Skip to main content
Sustainability SoftwareIntent: Procurement Framework — 45-Point ESG & Carbon Software RFP ScorecardEditorial State: PUBLISHED (v1)

The 45-Point ESG & Carbon Software RFP Evaluation Scorecard for Procurement and Internal Audit Teams

A weighted 45-point technical RFP scoring matrix and live sandbox proof-of-concept test script for procurement, IT security, and sustainability controllers evaluating ESG and carbon software vendors.

Editorial AuthorityEditorial Review BoardResearch: GetSustainable.ai Research Desk
Fact-Checked & Reviewed ByGetSustainable.ai Editorial Review Board
Published Date2026-10-17
Material Update2026-10-18
Next Scheduled Review2027-04-18

1. Why Slideware Demos Fail Procurement Due Diligence

Editorial & Commercial Independence Disclosure: This RFP evaluation framework is published independently by GetSustainable.ai with zero vendor sponsorship. See our Sustainability Software Directory and Editorial Policy for full transparency disclosures. > > Geographic & Regulatory Applicability (UK / EU / US / UAE): Designed for procurement and internal audit teams validating vendor compliance with UK DESNZ 2024 v1.1, US EPA GHG Emission Factors Hub 2024, Dubai DEWA Sustainability Report 2023, EU CSRD (ESRS E1), IFRS S2, and IAASB ISSA 5000 assurance controls.

During vendor sales demonstrations, pre-populated dashboards conceal whether a platform actually enforces strict factor versioning, non-substitution rules, and cell-level audit logs. Procurement and internal audit teams should require vendors to complete a weighted 45-Point Technical RFP Scorecard backed by a live sandbox validation test.

2. Weighted 45-Point Technical RFP Rubric

Score each criterion from 0 (Unsupported), 1 (Partial / Roadmap / Custom Workaround), to 3 (Native Production Capability Verified in Sandbox) across 15 mandatory capabilities (45 points maximum):

Domain (Max Points)#Mandatory Technical CapabilityVerification Test Method
1. Calculation Engine & Factor Provenance (12 pts)1–4(1) Immutable factor version pinning (DESNZ 2024 v1.1, US EPA 2024); (2) Disaggregated gas splits (CO2, CH4, N2O); (3) Explicit GWP-100 horizon tagging; (4) Strict error on missing country factor (no silent substitution)Submit a test payload with an unsupported country code and verify the engine flags an explicit missing-factor warning
2. Scope 1, 2 & 3 Methodology Depth (9 pts)5–7(5) Parallel Location-Based and Market-Based Scope 2 ledgers; (6) Residual Mix factor support; (7) Hybrid Scope 3 ring-fencing (combining supplier PCFs with residual EEIO without double counting)Run a facility with 60% retired EAC coverage and verify 40% is multiplied by the Residual Mix factor
3. Audit Controls & Assurance Workspace (9 pts)8–10(8) Immutable actor-attributed change log for every cell; (9) Maker-Checker-Approver workflow gating; (10) Read-only external auditor portal exporting full calculation lineageModify a verified utility record and inspect the resulting audit log entry and diff
4. Multi-Framework Reporting (6 pts)11–12(11) Multi-entity consolidation (Equity Share, Financial Control, Operational Control); (12) Native mapping to IFRS S2, EU ESRS E1, and UAE MRV templatesExport the same dataset under Operational Control vs. Financial Control
5. Enterprise IT, ERP & Data Exit (9 pts)13–15(13) SOC 2 Type II / ISO 27001 + SSO/RBAC; (14) REST API & ERP ingestion error queues; (15) Contractual full-fidelity JSON/CSV data + evidence exportTest API export of raw activity inputs, factor snapshots, and linked PDF evidence

3. Sandbox Proof-of-Concept (PoC) Stress Test Script

Before executing a multi-year order form with vendors such as Persefoni, Workiva Sustainability & ESG, or Siemens Building X Energy Manager, provide shortlisted vendors with a standardized 15-row anonymized test dataset containing:

  • 3 UK natural gas and electricity rows (testing DESNZ 2024 v1.1 alignment),
  • 3 US facility electricity and fleet fuel rows (testing US EPA Hub 2024 alignment),
  • 2 Dubai DEWA facility electricity rows with partial I-REC retirement,
  • 1 intentionally unsupported country electricity row (testing whether the vendor silently substitutes a global proxy), and
  • 1 mid-year facility acquisition (testing base-year recalculation controls).

Compare the vendor's sandbox output directly against our Corporate GHG Screening Calculator and Methodology v1.0.0.

Frequently Asked Technical Questions

Schema: FAQPage

Why should procurement teams include an intentionally unsupported country or invalid unit in a software vendor's PoC test dataset?

To test whether the platform silently substitutes a generic global average factor or forces an undocumented unit conversion—practices that cause audit findings during external assurance.

What minimum score on the 45-Point RFP Scorecard should be required for enterprises subject to mandatory CSRD or ISSB assurance?

Enterprises subject to statutory limited or reasonable assurance should require a minimum score of 36 out of 45, with no score below 2 in Domain 1 (Factor Provenance) or Domain 3 (Audit Controls).

Primary Authoritative Sources & Citations (2)

Verified before publication gate
Citation KeyStandard / Publication TitleIssuing BodyYearPrimary Link
[IAASB-ISSA-5000]International Standard on Sustainability Assurance (ISSA) 5000IAASB2024Official Source ↗
[COSO-ICSR-2023]Achieving Effective Internal Control Over Sustainability Reporting (ICSR)COSO2023Official Source ↗

Continue exploring peer-reviewed methodology and compliance playbooks in this topic pillar:

View all Sustainability Software guides →
Deterministic Tools & Independent Procurement

Put This Guidance into Practice

Run a reproducible Scope 1, Scope 2, and Scope 3 screening calculation pinned to official UK DESNZ, US EPA, and UAE DEWA factors, or compare enterprise sustainability software with full commercial independence disclosures.