ESG Governance Compliance Requirements

A listed French insurer finalises its sustainability statement. The climate section is polished, the supplier commitments look serious, and the board report says ESG risks are monitored. Then the commissaire aux comptes or organisme tiers indépendant asks a direct question: where is the source file, who approved the figure, and what control proves the disclosure is reliable?

That is where ESG governance becomes real.

For French companies, ESG governance compliance is no longer only a sustainability team issue. It now concerns legal, finance, audit, risk, compliance, procurement, HR, investor relations, and board committees. Under CSRD and its French transposition, companies in scope must think not only about what they disclose, but how the information is prepared, reviewed, certified, and defended.

The wider concept of ESG regulatory compliance starts with knowing how ESG governance works across oversight, risk, accountability, and disclosure. This article goes further into the compliance question: how can French companies prove that their ESG governance system is controlled, documented, and ready for reporting or assurance?

For financial services, insurance firms, listed companies, and large French groups, waiting until the reporting deadline is too late. Teams responsible for ESG data, legal review, internal control, and board reporting should align before the sustainability statement is prepared. Build that readiness now with ESG, CSR and compliance training for the financial sector.

What Are ESG Governance Compliance Requirements?

Simple Definition for French Companies

ESG governance compliance requirements are the legal duties, governance expectations, internal controls, documentation practices, and assurance-readiness steps that help a company manage ESG risks and support reliable sustainability reporting.

In France, the key regulatory foundation comes from the Corporate Sustainability Reporting Directive, known as CSRD, and the European Sustainability Reporting Standards, known as ESRS. France transposed CSRD through Ordonnance n° 2023-1142 of 6 December 2023, which deals with the publication and certification of sustainability information by commercial companies.

The AMF explains that CSRD aims to harmonise sustainability reporting and improve the availability and quality of ESG disclosures. For French listed companies, this is especially important because the AMF also supervises sustainability information published by issuers.

Legal Requirements, Governance Expectations, and Evidence Practices Are Not the Same

This distinction matters. Not every useful ESG control is a strict legal requirement in the same way for every company. A sustainability statement, ESRS-based reporting, double materiality assessment, and certification by a commissaire aux comptes or organisme tiers indépendant are legal and regulatory matters for companies in scope.

Other elements, such as ESG risk registers, internal sign-off logs, training records, supplier escalation files, and disclosure review sheets, are usually governance expectations or evidence practices. They may not be prescribed in one exact format, but they help prove that the company has a reliable ESG governance system.

That separation makes the article more accurate. ESG governance compliance is not about pretending every company must use the same checklist. It is about understanding what the law requires, what regulators and auditors expect to see, and what evidence helps a company defend its ESG disclosures.

Why ESG Governance Compliance Matters in France in 2026

French Companies Face Regulatory, Audit, Investor, and Client Pressure

For French sociétés cotées, large groups, banks, insurers, asset managers, and companies in regulated sectors, ESG governance now sits close to financial reporting discipline. The sustainability statement is not a marketing document. It is part of the management report and must be prepared with enough rigour to support review and certification.

The AMF has drawn listed companies’ attention to sustainability reporting priorities, including materiality analysis, reporting scope, structure of the sustainability statement, and value chain information. Its 2025 communication also notes that the AMF is the competent authority in France for controlling this information for listed issuers under the Transparency Directive.

This means French companies need a governance system that can answer detailed questions. Who decided that an ESG topic was material? How was the value chain boundary assessed? Which source was used for the workforce metric? Who reviewed the climate target? Where is the approval record?

2026 Simplification Does Not Remove the Need for ESG Discipline

The 2026 EU simplification package changes the scope discussion, but it does not make ESG governance irrelevant. As of the Council’s February 2026 approval of the simplification package, the direct CSRD scope is narrowed by raising thresholds to companies with more than 1,000 employees and above €450 million net annual turnover, according to the Council of the European Union.

That wording is important. Some companies may fall outside direct reporting scope, but many will still face ESG information requests from banks, insurers, investors, public tenders, rating agencies, parent companies, and major clients. A French SME supplying a large listed group may not publish a CSRD report itself, yet it may still need to provide emissions data, labour information, ethics evidence, or supplier due diligence records.

In other words, the legal perimeter may change, but the business pressure for credible ESG information remains.

