ReportsESG & CSRD Reporting Software
Feature Shortlist Report

ESG & CSRD Reporting Software, Shortlisted for 2026

The EU's Omnibus package cut CSRD's scope to a fraction of the original plan, and half the vendor pitches you heard in 2024 are now stale. This report gives the current state of the rules as of September 2026, shortlists 7 platforms that survive contact with a real sustainability statement and explains why carbon accounting tools are a different purchase. No vendor paid to be here.

Published September 24, 2026Independent Research · CFO Shortlist 18 min read

The Short Answer

For a governed, assurable sustainability statement, Workiva ESG leads on the disclosure end and CCH Tagetik leads where finance wants ESG data controlled like financial actuals. IBM Envizi is the strongest data foundation for asset-heavy estates, Novisto and Position Green are the focused challengers, and SAP Sustainability Control Tower and OneStream's new ESG solution serve their own installed bases. Carbon accounting platforms like Watershed solve a different problem, and many companies correctly buy one from each lane.

Your situationStart here
CSRD statement is a governed disclosure problemWorkiva ESG
Finance owns ESG, consolidation-grade controlsCCH Tagetik
Asset-heavy estate, data operations firstIBM Envizi
Dedicated modern platform, mid-size teamNovisto
European mid-market, need advisory tooPosition Green
Committed SAP estateSAP Sustainability Control Tower
Already on OneStreamOneStream ESG
Decarbonization program, not just disclosureCarbon lane (Watershed and peers)

The honest headline: this market was built for a regulation that then shrank. Roughly four out of five companies originally expected in CSRD scope are now out of it, and every vendor on this page repositioned during 2025 and 2026. That makes buying both easier and more dangerous. Easier, because the panic premium is gone. More dangerous, because stale assumptions are everywhere, including inside vendor sales decks. Start with the rules as they stand, then pick the tool.

Finance teams use the CFO Shortlist app to evaluate the EPM side of their stack, which matters here because the strongest ESG architectures reuse the group's consolidation machinery.

CSRD After the Omnibus: Where the Rules Stand

Here is the state of play as of September 2026, in plain terms. In April 2025 the EU's stop-the-clock regulation delayed the second and third waves of CSRD reporting by two years while the scope was renegotiated. The renegotiation concluded with a political agreement in December 2025, and the resulting Omnibus I directive was published in the Official Journal on February 26, 2026 and entered into force on March 18, 2026.

The scope change is the headline. CSRD now applies to companies with more than 1,000 employees and net turnover above 450 million euros, and both conditions must be met, assessed on a stand-alone or consolidated basis. Listed SMEs are removed from scope entirely, and non-EU parent groups are caught mainly through the 450 million euro EU turnover test. Companies newly defined by the revised regime report for financial years starting on or after January 1, 2027, publishing in 2028, while member states may exempt wave 1 companies that fall below the new thresholds for financial years 2025 and 2026.

Three further changes matter for software buyers. Assurance stays at limited assurance rather than escalating to reasonable assurance, which lowers the evidence bar but does not remove it. A value-chain cap stops in-scope companies from demanding data beyond the voluntary VSME standard from partners with fewer than 1,000 employees, which reshapes Scope 3 collection workflows. And the ESRS themselves were rewritten: the Commission consulted on a draft delegated act with simplified standards in May 2026 and adopted revised ESRS that apply for financial years beginning on or after January 1, 2027, with early adoption permitted for 2026. Every pre-2026 datapoint library in every tool is being rebuilt against them.

Our hedge, stated plainly: member states have until March 2027 to transpose these amendments, national gold-plating remains possible and the digital tagging timeline for sustainability statements is still settling. Verify your own entity's position with counsel before you buy anything on the strength of this page, and verify any vendor claim about "CSRD-ready" content against the revised ESRS, not the 2023 originals.

