Skip to the answer

Disclosure GuidesPillar guides, articles, FAQ and expert notes

Level 2 · Decision guide·TNFD · Disclosure guides

TNFD Supplier Questionnaire: What Nature Data to Request Without Overburdening SMEs

A proportionate questionnaire model covering minimum fields, commodity and location priorities, evidence tiers, confidentiality, improvement plans and alignment with ESRS and GRI requests.

Who this is for A 13-minute read for reporting teams working through Data quality, screening tools and value-chain evidence, and for reviewers testing whether the evidence behind it holds.

Short answer

The answer, before the reasoning

A TNFD supplier questionnaire should not ask every supplier for a full biodiversity assessment. Start with a small set of fields that identify the supplier, product or commodity, activity, origin and location confidence, material water or biodiversity interfaces, controls, incidents, evidence and data gaps.

Use enhanced modules only for priority commodities, sectors or locations. Accept staged evidence, protect confidential coordinates, explain the purpose of each request and agree improvement milestones so that SMEs are not penalised simply for having less mature systems.

Educational practitioner material. Illustrative scenarios and wording require adaptation to the organisation’s facts, materiality approach, sector, locations and reporting context.

Quick orientation

Quick orientation

Applies to
Buyers requesting nature-related data from suppliers, including SMEs, traders, processors, contractors and service providers.
Primary decision
Which suppliers need which questions and evidence, at what granularity, for which decision and by when?
Core design
A short universal minimum, risk-based enhanced modules, evidence tiers, confidentiality options and an improvement plan.
Common confusion
Alignment of data fields with TNFD, GRI or ESRS does not mean that a supplier questionnaire proves compliance with any framework.

Technical status

Current technical status

<p>TNFD provides value-chain and sector guidance but does not prescribe one universal supplier questionnaire. GRI 101 supports the use of primary, secondary and modelled data with transparent limitations. ESRS requirements and their legal status must be checked for the reporting period: the European Commission adopted revised ESRS on 3 July 2026, but the delegated acts were not in force at the review date until Official Journal publication.</p>

Why a long universal questionnaire usually fails

Nature data are difficult because they are location-specific, activity-specific and often several tiers upstream. A generic fifty-question form sent to every supplier tends to produce low response, inconsistent units, unsupported yes-or-no answers and duplicated requests from different buyers. SMEs may have strong local knowledge and controls but limited reporting systems, English-language capacity or access to geospatial tools.

The better design starts with the buyer decision. Is the information needed to screen a commodity, identify a sourcing location, assess water or biodiversity risk, support a disclosure metric, verify a claim, set a target or manage a corrective action? Each question should have a named use, owner, evidence expectation and rule for what happens if the answer is unknown.

Figure 1. A proportionate supplier-data funnel. All suppliers receive a short minimum core; only priority suppliers receive enhanced modules and deeper verification.

In practice

Step 1: prioritise before asking

Screening factor Why it matters Possible source before contacting the supplier
Sector and activity Some activities have higher potential dependencies and impacts. Supplier classification, product description, TNFD sector guidance, ENCORE-style screening.
Commodity or material High-impact agricultural, forestry, mineral or biological inputs may sit behind a processed product. Bill of materials, purchasing category, customs code, commodity conversion table.
Geography and location Water, ecosystems, sensitive locations and regulation vary by place. Country, region, buyer delivery point, known facility, public registry, remote sensing.
Spend, volume and criticality Supports proportionality and business consequence analysis. Procurement ledger, production dependency, sole-source status and substitution options.
Incidents, complaints or claims Can indicate actual or potential impacts and control gaps. Audit, grievance, media, regulator, quality and legal records.
Data gap and influence A high-priority unknown may justify engagement, while low influence may require collaboration or proxy data. Previous questionnaires, contract rights, relationship owner and supplier maturity.

