How to Answer Customer and Bank ESG Questionnaires Using the EU Voluntary Standard

A customer or bank questionnaire often arrives as a spreadsheet, portal or PDF with a short deadline. Because the format looks administrative, teams may delegate it to sales, procurement or finance and answer directly from memory. The result is a hidden reporting system: different emissions numbers, different employee counts, contradictory policy claims and no record of what was sent to whom.

The EU voluntary standard can reduce this duplication because it supplies common disclosures, definitions and a structured Basic and Comprehensive architecture. But it is not a universal answer sheet. The requester may have a different purpose, request information outside the standard, use another period or ask for evidence that should be restricted. A good process therefore separates controlled reuse from automatic reuse.

Figure 1. Six controls turn an external questionnaire into a traceable reporting output rather than an uncontrolled spreadsheet exercise. London Reporting Academy learning visual.

The response team should not start in the first questionnaire cell. It should first create a request record. At minimum, record the requester, recipient business function, supplier legal entity, group or site covered, reporting period, deadline, requested format, confidentiality terms and the person who will approve the response.

Ask how the requester intends to use the information. A large customer may need value-chain data for Accounting Directive sustainability reporting, but the same organisation may also ask questions for procurement qualification, human-rights due diligence, product compliance, risk management or a voluntary supplier programme. A bank may ask for credit risk, financed-emissions analysis, sustainable-finance eligibility or its own reporting. The answer to “why?” determines which legal and commercial rules are relevant.

Purpose classification is the most important control because the value-chain cap is not a general ban on all sustainability questions. Under Directive (EU) 2026/470, the protected-undertaking right to decline applies to information exceeding the voluntary-standard limits when requested for sustainability reporting required by the Accounting Directive. The Directive expressly preserves other purposes, including Union due-diligence requirements, and does not create a supplier obligation to provide sustainability information.

Mapping should be exact enough to support a legal and data-quality conclusion. “Climate” is not an adequate map. Link the question to the relevant disclosure and datapoint, the employee band, the selected reporting module, applicability, and whether the item appears in Annex II. A field may be in the voluntary standard but outside Annex II, which means it is not part of the cap.

Annex II at a glance

“Included” above means included in the cap for the relevant employee band; it does not mean that every supplier is automatically required to provide it, that every item applies in all circumstances, or that the requester should ask for the full maximum. The adopted regulation emphasises that reporting undertakings should request only what they need and should request less where the full set is unnecessary.

The master response library is the operational bridge between the voluntary standard and external questionnaires. It stores answerable content as controlled data atoms rather than as paragraphs copied from old workbooks. One record may support the public report, a customer portal and a lender pack, while still retaining purpose-specific wording and access controls.

Controlled reuse means the underlying approved fact is reused while the response format is adapted. Before reuse, confirm that the questionnaire asks for the same concept. “Employees”, for example, may mean headcount, full-time equivalent, average during the year, period-end number, own workforce or workers in the value chain. “GHG emissions” may mean Scope 1, Scope 2, Scope 3, location-based, market-based, gross or net.

Same period: do not answer a 20X6 request with a 20X5 figure without a visible note.

Same boundary: distinguish the undertaking, consolidated group, site and product boundary.

Same unit and method: convert only through an approved transformation and keep the source value.

Same status: identify measured, estimated, not applicable, unavailable or not requested.

Same evidence: link the answer to the evidence snapshot available when submitted.

Same claim strength: a policy exists, a process operates and a process is effective are different statements.

A questionnaire deadline does not make missing data available. Where the undertaking has no reliable value, it should not enter zero, “N/A” without explanation or a figure copied from a different boundary. Use a controlled status such as not applicable, not collected, unavailable for the requested period, estimated, or withheld under a stated confidentiality process.

When an estimate is appropriate, retain the estimation method, inputs, assumptions, limitations, owner and review. The response should distinguish an estimated figure from a measured one. Where a requester seeks source evidence, provide the minimum sufficient support through a public document, redacted extract, secure data room, independent confirmation or methodology note, depending on sensitivity and purpose.

Not every response requires senior approval. Establish thresholds. Routine reuse of current approved Annex II data may be approved by the response owner. New estimates, disclosures of incidents, personal data, legal interpretations, forward-looking financial information, voluntary above-cap information and deviations from the current reporting boundary should be escalated.

The response history should make it possible to answer three questions months later: exactly what did we send, why did we send it, and which evidence supported it at the time? Retain the submitted workbook or portal export, recipient, purpose, date, version, approver, confidentiality terms, attachments, evidence snapshot and any later correction or clarification.

This is particularly important where a portal does not allow the supplier to download its response. Take a controlled export or screenshot record where lawful and practical, or keep a response log with the final values and narrative. Do not rely on the live portal as the only historical record.

Context. Apex Packaging has 84 employees. A major customer sends a 120-question supplier workbook for its sustainability report and procurement programme. A bank sends a separate climate and workforce questionnaire for annual credit review.

Triage and mapping. Apex labels 38 customer questions as Accounting Directive reporting, 42 as procurement or due diligence, 20 as duplicates and 20 as unclear. It maps the reporting questions to B1, B3, B6, B7, B8, B9, B10, C1, C6 and C7 and then tests the exact Annex II datapoints. The bank request is classified primarily as lending and risk management, not automatically as capped.

Response. Apex reuses approved period and boundary fields from its Option B reporting core. It asks the customer to remove duplicates and clarify mixed-purpose questions. It supplies current energy, emissions, water and workforce information, provides policy links, and uses restricted evidence for accident records. It explains that a product-level footprint is unavailable and proposes a phased assessment rather than entering a group-level estimate.

History. The submitted customer workbook and bank portal export are stored with mapping, approvals and evidence snapshots. When an HR data correction changes the gender split, the response owner checks both histories, sends a correction to the affected recipients and updates the master library.

Publication architecture: Must an EU Voluntary Sustainability Report Be Public?

Supplier response: How to Respond to an Above-Cap Sustainability Data Request Without Damaging the Customer Relationship.

Requester redesign: How Large Companies Should Redesign Supplier ESG Questionnaires Around the Value Chain Cap.

Status evidence: Protected Undertaking Self-Declaration: What Suppliers and Requesters Should Document.