One new clause in your customer’s purchase agreement. And your liability quietly doubles.
In the first months of 2026, we are seeing a clear shift in the procurement contracts that European corporates send to their SME suppliers. Driven by CSRD reporting obligations, tightened ESG targets and reinforced purchasing policies, large buyers are passing a meaningful share of their compliance burden down the value chain. Often through clauses that look reasonable at first glance, but reshape operational risk in ways most supplier sign-offs never anticipated.
Three clauses, in particular, are showing up repeatedly in supplier contracts across manufacturing, logistics and professional services. We have collected them here — not to alarm you, but to help you read what is actually on the page before you sign.
1. ESG warranties: guaranteeing what you cannot yet measure
A typical formulation from a listed buyer’s purchase agreement:
“Supplier warrants that goods and services are produced in accordance with Buyer’s sustainability policy, including verifiable data on Scope 1, 2 and material Scope 3 emissions.”
Standard ESG warranty clause, redacted
On paper, this reads like a reasonable expectation. In practice, it means you contractually commit to a GHG baseline you may not yet have established — and one that is hard to substantiate without an underlying environmental management system, such as ISO 14001.
The point is simple: guaranteeing data you are not structurally measuring creates contractual risk. In a dispute, the burden of proof lands on the supplier first.
2. Right-to-audit on supplier cost
A second clause that appears with growing frequency:
“Buyer reserves the right to conduct on-site audits, at Supplier’s cost, in the event that deviations are identified.”
Standard right-to-audit clause, redacted
- The definition of “deviation” is often missing. A formal non-conformity and an auditor’s observation are very different things in legal terms. Without a definition, the threshold shifts to the buyer’s interpretation.
- Audits by specialist firms are expensive. A Big Four audit on your production site easily reaches five figures. Without a pre-agreed cost cap, you are exposed open-ended.
Negotiating cost-sharing, audit frequency and the definition of materiality is almost always possible in practice — but only if you raise it before signing.
3. Sub-tier compliance: you become responsible for your suppliers
The third clause carries the greatest operational impact:
“Supplier shall impose equivalent obligations on its own suppliers and shall monitor compliance.”
Standard sub-tier compliance clause, redacted
You become contractually responsible for the compliance of the parties you source from — including small sub-contractors in jurisdictions where you have limited influence. From the buyer’s perspective, this is logical CSRD coverage: they need to demonstrate visibility over Scope 3 and value-chain risk. For your business, it means your own supplier contracts need to mirror these obligations in turn.
In practice, this is rarely a no-go. It is, however, an issue that requires a clear translation into your own purchasing contracts and monitoring process — typically tied to a demonstrable management system (ISO 9001, 14001 or 27001).
Why this is happening now
Three developments are converging:
- CSRD reporting obligations require large enterprises to report ESG data across their entire value chain. That data has to come from somewhere — namely, from suppliers.
- The EU Taxonomy and sector-specific norms push organisations to substantiate sustainability claims with measurable evidence.
- Procurement teams at corporates are increasingly evaluated on the compliance performance of their supply chain, not just on price and lead time.
The result: contract clauses that used to govern only price, delivery and quality now govern emissions, compliance and governance as well. And the “standard terms” sent by your customer have often been quietly tightened precisely on those points.
Three actions you can take this week
1. Introduce a four-eyes principle before signing
Agree that every contract from a corporate customer is reviewed by both the commercial owner and someone from operations or compliance. Five minutes of reading time prevents years of exposure. A short internal checklist of “critical clauses” is enough to start.
2. Build a “no-go” and “negotiate” list
Unlimited liability, unbounded audits without cost caps, and sub-tier ESG warranties without substantive support belong in the no-go category. Other clauses — response times for data requests, the definition of “deviation” — are almost always negotiable, provided you bring them up.
3. Tie contract management to a management system
Honouring an ESG warranty without an ISO 14001 foundation is hoping for luck. Holding a GDPR clause without a processor register is waiting for a data incident. In 2026, contract management is no longer a legal file — it is an operational capability that runs alongside your quality, environmental and information-security processes.
In closing
Contract management is often filed under “legal”. That framing is outdated. The clauses arriving in supplier mailboxes today touch your operations, your management system and your data infrastructure directly. Waiting until a claim or audit finding arrives is the most expensive option available.
Room for negotiation is almost always present — especially when the supplier shows that they understand the impact and are demonstrably working on structure.
Need a second look at your customer contracts?
Royaal Project supports SME and corporate organisations in connecting contract management, compliance, ISO standards and sustainability reporting. We run a pragmatic clause scan on your ten largest customer contracts — not an 80-page report, but an operational priority list you can act on next week.
Book a free intake call via royaalproject.com.
Disclaimer: this article describes observed practice patterns and best practices. It is not legal advice. For specific contractual matters, we recommend obtaining specialist legal counsel.
Royaal Project 