Home/Blog/Security & Compliance
Security & Compliance · 11 min read

How to write a sustainability report for a small business (VSME guide)

The short answer

To write a sustainability report for a small business, log what customers and banks ask, decide what is material, plan who collects each number, calculate scope 1, scope 2 and relevant scope 3 emissions with official factors, add workforce and conduct figures, check every green claim, and publish one report in the EU voluntary standard's structure. Reuse it to answer every questionnaire.

Want the tools, not just the method? The The SME Sustainability Reporting Kit kit turns this guide into ready-to-use templates, spreadsheets and printables, with an instant download.

Key takeaways
  • Most SMEs are not legally required to report; the pressure comes through customers, banks, investors and buyers.
  • The EU voluntary standard (VSME) has a basic and a comprehensive module and is now the reference for the EU value-chain cap.
  • Footprint = activity x official factor / 1,000. Cite the factor set and year.
  • Report scope 2 location-based and market-based; screen all 15 scope 3 categories.
  • Generic and offset-based 'carbon neutral' claims are banned in EU consumer marketing from 27 September 2026.
  • A report is your own statement unless an assurer gives a conclusion: never call it certified.

What are the steps to write a sustainability report for a small business?

The same ten steps work for a 10-person firm and a 250-person manufacturer. The order matters: what you are asked decides what you collect, and what you collect decides what you can say.

  • 1. Log every sustainability request from customers, banks, investors and buyers: who asked, what, by when, hours spent.
  • 2. Decide whether to build the capability: compare the cost of doing nothing (margin at risk, staff time) with the cost of doing it, in your own numbers.
  • 3. Score your current practices honestly, 0 to 4, against evidence, and rank the gaps by gap x impact.
  • 4. Run a materiality check: for each topic, how much you affect people or the environment, and how much it could affect your finances.
  • 5. Write a data plan: an owner, a deputy, a source, a frequency and an evidence location for every number.
  • 6. Calculate scope 1 (fuels, refrigerants) and scope 2 (electricity, both methods) with an official factor set for your country and year.
  • 7. Screen all 15 scope 3 categories, calculate the relevant ones and ask your largest suppliers for data.
  • 8. Set a base year and target with costed actions, and gather the workforce, health and safety, pay, training and conduct figures.
  • 9. Check every environmental claim against six tests, then write, check, sign and publish the report.
  • 10. Build an answer bank from the report and use it for every future questionnaire; repeat the cycle each year.

Do small businesses have to report on sustainability?

In most markets, a small or mid-size company is not directly required to publish a sustainability report. The pressure arrives through three channels. Customers that must report need data about their value chain. Banks and investors want climate and sustainability information for lending and investment decisions. Public buyers in some countries ask bidders for carbon reduction plans. Separately, consumer and competition law on environmental claims applies to every company, whatever its size.

In the EU, the Omnibus I Directive (EU) 2026/470 narrowed mandatory reporting under the Corporate Sustainability Reporting Directive to the largest groups, with more than 1,000 employees and net turnover above EUR 450 million. It also created a value-chain cap. A Commission Delegated Regulation, (EU) 2026/1560, adopted in July 2026 and published in September, sets standards for voluntary use by companies of up to 1,000 employees, built on the VSME. From financial years starting on 1 January 2027, companies inside CSRD scope may not demand more from those partners, for their sustainability reporting, than the datapoints listed in its annex.

Elsewhere, the climate standards built on the ISSB's IFRS S2 reach SMEs mainly through larger customers and lenders: the UK SRS for listed companies under the FCA's rules from 2027, Australia's mandatory climate reporting in three size groups under AASB S2, and Canada's voluntary CSDS. In Australia, the securities regulator ASIC tells small businesses that large companies are generally expected to use estimates and industry averages for value-chain emissions, and that SMEs can discuss hard requests with the requester. Check the current position in your country with your adviser.

What should an SME sustainability report include?

