Level 2 · Decision guide·TNFD · Disclosure guides
TNFD Supplier Questionnaire: What Nature Data to Request Without Overburdening SMEs
A proportionate questionnaire model covering minimum fields, commodity and location priorities, evidence tiers, confidentiality, improvement plans and alignment with ESRS and GRI requests.
Published passport
Current as at 10 August 2026
Reviewed by
Dr Ross KurinkoLinkedIn
Strategic ESG Advisor · IFRS S1 & S2 / GRI / ESRS expert
GRI Certified Global Trainer · PhD, University of Cambridge · ESG-AI expert
15+ years on FTSE 100 & Fortune Global 500 disclosures
Canary Wharf, London
LRA educational guidance · Not issued or endorsed by TNFD
Edition written against
—
Published
10 Aug 2026
Knowledge Hub guide
Last reviewed
10 Aug 2026
Short answer
The answer, before the reasoning
A TNFD supplier questionnaire should not ask every supplier for a full biodiversity assessment. Start with a small set of fields that identify the supplier, product or commodity, activity, origin and location confidence, material water or biodiversity interfaces, controls, incidents, evidence and data gaps.
Use enhanced modules only for priority commodities, sectors or locations. Accept staged evidence, protect confidential coordinates, explain the purpose of each request and agree improvement milestones so that SMEs are not penalised simply for having less mature systems.
Educational practitioner material. Illustrative scenarios and wording require adaptation to the organisation’s facts, materiality approach, sector, locations and reporting context.
Quick orientation
Quick orientation
- Applies to
- Buyers requesting nature-related data from suppliers, including SMEs, traders, processors, contractors and service providers.
- Primary decision
- Which suppliers need which questions and evidence, at what granularity, for which decision and by when?
- Core design
- A short universal minimum, risk-based enhanced modules, evidence tiers, confidentiality options and an improvement plan.
- Common confusion
- Alignment of data fields with TNFD, GRI or ESRS does not mean that a supplier questionnaire proves compliance with any framework.
Technical status
Current technical status
<p>TNFD provides value-chain and sector guidance but does not prescribe one universal supplier questionnaire. GRI 101 supports the use of primary, secondary and modelled data with transparent limitations. ESRS requirements and their legal status must be checked for the reporting period: the European Commission adopted revised ESRS on 3 July 2026, but the delegated acts were not in force at the review date until Official Journal publication.</p>
Why a long universal questionnaire usually fails
Nature data are difficult because they are location-specific, activity-specific and often several tiers upstream. A generic fifty-question form sent to every supplier tends to produce low response, inconsistent units, unsupported yes-or-no answers and duplicated requests from different buyers. SMEs may have strong local knowledge and controls but limited reporting systems, English-language capacity or access to geospatial tools.
The better design starts with the buyer decision. Is the information needed to screen a commodity, identify a sourcing location, assess water or biodiversity risk, support a disclosure metric, verify a claim, set a target or manage a corrective action? Each question should have a named use, owner, evidence expectation and rule for what happens if the answer is unknown.
Figure 1. A proportionate supplier-data funnel. All suppliers receive a short minimum core; only priority suppliers receive enhanced modules and deeper verification.
In practice
Step 1: prioritise before asking
| Screening factor | Why it matters | Possible source before contacting the supplier |
|---|---|---|
| Sector and activity | Some activities have higher potential dependencies and impacts. | Supplier classification, product description, TNFD sector guidance, ENCORE-style screening. |
| Commodity or material | High-impact agricultural, forestry, mineral or biological inputs may sit behind a processed product. | Bill of materials, purchasing category, customs code, commodity conversion table. |
| Geography and location | Water, ecosystems, sensitive locations and regulation vary by place. | Country, region, buyer delivery point, known facility, public registry, remote sensing. |
| Spend, volume and criticality | Supports proportionality and business consequence analysis. | Procurement ledger, production dependency, sole-source status and substitution options. |
| Incidents, complaints or claims | Can indicate actual or potential impacts and control gaps. | Audit, grievance, media, regulator, quality and legal records. |
| Data gap and influence | A high-priority unknown may justify engagement, while low influence may require collaboration or proxy data. | Previous questionnaires, contract rights, relationship owner and supplier maturity. |
In practice
The minimum core questionnaire
| Minimum field | Suggested supplier prompt | Why the buyer needs it |
|---|---|---|
| Supplier identity and role | Confirm legal name, facility or operating entity, and whether you produce, process, trade or provide a service. | Prevents confusion between contracting entity and nature-relevant activity. |
