Three regulatory instruments are converging on European supply bases, and none of them lands where organisations filed them. CSRD turns Scope 3 into a number your CFO signs: a reported, assured figure in which supplier emissions dominate. CSDDD turns your supplier's conduct into your board's liability: a due-diligence obligation that reaches through the chain, with civil consequences. And an SBTi commitment, once public, translates into supplier-engagement coverage and category intensity budgets that someone has to source against.
Filed under compliance, these look like reporting projects. Read as what they are, sourcing requirements, each one demands a defensible answer to the question, what did this award buy, in emissions, in conduct risk, in progress against the target? The Omnibus recalibration moved thresholds and dates, not the direction: for organisations still in scope, the award question stands.
Why the reporting toolchain cannot answer
The standard toolchain collects questionnaires and assembles disclosures. It can describe the supply base; it cannot decide anything about it. When the auditor asks how supplier emissions entered the award decision, a disclosure platform has no answer, because it was never in the decision.
There is a data problem underneath. Spend-based Scope 3 is a guess by category; activity-based is an answer, and the difference is classification. An emissions number computed over a spend file full of duplicates, free text and misclassified items inherits every defect in that file. The unglamorous prerequisite for every credible ESG figure is cleansed, classified supplier and item master data.
The award as the instrument
Inside a constraint model, the regulatory demands become decision variables. Supplier emissions factors, ratings, certifications and sanctions screens are enriched from independent sources through APIs and weighted into the award next to price, quality and risk. The CSDDD due-diligence posture stops being a policy document and becomes a modelled constraint: concentration limits, screened registries, documented alternatives. The SBTi budget stops being an aspiration and becomes a line in the scenario: this award consumes this much of this year's category emissions budget, and here is the scenario that consumes less. None of that comes off a shelf: the budgets, registries and weights are tailored per category, code-on-the-fly, which is exactly what a standardised compliance module cannot do.
Sourcing is the one corporate process that touches every supplier with money attached. That makes the award decision the most powerful compliance instrument the organisation owns, and the only one that changes supplier behaviour rather than describing it.
The trace is the deliverable
Under CSRD assurance, the audit trail is not a by-product; it is the deliverable. A trace from data inputs through weights to the signed award is what an auditor, a board and a works council can all stand on. If your current process cannot produce it, the gap is not in your reporting layer. It is in your award model.
Bring us one category with a real emissions budget and we will build the trace into the event from round one.