---
title: "CSRD assurance evidence FAQ: what to keep for limited assurance"
canonical_url: "https://www.sorena.io/artifacts/eu/corporate-sustainability-reporting-directive/faq/assurance-evidence"
source_url: "https://www.sorena.io/artifacts/eu/corporate-sustainability-reporting-directive/faq/assurance-evidence"
author: "Sorena AI"
description: "What CSRD and ESRS assurance evidence should support: management-report publication, the assurance report, national assurance procedures, and EU limited assurance milestones."
published_at: "2026-05-09"
updated_at: "2026-05-09"
keywords:
  - "CSRD assurance evidence"
  - "ESRS evidence"
  - "limited assurance"
  - "sustainability assurance report"
  - "assurance opinion"
  - "CSRD"
  - "ESRS"
  - "sustainability reporting assurance"
  - "management report"
---
**[SORENA](https://www.sorena.io/)** - AI-Powered GRC Platform

[Home](https://www.sorena.io/) | [Solutions](https://www.sorena.io/solutions) | [Artifacts](https://www.sorena.io/artifacts) | [About Us](https://www.sorena.io/about-us) | [Contact](https://www.sorena.io/contact) | [Portal](https://app.sorena.io)

---

# CSRD assurance evidence FAQ: what to keep for limited assurance

What CSRD and ESRS assurance evidence should support: management-report publication, the assurance report, national assurance procedures, and EU limited assurance milestones.

*FAQ* *CSRD* *EU*

## CSRD assurance evidence What should teams keep for limited assurance?

CSRD assurance evidence should prove that the sustainability statement was prepared under ESRS, included in the management report, and ready for the assurance report and opinion.

Use the evidence file to connect ESRS datapoints, source records, controls, management approvals, publication links, and the assurance standards or national procedures applied.

For CSRD, assurance evidence is the audit-ready file behind the sustainability statement. It should show how the company selected ESRS disclosures, prepared metrics and narrative disclosures, linked them to the management report, and supported the assurance provider's work under the applicable assurance standard or national procedure.

## What evidence supports CSRD limited assurance?

The core evidence is not a generic policy note. It is the chain from ESRS requirement to reported disclosure: materiality assessment, selected disclosure requirements and datapoints, source systems, calculations, estimates, approvals, and final sustainability-statement text.

Limited assurance work still needs evidence that can be tested. Keep records for the process used to identify information included in the management report, value-chain information that was available or unavailable, references to financial-statement amounts, and any explanations for estimates, restatements, prior-period errors, or post-period updates.

- ESRS scope record: material impacts, risks, opportunities, omitted non-material topics, and the disclosure requirements selected.
- Datapoint support: source owner, system extract, calculation file, assumptions, estimation method, comparative figure, and review sign-off.
- Control evidence: who prepared, reviewed, challenged, corrected, and approved each material disclosure before the management report was authorised.
- Value-chain evidence: requests sent, responses received, gaps, reasons information could not be obtained, and plans to obtain missing information in future reporting periods.
- Cross-reporting tie-out: references and explanations connecting sustainability disclosures with other management-report information and amounts in the financial statements.

Sources for this answer:

- [Directive (EU) 2022/2464 on corporate sustainability reporting](https://data.europa.eu/eli/dir/2022/2464/oj?ref=sorena.io) - Supports the CSRD requirement to include sustainability information in the management report and to report the process used to identify that information.
- [Commission Delegated Regulation (EU) 2023/2772 adopting ESRS](https://data.europa.eu/eli/reg_del/2023/2772/oj?ref=sorena.io) - Supports evidence records tied to ESRS disclosure requirements, datapoints, estimates, comparative information, and prior-period corrections.

## How does assurance evidence connect to management report publication?

CSRD sustainability reporting is placed in a clearly identifiable dedicated section of the management report. Evidence should therefore match the version that management approves for issuance, not a spreadsheet or draft narrative that later diverges from the published report.

If a subsidiary relies on a parent report exemption, the evidence should also retain the parent name, registered office, web links to the consolidated management report and assurance opinion, and the statement that the subsidiary is exempt from its own Article 19a reporting.

- Archive the final sustainability statement as included in the management report, with approval date and reporting period.
- Tie each material disclosure to the approved management-report page, section, or tagged report location.
- For exemption cases, keep the parent-report link, assurance-opinion link, exemption statement, and any required translation record.
- For third-country parent reliance, retain evidence that the consolidated sustainability reporting and assurance opinion were published under the applicable Article 30 route.