The US picture moved too. The SEC walked away from defending its climate disclosure rule, but California did not: SB 253 emissions reporting for companies over $1 billion in revenue proceeds, with the first Scope 1 and 2 reports deferred to November 10, 2026 and Scope 3 phasing in from 2027, while SB 261 climate-risk reports sit in litigation with enforcement of the original deadline paused. Investor-driven frameworks, ISSB adoption across other jurisdictions and customer questionnaires continue regardless. Shrunken mandate, surviving workload.

What This Software Actually Does

Strip the category to its mechanics and ESG reporting software does four jobs. First, data collection: hundreds of datapoints from HR systems, utility bills, EHS platforms, suppliers and spreadsheets, gathered on a calendar with owners and reminders. Second, calculation: emissions math across Scopes 1, 2 and 3 with governed factor libraries, plus ratios and social metrics. Third, governance: versioning, approvals and evidence trails that survive a limited-assurance review. Fourth, disclosure: the statement itself, drafted, reviewed, designed and eventually digitally tagged inside the management report.

No platform is best at all four, which is why the shortlist below carries lane badges. Disclosure-first tools grew from regulated reporting and are strongest at jobs three and four. Data-first tools grew from emissions and energy management and are strongest at one and two. EPM-attached modules reuse the group's financial consolidation machinery, which is a genuine structural advantage for controls, and typically trail on the document end. The right architecture for many groups is honestly two products, one from each side, with a clean data handoff, the same pattern we describe for consolidation and SEC reporting stacks.

The Shortlist: 7 Platforms Compared

We order these by how confidently we would put each in front of a CFO who owns a CSRD or California obligation today. Order is not a universal ranking: read the lane badge and fit line against your own situation.

1Workiva ESGStrongest disclosure engineDisclosure-first

The governed-disclosure leader, now with its own carbon module

Workiva approaches ESG the way it approaches the 10-K: as a governed document with linked data, audit trails and regulator-ready output. The sustainability solution aligns with CSRD, ESRS, ISSB, GRI and the California climate laws, produces designed reports with XHTML export and built-in XBRL tagging, and the Workiva Carbon module adds emissions calculation to the platform. AI features generate double materiality drafts and benchmark peer disclosures. Named sustainability customers include Coca-Cola, Chevron, Colgate-Palmolive, Hershey, Intel and WSP Global, and the platform overall holds a 4.5 out of 5 G2 rating across 2,155 reviews.

The strength is the last mile. If your CSRD statement, annual report and SEC filings should read from the same source of truth, nobody else connects them as cleanly. The watch-outs are the familiar Workiva ones: solution-based pricing that stacks (our research places the platform at roughly $40K to $300K+ per year depending on solutions, entities and users) and a carbon engine that is younger than the dedicated carbon platforms. More than 6,000 organizations use Workiva, which also makes it the safe choice your auditor already knows.

+Governed disclosure with linked data, versioning and audit trail
+CSRD, ESRS, ISSB, GRI and California frameworks in one workflow
+XHTML output with built-in XBRL tagging capability
+ESG, SEC and SOX reporting connected on one platform

Watch out for: Pricing accumulates by solution, and Workiva Carbon is newer than dedicated carbon engines. Scope the ESG solution on its own economics and pressure-test the carbon calculations against your current inventory.

Best fit: Companies that already run SEC or statutory reporting in Workiva, and any team that treats the sustainability statement as a governed disclosure rather than a data export.

2CCH Tagetik ESG & SustainabilityStrongest finance integrationEPM-attached

ESG data collected and governed like financial actuals

CCH Tagetik treats sustainability as a consolidation problem, which for CFO-owned ESG reporting is exactly right. The module ships pre-defined CSRD content, calculates Scope 1, 2 and 3 emissions with pre-configured greenhouse gas logic, covers EU Taxonomy and IFRS S1 and S2, and added a Carbon Border Adjustment Mechanism module in 2025 that detects in-scope goods and builds submission-ready CBAM reports. Wolters Kluwer holds GRI software partner status, SASB certification and CDP accreditation for the product. Named customers include Generali, UniCredit, A2A, Liebherr, Bolton, Manitou and Pewag Group.

