# Answering ESG Procurement Questionnaires: A UK SMB Guide > How UK SMBs should answer ESG sections in procurement questionnaires — PPN 06/21, Social Value Act, modern slavery, EcoVadis and CDP requests. Author: Workplace Giving Editorial Published: 2026-05-10 Pillar: csr-esg-for-smbs Canonical: https://workplacegiving.co.uk/csr-esg-for-smbs/esg-procurement-questionnaires/ --- By 2026, almost every meaningful tender — public sector, large corporate, or even mid-market — comes with an ESG section. Sometimes it's two questions, sometimes it's a 40-page workbook with weighted scoring. For a UK SMB that's never been through this before, the volume can be paralysing. Worse, the wrong answers can be a deal-breaker: a missing modern slavery statement or no Carbon Reduction Plan against a contract that requires one can disqualify a bid before anyone reads the price. This guide walks through what's actually mandatory for a sub-250-staff UK business, what's "nice to have" but increasingly expected, and the practical answers that score points without exposing you to greenwashing claims. It focuses on the questionnaires you'll actually encounter: PPN 06/21 Carbon Reduction Plans, Social Value Act 2012 evaluation, modern slavery statements under the Modern Slavery Act 2015, EcoVadis, and CDP. ## What's actually mandatory by law Strip out the procurement custom and what's left as a legal duty for an SMB is much shorter than you might think. **Health and safety policy.** The [Health and Safety at Work etc. Act 1974](https://www.legislation.gov.uk/ukpga/1974/37/contents) requires a written policy if you have five or more employees. This is the single most common disqualifying gap in SMB tenders. Get the [HSE template](https://www.hse.gov.uk/simple-health-safety/policy/) and adapt it. **Employer's liability insurance.** Required under the [Employers' Liability (Compulsory Insurance) Act 1969](https://www.legislation.gov.uk/ukpga/1969/57/contents) for almost all employers. Cover of at least £5m is the legal minimum; £10m is the de facto standard for procurement. The certificate gets requested almost universally. **Equality Act 2010 compliance.** Not a documentation requirement on its own, but procurement questionnaires routinely ask for a written Equality, Diversity and Inclusion policy. Have one. **Modern Slavery Act 2015, section 54.** Only mandatory if your group turnover is £36m or more. Below that, voluntary. See below. **Streamlined Energy and Carbon Reporting (SECR).** Only mandatory for large companies (typically 250+ employees plus financial thresholds). Most SMBs sit below this — but the underlying carbon data is increasingly expected anyway. **Gender Pay Gap reporting.** Only mandatory at 250+ employees. Below that, voluntary. That's the legal floor. Everything else in a typical ESG questionnaire is procurement preference, not statute. ## PPN 06/21: the Carbon Reduction Plan Procurement Policy Note 06/21 has become the de facto standard format for climate disclosure in UK procurement. Issued by the Cabinet Office and Crown Commercial Service, it applies to central government contracts above £5m and is increasingly copied by local authorities, NHS trusts and corporate buyers below that threshold. The [Cabinet Office published template](https://www.gov.uk/government/publications/procurement-policy-note-0621-taking-account-of-carbon-reduction-plans-in-the-procurement-of-major-government-contracts) is short. It requires: - **A commitment to net zero by 2050.** This is the stated target, included in the template wording. - **A baseline year footprint** in tonnes CO2e, broken into scopes 1, 2 and a defined subset of scope 3 (business travel, employee commuting, waste, water, upstream transport and distribution, downstream transport and distribution). - **Current year emissions** in the same format. - **A short narrative** describing existing and proposed reduction measures. For an SMB without prior carbon measurement, the work involves: 1. Picking a baseline year (typically the most recent financial year for which you have data). 2. Pulling energy consumption from your supplier bills (kWh of gas, electricity, fleet fuel where applicable). 