Skip to the answer

Disclosure GuidesPillar guides, articles, FAQ and expert notes

Level 2 · Decision guide·TNFD · Disclosure guides

Geospatial Data for TNFD: Coordinates, Maps, Data Quality and Confidentiality

How to build a traceable location-data system from site and supplier records to spatial joins, controlled maps and public disclosure

Who this is for A 10-minute read for reporting teams working through Sensitive locations, priority locations and location data, and for reviewers testing whether the evidence behind it holds.

Published passport

Current as at 10 August 2026
RK Reviewed by Dr Ross KurinkoLinkedIn Strategic ESG Advisor · IFRS S1 & S2 / GRI / ESRS expert GRI Certified Global Trainer · PhD, University of Cambridge · ESG-AI expert 15+ years on FTSE 100 & Fortune Global 500 disclosures Canary Wharf, London LRA educational guidance · Not issued or endorsed by TNFD

Edition written against

TNFD Recommendations v1.0 are voluntary recommendations. LEAP and other TNFD publications provide implementation guidance. Dynamic datasets …

Published

10 Aug 2026

Knowledge Hub guide

Last reviewed

10 Aug 2026

Short answer

The answer, before the reasoning

A defensible TNFD map begins with controlled geospatial data lineage, not the final image. Each location should have a stable ID, link to the business activity or value-chain stage, geometry type, coordinate reference system, source, date, precision and confidence grade.

Geocoding, standardisation, spatial joins and ecological overlays should be reproducible and version-controlled. Mobile assets and uncertain supplier origins can be represented with routes, operating areas, approximate coordinates or explicit proxies, provided limitations remain visible. Precise internal coordinates may be protected through access controls, while public disclosure uses justified aggregation that does not remove material location information. A map is an analytical and disclosure output. It should never be the only record of the location method, data lineage or reviewer judgement.

Educational practitioner guidance. Not legal, scientific-validation or assurance advice. Apply TNFD to the organisation's facts, stated materiality approach, ecological context and reporting basis.

Quick orientation

Quick orientation

Applies to
Direct assets, leased sites, projects, routes, suppliers, commodity origins and downstream interfaces used in Locate or Strategy D disclosure.
Primary decision
Can a reviewer reproduce where the location came from, how it was joined to nature data and why the public map uses its chosen granularity?
Core outputs
Geospatial register, controlled GIS project/query, map-QA record, confidence grading, access-control decision and public-release layer.
Key distinction
Location precision is a property of the evidence; public granularity is a separate disclosure decision.
Common confusion
A latitude/longitude pair can look precise even when generated from a city centroid or postcode.

1. A TNFD map is the end of a controlled process

Location analysis supports finding interfaces with nature, applying sensitive-location criteria, selecting assessment locations and disclosing priority locations. If the team saves only a screenshot, it loses the source geometry, query, data versions and rationale that made the result reproducible.

Separate the source record, cleaned geometry, analysis layer, reviewed conclusion and public output. This allows a coordinate or dataset to be corrected without rewriting the whole assessment.

Rule

CONTROL PRINCIPLE

<p>Never overwrite raw coordinates or supplier declarations. Preserve the source record, create a controlled cleaned version and retain the transformation and reviewer decision.</p>

In practice

2. Choose a geometry that represents the business interface

Business interface Preferred geometry Fallback and limitation
Fixed facility or office Surveyed point plus operational or legal site polygon. Address-geocoded point; record whether it represents entrance, rooftop, centroid or postcode.
Mine, farm, forest, concession or project Boundary polygon and relevant sub-areas. Centroid/locality; cannot represent footprint, habitat mosaic or edge pathways precisely.
Supplier or processor Facility coordinate/polygon linked to supplier and product. Town, administrative area or declared region; suitable for screening, not a surveyed claim.
Trader or commodity origin Origin polygon/aggregation area linked to batch, season and commodity. Country/region proxy; retain unknown origin and avoid implied traceability.
Pipeline, road, line or vessel route Line/route with time or season attributes. Operating corridor or port pair; may conceal actual route.
Mobile fleet or temporary work Operating area, route or time-stamped event locations. Licence area or service territory; state temporal/spatial coverage.
Downstream use/disposal Destination, market, treatment or disposal locations where traceable. Market or scenario proxy; not observed end-user location.

In practice

3. Minimum fields for the geospatial register

Field group Minimum fields Why it matters
Identity Stable location ID; entity/supplier; activity; value-chain stage; commodity/product. Prevents orphan coordinates and supports data reuse.
Geometry Geometry type; coordinates or polygon/route reference; coordinate reference system. Allows correct transformation and analysis.
Source Source system/document; supplier declaration; survey; geocoder; version and date. Distinguishes observed, declared and modelled data.
Precision Surveyed, rooftop, address, postcode, town, region, country or proxy; error/scale. Stops false precision and guides suitable analysis.
Temporal data Valid from/to; period; season; observation/geocoding date. Nature and mobile activities change over time.
Confidence Verified, documented, declared, approximate, proxy or unknown; reviewer. Supports prioritisation and improvement.
Access/release Confidentiality, restricted fields, public aggregation and approval. Separates analytical precision from public granularity.

