What CDP disclosure actually involves

CDP (formerly the Carbon Disclosure Project) is a global disclosure platform through which companies respond annually to questionnaires on climate change, water security and forests. Responding is voluntary for most companies, though institutional investors representing trillions in assets under management request disclosure, which creates significant commercial pressure. Responses are scored by CDP from D to A, and the methodology rewards not just data quality but management quality, governance structures, targets, scenario analysis, and supplier engagement. Many supply chain operators now require their key suppliers to respond to CDP through the Supply Chain Programme.

Why it's harder in practice than it looks

The questionnaire is substantially longer and more technical than it appears

The CDP Climate Change questionnaire runs to more than 60 questions, many with multiple subparts. High-scoring sections on governance, risk management and scenario analysis require detailed qualitative responses that cannot be written from scratch at submission time, they require underlying processes to exist within the business.

Scoring methodology changes annually and catches companies out

CDP updates its scoring criteria each year. Companies that achieved a B or A in a previous year sometimes find their score drops not because their practice deteriorated but because the scoring became more demanding. Keeping up with methodology changes requires active monitoring of CDP guidance documentation.

Supplier engagement scores require programme evidence

CDP Climate asks companies about their supplier engagement on climate, and high scores require evidence of a structured supplier programme, not just a commitment to engage. Companies that have not built out supply chain engagement processes typically score poorly on this module.

Scenario analysis is technically demanding for non-specialist teams

CDP requires companies to disclose how they have identified and assessed climate-related risks using climate scenarios (aligned with TCFD). Producing meaningful scenario analysis rather than generic narrative requires climate science literacy, financial modelling capability, and sector-specific risk knowledge that most sustainability teams do not hold in-house.

What good looks like

A well-run CDP response is prepared over several months, not weeks. It is grounded in actual internal processes, a climate governance structure with board-level oversight, a documented risk management process that integrates climate risks into enterprise risk management, quantified Scope 1, 2 and 3 emissions, SBTi-aligned targets, and a supplier engagement programme with tracked progress. Companies achieving A scores typically have all these processes embedded rather than created for the purpose of the response.

When to bring in external support

Companies disclosing for the first time, those seeking to improve from C or B to A level, and those receiving supply chain requests from key customers all benefit from specialist support. Leafr's network includes CDP specialists who have supported companies across multiple sectors and scoring improvement projects, typically improving scores by one or two bands within a single reporting cycle.

Frequently asked questions

What is CDP and why does it matter commercially?

CDP is the world's largest environmental disclosure platform, used by over 23,000 companies globally. It matters commercially because institutional investors use CDP scores as a proxy for climate risk management quality, and major corporations, including Walmart, Unilever and Apple, require their supply chain partners to disclose through CDP's Supply Chain Programme. A poor CDP score or non-disclosure can affect supplier qualification decisions and access to capital.

How is CDP scored?

CDP scores range from D- (minimum) to A (leadership), passing through Awareness (D, C), Management (B) and Leadership (A) bands. Scores are based on the completeness and quality of responses, with higher bands requiring evidence of mature governance, quantified targets, supplier engagement and climate scenario analysis. The full methodology is published annually and has become progressively more demanding.

Is CDP disclosure mandatory?

CDP disclosure is not legally mandatory in most jurisdictions, but it is effectively mandatory for companies with significant institutional investors or large corporate customers who require it. CSRD-aligned companies are also expected to align their disclosures with CDP, and regulators in various markets are increasingly referencing CDP as a disclosure standard.

What is the CDP Supply Chain Programme?

The CDP Supply Chain Programme allows corporations to request environmental disclosure from their suppliers through the CDP platform. Suppliers receive the questionnaire on behalf of their customers and respond using the standard CDP format. Companies not responding to supply chain requests risk being excluded from preferred supplier lists or penalised in supplier scorecards.

How often do companies need to disclose to CDP?

CDP operates an annual disclosure cycle, with questionnaires typically opening in April and responses due in July. Scores are published in the autumn. Companies responding to the climate questionnaire should expect to spend significant staff time on preparation and should treat it as a year-round process of data collection and process improvement rather than an annual scramble.