For procurement directors and CIOs tracking enterprise-level tenders, one reality has been steadily taking hold since 2023 and is accelerating in 2026: an EcoVadis scorecard, a CDP rating, or a MASE certificate are no longer optional distinctions. They have become market access criteria on a par with company registration documents or professional liability insurance. On some industrial supplier panels, the absence of MASE certification physically prevents contractors from working on site. On large-cap RFPs, an EcoVadis score below 45 can trigger automatic delisting.
Yet EcoVadis, CDP and MASE don’t answer the same questions, don’t cover the same scope, and don’t target the same company profiles. Conflating them in an ESG compliance strategy leads to unnecessary spending and regulatory blind spots. This guide analyses them side by side, explains how to integrate them into your procurement ERP, and gives you a roadmap for managing this triple rating without creating yet another data silo.
Why 2026 is the Pivotal Year for ESG Supplier Ratings
Regulatory Pressure Escalates
The CSRD (Corporate Sustainability Reporting Directive) requires companies exceeding two of three regulatory thresholds (250 employees, €50 million in turnover, €25 million in total assets) to publish their sustainability report for the 2025 financial year. Within that report, the ESRS G1-2 standards on responsible sourcing require documented evidence of ESG criteria applied to suppliers: proportion of panel assessed, average scores, improvement plans. An ESG auditor will demand evidence, not statements of intent.
The CSDDD (Corporate Sustainability Due Diligence Directive), in its post-Omnibus version applicable to companies exceeding 5,000 employees and €1.5 billion in global turnover, requires documented mapping of ESG risks across direct suppliers and, for high-risk sectors, indirect ones. The compliance deadline for the first wave is 26 July 2028 (Directive 2024/1760, EUR-Lex): companies in scope don’t have years to spare — they have at most eighteen months to build their data architecture.
For an overview of CSDDD obligations and their impact on procurement IT systems, see our comparison of five ERP approaches for supplier due diligence.
Commercial Pressure Often Precedes the Regulatory
Large enterprises subject to CSRD and CSDDD have been passing their obligations down to suppliers well ahead of legal deadlines. The mechanism is straightforward: a large buyer that must publish the proportion of its panel with an EcoVadis score above 45 has every incentive to push that number up. They therefore embed EcoVadis scores as selection or weighting criteria in their RFPs, and inform suppliers accordingly.
This contractual cascade hits SME suppliers of large industrial, chemical, food processing, and professional services groups first. For these companies, ESG ratings are not a CSR ambition — they are a condition for maintaining revenue.
EcoVadis: The CSR Platform for Global Supply Chains
What EcoVadis Measures and How
EcoVadis is a CSR rating platform that evaluates supplier companies on the basis of a structured questionnaire supported by documentary evidence. The assessment covers 21 criteria across four themes: Environment (emissions, water, biodiversity, materials), Labor & Human Rights (working conditions, health and safety, fundamental rights), Ethics (anti-corruption, lobbying practices, information security) and Sustainable Procurement (practices toward tier-2 suppliers).
Each assessment produces a score out of 100, associated with one of four medals: Bronze (50–57 points), Silver (58–69 points), Gold (70–84 points) or Platinum (85 points and above). The Platinum medal places the supplier in the top percentile of the EcoVadis database within their sector and geography. The score is recalculated annually, and the medal expires after 12 months, which imposes a regular renewal cycle.
Network Scale in 2026
According to the EcoVadis Mission Report 2024, the platform covers:
- More than 150,000 companies rated across 185 countries and 250 industries
- More than 1,300 active buying organisations on the platform
- €2.38 trillion in procurement covered by EcoVadis ratings
- 176 million workers represented in the network
- An improving average score: +12.9 points between a supplier’s initial rating and their current score
These figures illustrate a powerful network effect: a supplier that completes the EcoVadis questionnaire for one buyer can share their scorecard with all their other customers on the platform — without redoing the questionnaire. This is a significant efficiency lever for SMEs working with multiple large enterprises.
