Article

7 ESG Data Requests South African SMEs Are Now Receiving from JSE Customers

TL;DR — Anglo American, Exxaro, Woolworths, Shoprite, and other JSE-listed buyers are pushing King V and TCFD-aligned data requirements into their supplier base. Seven data categories now appear in nearly every supplier questionnaire. SMEs that respond in 48 hours retain contracts; those that scramble lose them.

7 ESG Data Requests South African SMEs Are Now Receiving from JSE Customers

Your largest customer sends an email. Attached is a 12-page supplier sustainability questionnaire. It asks for your greenhouse gas emissions data, your environmental management policy, your health and safety incident rates, your B-BBEE certificate, and evidence of third-party ethics audits. You have two weeks to respond.

This is happening to South African SMEs across manufacturing, mining supply chain, retail, and professional services right now. The obligation is not directed at you by a regulator. It is directed at your customer by the JSE, investors, and incoming ISSB-aligned disclosure standards. But the data they need to fulfil it sits inside your operations.

Anglo American runs a Responsible Sourcing programme with mandatory supplier self-assessment questionnaires. Exxaro embeds green and inclusive procurement requirements into vendor contracts. Woolworths extends environmental, labour, and social standards contractually to every tier of its supply chain. Shoprite applies its Supplier Code of Conduct to all trade and non-trade suppliers and sub-contractors.

This article covers the seven ESG data categories your customers are already requesting, what each one means in practice, and where to start building a system that makes every future questionnaire manageable.

Why supply chain ESG pressure is intensifying right now

JSE-listed companies are now operating under King V (effective January 2026), which introduces explicit double materiality and a mandatory Disclosure Framework. To report on Scope 3 emissions, listed companies need primary data from their suppliers. To demonstrate supply chain due diligence under TCFD-aligned guidelines, they need documented evidence from the businesses they buy from.

Research by Sage, ICC, and PwC covering South African SMEs found that 71 percent of South African SMEs consider sustainability important to their business, but only around 8 to 9 percent currently invest in formal sustainability reporting. That gap is where the commercial risk lives.

Industry expects mandatory ISSB reporting requirements for JSE-listed companies within 12 to 24 months. The CIPC launched its mandatory sustainability reporting consultation in January 2025. The FSCA has signed a cooperation agreement with the IFC and IFRS Foundation to accelerate ISSB adoption. When that obligation is formalised, the granularity and frequency of ESG data requests flowing down to suppliers will increase significantly.

Missing documentation does not just create reputational exposure for your customer. It creates procurement risk for you.

1. Scope 1 and Scope 2 greenhouse gas emissions

Scope 1 covers direct emissions from combustion and on-site processes — vehicles, generators, and any thermal processes in your operations. Scope 2 covers purchased electricity. If your business runs on Eskom's grid, your Scope 2 figure is calculable from 12 months of utility bills using South Africa's published grid emission factor.

This is the data point JSE-listed companies most urgently need. Mining companies like Anglo American and Sibanye-Stillwater are pursuing science-based decarbonisation targets and must account for their full value chain emissions. Retailers like Woolworths need emissions data from suppliers to report on the carbon intensity of their product ranges.

Companies that cannot provide primary emissions figures force their buyers to use generic sector averages — typically higher than actual figures. That makes you appear as a higher-emissions supplier than a competitor who has measured and documented their own footprint. In a procurement decision where two suppliers offer similar pricing and quality, the one with verified data carries lower compliance risk for the buyer.

Start with Scope 1 and 2. They are the most commonly requested and the most achievable with data you already have access to.

2. Energy consumption and efficiency data

Energy data sits beneath the emissions numbers and is increasingly requested as a standalone category. Buyers want to understand your total energy consumption, your energy sources (grid versus renewable), your energy intensity relative to output, and any efficiency improvements you have implemented.