Sources for this answer:

- [Directive (EU) 2022/2464 on corporate sustainability reporting](https://data.europa.eu/eli/dir/2022/2464/oj?ref=sorena.io) - Supports the management-report placement, dedicated-section requirement, subsidiary exemption publication links, and third-country parent publication conditions.

## What does the assurance report and opinion need evidence for?

The assurance report must identify the entity, the sustainability reporting covered, the date and period covered, and the reporting framework applied. It must also describe the assurance scope, identify the assurance standards used, and include the assurance opinion required by the Accounting Directive as amended by CSRD.

Evidence should therefore let the assurance provider verify the reporting framework, the period, the scope boundary, the standard or national procedure used, and the final disclosures that the opinion covers. Where more than one statutory auditor or audit firm is engaged, keep the joint report or separate opinions and reasons for disagreement.

- Entity and period file: legal entity, consolidation boundary, annual or consolidated sustainability reporting, and reporting period.
- Framework file: ESRS basis, any applicable Taxonomy Article 8 disclosures, and the standards or procedures used for assurance.
- Scope file: disclosures included, disclosures omitted, assurance scope limitations, and unresolved evidence gaps escalated before signing.
- Opinion file: signed and dated assurance report, joint opinion or disagreement paragraphs, and links to the published report package.

Sources for this answer:

- [Directive (EU) 2022/2464 on corporate sustainability reporting](https://data.europa.eu/eli/dir/2022/2464/oj?ref=sorena.io) - Supports the required written assurance report content, including entity, period, framework, scope, assurance standards, and opinion.

## Which assurance standards or procedures apply before EU standards are adopted?

CSRD says Member States must require statutory auditors and audit firms to use assurance standards adopted by the Commission. Until the Commission has adopted an assurance standard covering the same subject matter, Member States may apply national assurance standards, procedures, or requirements.

The evidence file should name the assurance basis actually used for the engagement. If the basis is national, retain the national standard, procedure, or requirement, the Member State communication or adoption reference where available, and the engagement instructions that show how the assurance provider applied it.

- Record whether the engagement used Commission-adopted assurance standards or national standards, procedures, or requirements.
- If national procedures apply, keep the national reference and the date from which it applies to the engagement.
- Keep the engagement letter or assurance plan showing planning, risk consideration, response to risks, and expected conclusion type.
- Do not describe an assurance engagement as based on a future EU standard unless that standard has actually been adopted and applies.

Sources for this answer:

- [Directive (EU) 2022/2464 on corporate sustainability reporting](https://data.europa.eu/eli/dir/2022/2464/oj?ref=sorena.io) - Supports the rule that Commission assurance standards govern once adopted, while national standards, procedures, or requirements may apply beforehand.
- [ISSA 5000 overview from the IAASB](https://www.iaasb.org/focus-areas/understanding-international-standard-sustainability-assurance-5000?ref=sorena.io) - Supports awareness of ISSA 5000 as an international sustainability assurance standard relevant to assurance engagements and EU assurance discussions.

## What future assurance-standard milestones should the evidence owner track?

The CSRD milestone to track is the Commission's delegated acts for assurance standards. The Directive requires limited assurance standards no later than 1 October 2026, covering procedures such as engagement planning, risk consideration, responses to risks, and the type of conclusions in the assurance report or audit report.

It also requires reasonable assurance standards no later than 1 October 2028, following an assessment of whether reasonable assurance is feasible for auditors and undertakings. The delegated acts may specify the date from which the sustainability assurance opinion must be based on a reasonable assurance engagement.

- Track 1 October 2026 for Commission delegated acts on limited assurance standards.
- Track 1 October 2028 for Commission delegated acts on reasonable assurance standards, subject to feasibility assessment.
- After each EU standard is adopted, update the assurance basis, engagement instructions, control descriptions, and evidence index.
- Keep national-procedure evidence separately so reviewers can see which requirements applied before the EU standard covered the same subject matter.

Sources for this answer:

- [Directive (EU) 2022/2464 on corporate sustainability reporting](https://data.europa.eu/eli/dir/2022/2464/oj?ref=sorena.io) - Supports the 1 October 2026 limited assurance standard milestone and 1 October 2028 reasonable assurance standard milestone.

