Licences and compliance

ESG and BRSR Basics for Growing Companies

ESG and BRSR explained for Indian SMEs — what BRSR requires, why supply-chain ESG reaches small companies, and a practical starter framework.

Licences and compliance · 4 min read · Updated 2026-02-20

ESG used to be listed-company vocabulary; now it arrives at SME doorsteps wearing a customer's logo — a vendor questionnaire from your largest buyer asking about emissions, wages, waste and governance. India's regulatory anchor is BRSR (Business Responsibility and Sustainability Reporting), mandatory for the top listed companies — and its supply-chain tentacles (BRSR Core assurance, value-chain disclosures) are how it reaches unlisted suppliers. Here is what the framework says, why it will find you, and the proportionate way to get ahead of it.

BRSR in one section

  • Applies to the top 1,000 listed entities (by market cap) as part of annual reports; BRSR Core — a subset of assured KPIs — phases in for the largest, with 'reasonable assurance' style verification
  • Structure: general disclosures + management processes + principle-wise performance against the nine NGRBC principles (ethics, safety, environment, employees, consumers, communities...)
  • The KPIs that matter: energy and emissions intensity, water, waste, employee well-being (wages, safety, diversity), grievance data, and — the SME-relevant part — value-chain partner disclosures
  • Listed buyers must increasingly report on their supply chain — which converts into ESG questionnaires, audits and codes of conduct for their vendors

Why an unlisted SME should care now

Four converging pressures: customer mandates — large buyers' vendor onboarding now scores ESG (supplier codes, audit rights, data requests), and contracts follow scores; export markets — EU CBAM (carbon border levies on steel, aluminium, cement and expanding), German supply-chain law and buyer-side due-diligence rules make ESG data a market-access document; capital — banks' priority/green lending and PE diligence increasingly price ESG posture; and talent and licences — pollution-board digitisation and labour-portal integration mean the 'E' and 'S' data already exists with regulators; coherence between what you file and what you claim is now checkable. ESG for SMEs is less about virtue than about staying sellable.

The proportionate starter framework

  • Governance (one quarter): codify what exists — a one-page code of conduct, POSH committee where applicable, whistle-blower channel, board/owner review of compliance calendar
  • Environment (measure before managing): 12 months of electricity, fuel and water data from bills; waste streams mapped with disposal proofs (EPR, hazardous manifests); one efficiency project (solar, LED, motor upgrades) with before/after numbers
  • Social: wage and statutory compliance evidence (PF/ESI challans as ESG documents), safety incident register, training hours logged, contractor-labour compliance
  • Documentation: a 10–15 page ESG profile answering the standard questionnaire sections — written once, updated annually
The data you already have

An SME's first ESG report is 80% assembled from existing files: electricity bills (emissions), PF/ESI challans (social), pollution consents and manifests (environment), HR registers (diversity, safety). The work is collation and honesty, not consultants and drama.

Answering buyer questionnaires well

When the customer's ESG form arrives: answer factually with evidence references (auditors follow), never inflate (a false 'zero incidents' found in one audit poisons every answer), use 'in progress with timeline' honestly for gaps, and keep one master answer-bank so every buyer's variant form takes hours, not weeks. Where scores gate contracts, ask for the rubric — improvements can then target actual weighting (safety systems and emissions data usually dominate). Certifications that efficiently move scores for SMEs: ISO 14001/45001 where budgets allow, ZED (the MSME-native scheme with subsidies), and sector labels (SA8000 for export garments, etc.) where buyers name them.

How Aidwish helps

Aidwish builds right-sized ESG for growing companies — the data collation and baseline, the ESG profile document, questionnaire response banks, and certification roadmaps (ZED onward) — so sustainability becomes a sales asset before it becomes a sales barrier.

FAQ

Questions, answered

Is BRSR mandatory for private companies?

No — BRSR binds the top listed entities. It reaches private companies indirectly: listed customers' value-chain reporting turns into vendor ESG questionnaires, codes and audits that carry commercial force.

What is BRSR Core?

The assured subset of BRSR — specific KPIs (emissions, water, waste, safety, wages among them) requiring third-party assurance for the largest listed companies, phasing down the market-cap list, with value-chain coverage expanding.

What should an SME's first ESG step be?

A baseline: twelve months of energy/water/waste data, statutory-compliance evidence organised, and a short written profile. Measurement converts ESG from adjectives into a document buyers accept.

Does ESG cost or save money for small firms?

The starter layer mostly saves: energy audits cut bills, waste mapping cuts disposal costs, and compliance coherence avoids penalties — while keeping large-buyer contracts open. Costs scale only with certification ambitions.

Ready to move forward?

Book a free consultation and get a clear, step-by-step plan for your business.