Your SaaS Stack Has a Compliance Exposure. We Close It.
CSRD mandates. Scope 3 inquiries from enterprise prospects. California SB 253. Greenwashing litigation with 10% global-turnover penalties. The regulatory calendar is not waiting for your next sprint cycle.
Founding Principal — Former PwC Climate Risk, CSRD Policy Advisor
Regulatory Calendar — Current
10%
of global turnover
Maximum fine under UK CMA for misleading green claims, effective April 2025
83%
of companies
Find collecting accurate CSRD data a significant operational challenge
75%
of your footprint
Sits in Scope 3 — the category your AWS bill feeds directly into
€25M
DWS fine, 2025
Largest greenwashing penalty in financial services to date — for claims that didn't match operations
FY 2027
CSRD first reporting
EU companies 1,000+ employees. Non-EU parents follow in FY 2028. The clock restarted, not stopped.
The Team — Senior Practitioners
01 / Senior Consultant
Marcus Oduya
Ex-Deloitte Climate Risk & Assurance, 11 years
Head of Regulatory Strategy, ComplyShield
"Every audit begins with the same question: what did you promise, and what can you actually prove? Most SaaS companies have a gap there they have never been made to look at directly."
Series C Infrastructure Platform — 14,000-node cluster
Audit-ready Scope 3 inventory in 11 weeks
11 weeks to audit-readiness
Client received a Scope 3 Category 1 & 11 questionnaire from a Fortune 500 procurement team. No prior GHG accounting existed. We mapped compute, storage, and network consumption across three cloud regions, applied IPCC AR6 emission factors, and delivered a board-ready disclosure package with third-party assurance pathway.
Former AWS Sustainability Engineering, Principal Engineer
Head of Cloud Carbon Intelligence, ComplyShield
"The AWS Customer Carbon Footprint Tool gives you a number. It omits Scope 3 entirely and assumes 100% renewable. That number will not survive a CSRD assurance review. We build the version that will."
CSRD Policy Drafter, European Commission DG FISMA (contracted)
Head of Disclosure Architecture, ComplyShield
"The 61% reduction in mandatory ESRS datapoints sounds like relief. It isn't. The remaining 430 are the ones regulators have decided are worth enforcing. That is not a smaller target — it is a more precise one."
Series B SaaS Analytics Vendor — 340 enterprise customers
Greenwashing litigation exposure neutralized before Series C close
6-week engagement
Legal counsel flagged that the company's published "carbon neutral" claim rested entirely on RECs not tied to specific renewable projects — the same structure cited in the DWS €25M enforcement action. We restructured the claim architecture, replaced legacy REC accounting with location-based methodology, and produced a defensible disclosure framework reviewed by outside counsel.
TCFD-aligned climate risk section ready for SEC review
8-week engagement
Underwriters required TCFD-aligned climate risk disclosures in the S-1. The company had no materiality assessment and no scenario analysis. We delivered a complete double materiality assessment, physical and transition risk scenarios under 1.5°C and 2°C pathways, and an ISSB S2-aligned disclosure narrative reviewed for litigation resilience.
TCFDISSB S2Double MaterialityIPO Disclosure
The Assessment — How It Works
Thirty-five days from first call to auditor-ready dossier.
We have run this process for infrastructure platforms, analytics vendors, and pre-IPO companies. The methodology does not change. The regulatory exposure maps change. That is where the expertise lives.
01Days 1–5
Infrastructure Exposure Mapping
We pull your cloud billing data, infrastructure topology, and any existing sustainability claims. We identify every Scope 3 category that touches your stack — compute, storage, SaaS vendor chain, employee devices. Most clients discover two to four exposure categories they had not accounted for.
Exposure Register + Preliminary Risk Matrix
02Days 6–18
Emissions Quantification
Using IPCC AR6 emission factors, cloud provider activity data, and GHG Protocol Scope 3 methodology, we build a defensible carbon inventory. We apply location-based methodology — not market-based REC accounting — because that is the standard that survives third-party assurance.
GHG Inventory (Scope 1, 2, 3) with methodology documentation
03Days 19–28
Disclosure Architecture
We map your inventory to the applicable frameworks — CSRD/ESRS, TCFD, ISSB S2, California SB 253, or CDP — depending on your regulatory exposure and customer requirements. Every claim is stress-tested against the enforcement actions that have already occurred: the DWS standard, the CMA green claims code, the SEC climate rule.
We prepare your disclosure package for third-party limited assurance — the standard CSRD requires by 2025. Supporting data, methodology notes, source citations, and variance explanations are organized as a tabbed evidence dossier your auditor can work from directly. No additional data gathering required on their end.
The question is no longer "Do we need this?" It is "Can they fit us in?"
CSRD mandatory third-party assurance is live. The UK CMA greenwashing fine structure is active. California SB 253 reporting begins FY 2026. Enterprise procurement is requiring Scope 3 disclosures in vendor qualification. The regulatory pressure is simultaneous, not sequential. A defensible sustainability narrative is no longer a Q4 initiative — it is a prerequisite for your next enterprise contract.