ERP and Procurement Platform Integration
EcoVadis has built certified connectors with all major procurement management platforms. The solution is available as an SAP Endorsed App on SAP Store for SAP Ariba (EcoVadis announcement, November 2022): scores and scorecards are displayed directly inside Ariba P2P and SRM workflows, with no manual export. EcoVadis IQ Plus is also natively integrated into Ivalua’s Risk Center.
For teams working with JAGGAER, SAP S/4HANA or Oracle Fusion, API connectors allow the supplier repository to be fed automatically with EcoVadis scores via REST call: the score, medal expiry date, and level (Bronze/Silver/Gold/Platinum) can be stored directly in the supplier record. An alert is automatically triggered 60 days before certificate expiry to kick off the renewal process.
What EcoVadis Doesn’t Cover
EcoVadis ratings rely entirely on documentary evidence (policies, reports, certifications, self-declared data). There is no on-site audit: a supplier can obtain a Gold medal based on well-drafted documents without their actual practices having been verified in the field. For buyers in high-risk sectors (chemicals, nuclear, food processing), EcoVadis must therefore be complemented by on-site audit processes or operational certifications such as MASE or ISO 45001.
CDP: The Global Standard for Carbon Disclosure
CDP’s Logic: Transparency as a Market Lever
CDP (Carbon Disclosure Project) is a non-profit organisation founded in 2000 that administers the world’s most extensive environmental disclosure system. Its logic differs from EcoVadis: the aim is not to rate a supplier for a buyer, but to enable companies to publicly report their environmental impacts to investors and customers. In 2025, more than 23,000 organisations, representing roughly two-thirds of global market capitalisation, disclosed their environmental data through CDP (cdp.net/en/faqs).
Three Questionnaires and the Scoring System
CDP offers three questionnaires: Climate Change (the most widely used), Water, and Forests. Companies respond annually during the disclosure season (typically January to July). Their response is scored on a scale from A (leadership) to D (basic disclosure), with intermediate levels A-, B, B-, C, C-, D- and F (no response).
An A rating means the company measures its emissions rigorously, sets science-aligned reduction targets (SBTi), integrates climate issues into its governance, and actively engages its suppliers and partners. According to CDP, 280 companies appeared on the A List in 2025, having collectively identified USD 218 billion in financial opportunities linked to their environmental actions (cdp.net/en/insights/strengthening-the-chain).
The Supply Chain Programme
The CDP Supply Chain programme allows large buying organisations to ask their suppliers to disclose environmental data via CDP. In 2025, the programme counted more than 200 buying member organisations, engaging more than 45,000 suppliers to share their data (cdp.net/en/supply-chain). Buying members include groups such as L’Oréal, Unilever, Nestlé, Renault and BASF.
For a supplier solicited by a member, CDP disclosure is free and done via the online portal. The request is initiated by the buyer, who defines the scope of questionnaires required. The supplier can then share their response and score with all their buyers present on CDP, following the same logic as EcoVadis.
What CDP Provides That EcoVadis Doesn’t
The structural difference between CDP and EcoVadis is the depth of carbon coverage. A well-completed CDP response includes the company’s Scope 1, 2 and 3 emissions, SBTi-verified reduction targets, its climate transition plan, and water consumption data. These data points are auditable by third parties and recognised within financial reporting frameworks (TCFD, ISSB).
For a buyer that must publish its upstream Scope 3 emissions in a CSRD report, the CDP scores of its suppliers constitute primary data of higher quality than spend-based estimates. This is a strong argument for asking key suppliers — the 20% that account for 80% of indirect emissions — to join the CDP Supply Chain programme.
For a deeper look at upstream Scope 3 data collection in your ERP, see our guide on ERP and upstream Scope 3: how to collect ESG data from your suppliers.
CDP’s Limitations for Industrial Buyers
A CDP score remains an environmental indicator (carbon, water, forests): it does not cover human rights, working conditions or governance. For a complete ESG assessment of the supplier panel, CDP must be combined with EcoVadis or an equivalent ESG platform covering the social pillar.
In addition, CDP scores are public disclosure data: anyone can see whether a supplier scores A or D. This transparency is a strength for investors, but can create commercial tensions if a buyer publicly shares the scoring of their panel.