The structural argument is that ESG data flows through the same collection, validation and workflow machinery as the group's financial consolidation, so the sustainability statement inherits financial-grade controls and sits beside the numbers it must eventually reconcile with. The trade-off is the same as the parent platform: this is enterprise software with enterprise implementation weight, and the document-production layer is less polished than Workiva's. Where the finance team owns CSRD and already runs, or is evaluating, Tagetik for close and consolidation, it is the front-runner.

+Pre-packaged CSRD and EU Taxonomy content with GHG calculation logic
+ESG data governed by the same engine as financial consolidation
+CBAM module for importers with embedded-emissions obligations
+Strong European base of reference customers in scope

Watch out for: Implementation weight is real, and narrative document production trails the disclosure-first tools. If your CSRD statement is heavily designed, test the output end of the pipeline hard.

Best fit: European and multinational groups where finance owns sustainability reporting, especially existing or prospective CCH Tagetik consolidation customers.

3IBM EnviziDeepest data foundationData-first

The ESG data platform with the longest emissions pedigree

Envizi, acquired by IBM in 2022, started life as an energy and emissions data platform and it shows in the right way: the suite automates collection and management of thousands of data types across the value chain, with a mature emissions calculation engine underneath. IBM added a dedicated ESRS reporting module in 2024 that embeds the disclosure requirements into the product, formatting qualitative and quantitative responses to the standard. IBM cites Verdantix's Green Quadrant for ESG and sustainability reporting software, which named it a leader in the 2025 edition.

Envizi's center of gravity is data operations rather than document production: meter feeds, utility bills, supplier data and building portfolios flowing into a governed repository. Organizations with large physical footprints, real estate, manufacturing sites or fleets get the most from it. The narrative and tagging last mile is thinner than Workiva or Tagetik, and many Envizi customers pair it with a disclosure tool, which is a legitimate architecture rather than a failure.

+Mature emissions data capture across large physical estates
+ESRS module embeds CSRD requirements into the collection workflow
+Named a leader in Verdantix's 2025 Green Quadrant
+IBM ownership brings enterprise security and integration reach

Watch out for: Document production and digital tagging are not the product's core. Budget for a disclosure layer on top if your output is a designed, tagged sustainability statement.

Best fit: Asset-heavy enterprises whose main problem is sustainability data operations at scale rather than the disclosure document itself.

4NovistoBest focused challengerData-first

ESG data management with audit-ready governance, still a young company

Novisto is a Canadian ESG data management platform that raised a $27 million Series C in May 2025 led by Inovia Capital, bringing total funding past $55 million. The product covers collection, consolidation and governance of sustainability information with the audit trail assurance providers want, and supports CSRD-aligned disclosure alongside the voluntary frameworks. Sanofi has used the platform for CSRD-aligned reporting and the Emirates Group is a named customer, with Novisto citing client reporting-time reductions of up to 50%. Distribution partnerships with S&P Global extend its reach.

The appeal is focus. Novisto does ESG data and reporting, not fourteen adjacent modules, and mid-size sustainability teams describe the workflow as considerably lighter than the enterprise platforms. The honest caveats are scale ones: a company of Novisto's size carries vendor-viability questions the giants do not, and the emissions calculation depth and content breadth are narrower than Envizi or the EPM-attached engines. Diligence the roadmap and reference customers at your size.

+Purpose-built ESG data governance with assurance-grade audit trails
+Lighter workflow than the enterprise platforms
+Referenced CSRD use at large customers including Sanofi
+S&P Global partnership for framework content and distribution

Watch out for: A venture-backed vendor in a consolidating market. Ask about financial runway, roadmap commitments and what happens to your data model if ownership changes.

Best fit: Mid-size and large sustainability teams that want a dedicated, modern ESG data platform without enterprise-suite weight.

