Automotive Industry ESG Portals: Navigating IATF, Catena-X, and Supplier Sustainability Requirements

Automotive suppliers are being squeezed from every direction. The OEMs they supply — Volkswagen, BMW, Stellantis, Toyota — are each running their own sustainability portals, each with their own data formats, timelines, and thresholds. On top of that, Catena-X is emerging as a shared data infrastructure that changes how supply chain carbon data flows. And IATF 16949, the quality standard most automotive suppliers already hold, is increasingly being read through an ESG lens.

If you are a tier 1, tier 2, or tier 3 automotive supplier, this is what you are actually dealing with — and how to handle it without duplicating effort across every OEM request.

The Automotive ESG Pressure Stack

Automotive suppliers do not face a single ESG portal. They face a stack:

• OEM-specific portals — each major OEM runs its own supplier sustainability assessment, often through platforms like EcoVadis, or custom portals such as BMW's iSupplier, VW's Supplier Sustainability Portal, or Toyota's ASES (Automotive Supplier Evaluation System)
• Drive Sustainability — a coalition of 13 OEMs that developed the Automotive Sustainability Guidance and aligned ESG assessment questions, reducing (but not eliminating) portal duplication
• Catena-X — an open ecosystem for sharing supply chain data, specifically designed to pass Product Carbon Footprint (PCF) data up the automotive supply chain
• IATF 16949 — the automotive-specific quality standard, which does not include ESG requirements directly, but intersects with them in ways that matter
• Sector-specific regulations — the EU Battery Regulation's carbon footprint requirements, the Corporate Sustainability Reporting Directive (CSRD) obligations flowing down from large OEMs, and national supply chain due diligence laws (Germany's LkSG, France's Duty of Vigilance Law)

Each layer asks for overlapping but not identical data. The result is a high administrative burden, particularly for smaller tier 2 and tier 3 suppliers who lack dedicated sustainability teams.

What Major OEMs Are Asking For

Volkswagen Group

VW's supplier sustainability requirements are among the most demanding in the industry. The Volkswagen Group Sustainability Rating (previously run through EcoVadis) evaluates suppliers on environment, labour, human rights, and ethics. VW also requires suppliers to complete its Code of Conduct acknowledgement and to conduct risk-based assessments of their own sub-suppliers under Germany's Supply Chain Act (LkSG). Direct suppliers are expected to communicate requirements downstream — making tier 2 and tier 3 compliance a direct contractual issue.

VW's Product Carbon Footprint requirements are also advancing. Suppliers in the battery and raw materials supply chain are already being asked for lifecycle-based carbon data.

BMW Group

BMW runs sustainability requirements through its iSupplier portal and requires EcoVadis assessments for a significant portion of its supply base. BMW's SuRe (Supplier Relationship Management) process includes sustainability as a scored criterion alongside quality and delivery. Suppliers with EcoVadis scores below BMW's threshold face formal improvement plans or de-listing risk.

BMW has also committed to tracking Scope 3 emissions and has communicated clear expectations that direct suppliers will provide cradle-to-gate carbon footprint data for key components by 2025-2026.

Stellantis

Stellantis uses its Supplier Sustainability Assessment (SSA), which covers environmental management, human rights, business ethics, and health and safety. Stellantis is a founding member of Drive Sustainability, so its questionnaire content aligns with the Drive Sustainability framework. Suppliers who have completed the Drive Sustainability assessment can often cross-reference answers, though submission through Stellantis's own portal is still required.

Toyota

Toyota's supplier sustainability approach is built around its ASES evaluation, combined with its Supplier CSR Guidelines. Toyota requires suppliers to self-assess against categories covering environmental management systems, CO2 reduction, water, waste, supply chain risk management, labour standards, and business ethics. Toyota's environmental requirements are particularly detailed around CO2 reduction, with suppliers expected to show year-on-year improvement targets.

Drive Sustainability: Where OEM Requirements Converge

Drive Sustainability is a partnership of 13 OEMs — including BMW, Ford, Honda, Mercedes-Benz, Renault, Toyota, Volkswagen, and others — created specifically to align supplier ESG requirements. Their Automotive Sustainability Guidance provides a common framework covering human rights, working conditions, environment, business ethics, and health and safety.

