CSRD Wave-2 Filer Cuts ESRS E1 Audit Prep by 840 Hours Using Document-First Evidence

A European industrial components manufacturer—€1.8 billion revenue, 4,200 employees, headquartered in Germany—faced its first ESRS E1 limited assurance audit in early 2026. The compliance officer leading the effort had spent eight months building what looked like a defensible GHG inventory: a Scope 1+2 calculation tied to utility bills, a Scope 3 estimate covering 14 of the 15 mandatory categories, and a decarbonisation roadmap aligned with a 1.5°C trajectory.

Then the auditors arrived. Within 72 hours, they flagged 11 unsubstantiated assertions in the Scope 3 data, requested primary evidence for 83% of the disclosed emissions, and informed the compliance officer that the current methodology documentation would not meet the reproducibility threshold required under ESRS E1.

The audit was suspended. The company had 90 days to rebuild the evidence base or face a qualified opinion—a reputational and financing risk the board would not accept.

This is the story of how they passed limited assurance on the second attempt, cutting 840 hours of audit prep time by adopting a document-first evidence architecture.

The ESRS E1 Limited Assurance Threshold Most Inventories Cannot Meet

The Corporate Sustainability Reporting Directive mandates that all wave-2 filers—large EU companies with over 250 employees or €50 million turnover—report under ESRS E1 from FY 2025 onward ^[1]. Limited assurance applies immediately. Reasonable assurance follows in 2028 ^[2].

Under ESRS E1, climate disclosures must include:

• Gross Scope 1, 2, and 3 emissions with category-level breakdowns (ESRS E1-6)
• GHG emission reduction targets compatible with 1.5°C (ESRS E1-4)
• Decarbonisation levers and transition plan financials (ESRS E1-5)
• Anticipated financial effects from material transition risks (ESRS E1-9) ^[3]

Limited assurance does not mean "low scrutiny." Auditors must verify that:

1. Every disclosed tonne of CO₂e can be traced back to a primary source document (invoice, meter reading, supplier declaration, or BoM).
2. The calculation methodology is reproducible: another practitioner should reach the same result using the same inputs.
3. Scope 3 coverage is complete: all 15 categories must be assessed for materiality, and material categories must be quantified with primary data where feasible ^[4].

Most existing GHG inventories fail on points 1 and 3. They rely on spend-based proxies, generic emission factors, and Excel models with hardcoded assumptions that cannot be replayed by an external party.

"ESRS E1 is likely to be material for most companies from both impact and financial perspectives. Nearly every business contributes to climate change through greenhouse gas emissions, while also facing climate-related risks that can significantly affect financial performance." — Normative, ESRS E1 Explained ^[2]

What Went Wrong in the First Audit Attempt

The compliance officer's initial inventory looked defensible on paper. Here's what it contained:

The auditors rejected this structure on three grounds:

1. Scope 3.1 spend-based data could not be traced to individual invoices. The ERP export was an annual aggregate. When auditors requested the top 50 suppliers by emissions, the compliance officer could not produce line-item evidence showing what was purchased, when, and at what quantity.

2. Scope 3.4 transport data came from a survey, not transport documents. Auditors required waybills, shipping manifests, or freight invoices. The survey responses—covering only 40% of suppliers—were classified as "management estimates," not primary evidence.

3. The Scope 3.11 use-phase model was undocumented. The internal LCA spreadsheet contained no version history, no author attribution, and no peer review log. Auditors could not verify the energy consumption assumptions or the product lifespan inputs.

The compliance officer was given a list of 1,240 supporting documents the auditors would need to see. The team estimated it would take 14 weeks to manually assemble, cross-reference, and upload the evidence pack.

The board intervened. They allocated a €180,000 budget and three months to rebuild the inventory using a document-first approach.

The Document-First Rebuild: 19,400 Invoices, 6,800 Waybills, 11 LCA Reports

The compliance officer made a structural decision: instead of starting with the inventory and working backward to evidence, they would start with the documents and work forward to emissions.