5Position GreenEuropean specialistData-first

Nordic ESG platform building scale through acquisition

Position Green is a Nordic ESG software and advisory group that has been consolidating the European market: it acquired Belgium-based Greenomy in September 2025, its third acquisition, adding CSRD and EU Taxonomy reporting technology to its platform. The combination of software plus in-house sustainability advisory is the differentiator, because most CSRD first-timers need methodology help as much as tooling, and Position Green sells both.

The platform covers ESRS data collection, double materiality support and reporting workflows with a strong Northern European customer base. The watch-outs mirror the strategy: integrating acquired products takes time, and buyers should ask which product line they are actually being sold and how the Greenomy technology folds in. For European mid-market companies in scope, it belongs on the demo list beside Novisto.

+Combined software and sustainability advisory in one vendor
+CSRD and EU Taxonomy depth strengthened by the Greenomy acquisition
+Strong Nordic and European mid-market base
+Practical fit for first-time CSRD reporters needing methodology help

Watch out for: Three acquisitions in a young company means integration risk. Confirm which platform components are unified today versus on the roadmap.

Best fit: European mid-market and large companies in CSRD scope that want tooling and advisory from one partner.

6SAP Sustainability Control TowerThe SAP-estate answerEPM-attached

ESG metrics where the operational data already lives

Sustainability Control Tower is SAP's cloud solution for collecting, governing and reporting ESG data, mapping it to GRI, ESRS, SASB and TCFD frameworks with built-in data models and content packages. The argument is proximity: it integrates with S/4HANA, SAP EHS, SuccessFactors and SAP's Sustainability Footprint Management for product-level carbon data, so a group running its operations on SAP can assemble sustainability metrics from systems of record rather than spreadsheet surveys. SAP's longer-term Green Ledger direction points at carbon accounted with transaction-level rigor.

The honest read is that this is infrastructure for SAP-committed groups rather than a category-best reporting product. Non-SAP sources need integration work, the disclosure document and tagging layer is not the strength, and capability arrives on SAP's release cadence. Inside a committed SAP estate it deserves evaluation before any third-party tool. Outside one, it rarely makes the shortlist.

+Native integration with S/4HANA, EHS and SuccessFactors data
+Framework mapping for GRI, ESRS, SASB and TCFD
+Product-level footprints via Sustainability Footprint Management
+Fits existing SAP governance, security and contracts

Watch out for: Value depends on SAP coverage of your operations. Ask for the ESRS content roadmap in writing and test how a designed, tagged sustainability statement actually gets produced.

Best fit: Groups standardized on S/4HANA that want ESG data assembled inside the SAP estate.

7OneStream ESG Reporting & PlanningNewest entrant, one platformEPM-attached

ESG in the same engine as close, consolidation and planning

OneStream announced its ESG Reporting and Planning solution in April 2025, bringing Scope 1, 2 and 3 emissions data into the same unified platform that runs financial close, consolidation and planning for its more than 1,600 customers, including 17% of the Fortune 500. The design follows the finance-first logic: ESG metadata aligned with the financial reporting model, workflow governance over quantitative and qualitative data, renewable energy contract handling for Scope 2 market-method calculations and ESG KPI forecasting, so sustainability gets planned and not just reported.

The solution is the youngest on this list and buyers should treat it that way: thin public reference base, content depth still building against CSRD's full requirements and a disclosure output layer that has not yet been proven across many published statements. For existing OneStream customers the platform argument is strong and the incremental evaluation is cheap. For everyone else it is one to watch rather than the first call.

+ESG and financial data in one engine with shared workflow
+Scope 2 market-method mechanics including RECs and PPAs
+ESG forecasting alongside financial planning, not just actuals
+Cheap to evaluate if you already run OneStream

Watch out for: Announced in April 2025, so demand published customer references and test ESRS content coverage in detail. Verify the path from platform data to a tagged, assurable statement.

