Sustainability Reporting Toolkit: Governance, Data Controls, and Assurance

Document type: Toolkit Practice area: Corporate — Securities and Disclosure Jurisdiction: United States (federal and state) and European Union Last reviewed: 5 September 2026

How to use this toolkit

These are working documents, not model policies. The legal frame they implement is in the companion article: the federal antifraud provisions at 15 U.S.C. § 78j reach every public sustainability statement; the opinion-statement framework of Omnicare, Inc. v. Laborers District Council Construction Industry Pension Fund, 575 U.S. 175 (2015) governs targets; the FTC Green Guides, 16 C.F.R. Part 260 govern marketing claims; and Regulation S-K, 17 C.F.R. Part 229 carries the ordinary disclosure obligations into which material climate matters must flow.

Tool 1: Obligation map

One page. Complete this before any other work.

Refresh annually and after any acquisition, new financing, or major customer contract.

Tool 2: Board committee charter extract

Sustainability and Disclosure Oversight. The Committee shall:

(a) oversee the Company's sustainability and climate-related disclosure, including the greenhouse gas inventory, targets, transition plan, and the reports and filings required by applicable regimes; (b) review the methodology, boundary, and material assumptions underlying the greenhouse gas inventory, and any change to them; (c) review the analysis supporting any publicly announced target, including the identified gap between committed actions and the target and the assumptions on which closing that gap depends; (d) review the results of any third-party assurance engagement and management's remediation of findings; (e) review management's assessment of climate-related physical and transition risks and their reflection in the Company's periodic reports; (f) review the Company's environmental marketing claims and the adequacy of the substantiation supporting them; (g) review any proposed restatement of previously reported sustainability data; and (h) report to the Board at least [semi-annually].

The Committee shall meet with management and, at its discretion, with the assurance provider without management present.

Minutes should reflect what was actually discussed. A minute recording that "management presented the sustainability report" is not evidence of oversight. A minute recording that the Committee questioned the Scope 3 estimation method and the target gap is.

Tool 3: Data ownership and control matrix

Every row needs a named human in each of the last four columns. A row with a function name and no person is an unowned row.

Tool 4: Methodology document outline

The document an assurance provider will ask for first, and the one most companies do not have.

1. Scope and purpose. Reporting entity, reporting period, standards applied.

2. Organizational boundary. Approach selected (equity share / financial control / operational control), reasoning, and entity list with treatment of joint ventures, minority holdings, and leased assets.

3. Operational boundary. Facility list with addresses, functions, and emissions sources. Sources included and, importantly, sources excluded with reasons.

4. Base year. Year selected, reasoning, and the recalculation policy (threshold, trigger events, approver, disclosure requirement).

5. Methodology by category. For each category: activity data source, extraction method, calculation approach, emissions factor source and version, estimation technique where data is incomplete, and known limitations.

6. Scope 2 dual reporting. Location-based method and factor sources; market-based method, contractual instrument treatment, and residual mix.

7. Scope 3 screening and method selection. Screening approach, materiality conclusions per category, method per category, coverage percentage, and uncertainty estimate.

8. Emissions factors. Factor library reference with source, version, publication date, and units.

9. Global warming potentials. Assessment report version used, and the gases included.

10. Estimation and extrapolation. Where data is missing, the estimation approach and its basis.

11. Data quality. Assessment approach and results by category.

12. Changes from prior period. Every methodology, boundary, or factor change, with its quantified effect separated from the change in underlying activity.

13. Controls. Preparation, review, reconciliation, and approval.

Tool 5: Substantiation file index

Assemble before publication; archive as of the publication date.

Tool 6: Disclosure language

6.1 Scope 2 dual reporting

Scope 2 emissions are reported under both the location-based and market-based methods. The location-based figure reflects the average emissions intensity of the grids on which consumption occurs. The market-based figure reflects contractual instruments, including renewable energy certificates and power purchase agreements, retired in respect of the reporting period, with residual mix factors applied to consumption not covered by such instruments. For the reporting period, location-based Scope 2 emissions were [X] tCO2e and market-based Scope 2 emissions were [Y] tCO2e.

6.2 Scope 3 with method and uncertainty

Scope 3 emissions are estimated, not measured. For category 1 (purchased goods and services), []% of the estimate by spend is derived from supplier-specific data and the remainder from [spend-based / average-data] estimation using [factor source, version]. Estimation using economic factors is sensitive to price changes and does not reflect differences among suppliers within a category. **Management estimates the uncertainty of the category 1 figure at approximately ± []%.** Categories [__] were screened and determined not to be significant; the screening methodology is described in [reference].

6.3 Target with its gap — the Omnicare-aware version

The Company has committed to reduce absolute Scope 1 and Scope 2 emissions by [40]% from a [20XX] base year by [2030]. Management has identified specific initiatives expected to contribute approximately [23] percentage points of that reduction, comprising [list with approximate contributions]. The remaining approximately [17] percentage points depend on factors that are not within the Company's control or that rely on technologies not yet commercially available at the required scale, principally [decarbonization of the electricity grids serving the Company's facilities] and [specified process technology]. The Company's capital plan currently funds the identified initiatives through [year]. There can be no assurance that the target will be achieved, and management reviews progress and the underlying assumptions [annually / semi-annually].

Why this paragraph is the whole point. A target disclosed with its gap is more credible and materially more defensible than one disclosed without. The omission of a known internal gap analysis is precisely the kind of omission Omnicare makes actionable.