3. Applying the [UK government's published GHG conversion factors](https://www.gov.uk/government/collections/government-conversion-factors-for-company-reporting) to convert kWh to tCO2e. 4. Repeating for the limited scope 3 categories using the same conversion factor set. Most SMBs come out with a baseline somewhere between 5 and 50 tCO2e depending on office size, fleet and travel patterns. The number itself isn't scored on absolute level — procurement evaluators score on completeness of the plan, plausibility of measurement, and dated reduction commitments. The plan must be published on the bidder's website, signed by a director, and updated annually. Crown Commercial Service explicitly notes that a CRP older than 12 months is non-compliant. ## The Social Value Act 2012 and the Social Value Model The [Public Services (Social Value) Act 2012](https://www.legislation.gov.uk/ukpga/2012/3/contents/enacted) requires public sector buyers commissioning services above the procurement thresholds to consider how their procurement might improve economic, social and environmental wellbeing. In 2020, the [Cabinet Office published the Social Value Model](https://www.gov.uk/government/publications/procurement-policy-note-0620-taking-account-of-social-value-in-the-award-of-central-government-contracts) (in PPN 06/20) standardising how social value is scored in central government tenders. Minimum weighting in central government contracts is 10% of total tender score. The model breaks social value into five themes: 1. **COVID-19 recovery** (gradually being retired in newer tenders but still appearing). 2. **Tackling economic inequality.** Local employment, training, supply chain diversification. 3. **Fighting climate change.** Matches the Carbon Reduction Plan but with additional questions about supply chain and innovation. 4. **Equal opportunity.** Disability employment, skills development, addressing the gender pay gap. 5. **Wellbeing.** Community health, mental health programmes, integration of marginalised groups. For an SMB, the practical answers come from your existing CSR activity. [Payroll giving](/payroll-giving/how-payroll-giving-works/) and [matched giving](/matched-giving/what-is-matched-giving/) sit under wellbeing and equal opportunity. [Paid volunteer leave](/employee-volunteering/paid-volunteer-leave-uk/) and [charity-of-the-year partnerships](/charity-of-the-year/) cover community engagement. Local apprenticeships and trainee recruitment evidence the economic inequality theme. Your environmental policy and Carbon Reduction Plan cover climate. The single biggest mistake SMBs make in social value responses is generic claims without specific commitments. The Social Value Model wants measurable, time-bound deliverables tied to the contract — *"we will provide 40 hours of mentoring to local schools during the contract"* scores better than *"we are committed to supporting young people"*. ## Modern slavery statements [Section 54 of the Modern Slavery Act 2015](https://www.legislation.gov.uk/ukpga/2015/30/section/54) requires commercial organisations with global turnover of £36m or more to publish an annual slavery and human trafficking statement. The statement must: - Cover the steps taken to ensure slavery and human trafficking are not in the supply chain - Be approved by the board (or members for an LLP) - Be signed by a director - Be published prominently on the organisation's UK website The [Home Office statutory guidance](https://www.gov.uk/government/publications/transparency-in-supply-chains-a-practical-guide) gives the suggested content areas: organisational structure, policies, due diligence, risk assessment, KPIs, training. The government also runs the [Modern Slavery Statement Registry](https://modern-slavery-statement-registry.service.gov.uk/) where statements should be lodged — it's free and takes about an hour to register and submit. For SMBs below the £36m threshold, you have no legal duty. But many procurement questionnaires ask the question anyway, and a voluntary statement is the cleanest answer. The voluntary version doesn't require board approval and doesn't have statutory consequences for missing detail, but it does need to be honest. A short voluntary statement covering supplier due diligence and your written policy is usually enough. A common procurement question reads: *"Does the bidder have a modern slavery statement published in accordance with section 54 of the Modern Slavery Act 2015?"* For a £5m turnover SMB the correct answer is: *"Not legally required (turnover below £36m threshold). We have published a voluntary statement on the Modern Slavery Statement Registry."