Best fit: Existing OneStream customers with CSRD or California exposure who want one platform for financial and sustainability reporting.

The Carbon Accounting Lane Is a Different Purchase

A separate market sells carbon accounting and decarbonization platforms: Watershed is the best-funded name, with a reported $1.8 billion valuation on its 2024 raise, and Persefoni, Sweep and Normative compete in the same lane. These tools ingest activity and spend data at transaction level, run it through emission-factor engines, build auditable inventories and model reduction pathways, procurement changes and targets. That is measurement and management, and at deep Scope 3 granularity they go further than any tool on the shortlist above.

What they are not, mostly, is regulated-disclosure machinery. The governed statement inside a management report, with datapoint-level evidence, multi-topic ESRS coverage, review workflow and tagging, is the disclosure tools' home ground. The two lanes are converging from both directions, Workiva Carbon from the disclosure side and disclosure features inside the carbon platforms, but in 2026 the honest architecture question is still "who measures, who discloses". If your program is decarbonization first and your reporting obligation is light, buy the carbon lane first. If the statement is the obligation, buy the shortlist above and feed it from whatever measures your carbon, which can be a carbon platform, an EPM module or a well-run internal model.

One warning applies in both lanes: this is a consolidating market. Position Green has made three acquisitions, IBM bought Envizi, and venture-funded vendors face a smaller regulated market than their 2023 business cases assumed. Contract for data portability, escrow your methodology documentation and treat five-year roadmap promises with appropriate suspicion.

Demo Pressure-Tests

Five tests, one sandbox, one afternoon. Bring one site's energy data, one real supplier and your materiality assessment if you have one. Each test targets a failure mode this category is currently producing in the wild.

1. The regulatory-change test

This category's defining risk showed itself between 2025 and 2026: scope thresholds moved, timelines slipped two years and the ESRS themselves were rewritten. A vendor's content update machinery matters more than any single feature, because the requirements will move again.

The test: Ask exactly how and when the product absorbed the stop-the-clock delay and the revised ESRS: show the release notes, the migration path for customers mid-implementation and who pays for content updates. A vendor that hesitates here will leave you holding the next change.

2. Assurance evidence per datapoint

CSRD statements carry limited assurance, and your assurance provider will sample datapoints and walk them back to source. If the trail is a spreadsheet email chain, the software has not done its job.

The test: Pick one quantitative datapoint, energy consumption for one site, and one qualitative disclosure. Have the vendor show the full chain: who entered it, from what source, who approved it, what changed since last period and what the assurance provider gets to see. Time how long the walkthrough takes.

3. Scope 3 collection at your real suppliers

Scope 3 is where ESG data collection actually hurts: hundreds of suppliers, mixed data quality, estimates beside actuals. The Omnibus also capped what you can demand from smaller value-chain partners, so the workflow has to work with incomplete answers.

The test: Run a supplier data request end to end: the survey out, a partial response back, an emission-factor estimate filling the gap and the audit trail distinguishing estimated from reported data. Ask how the tool handles a supplier who refuses, as smaller partners now may.

4. Double materiality with a real trail

The materiality assessment decides what you report, and assurance providers increasingly ask how you got there. Tools differ between a genuine workflow with stakeholder inputs and scoring, and a static questionnaire exported to a slide.

The test: Walk one topic through the assessment: impact scoring, financial scoring, stakeholder evidence, the threshold decision and the resulting disclosure scope. Then ask to change one score and watch what updates downstream.

5. The output document itself

The sustainability statement lands inside the management report, designed, translated where needed and eventually digitally tagged. Data platforms often stop at a dashboard and leave the document to Word.

The test: Ask to see a real, published statement produced by the tool, then have the vendor show the production path: layout, review cycles, late-change handling and their plan for ESRS digital tagging as the taxonomy work lands. If the answer is an export to a design agency, price that in.

