Answering ESG Procurement Questionnaires: A UK SMB Guide

By 2026, almost every meaningful tender — public sector, large corporate, or even mid-market — comes with an ESG section. Sometimes it’s two questions, sometimes it’s a 40-page workbook with weighted scoring. For a UK SMB that’s never been through this before, the volume can be paralysing. Worse, the wrong answers can be a deal-breaker: a missing modern slavery statement or no Carbon Reduction Plan against a contract that requires one can disqualify a bid before anyone reads the price.

This guide walks through what’s actually mandatory for a sub-250-staff UK business, what’s “nice to have” but increasingly expected, and the practical answers that score points without exposing you to greenwashing claims. It focuses on the questionnaires you’ll actually encounter: PPN 06/21 Carbon Reduction Plans, Social Value Act 2012 evaluation, modern slavery statements under the Modern Slavery Act 2015, EcoVadis, and CDP.

What’s actually mandatory by law

Strip out the procurement custom and what’s left as a legal duty for an SMB is much shorter than you might think.

Health and safety policy. The Health and Safety at Work etc. Act 1974 requires a written policy if you have five or more employees. This is the single most common disqualifying gap in SMB tenders. Get the HSE template and adapt it.

Employer’s liability insurance. Required under the Employers’ Liability (Compulsory Insurance) Act 1969 for almost all employers. Cover of at least £5m is the legal minimum; £10m is the de facto standard for procurement. The certificate gets requested almost universally.

Equality Act 2010 compliance. Not a documentation requirement on its own, but procurement questionnaires routinely ask for a written Equality, Diversity and Inclusion policy. Have one.

Modern Slavery Act 2015, section 54. Only mandatory if your group turnover is £36m or more. Below that, voluntary. See below.

Streamlined Energy and Carbon Reporting (SECR). Only mandatory for large companies (typically 250+ employees plus financial thresholds). Most SMBs sit below this — but the underlying carbon data is increasingly expected anyway.

Gender Pay Gap reporting. Only mandatory at 250+ employees. Below that, voluntary.

That’s the legal floor. Everything else in a typical ESG questionnaire is procurement preference, not statute.

PPN 06/21: the Carbon Reduction Plan

Procurement Policy Note 06/21 has become the de facto standard format for climate disclosure in UK procurement. Issued by the Cabinet Office and Crown Commercial Service, it applies to central government contracts above £5m and is increasingly copied by local authorities, NHS trusts and corporate buyers below that threshold.

The Cabinet Office published template is short. It requires:

• A commitment to net zero by 2050. This is the stated target, included in the template wording.
• A baseline year footprint in tonnes CO2e, broken into scopes 1, 2 and a defined subset of scope 3 (business travel, employee commuting, waste, water, upstream transport and distribution, downstream transport and distribution).
• Current year emissions in the same format.
• A short narrative describing existing and proposed reduction measures.

For an SMB without prior carbon measurement, the work involves:

1. Picking a baseline year (typically the most recent financial year for which you have data).
2. Pulling energy consumption from your supplier bills (kWh of gas, electricity, fleet fuel where applicable).
3. Applying the UK government’s published GHG conversion factors to convert kWh to tCO2e.
4. Repeating for the limited scope 3 categories using the same conversion factor set.

Most SMBs come out with a baseline somewhere between 5 and 50 tCO2e depending on office size, fleet and travel patterns. The number itself isn’t scored on absolute level — procurement evaluators score on completeness of the plan, plausibility of measurement, and dated reduction commitments.

The plan must be published on the bidder’s website, signed by a director, and updated annually. Crown Commercial Service explicitly notes that a CRP older than 12 months is non-compliant.

The Social Value Act 2012 and the Social Value Model

The Public Services (Social Value) Act 2012 requires public sector buyers commissioning services above the procurement thresholds to consider how their procurement might improve economic, social and environmental wellbeing. In 2020, the Cabinet Office published the Social Value Model (in PPN 06/20) standardising how social value is scored in central government tenders. Minimum weighting in central government contracts is 10% of total tender score.