In practice, Drive Sustainability reduces but does not eliminate duplication. The questionnaire content is standardised, but suppliers still submit through each OEM's own portal, on each OEM's timeline, with each OEM's scoring logic. The practical benefit is that answers to Drive Sustainability-aligned questions can be reused across portals with minor adaptation.

If you are managing multiple OEM questionnaires simultaneously, treating Drive Sustainability categories as your master answer set — then adapting for portal-specific fields — is the most efficient approach. The principle is identical to how experienced suppliers handle multiple ESG questionnaires arriving at once.

Catena-X: The Shared Data Infrastructure

Catena-X is an open data ecosystem built specifically for the automotive sector. Founded by a group of OEMs and tier 1 suppliers, it provides standardised data exchange protocols so that supply chain data — particularly Product Carbon Footprint data — can flow from tier 3 up to tier 1 and then to the OEM without each party having to run their own data collection exercise.

The core use case for suppliers is the Product Carbon Footprint (PCF). Under Catena-X, PCF data for a component is calculated at the supplier level using the WBCSD Pathfinder framework and transmitted upstream in a standardised format. The OEM receives the PCF directly through the Catena-X connector rather than through a questionnaire.

For tier 1 suppliers supplying to Catena-X-connected OEMs, this means two things:

1. You will need to calculate and certify your PCF according to Pathfinder methodology — which requires knowing your own Scope 1 and 2 emissions, plus relevant upstream Scope 3 data for the materials you use.
2. You will need to onboard to Catena-X technically — which involves deploying a connector and registering with the Catena-X association. Several software providers (Siemens, SAP, and others) offer connector software that reduces the implementation burden.

For tier 2 and tier 3 suppliers, the near-term pressure is more likely to come from your direct customer (the tier 1) asking you for carbon footprint data so they can fulfil their own Catena-X obligations. That request may arrive as a questionnaire, a data template, or a portal invitation — but the underlying requirement is the same.

Understanding what a PCF calculation actually requires is covered in detail in the guide on what customers need when they ask for a carbon footprint.

IATF 16949 and Its ESG Intersection

IATF 16949 is a quality management standard, not an ESG standard. It does not include requirements for carbon reporting, human rights due diligence, or social audits. However, the intersection with ESG is real in several areas:

Environmental management system alignment. Many automotive suppliers hold ISO 14001 alongside IATF 16949. ISO 14001 covers environmental aspects, legal compliance, operational controls for environmental impact, and performance monitoring — all of which directly support ESG questionnaire responses. If you already run an ISO 14001 system, your environmental management evidence covers a significant portion of the environmental section of any OEM portal.

Customer-specific requirements (CSRs). IATF 16949 requires suppliers to identify and comply with customer-specific requirements. As OEMs formally embed sustainability requirements into their supplier contracts and CSRs, IATF auditors will increasingly expect evidence that sustainability-related CSRs are identified and managed within the QMS. This is not yet universal across IATF certification bodies, but the direction is clear.

Supplier control. IATF 16949 clause 8.4 covers externally provided processes, products and services — supply chain control in QMS terms. As OEMs push sustainability requirements down to tier 2 and tier 3 through their tier 1 contracts, the supplier control systems that IATF already mandates become the mechanism for passing ESG expectations downstream. Your IATF supplier development and qualification processes can be extended to include sustainability pre-qualification without building a separate system.

Product Carbon Footprint: The Core Data Requirement

Across all OEM portals, Catena-X, and emerging regulatory requirements, the Product Carbon Footprint is the central data point that automotive suppliers will need to produce.

A PCF for an automotive component covers emissions from raw material extraction through to the factory gate (cradle-to-gate). It includes:

• Scope 1: Direct emissions from your manufacturing processes (combustion, process gases)
• Scope 2: Indirect emissions from purchased electricity and heat
• Scope 3, upstream: Emissions from purchased materials and components, freight, and other upstream activities

For most tier 2 and tier 3 suppliers, the largest portion of a component PCF is the materials. Steel, aluminium, plastics, and electronic components all carry significant embedded carbon. If you use primary aluminium, that alone can account for 70-80% of the PCF for a stamped aluminium part.