Here's what changed:

Step 1: Invoice-Level Scope 3.1 Purchased Goods Evidence

The procurement team extracted 19,400 supplier invoices covering FY 2025. Each invoice was parsed for:

• Supplier name and tax ID
• Product description and HS code
• Quantity and unit of measure
• Line-item value (excl. VAT)
• Invoice date and PO reference

For the top 200 suppliers (representing 68% of procurement spend), the team requested:

• Product-specific carbon footprints (PCFs) via PACT or WBCSD Pathfinder submissions
• Cradle-to-gate LCA reports compliant with ISO 14040/14044
• Bill of materials (BoM) exports for multi-component assemblies

They received 114 PCF declarations and 11 third-party LCA reports. For the remaining suppliers, they applied secondary emission factors from Ecoinvent 3.9, but tagged each calculation with a "data quality tier" label (Tier 1 = primary, Tier 2 = supplier-specific secondary, Tier 3 = industry average).

Result: 68% of Scope 3.1 emissions were now traceable to invoice-level evidence. Every tonne disclosed in the inventory could be linked to a specific purchase order and a specific emission factor source.

Step 2: Waybill-Level Scope 3.4 Upstream Transport Evidence

The logistics team retrieved 6,800 waybills from the company's freight forwarders. Each waybill contained:

• Origin and destination addresses
• Transport mode (road, rail, sea, air)
• Gross weight and number of pallets
• Carrier name and shipment date

They calculated tonne-kilometres using the GLEC Framework, applying mode-specific emission factors from the European Environment Agency's EMEP/EEA guidebook. For shipments where the carrier provided a CO₂ certificate (31% of total), they used the carrier-reported value and attached the certificate as primary evidence.

Result: 94% of Scope 3.4 emissions were now supported by transport documents. The auditors could verify the distance, mode, and weight inputs for any shipment in the sample.

Step 3: Deterministic Scope 3.11 Use-Phase Calculations

The engineering team rebuilt the use-phase model using a formula that could be replayed by an external practitioner:

Emissions = (Units sold) × (Energy per use hour) × (Use hours per year) × (Product lifespan in years) × (Grid emission factor) × (End-of-life disposal factor)

They documented every assumption:

• Energy per use hour: derived from IEC 62301 standby power tests (lab report attached)
• Use hours per year: customer usage survey (n=1,200, response rate 18%)
• Product lifespan: warranty return data (5-year median, 90th percentile = 7 years)
• Grid emission factor: IEA 2025 country averages (weighted by sales region)
• Disposal factor: Ecoinvent 3.9 "treatment of electronics, municipal incineration"

The model was version-controlled in Git. Every input cell in the spreadsheet linked to a referenced source document.

Result: The Scope 3.11 calculation was reproducible. An auditor could re-run the model using the same inputs and reach the same result within a 2% margin.

The Second Audit: 48 Hours to Clear, Zero Qualified Findings

The auditors returned in June 2026. This time, the compliance officer provided:

• A 340-page evidence pack with every invoice, waybill, and LCA report indexed by emission category
• A calculation lineage matrix showing the path from each source document to the final disclosed tonne
• A data quality tier breakdown (68% Tier 1, 24% Tier 2, 8% Tier 3)
• A completeness report confirming that all 15 Scope 3 categories had been assessed and that the 7 material categories represented 96% of total Scope 3 emissions

The auditors completed their review in 48 hours. Zero findings. The limited assurance opinion was issued without qualification.

The compliance officer estimated that the document-first approach saved 840 hours of audit support time compared to the manual evidence-gathering process attempted in the first round.

Why Most CSRD Inventories Will Not Pass on the First Attempt

The compliance officer's initial inventory was not an outlier. It reflected the state of practice for most European companies entering the CSRD regime:

• Scope 3.1 is estimated via spend-based proxies, not traced to invoices.
• Scope 3.4 is modelled using distance assumptions, not supported by transport documents.
• Scope 3.11 is calculated using undocumented spreadsheets, not reproducible models.

