What it means in practice
The term gets used loosely, so it helps to separate the three pillars. The Ecovers a company's environmental footprint: greenhouse-gas emissions across Scope 1, 2 and 3, plus energy, water, waste and pollution. The S covers people: labour practices, health and safety, human rights in the supply chain, and community impact. The G covers how the company is run: board oversight, controls, ethics — and whether someone is genuinely accountable for the numbers the company publishes.
What does it mean to beESG compliant? Here is the part most overviews skip: there is no universal certificate. No regulator issues an “ESG compliant” badge. A company is compliant regime by regime — compliant with CSRD, compliant with SB 253 — meaning it has worked out which rules reach it, produced what each one demands by its deadline, and can defend every disclosed figure with evidence if an assurance provider asks. For most mid-market manufacturers today, the binding obligations are overwhelmingly climate obligations, so the E pillar — emissions data — is where compliance is won or lost.
ESG compliance vs. ESG reporting vs. sustainability
Three terms that get swapped around interchangeably, but sit at different altitudes. Sustainability is the goal, reporting is the communication, and compliance is the legally enforceable slice:
| ESG compliance | ESG reporting | Sustainability | |
|---|---|---|---|
| What it is | Meeting binding ESG requirements placed on you by law or contract | Publishing ESG information — whether required or voluntary | Actually operating within environmental and social limits |
| Driven by | Regulators and enterprise customers, with deadlines and penalties | Regulators, investors, buyers, rating agencies | Company strategy and values |
| Falling short means | Fines, listing consequences, lost contracts | An incomplete picture for stakeholders | Long-term business and climate risk |
You can report without being compliant (the report misses what a specific law demands) and you can pursue sustainability without either. Compliance is the floor — the part with deadlines attached.
ESG regulatory compliance: the rules of 2026
ESG regulatory compliance is the legally binding subset — obligations written into statute, with covered-entity definitions, deadlines and penalties. Four regimes matter most to manufacturers right now, and they overlap heavily on the data they demand. See the full framework comparison for the detail; in brief:
EU CSRD
The CSRD requires large and listed EU companies — and, phased in, non-EU groups with significant EU activity — to report Scope 1, 2 and 3 emissions under the ESRS, assess double materiality, and obtain limited assurance. In practice its reach is wider: buyers subject to CSRD pass data requests down their supply chains, so mid-market suppliers feel it too.
Singapore SGX · IFRS S2
All SGX-listed issuers report climate information under IFRS S2, structured across the ISSB's four pillars — governance, strategy, risk management, and metrics & targets — with Scope 1 and 2 emissions today. Straits Times Index companies add Scope 3 from FY2026, and large private companies are being phased in.
UAE Federal Climate Law
The strictest of the four. Every business operating in the UAE — free zones included, with no size exemption — measures and reports Scope 1 and 2 emissions annually through the government's MRV platform; the first filing deadline of 30 May 2026 has already passed. Evidence is retained for five years, and large emitters register for independent verification.
California SB 253 / 261
SB 253 requires any company with over $1B in revenue doing business in California to report Scope 1 and 2 — first deadline 10 August 2026 — and Scope 3 from 2027, measured under the GHG Protocol. SB 261 requires companies over $500M to publish a biennial climate-risk report. Because so many firms sell into California, the rules reach manufacturers nationwide.
The wider landscape is bigger still: the UK is building climate disclosure into its forthcoming Sustainability Reporting Standards, and in India, SEBI requires the top 1,000 listed companies to file the BRSR. Wherever you sell, the direction of travel is the same — climate disclosure is becoming a condition of doing business. ESG Orbit itself focuses on the four regimes above.
ESG compliance standards and frameworks
Behind every regulation sits a standard — the technical rulebook that defines how the numbers are produced. Five come up constantly:
GHG Protocol
The de-facto rulebook for measuring corporate emissions. It defines Scope 1 (direct), Scope 2 (purchased energy) and the fifteen Scope 3 categories — and nearly every regulation, including California's SB 253, points at it.
ESRS
The European Sustainability Reporting Standards — the detailed disclosure requirements companies actually follow under CSRD, covering climate alongside broader environmental, social and governance topics.
