CSRD & ESRS E1: 12 Terms Supply Chain Leaders Must Know Before 2026 Limited Assurance

68% of CSRD wave-1 filers had to rebuild their Scope 3 inventories from scratch to meet limited assurance requirements ^[1]. CSRD wave-2 companies—those with 250+ employees, €50M+ turnover, or €25M+ balance sheet—face the same challenge in 2026, with supply chain emissions (Scope 3 Category 1: Purchased Goods and Services) typically representing 60–80% of total footprint.

The Corporate Sustainability Reporting Directive (CSRD) requires these companies to report climate data under the European Sustainability Reporting Standards (ESRS), specifically ESRS E1 ^[2]. Unlike voluntary CDP or SBTi submissions, CSRD disclosures undergo limited assurance in 2026, escalating to reasonable assurance by 2028 ^[3]. Most legacy GHG inventories—built on spend-based estimation and supplier surveys with 12% response rates—will not pass.

Supply chain and procurement leaders are now in the hot seat. Auditors will ask: Where is the primary data? What is your tier-2 visibility? How do you document the methodology for each Scope 3 category? Below are 12 terms you will hear in your first ESRS E1 audit—and what they mean for your procurement function.

---

1. Corporate Sustainability Reporting Directive (CSRD)

Plain-English Definition: The EU regulation requiring large companies to disclose sustainability data—including climate emissions—in their annual management reports, subject to third-party assurance.

Worked Example: A German automotive supplier with 400 employees and €80M revenue must file its first CSRD report in 2027 (covering FY 2026). The report includes ESRS E1 climate data, ESRS E2 pollution metrics, and ESRS E3 water disclosures, all audited under limited assurance.

Source Regulation: Directive (EU) 2022/2464, effective for wave-2 filers from FY 2026 onwards ^[2].

---

2. European Sustainability Reporting Standards (ESRS)

Plain-English Definition: The mandatory disclosure framework under CSRD, covering 12 topical standards (E1–E5 environmental, S1–S4 social, G1 governance, plus cross-cutting standards). ESRS E1 (Climate Change) is almost always material and the most technically demanding to implement ^[2].

Worked Example: A Dutch electronics manufacturer determines that ESRS E1, E2 (pollution), and S2 (workers in the value chain) are material through its double materiality assessment. It must then disclose all mandatory data points for those standards, with ESRS E1 requiring Scope 1, 2, and 3 emissions broken down by category.

Source Regulation: Commission Delegated Regulation (EU) 2023/2772. Amended ESRS expected to apply from January 1, 2027 ^[4].

---

3. ESRS E1 (Climate Change)

Plain-English Definition: The climate disclosure standard under ESRS, requiring companies to report gross Scope 1, 2, and 3 emissions, climate-related targets, transition plans, and physical/transition risk assessments.

Worked Example: A French industrial distributor reports:

• Scope 1: 2,400 tCO₂e (fleet and on-site generation)
• Scope 2 (location-based): 8,100 tCO₂e (purchased electricity)
• Scope 3 Category 1: 340,000 tCO₂e (purchased goods)
• Scope 3 Category 4: 52,000 tCO₂e (upstream transport)

The company must disclose the consolidation approach (operational control), the inventory period (calendar year 2026), and the treatment of any carbon credits purchased.

Source Regulation: ESRS E1, part of Delegated Regulation (EU) 2023/2772 ^[2].

---

4. Limited Assurance

Plain-English Definition: The audit threshold applied to CSRD sustainability statements in 2026–2027. Auditors perform procedures to obtain a "moderate level of confidence" that the disclosures are free from material misstatement. This is less rigorous than reasonable assurance but far more demanding than voluntary review.

Worked Example: An assurance provider conducts walkthroughs of the inventory process, tests a sample of 40 invoices from Category 1 Scope 3, recalculates 15% of emissions, and reviews the completeness of category screening. The provider issues a limited assurance opinion stating whether anything has come to their attention indicating the data is materially misstated.

Source Regulation: ISAE 3000 (Revised) and ISAE 3410, referenced in CSRD Article 3(4) ^[3].

---

5. Reasonable Assurance

Plain-English Definition: The higher audit threshold required under CSRD from 2028. Auditors must obtain "high, but not absolute" confidence that disclosures are free from material misstatement—equivalent to financial audit standards.

Worked Example: In 2028, the same assurance provider tests 200+ invoices, recalculates 100% of Scope 1 and 2, performs site visits to three facilities, and confirms with 20 suppliers that emissions factors match contractual data-sharing agreements. The provider issues a positive opinion: "In our opinion, the ESRS E1 disclosures are fairly stated."

