The Corporate Sustainability Reporting Directive is the most significant change to EU corporate reporting in a generation. 50,000 companies must now report detailed ESG data — and the first deadline has already passed. This is the complete guide to what CSRD requires, who it applies to, and how to comply.
What is CSRD and why does it exist?
The Corporate Sustainability Reporting Directive (CSRD) is EU Directive 2022/2464. It entered into force in January 2023 and requires qualifying companies to report detailed, standardised information about their environmental, social and governance (ESG) impacts, risks and opportunities.
CSRD exists because the EU Green Deal requires massive capital reallocation toward sustainable activities — and that reallocation requires reliable, comparable ESG data. The old Non-Financial Reporting Directive (NFRD) produced inconsistent, unverified reports that investors and regulators could not use. CSRD fixes that with mandatory standards, independent verification and machine-readable formats.
50,000+
Companies in CSRD scope across EU
12
ESRS topical reporting standards
Jan 2025
First reports already due (large PIEs)
4.5×
Increase in companies vs old NFRD
Who must comply — and when
CSRD rolls out in four phases based on company size and listing status. A company is in scope if it meets at least two of three size criteria: 250+ employees, €40M+ annual turnover, or €20M+ in total assets. For listed companies, different thresholds apply.
Phase 1Hard
Large PIEs — Jan 2025
Public interest entities with 500+ employees already reporting under NFRD. Approx. 2,000 companies across EU. First reports published Jan 2025 for FY2024.
Phase 2Hard
Large companies — Jan 2026
All large companies meeting 2-of-3 size criteria (250+ employees, €40M+ turnover, €20M+ assets). Approx. 15,000 additional companies. Reports due Jan 2026 for FY2025.
Phase 3Medium
Listed SMEs — Jan 2027
SMEs listed on EU regulated markets. Can use simplified ESRS standards. Approx. 15,000 companies. Reports due Jan 2027 for FY2026.
Phase 4Medium
Non-EU companies — Jan 2029
Non-EU parent companies with €150M+ EU net turnover and at least one EU subsidiary or branch. Reports due Jan 2029 for FY2028.
The ESRS framework — what you must report
CSRD reporting is structured around the European Sustainability Reporting Standards — 12 topical standards across Environmental, Social and Governance dimensions, plus two cross-cutting standards that apply to all companies. You do not have to report on all 12 topical standards — but you must conduct a double materiality assessment to determine which apply to your business.
Always mandatory
- ▸ESRS 1 — General requirements (cross-cutting)
- ▸ESRS 2 — General disclosures (cross-cutting)
- ▸Double materiality assessment
- ▸Value chain mapping
- ▸Stakeholder engagement documentation
- ▸Board oversight of sustainability
Subject to materiality
- ▸E1 Climate change — nearly always material
- ▸E2 Pollution — material for manufacturers
- ▸E3 Water and marine — material for water-intensive sectors
- ▸S1 Own workforce — nearly always material
- ▸G1 Business conduct — nearly always material
- ▸E4, E5, S2, S3, S4 — sector dependent
§ Key fact
Three modules are effectively mandatory for everyone
While CSRD allows companies to omit non-material ESRS modules, EFRAG guidance makes clear that E1 (climate), S1 (own workforce) and G1 (business conduct) are material for virtually all large companies. Auditors will scrutinise any company that excludes these — the bar for exclusion is extremely high.
The five pillars of a CSRD report
Every CSRD report must address five interconnected areas for each material sustainability topic. Understanding this structure helps you plan your data collection and report writing systematically rather than topic by topic.
Pillar 1Easy
Governance
Board oversight structures, management roles and responsibilities for sustainability. Who is accountable? How are sustainability targets set and monitored?
Pillar 2Medium
Strategy
How sustainability topics affect your business model and strategy. Resilience analysis — how does your strategy hold up under different climate and social scenarios?
Pillar 3Medium
Impact management
Policies, actions and targets for managing material impacts, risks and opportunities. What are you doing about it? What have you committed to achieve?
Pillar 4Hard
Metrics & targets
Quantitative data for each material topic — GHG emissions, energy use, workforce metrics, governance indicators. Tracked against targets with year-on-year comparability.
Pillar 5Hard
Value chain
Impacts, risks and opportunities across your full value chain — not just your own operations. Requires supplier and customer data for complete Scope 3 and social disclosures.
Third-party assurance — non-negotiable
Unlike NFRD, CSRD requires independent third-party assurance of your sustainability report. From 2025, limited assurance is required — similar to a financial audit review. From 2028, the standard moves to reasonable assurance — equivalent to a full financial audit. This means your data must be auditable, your methodology documented and your processes controlled.
⚠ Important
Engage your auditor 12 months before your deadline
The big four audit firms and specialist ESG assurance providers are already fully booked for 2026 reporting season. Companies that have not engaged an assurance provider by Q2 2025 risk not finding capacity — which means missing their filing deadline or filing unverified reports, both of which trigger regulatory action.
XBRL digital tagging — the technical requirement
CSRD requires sustainability reports to be filed in XBRL (eXtensible Business Reporting Language) format — the same machine-readable format used for financial reports under the European Single Electronic Format (ESEF). Each disclosure must be tagged with the relevant ESRS data point identifier, enabling regulators and investors to extract and compare data automatically across companies.
XBRL tagging is a technical requirement that most companies cannot handle in-house. Your reporting software or ESG platform must support ESRS taxonomy tagging. Manual XBRL tagging of a full CSRD report can take 40–80 hours without specialist software.
The compliance timeline — what to do and when
ESRS E1 checklist
0/10 complete
Determine your CSRD phase and filing deadline Appoint a CSRD project lead with board-level sponsorship Complete a double materiality assessment across all 12 ESRS topical standards Conduct a gap analysis — map current data against required ESRS disclosures Calculate Scope 1, 2 and 3 GHG emissions using GHG Protocol methodology Build data collection processes for all material ESRS metrics Engage third-party assurance provider — minimum 12 months before deadline Implement ESRS XBRL taxonomy tagging capability in your reporting system Draft your CSRD report with legal review of all policy and target disclosures Submit to board for approval and file with national registry by deadline How much does CSRD compliance cost?
For large companies building CSRD compliance from scratch, consultant-led programmes typically cost €150,000–€500,000 in year one. This covers materiality assessment, gap analysis, data system implementation, report writing, assurance and XBRL filing. Ongoing annual costs are typically €50,000–€150,000 for maintained programmes.
AI-powered platforms like ESGMaster can reduce first-year costs by 60–80% by automating the most time-intensive steps: gap analysis, GHG calculation, report drafting and XBRL tagging. The economic case for automation is strongest for mid-market companies where consultant fees represent the largest cost but internal resource is limited.
€500K
Typical consultant-led year-one cost
€150K
Typical year-one cost with ESGMaster
18mo
Average time to full compliance from zero
€0
ESGMaster cost for first 6 months
Free tool
Start your CSRD compliance today.
ESGMaster automates your gap analysis, GHG calculations, report drafting and XBRL tagging. Built for EU companies that need to comply — not just understand. Free for 6 months, no credit card.