MASE: The HSE Certification for Contractor Companies
A Different Kind of Framework
MASE (Manuel d’Amélioration Sécurité Santé Environnement — Health, Safety and Environment Improvement Manual) is not an ESG rating in the sense of CSRD or CSDDD. It is an operational certification attesting that a contractor company manages its occupational health, safety and environment (HSE) policy according to a structured framework, audited by accredited bodies.
MASE originated in the petrochemical and energy industries, where contractor interventions on sensitive sites (refineries, power plants, chemical plants, nuclear facilities) create serious accident risks for workers and infrastructure. The client requires MASE certification as a site access condition, in the same way as electrical qualifications or ATEX training. While MASE is primarily used in France, similar requirements exist internationally under ISO 45001, OHSAS 18001, or sector-specific contractor HSE schemes — buyers outside France may find the ERP data architecture described here directly applicable to their equivalent framework.
MASE Network Figures in 2026
The MASE network passed the milestone of 5,000 certified companies in July 2025, with more than 1,000 others in the certification process (mase-asso.fr). The majority of these companies operate in industry, chemicals, energy, construction, and industrial equipment maintenance.
Since 1 January 2026, a single reference framework applies: the 2024 version, more focused on human factors and fieldwork, with revised audit sampling rules in effect from 1 June 2026. A contractor previously certified under the old version had to migrate to the 2024 framework at their most recent renewal audit.
The MASE 2024 Framework: 5 Structural Axes
The 2024 framework structures requirements around five axes:
- Management commitment and involvement: formalised HSE policy, measurable objectives, annual management review.
- Professional skills and qualifications: current authorisations, initial and ongoing training, competency plan.
- Work organisation and preparation: risk analysis before intervention, prevention plan, up-to-date single risk assessment document (DUER).
- Work execution: adherence to on-site procedures, co-activity management, PPE compliance.
- Lessons learned: recording of incidents and near-misses, root cause analysis, measurable corrective action plans.
The certification audit lasts two to three days and includes a site visit at the contractor’s premises and, where possible, an observation at a client site. Certification is valid for three years with an annual surveillance audit.
MASE Integration in ERP and SRM
For a buying organisation managing several hundred contractors, tracking MASE certifications sits in the supplier reference management module of the SRM. The functional requirements are clearly defined:
- “MASE Certification” field in the supplier record: yes/no, certificate number, issue date, expiry date.
- Alert workflow: automatic notification to the procurement manager and contractor 90 days before expiry, order or site access block if the certificate has expired.
- Document storage: the MASE certificate in PDF must be archived in the document management system linked to the supplier record, accessible for a CSDDD audit or inspection.
- Compliance dashboard: proportion of certified contractor panel, active alerts, contractors in renewal.
These features are available natively in the SRM modules of SAP S/4HANA (Supplier Qualification Management), Oracle Fusion Supplier Qualification Management, and Ivalua. For mid-market ERPs (Sage X3, Microsoft Dynamics 365, Infor), a custom field in the supplier record and a configured alert workflow will suffice in most cases.
What MASE Doesn’t Cover
MASE certification does not cover carbon, human rights, governance or responsible purchasing. A MASE-certified contractor may have a poor EcoVadis score or have never responded to a CDP questionnaire. MASE is an HSE prerequisite for access to industrial sites — not a substitute for a full ESG assessment.
Comparison Table: EcoVadis, CDP, MASE
| Criterion | EcoVadis | CDP | MASE |
|---|---|---|---|
| Scope | Full CSR (4 themes) | Environment (carbon, water, forests) | HSE (contractor site safety) |
| Target companies | Suppliers across all sectors | Large companies (listed and unlisted) | Contractors working on industrial sites |
| Who initiates the request | B2B buyers | Investors and Supply Chain buyers | Industrial clients |
| Assessment type | Documentary questionnaire | Self-declared questionnaire | On-site audit by accredited body |
| Frequency | Annual | Annual | 3 years + annual surveillance audit |
| Typical sectors | All | Large companies across all industries | Industry, chemicals, energy, construction |
| ERP integration | SAP Ariba (Endorsed App), Ivalua, JAGGAER | CDP portal, ESG modules (SAP SU, Workiva) | Native SRM module (cert field + alert) |
| Cost borne by | The supplier (respondent) | The disclosing company (free) | The contractor |
| CSRD/CSDDD recognition | High (ESRS G1-2) | High (Scope 3 primary data) | Limited (HSE only, not full ESG) |
Architecting Your ERP to Manage Triple Ratings
One Supplier Repository, Multiple Indicators
The key to an effective ESG supplier strategy is centralising rating data in a single repository, without creating three parallel silos. The operational objective is that a buyer opening a supplier record in the ERP can see at a glance: their EcoVadis rating (score + medal + expiry date), their CDP score (if the supplier is in the Supply Chain programme), and their MASE certification status (if the supplier is a contractor).
