Vanguard All Cap ESG: What companies can learn from the screening

The Vanguard ESG Global All Cap UCITS ETF (ISIN IE00BNG8L385) managed around 1.3 billion euros at the end of 2025 and, according to the index rules of the FTSE Global All Cap Choice Index, systematically excludes companies that violate the UN Global Compact Principles or exceed certain thresholds in tobacco, weapons, fossil fuels or nuclear power. The fund is therefore a mirror for treasury, investor relations and ESG managers: What institutional investors classify as uninvestable will sooner or later fail the supplier or customer screening.

This article classifies the Vanguard methodology, translates the criteria into obligations from CSRD, ESRS and EU taxonomy and shows how you as a medium-sized company or corporate subsidiary can manage your own documentation in such a way that it is suitable for an ESG investor CSRD auditors and a bank alike. CIVAC is the compliance platform and officer-as-a-service that operationally carries this documentation.

The ETF tracks the FTSE Global All Cap Choice Index, i.e. around 7,000 companies from 47 industrialized and emerging countries, minus the excluded stocks. The exclusions are made according to clearly defined thresholds, not according to best-in-class logic. This makes the rules transparent and can be documented in court, a feature that is by no means a given in the ESG universe.

Companies that generate more than 5% of their sales from tobacco production, controversial weapons, civilian firearms, adult entertainment, coal mining or oil sands are excluded. In addition, there are violations of the UN Global Compact Principles, which, after verification by Sustainalytics, lead to deletion. The index is rebalanced every six months, in March and September.

In practice, this means: If your parent company, a joint venture partner or a major customer wants to be listed in the index, you must provide documentary evidence of these sales shares. The ESRS E1 (climate change) and ESRS S4 (consumers) require the same data points, albeit at a finer granularity. A common data room for ESG, risk and officer documentation, as created in the ESG Officer Workspace, avoids duplicate surveys.

The methodology therefore favors rule compliance over subjective evaluation. This is compatible with the German compliance culture, which also relies on verifiable reasons for exclusion, from Section 130 OWiG to supply chain care according to LkSG.

Anyone who understands the Vanguard mechanism also understands the audit trail that a CSRD auditor follows through your reporting: thresholds, evidence, evidence for every statement.

The Corporate Sustainability Reporting Directive (CSRD, Directive (EU) 2022/2464) has required large corporations since the 2024 financial year and gradually other companies from 2025 to report in accordance with the European Sustainability Reporting Standards (ESRS). The standards define around 1,144 data points. About 200 of these are mandatory, the rest are subject to double materiality analysis.

Several of these data points directly reflect Vanguard's exclusion logic. ESRS 2 SBM-1 requires the distribution of sales by activity, ESRS E1-1 requires the transition plan for climate-critical activities, ESRS S4-3 documents possible adverse effects on consumers. Anyone who has tobacco, coal or armaments in their portfolio appears to be required to provide information in both worlds.

For medium-sized companies that are not subject to CSRD, the effect is indirect but noticeable. Banks use ESG scores for loan conditions, major customers require ESG declarations during onboarding, insurers ask about climate risks. The Vanguard filter is an early warning system here: What investors mark as exclusion appears 18 months later in the B2B supplier questionnaire.

CIVAC supports this documentation via structured audit templates for ESG data points, an appointment certificate for the ESG officer and a reporting line to management. Licence the workspace for your internal representatives, or have our representatives appoint you.

The index filter becomes a documentation backbone that carries CSRD checks, bank ratings and investor communication at the same time.

The FTSE Choice methodology recognises five main categories. Firstly, tobacco: total exclusion in production, 5% threshold in distribution and supply. Secondly, weapons: complete exclusion for controversial weapons (cluster munitions, anti-personnel mines, biological and chemical weapons, nuclear weapons outside the Nuclear Non-Proliferation Treaty), 5% for civilian firearms.

