The short answer

A mid-sized company can go from scattered data to a sustainability report its auditor, customers and board can trust in about 12 weeks. The work has three steps of four weeks each: Map what you need, Collect it in one structured round, and Prove it with checks, analysis and decisions. Start in early November and you have an auditable dataset by the end of January, when audits and annual reports usually begin.

That's the whole method. Below is what each step looks like in practice.

Why the same three steps work for every report

Every autumn the same questions land on the same desks. Where is our data? Who owns it? What is enough for the auditor, the bank, our biggest customer? And most companies answer them with a last-minute push in Excel and email threads that never end.

That chaos is a process problem, and process problems are fixable. Whether you report under CSRD, use the voluntary VSME standard, follow the GHG Protocol or answer customer questionnaires, the work breaks down into the same three steps. Most of these audiences ask for the same core data anyway; they differ in detail and in how much proof they want.

Before you start, be honest about your frame. We draw it as a house: ambition is the roof, the four walls are what you build with (time, budget, data, maturity) and the floor is the requirements you can't move: law, contracts, customers, financing. Ambition can go above the floor, never below it. From that, agree on a minimum viable report, the smallest one that meets your hard requirements. It's a floor, not a ceiling, and in year one it's enough.

Step 1: Map. What do you actually need? (Weeks 1–4)

The first month goes to deciding what you need. That feels slow, but an error that takes five minutes to fix at collection can take a week to unravel at audit. Mapping is where you avoid making it.

Start with what matters. A quick double materiality assessment tells you which topics deserve your effort; on a tight frame, a two-hour management workshop checked against what customers and lenders ask about is a solid start. Not all data deserves the same effort: a few topics you report on properly, some you monitor, the rest can wait.

Then turn each material topic into datapoints and give every one a named owner (a person, never "Finance") and a source. Flag suppliers and landlords early, they're always the bottleneck. For every gap, decide: collect, estimate with a documented method, or disclose as a limitation. And write your methodology decisions down. Most auditor questions trace back to a choice nobody wrote down.

You end with: an approved data map, with an owner and a deadline for every datapoint.

Step 2: Collect. How do you stop chasing data? (Weeks 5–8)

This is where most of the hours go. Collection fails when people get a vague request, at a bad time, in a format that doesn't match what they have, for a purpose nobody explained. Fix those four things and most of the chasing disappears.

Send one request per owner, with only their datapoints, fixed units and periods, and an example. Ask for the invoice alongside the number. Tell the site manager her energy figures feed your biggest customer's tender; a number with a purpose gets reported more carefully.

Check submissions as they arrive, while people still remember the details. Then bring everything into one structure and log every estimate and correction with its reason. That assumptions log is the first thing a reviewer asks for, and it doubles as next year's improvement list.

And choose your tools after the data map is done, not before. Spreadsheets work in a first year with few contributors. They turn into version chaos once you have many sites, external data or a reviewer looking over your shoulder.

You end with: one consolidated dataset, with every assumption documented.

Step 3: Prove. How do you turn raw data into decisions? (Weeks 9–12)

Raw data isn't a report, and a report nobody trusts isn't worth much. In a 2024 Bloomberg survey of around 200 financial market participants in Europe, 63% named coverage and quality issues with company-reported ESG data as their biggest concern. Every figure you publish should answer three questions. How much? What exactly? How do you know?

Treat your sustainability data the way finance treats the year-end close. Every owner signs off, a second person reviews the key figures, every number links to a source and the totals reconcile. Explain every change from last year above your threshold. Then calculate your indicators, add intensity metrics (per employee, per square metre) and find the three to five drivers behind most of the change.

Build an evidence pack that links each figure to its source, whether or not you have external assurance. Customers and banks increasingly ask for the evidence behind your answers, and the same pack serves them all.

Then comes the part almost everyone skips. Turn the report into decisions for the board, each with an owner and a forum. When our customer Safe Life put its group-wide data together, the CFO found that only five or six of more than 40 companies needed targeted reduction efforts. A vague ambition turned into a plan.

You end with: a report you can stand behind, and a short list of decisions with owners attached.

Good enough is good enough

You don't need all the answers before you start. In year one, an honest, traceable report beats a beautiful one that's late. Disclose what you can and document what you estimated. Save your data map, your methods, your request templates and your assumptions log, and next year you update instead of starting over.

Every company's report is different. The process behind it is the same. Map. Collect. Prove.

Want the worksheets? We put the whole method, with the exercises we use with our customers for each step, into the Sustainability Reporting 1-2-3 workbook. Get the workbook. And if you'd rather have us alongside you at the points where reporting gets stuck, talk to us.