Understanding Nordea ESG Stars: What the rating means for companies with ESG obligations

Nordea Asset Management has been awarding the internal label ESG Stars since 2011 for funds that are managed according to in-house ESG criteria in addition to the SFDR classification. With the EU Disclosure Regulation (SFDR) coming into force on March 10, 2021 and the Corporate Sustainability Reporting Directive (CSRD) from fiscal year 2024, the Stars label is no longer just a marketing signal, but an evaluation element that portfolio companies and suppliers must address in regular data rounds. The inquiries from a Stars fund are usually deeper and more consistent than the standard industry questionnaire and are often addressed directly to management or the supervisory board. Anyone who is obliged to deliver must keep the data sources stable in the long term.

This article explains what Nordea ESG Stars is technically, how the label relates to SFDR Article 8 and Article 9, which ESG data is typically requested and what role an ESG/sustainability officer plays in the company. You can see how CSRD, LkSG and taxonomy regulation data flow together, how the reporting line is signed, filed and verifiably documented as an appointment certificate and how CIVAC, as a compliance platform and officer-as-a-service, answers recurring investor and supplier questions in an audit-proof manner without the finance department having to reassess each request individually. The article is aimed at management, ESG managers and financial managers in medium-sized companies and corporations.

Nordea ESG Stars is not an external rating like MSCI ESG or Sustainalytics, but an internal award from Nordea Asset Management for actively managed funds. The Stars label identifies funds that, in addition to their SFDR classification according to SFDR Art. 8 or Art. 9, apply in-depth ESG integration, including engagement, voting rights and exclusion of certain sectors. Nordea publishes the methodology in annual reports and compares it with the Principles for Responsible Investment (PRI), to which Nordea has been a member since 2007. The internal model is responsible for the Responsible Investment Team and is integrated into the investment process. The Stars status can also be revoked if there are no engagement results or if new ESG risks are not addressed in the portfolio.

The label is relevant for a company if a Nordea Stars fund holds shares or inquires as an investor. In this case, the company's ESG data is included in the stars scoring. Nordea queries the data via established platforms, including CDP, MSCI data feeds and direct investor questionnaires. The data ends up in the internal model and influences engagement priorities, hold, sell or reduce decisions as well as the annual reporting to fund investors. The data requests are usually annual and are repeated as necessary in the event of material incidents.

Anyone looking for the label is usually looking for two answers: What does Nordea check and what obligations does this derive from this for your own company? The first answer lies in the combination of SFDR requirements, EU Taxonomy Regulation and Nordea's in-house exclusion list. The second answer lies in your own ESG data structure, which an ESG/sustainability officer builds and maintains. CIVAC maps both sides in one workspace, so that investor questionnaires, CSRD reports and LkSG risk analysis are served from the same data source.

The SFDR classifies funds into three levels. Article 6 covers funds without an ESG focus with disclosure of sustainability risks. Article 8 covers funds that promote ESG characteristics without making sustainable investments their main objective. Article 9 covers funds with a sustainable investment objective within the meaning of Article 2 No. 17 SFDR. Nordea ESG Stars builds on this classification and awards the label to funds that operate above the minimum requirements of their SFDR level. The review is carried out internally based on a multi-level catalogue of criteria with exclusions, preference criteria and engagement indicators, the weighting of which varies per asset class and is recalibrated annually by a Nordea governance committee.

In practical terms, this means: A stars fund in Article 8 has stricter exclusions and more engagement activity than another Article 8 fund from the same house. A Stars Fund in Article 9 pursues an explicit sustainability goal and must demonstrate the contribution to the goal logic for each position. For an invested company this means: The data requests from a Stars fund go deeper than the usual industry standard and affect both the quantitative data level (Scope 1, 2 and sector-relevant Scope 3 categories according to the GHG protocol, energy intensity, water consumption, share of renewable energies) as well as the qualitative level (supply chain governance, human rights due diligence processes, anti-corruption, Whistleblower mechanisms).