The Core ESG Governance Compliance Requirements

A Clear ESG Governance Framework and Defined Ownership

A company needs a clear ESG governance framework that explains how sustainability risks, controls, reporting responsibilities, and board oversight connect. This should not sit in a separate sustainability folder. It should link to internal control, risk management, legal review, procurement controls, HR processes, audit planning, and board reporting.

French companies should be clear about who owns each ESG topic. Climate data may involve operations and finance. Workforce information usually involves HR. Supplier due diligence often sits with procurement and legal. Anti-corruption and whistleblowing controls may involve compliance, legal, internal audit, and ethics officers.

Without named owners, ESG data becomes fragile. The sustainability team may write the report, but it should not be the only function responsible for the evidence behind it.

Board Oversight and Executive Accountability

Board oversight is not a decorative part of ESG compliance. Under French CSRD implementation, large listed companies must also pay attention to the role of specialised committees. The AMF notes that sustainability reporting must be verified by a commissaire aux comptes or OTI, and that a specialised committee acting under the responsibility of the board must monitor matters linked to the preparation and control of sustainability information.

This creates a clear governance message. ESG information should be discussed, challenged, and reviewed at the right level. Board minutes, committee materials, action trackers, and management reports help show that ESG risks were not handled casually.

Executive accountability also matters. If a company discloses a climate transition plan, a supplier screening process, or an ethics programme, leadership should be able to explain the decision, the risk, the evidence, and the follow-up.

Internal Controls for ESG Data and Decisions

ESG data should be controlled before disclosure. That means the company should know the source system, reporting boundary, calculation method, review owner, approval route, and record location.

This is where ESG governance starts to resemble financial reporting discipline. The goal is not perfection. The goal is traceability. If a number changes, the company should know why. If a claim is revised, the review trail should show who changed it and who approved it. If an estimate is used, the limitation should be clear.

ESG Reporting Requirements Under CSRD and ESRS

What Companies Need to Prepare for Sustainability Reporting

For companies in scope, ESG reporting requirements under CSRD and ESRS require structured sustainability information covering material impacts, risks, and opportunities. The sustainability statement should be prepared in a way that allows readers, regulators, and assurance providers to understand the process behind the disclosures.

In France, this also connects with certification. The H2A FAQ on sustainability information certification explains that the general meeting may appoint a statutory auditor, a separate statutory auditor, or an independent third-party body listed by the Haute Autorité de l’audit to certify sustainability information.

That is a major reason why governance teams need evidence files before the report is finalised. The certification process will not only look at nice wording. It will test whether the information can be supported.

Why Double Materiality Needs a Strong Audit Trail

Double materiality sits at the centre of ESRS reporting. It asks a company to assess sustainability matters from two angles: how the company affects people and the environment, and how sustainability topics affect the company’s financial position, performance, and prospects.

For French companies, the weak point is often not the concept. It is the documentation. A materiality assessment should not look like a final chart that appears at the end of the process. It should show criteria, thresholds, stakeholder inputs, scoring, debates, management validation, and board or committee review.

If a company says a topic is not material, that decision may need to be defended. If a value chain risk is excluded, the reason should be recorded. If stakeholder input influenced the result, the evidence should be kept.

How ESG Data and Disclosures Should Be Reviewed

Disclosure review should happen before publication, not after the report is drafted. Legal, finance, compliance, sustainability, risk, and communications teams should review high-risk statements, especially those involving climate commitments, social claims, supplier practices, diversity data, anti-corruption controls, and human rights topics.

A good review process checks accuracy, balance, consistency, and evidence. It also reduces greenwashing risk. In France, where listed companies face AMF attention and many organisations face scrutiny from lenders and institutional investors, unsupported ESG language can quickly become a credibility problem.

How Companies Can Prove ESG Governance Compliance

The strongest ESG governance systems are built around proof. A company should be able to move from any important ESG claim back to its source file, responsible owner, review note, and approval record.

This table shows the difference between legal duties and useful evidence practices. The law may not demand one identical file format from every company, but companies that keep these records are better prepared for review, certification, investor questions, and client due diligence.

