The federal SEC climate rule paused. State rules did not. Europe’s reporting regime accelerated. As of mid-2026, Scope 3 emissions are no longer the discretionary part of the disclosure conversation — they decide whether your sustainability report is defensible. And they sit almost entirely outside your four walls, in suppliers you don’t control and data that has historically lived in spreadsheets.
Summary: Scope 3 emissions cover indirect upstream and downstream activities across 15 GHG-Protocol categories. For most companies, Scope 3 is the majority of their footprint — roughly 75% of corporate emissions on average of corporate emissions. CARB’s SB 253 first-year reporting deadline for Scope 1 & 2 is August 10, 2026; Scope 3 reporting begins in 2027. CSRD’s ESRS E1 and IFRS S2 push the same direction. The 2026 procurement playbook is straightforward: segment suppliers, engage the high-impact tier, and replace modeled estimates with verifiable supplier data.
Scope 3 in 2026 — by the numbers
- Scope 3 commonly accounts for ~75% of a corporate carbon footprint, with Category 1 (Purchased Goods & Services) typically the largest single bucket (CDP Supply Chain Report 2024, Strengthening the Chain; GHG Protocol Scope 3 Standard).
- CARB adopted initial SB 253/SB 261 regulations on Feb 26, 2026; the first-year Scope 1 & 2 reporting deadline is August 10, 2026 (CARB; Davis Polk client update, March 2026).
- Mandatory Scope 3 reporting under SB 253 begins in 2027; CARB is consulting on three implementation options — broad, sectoral phase-in, or category-by-category (CARB pre-rulemaking workshop, March 2026).
- CSRD / ESRS E1 requires phased Scope 3 disclosure with assurance, and is in force across the EU; IFRS S2 has been adopted or referenced as the baseline by 30+ jurisdictions (European Commission; IFRS Foundation adoption tracker).
What Scope 3 actually covers — the 15 categories in 60 seconds
Scope 3 captures the indirect emissions associated with everything in your value chain that you don’t own or directly control. Specifically, the GHG Protocol Scope 3 Standard breaks it into 15 categories — eight upstream and seven downstream.
Upstream covers the emissions embedded in things you buy: purchased goods and services (Category 1), capital goods (2), fuel and energy not in Scope 1 or 2 (3), transportation and distribution upstream of your operations (4), waste generated in operations (5), business travel (6), employee commuting (7), and upstream leased assets (8).
Downstream, by contrast, covers what happens after your product leaves your gate: downstream transport and distribution (9), processing of sold products (10), use of sold products (11), end-of-life treatment of sold products (12), downstream leased assets (13), franchises (14) and investments (15).
For most companies, the largest single category is Category 1 — purchased goods and services. Critically, that is where procurement holds the levers, and where regulators are looking hardest. The other categories matter too. However, if your Category 1 data is weak, the rest is window dressing.
Why 2026 is the year Scope 3 stops being optional
Three things shifted at once. First, CARB adopted initial regulations under California SB 253 on February 26, 2026. The agency set August 10, 2026 as the first-year reporting deadline for Scope 1 and Scope 2 emissions. Scope 3 follows in 2027 once a separate rulemaking concludes. Notably, CARB has signaled enforcement discretion for good-faith first-year compliance. However, the deadline itself stands — and the agency is consulting on which Scope 3 categories to require first.
In parallel, CSRD’s ESRS E1 climate standard moved into substantive reporting cycles across the EU. Once phased in, it will cover an estimated 50,000+ EU and non-EU companies (European Commission, Corporate Sustainability Reporting Directive impact assessment, 2021). Similarly, IFRS S2 — the global climate-disclosure baseline — has been adopted or referenced by 30+ jurisdictions per the IFRS Foundation’s adoption tracker. The federal SEC rule may be quiet. However, the disclosure landscape it left behind is louder than it was 18 months ago. Ultimately, companies that operate in California, sell to EU customers or report against IFRS now have overlapping obligations that all converge on Scope 3 data.
The disclosure landscape: CSRD · SB-253 · IFRS S2 · UK SDS
California SB 253 requires US-doing-business entities with global revenue above $1 billion to publicly disclose Scope 1 & 2 emissions starting August 10, 2026 (with assurance phasing in) and Scope 3 starting in 2027. SB 261 — a related climate-financial-risk disclosure for $500M+ revenue companies — had a January 1, 2026 reporting deadline. However, on November 18, 2025 the Ninth Circuit stayed enforcement pending appeal, and CARB confirmed in a December 1, 2025 Enforcement Advisory that it would not penalize non-filers while the case proceeds. The Ninth Circuit heard oral arguments on January 9, 2026; as of mid-2026, no ruling has issued and the law remains on the books.
CSRD / ESRS E1 applies on a phased basis to large EU companies and to non-EU companies with significant EU operations. Specifically, it requires Scope 1, 2 and material Scope 3 disclosure with double-materiality assessment, audit-grade evidence and limited assurance moving to reasonable assurance over time. Meanwhile, IFRS S2 sets a global baseline for climate-related disclosures used by jurisdictions that have adopted ISSB standards. Similarly, UK SDS is the UK’s parallel sustainability disclosure framework, currently aligned with IFRS S2. The exact obligations differ. However, the data requirements rhyme.
Where the data lives — supplier-specific vs. modeled emissions
Most companies start their Scope 3 inventory with spend-based modeling. Specifically, they multiply the dollars spent in a category by a national emissions intensity factor (e.g., kg CO2e per $ spent on steel). This produces a number quickly. However, it contains very little information about whether your suppliers are improving — every supplier in a category looks identical. As a result, spend-based modeling is fine for triage. By contrast, it is not fine for assurance.