For medium-sized businesses this means double work if the data is not managed centrally. CIVAC manages them centrally. The workspace holds the ESRS data points, maps them to SFDR Annex II indicators and to typical investor questionnaires, so that the same numbers support the annual CSRD reporting and the Nordea data request equally. The methodology for each key figure is version-managed in the workspace, so that adjustments remain traceable over several reporting years and auditors do not have to require a separate reconstruction.

The specific data fields of a Nordea Stars questionnaire vary by fund and industry, but follow stable patterns. In the environmental area (E), these are greenhouse gas emissions according to GHG Protocol Scope 1, 2 and sector-relevant Scope 3 categories, energy intensity per million in sales, share of renewable energies in total consumption, water use in water-scarce regions according to Aqueduct classification and share of taxonomy-compliant sales, CapEx and OpEx according to EU Regulation 2020/852. In addition, there are climate targets, ideally validated by the Science Based Targets initiative (SBTi), as well as reporting on physical and transitory climate risks.

In the social sector (S), these include diversity data at board, management and workforce level, gender pay gap, work accidents (lost-time injury rate, LTIR), supplier audits under LkSG, human rights complaint mechanisms, training hours per employee and collective bargaining agreement. In the governance area (G) these are board composition and independence, remuneration structure and ESG coupling, whistleblower reports according to HinSchG, corruption cases according to Section 299 StGB, data protection incidents according to Art. 33 GDPR and ISO certificates such as ISO/IEC 27001:2022 or ISO 14001. In the group, data collection is additionally segmented according to subsidiaries and business areas, so that the answer remains consolidated and can be linked to the management report. Nordea generally accepts the calculation methods used within the group, provided they are transparently documented.

Nordea compares this data with public sources such as CSRD management reports, CDP responses and SBTi commitments. Inconsistencies are asked for in engagement; multiple inconsistencies lower the Stars Score. Anyone who manages the data via Excel and SharePoint risks version differences between the management report, investor questionnaire and CDP response. CIVAC keeps the data in one source and exports it in different formats. The ESG/Sustainability Officer role is equipped with 490 audit templates in the workspace that document the data origin, calculation method and responsible person for each key figure. Others keep ESG data like a filing cabinet. We run them like software.

The European Sustainability Reporting Standards (ESRS) have been binding for capital market-oriented large companies since the 2024 financial year, for other large companies from 2025 and for listed SMEs with an opt-out option from 2026. The ESRS structure ESG reporting into two cross-sectional standards (ESRS 1 and 2), five environmental standards (ESRS E1 to E5), four social standards (ESRS S1 to S4) and one governance standard (ESRS G1). Each standard contains mandatory data points and materiality-dependent data points that are identified via the double materiality analysis. The standards are made binding by delegated legal acts of the EU Commission and are further developed technically via EFRAG.

The ESRS data points are methodically closely linked to the SFDR Annex II indicators and to typical investor questionnaires. Experience shows that anyone who sets up ESRS properly will provide 80 to 90 percent of the Nordea Stars questions from the same database. In practical terms, this means: The double materiality analysis according to ESRS 1 identifies the topics, the data model in ESRS 2 structures the survey, and the thematic standards provide the key figures. Anyone who has the report certified can also use the investor questionnaire from the same data without having to process the sources separately. This significantly reduces the effort for recurring investor communication because data maintenance takes place once a year as part of the management reporting period and all subsequent evaluations depend on it.

CIVAC stores the ESRS data points as mandatory fields in the workspace and references the associated legal standard and the calculation method for each data point. This creates a uniform database from which the management report, SFDR appendix, investor questionnaire and LkSG risk analysis can be used in parallel, without the finance department and sustainability team having to collect the same number twice. The auditor calls, the evidence is ready. The data origin is documented for each key figure with the responsible person, key date and calculation method and is therefore also prepared for limited and later reasonable assurance audits.