In practice

The minimum core questionnaire

Minimum field Suggested supplier prompt Why the buyer needs it
Supplier identity and role Confirm legal name, facility or operating entity, and whether you produce, process, trade or provide a service. Prevents confusion between contracting entity and nature-relevant activity.
Product, commodity or service List the products, main natural commodities or materials supplied to us. Connects commercial categories to potential nature interfaces.
Activity location Provide country and region for relevant production or service activity; provide coordinates where available. Supports basin, biome, sensitive-location and regulatory screening.
Origin and traceability level For traded or processed inputs, state the furthest upstream origin known and the percentage covered. Makes unknown, mixed and mass-balance origin visible.
Water and biodiversity interface Does the activity materially depend on or affect water, land, soil, ecosystems or species? Briefly describe. Flags issues for enhanced modules without demanding a full assessment.
Key controls and certifications List relevant permits, management controls and certifications, including scope and expiry. Provides initial control evidence without assuming effectiveness.
Incidents, grievances and enforcement Report material environmental incidents, unresolved grievances or enforcement in the requested period, subject to legal restrictions. Supports actual-impact and liability assessment.
Evidence and data quality For each material answer, identify the source, period, method and whether it is measured, estimated or modelled. Distinguishes primary evidence from unsupported statements.
Data gaps and improvement plan List unavailable fields and the date or support needed to improve them. Turns non-response into a managed plan rather than a hidden blank.
Confidentiality needs Identify fields that require restricted access, aggregation or a data-sharing agreement. Protects commercially sensitive, security or personal information.

Rule

Minimum does not mean superficial

<p>A short questionnaire can be decision-useful when each field is defined, linked to a business decision and supported by evidence tiers. Avoid open questions such as &quot;Do you protect biodiversity?&quot; without location, activity, period or evidence.</p>

In practice

Enhanced modules for priority suppliers

Module Trigger Additional fields
Commodity and traceability Agricultural, forestry, fishery, mineral or other high-impact commodity. Commodity volume, origin level, procurement point, farm, mine or facility, chain of custody, conversion or extraction date, unknown share.
Water Water-dependent or water-impacting activity in stressed or sensitive context. Source, withdrawal, consumption, discharge, quality, basin, seasonal constraint, other users, permit and target.
Land and biodiversity Site or sourcing near sensitive locations or with land-use change potential. Coordinates or polygon, footprint, previous and current land use, habitat, conversion, species, mitigation and monitoring.
Pollution and waste Chemicals, processing, extraction, waste or incident potential. Material pollutants, release route, waste destination, spills, control standard and exceedance.
Communities and rights Land, water, livelihoods, Indigenous Peoples, Local Communities or grievance relevance. Engagement process, rights assessment, FPIC where applicable, grievances, remedy and confidentiality.
Targets and outcomes Strategic supplier, public claim or buyer target depends on performance. Baseline, boundary, metric, target year, actions, progress, verification, outcomes and trade-offs.

Use evidence tiers instead of pass or fail

Evidence tier is not a universal quality score. A Tier 2 permit may be strong evidence that a permit exists but weak evidence that ecological outcomes are achieved. A Tier 1 explanation from a smallholder may be more current than an outdated certificate. The buyer should assess relevance, period, scope, method, location specificity and consistency.

In practice

Tier Evidence type How to use it — Buyer control
Tier 1 Supplier self-declaration or responsible-person explanation. Initial screening and gap identification. — Plausibility check, signature, date and follow-up trigger.
Tier 2 Policy, permit, certificate, invoice, meter record, map or management-system document. Supports process, scope or quantitative evidence. — Check validity, scope, period and consistency with answer.
Tier 3 Geospatial dataset, chain-of-custody record, third-party audit, laboratory result or public authority record. Supports location, impact, control or traceability conclusions. — Check methodology, assurance scope, resolution and exceptions.
Tier 4 Site, commodity or landscape verification; independent specialist evidence; repeated outcome monitoring. Supports high-risk decisions, claims and outcome assessment. — Define criteria, independence, sampling, remediation and retention.

Confidentiality and data access

Precise coordinates, customer names, supplier lists, Indigenous knowledge, grievance information, security-sensitive infrastructure and commercial formulations may require protection. The questionnaire should offer structured options: public, buyer-restricted, third-party data room, aggregated location, masked coordinates or not shared with reason. Access should be limited to the stated purpose and retention period.

In practice

Confidentiality option Use case What can still be disclosed externally
Exact data under restricted access Coordinates or commercially sensitive supplier identity. Method, coverage, aggregation, region, confidence and reason for restriction.
Third-party verification Supplier will not disclose raw data to the buyer. Verifier conclusion, criteria, scope, exceptions and period where permitted.
Aggregation or masking Security, competition or personal-data concerns. Basin, region, range or portfolio-level metric with limitations.
Temporary non-disclosure with plan Data rights or systems not yet available. Gap, materiality, interim proxy, owner and expected resolution date.

