CSRD for SMEs in 2025: What Small Suppliers Actually Need to Do
Does CSRD Apply Directly to Your SME?
Strictly speaking, CSRD does not require most SMEs to file their own sustainability report. The directive directly applies to large companies (250+ employees, €40M+ turnover, or €20M+ assets) from 2025, and to listed SMEs on EU stock exchanges from 2026.
But here is the part that trips up most small suppliers: CSRD requires those large companies to report their Scope 3 emissions — which means they must collect verified carbon data from their supply chains. Your clients are subject to CSRD. You are their supply chain. And they are already asking.
What Are the CSRD Deadlines That Actually Affect You?
| Client Type | CSRD Reporting Start | When They Need Your Data |
|---|---|---|
| Large public-interest companies (previously NFRD) | Financial year 2024 | Suppliers need data now |
| All other large EU companies | Financial year 2025 | Suppliers need data now–2025 |
| Listed SMEs on EU exchanges | Financial year 2026 | Suppliers need data 2025–2026 |
| Non-EU companies (>€150M EU revenue) | Financial year 2028 | Suppliers from 2026 onward |
If any of your clients fall into the first two rows, they may already be collecting supply chain data for their 2024 or 2025 filings. The questionnaire you received is not theoretical — it has a deadline attached to someone's regulatory submission.
What Will Your Clients Specifically Ask For?
The European Sustainability Reporting Standards (ESRS) — the technical rules under CSRD — define what large companies must disclose. For suppliers, this translates to requests for:
- Verified Scope 1 and Scope 2 emissions totals in tCO2e
- An estimate of relevant Scope 3 categories (especially Cat. 1: purchased goods)
- Emissions intensity (tCO2e per employee or per €1M revenue)
- A clear statement of methodology (GHG Protocol is the accepted standard)
- The reporting year
You do not need to hire a consultant, commission a full lifecycle assessment, or undergo an independent audit for a first response. A Carbon Passport from DeCarbonOPS contains exactly these fields.
How Does CSRD Compare to What Was Required Before?
Before CSRD, large companies asked suppliers to complete voluntary questionnaires. Non-response was low-risk.
| Pre-CSRD | Under CSRD |
|---|---|
| Voluntary sustainability questionnaires | Legally required Scope 3 supply chain data |
| Estimates accepted without methodology | Methodology must be stated and auditable |
| No consequences for non-response | Non-response risks supplier delisting |
| Sporadic requests from some clients | Standard expectation from all large clients |
The shift is significant. If you haven't started measuring yet, you are already behind at least some of your clients' timelines.
What Is the Minimum Viable Action for a Supplier in 2025?
You need to measure your emissions once, document the methodology, and have a verifiable output ready to share. This does not require months of preparation.
The practical checklist:
- Gather 12 months of utility bills — electricity, gas, fuel
- Note your vehicle mileage or fuel purchases for company vehicles
- Estimate business travel from expense records
- Estimate waste from your waste contractor
- Enter into DeCarbonOPS — takes 20–40 minutes
- Generate your Carbon Passport — get a permanent shareable URL instantly
- Respond to questionnaires — paste the URL or download the PDF
That is the minimum. For most SMEs supplying one or two enterprise clients, this is also sufficient.
What Happens If You Keep Ignoring These Requests?
The risk is not a direct fine — CSRD doesn't fine suppliers. The risk is commercial:
- Your client's sustainability team scores you as non-transparent
- You become a liability in their CSRD audit trail
- Procurement teams are increasingly instructed to favour suppliers with verified carbon data
- Over 2025–2027, this will shift from preference to requirement in many tender processes
The cost of one 20-minute session to generate a Carbon Passport is objectively lower than the cost of losing a key client relationship. Get started free.
Frequently Asked Questions
Does CSRD apply directly to SMEs?
CSRD directly requires large companies (250+ employees, €40M+ turnover, €20M+ assets) to report. Most SMEs are not directly regulated — but because CSRD requires large companies to disclose their Scope 3 supply chain emissions, SME suppliers are indirectly affected and are already receiving carbon data requests.
When do CSRD reporting obligations start for large companies?
Large public-interest companies already regulated under NFRD began reporting for financial year 2024. All other large EU companies (250+ employees) must report from financial year 2025. Listed SMEs follow from 2026.
What carbon data do enterprise clients need from their suppliers under CSRD?
At minimum: verified Scope 1 and Scope 2 totals in tCO2e, a Scope 3 estimate, emissions intensity per employee or per revenue, the reporting year, and a GHG Protocol methodology statement. A DeCarbonOPS Carbon Passport contains all of these.
What happens if a supplier does not provide carbon data under CSRD?
There is no direct fine for suppliers. The risk is commercial: non-transparent suppliers score as high-risk in procurement systems, become liabilities in the client's CSRD audit trail, and increasingly face delisting from approved vendor lists as the regulatory enforcement tightens.
What is the fastest way for an SME to become supplier-ready for CSRD?
Gather 12 months of utility bills and travel records, enter them into DeCarbonOPS, and generate a Carbon Passport. The process takes 20–40 minutes for most SMEs with available records, and the resulting passport covers all CSRD Scope 3 data requests.
Ready to get your Carbon Passport?
Generate a verified carbon report in 20 minutes — free for your first annual report. Accepted by SAP Ariba, Coupa, and enterprise procurement teams across the EU.
Get started free