IFRS S1 & S2
The ISSB's global baseline: S1 for general sustainability disclosure, S2 for climate. Built on TCFD, adopted by Singapore's SGX regime, and being taken up by dozens of jurisdictions.
GRI
Impact-focused sustainability reporting standards, widely used voluntarily by companies reporting to a broad stakeholder audience, and designed to interoperate with ESRS.
ISO 14064
The ISO specification for organisational greenhouse-gas inventories (Part 1) and for verifying them (Part 3) — often the reference when an assurance provider checks your numbers.
The pattern worth understanding: voluntary standards harden into law. TCFD began as investor guidance and is now the skeleton of IFRS S2 and of binding listing rules; the GHG Protocol began as a voluntary partnership and is now written into California statute. Regulations decide who must report and by when; standards define how the numbers are produced. ESG compliance means satisfying both at once.
What compliance requires operationally
On the ground, compliance looks less like strategy and more like operations: chasing the missing October gas bill for Plant 2, reconciling ERP purchase lines into Scope 3 categories, and getting a packaging supplier to answer a questionnaire before the reporting window closes. Five workstreams recur across every framework:
Collect Scope 1, 2 and 3 activity data
Fuel and gas invoices, electricity bills, refrigerant top-ups, fleet records, freight documents, and purchase lines exported from your ERP — the raw material every framework starts from.
Keep evidence behind every number
A disclosed figure without a source document is a finding waiting to happen. Each number needs a traceable line back to the bill, meter reading or supplier response it came from.
Engage your suppliers
For most manufacturers, the majority of the footprint is Scope 3 — it lives with suppliers. Compliance means a repeatable way to request, chase and collect their data every year.
Withstand assurance
CSRD requires limited assurance now; SB 253 phases it in from 2027; the UAE requires verification for large emitters. Your methodology, factors and evidence all get examined.
Govern the process
Someone accountable signs the report. That means documented methodology, controlled changes, and an audit trail showing who touched which number and when.
If you are still at the measuring stage, start with the first workstream — our guide to tracking your carbon footprint walks through it step by step.
ESG compliance tools: spreadsheets vs. software
An honest answer, because vendors rarely give one: spreadsheets genuinely work at the start. One site, one framework, a few dozen utility bills a year — a well-kept workbook plus published emission factors will get you to a defensible Scope 1 and 2 inventory, and plenty of first UAE or SGX filings will be produced exactly that way.
Spreadsheets break down at three points. Multiple frameworks: the same dataset must be projected into ESRS, IFRS S2's four pillars and a GHG Protocol report, and keeping four workbooks consistent by hand is where errors creep in. Scope 3 at scale: fifty suppliers emailing back fifty attachments does not consolidate itself. And assurance: an auditor asking “where did this number come from, and who changed it?” needs an evidence trail a workbook cannot reliably provide. That is the point where dedicated software earns its keep — collecting data once, tiering the confidence of every number, and producing each regulator's format from a single dataset. That is how ESG Orbit is built, with a supplier portal and a per-number evidence trail at the core.
A five-step starting path for manufacturers
- 1
Scope your obligations
Map where you operate, sell and are listed against each regime's thresholds. Our framework comparison lays the four side by side. Compare the four frameworks
- 2
Inventory your data sources
List every meter, utility account, fuel card, fleet, freight lane and ERP purchase category per site — before collecting anything.
- 3
Collect once, into one dataset
Frameworks overlap heavily on the underlying data. One well-organised emissions dataset can feed every report; four separate spreadsheets cannot.
- 4
Tier your confidence and attach evidence
Mark each number as measured, calculated or estimated, link its source document, and upgrade estimates to measured data over time — starting with the biggest ones.
- 5
Report per regime
Project the same dataset into each required format: ESRS for CSRD, the four-pillar IFRS S2 structure for SGX, the UAE's MRV filing, GHG Protocol reporting for SB 253.
Most manufacturers can complete steps one and two in a week with no new tooling. If you would rather see the whole path run end to end on your own facilities, book a demo — 45 minutes, on your data.