Source Regulation: CSRD Article 3(4), mandating reasonable assurance by 2028 ^[3].

---

6. Double Materiality

Plain-English Definition: The CSRD principle requiring companies to assess materiality from two perspectives: (1) impact materiality (how the company affects climate), and (2) financial materiality (how climate affects the company's financial position).

Worked Example: A Belgian packaging supplier identifies ESRS E1 as material under both lenses:

• Impact materiality: Scope 3 emissions from raw materials total 400,000 tCO₂e, representing significant environmental impact.
• Financial materiality: 60% of revenue comes from EU customers subject to CBAM, creating transition risk if emissions intensity remains above sectoral benchmarks.

Because E1 is material, the company must disclose all mandatory E1 data points ^[2].

Source Regulation: ESRS 1, paragraphs 41–48 ^[4].

---

7. Primary Data

Plain-English Definition: Emissions data sourced directly from suppliers, utilities, or carriers, rather than estimated using industry averages or spend-based methods. Auditors require primary data to support audit-ready sustainability reporting.

Worked Example: A procurement team obtains supplier-specific emissions factors for 40 tier-1 suppliers covering 72% of Category 1 spend:

• Supplier A: 0.34 kgCO₂e per unit (from supplier's ISO 14064-verified inventory)
• Supplier B: 0.28 kgCO₂e per unit (from product-level EPD)
• Supplier C: Industry average 0.45 kgCO₂e per unit (primary data not yet available)

The team documents the data source, date received, and methodology alignment in a supplier engagement tracker.

Source Regulation: Not explicitly mandated by ESRS E1, but required to meet limited assurance evidence standards under ISAE 3000 ^[1].

---

8. Scope 3 Category 1 (Purchased Goods and Services)

Plain-English Definition: The GHG Protocol category covering emissions from the production of goods and services purchased by the reporting company. This is typically the largest category for manufacturers, distributors, and retailers.

Worked Example: A Danish furniture manufacturer calculates Category 1 by:

1. Extracting 12,800 purchase orders from the ERP.
2. Matching 8,900 POs (70% of spend) to supplier-specific emissions factors.
3. Using secondary factors from Ecoinvent for the remaining 30%.
4. Aggregating: 340,000 tCO₂e total, with 238,000 tCO₂e from primary data.

The company discloses the percentage of spend covered by primary data (70%) in ESRS E1-6.

Source Regulation: GHG Protocol Corporate Value Chain (Scope 3) Standard, Category 1 ^[1].

---

9. Tier-2 Visibility

Plain-English Definition: The ability to trace emissions or risks beyond direct (tier-1) suppliers to the suppliers of suppliers. Under ESRS E1, companies must assess whether tier-2 data is necessary to fairly represent Scope 3 emissions.

Worked Example: A Swiss electronics company sources PCBs from a tier-1 supplier in Taiwan. The tier-1 supplier purchases rare-earth elements from tier-2 mines in Southeast Asia. The company identifies that 90% of PCB emissions occur at tier-2, so it engages the tier-1 supplier to obtain tier-2 primary data through contractual data-sharing clauses.

Source Regulation: ESRS E1-6, requiring "relevant information about value chain emissions" ^[2].

---

10. Spend-Based Estimation

Plain-English Definition: A Scope 3 calculation method that multiplies procurement spend by industry-average emissions factors (e.g., €1M spend × 0.45 kgCO₂e/€ = 450 tCO₂e). This method inflates footprints by 40%+ compared to primary data and is often rejected under limited assurance ^[1].

Worked Example: A procurement team calculates Category 1 using EXIOBASE factors:

• €10M steel spend × 0.52 kgCO₂e/€ = 5,200 tCO₂e

The auditor notes that this assumes the average EU steel intensity, whereas the company's actual supplier operates an electric arc furnace with 60% lower intensity. The auditor flags this as a material misstatement and requests supplier-specific data.

Source Regulation: GHG Protocol Technical Guidance for Calculating Scope 3 Emissions, Section 7.3 ^[1].

---

11. Low-Carbon Sourcing

Plain-English Definition: Procurement strategies that prioritise suppliers with lower emissions intensity, verified through primary data or third-party certification (e.g., ISO 14064, EPD, EcoVadis carbon module).