The model breaks social value into five themes:

1. COVID-19 recovery (gradually being retired in newer tenders but still appearing).
2. Tackling economic inequality. Local employment, training, supply chain diversification.
3. Fighting climate change. Matches the Carbon Reduction Plan but with additional questions about supply chain and innovation.
4. Equal opportunity. Disability employment, skills development, addressing the gender pay gap.
5. Wellbeing. Community health, mental health programmes, integration of marginalised groups.

For an SMB, the practical answers come from your existing CSR activity. Payroll giving and matched giving sit under wellbeing and equal opportunity. Paid volunteer leave and charity-of-the-year partnerships cover community engagement. Local apprenticeships and trainee recruitment evidence the economic inequality theme. Your environmental policy and Carbon Reduction Plan cover climate.

The single biggest mistake SMBs make in social value responses is generic claims without specific commitments. The Social Value Model wants measurable, time-bound deliverables tied to the contract — “we will provide 40 hours of mentoring to local schools during the contract” scores better than “we are committed to supporting young people”.

Modern slavery statements

Section 54 of the Modern Slavery Act 2015 requires commercial organisations with global turnover of £36m or more to publish an annual slavery and human trafficking statement. The statement must:

• Cover the steps taken to ensure slavery and human trafficking are not in the supply chain
• Be approved by the board (or members for an LLP)
• Be signed by a director
• Be published prominently on the organisation’s UK website

The Home Office statutory guidance gives the suggested content areas: organisational structure, policies, due diligence, risk assessment, KPIs, training. The government also runs the Modern Slavery Statement Registry where statements should be lodged — it’s free and takes about an hour to register and submit.

For SMBs below the £36m threshold, you have no legal duty. But many procurement questionnaires ask the question anyway, and a voluntary statement is the cleanest answer. The voluntary version doesn’t require board approval and doesn’t have statutory consequences for missing detail, but it does need to be honest. A short voluntary statement covering supplier due diligence and your written policy is usually enough.

A common procurement question reads: “Does the bidder have a modern slavery statement published in accordance with section 54 of the Modern Slavery Act 2015?” For a £5m turnover SMB the correct answer is: “Not legally required (turnover below £36m threshold). We have published a voluntary statement on the Modern Slavery Statement Registry.”

EcoVadis assessments

EcoVadis is a private company that runs a paid ESG assessment used by large corporate buyers — automotive, retail, food, professional services and increasingly tech. If a customer has asked you to register, the request comes from their procurement team and is usually mandatory for continued supplier status.

The assessment scores four themes (environment, labour and human rights, ethics, sustainable procurement) on a 0–100 scale. The thresholds are:

• Bronze: top 50%
• Silver: top 25%
• Gold: top 5%
• Platinum: top 1%

EcoVadis is document-heavy. They will request your environmental policy, EDI policy, anti-bribery policy, health and safety policy, supplier code of conduct, carbon data and audit evidence. For an SMB the practical path is:

1. Complete the assessment using your existing documents. Don’t fabricate.
2. Take the initial score (it’ll usually be in the 30s or 40s for a first attempt).
3. Use the EcoVadis feedback to identify the top three or four gaps.
4. Address those gaps and re-submit after 12 months.

Fees scale with size and are charged annually. The relationship is between you and EcoVadis, not your customer; your customer just sees the score. Don’t pay for EcoVadis speculatively — wait until a specific customer is asking.

CDP (Carbon Disclosure Project)

CDP is the de facto climate disclosure platform for large corporates and increasingly their suppliers. The CDP Supply Chain programme has been adopted by many FTSE 100 buyers. If you’re asked, the request comes through your customer’s procurement team.

