes the period before you gather anything, legitimises estimates (the answer is essentially always yes), and sets a realistic date instead of accepting a panicked one.

Then close the spreadsheet for today. The triage is done.

After the Triage

When you sit down to answer properly, work through our step-by-step guide to answering a supplier ESG questionnaire — it picks up exactly where this page stops, with the data-gathering order, estimation rules, and methodology notes.

And keep one principle from day one: every answer you write will be asked again, by another customer, a bank, or the same customer next year. Store each answer with its source once — an ESG answer bank exists for precisely this — and the second questionnaire starts nearly finished. A free VSME report tool turns the same answers into a finished report at no cost, which is worth attaching to your response as a standing credential.

Frequently Asked Questions

Do I have to fill it in at all?

There is no legal duty on you; the reporting obligation belongs to your customer. Commercially, though, responses feed onboarding and renewal decisions, so ignoring it risks the relationship. If capacity is the issue, a partial response with a plan beats silence by a wide margin.

What if the deadline is one week away?

Reply today asking for the time you actually need, with a specific date and, if helpful, an offer to return the easiest sections first. Procurement teams chase hundreds of suppliers and build slack into their timetables; a prompt, realistic reply is treated far better than a missed deadline or a rushed, inconsistent one.

The spreadsheet asks for our carbon footprint. We have never measured one — is that a dealbreaker?

No. Scope 1 and 2 emissions are calculated from your fuel and electricity bills using published factors, which is arithmetic, not science. Where you genuinely have no data, the VSME standard and virtually every buyer accept documented estimates or an honest “not yet tracked”. First-time responders are the majority, not the exception.

Should we pay a consultant to handle it?

For a standard supplier questionnaire, usually not: the data comes from your own bills and payroll, and the format is learnable in an afternoon. Consider help only for genuinely complex cases — multi-site manufacturing, product-level carbon data, or a bank request tied to financing. Do the triage first; it tells you which case you are in.

Key Terms

• ESG questionnaire — a structured request for environmental, social, and governance data, sent by customers or banks to suppliers and borrowers.
• CSRD — the EU law requiring companies with more than 1,000 employees and net turnover above €450 million to report on their value chains. The reason the spreadsheet exists; not a law that applies to you.
• Value-chain cap — the EU limit, in force since March 2026, on what a CSRD reporter may require from partners with fewer than 1,000 employees: the VSME disclosure set.
• VSME — the voluntary EU reporting standard for SMEs; the shape most questionnaires are converging on, and the ceiling the cap enforces.
• Scope 1 and Scope 2 — emissions from fuel you burn and electricity you buy: the two figures every spreadsheet requests, both derived from bills.

Conclusion

An unexpected ESG spreadsheet feels like an exam; it is actually admin with unfamiliar vocabulary. Thirty minutes of triage — identify, sort, size, reply — converts it from a threat into a scheduled task, and the reply email puts the timeline back in your hands.

The longer game starts with the first answer you write: store it once, reuse it everywhere, and the spreadsheets that follow this one arrive pre-answered.