Worked Example: A procurement director issues an RFP requiring bidders to disclose product carbon footprints. Three suppliers respond:

• Supplier A: 0.28 kgCO₂e per unit (renewable energy, ISO 14064-verified)
• Supplier B: 0.42 kgCO₂e per unit (no verification)
• Supplier C: 0.35 kgCO₂e per unit (EPD available)

The director awards the contract to Supplier A, citing a 33% emissions reduction relative to the category average and reducing overall Scope 3 Category 1 by 18,000 tCO₂e annually.

Source Regulation: Not mandated by ESRS E1, but linked to transition plan disclosures under ESRS E1-1 ^[2].

---

12. Supplier Engagement

Plain-English Definition: The process of requesting, validating, and integrating supplier-specific emissions data into the company's Scope 3 inventory. Under ESRS E1, companies must disclose their engagement strategy and the percentage of value chain emissions covered by primary data.

Worked Example: A procurement team launches a supplier engagement campaign:

• Sends data request templates to 200 tier-1 suppliers.
• Receives responses from 80 suppliers (40% response rate).
• Validates 60 responses against ISO 14064 or EPD documentation.
• Covers 68% of Category 1 spend with primary data.

The company discloses this 68% coverage rate in ESRS E1-6 and describes its engagement methodology, including contractual data-sharing clauses for new suppliers.

Source Regulation: ESRS E1-6, paragraph 44(c), requiring disclosure of engagement with value chain actors ^[2].

---

Why These Terms Matter for Your 2026 Audit

The shift from voluntary disclosure to mandatory, assured reporting changes the rules. Auditors trained in ISAE 3000/3410 will:

• Test completeness: Did you screen all 15 Scope 3 categories? Can you justify exclusions?
• Sample emissions calculations: Can you reproduce the 340,000 tCO₂e figure from source documents (invoices, BoMs, utility bills)?
• Verify primary data: What percentage of Category 1 is based on supplier-specific factors versus spend-based estimates? Where is the evidence?
• Review methodology alignment: Does your consolidation approach match financial reporting? Are removal and storage disclosures separately stated?

A 2025 survey found that 68% of wave-1 filers rebuilt their Scope 3 inventories to meet these standards ^[1]. Wave-2 filers have 12–18 months to do the same.

"ESRS E1 is the climate change standard. It is technically complex, almost always material under double materiality, and closely scrutinised by auditors, investors, and NGOs. Most large DACH companies already have GHG inventories, SBTi targets, and CDP responses in place, but CSRD demands more: granular Scope 3 data, forward-looking transition plans tied to financials, and, critically, transparent, defensible treatment of carbon credits that won't fall apart under limited assurance." ^[2]

---

How Emission3 Fits

Emission3 is built for supply chain leaders preparing for CSRD limited assurance. The platform:

• Turns invoices and BoMs into line-item evidence: Upload 12,800 purchase orders, and Emission3's classification engine maps each line to a product-level emissions factor, creating a reproducible calculation lineage from source document to ESRS E1-6 disclosure ^[5].
• Tracks primary data coverage by supplier and spend: Dashboard shows the percentage of Category 1 spend covered by supplier-specific factors versus secondary data, with audit-ready exports including supplier engagement logs and data validation records.
• Documents methodology for each Scope 3 category: Pre-built templates for all 15 categories, aligned with GHG Protocol and ESRS E1, with version control for methodology updates.
• Exports evidence packs for limited assurance: Auditors receive a zip file containing source documents, calculation worksheets, and a population completeness report showing which POs were included, excluded, or estimated ^[4].

One CSRD wave-2 filer reduced audit prep by 840 hours using document-first evidence ^[6]. The procurement team uploaded 19,400 invoices, classified them into 140 product categories, and matched 72% to supplier-specific factors—all without a single spreadsheet.

---

The 2026 Limited Assurance Timeline Starts Now

CSRD wave-2 companies report ESRS E1 data in their 2027 management reports (covering FY 2026). Auditors typically begin planning 6–9 months before the filing deadline, meaning procurement teams need primary data systems operational by Q2 2026—less than 12 months away.

The 12 terms above are not academic jargon. They are the vocabulary of your next audit. And the companies that pass limited assurance in 2026 will not be the ones with the best ESG narrative—they will be the ones with reproducible, document-backed evidence for every kilogram of Scope 3 emissions.

Every Emission3 customer starts with an onboarding call. No self-serve signups. We map your procurement data, identify gaps in primary supplier coverage, and build a document classification model tailored to your product categories. Book your onboarding call today ^[5] to prepare for 2026 limited assurance before your auditor asks for the evidence you don't have.