EcoVadis vs CDP: which matters more for CSRD compliance?

This article is for informational purposes only and does not constitute legal advice. Consult a qualified legal professional for advice specific to your situation.

Two platforms, one compliance question

As CSRD reporting has moved from preparation into production, sustainability teams at large EU companies have been working through the same supply chain data problem: what do we actually need from our suppliers to satisfy our ESRS obligations, and which platforms help us collect it?

EcoVadis and CDP are the two platforms most likely to appear in that conversation. Both are used in corporate sustainability programmes. Both generate supplier-level data that EU buyers reference in their CSRD reporting. Both are sometimes described as supporting value chain compliance.

They are not alternatives to each other, and they are not interchangeable. They were built around different problems, collect different data, and are relevant to different parts of the ESRS framework. Whether EcoVadis or CDP matters more for a given company’s CSRD compliance depends on which ESRS topics are material to that company. For most large manufacturers and retailers, CDP is more directly relevant to their most demanding supply chain disclosure obligation, while EcoVadis covers ground that CDP does not.

Understanding the distinction is worth the time. Using the wrong platform, or treating one as a substitute for the other, creates a gap that an assurance auditor will identify.

What EcoVadis collects

EcoVadis produces a sustainability scorecard for suppliers, rated from 0 to 100 across four themes: environment, labour and human rights, ethics, and sustainable procurement. The process is a verified self-assessment. Suppliers complete a questionnaire, upload supporting documents, and receive a score after analyst review.

The environment theme within EcoVadis covers energy consumption, greenhouse gas emissions, water use, biodiversity, and local pollution. But it is important to be precise about what “covers” means here. EcoVadis asks suppliers whether they measure their greenhouse gas emissions, what targets they have set, what management systems they have in place, and what actions they have taken to reduce emissions. These questions generate information about the maturity of a supplier’s emissions management programme.

They do not generate emissions data in physical units.

A supplier with a gold EcoVadis score on the environment theme may have a well-documented emissions management system, a published reduction target, and a track record of year-on-year efficiency improvements. What the EcoVadis scorecard does not contain is the number: the tonnes of CO2 equivalent that supplier emitted last year from their operations, broken down by Scope 1 and 2, with methodology documented.

That distinction is the most important thing to understand about EcoVadis in the context of CSRD.

What CDP collects

CDP, formerly the Carbon Disclosure Project, operates a disclosure system through which companies report environmental data annually in response to questionnaires sent on behalf of investor and buyer signatories. Since 2024, CDP has integrated its previously separate climate change, water security, and forests questionnaires into a single corporate questionnaire. Companies disclose across all three topics in one submission, with climate change assessed for all respondents and forests and water questions applied based on sectoral relevance. For CSRD supply chain purposes, the climate change module is the relevant component.

The CDP climate questionnaire is substantively different from EcoVadis. It asks companies for their absolute greenhouse gas emissions in tonnes of CO2 equivalent, broken down by scope. It asks for the methodology used to calculate those emissions, the boundary applied, and whether the figures have been externally verified. It asks about physical climate risks and opportunities, transition risks, and the financial implications of both. It asks for emissions intensity metrics, reduction targets, and progress against them.

CDP data is emissions data in structured, comparable, methodology-documented form. It is collected specifically to satisfy the information needs of investors and buyers who need to understand the climate impact and exposure of the companies they deal with.

For a supplier who discloses through CDP, their response contains the figures a buyer needs to incorporate into a Scope 3 calculation: actual activity data or emissions totals that can be used as primary data inputs, rather than estimates derived from spend or industry averages.

The ESRS framework and where each platform fits

CSRD requires in-scope companies to report against the European Sustainability Reporting Standards. The specific ESRS topics that generate supply chain data requirements are concentrated in two standards: ESRS E1 on climate change, and ESRS S2 on workers in the value chain.