For an SMB, the CDP Supply Chain questionnaire is shorter than the full corporate version but still demands:

• A full GHG Protocol-aligned carbon footprint (scopes 1, 2 and material scope 3)
• Climate-related risk assessment
• Reduction targets, ideally science-aligned
• Governance arrangements for climate

The level of detail is materially higher than PPN 06/21 because CDP is designed to feed into investor disclosures (TCFD and the IFRS S2 standards). For most SMBs this is a step-change in maturity. If a customer is asking for CDP, factor in three to six months of preparation for a first response.

The “must-have” documents folder

The single most productive thing an SMB can do for procurement readiness is to maintain a clearly versioned folder of standard documents. The list:

• Written Health and Safety policy (HSE template adapted)
• Employer’s liability insurance certificate (current)
• Public liability insurance certificate (current)
• Professional indemnity insurance certificate (if relevant)
• Equality, Diversity and Inclusion policy
• Anti-bribery and anti-corruption policy (Bribery Act 2010 compliant)
• Anti-money laundering policy (for regulated sectors)
• GDPR / data protection policy
• Information security policy (Cyber Essentials certification if you have it)
• Modern slavery statement (voluntary or statutory)
• Carbon Reduction Plan in PPN 06/21 format
• One-page CSR statement
• Environmental policy (often separate from the CRP)
• Whistleblowing policy
• Quality management approach (ISO 9001 if certified, equivalent if not)

Version-control them with dates in the filename and review on a fixed annual cadence. A surprising number of tender losses come down to attaching a 2023 policy in a 2026 bid.

What’s “nice to have” but worth getting

Once the floor is in place, a few specific accreditations move the dial in procurement scoring without disproportionate effort or cost:

Cyber Essentials. Mandatory for any central government contract involving personal data. Self-assessed (Cyber Essentials Basic) or audited (Cyber Essentials Plus). The basic version is cheap and turnaround is fast.

Living Wage Foundation accreditation. Fee scales with size and is modest for SMBs. Strong signal in social value scoring.

Good Business Charter. Ten components covering tax, environment, supplier payment, diversity and the real Living Wage. Annual fee scales with employee count and starts low for the smallest businesses. Increasingly recognised in procurement scoring.

ISO 14001. Environmental management system standard. Audited and renewed annually. More substantial commitment than the others; worth pursuing if environmental scoring is heavy in your sector. Compare it carefully to a B Corp certification before committing — they serve different purposes.

B Corp certification. Heavyweight, multi-month process. Strong signal but not appropriate for every business. See our B Corp guide for the trade-offs.

How to actually structure your answers

Three patterns we see win consistently in evaluation feedback:

Specific, dated, evidenced. “We are a real Living Wage Foundation accredited employer (accreditation number XXXX, since 2024). All staff receive the real Living Wage and the rate is reviewed within three months of each November announcement.”

Honest about gaps. “We have measured scopes 1 and 2 emissions under the GHG Protocol since 2024. Scope 3 measurement is on our 2026 roadmap, currently limited to business travel.”

Quantified where possible. “In the 2025 financial year, staff contributed £8,400 via our payroll giving scheme, supplemented by £4,200 in employer matching, supporting 14 UK registered charities.”

Three patterns we see lose:

Aspirational without commitments. “We are committed to net zero and a sustainable future.” No date, no measurement, no plan.

Boilerplate. Cut and pasted from a template with the company name not updated. Procurement evaluators read enough of these to spot them instantly.

Overclaim followed by retraction. “We are carbon neutral (offsets purchased)” without disclosing the offset standard used. The CMA’s Green Claims Code makes this a regulatory risk.

When you should walk away from a tender

It’s worth saying out loud: not every tender is winnable on ESG grounds. If a contract requires:

• A Carbon Reduction Plan in PPN 06/21 format and you don’t have one
• ISO 14001 certification and you don’t have it
• An EcoVadis Gold score and yours is Bronze
• B Corp status and you’re not certified

…and the deadline is two weeks, you are not going to retrofit those credentials. Be honest with sales about which tenders are realistically open. The cost of preparing a failing bid is meaningful, and a pattern of failed bids signals the wrong thing to your team.

The right move is to track which credentials are increasingly demanded by your target customers, set a 12–18 month roadmap to earn them, and decline non-winnable tenders in the meantime.

