CSR has long existed as a statement of intent, filed alongside the income statement. In 2026, it shifts into mandatory reporting: the CSRD directive transforms sustainability commitments into audited data, structured according to European standards and published alongside financial accounts. The framework has even been streamlined: the 2025 "Omnibus" package reduced the number of companies in scope and pushed back the deadline by two years for the second wave, but it did not eliminate the obligation. It concentrated it on structures that truly carry weight. This white paper tackles the subject from the ground up: what the CSRD says today, how to build a credible carbon footprint assessment, where genuine decarbonisation begins relative to offsetting, and how spend and mobility data becomes the foundation of scope 3. The thread running through it all: corporate CSRD reporting is not something to be endured. It is designed as a management system that serves strategy, not just the compliance officer.
- CSRD framework (Omnibus, ESRS, double materiality), scopes 1/2/3 of the GHG Protocol, carbon footprint assessment, decarbonisation, measurable impact: the five links of a corporate CSRD reporting approach that can be demonstrated.
- Each standard opened without a method (an ESRS without the GHG Protocol) weakens the whole. The articulation of frameworks is what makes a file robust.
- Scope 3 accounts for an average of 75% of a company's footprint: CSR cannot be managed without the spend and mobility data that feeds it.
CSR and CSRD by the Numbers (2026)
Before discussing methodology, let us consider the scale. The "Omnibus" package adopted by the European Union dramatically narrows the CSRD's scope: only companies with more than 1,000 employees and more than €450 million in annual revenue remain in scope, meaning roughly 80% of previously covered companies fall out[1]. The "Stop the Clock" directive, which entered into force on 18 April 2025, also defers application to second-wave companies by two years, now expected to report on the 2027 financial year[2]. The simplification is real, but the obligation remains for the groups that matter.
On the standards side, the ESRS adopted by the European Commission in December 2023 articulate 12 standards (2 cross-cutting and 10 topical) that break down into 84 disclosure requirements and approximately 1,144 data points[3]. The scale explains why corporate CSRD reporting cannot be handled at year-end: the bulk of the work lies in the double materiality assessment and upstream data collection, not in the final write-up. And on the climate side, the data speaks for itself: scope 3 emissions account for an average of 75% of a company's total footprint[4], and sometimes more than 90% for food groups tested by the GHG Protocol[5]. Any CSR approach that ignores this perimeter misses the point entirely.
The Pillars of a Demonstrable CSR Approach
1. The CSRD framework and ESRS standards. The CSRD requires in-scope companies to publish a sustainability report alongside their annual accounts, in accordance with the ESRS and subject to a limited assurance audit. The 2025 Omnibus package raised the thresholds to 1,000 employees and €450 million in annual revenue[1], and an agreement between the three European institutions in December 2025 confirmed simplified requirements. The lesson is not "less CSR" but "less empty reporting": for companies that remain in scope, the structuring effort is unchanged. This is what our analysis details on what the CSRD changes for mid-sized companies in France.
2. Double materiality. This is the cornerstone of the ESRS. A company must assess each topic from two angles: impact materiality (the effect of its activities on the environment and society) and financial materiality (the effect of sustainability issues on its performance). Only information deemed material under this double criterion needs to be disclosed[6]. In practice, this analysis is not conducted in a management meeting: it mobilises internal and external stakeholders, documents the methods used, and prioritises topics. It is what transforms a declarative CSR approach into a manageable system, and what shields companies from greenwashing accusations.
3. Scopes 1, 2 and 3 of the GHG Protocol. The GHG Protocol is the global standard for emissions accounting, and it structures the carbon inventory behind the ESRS. Scope 1 covers direct emissions (on-site combustion, owned fleet), scope 2 covers indirect emissions related to purchased energy (electricity, heat), and scope 3 covers other indirect emissions across the value chain: purchases of goods and services (category 1), business travel (category 6), upstream transport, use of sold products[7]. This last perimeter carries the lion's share of emissions. The reference guide remains our practical guide to scopes 1, 2 and 3 in business.
4. The carbon footprint assessment. The French regulatory greenhouse gas (GHG) assessment, governed by Article L. 229-25 of the Environmental Code and Decree No. 2022-982, applies to private legal entities with more than 500 employees in metropolitan France (250 in overseas territories), with renewal every four years[8]. The BEGES-R method requires precise granularity by category. But the value of a carbon footprint assessment goes beyond legal compliance: it is the snapshot that reveals where to act. An assessment without an action plan is a dead document; one that feeds a decarbonisation roadmap becomes a strategic management tool.
