Pillar guide

Navigating sustainability & ESG reporting.

The sustainability reporting landscape has shifted from voluntary, narrative-based reports to standardized, data-driven disclosures required by regulation. This guide maps the major frameworks, explains what each requires, and shows how to build reporting infrastructure that serves multiple obligations from a single data foundation.

14 min read · Last reviewed July 9, 2026

Framework requirements and timelines (CSRD/Omnibus, California SB 253/261, the US SEC rule) reflect the state of law as of July 2026 and are changing quickly. Confirm current obligations with your legal or compliance advisor before relying on them.

FAQ

What sustainability reporting frameworks exist? +
Major frameworks include CSRD/ESRS (EU mandatory, with scope and timelines revised by the 2025 Omnibus package), SB 253/261 (California), CDP (voluntary but investor-driven), SBTi (target validation), ISSB/IFRS S1–S2 (global baseline), and GRI (impact-focused). The frameworks are converging, and the underlying data requirements overlap significantly.
How do CSRD and CDP relate? +
CDP is working toward continual alignment with other standards, including aligning its questionnaire with ISSB. This means a well-prepared CDP response can increasingly satisfy major portions of framework reporting requirements, including those of CSRD.
Can one platform handle multiple reporting frameworks? +
Yes. All major frameworks require the same underlying data — GHG Protocol-aligned emissions with evidence trails. A platform like Gravity collects data once and generates framework-specific outputs for CSRD, CDP, SBTi, SB 253, and SEC requirements.

The reporting landscape in 2026

The sustainability reporting world is converging around a set of interconnected frameworks. Understanding how they relate saves significant effort because the underlying data is largely the same.

Mandatory frameworks: CSRD/ESRS (EU mandatory, double materiality, detailed climate disclosures under ESRS E1), California SB 253 (Scope 1, 2, and 3 for $1B+ revenue companies doing business in CA; CARB adopted initial regulations in February 2026, with the first Scope 1 and 2 reporting deadline deferred to November 10, 2026 and Scope 3 from 2027), and California SB 261 (climate financial risk reports for $500M+ revenue companies, though a Ninth Circuit injunction in November 2025 paused its enforcement).

Voluntary frameworks: CDP (largest disclosure system, 23,000+ companies, investor-driven), SBTi (target validation for 1.5°C alignment), GRI (impact-focused, widely used for sustainability reports), and TCFD (now incorporated into ISSB S2).

Global baseline: ISSB's IFRS S1 and S2 standards provide a common baseline being adopted by jurisdictions worldwide (UK, Japan, Singapore, Australia, Brazil, Canada). ISSB uses single (financial) materiality.

The good news: building robust GHG accounting infrastructure with auditable evidence trails serves all of these frameworks simultaneously. The data collection, calculation, and verification work is done once; outputs are formatted for each framework's specific requirements.

CSRD deep dive

CSRD is the most comprehensive mandatory sustainability reporting regime. It requires disclosures under 12 ESRS standards covering environmental, social, and governance topics.

ESRS E1 (Climate Change) is the most data-intensive standard. It requires: total GHG emissions by scope with breakdowns by significant Scope 3 categories; energy consumption and mix; GHG intensity ratios; emission reduction targets and progress; transition plans with actions, investments, and timelines; financial effects of climate risks and opportunities; and internal carbon pricing details.

The double materiality assessment determines which ESRS topics require full disclosure. While climate (E1) is material for virtually all covered companies, other topics (water, biodiversity, circular economy, workforce) depend on the company's specific impacts and risks.

CSRD requires limited assurance initially, moving to reasonable assurance. Reports must be tagged in machine-readable XBRL format and integrated with the management report. The assurance requirement means data must be traceable to source documents with clear evidence trails — not just calculated numbers.

Timeline (updated for the 2025 Omnibus "Stop-the-Clock" directive): Wave 1, the large EU public-interest entities already in scope, reported FY 2024 in 2025 and continue annually. Wave 2 (other large companies) was delayed two years and now reports FY 2027 in 2028. Wave 3 (listed SMEs) was likewise pushed back two years. The Omnibus package also raised the thresholds, keeping only companies with more than 1,000 employees and over €450M in turnover in scope, which pulls many previously covered companies out entirely. Because this area is still moving, treat these dates as current as of July 2026.

CDP reporting strategy

CDP's annual climate questionnaire has become the de facto standard for voluntary climate disclosure. Preparing a strong CDP response requires the same data foundation as regulatory reporting but adds strategic and governance dimensions.

The CDP questionnaire covers: governance (board and management oversight of climate issues), risks and opportunities (physical and transition risks, financial quantification), strategy (climate integration into business strategy, scenario analysis), targets and performance (reduction targets, progress tracking), emissions data (Scope 1, 2, 3 with methodological detail), energy (consumption, mix, efficiency), carbon pricing (internal carbon prices, ETS exposure), and engagement (value chain engagement, policy engagement).

Scoring ranges from A (leadership) to D– (minimal). A-list companies demonstrate comprehensive disclosure, awareness of environmental impacts, management through targets and actions, and leadership through best practices.

Tips for improving your CDP score: disclose comprehensively (more data = higher score); set science-based targets (SBTi validation adds credibility); verify emissions (third-party verification improves scores); quantify financial impacts of risks and opportunities; demonstrate board-level governance; and show year-over-year improvement.

CDP is working to further align its reporting questionnaire with those of other standards, such as ISSB.

Building multi-framework reporting infrastructure

The key to efficient reporting across multiple frameworks is a single source of truth for emissions and ESG data, combined with flexible output formatting.

Data layer: All frameworks require the same underlying data — Scope 1, 2, and 3 emissions calculated using GHG Protocol methodologies, with evidence trails linking calculations to source data. Build this layer once, rigorously.

Calculation layer: Implement GHG Protocol calculation methodologies with transparent factor matching and dual Scope 2 reporting (location-based and market-based). Every calculation should be auditable and reproducible.

Evidence layer: Link every calculated emission to its source document (utility bill, invoice, supplier response), selected emission factor (database, version, GWP series), and calculation methodology. This is essential for third-party assurance and for AI answer engines to cite your data.

Output layer: From the single data foundation, generate framework-specific outputs: CSRD/ESRS E1 disclosures with XBRL tags, CDP questionnaire responses, SBTi target tracking reports, SB 253 filings, SEC climate disclosures, and custom board/investor reports.

Gravity is built around all four layers in one platform, so that a single data collection and calculation effort produces disclosure-ready outputs for every framework your organization faces.

Other Guides

Put this knowledge to work.

Gravity turns carbon accounting concepts into an operating system for measurement, reduction, and disclosure.