The standards (and the auditors) push toward supplier-specific data for the largest, highest-emitting categories. Specifically, they want actual measured or activity-based emissions from the supplier — not a national average. Getting there means engaging suppliers directly, asking the right questions and verifying the answers. In practice, mature programs replace spend-based estimates for Category 1 hotspots first. Then they tackle Category 4 (upstream transport). Finally, they address the other categories that materially affect the disclosure.
Engaging suppliers on Scope 3? Download our free Scope 3 Supplier Engagement Checklist — a structured intake template for collecting verifiable, activity-based supplier emissions data across the categories that matter most.
A 2026 procurement playbook — segment, then deepen
1. Segment. Use spend, emissions intensity factor, and regulatory exposure to identify the top 15–20% of suppliers that drive ~80% of your Category 1 footprint. Don’t try to engage the whole base; you’ll lose the high-impact ones in the noise.
2. Engage with a structured intake. Send the priority suppliers a short, structured questionnaire — ideally as a supplier self-assessment, not a free-form survey — that captures actual emissions data, calculation methodology, and the underlying evidence. ESG assessment workflows built for this purpose are how the leading programs scale beyond the first 50 suppliers.
3. Verify and remediate. Score the responses against an assurance-grade rubric, flag gaps, and route remediation to named owners with due dates. For the highest-exposure categories, conduct a Tier 2 supplier audit to confirm what the questionnaire claimed.
4. Connect to multi-tier visibility. Sub-tier emissions (smelters, refiners, growers) drive the actual footprint of many materials. Engagement at Tier 1 only catches part of the picture — the same multi-tier visibility work that UFLPA and CSDDD demand also serves Scope 3. Our supplier risk management guide covers the broader program structure that supports the connection.
From spreadsheets to verifiable supplier evidence
The Scope 3 number in a CSRD or SB-253 disclosure is going to be tested — by auditors, by NGOs, by short sellers, eventually by enforcement actions. Spreadsheets full of supplier-emailed PDFs are not a defensible audit trail. The infrastructure that scales is the same shape as a supplier audit program: a structured intake, a versioned record per supplier, evidence stored against the response, owners on every gap, and a status that doesn’t move to “complete” until the evidence has been verified. The vocabulary of verified closure applies as cleanly to Scope 3 evidence as it does to a CAPA. The thing being verified is different. The discipline is the same.
Key Takeaways:
- Scope 3 spans 15 categories; for most companies it is roughly 75% of the corporate footprint, with Category 1 typically the largest single bucket.
- CARB SB 253 first-year reporting (Scope 1 & 2) is due Aug 10, 2026; Scope 3 reporting begins in 2027 once CARB completes rulemaking.
- CSRD/ESRS E1 and IFRS S2 push the same direction globally; CSDDD adds upstream chain-of-activities obligations.
- Spend-based estimates are useful for triage; assurance-grade reporting requires supplier-specific, activity-based data for hotspots.
- The 2026 procurement playbook: segment, engage with structured intake, verify and remediate, connect to multi-tier visibility.
You might also be interested in
What Are Scope 1, 2 and 3 Emissions?
A plain-English primer on the three GHG-Protocol scopes — definitions, examples and reporting basics.
UFLPA 2026: Lithium, Steel & Aluminum
How 2026 UFLPA enforcement is reshaping multi-tier visibility and supplier evidence requirements.
ESG Assessments Solutions
How Certainty captures supplier-specific, assurance-grade ESG and emissions data at scale.
Frequently Asked Questions (FAQs)
What is Scope 3?
Scope 3 emissions are the indirect emissions across a company’s value chain — everything it does not own or directly control. They cover both upstream activities (what’s embedded in things you buy) and downstream activities (what happens after your product leaves the gate), grouped into 15 categories under the GHG Protocol Scope 3 Standard.
What are the 15 Scope 3 categories?
Eight upstream categories — purchased goods & services, capital goods, fuel & energy (non-Scope 1/2), upstream transport & distribution, waste in operations, business travel, employee commuting, and upstream leased assets — and seven downstream — downstream transport & distribution, processing of sold products, use of sold products, end-of-life treatment of sold products, downstream leased assets, franchises, and investments.
Do I need to report Scope 3?
Probably, and increasingly so. California SB 253 requires Scope 3 reporting from billion-dollar-revenue entities doing business in California starting in 2027. CSRD/ESRS E1 requires material Scope 3 disclosure across in-scope EU and non-EU companies. IFRS S2 — adopted or referenced in 30+ jurisdictions — requires Scope 3 with relief mechanisms. If you operate at scale, you are within the reach of at least one of these regimes.
How do I collect supplier emissions data?
Start with the priority suppliers (the top 15–20% by emissions impact in Category 1). Send a structured questionnaire that captures activity-based emissions data plus methodology and evidence. Score responses against an assurance-grade rubric, flag gaps for remediation, and reserve direct supplier audits for the highest-exposure cases.
What’s the difference between Scope 1, 2 and 3?
Scope 1 covers direct emissions from sources owned or controlled by the company (combustion, fleet, fugitives). Scope 2 covers indirect emissions from purchased electricity, steam, heat and cooling. Scope 3 covers all other indirect emissions in the value chain — upstream and downstream — typically the majority of the total footprint.
Turn supplier disclosure into a defensible record
See how Certainty captures assurance-grade supplier emissions data — at scale, across tiers.