Design an SME improvement plan

An SME may not be able to provide coordinates, ecosystem-condition metrics or third-party verification in year one. The buyer should distinguish lack of capacity from lack of willingness or serious control failure. Improvement plans can set staged milestones: confirm activity and country, identify facility or sourcing region, provide permits and incidents, add measured water data, improve commodity origin, and eventually verify priority locations or outcomes.

In practice

Milestone Supplier action Buyer support or control
0-3 months Complete minimum core and identify material gaps. Plain-language guidance, helpdesk, translated form, no duplicate requests.
3-6 months Provide facility or origin information and basic evidence. Template, data-sharing agreement, mapping support, contract clarification.
6-12 months Collect selected primary data and implement corrective actions. Training, shared tools, reasonable cost or commercial incentive, review meeting.
12-24 months Improve traceability, verification and outcome monitoring for priority issues. Longer-term contract, collaboration, audit or landscape programme.

Align fields without assuming framework compliance

One controlled data model can support several reporting systems, but the narratives and decisions remain framework-specific. TNFD focuses on nature-related dependencies, impacts, risks and opportunities and location-based assessment. GRI 101 focuses on reporting biodiversity impacts and related management and data. ESRS uses its own legal scope, double-materiality process and disclosure requirements. The buyer should map common fields while preserving the applicable version, boundary, materiality and claim.

In practice

Common supplier field TNFD use GRI 101 use — ESRS use and caution
Activity and location Locate, priority and sensitive-location assessment. Sites and supply-chain products or services with significant biodiversity impacts. — Value-chain and biodiversity or water assessment where material; check applicable ESRS edition and reporting year.
Impact driver and state data Evaluate dependencies and impacts and build DIRO pathways. Direct drivers, changes to state of biodiversity and ecosystem services. — Supports environmental impact, risk and opportunity evidence; does not itself establish double materiality.
Controls, actions and targets Prepare responses, metrics and targets. Management, actions and performance disclosures. — Supports policies, actions, metrics and targets where required; evidence and legal scope remain separate.
Data type and limitation Confidence, proxy and improvement plan. Primary, secondary or modelled data and limitations. — Supports value-chain estimates and data-quality explanations subject to current legal requirements.

Rule

Version warning for ESRS

<p>The European Commission adopted revised ESRS on 3 July 2026, but the delegated acts were not in force at the review date until publication in the Official Journal. Any supplier-questionnaire mapping must specify the ESRS edition and reporting period actually applicable.</p>

A practical buyer workflow

1. Define decisions and users. List the risk, impact, disclosure, target, claim and procurement decisions the data will support.

2. Screen the supplier universe. Use sector, commodity, geography, spend, criticality, incidents and data gaps before contacting suppliers.

3. Issue the minimum core. Keep definitions, units, period, confidentiality and evidence options clear.

4. Trigger enhanced modules. Apply only to priority suppliers, commodities, locations or issues.

5. Validate and score evidence. Assess relevance, period, scope, method, location specificity, consistency and tier.

6. Resolve contradictions. Compare supplier answers with contracts, audits, public data, geospatial screening and previous periods.

7. Agree corrective or improvement plans. Set milestones, support, commercial consequences and escalation rules.

8. Integrate into registers. Link supplier evidence to commodity, location, DIRO, metric, target, claim and source IDs.

9. Control access and retention. Apply purpose limitation, confidentiality, permissions, retention and deletion rules.

10. Review effectiveness. Measure response quality, burden, duplicate requests, data improvement and decisions changed.

Worked example: an SME packaging supplier

Illustrative scenario. A food company identifies a small packaging supplier as relevant because the product contains paper fibre and the production facility is in a water-stressed region. The SME cannot provide a biodiversity footprint and does not know forest origin for all fibre. The buyer requests the minimum core, facility location, water source and use, paper certification scope, recycled content, known pulp origin, incidents and data gaps.

The supplier provides facility and meter data, a valid chain-of-custody certificate for part of the volume and a self-declaration for the remainder. The buyer records mixed evidence tiers, uses region-level screening for unknown pulp, and agrees a twelve-month plan to improve origin coverage. It does not mark the supplier as non-compliant with TNFD or GRI; it uses the information to manage its own value-chain assessment and procurement decision.

