Is your company ready for mandatory ESG assurance?

CSRD, CSDDD and a growing list of national rules now require external assurance on your sustainability disclosures- not just the numbers, the process behind them. In about 10 minutes, get a readiness score, see which assurance level applies to you, and know exactly what to fix before a reviewer shows up.

10-minute readiness check

Board-ready PDF output

Free, no signup

How the readiness check works

1. Tell us where you stand

Which regulations you're tracking, your current controls, and how mature your sustainability data collection is today.

2. We map your assurance obligations​

Limited versus reasonable assurance, framework by framework and jurisdiction by jurisdiction- based on your actual exposure.​

3. Get your readiness score​

Plus a ranked list of the gaps to close first, before you spend on data systems or bring in a provider.

Limited vs reasonable assurance- know the difference before you budget for it

Limited assurance

Analytical procedures and inquiry. The provider states that nothing has come to their attention suggesting material misstatement. Cheaper and faster—and the current standard for CSRD indefinitely, post-Omnibus.

Reasonable assurance

Substantive testing and a positive opinion, at the same confidence level as a financial audit. More expensive, longer engagement, and required by a smaller set of frameworks.

What you'll walk away with

Frequently asked questions

CFOs, chief audit executives, sustainability leads and finance controllers preparing for mandatory ESG assurance, or considering voluntary assurance to build investor and customer credibility. If your next reporting cycle is your first facing external assurance, this gives you a fast map of what applies and what to tackle first.

There’s no universal answer. Your financial auditor already understands your controls and systems, which reduces duplication for CSRD-style integrated reports. A specialist firm often has deeper expertise in areas like Scope 3 emissions and supply-chain due diligence. Getting quotes from both and comparing scope is usually the right move.

Starting provider fieldwork before internal evidence is actually ready- it’s always cheaper to fix control and data-lineage gaps beforehand. The second most common mistake is overbuying scope: first-year assurance should cover only what the regulation requires, not everything ESG-related.

Penalties vary by regulation- for example, fines up to $500,000 per reporting year under California SB 253, or up to 3% of global turnover under the EU’s CSDDD. Beyond fines, non-compliance typically triggers investor pressure and procurement issues, and the reputational cost usually exceeds the fine itself.

Yes. All EU framework thresholds reflect the February 2026 Omnibus Directive, including the narrowed CSRD scope, the removed limited-to-reasonable assurance transition, and the CSDDD due-diligence boundary. Regulatory data is refreshed monthly.

No. This is a scoping tool designed to get your team past the blank-page problem and into a productive conversation with providers, counsel and auditors faster. Every “required” result should be validated against your specific facts with a qualified provider before you commit to an engagement.

Not sure which regulations apply to you yet?

Start with our compliance assessment to see which ESG frameworks apply to your company, then come back here to check your assurance readiness against them.

How we maintain this readiness check

Assurance requirements, thresholds and enforcement timelines are tracked across every jurisdiction in the tool, with confirmed changes incorporated within 30 days. 

Last updated- September 2026

Disclaimer: this is a scoping tool, not a substitute for a professional audit or legal advice. Validate every result with a qualified assurance provider before committing to an engagement.