For how the two platform vendors at the top of this list compare beyond ESG, see Workiva vs CCH Tagetik. For the wider last-mile category these tools belong to, see the disclosure management ranking.

Frequently Asked Questions

Check two numbers. After the Omnibus I directive, published in the EU's Official Journal in February 2026, CSRD applies to companies with more than 1,000 employees and net turnover above 450 million euros, both conditions together, assessed at entity or group level. That removed most of the original wave 2 and wave 3 population, including listed SMEs. Member states transpose the changes into national law by March 2027, so verify your own country's implementation before acting on the headline thresholds.

Companies newly captured by the revised scope report for financial years starting on or after January 1, 2027, meaning first statements published in 2028. Wave 1 companies that remain above the thresholds continue reporting, while member states may exempt wave 1 companies that fall below them for financial years 2025 and 2026. The 2025 stop-the-clock regulation had already pushed the old wave 2 and 3 dates back two years before the scope change made much of that moot.

The revised, simplified ESRS. The European Commission consulted on a draft delegated act in May 2026 and adopted the revised standards to apply for financial years beginning on or after January 1, 2027, with early adoption permitted for financial year 2026 once in force. The revision cuts datapoints substantially and prioritizes quantitative disclosures. Buy software on its content update record, not on its current ESRS template, because the standards have now changed twice in three years.

Not yet in practice, but it is the stated direction: sustainability statements are meant to be tagged in XBRL under the ESEF regime once the sustainability taxonomy work is finalized, and the timing has moved with the wider Omnibus changes. Treat tagging as a roadmap requirement. Ask vendors what they ship today for ESEF, since annual report tagging is already mandatory for EU-listed companies, and how they plan to extend it to the ESRS taxonomy.

Three reasons survive the SEC's retreat from its climate rule. California's SB 253 requires companies over $1 billion in revenue doing business there to report Scope 1 and 2 emissions, with 2026 reports deferred to November 10, 2026 and assurance phasing in from 2027. SB 261 climate-risk reports for companies over $500 million are caught in litigation, with enforcement of the original deadline paused, but the law has not gone away. And US groups with large EU operations can still fall in CSRD scope through the 450 million euro turnover test. Add investor and customer questionnaires, and most large US companies still need governed ESG data.

Carbon accounting tools like Watershed measure: they turn activity and spend data into an emissions inventory and support reduction programs. ESG reporting tools govern and disclose: they collect hundreds of datapoints across environment, social and governance topics, keep the audit trail and produce the regulated statement. The categories overlap at the emissions calculation, and vendors on both sides are building toward each other, but a decarbonization program and a CSRD statement are different jobs. Many companies rightly run one tool from each lane.

Pricing is quote-based across the category and varies with datapoint scope, entity count and users. As anchors from our research: Workiva's platform runs roughly $40K to $300K+ per year depending on solutions licensed, and enterprise EPM-attached modules like CCH Tagetik's price as additions to a larger platform deal. Dedicated mid-market platforms typically undercut both. Budget separately for the first-year implementation and the materiality assessment work, which often costs as much as the software.

The disclosure should sit where the controls are, which increasingly means finance, with sustainability owning methodology and data relationships. CSRD placed the statement inside the management report with assurance, which is a controllership discipline. The practical pattern that works: sustainability teams own materiality, methodology and supplier engagement, while the controller's team owns the reporting calendar, evidence standards and sign-off. Pick software both teams will actually use, because a tool one side refuses becomes a spreadsheet again within a year.

Next Reads

Build your shortlist in the CFO Shortlist app

Weigh these vendors against your scope position, data estate and the consolidation stack the numbers come from.

Independent FP&A & EPM advisory for mid-market finance teams.

Helping CFOs, Controllers, and FP&A leaders choose, negotiate, and implement the right finance stack – without pay-to-play bias.

© 2026 CFO Shortlist. All rights reserved.

Independent, buyer-first EPM advisory.

No vendor compensation or pay-to-play sponsorships.