Press Release | Find My Factory is now Speya™

Press Release | Find My Factory is now Speya™

ESG in Procurement: Moving Beyond Checkbox Compliance

S

Speya

·

8 min read

·

Updated

ESG in Procurement: Moving Beyond Checkbox Compliance

ESG in procurement has reached an inflection point. For years, it was enough to send suppliers a questionnaire, collect a few certificates, and check the box. That era is over.

Regulations are getting specific. The EU’s Corporate Sustainability Reporting Directive (CSRD) requires companies to report on supply chain emissions with verifiable data. The Carbon Border Adjustment Mechanism (CBAM) puts a carbon price on imported goods. National due diligence laws in Germany, France, and Norway demand that companies prove they are monitoring human rights and environmental risks across their supply chains.

At the same time, investors and customers are looking past the glossy sustainability reports. They want to see evidence: supplier-specific data, measurable progress, and accountability structures that go deeper than a policy document.

This guide covers what moving beyond checkbox ESG compliance looks like in practice, and how procurement teams can build ESG into their supplier management without drowning in manual data collection.

The Problem with Checkbox ESG

Checkbox ESG compliance typically looks like this: send a self-assessment questionnaire to suppliers, collect responses, file them, and report aggregate numbers. The supplier says they have an environmental policy. Box checked. They claim a certain carbon intensity. Number recorded. Move on.

The problem is that this approach tells you almost nothing about actual ESG performance. Self-reported data is unreliable at best and misleading at worst. A 2026 EcoVadis and Accenture study found that 80% of top-performing procurement organizations now see more return on investment from ESG innovation than from compliance alone. The leaders have moved past forms and into operational integration.

Meanwhile, a Deloitte survey found that fewer than half of companies have strong insight into Tier 2 suppliers. That means the majority of organizations cannot say with confidence what is happening beyond their direct suppliers, which is exactly where many ESG risks are concentrated.

What Regulators Now Expect

The regulatory landscape has shifted from voluntary disclosure to mandatory, auditable reporting. Here is what procurement teams need to know.

CSRD (Corporate Sustainability Reporting Directive)

The CSRD requires companies to report on sustainability across their value chains, not just their own operations. This means procurement needs supplier-specific emissions data, social impact metrics, and governance indicators. Spend-based estimates are no longer sufficient for reporting purposes.

CBAM (Carbon Border Adjustment Mechanism)

Since January 2026, EU importers of steel, aluminium, cement, fertilisers, electricity, and hydrogen must report embedded emissions and will soon need to purchase CBAM certificates. Procurement teams importing these materials need actual emissions data from their suppliers, not industry averages. See our dedicated CBAM compliance guide for details.

CSDDD (Corporate Sustainability Due Diligence Directive)

The CSDDD requires companies to identify, prevent, and mitigate adverse human rights and environmental impacts throughout their supply chains. This is not a reporting exercise. It requires operational due diligence processes with real monitoring and remediation capabilities.

National Due Diligence Laws

Germany’s Supply Chain Due Diligence Act (LkSG), France’s Duty of Vigilance Law, and Norway’s Transparency Act all impose obligations on companies to monitor supplier practices. Non-compliance carries financial penalties and reputational consequences.

From Compliance to Strategic Value

The companies getting the most from ESG in procurement are not just meeting regulatory minimums. They are using ESG as a lens for better supplier selection, stronger relationships, and long-term cost management.

Better Supplier Selection

When ESG criteria are built into sourcing decisions from the start, you select suppliers who are already aligned with your sustainability goals. This reduces the need for costly corrective actions later. It also helps you avoid suppliers who might become liabilities as regulations tighten.

Speya’s Source tool supports this by allowing procurement teams to find suppliers that are AI-vetted against open sources for ESG data. Instead of discovering ESG gaps after onboarding, teams can filter for suppliers that meet their criteria before the first conversation.

Deeper Supply Chain Visibility

Moving beyond Tier 1 requires deliberate effort. Start by mapping your highest-risk categories and working with direct suppliers to understand their own sourcing practices. Technology can help here: AI-powered platforms can gather and cross-reference ESG data across multiple tiers, identifying risks that manual processes would miss.

Long-Term Supplier Partnerships

The best ESG outcomes come from collaboration, not policing. SoftCo’s 2025 ESG procurement guide emphasizes that businesses are building long-term relationships with suppliers who share ESG goals, based on open data, continuous improvement, and mutual accountability. This approach produces better results than punitive compliance programs.

Circular Economy Integration

ESG in procurement increasingly includes circular economy principles. This means working with suppliers who design for reuse, recycling, or regeneration. According to Veridion’s ESG trends analysis, circular procurement reduces waste and supports long-term sustainability without sacrificing business performance. It also creates cost advantages as raw material prices become more volatile.

Building an ESG-Integrated Procurement Process

Here is a practical approach to embedding ESG into your procurement operations.

Step 1: Define Material ESG Criteria

Not every ESG factor matters equally for every category. Conduct a materiality assessment to identify which environmental, social, and governance factors are most relevant to your top spend categories. Steel and aluminium suppliers might be measured primarily on carbon intensity. Textile suppliers might be assessed on labor practices and water usage. Technology suppliers might focus on data privacy and conflict minerals.

Build these criteria into your sourcing templates and RFP processes so ESG is evaluated alongside price, quality, and delivery.

