What Is a Supplier Questionnaire? A Guide for SMEs

If you run a small or mid-sized business in Europe, there’s a good chance a customer, bank, or investor has recently sent you a form asking about your carbon emissions, your energy use, or your workplace policies. That form is a supplier questionnaire — and if you’re an SME encountering one for the first time, this guide explains what it is, why you’re getting it, and what’s changing in 2026 to make responding to it less painful.

What Is a Supplier Questionnaire?

A supplier questionnaire is a request for sustainability (ESG) data sent by a larger organization to the smaller businesses in its supply chain. It typically covers things like:

Greenhouse gas emissions (often broken into Scope 1, 2, and 3)
Energy consumption and sources
Waste, water, and pollution data
Health and safety practices
Workforce policies (diversity, pay, training)
Governance basics (anti-corruption policies, board structure)

Historically, every large company built its own version of this form. One customer might send a five-tab spreadsheet, another a 40-question web portal, a third a PDF with entirely different terminology. If you supplied three large companies, you could easily be filling out three incompatible ESG surveys a year — each one asking for roughly the same underlying data, just organized differently.

Why Are You Getting One?

Large companies operating in the EU are increasingly required to report on sustainability across their entire value chain, not just their own operations — a requirement driven by the Corporate Sustainability Reporting Directive (CSRD) and the reporting standards that sit under it (ESRS). Because a large company’s supply chain emissions and social impacts usually depend heavily on smaller suppliers, that reporting obligation flows downstream in the form of a questionnaire landing in your inbox.

Banks and investors ask for similar data for a related but separate reason: their own regulatory obligations (like the EU’s Sustainable Finance Disclosure Regulation) require them to understand the sustainability profile of the businesses they lend to or invest in.

Important distinction: none of this makes ESG reporting legally mandatory for you as an SME. The obligation sits with the large company or financial institution — you’re simply being asked to help them meet it. That distinction matters, because it’s the reason a voluntary standard, rather than a new law aimed at SMEs, is what’s fixing the problem.

How VSME Is Changing This

In December 2024, EFRAG — the same technical body behind the mandatory ESRS standards — published the Voluntary Sustainability Reporting Standard for non-listed SMEs (VSME). The European Commission formally adopted it as a recommendation in July 2025. Its purpose is direct: give SMEs one standardized format to respond to sustainability data requests, instead of a different questionnaire for every counterparty.

VSME has two tiers:

Basic Module — a lean set of core disclosures (energy, emissions, workforce basics, pollution) suited to most SMEs, particularly those simply responding to a customer or bank request.
Comprehensive Module — additional detail (climate targets, human rights metrics, board diversity) for SMEs facing more demanding counterparties.

Critically, VSME itself remains voluntary — no SME is legally required to fill it out. But because large companies are now being steered toward requesting data in VSME format, filling out a VSME report once is increasingly a substitute for repeatedly filling out bespoke questionnaires.

The Value Chain Cap: A Limit on What Can Be Asked

Until recently, there was no ceiling on what a large company could request from an SME supplier — some questionnaires ran to 200+ data points with unrealistic deadlines. The VSME Delegated Act, adopted on 3 July 2026, addresses this directly: it caps what CSRD-obligated companies can request from SME business partners at the level defined by the VSME Basic Module. In short, your customer can no longer demand more from you than the VSME standard itself covers.

This is a meaningful shift for SMEs: the questionnaire you receive going forward should look increasingly like VSME’s own structure, rather than a custom form invented by each counterparty. For the fuller regulatory detail, see our breakdown of the VSME Delegated Act.

What Should an SME Actually Do?

Check whether the request references VSME. If it does, you can likely respond using a VSME-aligned report rather than building a bespoke answer from scratch.
Start with the Basic Module. Most first-time supplier questionnaires are satisfied by Basic Module-level data — energy use, direct emissions, core workforce figures.
Reuse the data you already have. Utility bills, payroll records, and existing HR policies cover a surprising share of what’s asked.
Consider VSME-aligned software if you expect repeat requests. A structured report you can reuse across multiple customers and banks is far more efficient than rebuilding a spreadsheet each time. Compare VSME-ready reporting tools →

Frequently Asked Questions

Common questions from SMEs about supplier questionnaires and VSME reporting

Is filling out a supplier questionnaire legally required for SMEs?

No. The legal reporting obligation sits with the large company or financial institution making the request, not with the SME. However, declining to respond can affect commercial relationships, financing terms, or contract renewal.

Do I have to use the VSME format to respond?

No, VSME is voluntary. But since large CSRD-obligated companies are now capped at requesting VSME Basic Module-level data, responding in VSME format is often the most efficient way to satisfy the request.

What’s the difference between a supplier questionnaire and CSRD reporting?

CSRD is a mandatory reporting law that applies to large companies. A supplier questionnaire is how those large companies collect the value-chain data they need to comply with CSRD — it doesn’t make CSRD itself apply to the SME answering it.

How long does it take to complete a VSME Basic Module report?

Data collection is typically the bottleneck — commonly a few weeks spread across departments — while completing the report itself with a guided tool is usually a matter of hours, not weeks.