The Nordea Stars label itself does not create any direct legal obligation; it is an internal investor tool. The obligations arise from the underlying legal framework. First: CSRD and ESRS require affected companies to submit an annual sustainability declaration in the management report, checked according to Limited Assurance from the 2024 financial year and from later Reasonable Assurance. The audit is usually carried out by the same auditor who also audits the annual financial statements. Second: SFDR Articles 8 and 9 as well as the RTS require the fund to publish key impairment indicators (PAI), which the invested company must provide from its database.

Third: The EU Taxonomy Regulation 2020/852 requires reporting companies to report sales share, CapEx and OpEx according to taxonomy capability and taxonomy conformity classify. Fourth: The Supply Chain Due Diligence Act (LkSG) requires companies with 1,000 employees or more (since January 1, 2024) to carry out risk analysis, preventative measures and submit an annual report to the BAFA. Fifth: From 2027, the EU amending act CSDDD will gradually introduce more extensive due diligence obligations in the value chain, including climate transformation plans and complaint mechanisms along the value chain, and will introduce a civil liability dimension for breaches of the duty of care.

These five pillars are the source of the obligations, not the stars label. The label simply makes the obligations visible and sensitive to demand. Anyone who has appointed an ESG representative and built the data model on ESRS will answer Stars inquiries using the existing source. If you don't have that, you start every request from the beginning. CIVAC offers both ways in a dual model: Licence the workspace for your internal representatives, or have our representatives order it. The choice depends on the maturity of the existing ESG area and the number of investor and auditor channels to be served.

The ESG/sustainability officer is not a legally required role in most German companies, but practically becomes the central point of contact as soon as CSRD obligations apply or a stars fund sends inquiries. The appointment is made via an appointment certificate with a management signature, a clear reporting line to the board or management, and a defined mandate: data model, materiality analysis, annual report, investor and auditor communication. In the group, the order adds a distinction between the complaint bodies according to the LkSG and the compliance officer, so that responsibilities and escalation channels are clear.

Operationally, the officer translates the Stars data request into the internal sources. Example: A Nordea query about the proportion of taxonomy-compliant sales per business area is mapped to the ESRS-2 data points and to the internal ERP fields in the workspace. The answer is signed with the methodology, deadline and person responsible and stored in the audit trail. If asked in the following year, the answer is reproducible and comparable. The appointment certificate, signed, filed, verifiable. This applies analogously to LkSG inquiries, CDP questionnaires and SBTi reports as well as inquiries from insurance underwriting and rating updates from the major ESG data providers. This creates a significant increase in efficiency in annual ESG data maintenance.

In the dual model, the company can either appoint an internal employee as an ESG officer and licence the CIVAC workspace, or appoint an external CIVAC officer. In both cases the contents are the same; the difference lies in the sponsorship of the mandate. Medium-sized companies without CSRD experience usually choose the external representative first and take on the role internally after two years if the data model is stable. Large companies with their own sustainability department licence the workspace and use it as a central source for all external channels. In both cases, the reporting line to the management is documented and the mandate can be verified via the appointment certificate.

Nordea and other asset managers are increasingly checking ESG data for consistency across channels. If the greenhouse gas emissions show a different number in the management report than in the CDP questionnaire, the SBTi commitment and the response to Nordea, this is a consistency problem that is addressed in the commitment. If repeated several times, the stars score drops and the fund reduces its position or changes its engagement strategy. The auditors will attest the ESG data with Limited Assurance from fiscal year 2024 and later with Reasonable Assurance; Here too, the consistency across channels counts. Audit findings in this area regularly lead to clues in the audit report and thus to additional inquiries from the supervisory board.

