Skip to main content
Governance Authority
Category: Sustainability and ESG

Sustainability Assurance

Also known as: Sustainability-related Assurance, ESG Assurance, Assurance on Sustainability Reporting
Simply put

Sustainability assurance is an independent check of the sustainability or ESG information a company reports, carried out by professionals who are separate from those who prepared the information. The goal is to give readers greater confidence that disclosures such as environmental, social, and governance data are reliable and of high quality. Depending on the jurisdiction and entity, such an engagement may be legally required or undertaken voluntarily.

Formal definition

Sustainability assurance is an assurance engagement in which independent practitioners assess defined sustainability information, such as ESG disclosures and greenhouse gas inventories, against named criteria and issue a report communicating their conclusions. Whether the engagement is mandatory or voluntary depends on the applicable regime, sector, and entity type. Assurance is intended to enhance the reliability and comparability of reported information; the level of assurance obtained, the criteria applied, and the scope of information covered vary by engagement and are matters requiring professional judgment. This entry is educational and does not constitute assurance, audit, legal, or compliance advice.

Why it matters

As sustainability and ESG disclosures increasingly inform decisions by investors, lenders, regulators, customers, and other stakeholders, the reliability of that information matters as much as the reliability of financial statements. Sustainability assurance provides an independent check that reported information, such as ESG disclosures and greenhouse gas inventories, is prepared against named criteria, helping readers place greater confidence in disclosures that might otherwise be difficult to verify. Without independent assurance, users of sustainability reports may have limited basis to judge whether the underlying data is accurate, complete, or comparable across organizations.

Assurance is intended to enhance the reliability and comparability of reported sustainability information, which supports higher-quality reporting overall. Comparability is particularly significant because stakeholders often seek to benchmark organizations against one another or track performance over time; assurance against consistent, named criteria can strengthen the credibility of those comparisons. The value of any particular engagement, however, depends on the level of assurance obtained, the criteria applied, and the scope of information covered, each of which varies by engagement and calls for professional judgment.

Whether sustainability assurance is a legal requirement or a voluntary undertaking depends on the applicable regime, sector, and entity type. In some jurisdictions and for certain entities, assurance on sustainability reporting is mandated; in others it is performed voluntarily to build trust with stakeholders. Boards and management should therefore establish what, if anything, is required of their organization rather than assume a single universal standard applies. This entry is educational and does not constitute assurance, audit, legal, or compliance advice.

Who it's relevant to

Boards and Audit or Sustainability Committees
Directors and the committees charged with overseeing reporting need to understand whether sustainability assurance is required or voluntary for their organization and what confidence an assurance report can and cannot provide. Because the level of assurance and scope vary by engagement, oversight bodies should be clear about what a given engagement covers rather than assume comprehensive coverage. This oversight role is distinct from the operational preparation of the underlying information.
Management and Sustainability Reporting Teams
Those responsible for preparing sustainability and ESG disclosures need to produce information that can be assessed against named criteria. Management owns the preparation of the reported information, while independent practitioners, separate from the preparers, perform the assurance. Understanding the criteria and scope that assurance providers will apply helps preparers support a higher-quality, more reliable disclosure process.
General Counsel and Compliance Officers
Legal and compliance functions help determine whether sustainability assurance is mandatory or voluntary for the entity, which depends on the applicable regime, sector, and entity type. They assist in confirming what the organization is required to obtain and in interpreting how assurance obligations differ across jurisdictions, rather than assuming a single universal requirement applies.
Investors, Lenders, and Other Report Users
Stakeholders who rely on ESG disclosures benefit from assurance because it is intended to enhance the reliability and comparability of the information they use in their decisions. Report users should, however, note the level of assurance obtained and the scope of information covered, since these vary by engagement and affect how much confidence a report can reasonably support.
Assurance Practitioners
Independent professionals who perform these engagements assess defined sustainability information against named criteria and issue reports on their conclusions. Their work requires professional judgment in setting the level of assurance, selecting criteria, and defining scope, and their independence from those who prepared the information is central to the value of the engagement.

Inside Sustainability Assurance

Assurance Engagement Scope
The defined boundaries of what sustainability information is subject to assurance, which may cover selected metrics (for example greenhouse gas emissions) or a broader sustainability report. Scope is typically agreed between the reporting entity and the assurance provider and should be disclosed so users understand what has and has not been assured.
Level of Assurance
The degree of confidence conveyed by the engagement. Under commonly used assurance standards, this is generally expressed as either limited assurance (a moderate level, resulting in a negative-form conclusion) or reasonable assurance (a higher level, resulting in a positive-form conclusion). The two differ in the extent of procedures performed and are not interchangeable.
Reporting Criteria
The benchmarks against which the sustainability information is measured and evaluated, such as a recognised reporting framework or standard. Suitable, clearly identified criteria are typically a precondition for an assurance engagement, and the appropriate criteria can vary by jurisdiction, sector, and the framework the entity elects or is required to apply.
Assurance Provider
The external party performing the engagement. This may be an audit firm or another qualified provider, depending on jurisdictional rules and the entity's choices. Independence, competence, and applicable professional or ethical requirements are generally relevant to the credibility of the resulting conclusion.
Assurance Conclusion or Report
The written output communicating the practitioner's conclusion, the scope, the criteria applied, the level of assurance, and any limitations. The form of the conclusion depends on whether limited or reasonable assurance was obtained.
Subject Matter Information
The specific sustainability data, disclosures, or metrics being reported and assured, which may be quantitative (such as emissions figures) or qualitative (such as narrative disclosures). The nature of the subject matter can affect the procedures and the achievable level of assurance.

