We use privacy-by-default, cookieless analytics.

Optional analytics cookies are used only if you accept them.

Read our Terms of Use and Privacy Policy.

FAQCSRDEU

CSRD assurance evidence What should teams keep for limited assurance?

CSRD assurance evidence is the traceable record that supports the sustainability statement and the opinion.

Use the evidence file to connect ESRS datapoints, source records, controls, management approvals, publication links, and the assurance standards or national procedures applied.

Back to main artifactReview sources
Author
Sorena AI
Published
May 9, 2026
Updated
Jul 24, 2026
6 sections4 primary sources
Overview

CSRD assurance evidence is the traceable file behind the sustainability statement and the opinion. It should show how the company selected ESRS disclosures, prepared metrics and narrative disclosures, included them in the management report, and supported the assurance provider's work under the standard or national procedure that actually applies to the engagement.

Search this module

Find a question or answer quickly

6 of 6 questions
Question 1

What evidence supports CSRD limited assurance?

The core evidence traces each ESRS requirement to the reported disclosure: materiality assessment, selected disclosure requirements and datapoints, source systems, calculations, estimates, approvals, and final sustainability-statement text.

work still needs evidence that can be tested. Keep records for the process used to identify information included in the management report, value-chain information that was available or unavailable, references to financial-statement amounts, and any explanations for estimates, restatements, prior-period errors, or post-period updates.

  • ESRS scope record: material impacts, risks, opportunities, omitted non-material topics, and the disclosure requirements selected.
  • Datapoint support: source owner, system extract, calculation file, assumptions, estimation method, comparative figure, and review sign-off.
  • Control evidence: who prepared, reviewed, challenged, corrected, and approved each material disclosure before the management report was authorised.
  • Value-chain evidence: requests sent, responses received, gaps, reasons information could not be obtained, and plans to obtain missing information in future reporting periods.
  • Cross-reporting tie-out: references and explanations connecting sustainability disclosures with other management-report information and amounts in the financial statements.
  • Retention and access record: reporting-period archive, evidence owner, storage location, access restrictions, superseded versions, and the retention rule set by applicable law and company policy.
Recommended next step

Build a CSRD assurance evidence index

This FAQ helps structure the records that support ESRS disclosures, management-report publication, assurance scope, and the opinion package.

Research workflow
Open Research Copilot

Trace CSRD and ESRS assurance questions to source material.

Explore next step
Talk to Sorena
Discuss CSRD evidence design

Review the evidence index, control owners, and source support for a CSRD reporting cycle.

Explore next step
Question 2

How does assurance evidence connect to management report publication?

CSRD sustainability reporting is placed in a clearly identifiable dedicated section of the management report. Evidence should match the version that management approves for issuance. Preserve working spreadsheets and draft narratives as supporting records, clearly separated from the published version.

If a subsidiary relies on a parent report exemption, the evidence should also retain the parent name, registered office, web links to the consolidated management report and assurance opinion, and the statement that the subsidiary is exempt from its own Article 19a reporting.

  • Archive the final sustainability statement as included in the management report, with approval date and reporting period.
  • Tie each material disclosure to the approved management-report page, section, or tagged report location.
  • For exemption cases, keep the parent-report link, assurance-opinion link, exemption statement, and any required translation record.
  • For third-country parent reliance, retain evidence that the consolidated sustainability reporting and assurance opinion were published under the applicable Article 30 route.
Question 3

What does the assurance report and opinion need evidence for?

The assurance report must identify the entity, the sustainability reporting covered, the date and period covered, and the reporting framework applied. It must also describe the assurance scope, identify the assurance standards used, and include the assurance opinion required by the Accounting Directive as amended by CSRD.

Evidence should let the assurance provider verify the reporting framework, period, scope boundary, standard or national procedure used, and final disclosures covered by the opinion. The opinion covers compliance with ESRS, the process used to identify reported information, digital marking when the marking rules apply, and Article 8 Taxonomy reporting. Where more than one statutory auditor or audit firm is engaged, keep the joint report or separate opinions and reasons for disagreement.

  • Entity and period file: legal entity, consolidation boundary, annual or consolidated sustainability reporting, and reporting period.
  • Framework file: ESRS basis, any applicable Taxonomy Article 8 disclosures, and the standards or procedures used for assurance.
  • Scope file: disclosures included, disclosures omitted, assurance scope limitations, and unresolved evidence gaps escalated before signing.
  • Opinion file: signed and dated assurance report, joint opinion or disagreement paragraphs, and links to the published report package.
Question 4

Which assurance standards or procedures apply before EU standards are adopted?

