What sustainability reporting actually involves

Sustainability reporting is the structured disclosure of a company's environmental, social, and governance performance to stakeholders, investors, regulators, customers, employees, and civil society. It encompasses selecting appropriate frameworks (CSRD/ESRS, GRI, ISSB, TCFD), collecting and verifying the data required by those frameworks, producing the report narrative, managing the assurance process, and publishing in the format and channel required by applicable regulations. For most large companies, sustainability reporting has shifted from a voluntary communications exercise to a regulated compliance activity with the same legal weight as financial reporting.

Why it's harder in practice than it looks

The regulatory landscape is demanding and still evolving

CSRD requires double materiality assessment, ESRS-aligned disclosure, iXBRL digital tagging, and third-party assurance, requirements that are technically complex and new for most sustainability teams. Alongside CSRD, companies must navigate SECR, CDP, TCFD/ISSB, and investor-specific requirements that overlap but do not perfectly align. Building a disclosure architecture that satisfies all applicable requirements without redundant data collection is itself a specialist exercise.

Data infrastructure is typically not built for report-quality disclosure

Sustainability data is collected across multiple business functions, finance, HR, operations, procurement, facilities, using different systems, methodologies, and quality standards. Aggregating this data into a coherent, internally consistent, and assurance-ready report requires investment in data governance that most sustainability teams have not historically had to build.

Assurance requirements raise the bar for everything upstream

Third-party assurance of sustainability reports, required under CSRD and increasingly expected by investors, demands that companies can evidence their data with audit trails, document their methodology, and demonstrate internal review and approval processes. Everything that sustainability teams have historically produced informally now needs to meet the standards of auditable financial data.

Stakeholder expectations for specificity and comparability are rising

Generic qualitative disclosures, we are committed to reducing our environmental footprint, no longer satisfy institutional investors, who want quantified, comparable, time-series data on specific metrics. The bar for what constitutes a meaningful report has risen significantly in three years and continues to rise as reporting frameworks develop.

Connecting sustainability data to financial performance remains rare but is increasingly expected

The most credible sustainability reports explain not just what the company's environmental and social performance is, but what it means financially, how climate risks affect asset valuations, how supply chain social risks affect cost of goods, how energy efficiency investments affect operating margins. Building these connections requires collaboration between sustainability, finance, and risk functions that few companies have yet established.

What good looks like

A high-quality sustainability report is grounded in a rigorous double materiality assessment, uses frameworks appropriate to the company's regulatory obligations and investor base, presents verified data with documented methodology, is internally consistent with financial statements and investor presentations, discloses uncertainties and limitations honestly, and explains the connection between sustainability performance and financial outcomes. The report is produced through a documented process with clear ownership, board oversight, and external assurance. It is published in a timely, accessible format and is designed to be genuinely informative rather than primarily defensive.

When to bring in external support

Sustainability reporting project management, framework alignment, data quality assessment, assurance preparation, and iXBRL technical requirements all benefit from specialist support. Companies that attempt to build CSRD-compliant reporting capability entirely in-house from scratch consistently take longer and produce lower-quality first reports than those who bring in experienced external specialists for the first two to three reporting cycles.

Leafr's network includes sustainability reporting specialists with deep expertise across CSRD, GRI, ISSB, and TCFD, with experience supporting companies in financial services, manufacturing, retail and professional services, including clients such as Vodafone and Melrose Plc, from first-time reporters through to programmes improving existing disclosure quality. Engagements start within 48 hours.

Frequently asked questions

What is sustainability reporting and why is it becoming mandatory?

Sustainability reporting is the structured disclosure of a company's environmental, social, and governance performance. It is becoming mandatory because capital markets, regulators, and society increasingly require companies to be accountable for their environmental and social impacts, not just their financial performance. CSRD in the EU applies to approximately 50,000 companies and represents the most significant expansion of mandatory sustainability disclosure ever introduced. The UK is developing comparable requirements for listed and large private companies.

What frameworks must companies use for sustainability reporting?

Mandatory framework requirements depend on the company's jurisdiction, listing status, and size. EU companies in scope of CSRD must report under ESRS. UK companies with significant institutional investors should align with ISSB standards and TCFD. CDP disclosure is effectively mandatory for companies with major institutional shareholders or corporate supply chain customers. GRI remains the most widely used voluntary framework globally. Most large companies need a disclosure architecture that satisfies multiple frameworks simultaneously.

What does sustainability report assurance involve?

Assurance is an independent review of sustainability reports by a qualified third party, either a specialist sustainability assurance provider or an accounting firm. Limited assurance provides moderate confidence that reported information is free from material misstatement; reasonable assurance (equivalent to a financial audit) provides higher confidence. CSRD requires limited assurance from the first reporting year. Preparing for assurance requires documenting data sources and collection methodology, establishing internal review processes, and working with the assurance provider from early in the reporting process rather than engaging them only at draft stage.

How do companies align sustainability reporting with financial reporting?

Alignment requires sustainability data to be collected on the same organisational boundary, reporting period, and timeline as financial data. It requires sustainability teams and finance teams to work together on methodology decisions, such as Scope 2 accounting treatment and Scope 3 boundary setting, that have financial statement implications. For CSRD, sustainability disclosures appear in the management report alongside financial statements and are subject to the same board approval and assurance oversight as financial reporting. The first organisations to achieve genuine integration treat sustainability as a second set of accounts rather than a separate exercise.

What is iXBRL and why does it matter for CSRD?

iXBRL (Inline eXtensible Business Reporting Language) is a digital reporting standard that makes sustainability disclosures machine-readable by embedding structured data tags within human-readable HTML reports. CSRD requires sustainability reports to be published in iXBRL using the ESRS taxonomy developed by EFRAG, which allows regulators, investors, and data providers to extract specific data points automatically without manual processing. Producing iXBRL-tagged reports requires either specialist software and tagging expertise or an external provider, it is a technical capability that most sustainability teams do not have in-house.

How long does it take to produce a first CSRD-compliant report?

For companies starting from scratch, the full programme, including double materiality assessment, data gap closure, internal controls development, assurance provider engagement, report drafting, and iXBRL tagging, typically takes 12 to 18 months from initiation to publication. Companies that begin this process in the same year they are first required to report will face significant challenges meeting publication deadlines without compromising quality. The preparation work should ideally begin at least 18 months before the first required publication date.

What are the consequences of non-compliance with CSRD sustainability reporting requirements?

CSRD enforcement is at member state level, and penalties vary by jurisdiction. EU member states are required to introduce effective, proportionate, and dissuasive penalties including administrative fines, public disclosure of violations, and temporary bans on activities in serious cases. Reputational consequences of non-disclosure or materially deficient disclosure are likely to be significant, particularly for companies whose investors, lenders, or customers require CSRD-aligned information for their own regulatory compliance.