Step 2: Collect Primary Data, Not Just Estimates

The shift from spend-based estimates to supplier-specific primary data is the single biggest change in ESG procurement. This means getting actual emissions figures, actual water usage data, actual labor audit results from individual suppliers, not industry averages.

This is where scale becomes a challenge. Collecting primary data from ten suppliers is manageable. Collecting it from five hundred is a different problem. Speya’s Enrich capability helps here by deploying AI agents that autonomously gather ESG data from open sources across your supplier base. This qualifying information is gathered without manual effort, giving procurement teams the data foundation they need for accurate reporting.

Step 3: Embed ESG in Supplier Scorecards

ESG performance should appear alongside traditional metrics in your supplier scorecards. Track carbon intensity trends, audit results, certification status, and incident history. Weight these metrics based on your materiality assessment. Review them at the same cadence as quality and delivery metrics.

When ESG data is visible in the same dashboard as operational performance, it gets taken seriously in business reviews and sourcing decisions.

Step 4: Monitor Continuously

ESG is not a once-a-year assessment. Regulations change, supplier circumstances evolve, and incidents happen between review cycles. Continuous monitoring means tracking news events (environmental violations, labor disputes, governance failures), regulatory changes that affect your suppliers, certification expirations and renewals, and shifts in ESG ratings from third-party providers.

Speya’s scheduled AI agents provide this continuous monitoring across your supplier base, flagging ESG-relevant changes as they emerge rather than waiting for the next formal review.

Step 5: Report with Confidence

The end goal is reporting that stands up to scrutiny. This means documented data sources, clear methodology, verifiable supplier-level metrics, and audit trails. The BreatheESG 2026 trends report notes that elevated data quality standards are now a baseline expectation from investors, auditors, and regulators. Companies need to show they are moving from estimates to verified data, and that progression needs to be documented.

Common Mistakes to Avoid

Treating ESG as a separate function from procurement is the most common error. When ESG lives in a sustainability department disconnected from sourcing decisions, it becomes a reporting burden rather than a decision-making tool. ESG data should flow directly into supplier evaluation and selection.

Another mistake is applying the same ESG criteria to every supplier regardless of category or risk level. This creates unnecessary burden for low-risk suppliers while potentially under-scrutinizing high-risk ones. A risk-based approach is more effective and more efficient.

Finally, focusing only on Tier 1 suppliers gives a misleading picture. Many ESG risks, particularly around labor practices, environmental impact, and raw material sourcing, are concentrated in Tier 2 and beyond.

Frequently Asked Questions

What does ESG in procurement mean?

ESG in procurement means integrating environmental, social, and governance criteria into supplier selection, evaluation, and ongoing management. It covers carbon emissions, labor practices, diversity, anti-corruption, and resource usage across your supply chain. It is relevant at every stage from sourcing to contract management to offboarding.

Why is checkbox ESG compliance no longer enough?

Regulations like CSRD and CBAM now require supplier-specific primary data, not spend-based estimates. Investors and auditors demand verifiable metrics with clear methodology. Organizations that treat ESG as a form-filling exercise face regulatory penalties, reputational risk, and missed strategic opportunities.

What ESG regulations affect procurement teams in 2026?

Key regulations include the EU Corporate Sustainability Reporting Directive (CSRD), the Carbon Border Adjustment Mechanism (CBAM), the Corporate Sustainability Due Diligence Directive (CSDDD), Germany’s LkSG, France’s Duty of Vigilance Law, and Norway’s Transparency Act. Each imposes specific obligations on supply chain monitoring and reporting.

How can procurement teams collect reliable ESG data from suppliers?

Combine supplier self-assessments with independent verification through third-party data sources, AI-powered monitoring platforms, and recognized ESG rating services. The goal is to move from self-reported estimates to verified, supplier-specific primary data. Speya’s AI agents gather and verify ESG data autonomously across open sources.

What is the difference between Tier 1 and Tier 2 ESG visibility?

Tier 1 visibility covers your direct suppliers. Tier 2 visibility extends to your suppliers’ suppliers. Most companies have reasonable Tier 1 visibility but fewer than half have meaningful insight into Tier 2, which is where many ESG risks around labor practices and raw material sourcing are concentrated.

How does AI help with ESG in procurement?

AI can autonomously gather ESG data from open sources, verify environmental certifications, monitor news for ESG incidents, and flag risks across an entire supplier base. This makes continuous ESG monitoring practical even for large supplier portfolios, replacing manual data collection that cannot keep pace with regulatory demands.

Sources

Where Speya fits

Compliance starts with the suppliers you consider. Speya screens suppliers for ESG, certifications, and financial health at the point of discovery, so every shortlist already clears your compliance bar, and the data your CSRD obligations depend on is captured up front rather than chased after the fact. Related: CSRD.

Authority

Why you can trust this.

Speya runs ESG, certification and compliance screening for enterprise buyers on infrastructure independently audited to ISO 27001 and SOC 2 Type II, hosted entirely in the EU.

Enterprise procurement

IKEA, Roche, Clas Ohlson, Rusta, Ahlsell and STARK Group source with Speya.

Global consultancies

PwC and Deloitte run client sourcing on the platform.

Independently audited

ISO 27001 and SOC 2 Type II, third-party audited.

EU by default

Hosted in the EU. Supplier data never leaves EU borders.

S

Speya

The Speya team, building AI supplier discovery for enterprise procurement, covering sourcing, supplier data, risk and compliance.

Last updated

Sourcing, examined.

See how Speya finds, vets, and monitors your suppliers.

Book a demo