5. Decarbonisation and carbon offsetting. The order is immutable: measure, reduce, and then offset, as a last resort for irreducible residual emissions. Offsetting can never substitute for actual emissions reductions, and regulators as well as standard-setters (SBTi, GHG Protocol) are explicit on this point[9]. A strategy that begins with offsetting before mapping emissions loses all credibility. To build a credible plan, an inventory of available tools is worthwhile: our top 10 tools to reduce your company's carbon footprint covers the operational levers.
6. Measurable impact. This is the final test. A CSR approach that does not translate into tracked indicators, compared year on year, remains window dressing. Corporate CSRD reporting imposes precisely this discipline: data traceability, consistent calculation methods, year-on-year comparability. And when an associated giving programme is in place (such as the 1%ForAll® programme, which allocates 1% of every transaction to the Greenway Foundation), impact is measured in euros donated and projects funded, not intentions.
The Cost of Approximation
Most CSR approaches suffer from the same flaw: they rely on data reconstructed after the fact. As the deadline approaches, teams gather disparate files, multiply assumptions, and produce an approximate assessment that satisfies the formality without informing decision-making. The cost is not just time. It is credibility. A statutory auditor reviewing manually reconstructed data will ask questions. An investor comparing two financial years with shifting perimeters will conclude there is a lack of transparency.
CSR data is built at the source, not at the end of the process. CSRD reporting is won upstream: capturing spend, mobility and energy as they occur, within a structured reference framework, transforms a regulatory obligation into a management tool.
The concrete challenge is scope 3. Purchases of goods and services and business travel account for the majority of indirect emissions, and they are calculated from spend data itself: a supplier purchase, a train ticket, a hotel night. A company that categorises its expenses as they arise already holds usable raw material for its carbon inventory. One that reconciles everything annually pays for data collection every year. Sustainability starts here, with exploitable spend data, as illustrated by our approach to the corporate card in service of CSR.
Carbon Offsetting: The Misunderstood Lever
Carbon offsetting is arguably the most poorly handled topic in CSR. Presented as a solution, it has become a communication marker, and conversely the systematic target of criticism. The reality comes down to a hierarchy: reduce first, offset second. Buying credits against a perimeter you have not measured is building a roof without walls.
Technically, the quality of an offset credit is judged against three criteria: additionality (the project would not have existed without the financing), permanence (the stored carbon does not re-enter the atmosphere), and the absence of leakage (a reduction on one side does not create an emission elsewhere). Serious standards (the French low-carbon label, international certifications) address these points. The SBTi is clear that credits do not count towards the reduction trajectory: they cover the residual, they do not replace it[9].
Offsetting without reducing is deferring. A credit buyer that does not publish its decarbonisation roadmap risks accusations of greenwashing and, under the French Climate and Resilience Act, potential criminal liability for misleading environmental claims.
This is the line that separates credible approaches from the rest. A company that publishes its scopes, its trajectory, and additionally runs an offsetting programme for its residual emissions tells a coherent story. A company that displays credits with no carbon assessment has nothing to say.
The Link Between Spend, Mobility and Scope 3
If scope 3 accounts for 75% of the average footprint, it is not by chance: that is where procurement, upstream logistics and business travel live. The operational consequence is direct: everything that structures spend and mobility data also structures climate reporting. A fleet managed down to the litre, categorised expense reports, a fuel card that isolates fuel spend: each of these levers feeds both management control and the carbon inventory.
This is the blind spot for many finance departments. Spend is treated as an accounting object, carbon as a CSR object. In practice, they share the same raw material. The integrated approach means categorising once, to serve two outputs: accounting and the GHG inventory. On this model, the corporate card in service of CSR illustrates how a single payment instrument feeds scope 3 without double entry.
Scope 3 calculation relies, in the absence of primary supplier data, on emission factors applied to amounts spent. The finer the spend category, the more accurate the result. The more aggregated it is, the wider the approximation. This is why a poorly categorised expense produces an approximate carbon assessment. It is also why structuring a spend reference framework is a CSR investment, not just a finance one.
The Checklist for an Auditable Corporate CSRD Report
To move from declarative CSR to a defensible report, seven concrete checks make all the difference:
- Confirm your CSRD scope. Above 1,000 employees and €450M in revenue, you are in scope. Below that, check the Omnibus transitional provisions[1].
- Conduct the double materiality assessment with stakeholders, and document the method: it is what filters the 1,144 data points down to only those required[3].
- Adopt the GHG Protocol as the foundation of your carbon inventory, and clearly separate scopes 1, 2 and 3[7].
- Structure spend and mobility data in a single categorised reference framework, reusable for scope 3.
- Set a decarbonisation roadmap before purchasing any offset credits[9].
- Check your GHG assessment obligations above 500 employees (Decree No. 2022-982), with the four-year renewal cycle[8].
