Evidence Register for the EU Voluntary Standard: What to Keep Behind Every Datapoint

A practical guide to building traceable evidence for energy, workforce, policy and other disclosures under the 2026 EU Voluntary Standard.

“Voluntary” describes whether the undertaking is legally required to use the Standard; it does not mean that reported information can be approximate, unowned or unsupported. Paragraph 11 requires reported information to be relevant, faithful, comparable, understandable and verifiable. B1 also requires an explicit statement of the selected reporting option. Those statements are difficult to support if the organisation cannot trace a number or narrative claim to the underlying record and explain its period, boundary and method.

The public report should not contain every invoice, payroll export or board minute. The evidence register sits behind the report. It provides a controlled index to the evidence, while permissions ensure that sensitive records remain available only to authorised users. This distinction between a public disclosure and its supporting evidence is especially important for workforce, policy, commercial and personal data.

Figure 1. Evidence register anatomy for one controlled datapoint.

The register can be maintained in a controlled spreadsheet, database or reporting platform. The technology is less important than the fields and workflow. A small organisation may use one row per datapoint; a more complex group may use separate records for each entity, site or data component and aggregate them into the reported fact.

Evidence quality depends on relevance, reliability and traceability. A system-generated extract may be stronger than a manually typed summary, but only if the report parameters and population are retained. An invoice may support purchased energy but not necessarily the energy period if bills straddle year-end. A policy document may prove that a policy exists but not that it has been implemented or effective. The register should therefore identify what each item proves and what it does not prove.

Paragraph 32 requires total energy consumption in MWh for undertakings with more than 10 employees and makes the renewable/non-renewable and electricity/fuels breakdown conditional on the organisation being able to obtain the necessary information. The evidence record must therefore distinguish the required total from the conditional breakdown and show how invoices, meter readings and fuel records were converted and aligned to the reporting period.

B8 requires workforce information such as the number of employees by employment contract and by gender. The evidence record should define whether the organisation reports headcount or full-time equivalents, the measurement date or averaging convention, the treatment of joiners/leavers and the group entities included. Payroll data may contain personal information, so the public datapoint can be supported without exposing names, salary data or individual records to the reporting team.

B2 is narrative, but it still needs evidence. If the undertaking states that it has a sustainability policy, future initiative or target, the evidence should show the approved document, scope, version, responsible owner and approval status. A draft document, an informal practice or a proposal in a meeting deck should not be described as an approved policy unless that status is accurate.

Figure 2. Energy, workforce and policy disclosures use different evidence, but a consistent control structure.

In a small organisation, one person may perform more than one role, but the register should still record the role performed. The data owner is accountable for the source process; the preparer transforms it into the reported datapoint; the reviewer challenges the method and evidence; the approver authorises release. Where the same person prepares and reviews a high-risk metric, a compensating management review or independent spot check should be documented.

Some supporting evidence contains personal data, trade secrets, legal advice, supplier pricing or security information. The evidence register should classify access and point to the controlled location without copying sensitive content into the public publication pack. Paragraph 22 permits omission of specific categories of protected information from the report, subject to identifying each omitted datapoint and reassessing the exemption at each reporting date. That reporting exemption is separate from routine evidence-access controls.

Create the datapoint list. Start from the selected reporting option and map each paragraph/subpoint, including conditions and voluntary status.

Assign owners. Name the source owner, preparer, reviewer and approver for each datapoint or disclosure group.

Define the evidence expected. State the source, calculation, review and release evidence required before collection begins.

Collect and link. Store controlled evidence references rather than uncontrolled email attachments.

Document methodology and boundaries. Record units, period, perimeter, assumptions, estimates and exclusions.

Review and resolve exceptions. Recalculate, reconcile, challenge contradictory evidence and document the resolution.

Approve a dataset version. Freeze the value/narrative and evidence status before design or external submission.

Record every release. Identify the recipient/output, date, version and any permitted restriction.

Roll forward. Copy the prior-year record, update changed evidence and preserve comparatives and change history.

A proportionate evidence register turns voluntary sustainability reporting from a collection of plausible statements into a repeatable controlled process. It lets an SME respond to reviewers, banks and customers without exposing confidential working papers, and it provides the foundation for comparatives, correction, assurance readiness and efficient annual roll-forward. The strongest register is not the one with the most attachments; it is the one that makes every material datapoint reproducible, reviewable and clearly approved for release.