CSDDD software: tools for supply chain due diligence (2026)
What the Corporate Sustainability Due Diligence Directive asks of in-scope companies, what CSDDD software can and cannot do, and how to shortlist supply chain due diligence tools.
The Corporate Sustainability Due Diligence Directive (CSDDD) requires very large companies to find, prevent and address human rights and environmental harm in their own operations and their supply chains. CSDDD software supports that work: mapping suppliers, screening risk, collecting supplier information, handling complaints and keeping the evidence. It is a different job from CSRD reporting, which is about disclosure. See CSDDD in the glossary and CSDDD providers.
Who is in scope after the Omnibus changes
Directive (EU) 2026/470, the Omnibus I Directive, narrowed the CSDDD. According to the Commission, it now covers EU companies with more than 5,000 employees and net worldwide turnover above EUR 1.5 billion, and non-EU companies with net EU turnover above EUR 1.5 billion. Member States must transpose by 26 July 2028, and the rules apply from 26 July 2029. The Commission is due to issue general guidelines by 26 July 2027.
The Omnibus also removed the climate transition plan obligation and the Union-wide civil liability regime, capped the maximum penalty at 3% of net worldwide turnover, and limited the information that companies can ask smaller business partners to provide. Check the consolidated text and your national law before you rely on any of this.
If you are a smaller supplier to an in-scope company, you may still receive requests, so the process below matters to you too.
What the duty involves in practice
In outline, in-scope companies must integrate due diligence into their policies, identify and assess actual and potential adverse impacts, prevent or reduce them, end or remedy actual impacts, engage with affected stakeholders, run a complaints procedure, monitor how well the measures work, and communicate publicly. The Directive text sets the detail.
What CSDDD software can do
| Need | What a tool may offer |
|---|---|
| Know your supply chain | Supplier and site mapping, tiering, country and sector risk scoring |
| Assess risk | Risk screening against human rights and environmental indicators, with documented method |
| Collect information | Supplier questionnaires, document requests and reminders, kept proportionate |
| Act on findings | Action plans with owners and deadlines, corrective action tracking |
| Hear complaints | A grievance channel and case log |
| Show evidence | Audit-ready records of what was assessed, when and what was done |
| Report | Outputs for disclosure and for regulators |
No software makes a company compliant. The legal duty is about processes and decisions, and a tool only helps you run and evidence them. Be wary of any vendor that promises "CSDDD compliance in a box".
How to choose
- Start with your supply chain, not the feature list. How many suppliers, in which countries and sectors, and how much data do you already have?
- Check the method. Ask how risk scores are built and whether you can see and challenge them.
- Look at the data sources. Third-party risk data, supplier self-assessment and audit results each have strengths and limits.
- Keep requests proportionate. The Omnibus limits what can be asked of smaller partners. Tools should let you request only what you need.
- Test the complaints and action-plan workflows, not only the dashboards.
- Think about overlap with CSRD reporting, EU deforestation rules and forced labour rules, so you do not run three separate processes.
The ESG software RFP checklist and supplier data request template can help. Read collecting data from suppliers for a proportionate approach.
Shortlist: supply chain due diligence providers
ISEAL Alliance
Membership body that works to strengthen the credibility and impact of sustainability standards and certification schemes.
EcoVadis
Business sustainability ratings and supplier assessment platform.
osapiens
Supply chain compliance and ESG reporting platform, including EUDR and CSRD.
Dcycle
Sustainability software for carbon footprint, CSRD reporting and supply chain due diligence.
Momentum
Copenhagen-based ESG data collection and supply chain transparency software with digital product tags and eco-footprint calculation.
VERSO
Munich-based sustainability software and advisory firm covering ESG data management, double materiality, VSME reports and supply chain due diligence.
Kodiak Hub
Cloud supplier relationship management platform with supplier assessment, risk monitoring and ESG reporting modules.
Achilles
Supply chain risk management, supplier audits and carbon programmes for buyers and suppliers, with an ESG-based sustainability score.
Ordered by verified reviews and relevance. Listings are never ranked by payment. See all 15 providers
Also see legal and regulatory advisers for help interpreting the Directive, and a free shortlist if you want help narrowing options.
Official sources
- European Commission: corporate sustainability due diligence
- Directive (EU) 2026/470 (Omnibus I), EUR-Lex
- Directive (EU) 2024/1760 (CSDDD), EUR-Lex
This guide is general information, not legal, tax or investment advice. Rules change; check the official sources and talk to an adviser before you rely on it.