ESG and Digital Due Diligence: The New Requirements for 2026

Three years ago, nobody in Indonesian B2B asked about ESG. Environmental, Social, Governance. It was something for publicly traded companies writing annual reports. Something for European firms complying with regulations. Not something that affected whether a pump installation company in Bogor won a contract.

That changed. Not because Indonesian companies suddenly care about ESG (some do, most do not yet). But because international companies that buy from Indonesian suppliers are now legally required to verify ESG compliance in their supply chains. And they verify it digitally.

If you supply to any company that sells to Europe, you are already in the ESG due diligence chain. Most Indonesian suppliers just do not know it yet.

What changed in 2024-2026

The European Union's Corporate Sustainability Due Diligence Directive (CSDDD) entered into force in 2024. It requires large European companies to identify, prevent, and mitigate adverse environmental and human rights impacts in their entire value chain. Including tier-2 and tier-3 suppliers in countries like Indonesia [1].

Germany's Supply Chain Due Diligence Act (LkSG) has been active since 2023. France's Duty of Vigilance Law since 2017. The trend is clear: ESG due diligence requirements are cascading from European head offices through their supply chains globally.

What does this mean practically? If you supply pumps to a German chemical company's Indonesian subsidiary, that subsidiary now needs to demonstrate to head office that they have verified your ESG compliance. They will do this digitally. They will check your website, your public documentation, your certifications. And if they find nothing, that is a problem for them. Which makes it a problem for you.

How ESG fits into digital due diligence

ESG is not a separate process. It is an additional layer on top of the digital due diligence that already exists. The foundation (website, consistency, certifications, financial transparency) still matters. ESG adds three new verification areas on top of that foundation.

As I detailed in How to Pass Digital Due Diligence, the core principle is making your company verifiable through independent sources. ESG follows the same principle. The difference is what specifically needs to be verifiable.

What buyers check: ESG edition

Environmental

Does this supplier have environmental management processes in place? The checks:

• ISO 14001 certification (Environmental Management System). Same rules as other certifications: needs to be documented digitally with certificate number, issuing body, and scope.
• Environmental policy published on website. Not a generic statement. A specific policy that addresses waste management, emissions, and resource usage relevant to the supplier's industry.
• PROPER rating (for Indonesian companies, if applicable). Ministry of Environment's company performance rating is increasingly checked by foreign buyers sourcing from Indonesia.

Social

Does this supplier treat workers properly and operate safely? The checks:

• OHSAS 18001 or ISO 45001 certification (Occupational Health & Safety). Documented digitally like other certifications.
• No reports of labor violations or workplace accidents. Google search for "[company name] labor" or "[company name] accident." Negative results here are serious.
• Employee welfare policies. Basic documentation of working hours, leave policies, safety training. Not necessarily published on the website, but available when requested.
• SMK3 (Sistem Manajemen K3) for Indonesian context. Evidence of compliance with national occupational health and safety requirements.

Governance

Is this supplier operated transparently and ethically? The checks:

• Anti-bribery/anti-corruption policy. Published on website or in available documentation. Particularly relevant for Indonesian suppliers selling to European buyers, given Indonesia's corruption perception index.
• Financial transparency. D&B rating, disclosed financial information, no hidden ownership structures.
• Beneficial ownership transparency. Who actually owns and controls this company? European regulations increasingly require this disclosure from suppliers.
• Data protection policy. Basic privacy policy on website showing awareness of data handling responsibilities.

The ESG documentation gap in Indonesia

Most Indonesian B2B companies have zero ESG documentation online. Not because they are irresponsible. Many have ISO 14001. Many have excellent safety records. Many have strong governance practices. But none of it is documented publicly in a way that digital verification can capture.

This is the same pattern as certifications generally. The cert exists. The documentation does not. And in a digital due diligence context, undocumented equals nonexistent.

The gap is not capability. It is documentation. Closing this gap is relatively straightforward compared to the competitive advantage it provides.

Minimum viable ESG documentation

You do not need a 200-page sustainability report. You need a minimum viable ESG presence that passes basic digital checks.

1. Environmental policy statement. One page on your website. What you commit to regarding waste, emissions, and resource use. Specific to your industry, not generic.
2. Certifications documented. ISO 14001 and ISO 45001 if you have them. Full digital documentation: number, issuer, scope, dates.
3. Anti-corruption statement. Half a page. Your company's commitment to ethical business practices. This is increasingly required by European buyers.
4. Key personnel with governance roles. Name and role of whoever is responsible for HSE and compliance. Ideally with LinkedIn profiles.
5. Basic metrics. If you have safety metrics (days without incident, training hours), publish them. Even basic numbers show you are tracking these things.

This is 3-5 pages of website content. A few hours of work. And it puts you ahead of 95% of Indonesian B2B companies in ESG digital documentation.

The same foundation that helps you pass ESG checks helps you pass all digital due diligence. As institutional clients increasingly require ESG compliance from their supply chain, having this documentation ready is not optional. It is the price of access to institutional contracts.

For a systematic approach to all of this, the entity infrastructure framework covers ESG as one layer of the full verification stack. The free courses provide the methodology.