* ## EcoVadis assessments EcoVadis is a private company that runs a paid ESG assessment used by large corporate buyers — automotive, retail, food, professional services and increasingly tech. If a customer has asked you to register, the request comes from their procurement team and is usually mandatory for continued supplier status. The assessment scores four themes (environment, labour and human rights, ethics, sustainable procurement) on a 0–100 scale. The thresholds are: - **Bronze:** top 50% - **Silver:** top 25% - **Gold:** top 5% - **Platinum:** top 1% EcoVadis is document-heavy. They will request your environmental policy, EDI policy, anti-bribery policy, health and safety policy, supplier code of conduct, carbon data and audit evidence. For an SMB the practical path is: 1. Complete the assessment using your existing documents. Don't fabricate. 2. Take the initial score (it'll usually be in the 30s or 40s for a first attempt). 3. Use the EcoVadis feedback to identify the top three or four gaps. 4. Address those gaps and re-submit after 12 months. Fees scale with size and are charged annually. The relationship is between you and EcoVadis, not your customer; your customer just sees the score. Don't pay for EcoVadis speculatively — wait until a specific customer is asking. ## CDP (Carbon Disclosure Project) CDP is the de facto climate disclosure platform for large corporates and increasingly their suppliers. The [CDP Supply Chain](https://www.cdp.net/en/supply-chain) programme has been adopted by many FTSE 100 buyers. If you're asked, the request comes through your customer's procurement team. For an SMB, the CDP Supply Chain questionnaire is shorter than the full corporate version but still demands: - A full GHG Protocol-aligned carbon footprint (scopes 1, 2 and material scope 3) - Climate-related risk assessment - Reduction targets, ideally science-aligned - Governance arrangements for climate The level of detail is materially higher than PPN 06/21 because CDP is designed to feed into investor disclosures (TCFD and the IFRS S2 standards). For most SMBs this is a step-change in maturity. If a customer is asking for CDP, factor in three to six months of preparation for a first response. ## The "must-have" documents folder The single most productive thing an SMB can do for procurement readiness is to maintain a clearly versioned folder of standard documents. The list: - Written Health and Safety policy (HSE template adapted) - Employer's liability insurance certificate (current) - Public liability insurance certificate (current) - Professional indemnity insurance certificate (if relevant) - Equality, Diversity and Inclusion policy - Anti-bribery and anti-corruption policy (Bribery Act 2010 compliant) - Anti-money laundering policy (for regulated sectors) - GDPR / data protection policy - Information security policy (Cyber Essentials certification if you have it) - Modern slavery statement (voluntary or statutory) - Carbon Reduction Plan in PPN 06/21 format - [One-page CSR statement](/csr-esg-for-smbs/csr-statement-template-smb/) - Environmental policy (often separate from the CRP) - Whistleblowing policy - Quality management approach (ISO 9001 if certified, equivalent if not) Version-control them with dates in the filename and review on a fixed annual cadence. A surprising number of tender losses come down to attaching a 2023 policy in a 2026 bid. ## What's "nice to have" but worth getting Once the floor is in place, a few specific accreditations move the dial in procurement scoring without disproportionate effort or cost: **[Cyber Essentials](https://www.ncsc.gov.uk/cyberessentials/overview).** Mandatory for any central government contract involving personal data. Self-assessed (Cyber Essentials Basic) or audited (Cyber Essentials Plus). The basic version is cheap and turnaround is fast. **[Living Wage Foundation accreditation](https://www.livingwage.org.uk/become-accredited).** Fee scales with size and is modest for SMBs. Strong signal in social value scoring. **[Good Business Charter](https://www.goodbusinesscharter.com/).** Ten components covering tax, environment, supplier payment, diversity and the real Living Wage. Annual fee scales with employee count and starts low for the smallest businesses. Increasingly recognised in procurement scoring. **ISO 14001.** Environmental management system standard. Audited and renewed annually. More substantial commitment than the others; worth pursuing if environmental scoring is heavy in your sector. Compare it carefully to a [B Corp certification](/csr-esg-for-smbs/b-corp-for-smbs/) before committing — they serve different purposes. **B Corp certification.