ESG Governance Controls Companies Should Have

Risk, Supplier, Ethics, and Disclosure Controls

ESG governance controls should match the company’s risk profile. A French bank may focus heavily on sustainable finance disclosures, client due diligence, financed emissions, and conduct risk. An insurer may focus on climate risk, underwriting exposure, investment portfolios, and social responsibility. A listed industrial group may need stronger controls around emissions, workforce safety, suppliers, anti-corruption, and value chain impacts.

The ESG risk register is useful when it connects to enterprise risk management. Supplier oversight is useful when procurement teams document screening, clauses, escalation, and remediation. Whistleblowing and anti-corruption controls are useful when incidents are recorded, investigated, and linked to governance reporting where relevant.

Training records and policy review cycles also matter, but they should not be treated as box-ticking. They show whether employees involved in ESG reporting, supplier management, ethics, and control processes understand their role.

Common ESG Governance Compliance Mistakes

Treating ESG Compliance as an Annual Reporting Exercise

The first major mistake is treating ESG governance as a year-end reporting project. By then, weak source data, missing approvals, and unclear ownership are already hard to fix.

ESG governance should operate during the year. Data owners should know what they need to collect. Committees should review key risks. Legal and compliance teams should examine high-risk claims before publication. Internal audit should understand where ESG controls are vulnerable.

Publishing ESG Claims Without Evidence

The second mistake is allowing ambitious language to outrun evidence. Claims about carbon reduction, supplier ethics, workplace inclusion, human rights, or anti-corruption controls must be supported by records.

This is where many companies create avoidable risk. A claim that sounds strong but lacks source documentation may damage trust during assurance, investor review, or media scrutiny.

Leaving ESG Responsibility With One Department

The third mistake is leaving ESG with one team. Sustainability teams are important, but they cannot own all data, risk, legal interpretation, supplier evidence, and board accountability alone.

Strong ESG governance requires cross-functional discipline. Finance understands reporting controls. Legal understands liability. Compliance understands ethics and investigations. Procurement understands suppliers. HR understands workforce data. Operations understands environmental performance. The board needs the full picture.

Waiting Too Long to Prepare for Assurance

The fourth mistake is preparing for certification after the sustainability statement is almost complete. That creates pressure, confusion, and rework.

For French companies subject to sustainability statement certification, the CAC or OTI will need access to reliable information. The company should prepare the evidence trail during the reporting process, not after it.

ESG Governance Best Practices for Compliance Readiness

The strongest ESG governance best practices are simple in principle but demanding in execution. Companies should review material ESG risks at board or committee level, assign responsible owners, control ESG data, document decisions, and keep evidence close to each disclosure.

They should also create a clear approval route for sustainability statements. High-risk claims should move through legal, finance, compliance, sustainability, and executive review before publication. Changes should be recorded, especially where figures, targets, assumptions, or commitments are updated.

Year-round monitoring is equally important. ESG controls should be tested before the reporting deadline. If supplier evidence is weak, it should be fixed while procurement still has time to act. If HR data does not match the reporting boundary, the issue should be resolved before the final review. If board materials are too thin, the next committee cycle should improve them.

ESG Compliance and Corporate Accountability

ESG governance compliance is closely linked to corporate accountability. French company leaders must be able to defend ESG decisions with evidence, not only intention.

This applies to board members, executives, legal teams, compliance officers, finance leaders, and operational owners. If a sustainability statement says the company manages supplier risk, leadership should know what screening exists. If the report says climate risk is integrated into governance, the board should have seen and challenged the relevant information. If the company says ethics training is active, compliance should be able to show records.

Accountability improves ESG governance because it forces clarity. People know who owns the decision, which evidence matters, and what review is needed before public disclosure.

Conclusion 

ESG governance compliance requirements are not only about producing a sustainability statement. For French companies, they are about proving that ESG information is governed with enough structure to support reporting, certification, investor trust, and regulatory scrutiny.

CSRD, ESRS, French transposition, AMF expectations, and sustainability information certification have changed the level of discipline expected from companies in scope. Even organisations outside direct CSRD scope may still face ESG data requests from banks, insurers, public tenders, large clients, and investors.

The best starting point is to separate what is legally required from what is expected by governance, audit, and assurance teams. Then build the evidence trail. When ESG claims connect to source files, owners, controls, review records, and board oversight, the company is far better prepared.

A calm and effective next step is to train the teams who own ESG decisions, reporting controls, and evidence through ESG, CSR and compliance training for the financial sector.