## Primary sources

- [Directive (EU) 2022/2464 on corporate sustainability reporting](https://data.europa.eu/eli/dir/2022/2464/oj?ref=sorena.io) - Primary CSRD source for management-report placement, assurance opinions, national assurance procedures, assurance reports, and Commission assurance-standard milestones.
  - Quote: "Assurance standards for sustainability reporting"
- [Commission Delegated Regulation (EU) 2023/2772 adopting ESRS](https://data.europa.eu/eli/reg_del/2023/2772/oj?ref=sorena.io) - Primary ESRS source for disclosure requirements, datapoints, comparative information, estimates, controls, and sustainability-statement preparation evidence.
  - Quote: "Disclosure Requirements"
- [ISSA 5000 overview from the IAASB](https://www.iaasb.org/focus-areas/understanding-international-standard-sustainability-assurance-5000?ref=sorena.io) - Identifies ISSA 5000 as a sustainability assurance standard and notes its relevance to sustainability assurance engagements and EU assurance discussions.
  - Quote: "International Standard on Sustainability Assurance 5000"

## Topic Guides

- [CSRD and ESRS Compliance Obligations](/artifacts/eu/corporate-sustainability-reporting-directive/compliance.md): Grounded CSRD and ESRS compliance guide covering scope checks, sustainability statements, double materiality, value-chain data, assurance, and digital tagging.
- [CSRD and ESRS FAQ: scope, materiality, assurance, tagging, and value chain](/artifacts/eu/corporate-sustainability-reporting-directive/faq.md): CSRD and ESRS FAQ hub covering company scope, reporting waves, ESRS structure, double materiality, assurance, digital tagging, Taxonomy Article 8, and value chain data.
- [CSRD and ESRS Reporting Checklist](/artifacts/eu/corporate-sustainability-reporting-directive/checklist.md): A practical CSRD and ESRS checklist for confirming reporting scope, sustainability statement content, double materiality, value-chain evidence, assurance readiness, and digital tagging.
- [CSRD and ESRS requirements: scope, reporting, assurance, and evidence](/artifacts/eu/corporate-sustainability-reporting-directive/requirements.md): Grounded guide to CSRD and ESRS requirements: who reports, what the sustainability statement must cover, double materiality, value-chain data, assurance, publication, digital tagging, and controls.
- [CSRD and ESRS value-chain data, estimates, proxies, and evidence](/artifacts/eu/corporate-sustainability-reporting-directive/value-chain-data-and-estimation.md): How to handle ESRS value-chain information when supplier or customer data is incomplete: reasonable efforts, estimates, limitations, controls, and assurance evidence.
- [CSRD Applicability Test for EU and Non-EU Company Groups](/artifacts/eu/corporate-sustainability-reporting-directive/applicability-test.md): Check whether CSRD and ESRS reporting may apply by testing undertaking size, listed status, group reporting, non-EU branches or subsidiaries, and phase-in evidence.
- [CSRD Article 40a third-country group reporting FAQ](/artifacts/eu/corporate-sustainability-reporting-directive/faq/third-country-groups.md): FAQ on when CSRD Article 40a applies to third-country groups, which EU subsidiary or branch publishes the report, and what happens with assurance and missing information.
- [CSRD assurance and ESRS digital tagging evidence](/artifacts/eu/corporate-sustainability-reporting-directive/assurance-and-digital-tagging-evidence.md): Evidence checklist for CSRD assurance readiness, ESRS datapoint traceability, and digital tagging preparation under the ESRS XBRL and ESEF reporting framework.
- [CSRD assurance evidence pack workflow for ESRS reporting](/artifacts/eu/corporate-sustainability-reporting-directive/assurance-evidence-pack-workflow.md): A CSRD and ESRS workflow for building an assurance-ready evidence pack covering scope, double materiality, ESRS datapoints, controls, estimates, and digital tagging.
- [CSRD assurance-ready controls and evidence for ESRS reporting](/artifacts/eu/corporate-sustainability-reporting-directive/assurance-ready-controls-and-evidence.md): Build CSRD and ESRS evidence around GOV-5 controls, double materiality, IROs, value-chain data, assurance files, and XBRL tagging checks.
- [CSRD data point inventory FAQ for ESRS disclosure readiness](/artifacts/eu/corporate-sustainability-reporting-directive/faq/data-point-inventory.md): How to build an ESRS data point inventory for CSRD reporting: disclosure requirements, materiality filters, evidence ownership, value-chain data, XBRL readiness, and assurance support.
