EcoVadis basics: how to start (and not waste your first cycle)

EcoVadis is not a “do we have a policy” test. It is a proof test. The fastest way to derail your first assessment is to treat it as a procurement form to be filled in at the end of the quarter.

If you want a first cycle that builds capability (not a frantic upload marathon), you need three things early: scope clarity, evidence discipline, and a working governance rhythm.

This article covers the basics for any company starting its EcoVadis journey: what is being assessed, what “good evidence” looks like, how scoring works at a high level, and the minimum operating model that prevents avoidable score leakage.

What EcoVadis is assessing (in plain terms)

EcoVadis rates the maturity and effectiveness of your sustainability management system, using documentation and evidence you submit. The scorecard typically sits across four themes:

1. Environment
2. Labour & Human Rights
3. Ethics
4. Sustainable Procurement

The themes and weightings vary by sector, company size, and where you operate. Don’t assume your peer’s scorecard is your scorecard.

What matters for your first cycle is not memorising the framework. It is understanding the logic:

• Policies set intent
• Actions and controls show implementation
• Results show performance and monitoring

When companies say “we do this”, EcoVadis asks, “show me, and show me that it is routine.”

How scoring really gets won or lost

Most first-time submissions underperform for predictable reasons:

1) Evidence is real, but not admissible

You may have strong practices (training, supplier onboarding, audits), but the artefacts are informal, scattered, or not dated. Evidence needs to be:

• Company-specific (not generic templates)
• Dated (recent, and showing continuity where possible)
• Traceable (who approved, who owns, which site/business unit)
• Consistent (policy, procedure, and record don’t contradict each other)

Examples of “admissible” evidence:

• Signed policy with approval date and version control
• Training records with attendance, content outline, and frequency
• Internal audit plan and at least one completed audit report
• Supplier code of conduct plus evidence of supplier communication/acceptance
• KPI dashboards, incident logs, corrective actions, and management review minutes

2) Ownership is unclear

If no one owns each theme end-to-end, you end up with duplicates, gaps, and last-minute rewrites. A clean first cycle needs named owners for:

• Environment (often HSE/EHS)
• Labour & Human Rights (HR + operations)
• Ethics (legal/compliance)
• Sustainable Procurement (procurement + supplier management)
• Evidence management (PMO or a sustainability coordinator)

3) The timing is backwards

Teams often start with the questionnaire and only then ask, “what documents do we have?” Flip it. Build your evidence inventory first, then answer the questions from what you can prove.

Your first 2 weeks: the minimum setup that pays off

You do not need a big programme to start. You need a controlled submission process.

Step 1: Define what “the company” means for this assessment

Clarify the boundary before you upload anything:

• Legal entity/entities included
• Locations and major operational activities
• Headcount and turnover band (EcoVadis uses these)
• Key outsourced activities (and who controls them)

If your documents are group-level but your operations are site-level, you must show how group policies are implemented locally. A policy without implementation proof reads like marketing.

Step 2: Build an evidence register (one source of truth)

Create a simple register (sheet or tracker) with:

• Document title
• Theme mapping (Environment / Labour & HR / Ethics / Sustainable Procurement)
• Control type (policy, procedure, record, KPI, audit, training)
• Owner, approver, and last update date
• Coverage (global vs site-specific)
• Language, if applicable
• Link/file name and version

This register becomes your working system. Without it, you will re-upload the same file three times, miss key gaps, and lose time at the end.

Step 3: Decide your “evidence standard” and enforce it

Pick a standard for documents you will submit and stick to it:

• Every policy has: purpose, scope, responsibilities, commitments, approval, review cycle
• Every procedure has: steps, roles, records produced, and escalation paths
• Every training record has: audience, frequency, content outline, and attendance proof
• Every KPI has: definition, owner, frequency, and data source

You can improve content later. The point is to remove ambiguity.

Step 4: Run a gap scan by theme (fast and honest)

For each theme, ask three questions:

1. Do we have a policy?
2. Do we have a procedure/control?
3. Do we have a record or metric that proves it runs?

Your first cycle goal is to avoid “policy-only” submissions. Even one or two operating records per area can shift how your maturity reads.

What good looks like in each EcoVadis theme (starter kit)

This is not an exhaustive list. It is a practical baseline that most companies can assemble without inventing new systems.

Environment

Minimum credible baseline:

• Environmental policy and responsibilities
• Energy and emissions tracking (even if it starts with electricity and fuel)
• Waste and hazardous waste handling procedures with manifests/records
• Spill/incident logging and corrective action tracking
• Compliance register or legal obligations tracking (where applicable)

Where first-time submissions often miss:

• Evidence of monitoring (monthly/quarterly KPIs)
• Clear boundary for data (which sites, which sources)
• Documented improvement actions (not only measurement)

Labour & Human Rights

Minimum credible baseline:

• Code of conduct covering discrimination, harassment, working hours, and freedom of association
• Health and safety training records and incident reporting workflow
• Grievance mechanism (and evidence it is communicated)
• Child labour/forced labour commitments and onboarding checks
• Workforce training and performance management basics (role-based training helps)

Where first-time submissions often miss:

• Proof of communication to employees and contractors
• Evidence of investigations and corrective actions (even anonymised summaries)
• Supplier/contractor alignment for labour standards

Ethics

Minimum credible baseline:

• Anti-bribery and corruption policy
• Gifts & hospitality and conflicts of interest rules
• Whistleblowing / speak-up channel and awareness evidence
• Third-party due diligence approach (even tiered)
• Disciplinary process for breaches

Where first-time submissions often miss:

• Training completion evidence
• Records of risk assessments or controls testing
• A simple annual declaration (conflicts, gifts, etc.)

Sustainable Procurement

Minimum credible baseline:

• Supplier code of conduct and contract clauses (or purchase terms)
• Supplier onboarding checks (screening, acceptance of requirements)
• A way to segment suppliers (critical/high-risk vs low-risk)
• Evidence of supplier communication (emails, portal screenshot, signed acceptance)
• A plan for supplier assessments or audits (even if limited in year one)

Where first-time submissions often miss:

• Proof that procurement owns sustainability criteria, not only ESG team
• Coverage: which spend categories are in scope
• Closing the loop: corrective actions and follow-up with suppliers

The question you should answer before you hit “submit”

Before submission, run a simple test: if an auditor asked “how do you know this happens routinely?”, could you answer with a dated record, not an explanation?

If the answer is “we do it, but we don’t record it,” don’t panic. Pick the two most material controls per theme and start recording now. Your score improves when your management system is visible.

In EcoVadis, the difference between “we do this” and “we can prove this” is often the difference between a frustrating score and a usable one.

A practical 90-day plan for first-time EcoVadis teams

If you want a simple rhythm:

1. Weeks 1–2: Scope, evidence register, owners, and a fast gap scan
2. Weeks 3–6: Fix evidence hygiene (dating, approval, versioning), create missing procedures, start KPI tracking
3. Weeks 7–10: Run one internal review per theme (does policy match practice?), capture meeting minutes and actions
4. Weeks 11–12: Submission pack review (consistency, duplicates removed, best evidence chosen), final upload

This is not bureaucracy. It is how you turn your first scorecard into a baseline you can improve.

Where to start if you only do three things

If you are resource-constrained, do these:

1. Build the evidence register and assign owners
2. Produce a small set of operating records (training, audits, KPIs) that prove routine
3. Fix your procurement evidence chain (supplier code of conduct plus proof of communication and follow-up)

Your first EcoVadis cycle should create a repeatable system, not a one-time scramble. Start with proof, not promises.