CSRD says Member States must require statutory auditors and audit firms to use assurance standards adopted by the Commission. Until the Commission has adopted an assurance standard covering the same subject matter, Member States may apply national assurance standards, procedures, or requirements.

The evidence file should name the assurance basis actually used for the engagement. If the basis is national, retain the national standard, procedure, or requirement, the Member State communication or adoption reference where available, and the engagement instructions that show how the assurance provider applied it. is an international standard, but its publication or general effective date does not by itself make it the legal basis for a CSRD engagement in every Member State.

  • Record whether the engagement used Commission-adopted assurance standards or national standards, procedures, or requirements.
  • If national procedures apply, keep the national reference and the date from which it applies to the engagement.
  • Keep the engagement letter or assurance plan showing planning, risk consideration, response to risks, and expected conclusion type.
  • Describe the engagement as based on an EU, national, or international standard only when that basis has been adopted or otherwise applies to the engagement.
  • becomes internationally effective for periods beginning on or after 15 December 2026, with early application permitted, but check jurisdictional adoption and the CSRD engagement basis before using that date in the legal compliance calendar.
Question 5

What future assurance-standard milestones should the evidence owner track?

The current EU-level milestone is the Commission's delegated acts for standards. Directive (EU) 2026/470 moves that deadline to 1 July 2027. Until applicable EU standards take effect, teams need to identify the national standards or procedures used for the engagement.

Directive (EU) 2026/470 also removes the former requirement to adopt reasonable assurance standards by 1 October 2028. The superseded date is no longer a future EU obligation.

  • Track 1 July 2027 for Commission delegated acts on standards.
  • Remove the superseded 1 October 2028 reasonable assurance milestone from the current compliance calendar.
  • After each EU standard is adopted, update the assurance basis, engagement instructions, control descriptions, and evidence index.
  • Keep national-procedure evidence separately so reviewers can see which requirements applied before the EU standard covered the same subject matter.
Question 6

Questions and answers

What records should a CSRD assurance file always keep?

Keep the materiality assessment, the selected ESRS disclosures and datapoints, source extracts, calculation files, assumptions, management reviews, and the final sustainability statement as approved for the management report. The record should also show any value-chain gaps, estimate methods, restatements, and post-period updates that affect the reported information.

Does the assurance file need to match the published management report?

Yes. The evidence should track the exact version of the sustainability statement that management approved for issuance and that appears in the management report. Preserve drafts and working spreadsheets as supporting records, and keep a change log when the published report differs from them.

What should the assurance opinion file prove?

It should prove who provided assurance, what reporting period and framework were covered, what scope limitations existed, which assurance standards or procedures were applied, and what opinion was issued. Where there are multiple auditors or firms, keep the joint report or the separate opinions and any disagreement rationale.

Which assurance basis should be named if EU standards are not yet adopted?

Name the national assurance standard, procedure, or requirement actually used for the engagement. Describe an EU standard as the basis only after the Commission has adopted it for the relevant subject matter and it applies to the engagement.

Primary sources

References and citations

Directive (EU) 2022/2464 on corporate sustainability reporting
data.europa.eu6 citations
Referenced sections
  • Primary CSRD source for management-report placement, assurance opinions, national assurance procedures, assurance reports, and Commission assurance-standard milestones.
  • Supports the CSRD requirement to include sustainability information in the management report and to report the process used to identify that information.
  • Supports the management-report placement, dedicated-section requirement, subsidiary exemption publication links, and third-country parent publication conditions.
Show 3 more
  • Supports the required written assurance report content, including entity, period, framework, scope, assurance standards, and opinion.
  • Supports the rule that Commission assurance standards govern once adopted, while national standards, procedures, or requirements may apply beforehand.
  • Historical CSRD text for the assurance-standard timetable before Directive (EU) 2026/470 amended it; do not use these original dates as the current calendar.
"Assurance standards for sustainability reporting"
More quoted passages
"shall include in the management report"
"clearly identifiable within the management report"
"include the opinion"
"may apply national assurance standards, procedures or requirements"
"no later than 1 October 2026"
Directive (EU) 2026/470 amending CSRD-related requirements
eur-lex.europa.eu3 citations
Referenced sections
  • Current legal source for the 1 July 2027 limited assurance standards deadline and removal of the former reasonable assurance standards requirement.
  • Current legal source for the limited assurance opinion scope and the rule that marking-up is not required until the applicable rules are adopted.
"1 July 2027"
More quoted passages
"Until such rules on the marking-up are adopted"
"no later than 1 July 2027"
Commission Delegated Regulation (EU) 2023/2772 adopting ESRS
data.europa.eu2 citations
Referenced sections
  • Primary ESRS source for disclosure requirements, datapoints, comparative information, estimates, controls, and sustainability-statement preparation evidence.
  • Supports evidence records tied to ESRS disclosure requirements, datapoints, estimates, comparative information, and prior-period corrections.
"Disclosure Requirements"
More quoted passages
"ESRS structure the information to be disclosed under Disclosure Requirements"
ISSA 5000 overview from the IAASB
iaasb.org2 citations
Referenced sections
  • Identifies ISSA 5000 as an international sustainability assurance standard and provides jurisdiction-specific adoption information; applicability still depends on the engagement's legal and professional framework.
  • Identifies ISSA 5000 as an international sustainability assurance standard and provides jurisdiction-specific adoption information; it does not establish the legal basis for every CSRD engagement.
"effective for assurance engagements on sustainability information reported for periods beginning on or after December 15, 2026"

