ESG investment criteria: How to firmly anchor environment, social and governance

The EU Disclosure Regulation SFDR (VO 2019/2088) has required since March 10, 2021 that financial market participants disclose sustainability risks in investment decisions. With the CSRD (Directive 2022/2464), the circle of companies required to report has been significantly expanded from 2025. ESG investment criteria are no longer a voluntary marketing label, but are subject to review by BaFin, auditors and institutional LPs.

Anyone who anchors environmental, social and governance factors in an investment process today must be able to document the selection logic, the data sources, the escalation paths and the engagement results. This guide shows how you can establish ESG criteria from investment principles to portfolio monitoring, which factors separate SFDR Articles 8 and 9 and where an ESG officer, a compliance platform and officer-as-a-service make the process audit-proof.

The SFDR (VO 2019/2088) establishes the disclosure requirement at product level. Article 6 covers all financial products and requires the inclusion of sustainability risks. Article 8 describes products with ecological or social characteristics. Article 9 refers to products with a sustainable investment objective. The delimitation has been tightened since the ESAs' Q&A from July 2023 and BaFin deals with it in every product advertisement.

The EU Taxonomy Regulation (VO 2020/852) provides the technical assessment criteria for six environmental objectives. Climate protection and adaptation to climate change have been applicable since 2022, the other four goals since January 2024. An investment is only considered to be taxonomy-compliant if it makes a significant contribution, does not significantly affect any of the other goals and complies with the minimum social protection criteria.

The CSRD (Directive 2022/2464) has an indirect effect: it broadens the database because it is estimated by 2028 50,000 EU companies report to ESRS. Anyone who defines ESG investment criteria must read these three sets of rules synchronously and force the respective mandatory fields into their own investment memo.

An ESG representative takes over this mapping work and keeps it up to date. CIVAC provides audit templates that compare SFDR articles, taxonomy activities and ESRS data points.

If you only use one of the three sets of rules, you build up the risk of greenwashing. In 2024, BaFin asked several asset managers in writing to downgrade Article 9 classifications because the depth of documentation was not sufficient. The clock starts on awareness.

The clean structure begins with the question of which product carries which level and which data points must prove this before the first marketing sentence is written.

Environment criteria can be structured according to the six taxonomy goals. Climate protection is usually measured via Scope 1/2/3 emissions, reduction paths according to SBTi and CapEx share in taxonomy-compliant activities. Adaptation to climate change requires a physical climate risk analysis for each location, often according to the IPCC AR6 scenarios.

Water and marine resources, circular economy, pollution prevention and biodiversity have been on the same level since January 2024. Above all, asset managers underestimate the biodiversity dimension. The TNFD framework from September 2023 is already referenced in many mandates without the data pipeline supporting it.

The PAI indicators according to SFDR-RTS Annex I, Table 1 are mandatory. The first 14 indicators include, among other things, GHG emissions, carbon footprint, share of fossil fuels and violations of UNGC principles. Anyone who cannot report these indicators on an annual basis does not have an SFDR-compliant process.

Concrete implementation means: selecting ESG data providers, documenting the methodology, explicitly identifying data gaps and describing estimation procedures. BaFin accepts estimates, but requires transparency about the source and model.

CIVAC supports with templates for environmental data inventories and threshold configuration in the workspace. The chain of evidence from the data source to the calculation to the portfolio report is in the same system.

Those who build environmental criteria cleanly have the greatest leverage: Article 9 classification, taxonomy quota and the robustness of the climate reporting towards LPs and auditors are decisive here.

The social dimension includes working conditions, human rights along the value chain, equality and product liability. The OECD Guidelines for Multinational Companies, the UN Guiding Principles for Business and Human Rights as well as the ILO core labour standards are particularly legally relevant.

For investors active in Germany, the LkSG (Supply Chain Due Diligence Act) has also been effective since 2023 for companies with 3,000 or more employees, and since 2024 for 1,000 or more. Even if the obligation affects the portfolio company, it affects the investor. Before starting, asset managers check whether a risk analysis process exists and whether complaint mechanisms have been set up.