To achieve this, the repository must be fed automatically, not manually. EcoVadis exposes a REST API for retrieving a registered supplier’s score, medal, and expiry date. CDP does not offer a direct API for buyers, but Supply Chain data exports can be integrated via ETL. MASE has no API: certificate updates remain manual, with an alert workflow to configure in the SRM.
Segment to Avoid Over-Engineering
Not all suppliers need all three frameworks. A pragmatic segmentation reduces costs and administrative burden:
- High-spend suppliers (top 20% by spend): EcoVadis mandatory, CDP recommended for large enterprise suppliers.
- High-ESG-risk suppliers (high-risk countries, sensitive sectors): EcoVadis mandatory, supplementary on-site audit following CSDDD approach.
- Contractors working on industrial sites: MASE mandatory (site access condition), EcoVadis based on spend.
- Low-impact SME suppliers: a simplified self-assessment questionnaire is sufficient initially.
This segmentation fits within the supplier qualification module of the SRM: each supplier category has a distinct requirements profile, with the corresponding rating fields.
Feeding CSRD Reporting from the SRM
ESG supplier rating data centralised in the SRM becomes the source of truth for CSRD G1-2 indicators (responsible sourcing practices):
- Proportion of supplier panel with a valid EcoVadis assessment
- Spend-weighted average EcoVadis score
- Proportion of spend covered by CDP A-list suppliers (Scope 3 primary data)
- Proportion of contractor panel with a valid MASE certification
These indicators must be extractable from the SRM as a configurable report, ideally with a structured export compatible with CSRD reporting tools (Workiva, IBM OpenPages, SAP Sustainability Performance Management). For a complete Scope 3 reporting architecture in your ERP, see our guide on ERP and upstream Scope 3: how to collect ESG data from your suppliers and our article on supplier risk scoring in the supply chain.
What This Means for Your Procurement Strategy
ESG supplier ratings are changing the nature of supplier management. Historically, a supplier was evaluated on three criteria: quality, lead time, price. ESG ratings add a fourth, systematised criterion, with auditable data and an annual or triennial renewal cycle. For procurement teams, this means two major operational shifts.
The first is moving from supplier selection to supplier development. A buying organisation that requires a minimum EcoVadis score of 45 without supporting its SME suppliers in improving their score risks shrinking its panel without genuinely improving the ESG performance of its supply chain. The most advanced teams in this area have set up co-development programmes: preparation workshops for the EcoVadis questionnaire, sector-specific best practice sharing, access to EcoVadis Academy (more than 20,000 active users according to the 2024 Mission Report).
The second is integrating ESG ratings into sourcing criteria and RFPs. Weighting the EcoVadis score at 10–15% in a tender, including a contractual clause to maintain the score and an ESG audit right in the event of deterioration: practices that were marginal in 2022 are now documented in the responsible procurement charters of large groups subject to CSRD.
For SME suppliers discovering these requirements through their customers, the practical recommendation is to prioritise in this order: MASE first if you are a contractor working on industrial sites (it is a market access condition, not a strategic choice); EcoVadis next if your major customers require it or if you want to differentiate yourself in RFPs; CDP last if you work with large groups committed to reducing their Scope 3 emissions.
To go deeper on supplier management in your ERP, see our complete guide on SRM and supplier management with Ivalua, JAGGAER and SAP Ariba, our article on supplier risk scoring in the supply chain, and our comparison of five ERP approaches for CSDDD due diligence.