- Stabilise your calculation methods from one year to the next. Comparability is as important as absolute precision.
The Regulatory Framework That Sets the Rules
The CSRD does not stand alone. It sits within a coherent regulatory edifice: French Decree No. 2022-982 on GHG assessments[8], the CS3D directive on corporate due diligence, the European greenwashing regulation, and the French Climate and Resilience Act with its criminal provisions on eco-washing. Taken together, these texts state a simple rule: what is published must be provable. The era of communicational CSR is closing.
The Omnibus package eased the timeline, but it did not reverse the trend. Thresholds have been raised, the second wave delayed[2], the ESRS are being simplified, and yet large companies remain required to produce structured, audit-subject reporting aligned with a European framework. For a large group, preparing for the CSRD is no longer a peripheral compliance topic: it is an information systems project.
The same principle applies to suppliers of in-scope companies. An SME that is not itself subject to the CSRD will nonetheless be asked by its clients for its emissions data — this is the value chain effect inherent to scope 3. CSR propagates through the supply chain: better to structure your spend and energy data before your client demands it.
Frequently Asked Questions
Which companies are subject to the CSRD in 2026?
Following the Omnibus package, the CSRD applies to companies with more than 1,000 employees and more than €450 million in annual revenue, which removes roughly 80% of previously covered companies from scope[1]. Large public-interest entities already subject to the NFRD continue to report without interruption.
What is double materiality?
It is the principle that structures the ESRS: information must be disclosed if it is material from an impact perspective (the company's effect on the environment and society) or from a financial perspective (the effect of sustainability issues on performance)[6]. The double materiality assessment determines which topics need to be covered in the report.
What are scopes 1, 2 and 3?
Scope 1 covers direct emissions (combustion, owned fleet), scope 2 covers emissions related to purchased energy, and scope 3 covers other indirect emissions across the value chain: procurement, business travel, transport, use of sold products[7]. This is the GHG Protocol reference framework for carbon inventory.
What share of emissions does scope 3 represent?
On average, scope 3 accounts for approximately 75% of a company's total footprint[4], and sometimes more than 90% in certain sectors, as illustrated by GHG Protocol testing[5]. This is why any serious approach must prioritise it.
Should a company offset its emissions?
Offsetting comes after reduction, never instead of it. The SBTi is clear that credits do not count towards the decarbonisation trajectory and should only cover irreducible residual emissions[9]. Offsetting without having measured or reduced emissions amounts to greenwashing.
Who must produce a GHG assessment in France?
Decree No. 2022-982 requires private legal entities with more than 500 employees in metropolitan France (250 in overseas territories) to produce a GHG emissions assessment, renewed every four years[8]. Public bodies are subject to a three-year renewal cycle.
When should a company start preparing its CSRD report?
The heavy lifting (double materiality, data structuring, inventory methodology) must be prepared during the financial year before the first publication, not at year-end. For second-wave companies, the reference financial year is now 2027 following the "Stop the Clock" deferral[2].
Pillar article — this white paper is the cornerstone of the CSR and CSRD compliance topic cluster.
References
- KPMG, EU agrees Omnibus changes. CSRD: companies with more than 1,000 employees and €450M in revenue. ~80% of companies removed from scope. kpmg.com. ↩
- Sidley, EU Omnibus Package: "Stop-the-Clock" Directive adopted on 14 April 2025. Two-year deferral for second wave (2027 financial year). sidley.com. ↩
- Envoria, How will the ESRS affect your company? 12 ESRS standards (2 cross-cutting + 10 topical), 84 disclosure requirements, ~1,144 data points. envoria.com. ↩
- WeCount / CDP, Scope 3: value chain emissions account for an average of ~75% of a company's total footprint. wecount.io. ↩
- GHG Protocol, Factsheet Corporate Value Chain (Scope 3) Standard: Kraft Foods test. Value chain emissions > 90% of total. ghgprotocol.org. ↩
- EFRAG, IG 1: Materiality Assessment Implementation Guidance. Double materiality (impact + financial) under the ESRS. efrag.org. ↩
- GHG Protocol, Corporate Value Chain (Scope 3) Standard. 15 categories. Category 1 (purchased goods and services) and category 6 (business travel). ghgprotocol.org. ↩
- Légifrance, Decree No. 2022-982 of 1 July 2022 on GHG emissions assessments. Art. L. 229-25. > 500 employees (250 in overseas territories). Renewal every 4 years (private sector). legifrance.gouv.fr. ↩
- Science Based Targets initiative, You, too, can master value chain emissions. Offsetting credits do not count towards the reduction trajectory. They cover the residual. sciencebasedtargets.org. ↩