The minimum social protection criteria of the EU taxonomy (Article 18) require compliance with the international standards mentioned. An investment is not considered taxonomy compliant if the company has material violations. The Sustainable Finance platform published guidelines for this in 2022.

Operationally, this means: You need a screening for controversies (e.g. RepRisk, Sustainalytics Controversies), a clear escalation path for threshold violations and an engagement protocol. Others run compliance like a filing cabinet. We run it like software.

A LkSG representative can, as an officer-as-a-service, deliver actual gap analyses at portfolio level instead of just sending out questionnaires. CIVAC connects the appointment certificate, reporting line and escalation in one workspace.

The chain of documents from the supply chain analysis at the portfolio company to the investment decision must be reproducible in the data room. Audit-proof, documented, LkSG-proof.

Governance is the most often underestimated dimension. It includes board structure, diversity, board independence, compensation systems, compliance programs, balance sheet quality, tax transparency and lobbying practices. Without clean governance, every environmental or social assessment collapses.

SFDR-PAI Indicator 10 asks about violations of the UN Global Compact and OECD Guidelines. Indicator 11 aims at the existence of a procedure to monitor these violations. Indicator 13 records gender diversity on the board. These three data points are non-negotiable, they are mandatory fields.

The German Corporate Governance Code (DCGK) provides the frame of reference for DAX companies. In the case of portfolio companies that are not listed on the stock exchange, the investor is responsible for anchoring minimum standards in the investment agreement. Compliance clauses, whistleblower mechanisms according to HinSchG and anti-corruption programs according to ISO 37001 are common vehicles.

Tax transparency has become a visible ESG criterion since GRI 207 (Tax). Public country-by-country reporting according to EU Directive 2021/2101 will make the situation worse from fiscal year 2024. Anyone who acts in a non-transparent manner will lose Article 8 eligibility.

CIVAC provides the reporting line from the Compliance Officer in the investment to the investment committee. Escalations are logged with a time stamp, decision and resubmission.

Governance maturity is the most reliable predictor of long-term performance. Anyone who keeps the engagement log can prove the value contribution to LPs instead of just making claims.

In practice there are four dominant selection logics that can be combined. Negative screening (exclusion) excludes sectors or companies across the board, such as tobacco, cluster munitions, coal, above threshold values. The Swiss industry agreement of the SVVK-ASIR offers a widely cited reference list.

Best-in-Class selects the ESG-strongest companies from each sector, often based on MSCI, Sustainalytics or ISS-ESG ratings. Advantage: Sector balance is maintained. Disadvantage: Sector bias in the rating methodology comes through. The methodology must be openly documented.

Impact investing aims to make a measurable positive contribution, for example along the UN Sustainable Development Goals or via the GIIN's IRIS+ indicator system. Article 9 products according to SFDR must contribute to this logic, otherwise they will not pass BaFin's review.

Commitment and the exercise of voting rights connect the other three strategies. Anyone who makes activism credible documents voting behaviour in accordance with SRD II (Directive 2017/828) and presents an engagement policy in accordance with the EFAMA Stewardship Code. The auditor calls, the evidence is ready.

CIVAC models the four logics in the workspace as workflow modules. Threshold values, exclusion lists, engagement triggers and escalation rules are configured and versioned in an audit-proof manner.

Which logic dominates depends on the investment goal. It is important that the choice is stated in the investment prospectus and remains visible in the portfolio monitoring. Discrepancies between the prospectus and practice are the most common BaFin issue.

The SFDR-RTS (delegated VO 2022/1288) specifies the data obligations. Appendix I, Table 1 lists 14 mandatory principal adverse impact indicators for companies, Table 2 and 3 additional optional ones. Annex II describes the pre-contractual template, Annex III describes the periodic reporting template.

The mandatory indicators range from GHG emissions to energy intensity, biodiversity sensitivity, water emissions, hazardous waste, UNGC violations to board gender diversity and engagement in controversial weapons. Without this data, there is no SFDR reporting.