The cause of many consistency problems lies in the lack of a single source of truth. Excel and SharePoint-based solutions create versions that move into different channels and diverge. A central ESG workspace with versioning, audit trail and methodology documentation per data point prevents this. The 490 CIVAC audit templates cover the recurring ESG audit categories, from Scope 1/2/3 calculation to supplier risk assessment to whistleblower statistics according to HinSchG, and contain references to relevant legal standards, so that each audit category is provided with a normative basis and adjustments to new standards are easy to implement.

The separation of data level and methodology level helps in the audit process. The CIVAC workspace contains the data points with source, calculation method, person responsible and key date; the methodology documents are next to it and are version-controlled. This means that changes are traceable and auditors accept the data statuses for comparisons over several years. Others run compliance like a filing cabinet. We run it like software. Anyone who has ever worked with a central workspace rarely returns to channel-specific table blocks because every change would otherwise have to be made manually in several sheets.

ESG doesn't just stop at the management report. Three related duties intertwine. Firstly, the Supply Chain Due Diligence Act: Since January 1, 2024, companies with 1,000 or more employees have been obliged to identify, address and report annually on human rights and environmental risks in their own business activities and in the direct supply chain. The LkSG risk analysis directly provides the input data for ESRS S2 (employees in the value chain) and ESRS G1 (corporate policy and supplier management) as well as for related Stars questions on supplier audits. The obligation to report to BAFA is associated with penalties in the event of delay and the annual report is publicly accessible, which means that investors like Nordea can make a direct cross-comparison between supplier management and the ESG report.

Secondly, the EU AI Act: Applicable gradually since August 1st, 2024, fully applicable from August 2nd, 2026. Fundamental rights impact assessments, risk management systems and conformity assessments are required for ESG-relevant high-risk AI applications such as automated personnel selection or creditworthiness assessment. These obligations address the ESG governance dimension because they must make decision-making chains transparent and auditable. Investors with stars labels have been asking more questions about AI governance since 2025, especially from banks, insurers and HR tech providers, where model risks and potential for discrimination are in the foreground. The conformity assessment is kept as a separate file in the workspace.

Thirdly, whistleblower protection: HinSchG since July 2, 2023 and in full since December 17, 2023 for companies with 50 or more employees. Whistleblower reports on ESG topics (environmental violations, discrimination, corruption) are a recognised ESG data point and are included in ESRS G1. In the CIVAC workspace, LkSG risk analysis, AI Act conformity assessment, HinSchG reports and ESRS data points are linked together, so that an LkSG report via the supply chain automatically flows into the ESG data status and the Nordea response. The separation of reporting lines is maintained because each role receives its own evaluations.

CIVAC is the German compliance platform and officer-as-a-service with EU data residency, 25 officer roles, 93 ISO/IEC 27001:2022 controls and 490 ready-to-use audit templates. For the topic of Nordea ESG Stars, this practically means: A single data model serves SFDR Annex II, ESRS data points, investor questionnaires and LkSG risk analysis. The reporting line to management is stored in the workspace, every change is version-controlled, every data point has a person responsible. An additional interface to the supply chain representative ensures that LkSG data flows into the ESG report without double collection.

The dual model is the point: Licence the workspace for your internal representatives, or have our representatives order it. Medium-sized companies without their own ESG department usually commission an external ESG officer via CIVAC and hand the mandate over internally after two to three years. Large companies with their own ESG team licence the workspace and use it as a central source for management reports, investor communication and supplier management. The switching cost between the models is low because the data model remains constant and appointment certificates can be switched without reconstruction. A later expansion to include additional representative roles can also be done from the same workspace without having to rebuild the ESG database.

A quick step to get started: Send a short message to info@civac.de or use the contact form on civac.de stating the number of employees, the CSRD reporting requirement and the investor structure. CIVAC will respond within two business days with a draft of the engagement letter and an appointment certificate for review. The first monthly report from the ESG officer to the management follows within 30 days of the kickoff. The coordination with the existing ESG data statuses takes place in the same period, so that ongoing investor inquiries can be answered without interruption. Turn reading into an assignment.