Sources

• Procurement Policy Note 06/21: Carbon Reduction Plans
• Procurement Policy Note 06/20: Social Value Model
• Public Services (Social Value) Act 2012 — legislation.gov.uk
• Modern Slavery Act 2015, section 54 — legislation.gov.uk
• Home Office: Transparency in Supply Chains — A Practical Guide
• Modern Slavery Statement Registry — gov.uk
• Health and Safety at Work etc. Act 1974
• Employers’ Liability (Compulsory Insurance) Act 1969
• HSE: Writing your health and safety policy
• UK government GHG conversion factors for company reporting
• Competition and Markets Authority — Green Claims Code
• National Cyber Security Centre — Cyber Essentials
• Living Wage Foundation — become accredited

The short version

Most ESG procurement questions for a sub-250-staff UK SMB can be answered with a handful of documents kept in a clearly versioned folder: a Carbon Reduction Plan, a modern slavery statement (voluntary if you’re under £36m turnover), an EDI policy, an anti-bribery policy, and current insurance certificates. The legal floor is short; the procurement preference layer is longer but predictable. Build the folder once, maintain it annually, and the third tender takes a fraction of the time the first one did.

---

FAQs — JSON-LD enabled

Questions HR keeps asking.

Does a 30-person company really need a Carbon Reduction Plan?+

Only if you're bidding for central government contracts over £5m, where PPN 06/21 makes it mandatory. Below that threshold it's increasingly requested but not required. Many SMBs publish one voluntarily because it removes a recurring tender hurdle and is now expected by larger corporate customers. The Cabinet Office's published template is short and free, and the measurement scope is limited to scopes 1, 2 and a defined subset of scope 3.

What's the modern slavery turnover threshold and how do I know if I'm caught?+

Section 54 of the Modern Slavery Act 2015 applies to commercial organisations with global turnover of £36m or more. Below that you have no legal duty to publish a statement. Many SMBs publish a voluntary statement on the Modern Slavery Statement Registry anyway — it's free, removes a procurement question, and signals due diligence. Above the threshold, the statement must be approved by the board and signed by a director.

Is the Social Value Act 2012 relevant to private sector tenders?+

Strictly it applies to public sector procurement of services above the procurement thresholds. But the Social Value Model published in PPN 06/20 has been adopted by many large private sector buyers as a procurement scoring template. Expect questions about local employment, supply chain diversity, environmental impact and community benefit even on commercial tenders.

Do I need EcoVadis or CDP if I'm not a listed company?+

Not by law, but increasingly required by customers. EcoVadis is a paid assessment requested by procurement teams across automotive, retail, food and professional services. CDP is the standard climate disclosure platform — typically requested by very large customers and investors. For an SMB the cost-benefit depends entirely on whether a specific customer is requiring it; don't pay for either speculatively.

What's a 'deal-breaker' clause that will get me disqualified if missing?+

Three: no written health and safety policy (legally required at 5+ employees under the Health and Safety at Work etc. Act 1974), no employer's liability insurance certificate, and no evidence of right-to-work checks. Modern slavery and Carbon Reduction Plan failures are usually scoring penalties, not disqualifications, unless explicitly flagged as pass/fail in the ITT.

How do I answer scope 3 emissions questions if I haven't measured them?+

Honestly. Say you have measured scopes 1 and 2 under the GHG Protocol, that scope 3 measurement is on your roadmap (give a year), and where you currently have visibility — for example, business travel under PPN 06/21's defined scope 3 categories. Procurement evaluators give more points to a clear, modest answer than to vague claims of having measured 'all emissions'.

Can I reuse the same answers across multiple questionnaires?+

Yes, and you should. Build a master document of standard answers keyed to common questions (CRP, modern slavery, EDI policy, EAP details, payroll giving figures), version-controlled and reviewed annually. Most tender response time goes on locating documents, not writing answers. The first questionnaire takes days; the tenth should take a few hours.