Vanguard Global All Cap ESG: What index exclusions mean for your corporate ESG

The Vanguard ESG Global All Cap UCITS ETF follows the FTSE Global All Cap Choice Index, which systematically excludes certain sectors, UN Global Compact violations and controversial weapons. Since the 2024 financial year, capital market-oriented companies with 500 or more employees have also been required to report in accordance with the CSRD (Directive 2022/2464), from 2025 large companies with 250 or more employees and from 2026 expanded to include capital market-oriented SMEs. If you want to stay in an ESG index fund, you have to provide your sustainability data in exactly the form that the index providers, rating agencies and asset managers process. The interface between index criteria and internal compliance is not a side issue, but a tough capital market requirement with measurable consequences for financing costs and the equity base.

This article explains which exclusion criteria typical ESG indices such as the Vanguard ESG Global All Cap apply, how these criteria are interlinked with the European obligations from CSRD, ESRS and EU taxonomy and what operational response an ESG officer in the company gives to this. You will find out which data points need to be collected, how the reporting flow is set up, which typical reasons for exclusion dominate in practice and what role the sustainability officer's appointment certificate plays in this. CIVAC offers a compliance platform and officer-as-a-service with workspace, audit templates and reporting line that translates these capital market requirements into operational ESG management and interlinks them with auditing.

The Vanguard ESG Global All Cap UCITS ETF tracks the FTSE Global All Cap Choice Index. This index starts from the FTSE Global All Cap universe and then removes companies using clearly defined filters. The categories include industry exclusions for non-renewable energy such as coal, oil and gas, tobacco, gambling, adult entertainment and controversial weapons (cluster munitions, anti-personnel mines, biological and chemical weapons). Secondly, companies that demonstrably violate the ten principles of the UN Global Compact are excluded. Third, the index removes companies that exceed defined thresholds for revenue shares from the mentioned industries, such as 5 percent for coal production or 10 percent for conventional coal-fired power generation.

The criteria are not set by Vanguard, but by the index provider FTSE Russell and are reviewed at least annually. The database comes from several sources: publicly available annual reports, sustainability reports according to CSRD/ESRS, data from Sustainalytics, MSCI ESG, ISS ESG as well as specialised data providers such as the Norges Bank Investment Management Council on Ethics. A company that is negatively noted in one of these databases has a concrete index risk. The consequence of an exclusion is not just a reputation problem, but a measurable withdrawal of capital, because ESG index funds now manage several trillion euros and passive investors have to sell in reverse as soon as a stock leaves the index.

If you want to avoid this, you have to actively control the data points yourself. CIVAC supports this through a compliance platform and officer-as-a-service with a clear reporting line. The external ESG/sustainability officer takes over the interface between internal data, external rating providers and management. Others run compliance like a filing cabinet. We run it like software.

The Corporate Sustainability Reporting Directive (CSRD, Directive 2022/2464) has been gradually coming into force since 2024. It requires capital market-oriented companies with 500 or more employees to submit a sustainability report in accordance with the European Sustainability Reporting Standards (ESRS) from the 2024 financial year. From the 2025 financial year, the obligation will be extended to large companies with more than 250 employees, sales revenues of over 50 million euros or a balance sheet total of over 25 million euros. From 2026, the CSRD will also cover capital market-oriented SMEs. The reports are submitted in the uniform electronic reporting format (ESEF), provided with XBRL tagging and audited by an auditor with sufficient assurance according to ISAE 3000 or a comparable standard.

The ESRS structure the reporting obligations into ten thematic standards (ESRS E1 to E5 for environment, ESRS S1 to S4 for social, ESRS G1 for governance) as well as two cross-sectional standards ESRS 1 and ESRS 2. These standards are the most important data source from which index providers and rating agencies derive their input. Anyone who reports here incompletely, with qualitative notes instead of key figures or without auditing signals data risks that are noted as a negative indicator in ESG ratings. The EU taxonomy complements the ESRS with hard classification criteria for ecologically sustainable economic activities and sets six binding environmental goals.

For operational implementation, this means: data collection must be systematic, verifiable and reproducible. Tables in Excel and oral input from specialist departments are neither sufficient for the audit nor for the subsequent index assessment. A compliance officer without ESG specialization cannot take on this task alone because the subject requires their own methodological knowledge, their own materiality analyses and their own KPI definitions. Licence the workspace for your internal representatives, or have our representatives order it.

The UN Global Compact bundles ten principles in four areas: human rights, labour standards, environmental protection and anti-corruption. These principles are based on the Universal Declaration of Human Rights, the Core Labour Standards of the International Labour Organisation, the Rio Declaration on Environment and Development and the UN Convention against Corruption. A proven serious violation leads to exclusion in almost all major ESG indices, usually without a short-term possibility of reinstatement, because index providers require a multi-year observation phase with documented improvement measures before re-entry is examined.