4. Geocoding without false precision

Record the original address, standardised address, geocoder/service date, returned coordinates, match type and confidence. A postcode, street or locality match must not be relabelled as a surveyed coordinate simply because it has many decimal places.

In practice

Precision class Example evidence Permitted use
Surveyed/authoritative boundary Survey, cadastral or approved asset geometry. Detailed analysis subject to scope/date.
Verified rooftop/entrance Coordinate checked against authoritative imagery or site evidence. Facility screening; may omit operating footprint.
Address-geocoded Exact address match from a named geocoder. Initial screening with match quality recorded.
Postcode/town centroid Generalised location from address data. Regional screening; not a precise proximity conclusion.
Supplier-declared area Locality, sourcing district or polygon supplied by counterparty. Proportionate assessment with declaration status visible.
Modelled proxy Commodity/sector distribution or country/region estimate. Portfolio screening only; never observed origin.
Unknown No defensible spatial evidence. Retain in scope; prioritise traceability.

5. Standardise, validate and preserve the raw layer

Data can arrive in different coordinate reference systems and formats. Identify the input CRS, transform to the analysis CRS, preserve original geometry and test for swapped latitude/longitude, invalid polygons, duplicates, implausible locations and records in the wrong country or sea.

Raw layer — immutable source coordinates or geometry plus source metadata.

Standardised layer — cleaned geometry in the selected CRS with documented transformations.

Analysis layer — buffers, basins, intersections and classifications generated by a versioned query.

Release layer — reviewed and possibly aggregated geometry approved for disclosure.

6. Spatial joins must be reproducible

Geospatial lineage connects source locations to geocoding, standardisation, spatial joins, review and controlled output. Metadata prevents proxies from being mistaken for surveyed precision.

A spatial join includes geometry, dataset/version, CRS, topological relationship, distance or intersection rule, edge-case treatment, output fields and review. “Within five kilometres” is different from “shares a catchment” or “route intersects a corridor”. Save the script, GIS model or documented manual workflow.

In practice

Join element Record Common failure
Input geometry Layer name, record count, type, CRS and version. Using a centroid when footprint or route matters.
Nature layer Publisher, title, version/date, resolution and licence. Using an undated screenshot or changed web service.
Relationship Intersects, within, nearest, buffer, basin membership or network connection. Describing proximity without the actual rule.
Threshold Distance, score or class and rationale. Copying a tool default without ecological basis.
Output Location ID, matched feature, result, confidence and exceptions. Retaining only a map colour.
Review Sample, false-positive/negative checks, reviewer and date. No challenge of edge cases or resolution.

7. Version control for dynamic datasets

Record a downloadable edition, API version, endpoint, extraction date or archived result where permitted. Separate ecological observation date, dataset publication/version and export date. Changes in a layer should trigger review of affected locations rather than silently rewriting prior conclusions.

Caution

DO NOT CONFUSE

<p>The date a map was exported is not necessarily the date of the ecological observation. Keep observation period, publication/version and extraction date separate.</p>

8. Mobile assets and changing locations

Vessels, projects, construction teams and fleets interact across routes and time windows. A registered-office coordinate is rarely meaningful. Use route segments, operating zones, ports, licence areas or time-stamped events and link them to the assessment period.

Define the relevant temporal window and season.

Separate planned, permitted and actual routes or areas.

Use aggregated tracks where raw telemetry is restricted, retaining the internal aggregation logic.

Identify hotspots and short-duration exposure rather than averaging them away.

In practice

9. Approximate and proxy locations can be used when visible

Category Safe description Control/improvement
Approximate coordinate Address-, postcode- or locality-based estimate. Record precision; avoid site-level overlap claims.
Declared origin Counterparty states facility, district or country without verification. Retain source/date and verification status.
Commodity proxy Modelled distribution used because origin is unavailable. Record model/year/scale/assumptions and screening purpose.
Spend-weighted country proxy Country allocation used to prioritise exposure. Do not imply physical traceability; pair with engagement.
Unknown origin No defensible location information. Keep as a gap, assign owner/date and prevent a no-exposure conclusion.

10. Map QA and confidentiality are separate reviews

Map release requires technical, ecological, security/rights and publication QA. Internal precise and public layers can differ, but confidentiality is not a blanket reason to remove location information.

Use role-based access for precise coordinates, raw supplier data and sensitive ecological information. Public aggregation may use basin, region, grid or cluster, but it must not group materially different locations or make a key issue disappear. State the level of specificity and rationale.

