Environmental Social and Corporate Governance Template

In plain language: States the policy's objectives, identifies which entities and personnel it applies to, and defines key terms used throughout the document.

Common mistake: Limiting scope to headquarters only and excluding subsidiaries or contractors — this creates enforcement gaps and exposes the company to supply chain liability claims.

In plain language: Documents specific, measurable environmental targets — emission reductions, energy use, waste management, and water consumption — with a defined baseline year and timeline.

Common mistake: Stating vague aspirations like 'we are committed to the environment' without quantified targets and a baseline — regulators and investors treat unquantified commitments as potential greenwashing.

In plain language: Covers labor standards, health and safety, DEI targets, community investment, supply chain labor rights, and human rights due diligence.

Common mistake: Copying DEI language from a template without setting measurable targets. A policy that mandates 'fostering diversity' with no KPIs cannot be enforced or reported against.

In plain language: Defines the board and executive structure responsible for ESG oversight, including committee mandates, reporting lines, and accountability mechanisms.

Common mistake: Assigning ESG governance to a general 'leadership team' without naming a specific committee or officer. Diffuse accountability means no accountability — and signals weak governance to investors.

In plain language: Prohibits bribery, fraud, facilitation payments, and conflicts of interest, and requires compliance with applicable anti-corruption laws in every jurisdiction of operation.

Common mistake: Referencing only one jurisdiction's anti-corruption law in a company that operates internationally — gaps in jurisdictional coverage leave the company exposed to enforcement in markets not named.

In plain language: Commits to producing regular ESG disclosures at a defined frequency, aligned to a recognized framework (GRI, SASB, TCFD, or CSRD), and specifies the assurance level required.

Common mistake: Committing to a reporting framework in the policy without confirming the company has the data infrastructure to actually collect the required metrics — this leads to incomplete or restated disclosures.

In plain language: Describes how the company identifies, prioritizes, and engages with material stakeholders — investors, employees, communities, regulators, and customers — on ESG matters.

Common mistake: Treating stakeholder engagement as a one-time exercise during policy drafting rather than an ongoing structured process — which misses emerging risks and undermines the materiality assessment.

In plain language: States the consequences of policy violations, the process for reporting non-compliance, and the company's remediation obligations when targets are missed.

Common mistake: Omitting a whistleblower or reporting channel specific to ESG — employees and contractors who witness violations need a clear, safe mechanism to raise concerns, and many jurisdictions now require one.

In plain language: Specifies how often the policy is reviewed, who has authority to amend it, and what triggers an unscheduled review — such as material regulatory change or a significant ESG incident.

Common mistake: Setting an annual review with no trigger for off-cycle updates — a major regulatory change (e.g., new CSRD requirements) can make the policy non-compliant before the scheduled review date.

An ESG policy is a formal company document that codifies commitments across three pillars — environmental stewardship, social responsibility, and corporate governance. It translates broad sustainability goals into specific, measurable obligations with defined accountability structures, reporting frameworks, and enforcement mechanisms. Unlike a general mission statement, a well-drafted ESG policy creates binding internal obligations that can be reported against and audited.

Any company subject to ESG reporting regulations, institutional investor scrutiny, or ESG-linked financing covenants needs a formal policy. In the EU, the CSRD requires large companies and listed SMEs to publish detailed sustainability reports from 2025 onward. In the US, SEC climate disclosure rules affect public companies. Beyond legal mandates, procurement teams at large corporations increasingly require ESG policies from suppliers before awarding contracts.

An internally adopted ESG policy is binding on the company and its personnel to the extent the company's governance documents and employment contracts incorporate it. Externally, published ESG commitments can create legal exposure under securities law (material misstatements), consumer protection law (greenwashing), and contractual representations in financing agreements. Board approval and formal adoption significantly strengthen enforceability and signal good faith to regulators.

An ESG policy is the governing document that establishes a company's commitments, targets, governance structures, and accountability mechanisms. An ESG report is the periodic disclosure — typically annual — that measures actual performance against those commitments. The policy comes first; the report demonstrates whether the policy is working. Many companies publish both as linked documents on their investor relations pages.

The right framework depends on your jurisdiction, audience, and industry. GRI (Global Reporting Initiative) is the most widely used globally and suits multi-stakeholder reporting. SASB standards are industry-specific and investor-focused. TCFD is the standard for climate-related financial risk disclosure. EU companies must align to CSRD and the European Sustainability Reporting Standards (ESRS). Many companies use a primary framework and cross-reference others — confirm what your key investors and regulators require before committing in the policy text.

Greenwashing is making misleading or unsubstantiated environmental claims — either through false statements or omission of material information. Regulators in the US (FTC Green Guides), EU (Green Claims Directive), and UK (CMA Green Claims Code) are actively enforcing against it. A well-drafted ESG policy reduces greenwashing risk by tying every public commitment to a quantified target, a baseline year, and a third-party assurance process that independently validates reported data.

Board approval and signature is strongly recommended and in some jurisdictions effectively required. Under the EU CSRD, sustainability reporting must be approved by the board and is subject to director liability for material misstatements. Even where not mandated, board sign-off signals governance maturity to investors, lenders, and rating agencies. The policy should reference the board resolution approving it and be dated consistently with that resolution.

At minimum, annually — aligned to the company's ESG reporting cycle so commitments and disclosures remain synchronized. In practice, the policy should also be updated off-cycle when a material regulatory change occurs (such as new CSRD requirements), when the company's business activities change materially, or following a significant ESG incident. Include an explicit off-cycle review trigger clause in the policy itself.

ESG-linked loans and green bonds typically include ESG key performance indicators as covenant conditions — the loan agreement references the company's ESG policy as the governing document for those KPIs. Missing ESG targets can trigger margin ratchets (interest rate increases) or technical covenant breaches. A formally adopted, board-approved ESG policy with auditable targets is a prerequisite for accessing most ESG-linked debt markets as of 2024.