Environmental, Social, and Governance (ESG)

Home Environmental, Social, and Governance (ESG)
Compliance and Assurance

Sustainability stopped being a reporting exercise when somebody started verifying the numbers

For most of the last decade an Indian sustainability report was a narrative document assembled once a year by people who did not own the underlying data. That changed when a defined subset of it became subject to third-party verification, and it changes again in the year now in progress, when that verification requirement reaches the full top one thousand listed entities for the first time. A report you can defend requires systems that produce the numbers, not a team that assembles them.

  • Written against the regulator's own circulars and master circular, read at source in August 2026, rather than against commentary. Where the regulator has softened a requirement, this page says so, because a lot of published material still describes the harder version.
  • Every date, threshold and attribute sits in a claims register with its source. The international position, which moves fastest, is marked most heavily.
  • We are explicit about the independence bar. A firm that builds your framework cannot verify it, and we would rather tell you that before an engagement letter than after.
FY 2026-27
the year the core verification obligation reaches the full top one thousand listed entities for the first time
9
attributes in the core subset that carry defined performance indicators and are subject to assurance or assessment
2%
the share of purchases or sales an individual partner must represent to fall within value chain reporting, since the March 2025 redefinition
1 Jan 2026
the date the European carbon border adjustment mechanism moved from reporting only into its definitive regime
Sources: the Securities and Exchange Board of India master circular of 30 January 2026, the circular of 12 July 2023 setting out the core format, and the circular of 28 March 2025 on assurance or assessment and value chain, all read at source; and the European Commission's own carbon border adjustment mechanism page. All read on 18 August 2026. These are fixed regulatory positions, not a live counter. See this page's claims register.
What we do

Five things, and the one we cannot combine

Framework development

Assessment of current practice and gaps, structured frameworks and policies, alignment with the standards and expectations that actually apply to you, and integration into strategy and operations rather than into a separate workstream.

Reporting and disclosure

Preparation and review of sustainability reports, alignment with the applicable reporting format, support on data collection, validation and documentation, and the audit trail that makes a number defensible when somebody asks where it came from.

Governance and risk integration

Bringing sustainability into governance structures, identifying and assessing sustainability-related risks, strengthening internal controls and accountability, and connecting it to enterprise risk management rather than running it alongside.

Sustainability advisory and implementation

Advisory on environmental and social initiatives, practical and measurable actions rather than commitments, and implementation support with performance tracking.

Reporting support for the mandated format

Preparation and review of the mandated disclosures, readiness assessment, guidance on data collection and validation, and alignment of reporting with regulatory expectation.

What we cannot combine

Assurance or assessment of the verified core. The regulator's independence rules bar the provider, and its associates, from providing consulting and a long list of other services to the same entity or its group. If you want us to build it, somebody else verifies it. Guide 2 sets out the rule precisely.

Who this is for

Four organisations with different pressures

A listed entity inside the reporting population

The obligation is regulatory, the format is prescribed and a defined subset is verified by a third party. The year now in progress is the one in which that verification reaches the full top one thousand.

A supplier to a listed entity or an overseas group

You have no direct reporting obligation and you are being asked for data anyway, by a customer who does. This is the largest and fastest-growing group and the one least served by published material, which is written for reporters.

An exporter to the European Union

The carbon border mechanism entered its definitive phase in January 2026 and affects iron and steel, aluminium, cement and fertiliser most directly. Separately, the deforestation regulation applies from December 2026 to commodities including coffee, rubber, leather and wood.

An unlisted company that has decided to do it anyway

Because a lender, an investor or a buyer will eventually ask, and because doing it before being required to is materially cheaper than doing it under a deadline.

How we work

How an engagement is structured

1. Establish what actually applies

Reporting obligation, verification obligation, contractual obligations from customers, and export exposure. These are four different sources and most organisations are subject to some combination rather than one.

2. Materiality, done defensibly

A structured assessment with stakeholders identified, engagement documented and conclusions recorded. A materiality matrix drawn in a workshop and never revisited is not an assessment.

3. Fix the data layer before the narrative

Where each figure comes from, who owns it, how it is calculated, and whether the calculation would survive somebody checking it. This is where programmes fail and it is where most of the work is.

4. Integrate into governance

Board and committee oversight, risk register entries, and internal controls over the sustainability data on the same footing as controls over financial data.

5. Report, then improve

The first report establishes a baseline and exposes the gaps. The second is where the programme starts being useful.

Go deeper

Five guides, from the obligation to the export pressure

Guides 1 and 2 are for a listed entity inside the reporting population. Guide 3 applies to anybody building a programme, listed or not. Guide 4 is the compliance layer underneath the reporting, which is where the actual environmental obligations sit. Guide 5 is for anyone whose pressure comes from outside India.

Guide 1 of 5 · The obligation

Business Responsibility and Sustainability Reporting: Who Reports, What, and From When

The reporting obligation, how the top one thousand population is actually determined since the 2024 change, the nine core attributes subject to verification, and the glide path year by year.

Guide 2 of 5 · Verification

Getting the Core Verified: Assurance, Assessment and the Independence Bar

The 2025 change from reasonable assurance to assurance or assessment, who may provide it, the conflict rules that decide which firm can do what, and the standards an engagement is conducted under.

Guide 3 of 5 · The programme

Building an ESG Framework That Survives Contact With the Data

Why most sustainability programmes fail at the data layer rather than the policy layer, how to run a materiality assessment that is defensible, integrating sustainability into governance and risk, and what a first year should actually attempt.

Guide 4 of 5 · Compliance

Environmental Compliance: Producer Responsibility, Carbon Credits and Energy

The compliance obligations underneath the reporting: extended producer responsibility across plastic, electronic and battery waste, the carbon credit trading scheme, and the energy efficiency regime it sits alongside.

Guide 5 of 5 · International

Reporting Beyond India: ISSB, CSRD, CBAM and What Buyers Are Asking

The international sustainability standards and India's position on them, the European reporting directive after it was cut back, the carbon border mechanism now in its definitive phase, and why the real pressure on Indian exporters comes through contracts rather than regulators.

Related pages

Where the neighbouring work sits

Governance, risk and internal control

Board effectiveness, enterprise risk management, internal financial controls and technology risk. The governance half of sustainability overlaps heavily with this work and the risk committee is the natural home for both. See those pages.

Audit and assurance

Where sustainability assurance sits as an engagement, alongside the other assurance work, and where the independence bar is set out from the assurance provider's side. See those pages.

Payroll and the social pillar

The four Labour Codes commenced on 21 November 2025 and rewrote the statutory position on wages, social security and fixed-term employment. Several core attributes report on exactly that ground. See those pages.

Start the conversation

Send an enquiry

Tell us which of the four pressures applies: a reporting obligation, a customer asking for data, an export exposure, or a decision to get ahead of it. The answer changes the engagement completely.








    This page is general information, not professional advice. Sustainability regulation is the fastest-moving area on this website and the one where published material ages worst. The securities regulator has softened its assurance requirement, made value chain reporting voluntary and redefined who counts as a value chain partner, all since 2024. The European Union has cut back the scope of its reporting directive and pushed out its dates. The climate disclosure task force was disbanded in 2023. Any advice in this area needs a date on it. Take professional advice before acting on anything on this page. We are happy to be that adviser, but we do not act on a web page, ours or anyone else's, without one.