ESRS E1 requires a higher standard. Auditors trained in financial assurance are applying the same evidence expectations to carbon data that they apply to revenue recognition or inventory valuation. An emission that cannot be traced to a source document is treated the same as a revenue booking without an invoice: it does not exist for assurance purposes ^[5].

Companies that treat CSRD as a "reporting exercise" rather than a data architecture problem will face the same 90-day suspension this compliance officer experienced.

How Emission3 Fits

Emission3 is designed for the document-first rebuild this company executed manually.

The platform ingests invoices, waybills, utility bills, and BoMs at the line-item level. It parses supplier names, product descriptions, quantities, and dates—then applies the appropriate emission factor (primary PCF, secondary LCA, or industry average) based on data availability.

Every calculation is tagged with:

• The source document ID (invoice number, waybill reference, meter reading)
• The emission factor source (PACT declaration, Ecoinvent dataset, DEFRA 2024)
• The calculation formula (reproducible in algebraic notation)
• The data quality tier (Tier 1/2/3 per GHG Protocol)

When auditors request evidence, Emission3 generates an evidence pack containing:

• A lineage matrix showing the path from each document to the disclosed tonne
• A population completeness report confirming that all material suppliers, routes, and products are covered
• A reproducibility log that another practitioner can replay

This is the structure that passed limited assurance in 48 hours.

For CSRD wave-2 filers preparing for their first ESRS E1 audit, Emission3's audit-ready exports provide the evidence architecture auditors now require ^[6].

What to Do Before Your First ESRS E1 Audit

If your company reports under CSRD in 2026, here's the compliance officer's advice:

1. Run a focused ESRS E1 gap assessment now. Map your current inventory against the disclosure requirements in ESRS E1-6 (emissions), E1-4 (targets), E1-5 (transition plan), and E1-9 (financial effects). Identify where you lack document-level evidence ^[1].

2. Rebuild Scope 3.1 from invoices, not spend. Extract line-item procurement data for your top 200 suppliers. Request PCFs or BoMs. Tag each supplier with a data quality tier. Aim for 70%+ Tier 1 coverage.

3. Retrieve transport documents for Scope 3.4. Work with your freight forwarders to pull waybills for the reporting year. Calculate tonne-kilometres using the GLEC Framework. Attach carrier CO₂ certificates where available.

4. Document your Scope 3.11 use-phase model. Write down every assumption. Link every input to a source (lab report, customer survey, warranty data). Version-control the spreadsheet. Make it reproducible.

5. Assemble your evidence pack before the auditors arrive. Do not wait for the audit fieldwork to start gathering invoices. The compliance officer who passed on the second attempt spent 6 weeks building the evidence pack before the auditors returned.

Limited assurance is not a checkbox. It is a line-by-line verification of your inventory against primary evidence. If you cannot produce the documents, the auditors will not accept the disclosure.

The 2028 Reasonable Assurance Cliff

ESRS E1 limited assurance applies to FY 2025 reports (filed in 2026). Reasonable assurance—the same standard applied to financial statements—takes effect for FY 2028 reports ^[2].

Reasonable assurance requires:

• Materiality thresholds below 5%: auditors will test a larger sample of transactions.
• Control environment testing: auditors will assess whether your data collection process is repeatable and controlled.
• Third-party verification of supplier data: PCFs and LCA reports must come from accredited verifiers, not self-declared by suppliers.

Companies that barely pass limited assurance in 2026 will not pass reasonable assurance in 2028 without a structural upgrade to their evidence architecture.

The compliance officer's final observation: "We spent €180,000 rebuilding the inventory for limited assurance. If we'd tried to pass reasonable assurance with our original system, we'd have spent triple that—and still failed."

Document-first evidence is not optional. It is the new baseline for climate disclosure under CSRD.

---

Ready to build an audit-ready ESRS E1 inventory? Every Emission3 customer starts with a personal onboarding call where we map your current data sources, identify evidence gaps, and design a document-first ingestion plan. Book your onboarding call here—no self-serve signups, no generic demos, just a direct conversation about your CSRD timeline and audit requirements.