Related guides

CSRD Article 40a third-country group reporting FAQ

FAQ on when CSRD Article 40a applies to third-country groups, which EU subsidiary or branch publishes the report, and what happens with assurance and missing information.

CSRD data point inventory FAQ for ESRS disclosure readiness

How to build an ESRS data point inventory for CSRD reporting: disclosure requirements, materiality filters, evidence ownership, value-chain data, XBRL readiness, and assurance support.

CSRD digital tagging and XBRL readiness FAQ

What CSRD teams should do now about XHTML, Inline XBRL, ESRS taxonomy materials, tagging controls, and limits before final digital taxonomy rules apply.

CSRD Omnibus status after Directive (EU) 2026/470

FAQ on the enacted CSRD Stop-the-Clock delay, Directive (EU) 2026/470 scope changes, and remaining national and ESRS implementation steps.

CSRD reporting waves FAQ: who reports first and what changed

FAQ on the original CSRD reporting waves, the amended 2027 scope, transitional relief, third-country reporting, and national transposition.

CSRD topical ESRS scoping: what must be reported?

FAQ on topical ESRS scoping under the current 2023 standards and the revised standards adopted in July 2026, including materiality, omitted topics, climate, and EU-law datapoints.

Show all related guides (40)

CSRD value chain estimates: current and revised ESRS

When current and revised ESRS permit value chain estimates, how the value-chain cap works, and what to disclose about methods, limits, and data-quality improvements.

FAQ: CSRD double materiality scoring - thresholds, weighting, and evidence

How to score CSRD double materiality under ESRS without invented thresholds: impact materiality, financial materiality, evidence, and documentation.

How do ESRS 1 and ESRS 2 structure CSRD reporting?

FAQ explaining how ESRS 1 general requirements and ESRS 2 general disclosures fit into CSRD reporting, materiality, and topical ESRS disclosures.

LSME and VSME under EU CSRD: what SMEs should know

Understand historical LSME reporting, amended CSRD scope, voluntary VSME modules, and the Article 29ca standard and value-chain cap.

Taxonomy Article 8 KPIs under CSRD and ESRS

FAQ explaining how EU Taxonomy Article 8 KPI disclosures relate to CSRD, ESRS, and the Article 8 XBRL taxonomy.

CSRD and ESRS Compliance Obligations

Practical CSRD and ESRS compliance guide covering scope checks, sustainability statements, double materiality, value-chain data, assurance, and digital-tagging status.

CSRD and ESRS FAQ: scope, materiality, assurance, tagging, and value chain

CSRD and ESRS FAQ hub covering company scope, reporting waves, ESRS structure, double materiality, assurance, digital tagging, Taxonomy Article 8, and value chain data.

CSRD and ESRS Reporting Checklist

A practical CSRD and ESRS checklist for confirming reporting scope, sustainability statement content, double materiality, value-chain evidence, assurance readiness, and digital tagging.

CSRD and ESRS requirements: scope, reporting, assurance, and evidence

Practical guide to CSRD and ESRS requirements: who reports, what the sustainability statement must cover, double materiality, value-chain data, assurance, publication, digital-tagging status, and controls.

CSRD and ESRS value-chain data, estimates, proxies, and evidence

How to handle ESRS value-chain information when supplier or customer data is incomplete: reasonable efforts, estimates, limitations, controls, and assurance evidence.

CSRD Applicability Test for EU and Non-EU Company Groups

Check whether CSRD and ESRS reporting may apply by testing undertaking size, listed status, group reporting, non-EU branches or subsidiaries, and phase-in evidence.

