Documentation

ESG and Sustainability Policy Documentation

A small unlisted Indian private company has no statutory duty to produce ESG policies or sustainability reports. When a customer's vendor onboarding checklist asks for one anyway, we draft the policy document to match that ask and give you the context on why it's landing, SEBI's own value-chain disclosure rules for listed companies are voluntary through at least FY2026-27.

SEBI's own value-chain ESG disclosure rules are voluntary for the top 250 listed entities from FY2025-26, and voluntary for assessment or assurance from FY2026-27. SEBI's circular says the deferral exists specifically to avoid unintended impact on small businesses' cost and compliance load.

So if a customer is asking you for an ESG policy, that request came from them, usually ahead of their own investor reporting timeline. It didn't come from an Indian law reaching down to a supplier your size.

Scope

What's included

Drafted against exactly what your customer asked for. You were never obligated to produce a full BRSR-style report, so this stays scoped to the request.
Covers SEBI's voluntary value-chain disclosure circular, the BRSR Core phase-in, and the EU CSRD/CSDDD direction where it's relevant to your customer, so you understand this as a customer ask rather than a compliance gap.

Specifics

The details

No Indian law requires this from a company your size

BRSR is a listing obligation that applies to the top 1,000 listed entities by market cap. The only Companies Act provision anywhere near this territory is Section 135's CSR spend obligation at large-company thresholds, and that's a spend requirement. It isn't an ESG documentation or disclosure duty. Neither reaches an unlisted private company at your size. Every ESG request you receive is coming from a customer's own vendor onboarding checklist.

Why the request exists at all

SEBI's circular of 28 March 2025 makes value-chain ESG disclosure voluntary for the top 250 listed entities starting FY2025-26, and voluntary assessment or assurance of that data from FY2026-27. The circular states the deferral was made to avoid unintended impact on small businesses in terms of cost and compliance requirements. Value chain, in the circular's own definition, means a listed entity's top upstream and downstream partners individually comprising 2% or more of its purchases or sales by value, and a listed entity can limit its disclosure to 75% of purchases and sales by value.

We won't tell you a customer is legally required to collect this data from you. They're not. They're asking ahead of a voluntary assurance step that doesn't bind them yet, usually for their own investor-facing reasons.

The BRSR Core phase-in, for context

Financial year	BRSR Core scope
FY2023-24	Top 150 listed entities
FY2024-25	Top 250
FY2025-26	Top 500
FY2026-27	Top 1,000

Where the EU is headed

The EU's Omnibus I directive narrowed both rules that occasionally get raised in this conversation. CSRD now applies only to undertakings exceeding both €450 million net turnover and 1,000 employees, from financial years starting 1 January 2027. CSDDD was raised to 5,000 employees and €1.5 billion turnover, with its compliance deadline moved out to 26 July 2029. Both come from far fewer, far larger buyers than most of our clients deal with, and neither bites soon.

Process

How it works

Step 1 of 3

Tell us what your customer is asking for

The actual request or checklist item, so we draft to it directly.

Common mistakes founders make

Assuming a customer's ESG request means Indian law now requires one.
Building a full BRSR-style report when the customer only asked for a short policy document.
Treating EU rules like CSRD or CSDDD as already binding at a company your size.
Ignoring the request instead of documenting it, when it's often the same customer who becomes a larger buyer later.

Clarifications

Frequently asked questions

No. Indian law doesn't require this at your size. BRSR is a listing obligation on the top 1,000 listed entities, and SEBI's own value-chain disclosure rules are voluntary through at least FY2026-27.

SEBI's circular made value-chain ESG disclosure voluntary specifically to avoid burdening small suppliers with cost and compliance requirements. Customers often ask anyway, ahead of their own investor reporting timeline.

Only if you're supplying a company over €450 million turnover and 1,000 employees, from 2027 under CSRD, or 5,000 employees and €1.5 billion under CSDDD by 2029. Not a near-term concern at most of our clients' size.

An ESG and sustainability policy document matched to what your customer's checklist is asking for, plus a memo explaining the regulatory backdrop so you understand why the request exists.

Learn more

Prefer to skip the paperwork?

BuildWright can take this off your plate — done properly, the first time.

Ready to get started?

Tell us about your partners and business and we'll take it from there.

Get a Quote

Skip the hassle — have us do it for you. We do it best.

Key terms

BRSR / BRSR Core: SEBI's Business Responsibility and Sustainability Report, a listing obligation on the top 1,000 listed entities by market cap; BRSR Core is a lighter subset phasing in from the top 150 to the top 1,000 by FY2026-27.
Value chain (SEBI circular definition): A listed entity's top upstream and downstream partners individually comprising 2% or more of its purchases or sales by value, with disclosure limitable to 75% of purchases and sales by value.
CSRD / CSDDD: EU directives on corporate sustainability reporting and due diligence, narrowed by the Omnibus I directive to companies over €450 million turnover and 1,000 employees (CSRD, from FY2027) or 5,000 employees and €1.5 billion turnover (CSDDD, deadline 26 July 2029).