- [CSRD deadlines and ESRS compliance calendar](/artifacts/eu/corporate-sustainability-reporting-directive/deadlines-and-compliance-calendar.md): A grounded CSRD and ESRS calendar covering the original reporting waves, enacted postponement caveats, publication duties, assurance, and digital reporting workstreams.
- [CSRD digital tagging and XBRL readiness FAQ](/artifacts/eu/corporate-sustainability-reporting-directive/faq/digital-tagging-xbrl.md): What CSRD teams should do now about XHTML, Inline XBRL, ESRS taxonomy materials, tagging controls, and limits before final digital taxonomy rules apply.
- [CSRD Double Materiality Interview Question Bank for ESRS](/artifacts/eu/corporate-sustainability-reporting-directive/double-materiality-interview-question-bank.md): Interview prompts for ESRS double materiality work: context, affected stakeholders, value chain IROs, impact materiality, financial materiality, thresholds, and evidence.
- [CSRD double materiality method under ESRS](/artifacts/eu/corporate-sustainability-reporting-directive/double-materiality-method.md): A grounded method for ESRS double materiality assessment: impact materiality, financial materiality, value-chain coverage, thresholds, evidence, and documentation.
- [CSRD double materiality scoring: IRO assessment and ESRS data points](/artifacts/eu/corporate-sustainability-reporting-directive/double-materiality-scoring.md): A grounded scoring guide for CSRD and ESRS double materiality: impact materiality, financial materiality, thresholds, evidence, governance, and disclosure mapping.
- [CSRD Double Materiality Workflow for ESRS Assessment](/artifacts/eu/corporate-sustainability-reporting-directive/double-materiality-workflow.md): A CSRD and ESRS workflow for running a double materiality assessment, from value-chain scoping and stakeholder inputs to IRO scoring, governance approval, and audit trail evidence.
- [CSRD omnibus stop-the-clock status: enacted delay vs proposed scope changes](/artifacts/eu/corporate-sustainability-reporting-directive/faq/omnibus-stop-the-clock-status.md): FAQ on the CSRD stop-the-clock directive, the separate Omnibus proposal, and how reporting teams should treat enacted and proposed changes.
- [CSRD penalties and fines: Member State enforcement, controls, and evidence](/artifacts/eu/corporate-sustainability-reporting-directive/penalties-and-fines.md): A conservative guide to CSRD penalty exposure: why fines depend on Member State implementation, which reporting failures create risk, and what evidence teams should keep.
- [CSRD reporting waves and Omnibus status](/artifacts/eu/corporate-sustainability-reporting-directive/reporting-waves-and-omnibus-status.md): Track what is enacted, postponed, final, or still in the Omnibus process for CSRD reporting waves, ESRS reporting, and Stop-the-Clock changes.
- [CSRD reporting waves FAQ: who reports first and what changed](/artifacts/eu/corporate-sustainability-reporting-directive/faq/reporting-waves.md): FAQ on original CSRD reporting waves, stop-the-clock caveats, listed SME opt-out, third-country reporting, and why local transposition law still matters.
- [CSRD scope and phasing by company type](/artifacts/eu/corporate-sustainability-reporting-directive/scope-and-phasing-by-company-type.md): Map CSRD reporting scope by company category, original Article 5 wave, listed SME opt-out, third-country group rules, and stop-the-clock caveats.
- [CSRD topical ESRS scoping: what must be reported?](/artifacts/eu/corporate-sustainability-reporting-directive/faq/topical-esrs-scoping.md): FAQ on CSRD topical ESRS scoping: ESRS 2, double materiality, topical disclosure requirements, omitted topics, climate, and Appendix B datapoints.
- [CSRD value chain data and estimation methodology under ESRS](/artifacts/eu/corporate-sustainability-reporting-directive/value-chain-estimates.md): How ESRS lets CSRD reporters use sector averages, proxies, and other estimates when direct value-chain data is not available after reasonable effort.
- [CSRD vs CSDDD: Reporting vs Due Diligence](/artifacts/eu/corporate-sustainability-reporting-directive/csrd-vs-csddd.md): Compare CSRD sustainability reporting with CSDDD human rights and environmental due diligence, including scope, evidence, assurance, penalties, and overlap.
- [CSRD vs EU Taxonomy Article 8](/artifacts/eu/corporate-sustainability-reporting-directive/csrd-vs-taxonomy-alignment.md): Compare CSRD and ESRS sustainability reporting with EU Taxonomy Article 8 KPI disclosures, including scope, evidence, tagging, and reuse limits.
- [CSRD vs GRI: ESRS Interoperability](/artifacts/eu/corporate-sustainability-reporting-directive/csrd-vs-gri.md): Compare CSRD/ESRS reporting with GRI-based reporting using grounded ESRS interoperability, materiality, value-chain, and disclosure-reuse rules.