ESRS E1 and Scope 3 emissions

ESRS E1 requires disclosure of Scope 1, 2, and 3 greenhouse gas emissions. Scope 3 covers emissions from the value chain, across the fifteen categories defined in the GHG Protocol. For most large manufacturers, retailers, and branded consumer goods companies, Category 1 (purchased goods and services) is the largest Scope 3 category and therefore the most demanding supply chain data requirement.

ESRS E1 does not specify that companies must use primary data from their suppliers for Scope 3 calculations. The GHG Protocol, which ESRS E1 references, establishes a hierarchy: supplier-specific data is preferred where available; spend-based and average-data methods are acceptable where it is not. In practice, many companies will use a combination of approaches across their supplier portfolios.

But the direction of travel under CSRD assurance is toward primary data. A sustainability statement subject to limited assurance is assessed for whether the disclosures can be substantiated. Scope 3 figures derived entirely from spend-based estimation with no primary supplier data will increasingly be scrutinised as assurance standards mature. Companies whose major suppliers disclose emissions through CDP have access to primary data they can use to improve the quality of their Scope 3 calculations and the defensibility of their assurance position.

EcoVadis environment scores cannot serve this function. They describe the quality of a supplier’s emissions management, not the quantity of their emissions. A buyer cannot derive a Scope 3 Category 1 figure from their suppliers’ EcoVadis scores.

For ESRS E1, CDP is the directly relevant platform.

ESRS S2 and value chain labour conditions

ESRS S2 requires disclosure of material impacts, risks, and opportunities relating to workers across the value chain. In-scope companies must describe how they identify adverse human rights impacts in their supply chains, what due diligence processes they have in place, and what outcomes those processes have produced.

EcoVadis is relevant here. Its labour and human rights theme covers working conditions, health and safety, social dialogue, and human development. A buyer who systematically gathers EcoVadis scores from their suppliers has a structured basis for assessing where labour-related risks are concentrated in their supply chain, and can use that assessment as part of the evidence base for their double materiality assessment and their ESRS S2 disclosures.

EcoVadis does not constitute a complete ESRS S2 compliance programme. The standard requires more than a screening score: it requires narrative disclosure of specific identified impacts, the actions taken in response, and the effectiveness of those actions. But it contributes structured, comparable data at scale across large supplier portfolios in a way that CDP does not.

CDP’s climate questionnaire is not designed to collect labour and human rights information. For ESRS S2, EcoVadis is the more relevant platform.

The gap neither covers

Both platforms are relevant to aspects of CSRD. Neither covers the full picture.

EcoVadis does not provide the emissions data that ESRS E1 Scope 3 reporting requires. CDP does not provide the labour and human rights information that ESRS S2 requires. A buyer who relies on EcoVadis alone for their CSRD supply chain data has a gap on climate. A buyer who relies on CDP alone has a gap on labour conditions.

The additional point is that neither platform was designed around ESRS specifically. EcoVadis predates CSRD by fifteen years. CDP operates a framework designed around investor and buyer disclosure needs that has evolved separately from the ESRS development process. Both provide data that is relevant to CSRD obligations, but neither maps directly to ESRS structure or terminology, and neither generates outputs that can be lifted into a CSRD sustainability statement without translation.

The assurance question

CSRD requires sustainability reports to be subject to independent limited assurance. Omnibus I (Directive (EU) 2026/470, in force 18 March 2026) removed the previous trajectory toward reasonable assurance: limited assurance is now the permanent standard, with a limited assurance standard to be adopted by the Commission no later than 1 July 2027. This is the test that matters for how seriously to take the choice between platforms.

An assurance auditor reviewing Scope 3 disclosures under ESRS E1 will assess the reliability of the data sources used in the calculation. They will look at whether the company has described its methodology, whether the boundary is consistent with prior years, and whether the primary data inputs, where used, are traceable to documented supplier disclosures.

An EcoVadis environment score is not a primary data input for a Scope 3 calculation. It is a rating of emissions management maturity. An auditor will recognise the difference. If a company attempts to substantiate its Scope 3 figures by reference to EcoVadis data, the auditor will identify that as a methodology gap.