CSRD assurance and ESRS digital tagging evidence

Evidence checklist for CSRD assurance readiness, ESRS datapoint traceability, and digital tagging preparation under the ESRS XBRL and ESEF reporting framework.

CSRD assurance evidence pack workflow for ESRS reporting

A CSRD and ESRS workflow for building an assurance-ready evidence pack covering scope, double materiality, ESRS datapoints, controls, estimates, and digital tagging.

CSRD assurance-ready controls and evidence for ESRS reporting

Build CSRD and ESRS evidence around GOV-5 controls, double materiality, IROs, value-chain data, assurance files, and XBRL tagging checks.

CSRD deadlines and ESRS compliance calendar

A current-law CSRD and ESRS calendar covering the amended 2027 scope, national implementation, publication, assurance, and digital reporting milestones.

CSRD Double Materiality Interview Question Bank for ESRS

Interview prompts for ESRS double materiality work: context, affected stakeholders, value chain IROs, impact materiality, financial materiality, thresholds, and evidence.

CSRD double materiality method under ESRS

A practical method for ESRS double materiality assessment: impact materiality, financial materiality, value-chain coverage, thresholds, evidence, and documentation.

CSRD double materiality scoring: IRO assessment and ESRS data points

A practical scoring guide for CSRD and ESRS double materiality: impact materiality, financial materiality, thresholds, evidence, governance, and disclosure mapping.

CSRD Double Materiality Workflow for ESRS Assessment

A CSRD and ESRS workflow for running a double materiality assessment, from value-chain scoping and stakeholder inputs to IRO scoring, governance approval, and audit trail evidence.

CSRD penalties and fines: Member State enforcement, controls, and evidence

How CSRD penalties work through Member State law, which reporting and assurance failures may trigger enforcement, and what evidence teams should keep.

CSRD reporting waves and Omnibus status

Current CSRD status after Directive (EU) 2026/470: amended scope from FY 2027, Stop-the-Clock history, ESRS work, and remaining implementation steps.

CSRD scope and phasing by company type

Map CSRD reporting scope by company category, original Article 5 wave, listed SME opt-out, third-country group rules, and stop-the-clock caveats.

CSRD value chain data and estimation methodology under ESRS

How ESRS lets CSRD reporters use sector averages, proxies, and other estimates when direct value-chain data is not available after reasonable effort.

CSRD vs CSDDD: Reporting vs Due Diligence

Compare CSRD sustainability reporting with CSDDD human rights and environmental due diligence, including scope, evidence, assurance, penalties, and overlap.

CSRD vs EU Taxonomy Article 8

Compare CSRD and ESRS sustainability reporting with EU Taxonomy Article 8 KPI disclosures, including scope, evidence, tagging, and reuse limits.

CSRD vs GRI: ESRS Interoperability

Compare CSRD/ESRS reporting with GRI reporting: materiality, value-chain boundaries, additional disclosures, standards editions, and evidence reuse.

CSRD vs IFRS S1 and S2 Comparison

Compare CSRD and ESRS with IFRS S1 and S2 across scope, materiality, disclosures, value chain reporting, assurance, digital tagging, and interoperability.

CSRD vs SEC Climate Disclosure Rule

Compare CSRD/ESRS with the SEC's 2024 climate disclosure rules, including scope, materiality, emissions, filing, assurance, and the SEC's pending 2026 rescission proposal.

CSRD vs SFDR: ESRS and Financial Disclosures

Compare CSRD/ESRS corporate sustainability reporting with SFDR financial-market disclosures, including scope, materiality, PAI data, assurance, tagging, and reuse limits.

CSRD XBRL Tagging Checklist for ESRS and Article 8 Readiness

A CSRD digital-reporting readiness checklist for XHTML, Inline XBRL, ESRS and Article 8 taxonomy mapping, ESEF controls, and the current no-markup-until-rules status.

ESRS 1 and ESRS 2 structure under CSRD

How the 2023 ESRS Set 1 uses ESRS 1 for reporting requirements and ESRS 2 for general disclosures, with materiality rules and current revision status.

ESRS data point inventory workflow for CSRD reporting

Build an ESRS data point inventory that links disclosure requirements, materiality outcomes, evidence owners, XBRL tagging readiness, and assurance controls.

ESRS structure and data model for CSRD reporting

Map ESRS architecture, disclosure requirements, datapoints, materiality, XBRL taxonomy, Article 8 tagging, and report data ownership for CSRD reporting.

Taxonomy Article 8 KPIs for CSRD reporting

How to prepare EU Taxonomy Article 8 KPIs under the current Disclosures Delegated Act, including 2026 simplifications, evidence, and digital-tagging status.