- [CSRD vs IFRS S1 and S2 Comparison](/artifacts/eu/corporate-sustainability-reporting-directive/csrd-vs-ifrs-s1-and-s2.md): Compare CSRD and ESRS with IFRS S1 and S2 across scope, materiality, disclosures, value chain reporting, assurance, digital tagging, and interoperability.
- [CSRD vs SEC Climate Disclosure Rule](/artifacts/eu/corporate-sustainability-reporting-directive/csrd-vs-sec-climate-disclosure-rule.md): Grounded comparison notes for CSRD and the SEC climate disclosure rule, focused on CSRD and ESRS duties and conservative limits where SEC facts are not sourced.
- [CSRD vs SFDR: ESRS and Financial Disclosures](/artifacts/eu/corporate-sustainability-reporting-directive/csrd-vs-sfdr.md): Compare CSRD/ESRS corporate sustainability reporting with SFDR financial-market disclosures, including scope, materiality, PAI data, assurance, tagging, and reuse limits.
- [CSRD XBRL Tagging Checklist for ESRS and Article 8 Readiness](/artifacts/eu/corporate-sustainability-reporting-directive/xbrl-tagging-checklist.md): A grounded CSRD XBRL tagging readiness checklist for XHTML, Inline XBRL, ESRS taxonomy mapping, Article 8 taxonomy mapping, ESEF validation, and source-controlled review.
- [ESRS 1 and ESRS 2 structure under CSRD](/artifacts/eu/corporate-sustainability-reporting-directive/esrs-1-and-esrs-2-structure.md): A grounded explanation of how ESRS 1 sets the reporting architecture and how ESRS 2 provides the mandatory general disclosures for CSRD sustainability statements.
- [ESRS data point inventory workflow for CSRD reporting](/artifacts/eu/corporate-sustainability-reporting-directive/esrs-data-point-inventory-workflow.md): Build an ESRS data point inventory that links disclosure requirements, materiality outcomes, evidence owners, XBRL tagging readiness, and assurance controls.
- [ESRS structure and data model for CSRD reporting](/artifacts/eu/corporate-sustainability-reporting-directive/esrs-structure-and-data-model.md): Map ESRS architecture, disclosure requirements, datapoints, materiality, XBRL taxonomy, Article 8 tagging, and report data ownership for CSRD reporting.
- [FAQ: CSRD double materiality scoring — thresholds, weighting, and evidence](/artifacts/eu/corporate-sustainability-reporting-directive/faq/double-materiality-scoring.md): How to score CSRD double materiality under ESRS without invented thresholds: impact materiality, financial materiality, evidence, and documentation.
- [FAQ: CSRD value chain estimates — methods and proportionality under ESRS](/artifacts/eu/corporate-sustainability-reporting-directive/faq/value-chain-estimates.md): When ESRS permits value chain estimates, what to disclose about assumptions, accuracy, limits, and improvement plans.
- [How do ESRS 1 and ESRS 2 structure CSRD reporting?](/artifacts/eu/corporate-sustainability-reporting-directive/faq/esrs-1-and-2-structure.md): FAQ explaining how ESRS 1 general requirements and ESRS 2 general disclosures fit into CSRD reporting, materiality, and topical ESRS disclosures.
- [LSME and VSME under EU CSRD: what SMEs should know](/artifacts/eu/corporate-sustainability-reporting-directive/faq/lsme-and-vsme.md): FAQ on LSME and VSME under the EU CSRD: listed SME reporting, the temporary opt-out, voluntary SME reporting, and value-chain requests.
- [Taxonomy Article 8 KPIs for CSRD reporting](/artifacts/eu/corporate-sustainability-reporting-directive/taxonomy-article-8-kpis.md): Grounded guide to Article 8 Taxonomy KPI disclosures in CSRD sustainability statements, including KPI templates, ESRS links, XBRL readiness, and evidence controls.
- [Taxonomy Article 8 KPIs under CSRD and ESRS](/artifacts/eu/corporate-sustainability-reporting-directive/faq/taxonomy-article-8-kpis.md): FAQ explaining how EU Taxonomy Article 8 KPI disclosures relate to CSRD, ESRS, and the Article 8 XBRL taxonomy.

*Recommended next step*

*Placement: after assurance evidence section*

## Build a CSRD assurance evidence index

Use this FAQ to structure the records that support ESRS disclosures, management-report publication, assurance scope, and the opinion package.

- [Open Research Copilot](/solutions/research-copilot.md): Trace CSRD and ESRS assurance questions to source material.
- [Discuss CSRD evidence design](/contact.md): Review the evidence index, control owners, and source support for a CSRD reporting cycle.


---

[Privacy Policy](https://www.sorena.io/privacy) | [Terms of Use](https://www.sorena.io/terms-of-use) | [DMCA](https://www.sorena.io/dmca) | [About Us](https://www.sorena.io/about-us)

(c) 2026 Sorena AB (559573-7338). All rights reserved.

Source: https://www.sorena.io/artifacts/eu/corporate-sustainability-reporting-directive/faq/assurance-evidence