Common questions

Answers to the questions practitioners most commonly ask about Sustainability Assurance.

Is sustainability assurance the same as a financial audit?
No. While both are independent assurance engagements, they differ in scope, subject matter, and often the applicable standards and level of assurance obtained. Financial audits typically express reasonable assurance over financial statements against an established financial reporting framework. Sustainability assurance addresses non-financial or sustainability information, and in many engagements is performed at a limited (rather than reasonable) assurance level, which involves less extensive procedures and a differently worded conclusion. The criteria used, the maturity of underlying data, and the reporting framework applied generally vary as well. Whether an engagement is limited or reasonable, and which standards apply, depends on the mandate, jurisdiction, and the assurance practitioner's professional judgment. This entry is educational and not audit or compliance advice.
Does obtaining sustainability assurance mean the organization's sustainability performance is verified as good?
Not necessarily. Assurance is an opinion or conclusion about whether reported information is fairly stated or free from material misstatement against stated criteria; it is generally not an endorsement of the underlying performance itself. A clean assurance conclusion indicates that the disclosures appear reliable relative to the applicable criteria, not that the organization is performing well against any sustainability benchmark. The distinction between assuring the accuracy of reported information and evaluating the merit of the performance is important, and the value of the conclusion depends heavily on the criteria selected, the assurance level, and the scope of the engagement. Readers should review the assurance statement's stated scope and limitations rather than treating it as a performance rating.
Who within the organization typically owns responsibility for sustainability information subject to assurance?
Preparation of the sustainability information is generally a management responsibility, while the external assurance practitioner provides an independent conclusion on that information. In a three-lines model, first-line functions typically produce and control the underlying data, second-line functions such as compliance or a sustainability office may set policy and monitor, and internal audit may provide internal assurance. The board or a designated committee generally exercises oversight of the reporting and assurance process rather than preparing the disclosures. Where accountability sits precisely varies by entity structure, sector, and jurisdiction, and organizations should define these roles explicitly rather than assuming a default allocation.
How should an organization decide between limited and reasonable assurance?
The choice generally depends on factors such as regulatory or listing requirements, stakeholder expectations, the maturity of data systems and internal controls, cost, and the intended use of the assurance statement. Limited assurance typically involves fewer procedures and a conclusion expressed in negative form, whereas reasonable assurance involves more extensive procedures and a positive-form conclusion. In some jurisdictions and for certain entity types, the required level may be prescribed and may evolve over time. Because requirements vary by jurisdiction, sector, and framework, organizations should confirm any applicable mandate and weigh it against their readiness. This is a facts-and-judgment matter and not legal advice.
What can management do to prepare data for a sustainability assurance engagement?
Preparation commonly includes establishing clear reporting criteria and boundaries, documenting data sources, definitions, and estimation methodologies, and evaluating the design and operating effectiveness of controls over data collection and aggregation. Maintaining an audit trail, reconciling data to source records, and identifying areas of significant estimation or judgment generally support a smoother engagement. Because assurance addresses whether information is fairly stated against stated criteria, the robustness of underlying processes and documentation typically has a direct bearing on the practitioner's ability to reach a conclusion. The specific readiness steps depend on the reporting framework, the assurance level sought, and the practitioner's requirements.
How does the board or its committee provide oversight of sustainability assurance?
Board or committee oversight typically focuses on the integrity of the reporting and assurance process rather than on preparing the disclosures. This may include reviewing the scope and level of assurance, considering the independence and competence of the assurance provider, understanding significant judgments and any qualifications in the assurance statement, and monitoring how management addresses identified deficiencies. In many organizations an audit committee or a dedicated sustainability or risk committee is assigned this role, though the specific allocation varies by governance structure and jurisdiction. The board generally does not assume the operational responsibility for producing the information, and where these duties sit should be set out in committee charters and delegated authorities.

Common misconceptions

Sustainability assurance provides the same level of confidence as a financial statement audit.
Many sustainability assurance engagements are performed at a limited assurance level, which conveys a moderate degree of confidence and a negative-form conclusion, rather than the higher, positive-form assurance associated with a reasonable assurance or audit-style engagement. The level obtained should be identified in the report, and the two are not equivalent.
Obtaining assurance means every figure in the sustainability report has been verified.
Assurance typically applies only to the defined scope agreed for the engagement, which may cover selected metrics rather than the entire report. Users should refer to the scope and criteria disclosed to understand what was and was not covered.
Sustainability assurance is universally mandatory and follows a single global standard.
Whether assurance is required, at what level, and under which standards or frameworks generally varies by jurisdiction, sector, and entity type. In some settings it may be voluntary, and the applicable requirements and criteria depend on the specific regime in force.

Best practices

Clearly define and disclose the scope of the engagement, identifying which metrics or disclosures are assured and which are not, so users are not misled about coverage.
State the level of assurance obtained (limited or reasonable) and explain what that level means, avoiding language that implies a higher degree of confidence than was actually provided.
Identify suitable and clearly described reporting criteria before the engagement begins, and confirm they are appropriate for the entity's jurisdiction, sector, and elected or required framework.
Assess the independence, competence, and applicable professional or ethical requirements of the assurance provider before engagement to support the credibility of the conclusion.
Confirm that management retains responsibility for preparing the sustainability information and underlying data, while the assurance provider expresses an independent conclusion, keeping these roles distinct.
Treat assurance conclusions as educational context rather than a guarantee, and consult qualified professionals to determine the requirements that apply to a specific entity and jurisdiction.