In practice

Weak versus stronger questions

Weak question Why it is weak Stronger prompt
"Do you have biodiversity impacts? Yes/No" No activity, location, period, definition or evidence. Describe material land, water, ecosystem or species dependencies and impacts for the supplied product and relevant locations; identify evidence and gaps.
"Are you TNFD compliant?" TNFD is not a supplier certification and the question does not produce usable data. Provide specified activity, location, control, incident, metric and evidence fields that support the buyer assessment.
"Provide GPS coordinates for all suppliers." May be disproportionate, unavailable or confidential. Provide the best available origin for priority commodities, confidence, coverage and a plan to improve granularity.
"Upload all environmental documents." Creates burden and an unreviewable data room. Request named evidence for each material answer, with period, scope and confidentiality classification.

In practice

Common mistakes and corrections

Mistake Risk created Correction
Sending the same form to every supplier High burden, low response and weak relevance. Use core plus risk-based modules.
Treating blanks as zero impact Data gaps are converted into false reassurance. Use unknown status, proxy screening and improvement milestones.
Requesting data without definitions Units, periods and boundaries become inconsistent. Provide data dictionary, examples and permitted response types.
Equating certificate with outcome Scope and performance are overstated. Record scheme, scope, period, chain of custody and residual gaps.
Collecting coordinates without access controls Commercial, security, rights or privacy risks arise. Use purpose limitation, restricted access, masking and retention rules.
Duplicating ESRS, GRI and TNFD forms Supplier burden rises while internal reconciliation remains weak. Use a master data model and framework-specific mappings and narratives.

Rule

Myth / reality

<p>Myth: &quot;SMEs cannot provide useful nature data.&quot; Reality: many can provide activity, location, permits, practices, incidents and local knowledge. The buyer should request proportionate fields, accept staged evidence and support improvement rather than demanding a complex footprint immediately.</p>

Readiness

Questionnaire readiness checklist

  • Every question has a defined decision use, owner, response type, period and evidence expectation.
  • The supplier universe is screened before enhanced modules are issued.
  • Commodity, activity and production location are distinguished from supplier legal address.
  • Unknown, not applicable, unavailable and confidential are separate response states.
  • Data definitions include unit, boundary, denominator, methodology and estimation status where relevant.
  • Evidence tiers are used with relevance and scope checks rather than as an automatic pass or fail score.
  • Confidential coordinates, grievance information and Indigenous or community knowledge have appropriate access controls.
  • SME support, translation, reasonable deadlines and duplicate-request control are built into the process.
  • Improvement plans have milestones, owners, support and escalation rules.
  • TNFD, GRI and ESRS mappings specify version and do not make automatic compliance claims.

Self-check

  1. Could the buyer remove any question without losing a decision-useful field?
  2. Would an SME understand the requested location level, evidence and confidentiality options?
  3. Does the process distinguish a serious control failure from a capacity-related data gap?
  4. Can each supplier answer be traced into a commodity, location, DIRO, metric, target or claim record?

In practice

Related TNFD components and disclosures

Connection Relationship Practical use
TNFD Value Chains guidance Direct implementation Prioritisation, data types, location specificity, traceability and value-chain assessment.
LEAP Locate and Evaluate Direct implementation Supplier activity, commodity, location, dependencies, impacts and evidence.
TNFD Risk and impact management B-C Process connection Value-chain process and integration into overall risk management.
GRI 101: Biodiversity 2024 Interoperability Primary, secondary and modelled data, supply-chain locations, impact drivers and limitations.
TNFD-ESRS correspondence mapping Comparison and interoperability Shows high-level correspondence but does not create automatic compliance or replace version checks.
Sector-specific TNFD guidance Supporting Determines enhanced fields for food, mining, real estate, financial institutions and other sectors.

Take it with you

The checklists as a working spreadsheet

Every checklist and table on this page, with empty status, owner and evidence columns for your team to fill in and keep.

Download .xlsx

✓ LRA AI Assistant · Human-in-the-loop

Ask about this guide

It answers from this page, and reaches into the linked disclosure cards when your question is about the standard itself. Your first two answers are free without signing in.

Try
2 free answers Automated · the LRA team is one click away

Go deeper · TNFD

ESG Reporting Full Stack

There is no standalone LRA course for this framework yet. The Full Stack programme covers the reporting system it sits in — materiality, data, drafting and assurance — with exercises on your own data.

Available as Guided Flex, Live Cohort, 1:1 Expert Mentorship or Corporate Programme.

See the Full Stack programme
/en/knowledge-hub/disclosure-guides/tnfd/tnfd-data-tools-and-value-chain-evidence/tnfd-supplier-questionnaire-what-nature-data-to-request-without-overbu/