CDP disclosures, where available and where verified by the disclosing supplier, provide primary data that can be used in Scope 3 calculations and that an auditor can trace to a documented source. They are not automatically sufficient: the quality of CDP data varies, and auditors will assess whether the data is recent, whether the methodology is appropriate, and whether the verification status is adequate. But they are the right category of evidence for this purpose. EcoVadis scores are not.

What this means for buyers

For a large EU company building its CSRD supply chain data programme, the practical implication is a segmented approach.

For Scope 3 emissions data, the priority is to identify which suppliers account for the largest share of emissions in purchased goods and services categories, and to obtain primary data from those suppliers. CDP disclosure is the most efficient mechanism for this where suppliers already participate. For suppliers who do not participate in CDP, direct data requests, carbon footprint assessments, or engagement programmes to build supplier-level data quality are the alternative. EcoVadis environment scores are useful for assessing which suppliers have the internal capability to produce reliable emissions data, but they are not a substitute for the data itself.

For value chain labour and human rights, EcoVadis provides the most scalable mechanism for gathering structured assessments across large supplier portfolios. Combined with site audit programmes and the specific due diligence documentation that CSDDD requires for companies in scope for both regulations, EcoVadis contributes meaningfully to the ESRS S2 data collection process.

The mistake is using one platform where the other is needed, or treating a high EcoVadis score as evidence that the supplier’s climate data requirements are also met.

What this means for suppliers

For a non-EU supplier receiving data requests from EU buyers, the implication is different.

If your EU buyer is asking for your EcoVadis score, they are primarily gathering information for labour and human rights screening, general ESG risk tiering, and the kind of supply chain visibility that informs a double materiality assessment. Completing EcoVadis addresses that request.

If your EU buyer is asking for CDP data, or for your Scope 1 and Scope 2 emissions in structured form, they are building their Scope 3 calculations for ESRS E1. This is a different request requiring different data. A strong EcoVadis score does not satisfy it.

If your EU buyer is asking for both, they have correctly identified that the two platforms serve different obligations and are not treating them as substitutes. You will need to engage with both processes separately.

One development under Omnibus I is relevant here. The directive introduced a value chain cap: CSRD-reporting companies cannot formally require suppliers with 1,000 employees or fewer to provide sustainability information beyond the content of a voluntary reporting standard the Commission is developing. This limits what buyers can mandate from smaller suppliers for their CSRD reporting. It does not prevent buyers from requesting that information, and many will continue to do so. But if you are a smaller supplier and a buyer is demanding extensive sustainability data as a contractual requirement, the value chain cap is relevant to that conversation.

It is worth being alert to requests that conflate the two. A buyer who asks for your “sustainability data” or your “ESG performance data” without specifying which platform or which metric may be unclear themselves about what their CSRD disclosures require. Clarifying whether they need your emissions figures or your EcoVadis scorecard, and understanding that these are genuinely different things, puts you in a better position to respond efficiently and to anticipate what comes next.

The broader compliance question

Neither EcoVadis nor CDP answers the question of whether your operations comply with EU sustainability law. Both generate data that EU buyers need for their CSRD reporting. That is a different thing from being a compliance tool for the regulation itself.

CSRD imposes specific reporting obligations on in-scope companies. Meeting those obligations requires data, systems, and processes that go well beyond what any single platform provides. The platforms are inputs to a compliance programme, not substitutes for one.

For a detailed explanation of what CSRD supply chain data requirements involve and where they reach beyond the scope of either platform, see: Does an EcoVadis score satisfy CSRD supply chain reporting requirements? and CSRD and ESRS explained: what the corporate sustainability reporting directive requires.

Verdandi monitors CSRD, ESRS, and the broader EU sustainability regulatory landscape continuously, so you’re working from current requirements as Omnibus amendments apply and reporting standards evolve. Start for free.