What counts as a violation is defined by data providers such as RepRisk, Sustainalytics, MSCI ESG or ISS ESG. The thresholds are different, but the pattern is similar: several reliable sources, usually investigative media, court decisions, NGO reports or government measures, combine to produce a severity score. If this score exceeds a threshold, the company appears on the so-called watch list or exclusion list. Examples from recent years include corruption cases at large corporations, child labour in supply chains, environmental pollution in raw material extraction or discrimination lawsuits with settlement payments above certain thresholds. The methodology is documented for each data provider and is publicly accessible.

Operationally, this means: Supply chain due diligence in accordance with the Supply Chain Due Diligence Act (LkSG) and the EU Corporate Sustainability Due Diligence Directive (CSDDD) is not only a regulatory obligation, but also direct ESG risk management. Anyone who properly appoints the LkSG representative, provides them with an appointment document and integrates them into the ESG reporting flow noticeably reduces the likelihood of an index exclusion. The LkSG officer's appointment certificate is an integral part of this evidence system and should be referenced in the quarterly report to management so that supply chain due diligence is not managed as an isolated duty, but as an ESG rating tool. The appointment certificate, signed, filed, verifiable.

For a company to remain relevant to the index, the ESG officer must continuously collect a specific set of data points and file them in an auditable reporting line. In the environmental area (ESRS E1 to E5), these are in particular the Scope 1, Scope 2 and Scope 3 greenhouse gas emissions according to the Greenhouse Gas Protocol, energy consumption by energy source and location, water consumption in stressed areas, waste generation, the circular economy rate and the biodiversity impact. These data points are not voluntary; according to the ESRS, they are mandatory to be provided in the specified granularity, including comparative values ​​from previous periods and, if necessary, a path map towards the 1.5 degree target.

In the social sector (ESRS S1 to S4), data is collected on the company's own employees, on employees in the value chain, on affected communities and on end users. Specifically, this means: gender pay gap, accident rates per 1 million working hours, training hours per employee, proportion of suppliers with social audits and number and type of complaints in the internal reporting office according to HinSchG. In the governance area (ESRS G1), mandatory information includes the proportion of independent supervisory boards, whistleblower statistics with processing times, corruption cases, political contributions and lobbying expenditure.

These data points must be documented with responsibilities, collection methods, data sources and review periods. CIVAC maps this in the workspace and provides 490 ready-to-use audit templates with which the ESG officer builds the data points without researching every ESRS detail individually. Anyone who chooses an external appointment will receive the ESG representative within 2 working days instead of the traditional 2 to 6 weeks, including a documented reporting line to management and an initial inventory of the existing data points. The auditor calls, the evidence is ready. without any data having to be collected during the audit.

The double materiality analysis according to ESRS 1 is the methodological gateway to the entire CSRD reporting. It distinguishes between the inside-out perspective (what impact the company has on the environment and society) and the outside-in perspective (which sustainability issues are financially material for the company). Both dimensions need to be collected, documented and supported by stakeholder consultation. ESG indices and rating agencies use this analysis to assess reporting quality and to check whether the company is addressing the right topics or just listing generic standard topics that do not fit the business.

A robust materiality analysis typically covers between 25 and 50 sustainability-related topics, weights them according to impact severity, probability of occurrence, reversibility and financial relevance and involves at least five stakeholder groups a: Investors, employees, customers, suppliers and affected communities, supplemented by NGO representatives if thematically relevant. Proven methods include structured interviews, anonymous online surveys, documented industry benchmarks and moderated stakeholder workshops. The results are presented in a materiality matrix and countersigned by management, with the date and justification for the selection of the material topics.

If the materiality analysis is carried out superficially or without documented stakeholder involvement, this is usually the first point that the auditor and later the rating agencies criticize. CIVAC offers a structured template for the materiality analysis in the workspace, including stakeholder mapping, KPI storage and documentation of the evaluation methodology. The ESG officer carries out the analysis as the responsible body, the management signs off the results and the reporting line keeps the documentation in an audit-proof manner. The materiality analysis must be updated at least annually or when there are significant changes to business activities, such as takeovers or market entries. The appointment certificate, signed, filed, verifiable.

In recent years, index providers have significantly tightened their exclusion criteria. Common reasons for exclusion from indices such as the Vanguard ESG Global All Cap are, firstly, documented violations of human rights or labour standards, such as forced labour in Tier 2 suppliers or unacceptable safety conditions in production facilities. Secondly, serious environmental incidents such as tanker accidents, pipeline leaks or unauthorized discharges into bodies of water. Thirdly, cases of corruption with official measures such as fines, contract exclusions or supervisory procedures. Fourth, non-disclosable business practices in high-risk countries. Fifth, controversial product portfolios that exceed threshold values.

Sixth and particularly underestimated: insufficient data transparency. If a company does not report its Scope 3 emissions, omits key ESRS data points without justification or provides qualitative notes without key figures, data providers interpret this conservatively and usually assign the worst possible value (worst case imputation). This approach often costs companies their index membership without there even being a substantive violation. The gap is automatically filled in an unfavorable way, without the company concerned being heard in advance or informed about the specific valuation.