Thirdly, fossil fuels: exclusion for more than 5% of sales from coal mining or coal-fired power generation and more than 10% from oil sands. Fourth, nuclear energy: exclusion of more than 5% turnover from uranium mining or reactor construction, which particularly affects German and French suppliers differently. Fifth, adult entertainment, also with a 5% threshold.

Each of these data points must be testable. The index providers require segmented sales reports, audited consolidated financial statements or verified third-party sources such as Sustainalytics and ISS ESG. For companies, this means keeping segment reports cleanly according to NACE codes or GICS classification, which without a structured compliance platform quickly ends in Excel sprawl.

In addition, there are UN Global Compact violations: human rights, labour law, the environment, corruption. Anyone who becomes conspicuous here, for example through a judgment according to the LkSG or confirmed child labour in the supply chain, will be thrown out regardless of their share of sales. A court-proof supply chain documentation, for example from the LkSG representative, is the only protection here.

The criteria sound mechanical, but they are. That's exactly why they're auditable, and exactly why you should reflect them in your own compliance architecture.

A Vanguard exclusion is rarely existential, but it signals a loss of liquidity. If a stock falls out of the FTSE Global All Cap Choice Index, passive mandates worth three-digit millions lose demand. Actively managed ESG funds often follow suit with a delay. For IR managers, this is an early indicator of structural valuation discounts.

Additionally, there is the effect on loan conditions. Banks such as ING, Commerzbank and Deutsche Bank are increasingly linking ESG ratings to margin scales in sustainability-linked loans. An MSCI rating downgrade from BBB to BB can cost 5 to 25 basis points depending on the facility. For a 50 million euro loan, that's 25,000 to 125,000 euros per year without any operational changes.

Treasury should therefore proactively check whether its own sales distribution, measured against the Vanguard thresholds, is close to critical values. If the coal share is 4.2%, growth in this segment is a strategic question, not just an operational one. If it is 6%, a sales strategy or reclassification is mandatory.

The auditor calls, the evidence is ready. CIVAC organises exactly this depth of documentation via the workspace logic with appointment certificates, audit templates and reporting lines. ESG is no longer Excel acrobatics, but documented governance.

Anyone who manages ESG data in this way will answer investor questions in hours, not weeks.

Even if your company is not listed and will never appear on the FTSE Global All Cap, the logic will work for you. Corporate customers who want to remain listed in the index pass on their ESG obligations to suppliers. The Supply Chain Due Diligence Act (LkSG) has made this disclosure legally binding in Germany since January 1, 2024 for companies with 1,000 or more employees.

In concrete terms, this means: If you deliver to Siemens, BASF or Volkswagen, you will receive ESG questionnaires with 80 to 250 points. The questionnaires reflect the ESRS data points and thus indirectly the Vanguard criteria. Without a structured response basis, you burn 40 to 80 man-hours per major customer per year, often in the purchasing, IT or HR department, which is neither intended nor trained for this.

The Federal Office for Economic Affairs and Export Control (BAFA) checks the LkSG implementation of the reporting companies, and violations are punished with fines of up to 8 million euros or 2% of the group's turnover. For suppliers, this means: Although they are not formally required to report, they are actually part of the audit chain.

CIVAC offers the audit templates with 37 samples, the appointment certificate for the ESG or supply chain representative and a structured FAQ area for recurring supplier questions. This reduces the response time to questionnaires from weeks to days.

The appointment certificate, signed, filed, verifiable. It is precisely this chain of evidence that runs through every audit.

The EU Taxonomy Regulation (VO (EU) 2020/852) defines six environmental objectives and their technical assessment criteria. Companies subject to CSRD must report the proportion of their sales, CapEx and OpEx that is taxonomy-compliant. Vanguard's exclusion list partially coincides, for example with coal, but not completely with the taxonomy, as the latter also measures positive contribution.

Three documents are crucial for operational practice. Firstly, the materiality analysis according to ESRS 1, double: financial and impact. Secondly, the transition plans according to ESRS E1-1 for climate and ESRS S1 for our own workforce. Thirdly, the taxonomy tables according to Art. 8 Taxonomy Regulation with sales, CapEx and OpEx shares.

