Leading SME ESG reporting platforms

On 3 July 2026, the European Commission adopted a Delegated Act establishing a formal “Voluntary Standard” for sustainability reporting, built directly on EFRAG’s VSME framework. Headlines are calling this “VSME becomes EU law.” That’s technically accurate — but it glosses over the one detail that actually matters if you run an SME: you still aren’t required to report under it.

What changed isn’t a mandate on small businesses. It’s something more consequential for how the whole reporting ecosystem works.

A Quick Timeline

• December 2024 — EFRAG publishes VSME as a technical standard. No legal weight.
• July 2025 — The European Commission adopts VSME as a formal Recommendation — “soft law,” meaning encouraged but non-binding.
• 3 July 2026 — The Commission adopts a Delegated Act turning a VSME-based framework into a binding EU legal instrument, alongside the revised ESRS delegated act for large companies.
• Now (scrutiny period) — The Act sits with the European Parliament and Council for a 2–4 month review window. If neither objects, it enters into force and applies from the following financial year, with early adoption permitted once it takes effect.

So as of today, the Act exists in EU law but hasn’t fully entered into force yet — worth knowing if you’re citing this as settled.

What’s Actually Becoming Binding

Here’s the part most coverage skips: the Delegated Act doesn’t force SMEs to report. It creates a value chain cap.

Large companies within CSRD scope will be legally prohibited from demanding more sustainability data from smaller supply-chain partners than what’s covered in this Voluntary Standard. If your business supplies a large CSRD reporter, they can no longer send you a 200-line custom ESG questionnaire — the standard now sets the ceiling on what they’re allowed to ask for.

That’s the binding part. It applies to the large company’s right to request, not to your obligation to respond.

What Stays Voluntary

For the SME itself, nothing has changed in terms of legal obligation:

• No SME is required to file a VSME/VS report.
• There’s still no mandatory double materiality analysis for the Basic Module.
• No external assurance requirement.
• Reporting remains a business decision — usually driven by a bank, investor, or large customer asking for data, not by law.

The distinction matters because “VSME is now mandatory” and “VSME now sets a legal limit on what others can demand from you” lead to very different action plans.

Why This Still Matters for SMEs

Even without a legal reporting obligation, this changes the practical landscape:

1. Data requests get standardized. Instead of every large customer sending a different spreadsheet, expect convergence around the VS/VSME disclosure set — because their compliance teams now have a legal reason to stop over-asking.
2. It becomes the default reference point. Banks and investors already treat VSME as the go-to framework for SME sustainability data; formal legal status reinforces that.
3. Early movers get leverage. SMEs that already have a VSME Basic Module report in hand won’t scramble when a large customer’s procurement team starts enforcing the cap.

What SMEs Should Do Now

• Don’t wait for a mandate that isn’t coming — the business case (financing, retaining large customers) is the real driver.
• Start with the Basic Module: energy use, Scope 1 & 2 emissions, workforce data, and basic governance disclosures.
• If a specific investor or customer relationship demands more depth, extend into the Comprehensive Module later — most SMEs don’t need it on day one.