In practice

QA layer Core checks Evidence
Technical GIS QA CRS, duplicates/invalid geometry, lat/long swap, query logic and completeness. Validation report, sample review and exception log.
Ecological QA Scale, seasonality, pathway, receptor and dataset suitability. Specialist review and revised assumptions.
Security/privacy/rights QA Sensitive species, infrastructure, personal data, contracts and information governance. Case-specific decision record.
Release QA Aggregation rationale, material information retained, legend, source/date and caveat. Approved public layer and caption.

11. Practical workflow

1. Define the data model. Set stable IDs, geometry classes, precision grades, confidence and access fields.

2. Ingest without overwriting. Preserve addresses, surveys, supplier declarations, polygons and routes.

3. Geocode and grade. Record service, match level, date and confidence.

4. Standardise and validate. Transform CRS, repair geometry, deduplicate and test plausibility.

5. Link to business data. Connect every geometry to activity, product, commodity, supplier and period.

6. Version nature datasets. Record publisher, edition, resolution, licence and extraction date.

7. Run reproducible joins. Document relationship, threshold, query and exceptions.

8. Perform technical and ecological QA. Sample edge cases and challenge false precision.

9. Approve access and public granularity. Separate precise internal and public layers.

10. Archive and trigger updates. Retain inputs, outputs, scripts and decisions.

12. Hypothetical example: commodity trader

The register keeps each evidence class visible. Verified polygons support local screening; declared districts support subnational screening; country proxies support portfolio prioritisation only; unknown volume stays in the improvement queue. The public map reports sourcing regions and confidence categories while the internal layer retains permitted precision. The report does not claim full traceability.

Hypothetical scenario

ILLUSTRATIVE SCENARIO

<p>A trader buys cocoa through intermediaries. Ten per cent of volume has verified cooperative polygons, 35% supplier-declared districts, 40% country-level production proxies and 15% unknown origin. Warehouses and ports have precise coordinates.</p>

Illustrative only. It shows how the decision is made, not wording that can be copied or relied on.

In practice

Weak statement Stronger illustrative statement
All cocoa suppliers were mapped and no sensitive locations were identified. We mapped 10% of cocoa volume to verified cooperative polygons and 35% to supplier-declared districts. Forty per cent was assessed using country-level commodity proxies and 15% remained unknown. Proxy and unknown volumes are prioritised for engagement and are not presented as site-specific findings.

In practice

13. Common mistakes

Mistake Why it fails Correction
Decimal coordinates treated as surveyed A centroid can have many decimal places. Record source and precision class separately.
Source coordinates overwritten The transformation trail disappears. Keep immutable raw and controlled cleaned layers.
Only a map image saved The analysis cannot be reproduced. Retain inputs, query/model and result table.
Coordinate systems mixed silently Features can shift or joins fail. Record and validate CRS and transformation.
Latest web layer used without snapshot Prior results cannot be explained. Version/archive extraction and trigger review.
Unknowns removed Coverage is understated. Keep unknown/proxy classes and remediation.
All exact coordinates published Security, contractual or ecological concerns may be ignored. Use case-specific release QA.
All location data withheld Material information may be obscured. Disclose meaningful aggregation and rationale.

Myth

“If the map looks accurate, the geospatial data are accurate.”

Reality

Visual appearance does not reveal source, precision, CRS, data vintage, join logic or confidence. Fitness for purpose requires documented lineage and QA.

Readiness

14. Readiness checklist

  • Every geometry has a stable location ID and business/value-chain link.
  • Raw and cleaned geometry are stored separately.
  • Geometry type and CRS are recorded.
  • Precision and confidence are classified independently of decimal places.
  • Geocoding service, match type and date are documented.
  • Mobile assets include time/season attributes.
  • Nature layers have publisher, version/date, resolution, licence and extraction date.
  • Spatial joins record relationship, threshold, query and exceptions.
  • Technical and ecological QA are documented.
  • Approximate, proxy and unknown locations remain visible.
  • Internal access and public aggregation are approved separately.
  • The public map states granularity, source date and limitations.
  • 1. Could another analyst reproduce the map from the register and stored query?
  • 2. Can you distinguish a verified coordinate from a town centroid or country proxy?
  • 3. Does the confidentiality decision preserve meaningful location information?

Take it with you

The checklists as a working spreadsheet

Every checklist and table on this page, with empty status, owner and evidence columns for your team to fill in and keep.

Download .xlsx

✓ LRA AI Assistant · Human-in-the-loop

Ask about this guide

It answers from this page, and reaches into the linked disclosure cards when your question is about the standard itself. Your first two answers are free without signing in.

Try
2 free answers Automated · the LRA team is one click away

Go deeper · TNFD

ESG Reporting Full Stack

There is no standalone LRA course for this framework yet. The Full Stack programme covers the reporting system it sits in — materiality, data, drafting and assurance — with exercises on your own data.

Available as Guided Flex, Live Cohort, 1:1 Expert Mentorship or Corporate Programme.

See the Full Stack programme
/en/knowledge-hub/disclosure-guides/tnfd/tnfd-sensitive-and-priority-locations/geospatial-data-for-tnfd-coordinates-maps-data-quality-and-confidentia/