VSME Audit: How to Assess Your SME's ESG Compliance

Understanding the VSME audit and its purpose for SMEs

The VSME (Voluntary Sustainability Reporting Standard for SMEs) is a voluntary reporting framework developed by EFRAG. Since 24 September 2026, it has been set out in Delegated Regulation (EU) 2026/1560 as the Voluntary Standard (VS), open to any company not subject to CSRD with 1,000 employees or fewer. Its Basic Module covers around forty datapoints, across 11 disclosures (B1 to B11), spanning the three ESG pillars (environment, social and governance) in a format proportionate to SME capabilities. A VSME audit assesses a company's alignment with these indicators: the goal is not to penalise, but to identify strengths, gaps and improvement priorities.

This audit is a structuring exercise: it gives a clear picture of ESG maturity, improves credibility with financiers and helps companies respond effectively to the CSR requests of large clients subject to CSRD.

Key components of a VSME audit

A VSME audit assesses four main dimensions:

1. Governance and ESG policy

Analysis of strategy, formalised commitments and integration of sustainability criteria into decision-making. The presence of policies on ethics, diversity or responsible procurement is assessed.

2. Environment

Measurement of energy consumption, greenhouse gas emissions, waste management and supply chain oversight. VSME takes a pragmatic approach: only available data is required, provided it is consistent and documented.

Under the VS, companies with 10 employees or fewer can leave out the more complex environmental data (B3 energy and GHG emissions, B6 water, B7 waste and circularity). Our article on optional data for micro-companies details what is affected.

3. Social and working conditions

Indicators covering health and safety, gender equality, training and social dialogue. Typical evidence includes HR records, accident reports or skills development plans.

4. Value chain and ESG risks

Assessment of supplier relationships, CSR clauses in contracts and basic due diligence procedures. This dimension directly addresses the growing expectations of large buyers subject to CSRD. The VS also sets the ceiling of these expectations: from financial years starting on or after 1 January 2027, a CSRD-subject client cannot require from a company with 1,000 employees or fewer information beyond the VS, and must flag the questions that go beyond it. Our article on the value chain cap sets out the rule and its limits. Our article on VSME for suppliers to large groups covers the specific requirements for this situation.

Preparing your VSME audit in practice

Preparation rests on three pillars: organisation, data and documentation.

Step 1 — Appoint an ESG lead

A designated contact coordinates data collection and ensures the consistency of responses.

Step 2 — Centralise evidence

Energy invoices, HR records and internal policies form the documentary base. Grouping these by indicator saves significant time.

Step 3 — Choose your reporting format

EFRAG provides an Excel template that structures the indicators. Other solutions, such as the Ditto platform, automate collection and pre-filling to simplify the audit.

Step 4 — Self-assessment and action plan

A first report can be self-declared, without external audit, and then supplemented with an improvement plan. Ditto enables progress tracking via a dashboard and helps identify priority actions.

Internal or external audit: what are the differences?

VSME requires no third-party audit. Three approaches coexist:

• Internal audit: self-assessment conducted in-house using templates or ESG tools. This approach is sufficient for a basic report.
• Consultant-led audit: useful for integrating double materiality, structuring an improvement plan or aligning policies with expected standards (EcoVadis, ISO 26000, etc.).
• Voluntary external audit: some companies have their report validated by a specialist firm to strengthen credibility with financiers.

This flexibility makes VSME both a compliance tool and a strategic management instrument.

Identifying non-conformities and prioritising corrective actions

The most common gaps identified during VSME audits relate to governance and policy formalisation:

• No written environmental policy.
• Incomplete social data (training, accidents, gender equality).
• Missing CSR clauses in supplier contracts.
• GHG data not consolidated.

Improvement priorities involve formalising policies, centralising data and setting up regular monitoring. Our article on VSME reporting explains how to structure this ongoing process.

Tools and resources for an effective VSME audit

EFRAG provides a VSME Excel template and guidance notes for each indicator. For a more automated approach, platforms like Ditto handle data collection, integrate VSME indicators and simplify reporting consolidation.

Specialist consultants or platforms can also support double materiality analysis, indicator prioritisation and the preparation of a progress plan aligned with market and investor expectations.

VSME Audit — Key Takeaways