This matters for two reasons. First, it helps JSE-listed companies assess the carbon risk embedded in their supply chains, particularly as South Africa's carbon tax Phase 2 escalates costs. The effective tax rate for fuel combustion increased by 130 percent in 2026 as Phase 2 began, with annual allowance reductions of 2.5 percent thereafter. Energy-intensive suppliers represent a growing cost and liability exposure for buyers.

Second, energy data is the starting point for identifying operational savings within your own business. Tracking energy consumption by facility or equipment reveals where waste is occurring and where efficiency investments pay back fastest. Buyers responding to Exxaro's supplier framework and similar programmes are specifically looking for evidence of active efficiency management, not just static consumption figures.

Twelve months of utility bills and fuel purchase records is the minimum foundation. Disaggregating by site or process category is the next step.

3. Environmental management, water, and waste

Beyond emissions and energy, JSE-listed customers are asking for evidence of documented environmental management systems. This typically means an environmental policy covering waste disposal, hazardous substance handling, water use, and pollution prevention. ISO 14001 certification is the gold standard, but even a current, board-approved environmental policy document satisfies most supplier questionnaire requirements at the initial stage.

Water data is specifically requested by retailers and mining supply chain buyers, particularly for suppliers in water-stressed regions. Woolworths and Shoprite both include water management expectations in their supplier codes. Anglo American's Responsible Sourcing programme assesses environmental performance, including water risk, as part of its self-assessment questionnaire.

Waste volumes, recycling rates, and the handling of hazardous materials are also standard categories. The practical challenge for most SMEs is not that their practices are deficient. It is that nothing is documented consistently. A policy document that lives in a folder on the CEO's desktop and has not been reviewed in two years will fail a supplier audit just as definitively as having no policy at all.

4. Health, safety, and labour data

Labour and safety data is often the category South African SMEs are best positioned to provide, because the underlying records already exist for legal compliance under OHSA-related regulations.

Occupational health and safety incident rates, compliance records, and near-miss reporting appear in virtually every supplier code of conduct from JSE-listed companies. Employment equity statistics, human rights policies, grievance mechanisms, and codes of conduct are expected from suppliers to companies operating under King V's responsible corporate citizenship principles.

Mining companies require particularly rigorous H&S data. Anglo American's Responsible Sourcing programme recognises third-party social and ethical audits, including SMETA (Sedex Members Ethical Trade Audit) and SA8000 certification. Retailers like Woolworths require alignment with the ETI Base Code and ILO declarations on labour practices.

The data gap is usually not the records themselves. It is the ability to extract and present them consistently across different questionnaire formats from different customers, often asking for the same underlying information in different structures.

5. B-BBEE status documentation

B-BBEE compliance is a requirement most South African SMEs already manage, but its intersection with ESG procurement is intensifying in ways many have not yet registered.

Industry analysis from CIPS Southern Africa in 2025 specifically notes that carbon is becoming a standard line item in contracts, alongside a growing trend of buyers seeking suppliers that are both B-BBEE compliant and sustainability-ready. This creates a dual qualification framework: suppliers that cannot demonstrate both B-BBEE credentials and basic ESG documentation face compounding risk of exclusion from procurement programmes.

Exxaro's supply chain sustainability strategy explicitly integrates socio-economic development and B-BBEE compliance with green procurement objectives, prioritising black-owned SMMEs that meet environmental standards. ESG and B-BBEE are being aligned rather than treated as parallel obligations.

For most SMEs, B-BBEE documentation is the part of the supplier questionnaire they can already complete without new data collection. The risk is treating it as the only documentation that matters and neglecting the environmental and climate data categories that are gaining equal weight in procurement decisions.

6. Governance, ethics, and data protection

Governance documentation is now a baseline expectation in supplier questionnaires, not an advanced requirement. This means a documented anti-bribery and corruption policy, a conflict-of-interest procedure, a whistle-blowing mechanism, and a sanctions framework for ethical violations.

POPIA compliance documentation is increasingly appearing as a mandatory tender requirement, particularly for SMEs providing professional services or handling customer data on behalf of a JSE-listed company. Shoprite's Supplier Code of Conduct specifically references data protection and privacy compliance as a required standard.