** Heavyweight, multi-month process. Strong signal but not appropriate for every business. See our [B Corp guide](/csr-esg-for-smbs/b-corp-for-smbs/) for the trade-offs. ## How to actually structure your answers Three patterns we see win consistently in evaluation feedback: **Specific, dated, evidenced.** *"We are a real Living Wage Foundation accredited employer (accreditation number XXXX, since 2024). All staff receive the real Living Wage and the rate is reviewed within three months of each November announcement."* **Honest about gaps.** *"We have measured scopes 1 and 2 emissions under the GHG Protocol since 2024. Scope 3 measurement is on our 2026 roadmap, currently limited to business travel."* **Quantified where possible.** *"In the 2025 financial year, staff contributed £8,400 via our payroll giving scheme, supplemented by £4,200 in employer matching, supporting 14 UK registered charities."* Three patterns we see lose: **Aspirational without commitments.** *"We are committed to net zero and a sustainable future."* No date, no measurement, no plan. **Boilerplate.** Cut and pasted from a template with the company name not updated. Procurement evaluators read enough of these to spot them instantly. **Overclaim followed by retraction.** *"We are carbon neutral (offsets purchased)"* without disclosing the offset standard used. The CMA's Green Claims Code makes this a regulatory risk. ## When you should walk away from a tender It's worth saying out loud: not every tender is winnable on ESG grounds. If a contract requires: - A Carbon Reduction Plan in PPN 06/21 format and you don't have one - ISO 14001 certification and you don't have it - An EcoVadis Gold score and yours is Bronze - B Corp status and you're not certified ...and the deadline is two weeks, you are not going to retrofit those credentials. Be honest with sales about which tenders are realistically open. The cost of preparing a failing bid is meaningful, and a pattern of failed bids signals the wrong thing to your team. The right move is to track which credentials are increasingly demanded by your target customers, set a 12–18 month roadmap to earn them, and decline non-winnable tenders in the meantime. ## Sources - [Procurement Policy Note 06/21: Carbon Reduction Plans](https://www.gov.uk/government/publications/procurement-policy-note-0621-taking-account-of-carbon-reduction-plans-in-the-procurement-of-major-government-contracts) - [Procurement Policy Note 06/20: Social Value Model](https://www.gov.uk/government/publications/procurement-policy-note-0620-taking-account-of-social-value-in-the-award-of-central-government-contracts) - [Public Services (Social Value) Act 2012 — legislation.gov.uk](https://www.legislation.gov.uk/ukpga/2012/3/contents/enacted) - [Modern Slavery Act 2015, section 54 — legislation.gov.uk](https://www.legislation.gov.uk/ukpga/2015/30/section/54) - [Home Office: Transparency in Supply Chains — A Practical Guide](https://www.gov.uk/government/publications/transparency-in-supply-chains-a-practical-guide) - [Modern Slavery Statement Registry — gov.uk](https://modern-slavery-statement-registry.service.gov.uk/) - [Health and Safety at Work etc. Act 1974](https://www.legislation.gov.uk/ukpga/1974/37/contents) - [Employers' Liability (Compulsory Insurance) Act 1969](https://www.legislation.gov.uk/ukpga/1969/57/contents) - [HSE: Writing your health and safety policy](https://www.hse.gov.uk/simple-health-safety/policy/) - [UK government GHG conversion factors for company reporting](https://www.gov.uk/government/collections/government-conversion-factors-for-company-reporting) - [Competition and Markets Authority — Green Claims Code](https://www.gov.uk/government/publications/green-claims-code-making-environmental-claims) - [National Cyber Security Centre — Cyber Essentials](https://www.ncsc.gov.uk/cyberessentials/overview) - [Living Wage Foundation — become accredited](https://www.livingwage.org.uk/become-accredited) ## The short version Most ESG procurement questions for a sub-250-staff UK SMB can be answered with a handful of documents kept in a clearly versioned folder: a Carbon Reduction Plan, a modern slavery statement (voluntary if you're under £36m turnover), an EDI policy, an anti-bribery policy, and current insurance certificates. The legal floor is short; the procurement preference layer is longer but predictable. Build the folder once, maintain it annually, and the third tender takes a fraction of the time the first one did.