| Product, commodity or service | List the products, main natural commodities or materials supplied to us. | Connects commercial categories to potential nature interfaces. |
| Activity location | Provide country and region for relevant production or service activity; provide coordinates where available. | Supports basin, biome, sensitive-location and regulatory screening. |
| Origin and traceability level | For traded or processed inputs, state the furthest upstream origin known and the percentage covered. | Makes unknown, mixed and mass-balance origin visible. |
| Water and biodiversity interface | Does the activity materially depend on or affect water, land, soil, ecosystems or species? Briefly describe. | Flags issues for enhanced modules without demanding a full assessment. |
| Key controls and certifications | List relevant permits, management controls and certifications, including scope and expiry. | Provides initial control evidence without assuming effectiveness. |
| Incidents, grievances and enforcement | Report material environmental incidents, unresolved grievances or enforcement in the requested period, subject to legal restrictions. | Supports actual-impact and liability assessment. |
| Evidence and data quality | For each material answer, identify the source, period, method and whether it is measured, estimated or modelled. | Distinguishes primary evidence from unsupported statements. |
| Data gaps and improvement plan | List unavailable fields and the date or support needed to improve them. | Turns non-response into a managed plan rather than a hidden blank. |
| Confidentiality needs | Identify fields that require restricted access, aggregation or a data-sharing agreement. | Protects commercially sensitive, security or personal information. |
Rule
Minimum does not mean superficial
<p>A short questionnaire can be decision-useful when each field is defined, linked to a business decision and supported by evidence tiers. Avoid open questions such as "Do you protect biodiversity?" without location, activity, period or evidence.</p>
In practice
Enhanced modules for priority suppliers
| Module | Trigger | Additional fields |
|---|---|---|
| Commodity and traceability | Agricultural, forestry, fishery, mineral or other high-impact commodity. | Commodity volume, origin level, procurement point, farm, mine or facility, chain of custody, conversion or extraction date, unknown share. |
| Water | Water-dependent or water-impacting activity in stressed or sensitive context. | Source, withdrawal, consumption, discharge, quality, basin, seasonal constraint, other users, permit and target. |
| Land and biodiversity | Site or sourcing near sensitive locations or with land-use change potential. | Coordinates or polygon, footprint, previous and current land use, habitat, conversion, species, mitigation and monitoring. |
| Pollution and waste | Chemicals, processing, extraction, waste or incident potential. | Material pollutants, release route, waste destination, spills, control standard and exceedance. |
| Communities and rights | Land, water, livelihoods, Indigenous Peoples, Local Communities or grievance relevance. | Engagement process, rights assessment, FPIC where applicable, grievances, remedy and confidentiality. |
| Targets and outcomes | Strategic supplier, public claim or buyer target depends on performance. | Baseline, boundary, metric, target year, actions, progress, verification, outcomes and trade-offs. |
Use evidence tiers instead of pass or fail
Evidence tier is not a universal quality score. A Tier 2 permit may be strong evidence that a permit exists but weak evidence that ecological outcomes are achieved. A Tier 1 explanation from a smallholder may be more current than an outdated certificate. The buyer should assess relevance, period, scope, method, location specificity and consistency.
In practice
| Tier | Evidence type | How to use it — Buyer control |
|---|---|---|
| Tier 1 | Supplier self-declaration or responsible-person explanation. | Initial screening and gap identification. — Plausibility check, signature, date and follow-up trigger. |
| Tier 2 | Policy, permit, certificate, invoice, meter record, map or management-system document. | Supports process, scope or quantitative evidence. — Check validity, scope, period and consistency with answer. |
| Tier 3 | Geospatial dataset, chain-of-custody record, third-party audit, laboratory result or public authority record. | Supports location, impact, control or traceability conclusions. — Check methodology, assurance scope, resolution and exceptions. |
| Tier 4 | Site, commodity or landscape verification; independent specialist evidence; repeated outcome monitoring. | Supports high-risk decisions, claims and outcome assessment. — Define criteria, independence, sampling, remediation and retention. |
Confidentiality and data access
Precise coordinates, customer names, supplier lists, Indigenous knowledge, grievance information, security-sensitive infrastructure and commercial formulations may require protection. The questionnaire should offer structured options: public, buyer-restricted, third-party data room, aggregated location, masked coordinates or not shared with reason. Access should be limited to the stated purpose and retention period.