The VSME gives a practical answer. Its basic module covers the basis for preparation, general company information, practices and policies, energy and greenhouse gas emissions, pollution, biodiversity, water, resource use and waste, the workforce, health and safety, pay and training, and business conduct. Its comprehensive module adds business model and strategy, scope 3, climate targets and transition plans, climate risks, more workforce and human rights information, revenue from certain sectors and gender diversity in governance. The Commission recommended the standard in July 2025 (Recommendation (EU) 2025/1710); the text is free on EUR-Lex.

Most SMEs can publish a basic-module report in four to eight pages. Start with the basis for preparation: which standard and module, which period and sites, which emission factor set and year, and which disclosures do not apply, with a one-line reason each. Readers check that section first, and a short honest basis builds more trust than a long report.

ModuleTopics (paraphrased)Who usually asks
BasicBasis, company profile, policies, energy and scope 1-2, pollution, biodiversity, water, resources and waste, workforce, health and safety, pay and training, conductCustomers, banks
ComprehensiveStrategy, scope 3, targets and transition, climate risk, more on people and human rights, sector revenue, board gender diversityLarger customers, banks, investors

How do you calculate a small company's carbon footprint?

A footprint is a list of multiplications: activity data (kilowatt hours, litres, kilograms, tonnes, kilometres) times an emission factor (kilograms of CO2 equivalent per unit) from an official set for the country and year, divided by 1,000 for tonnes. The GHG Protocol sorts the results into scope 1 (direct: fuels you burn, refrigerants that leak), scope 2 (electricity and heat you buy) and scope 3 (everything else in your value chain). Report scope 2 twice: location-based, using the grid average, and market-based, using your own contract's factor.

Here is a worked example for a fictional 75-person packaging maker in Leeds, using the UK Government GHG Conversion Factors 2026 published by DESNZ in June 2026. Every factor below is copied from the official file.

SourceActivityFactor (kg CO2e per unit)Tonnes CO2e
Natural gas (scope 1)1,452,000 kWh (gross CV)0.18231264.7
Diesel, own trucks and vans (scope 1)37,800 litres2.5835497.7
LPG, forklifts (scope 1)9,450 litres1.5571314.7
R410A refrigerant top-up (scope 1)3.5 kg1,9246.7
Grid electricity, location-based (scope 2)1,148,000 kWh0.13096150.3
Total scope 1 and 2534.2

How do you handle scope 3 without supplier data?

Screen all 15 categories in the GHG Protocol's scope 3 standard. For each, decide whether it is relevant, calculate it if so, and write a one-line reason if not: 'boxes use no energy in use' is a good reason; silence is not. Methods range from spend-based (money times an average factor) to average-data (tonnes or tonne-kilometres times an average factor) to supplier-specific (the supplier's own product figure). Start with average data and replace it with supplier data for your largest categories first.

In the worked example, purchased board and film made up 94% of scope 3: 5,380 tonnes of recycled-content board at 1,096.6 kg CO2e per tonne and 640 tonnes of virgin kraft at 1,198.2, from the same official set. Scope 3 came to about 7,214 tonnes against 534 for scopes 1 and 2. When a supplier sends a product figure, check that its boundary, unit, year and method match how you buy the product before it replaces the average, and record the change.

Measure where you are

Reading helps; measuring tells you what to work on. These AI-graded assessments on AssessAll pair with this topic:

How do you answer customer sustainability questionnaires efficiently?

Publish one report, then build an answer bank from it: twenty or so starter answers to the questions every questionnaire asks (do you measure emissions, which method, your scope 1 and 2, your target, your renewable share, your recycled content, your supplier code, whether the report is assured). Offer the report first, answer what it does not cover from the bank, and say honestly when you do not have something yet and when you will.

Ask before paying for a third-party ratings platform: many customers accept a published report. In the UK, buyers bidding for central government contracts above GBP 5 million a year must provide a Carbon Reduction Plan in the format set by PPN 006 (scope 1, scope 2 and scope 3 categories 4, 5, 6, 7 and 9, a net zero commitment, board sign-off, published and updated yearly), and some now ask their suppliers for the same. With a report in hand, that is a reformatting job.