ESG data providers such as MSCI, Sustainalytics, ISS ESG, Refinitiv and Moody's ESG provide raw data of varying quality. The ESMA investigation from June 2022 shows significant methodological divergence. Anyone who uses more than one provider must document the mapping rules.

Data gaps are allowed, a lack of transparency is not. The SFDR templates require explicit information about estimation methods, coverage quotas and data origin. Audit-proof, documented, Art. 11-proof.

CIVAC provides the audit templates for data management, provider onboarding and methodology versioning. The chain of documents from the raw date to the periodic report remains traceable in the workspace.

If you only consolidate the PAI indicators annually instead of quarterly, you risk reactive reporting. Proactive monitoring uncovers deteriorations in good time before they become negatively noticeable in the periodic report.

BaFin has expanded its focus on sustainability disclosures since the publication of the MaRisk amendment 2023 and the information sheet on dealing with sustainability risks (December 2019, continuously updated). In addition, there are the ESMA guidelines on fund names from May 2024.

The ESMA fund name guidelines require that funds with an ESG or sustainability designation in their name align at least 80% of their investments accordingly and comply with exclusion criteria. Existing funds had to convert or change their name by May 2025. Anyone who has failed to do this risks being approved for distribution.

Greenwashing attacks typically go like this: complaint from an investor or NGO, comparison of prospectus and semi-annual report, threshold comparison, request to comment within three weeks. The clock starts on awareness.

The most common errors are unclear threshold definitions, lack of evidence chain between marketing material and investment process, as well as inconsistent PAI reporting between website, KID and periodic report. The appointment certificate, signed, filed, verifiable.

An external ESG representative role as an officer-as-a-service covers consistency checks before publication. CIVAC offers the compliance platform and officer-as-a-service in one hand.

If you systematize the consistency check, you avoid reactive damage limitation. BaFin cover letters tie up board time that is missing in the investment process.

A verifiable ESG investment process has six building blocks: investment policy with clear definitions, data architecture with sources and methodology, selection and exclusion rules with threshold values, engagement and voting policy, periodic reporting and governance over changes.

The investment policy belongs in the prospectus. This is concretized in an internal ESG policy, which is approved and versioned annually by the investment committee. The version status and justification for changes must remain comprehensible in the audit.

The data architecture documents providers, mapping, estimation procedures and coverage. It is maintained at least annually and immediately if you change provider. Document chain: raw date, calculation, threshold application, reporting.

The selection logic is mapped as a workflow in the system, not as an Excel list. Threshold violations trigger escalations, which are logged with a time stamp and decision. Engagement cases are handled via tickets with a deadline and person responsible.

Periodic reports according to SFDR Annex III must be derivable from the system and not compiled from Powerpoint. The ESG officer is responsible for the consistency of the investment process and reporting.

Governance over changes means: who changed what, when, and with what reasons. In the CIVAC workspace this is done via audit logs, versioning and audit-proof storage in the EU data residence.

CIVAC is a compliance platform and officer-as-a-service for ESG, data protection, IT security and 22 other officer roles. For asset managers and family offices this means: SFDR classification, PAI reporting, engagement protocol and audit templates are in one system.

Licence the workspace for your internal representatives, or have our representatives order it. Both models share the same data structure: 93 controls according to ISO/IEC 27001:2022, 490 ready-to-use audit templates, appointment certificate, reporting line, EU data residency.

In the ESG context, we specifically deliver: SFDR classification workflow according to Articles 6, 8, 9; PAI indicator mapping according to RTS Annex I; Taxonomy quota calculation with DNSH check; engagement and voting tracker; Periodic report templates according to Appendix III.

The CIVAC SLA is two working days for ordering and onboarding, instead of the classic two to six weeks. The clock starts on awareness. The appointment certificate, signed, filed, verifiable.

Anyone who sets up ESG investment criteria today or makes an existing process audit-proof should start with a gap analysis. We map your existing process against SFDR, taxonomy and CSRD obligations and provide a list of measures with effort and deadline.

Turn reading into a mandate. Write to info@civac.de or use the contact form on civac.de. The gap analysis includes investment policy, data architecture and reporting templates and forms the basis for further development.