In practice
| Confidentiality option | Use case | What can still be disclosed externally |
|---|---|---|
| Exact data under restricted access | Coordinates or commercially sensitive supplier identity. | Method, coverage, aggregation, region, confidence and reason for restriction. |
| Third-party verification | Supplier will not disclose raw data to the buyer. | Verifier conclusion, criteria, scope, exceptions and period where permitted. |
| Aggregation or masking | Security, competition or personal-data concerns. | Basin, region, range or portfolio-level metric with limitations. |
| Temporary non-disclosure with plan | Data rights or systems not yet available. | Gap, materiality, interim proxy, owner and expected resolution date. |
Design an SME improvement plan
An SME may not be able to provide coordinates, ecosystem-condition metrics or third-party verification in year one. The buyer should distinguish lack of capacity from lack of willingness or serious control failure. Improvement plans can set staged milestones: confirm activity and country, identify facility or sourcing region, provide permits and incidents, add measured water data, improve commodity origin, and eventually verify priority locations or outcomes.
In practice
| Milestone | Supplier action | Buyer support or control |
|---|---|---|
| 0-3 months | Complete minimum core and identify material gaps. | Plain-language guidance, helpdesk, translated form, no duplicate requests. |
| 3-6 months | Provide facility or origin information and basic evidence. | Template, data-sharing agreement, mapping support, contract clarification. |
| 6-12 months | Collect selected primary data and implement corrective actions. | Training, shared tools, reasonable cost or commercial incentive, review meeting. |
| 12-24 months | Improve traceability, verification and outcome monitoring for priority issues. | Longer-term contract, collaboration, audit or landscape programme. |
Align fields without assuming framework compliance
One controlled data model can support several reporting systems, but the narratives and decisions remain framework-specific. TNFD focuses on nature-related dependencies, impacts, risks and opportunities and location-based assessment. GRI 101 focuses on reporting biodiversity impacts and related management and data. ESRS uses its own legal scope, double-materiality process and disclosure requirements. The buyer should map common fields while preserving the applicable version, boundary, materiality and claim.
In practice
| Common supplier field | TNFD use | GRI 101 use — ESRS use and caution |
|---|---|---|
| Activity and location | Locate, priority and sensitive-location assessment. | Sites and supply-chain products or services with significant biodiversity impacts. — Value-chain and biodiversity or water assessment where material; check applicable ESRS edition and reporting year. |
| Impact driver and state data | Evaluate dependencies and impacts and build DIRO pathways. | Direct drivers, changes to state of biodiversity and ecosystem services. — Supports environmental impact, risk and opportunity evidence; does not itself establish double materiality. |
| Controls, actions and targets | Prepare responses, metrics and targets. | Management, actions and performance disclosures. — Supports policies, actions, metrics and targets where required; evidence and legal scope remain separate. |
| Data type and limitation | Confidence, proxy and improvement plan. | Primary, secondary or modelled data and limitations. — Supports value-chain estimates and data-quality explanations subject to current legal requirements. |
Rule
Version warning for ESRS
<p>The European Commission adopted revised ESRS on 3 July 2026, but the delegated acts were not in force at the review date until publication in the Official Journal. Any supplier-questionnaire mapping must specify the ESRS edition and reporting period actually applicable.</p>
A practical buyer workflow
1. Define decisions and users. List the risk, impact, disclosure, target, claim and procurement decisions the data will support.
2. Screen the supplier universe. Use sector, commodity, geography, spend, criticality, incidents and data gaps before contacting suppliers.
3. Issue the minimum core. Keep definitions, units, period, confidentiality and evidence options clear.
4. Trigger enhanced modules. Apply only to priority suppliers, commodities, locations or issues.
5. Validate and score evidence. Assess relevance, period, scope, method, location specificity, consistency and tier.
6. Resolve contradictions. Compare supplier answers with contracts, audits, public data, geospatial screening and previous periods.
7. Agree corrective or improvement plans. Set milestones, support, commercial consequences and escalation rules.
8. Integrate into registers. Link supplier evidence to commodity, location, DIRO, metric, target, claim and source IDs.
9. Control access and retention. Apply purpose limitation, confidentiality, permissions, retention and deletion rules.
10. Review effectiveness. Measure response quality, burden, duplicate requests, data improvement and decisions changed.
Worked example: an SME packaging supplier
Illustrative scenario. A food company identifies a small packaging supplier as relevant because the product contains paper fibre and the production facility is in a water-stressed region. The SME cannot provide a biodiversity footprint and does not know forest origin for all fibre. The buyer requests the minimum core, facility location, water source and use, paper certification scope, recycled content, known pulp origin, incidents and data gaps.
The supplier provides facility and meter data, a valid chain-of-custody certificate for part of the volume and a self-declaration for the remainder. The buyer records mixed evidence tiers, uses region-level screening for unknown pulp, and agrees a twelve-month plan to improve origin coverage. It does not mark the supplier as non-compliant with TNFD or GRI; it uses the information to manage its own value-chain assessment and procurement decision.