The data you need to collect — and the common gaps — is covered systematically in the guide on Scope 3 data requirements for suppliers.

Practical Steps for Tier 1-3 Suppliers

Start with what IATF and ISO 14001 already provide

If you hold IATF 16949 and ISO 14001, you already have an environmental management system, documented environmental aspects and impacts, energy and resource monitoring, legal compliance registers, and internal audit trails. Pull these into a single ESG data file before starting any portal submission. You will find that 50-60% of OEM environmental questionnaire fields are answered by data you already hold.

Identify which OEM portals are active for you

Not every OEM portal applies to every supplier. Check which portals your direct customers are using and whether they are requesting EcoVadis assessments, proprietary questionnaires, or Catena-X data. Prioritise by spend concentration — the OEM representing 40% of your revenue demands attention before the one representing 5%.

Map your carbon footprint data gaps

For PCF calculations, the hardest data to obtain is upstream material carbon intensity. Work with your material suppliers to get primary data where possible. Where primary data is not available, use recognised databases (ecoinvent, GaBi, or the PSILCA database for social LCA) with clear documentation. OEMs understand that primary data availability varies by tier.

Build a master answer set aligned to Drive Sustainability categories

Create an internal document structured around Drive Sustainability's five categories: human rights and working conditions, environment, business ethics, health and safety, and sustainable procurement. Populate each category with your current data, policies, certifications, and evidence links. This becomes the source you draw from when any OEM portal opens, rather than starting each submission from scratch.

This is the same principle behind building a structured ESG response system that handles multiple requests without repeated data collection.

Prepare your policy documents in advance

Most OEM portals require uploaded evidence — your environmental policy, supplier code of conduct, health and safety policy, human rights policy, and anti-bribery policy. These should exist in current, signed versions before the portal deadline arrives. If you are missing any, a basic but genuine policy document is significantly better than a blank field. The guide on ESG policy documents covers what is needed and what level of detail is appropriate for SMEs.

Connect your tier 2 and tier 3 suppliers early

If you are a tier 1 supplier, you cannot complete your own OEM submission without data from your sub-suppliers. Start asking your tier 2 and tier 3 suppliers for carbon data, policy documents, and basic ESG information at least six months before your portal deadline. They will need time to collect data, and many will be starting from zero.

Frame the request practically: tell them exactly what data you need, why, and by when. A brief template or checklist prevents back-and-forth. The ESG response checklist provides a format that smaller suppliers can work through independently.

Common Mistakes Automotive Suppliers Make

Submitting portal responses with inconsistent numbers is the most common issue — energy consumption reported in one unit for one customer and a different unit for another, or headcount figures that differ between questionnaires. OEMs cross-reference suppliers who appear across multiple portals, and inconsistencies raise red flags.

The second most common issue is treating each OEM portal as a standalone exercise. The data you collect for VW's portal is 80% the same data Toyota needs. Centralise your data collection and you halve the time spent on each subsequent portal.

The third is leaving PCF calculation too late. A credible PCF takes two to four weeks to produce if you have your energy and materials data ready — and longer if you are chasing data from sub-suppliers. OEMs with hard portal deadlines will not wait.

What the Regulatory Direction Means for 2026 and Beyond

The EU Battery Regulation already mandates carbon footprint declarations for EV batteries, with requirements effective for large batteries from early 2025. The methodology requirements align closely with Catena-X's PCF approach. As EV penetration increases, battery-adjacent suppliers in the automotive chain face the hardest data requirements first.

The CSRD will capture large automotive suppliers (those meeting EU CSRD thresholds) in their first reporting cycles. Even suppliers below CSRD thresholds will feel its effects as OEM customers use CSRD reporting obligations to justify increasingly detailed data requests down the supply chain.

The trajectory is clear: what is voluntary data sharing today becomes a contract requirement tomorrow, and a regulatory obligation the year after.