Avoidance can be achieved through three building blocks: Firstly, complete ESRS reporting coordinated with the auditor. Secondly, active management of data provider profiles (Sustainalytics, MSCI ESG, ISS ESG), including annual data update dates and correction of incorrect entries. Thirdly, active reputation monitoring in order to identify watch list notices early and take countermeasures before the index decision is made. The ESG officer coordinates these three building blocks and brings them together via the workspace. You can find out more about the specific design in the CIVAC FAQ. A quarterly review of the data provider profiles is part of the ESG officer's mandatory calendar, supplemented by an annual full review in the weeks before the index rebalancing. Audit-proof, documented, ESRS-proof.

The EU taxonomy (Regulation (EU) 2020/852) classifies economic activities as ecologically sustainable based on six environmental objectives: climate protection, adaptation to climate change, water, circular economy, pollution prevention and biodiversity. An activity is considered taxonomy-compliant if it makes a significant contribution to one of these goals, does not significantly impair any other goal (Do No Significant Harm) and meets minimum standards for social aspects (Minimum Safeguards). Companies required to report must disclose separately the proportion of their taxonomy-compliant sales, investments (CapEx) and operating expenses (OpEx), supplemented by the exact activity codes according to the delegated regulation.

This is relevant for index allocation because a growing number of Article 9 funds according to SFDR must necessarily have a minimum proportion of taxonomy-compliant investments. Companies with a high taxonomy-compliant proportion are particularly attractive for these funds, while companies with a low proportion lose corresponding investor groups. The range is considerable: energy suppliers with a high share of renewables achieve values of over 60 percent, traditional industrial companies often achieve values of less than 5 percent, without the management being able to assess these values without structured analysis.

Operationally, this means that the ESG officer, together with the CFO, maintains a taxonomy activity matrix in which every economic activity is mapped to the taxonomy codes, the DNSH test is documented and the minimum safeguards be documented. This is a technically demanding and labour-intensive task that easily leads to reporting errors without a structured workspace and experienced support. CIVAC provides audit templates, mapping tables and an integrated documentation line that is linked to the workspace and is automatically versioned so that every change remains traceable. Licence the workspace for your internal representatives, or have our representatives order it.

A listed medium-sized company in the specialty chemicals segment with 1,200 employees ended up on Sustainalytics' watch list in 2024 after an investigative media reported on questionable working conditions at a subcontractor in Southeast Asia. A direct exclusion decision by FTSE Russell was imminent within eight weeks; according to internal calculations, the loss in market value would have been significant because several passive ESG index funds would have had to sell in reverse and the share's liquidity would have been severely impacted in the short term. The management mobilized a cross-departmental crisis team from purchasing, legal, communications, investor relations and internal auditing and brought the case directly to the next supervisory board meeting.

The company appointed an external ESG representative via CIVAC within 2 working days. In the following four weeks, the representative carried out a structured immediate program: Firstly, a complete supplier audit of the affected subcontractor with a documented on-site audit. Secondly, the inclusion of additional social clauses in the framework contracts with all Tier 2 suppliers. Thirdly, a written statement to Sustainalytics and MSCI ESG with evidence of the measures taken. Fourthly, a training offensive in purchasing on human rights and supply chain care, with final tests and documented effectiveness testing according to the three levels of coverage, understanding and behaviour.

The watch list entry was canceled after 12 weeks; there was no exclusion from the index. The ESG officer's appointment certificate, the checked audit reports and all correspondence with the data providers have since been stored in the CIVAC workspace in an audit-proof manner. The quarterly report to management documents the process and follow-up measures for the next 24 months, including the quarterly monitoring appointments at Sustainalytics and MSCI ESG. The appointment certificate, signed, filed, verifiable, verifiable at any time, traceable for several years.

CIVAC bundles compliance platform and officer-as-a-service for ESG in one system. In the workspace you structure the double materiality analysis, the ESRS data points, the EU taxonomy mappings, the supplier audits and the reporting line to management. Audit templates are prepared for the central ESRS topics, the data residency is entirely in the EU, the ISMS is certified according to ISO/IEC 27001:2022 with the full 93 controls. In this way, you simultaneously meet the auditing requirements for data security and the expectations of institutional investors for robust control environments.

If you do not want to appoint an internal ESG officer, need to fill a short-term vacancy or need specific index risk knowledge, use the officer model with an SLA of 2 working days instead of the classic 2 to 6 weeks. The representative brings in experience from other mandates, knows the typical data provider profiles and can, if necessary, specifically address watch list entries. Licence the workspace for your internal representatives, or have our representatives order it. Both paths fulfil the German and European obligations according to CSRD, ESRS and EU taxonomy and are reciprocally convertible during ongoing operations if the organisational situation shifts due to growth or changes in the business model.

If you would like to specifically check how your current ESG data looks in the eyes of an index provider and which gaps should be closed first, arrange a 30-minute conversation with a CIVAC representative. You will receive an initial assessment of materiality analysis, ESRS data points and taxonomy mapping as well as a recommendation as to whether the workspace licence or external ordering would be the better start in your case. Turn reading into an assignment. Write to info@civac.de or use the contact form on civac.de.