In the worked example, the company's autumn requests averaged about 16 hours each. Once the report and answer bank existed, the next five averaged about 4.4 hours.

Which green claims rules apply to small businesses?

All of them that apply to your markets, whatever your size. The EU's Directive (EU) 2024/825 on empowering consumers applies from 27 September 2026: generic claims such as 'eco-friendly' without recognised excellent performance, unofficial sustainability labels, claims about a whole product based on one aspect, and product-level climate neutrality claims based on offsetting are banned in consumer marketing, and future claims need a plan and independent checks. The European Commission withdrew the separate Green Claims Directive proposal on 4 November 2026.

In the UK, the CMA's Green Claims Code sets the expectations and, since 6 April 2025, the CMA can fine businesses directly under the DMCC Act 2024. The FCA's anti-greenwashing rule applies to authorised firms such as banks. In the US, the FTC's Green Guides guide environmental marketing; in Australia, the ACCC's December 2023 guide sets eight principles; Canada's Competition Act and New Zealand's Fair Trading Act also apply. The shared logic: claims must be accurate for the whole product, backed by evidence you hold now, specific, complete about what they leave out, clear, and, for the future, backed by a real plan.

Common mistakes in a first SME sustainability report

  • Answering every questionnaire from scratch instead of publishing once and reusing.
  • Using emission factors with no source or year, or mixing kWh and MWh.
  • Giving one scope 2 figure without saying whether it is location- or market-based.
  • Leaving scope 3 out because it is estimated, instead of screening and explaining.
  • Treating materiality as a popularity vote rather than an evidence-based judgement.
  • Calling the company 'sustainable', 'green' or 'carbon neutral' without specific evidence.
  • Announcing a net zero date with no plan or interim targets.
  • One person holding all the data, with no deputy.
  • Publishing without a second-person check against invoices and logs.
  • Describing an unassured report as certified, verified or audited.
The SME Sustainability Reporting Kit e-book cover
Bodhih Pro Kit

Do the whole job with one kit

The SME Sustainability Reporting Kit gives you the workbook, forms, report template, message library and answer bank used in this guide, with the worked example filled in.

Common questions

Questions people ask next

What is the VSME?

The VSME is the EU's voluntary sustainability reporting standard for small and medium-sized companies, developed by EFRAG and recommended by the European Commission in July 2025. It has a basic module and a comprehensive module. A version of it, adopted in 2026, is the reference for the EU value-chain cap.

How long does a first sustainability report take?

With one part-time owner and reasonably organised invoices, a basic-module report can take around twelve weeks, as in the worked example. Collecting a full year of energy and fuel data is usually the longest part.

Which emission factors should a small business use?

Use the official set for the country where the activity happens and the year of the data: in the UK the government's conversion factors, in the US the EPA's Emission Factors Hub, in Australia the National Greenhouse Accounts Factors, in New Zealand the Ministry for the Environment's guide. Name the set and year in the report.

Is a VSME report the same as a certification?

No. It is a reporting standard. The report is your own statement unless an assurance practitioner gives a conclusion on it. The IAASB's ISSA 5000 assurance standard applies to periods beginning on or after 15 December 2026.

Do I need scope 3 in a small business report?

The basic module focuses on scope 1 and 2; scope 3 sits in the comprehensive module where relevant. Many customers ask for it, and for manufacturers it is usually the largest share, so screen all 15 categories and calculate the relevant ones.

Can my company still say it is carbon neutral?

In EU consumer marketing, product-level neutrality claims based on offsetting are banned from 27 September 2026, and regulators elsewhere scrutinise them. Describe measured emissions and real reductions instead, and check local law with your adviser.

How can I check my team's sustainability reporting skills?

Use a short scenario-based knowledge check after a briefing. AssessAll's Sustainability and Climate Disclosure Reporting Assessment is one option for finance, ESG and operations teams.

How do I keep improving after the first report?

Set one development goal at a time, such as replacing your largest scope 3 estimate with supplier data. Jobulary's guide to the WOOP method is a practical way to plan it.