What ESG documents to put in your data room

An ESG data room folder for a UK startup should contain a short ESG report with your carbon footprint, your core policies (environmental, code of conduct, data protection, information security, equal opportunities and health and safety), aggregated people data, a summary of governance arrangements and any certifications or commitments you have made. Add a one-page summary at the top that points to everything. That is usually enough for seed and Series A.

The aim is simple. When an investor sends an ESG questionnaire, you can answer most of it with “see folder 08, document 2”.

Why have an ESG folder in your data room?

Three practical reasons.

Speed. ESG questions come up in almost every VC diligence process now, often through a questionnaire. Having documents ready means you answer in hours rather than days, at a stage when every day matters.

Consistency. When your headcount, footprint and policies all live in one place, the numbers in your deck, questionnaire and data room match. Mismatches are what prompt follow-up questions.

Credibility. A short, organised folder shows the same thing a clean cap table does: this team runs a tidy business. It also gives you evidence for any ESG line in your pitch, which protects you from accidental greenwashing.

The ESG data room checklist

Items marked “core” are what most investors expect at seed and Series A. The rest are worth adding if they apply to you.

Environmental

• ESG report with carbon footprint (core). A recent 12-month carbon footprint with Scope 1, 2 and 3 broken out and the method stated.
• Environmental policy (core). One or two pages, signed and dated.
• Any targets or commitments, such as a net zero date or interim reduction target, and how you will track them.
• Renewable electricity evidence, if you claim a green tariff. A supplier letter or contract showing it is backed by REGOs.

Social and people

• Headcount summary (core). Employees, contractors, full-time and part-time, by function.
• Aggregated diversity data, if you collect it. Gender split at minimum.
• Equal opportunities and anti-harassment policy (core).
• Health and safety policy (core). A legal requirement to have in writing once you have five or more employees.
• Benefits, training and pay approach, including whether you pay the Real Living Wage.
• Employee handbook, if you have one.

Governance and data

• Code of conduct (core), covering ethics, anti-bribery, conflicts of interest and gifts.
• Privacy notice and data protection policy (core).
• Information security policy (core for software businesses).
• Board composition and meeting cadence, plus any conflicts of interest register.
• Whistleblowing policy, even a short one.
• Responsible product or AI policy, if your product makes automated decisions about people.

How to organise the folder

Investors move fast through data rooms, so make it easy.

• Start with a summary. A single page titled something like “ESG overview” listing each document, its date and owner, plus anything not yet in place with a target date.
• Use clear, dated file names. “Environmental policy v1.0 2026-09.pdf” beats “env_pol_FINAL2.docx”.
• Upload PDFs. They look finished and cannot be accidentally edited.
• Match the investor’s questionnaire. If they have sent one, order your folder by the same headings. It saves them time and they notice.
• Keep one source of truth. If your footprint figure appears in the deck, the questionnaire and the report, it should be the same number.

What to leave out

More is not better. Some documents actively hurt.

• Drafts and aspirations. Unfinished policies or a “sustainability strategy” deck that nobody adopted. If it is not in force, list it as planned instead.
• Individual-level personal data. Never upload staff records, salary lists with names or diversity responses. The ICO classes ethnicity, health and sexual orientation as special category data, which needs extra protection. Report in aggregate only.
• Small-number breakdowns. In a team of seven, “one employee from an ethnic minority background” identifies someone. Combine categories or report gender only until the team is larger.
• Copied corporate policies. A 40-page policy written for a multinational suggests it has never been read. Short and real is better.
• Offset certificates presented as reductions. If you have bought offsets, include them, but label them as offsets and keep them separate from your measured footprint.

What should the one-page ESG summary say?

The summary is the document investors actually read, so it deserves ten minutes of care. Keep it to a single page with four short sections:

• Snapshot. Headcount, office set-up, reporting period and your total footprint in tCO2e.
• What is in place. Each policy with its adoption date and owner.
• What is planned. Anything missing, with a target date. “Whistleblowing policy: to be adopted by December 2026.”
• Where to find things. The file name of each document in the folder.

Write it in plain sentences, not marketing copy. If an investor reads only this page, they should come away knowing your baseline, your gaps and your plan to close them.

How fresh do the documents need to be?

Your ESG report should cover a 12-month period that ended within the last year. Policies should carry a review date, typically annual. If something material has changed since your last report, such as moving from a co-working space to your own office, refresh the figures before you open the data room. It takes far less time than explaining the difference.

After the round, most investors will ask for an annual ESG update. Keep the folder structure and refresh it each year, and the next raise gets easier.

Getting the core documents quickly

The ESG report and carbon footprint are usually the slowest documents to produce from scratch. ESG Now produces them from a single plain-English questionnaire:

• A shareable ESG report with an overview, carbon footprint, people and governance sections, and an appendix showing every calculation
• Your Scope 1, 2 and 3 footprint using UK government conversion factors, with each figure labelled measured, estimated or data gap
• A private action plan that shows which policies you already have and which are worth adding next, so you can set dated commitments for your summary page

A small team in a co-working space usually finishes in 15 to 20 minutes, with no utility bills needed. Your answers save as you go. Your first report is free. Start your report or view the sample report.

For help filling the remaining policy gaps, read the ESG policies to have in place before you fundraise. If a questionnaire has already arrived, our guide to preparing for an ESG due diligence questionnaire walks through it, and the startups raising investment hub has the rest.