In practice
Weak versus stronger questions
| Weak question | Why it is weak | Stronger prompt |
|---|---|---|
| "Do you have biodiversity impacts? Yes/No" | No activity, location, period, definition or evidence. | Describe material land, water, ecosystem or species dependencies and impacts for the supplied product and relevant locations; identify evidence and gaps. |
| "Are you TNFD compliant?" | TNFD is not a supplier certification and the question does not produce usable data. | Provide specified activity, location, control, incident, metric and evidence fields that support the buyer assessment. |
| "Provide GPS coordinates for all suppliers." | May be disproportionate, unavailable or confidential. | Provide the best available origin for priority commodities, confidence, coverage and a plan to improve granularity. |
| "Upload all environmental documents." | Creates burden and an unreviewable data room. | Request named evidence for each material answer, with period, scope and confidentiality classification. |
In practice
Common mistakes and corrections
| Mistake | Risk created | Correction |
|---|---|---|
| Sending the same form to every supplier | High burden, low response and weak relevance. | Use core plus risk-based modules. |
| Treating blanks as zero impact | Data gaps are converted into false reassurance. | Use unknown status, proxy screening and improvement milestones. |
| Requesting data without definitions | Units, periods and boundaries become inconsistent. | Provide data dictionary, examples and permitted response types. |
| Equating certificate with outcome | Scope and performance are overstated. | Record scheme, scope, period, chain of custody and residual gaps. |
| Collecting coordinates without access controls | Commercial, security, rights or privacy risks arise. | Use purpose limitation, restricted access, masking and retention rules. |
| Duplicating ESRS, GRI and TNFD forms | Supplier burden rises while internal reconciliation remains weak. | Use a master data model and framework-specific mappings and narratives. |
Rule
Myth / reality
<p>Myth: "SMEs cannot provide useful nature data." Reality: many can provide activity, location, permits, practices, incidents and local knowledge. The buyer should request proportionate fields, accept staged evidence and support improvement rather than demanding a complex footprint immediately.</p>
Readiness
Questionnaire readiness checklist
- Every question has a defined decision use, owner, response type, period and evidence expectation.
- The supplier universe is screened before enhanced modules are issued.
- Commodity, activity and production location are distinguished from supplier legal address.
- Unknown, not applicable, unavailable and confidential are separate response states.
- Data definitions include unit, boundary, denominator, methodology and estimation status where relevant.
- Evidence tiers are used with relevance and scope checks rather than as an automatic pass or fail score.
- Confidential coordinates, grievance information and Indigenous or community knowledge have appropriate access controls.
- SME support, translation, reasonable deadlines and duplicate-request control are built into the process.
- Improvement plans have milestones, owners, support and escalation rules.
- TNFD, GRI and ESRS mappings specify version and do not make automatic compliance claims.
Self-check
- Could the buyer remove any question without losing a decision-useful field?
- Would an SME understand the requested location level, evidence and confidentiality options?
- Does the process distinguish a serious control failure from a capacity-related data gap?
- Can each supplier answer be traced into a commodity, location, DIRO, metric, target or claim record?
In practice
Related TNFD components and disclosures
| Connection | Relationship | Practical use |
|---|---|---|
| TNFD Value Chains guidance | Direct implementation | Prioritisation, data types, location specificity, traceability and value-chain assessment. |
| LEAP Locate and Evaluate | Direct implementation | Supplier activity, commodity, location, dependencies, impacts and evidence. |
| TNFD Risk and impact management B-C | Process connection | Value-chain process and integration into overall risk management. |
| GRI 101: Biodiversity 2024 | Interoperability | Primary, secondary and modelled data, supply-chain locations, impact drivers and limitations. |
| TNFD-ESRS correspondence mapping | Comparison and interoperability | Shows high-level correspondence but does not create automatic compliance or replace version checks. |
| Sector-specific TNFD guidance | Supporting | Determines enhanced fields for food, mining, real estate, financial institutions and other sectors. |
Take it with you
The checklists as a working spreadsheet
Every checklist and table on this page, with empty status, owner and evidence columns for your team to fill in and keep.
✓ LRA AI Assistant · Human-in-the-loop
Ask about this guide
It answers from this page, and reaches into the linked disclosure cards when your question is about the standard itself. Your first two answers are free without signing in.
Go deeper · TNFD
ESG Reporting Full Stack
There is no standalone LRA course for this framework yet. The Full Stack programme covers the reporting system it sits in — materiality, data, drafting and assurance — with exercises on your own data.
Available as Guided Flex, Live Cohort, 1:1 Expert Mentorship or Corporate Programme.