The first wave of Corporate Sustainability Reporting Directive (CSRD) filings is now mostly in. For large EU-listed retailers, the FY2025 cycle was the first time the European Sustainability Reporting Standards (ESRS) had to be applied in full — and the first time auditors had to sign limited assurance opinions on the result. After three years of double materiality workshops and gap analyses, the documents are public. They are also, in many cases, an exercise in carefully phrased uncertainty.

Sustainability leads we spoke to across grocery, apparel, and DIY all said roughly the same thing: the disclosures landed, the deadlines were met, and very few people inside the company believe the scope 3 numbers are within 20% of the truth.

The shape of the disclosures

The reports themselves are long. A mid-sized apparel group's sustainability statement now runs 80 to 140 pages inside the management report, with the ESRS datapoints concentrated in tables that auditors can tick against. The structure is broadly consistent across filers: a double materiality assessment up front, ESRS 2 governance disclosures, then E1 (climate) through S4 (consumers), with most of the volume going to E1, E5 (resource use and circular economy), and S1 (own workforce).

What changed versus the voluntary CDP-era disclosures is the granularity that ESRS forces. Retailers had to publish:

• Transition plan alignment with a 1.5°C pathway, with explicit gaps called out where capex doesn't match the trajectory
• Absolute scope 1, 2, and 3 emissions by category, with 2030 and 2050 targets baselined
• Energy mix in MWh by source, including a separate line for fossil energy from own operations
• Quantitative circular economy metrics — share of recycled input, share of recyclable output, waste diverted

The 1.5°C transition plan section is where the most visible hedging happens. Several retailers we reviewed disclosed a target trajectory and then, in the same section, noted that the capex plan currently funds only a portion of the abatement required. That kind of "target-vs-plan gap" disclosure didn't exist in the CDP world, and it is the most useful piece of new information for anyone reading these reports as an investor.

Scope 3 is the story

Scope 3 is where the credibility problem concentrates. For a typical fashion retailer, category 1 (purchased goods and services) is 70 to 90 percent of the total inventory. That number is built from supplier-specific emission factors where available and from spend-based or activity-based proxies everywhere else. Most retailers in this first cycle disclosed that under half of category 1 is supplier-specific. The rest is modeled.

A VP of corporate responsibility at a European apparel group put it bluntly: "We're publishing a number we know is wrong, with a methodology note explaining why it's wrong, and the auditor is giving limited assurance on the methodology, not the number." That captures the situation across the sector. Limited assurance under ISAE 3000 doesn't require the assurer to validate the underlying activity data — it requires them to confirm that the stated methodology was followed. The difference matters, and it is not always clear to readers.

What's interesting is that this is producing real second-order effects. Retailers that want a defensible category 1 number are now pushing primary data collection contracts onto tier 1 suppliers, with PCF (product carbon footprint) data required at PO level for high-volume SKUs. Two large grocers we spoke to have started conditioning private-label renewals on supplier participation in their data platform. That is the actual operational consequence of CSRD, far more than the report itself.

Where the auditors pushed back

Limited assurance is a low bar, but it is not zero. The most common pushback themes in this first cycle, according to people involved in the audits:

• Boundary inconsistencies between financial and sustainability reporting — particularly around franchise operations and joint ventures
• Double materiality assessments that didn't show evidence of stakeholder engagement beyond an internal workshop
• Climate transition plans with 2030 targets that mathematically required emissions reductions the capex plan didn't fund
• Social KPIs (turnover, training hours, gender pay gap) where the underlying HRIS couldn't produce the data at the required granularity

Several retailers had to restate parts of their materiality assessment between Q3 dry runs and the final filing. That work is going to repeat next year, because the omnibus simplification proposals floated in 2025 only narrowed the scope of who has to file — not what the filers have to disclose.

What this means for the next cycle

The FY2026 cycle starts now, and the work has shifted. Year one was about getting the document out. Year two is about closing the gap between the target trajectory and the capex plan, getting more category 1 emissions onto primary data, and building the internal controls so that the social and governance numbers tie back to auditable source systems. Sustainability leads who treated CSRD as a reporting project are now discovering it is a data and finance project. That realization, more than any number in the reports, is the real outcome of the first cycle.