One VSME Report for Every ESG Request: The Value-Chain Cap

Small businesses have complained for years that every large customer asks for the same sustainability data in a different format: one spreadsheet here, one portal there, a bank form in between. Since 2026, EU law has taken their side. There is now a legal ceiling on what a CSRD-reporting company may ask of its smaller business partners, and that ceiling is defined by a single document: the VSME standard.

The practical consequence is the point of this article. If the maximum any CSRD reporter may require from you is the VSME disclosure set, then one well-prepared VSME report is, by construction, a valid answer to nearly every request. This page explains the legal chain behind that claim, its honest limits, and how to use it.

The Legal Chain, Step by Step

1. CSRD makes large companies report on their value chains. Companies with more than 1,000 employees and net turnover above €450 million must report under the Corporate Sustainability Reporting Directive, including impacts that sit with their suppliers. That is why ESG questionnaires arrive in SME inboxes.

2. Omnibus I caps what they may ask. The Omnibus I directive (Directive (EU) 2026/470, in force 18 March 2026) added a statutory limit: for CSRD purposes, a reporter may not require more sustainability information from a business partner with fewer than 1,000 employees than the voluntary SME standard defines. The cap protects roughly every supplier below the CSRD thresholds; the directive calls them “protected undertakings”.

3. A delegated act pins the cap to VSME. On 3 July 2026 the European Commission adopted the delegated act turning EFRAG’s VSME standard into the official voluntary standard (VS). The cap’s ceiling is fixed to the standard’s Annex II, with a lower ceiling still for micro-enterprises of 10 or fewer employees. It applies fully to financial years starting 1 January 2027, with early adoption possible from 2026.

The chain ends in a simple place: the law defines a maximum, and the maximum is a document you can complete. Our guide to what the Omnibus changed covers the wider reform.

What This Means in Practice

A complete VSME report covers the Basic Module’s eleven disclosures (general information, energy and emissions, pollution, biodiversity, water, waste, workforce, and governance) and optionally the Comprehensive Module’s further nine. Held against the cap, that report becomes three things at once:

• A standing answer. When a questionnaire arrives, the data it may lawfully demand is data your report already contains. Answering becomes mapping, not researching.
• A negotiating position. If a request goes far beyond the VSME set, you can offer the report and ask which specific extra fields are genuinely needed, and on what basis. From FY2027, “the cap” is a complete answer to over-broad demands.
• A credential. Sending a finished, structured report unprompted reads very differently from returning a half-filled spreadsheet. Many suppliers now attach theirs to tenders and onboarding packs.

For choosing between the two module levels, see VSME Basic vs Comprehensive.

The Honest Limits

The cap disciplines requests; it does not eliminate them. Four categories lawfully survive it, and you should expect to keep seeing them:

1. Climate targets and climate risks. VSME Comprehensive disclosures C3 and C4 sit outside the cap. They are also the datapoints banks and large buyers want most, which is a good argument for completing them even though they are outside the Basic Module.
2. Sector-customary information. Data customarily exchanged in your industry (product compliance in automotive chains, traceability in food) may still be requested.
3. Other EU law. Requests grounded in taxonomy, banking regulation, or due-diligence legislation are outside the cap’s scope.
4. Platform assessments and product footprints. EcoVadis and CDP invitations continue, and product-level Scope 3 data may still be sought. The good news: since its Q1 2026 methodology update, EcoVadis formally recognises VSME, so a Basic-aligned report earns up to 75 of 100 on its reporting indicator, and Basic plus Comprehensive up to 100. Your one report now works inside the platforms too.

One more honesty note on timing: buyer behaviour is catching up with the law. Many questionnaires in circulation were designed before the cap and still exceed it. Expect a mixed picture through 2026, converging as the FY2027 start date forces redesigns.

How to Put This to Work

1. Prepare the report once. Gather the year’s figures (energy, water, waste, workforce, governance) from records you already hold. Most small businesses need a few days of part-time effort; our step-by-step questionnaire guide walks the same ground.
2. Add C3 and C4 if a bank or major buyer is in the picture. They sit outside the cap and will be asked for regardless.
3. Answer every request from the same answers. Keep each figure, with its source and methodology note, in one place. An ESG answer bank makes the reuse systematic, and a free VSME report tool generates the finished report from those answers at no cost.
4. Push back politely on overreach. Offer the report; ask which extra fields are needed and why. Most buyers accept, because a complete VSME response is better than what most suppliers send them.

Frequently Asked Questions

Is the value-chain cap actually binding, or just a recommendation?

It is binding. The cap sits in the CSRD itself, as amended by Omnibus I (Directive (EU) 2026/470, in force since 18 March 2026), and the delegated act of 3 July 2026 fixes its ceiling to the voluntary standard’s Annex II. There was also an earlier, non-binding step: a July 2025 Commission Recommendation asking companies and banks to hold to VSME voluntarily. The cap replaced persuasion with law.

Does the cap mean my customer must accept my VSME report?

Not literally: the cap limits what they may require, not the file format they prefer, so a customer may still ask you to key the same data into their portal. In practice a VSME report contains the answers, so the work reduces to copying from your own document. Buyers redesigning questionnaires for FY2027 are increasingly accepting the report itself.

What can a customer still ask for beyond VSME?

Climate targets and climate risks (C3/C4), information customarily exchanged in your sector, data required by other EU law, and product-level Scope 3 figures. Platform assessments such as EcoVadis also continue, though VSME content now earns credit inside them. Everything else, from a CSRD reporter to a sub-1,000-employee partner, is capped at the VSME set.

When does the cap fully apply?

The cap has been law since 18 March 2026, and the delegated act defining its ceiling applies to financial years starting 1 January 2027, with early adoption from 2026. Treat 2026 as the transition year: the legal position is set, and questionnaires are being rewritten around it.

Key Terms

• Value-chain cap — the statutory limit on the sustainability information a CSRD reporter may require from business partners with fewer than 1,000 employees.
• Protected undertakings — the directive’s term for those sub-1,000-employee partners.
• VSME / VS — EFRAG’s Voluntary Sustainability Reporting Standard for SMEs; adopted by delegated act in July 2026 as the “voluntary standard” whose Annex II defines the cap.
• Omnibus I — Directive (EU) 2026/470, in force 18 March 2026, which narrowed CSRD scope and created the cap.
• C3 / C4 — the VSME Comprehensive disclosures for climate targets and climate risks, which sit outside the cap.

Conclusion

The value-chain cap turned a fair complaint into a legal position: smaller businesses cannot be made to carry ESRS-depth reporting for their customers’ benefit. The same law that protects you also hands you a strategy. Prepare one VSME report, keep its answers ready for reuse, and let the ceiling the EU wrote do the standardising.

If a questionnaire is sitting in your inbox now, start with the step-by-step answering guide; if you want the requester’s-side view, our guide to what large customers can ask suppliers covers the same boundary from the other direction.