For professional services SMEs supplying financial institutions, governance documentation carries particular weight. Banks including Standard Bank and Absa are integrating climate and ESG requirements into supplier standards. As the Prudential Authority's G3/2025 guidance drives bank-level ESG integration into credit assessments, supply chain governance requirements will follow the same escalation path.

The practical implication: your anti-corruption policy and data-handling procedures need to exist as documents that can be produced on request, not merely as practices that happen to be in place.

7. Third-party audit credentials and platform participation

The seventh category is evidence that an independent party has verified your ESG claims. Third-party audits and certifications shift the verification burden away from the buyer and provide a standardised, comparable assessment that can be presented to investors, auditors, and regulators.

Anglo American's Responsible Sourcing programme specifically recognises SMETA audits, SA8000 certification, and ETI Base Code compliance. Woolworths references Sedex membership in its ethical sourcing requirements. EcoVadis is increasingly referenced by South African corporates with global supply chains, as a single EcoVadis assessment can be shared across multiple customers and aligned with multiple international standards.

CDP data shows that public disclosures by South African companies increased from 50 in 2018 to 84 in 2023, with 45 percent of JSE Top 100 companies disclosing publicly in 2023. As these companies mature their ESG reporting, they will expect proportionate evidence from their supplier base.

For most SMEs, full third-party certification is not immediately required. Registering on Sedex or completing a basic supplier self-assessment creates a documented starting point that satisfies many customer questionnaire requirements and positions you for more formal certification as your programme matures.

The old way vs. the new reality

The old way. A supplier questionnaire arrives on a Friday afternoon. Finance chases Operations for energy bills. Operations cannot locate the current environmental policy. HR finds the health and safety log but it spans three years across four different spreadsheet formats. The carbon tax liability question is left blank. Someone reassembles everything the following Tuesday. The response is submitted four days late, contains six gaps marked "not currently tracked," and the company is removed from the preferred supplier list at the next procurement review.

The new reality. ESG data is maintained continuously in a single system. Utility data is connected and updated monthly. Policy documents are current, version-controlled, and accessible to the relevant people. When a questionnaire arrives, eight of ten questions can be answered immediately from structured data that already exists. The response is submitted within 48 hours, complete, and consistent across all sections. The company is flagged as a low-compliance-risk supplier and retained at the top of the preferred supplier list.

The companies winning supplier contracts in South Africa in 2026 are not necessarily the most sustainable. They are the ones who can demonstrate what they do, consistently and quickly.

Putting it all together: where to start

Most SMEs cannot build all seven data categories at once. Prioritise by commercial exposure.

If your largest customers are in mining or retail, start with GHG emissions (Scope 1 and 2), energy consumption, and labour/H&S documentation. These appear in virtually every mining and retail supplier questionnaire in South Africa. If your business has direct carbon tax liability or supplies into CBAM-exposed export chains, emissions documentation is your most urgent gap.

Assign one person responsibility for each data category. That person does not need to be a sustainability specialist. They need to know where the data lives and how to extract it in a consistent format. Documenting that process is half the work.

Expect the first complete supplier questionnaire response to take significant time. Expect the second to take a fraction of that, because the data architecture already exists.

What to do next

South African SMEs are not waiting for ESG regulation to reach them directly. Their customers — most JSE-listed and operating under King V, TCFD-aligned disclosure standards, and growing investor ESG scrutiny — are already asking for this data. The seven categories above represent the practical scope of what you will be asked to provide.

The risk is not philosophical. It is commercial. Missing documentation leads to disqualification from preferred supplier programmes, lost contracts, and barriers to green finance at a time when carbon tax Phase 2 is raising the cost of inaction.

Assess your ESG data readiness with a structured starting point built for South African SMEs navigating supply chain ESG demands.

Share this article

Ready to put this into practice?

Free for 14 days.