ESTRADS Certification ’s certifications and charters are based on existing documents. At the international level: the United Nations Sustainable Development Goals, the ISO 26000 guidelines, and the ISO 9001, ISO 14001, and ISO 45001 standards. At the European level: the CSRD Directive and its ESRS standards, the CS3D Directive on the duty of care, and the Taxonomy and SFDR regulations. In France: the PACTE Act, the 2017 Act on the Duty of Care, the Sapin II Act, the Labor Code, the Environmental Code, and sector-specific regulations. ESTRADS Certification applies these requirements to its own operations: it is certified to ISO 9001, ISO 14001, and ISO 45001 and holds the status of a “mission-driven company” as defined by the PACTE Act. (Discover our commitments)

None of these standards is sufficient on its own. ISO 26000 provides guidelines but does not grant certification. The CSRD sets a framework for the disclosure of sustainability information without rating performance. As for reporting and due diligence obligations, they apply only to large companies, even though their suppliers receive questionnaires that include these same requirements. We therefore identified, within each standard, the requirements that actually apply to a company and can be verified, and then adapted them to the industry and the company’s size: a startup and a large industrial group do not complete the same questionnaire.

Our teams developed these guidelines in collaboration with external experts and refined them in consultation with industry representatives and professional associations. They are revised annually, or sooner if relevant regulations change. Our regulatory monitoring and feedback from our clients and institutions inform each revision, as does the experience gained from the 650 certifications we have already issued. Within its sector, each of our ESG certifications is the only one to cover such a broad range of areas: environment, social issues, governance, business ethics, relationships with suppliers and subcontractors, and cybersecurity.