6.4 Offsets

The figures reported above are gross emissions and are not reduced by any offset or carbon credit. Separately, during the reporting period the Company retired [Q] carbon credits, of which [] were issued in respect of vintage years [], from [project type] projects registered with [registry] and verified under [standard]. Retirement evidence is available at [reference]. The Company does not describe any product as carbon neutral.

6.5 Assurance description

[Provider] performed a limited assurance engagement over the Scope 1 and Scope 2 emissions data presented above, in accordance with [standard]. A limited assurance engagement is substantially less in scope than a reasonable assurance engagement and results in a conclusion that nothing has come to the practitioner's attention causing the practitioner to believe that the information is materially misstated. It is not an audit and does not constitute an opinion that the information is accurate. Scope 3 data was not within the scope of the engagement.

Tool 7: Environmental marketing claim review form

Complete before any environmental claim runs, and retain.

Claim: [exact proposed wording] Where it will appear: ☐ Packaging ☐ Website ☐ Advertising ☐ Sales materials ☐ Trade show ☐ Social What exactly does the claim cover? ☐ The product ☐ The package ☐ A component ☐ The company ☐ An operation Is the claim general or specific? General claims ("green," "eco-friendly," "sustainable") require qualification under 16 C.F.R. Part 260. ☐ Qualified ☐ Made specific ☐ Removed Substantiation: What competent and reliable evidence supports it? Attach. Implied claims: What might a reasonable consumer understand beyond the literal words? Are those substantiated? Comparative or superiority element? ☐ No ☐ Yes → basis, and competitor exposure under 15 U.S.C. § 1125 assessed If a recyclability claim: municipal acceptance data for the relevant markets attached If a recycled content claim: percentage and basis (pre- or post-consumer) documented If an offset or neutrality claim: quantity, vintage, project, registry, verification, retirement, additionality analysis — and consider whether the claim should be made at all If a renewable energy claim: instrument documentation and retirement evidence Consistency check: Does the claim conflict with anything in the sustainability report, filings, or other web properties? Reviewed by: ______ Date: ______ Approved / Modified / Rejected: ______

Tool 8: Supplier data request

Subject: [Company] emissions data request — [year] — response due [date]

[Supplier], as part of [Company]'s greenhouse gas reporting we are requesting emissions data for the products and services we purchase from you. This request is issued in connection with [contract reference / supplier code section].

What we need, in order of preference:

1. Product carbon footprint for the items listed on the attached schedule (cradle-to-gate, kgCO2e per unit), with the standard applied and whether it has been verified.
2. If (1) is unavailable: your total Scope 1 and Scope 2 emissions for your most recent reporting year, plus an allocation basis for our purchases — revenue share, unit share, or mass share — and the data supporting that allocation.
3. If (2) is unavailable: your total revenue for the period and confirmation of our spend with you, so that we may apply an economic estimation factor. Please tell us if you are estimating rather than measuring.

Also please confirm: the reporting period covered; the standard applied; whether the data has been assured and by whom; and a contact for follow-up questions.

We will: treat the data as confidential; describe in our public reporting only the aggregate and the proportion of our data that is supplier-specific; and share our methodology on request.

Please respond by [date] to [contact]. [Procurement contact] is available to discuss.

Send this from procurement, not from sustainability. Response rates roughly double when the request is attached to the commercial relationship.

Tool 9: Assurance readiness worksheet

Run one year before assurance is required. Score each: Ready / Gap / Not started.

The three findings that recur most often: incomplete refrigerant records; missing REC retirement evidence; and no documented review trail.

Tool 10: Restatement and change management policy

1. Scope. This policy governs changes to methodology, organizational or operational boundary, emissions factors, base year, and previously reported sustainability data.

2. Threshold. Any change that affects a reported figure by more than [5]% for the relevant scope, or that affects a reported target metric by more than [2] percentage points, requires approval under Section 3 and disclosure under Section 5.

3. Approval. Methodology and boundary changes require approval by [the CFO and the General Counsel] and notification to the [Audit] Committee. Base year recalculation requires the same, plus Committee approval.

4. Documentation. Every change is documented with: the reason; the alternative approaches considered; the quantified effect on each affected figure; the effect separated from any change in underlying activity; and the approver and date.

5. Disclosure. Changes above the threshold are disclosed in the next report, describing the change, the reason, and the quantified effect, with prior-period figures restated where restatement is required.

6. Restatement. Where previously reported data was materially misstated, the data is restated with a clear description of the error, its cause, its effect, and the remediation. A prior-period figure is never changed silently.

7. Correction of public statements. Legal shall assess whether any prior public statement requires correction and whether any regulatory notification is required.

Tool 11: Bridge schedule

The document that answers "why do these two reports say different things?" before anyone asks.

Prepare one bridge per external report, every year, and file it with the substantiation file.

Tool 12: Questionnaire and ratings log

Rules of operation. Every questionnaire routes through the disclosure owner. Answers come from the base inventory and substantiation file only. Where the company does not have a figure, the answer says so — no cell is filled with an invented number. Every response is legally reviewed proportionate to audience. The log is reconciled annually against the published report.

Tool 13: Annual calendar

Related documents

• Climate and Sustainability Disclosure: What Companies Report and to Whom
• Building a Sustainability Disclosure Program: A Practical Guide
• Climate Disclosure Readiness Checklist: A Practical Checklist
• Securities Disclosure Toolkit: Policies, Blackout Calendars, and 10b5-1 Plans
• False Advertising Toolkit: Substantiation Files, Surveys, and Injunction Briefing
• Public Company Disclosure: Periodic Reports, Regulation FD, and Insider Trading Liability

This toolkit is general information, not legal advice, and does not create an attorney-client relationship. Adapt every document to the company's actual facts.