These documents will be checked in the CSRD audit process by an auditor with limited assurance, probably with reasonable assurance from the 2028 financial year. This is much closer to an annual audit than to an old-style voluntary sustainability report. Others run compliance like a filing cabinet. We run it like software.

The CIVAC Workspace structures exactly these documents: responsible person, source, deadline, version status, release. Every data point is traceable back to the original source, be it an SAP export, a supplier declaration or an ISO-certified measurement.

This turns the data point universe into a navigable, testable system.

The biggest hurdle in ESG reporting is not the collection of data, but its consistency. Scope 1, Scope 2 and Scope 3 emissions follow the GHG Protocol, but their calculation requires consolidation decisions (equity share, control approach) that must be consistent across all subsidiaries.

Vanguard and comparable index providers are therefore increasingly using verified data from ISS ESG, Sustainalytics or MSCI instead of relying on self-reports. This means: Anyone who formulates carelessly in the initial information will make corrections later under observation. These corrections are expensive, both in terms of ratings and reputation.

Structures help. A central ESG database with clear ownership assignments, such as a responsible representative for each KPI, avoids inconsistent statements. ISO/IEC 27001:2022 prescribes analogous structures for information security, and the operational logic is almost identical: responsibility, evidence, review cycle.

CIVAC consciously uses this parallel. The ISMS framework and ESG governance share the same workspace, the same role models, the same escalation paths. An audit, be it by an auditor, BSI or an ESG investor, sees the same structure in both cases: appointment certificate, reporting line, audit trail.

Audit-proof, documented, § 130 OWiG-proof. This is exactly the condition that management must demonstrate to supervisors, auditors and investors.

If you want to use the Vanguard filter as a leading indicator, you can start with a three-part 90-day plan. Phase 1 (Day 1 to 30): Sales segmentation according to NACE or GICS at subsidiary level, identification of all activities above 3% of group sales in critical categories, creation of an initial threshold report.

Phase 2 (Day 31 to 60): Building or updating the materiality analysis according to ESRS 1, mapping to Vanguard exclusions and taxonomy activities. Appointment of an ESG officer with a documented reporting line to management, ideally with quarterly reporting. Creation of an initial audit template for each essential data point.

Phase 3 (Day 61 to 90): Test run with a real supplier questionnaire or bank rating. Identification of data gaps, readjustment of the document logic, establishment of the reporting line as an operational routine. At the end of the 90 days, the first verifiable ESG reporting should be available in pilot form.

The CIVAC Workspace accompanies this path with 490 audit templates, an appointment certificate based on a sample text, an EU data residence and a reporting line that shows status, deadline and responsibility in seconds. Officer-as-a-Service can optionally take on individual roles completely.

The deadline expires as soon as we become aware of it. Anyone who completes Phase 1 cleanly will have no unpleasant surprises from investor questionnaires or CSRD auditors in the 18-month horizon.

You now have a framework for why the Vanguard ESG Global All Cap is more than an investment product. It is a reflection of the regulatory and investor consensus on what is considered ESG-compliant and what is not. Anyone who uses this mirror as a diagnostic tool recognises their own risks earlier and reacts before the next reporting period.

CIVAC is the compliance platform and officer-as-a-service that translates this diagnostics into operational routine. In the workspace, you manage ESG data points, appointment certificates, audit trails and reporting lines in one place, with EU data residency and an ISMS according to ISO/IEC 27001:2022.

Licence the workspace for your internal representatives, or have our representatives order it. Both models result in the same depth of evidence and the same responsiveness to auditors, banks and investors. The only difference is who fills the role on a daily basis.

If you would like to know how far your company is from the Vanguard threshold and how quickly you can build verifiable ESG documentation, write to info@civac.de or use the contact form on civac.de.

Turn reading into a mandate. We will respond within two working days with a specific proposal.