Skip to content

GRI Standards: The Reporting Framework You Can Use

You've decided to publish your first sustainability report. Maybe a customer asked, maybe a bank hinted, maybe your competitors all have one. The first decision is which framework to follow — and for most small businesses, the answer is GRI.

The Global Reporting Initiative's standards are the most widely used voluntary sustainability reporting framework in the world. Here's what they are, how they fit with the EU's mandatory regime, and how a small company puts them to work.

How GRI is structured

GRI is modular, which is its strength. Three Universal Standards cover the foundation: how you report, what you disclose about the company, and how you handle material topics. On top sit the Topic Standards — roughly thirty of them, each covering one subject: GRI 305 for emissions, GRI 403 for occupational health and safety, GRI 308 for supplier environmental assessment, and so on.

The beauty of the design is that you don't report everything. You run a materiality exercise — figure out which topics matter most to your business and your stakeholders — and report on those. A furniture maker might report on materials (GRI 301), energy (GRI 302), health and safety (GRI 403) and local communities (GRI 413), and skip the rest entirely. The framework supports that selectivity openly.

GRI versus the EU's ESRS

In the EU, the mandatory reporting standard is the ESRS under the CSRD, which we covered in this guide. If you're in scope for CSRD, ESRS is your legal baseline — GRI doesn't replace it. The two frameworks have official interlinkage, so the same data serves both.

But most small businesses are not in CSRD scope. For them, GRI is the pragmatic choice: internationally recognised, free to use, and forgiving of a company's first attempt. The EU has also published a voluntary ESRS standard for unlisted SMEs (VSME) designed exactly for companies answering value-chain data requests. If your main driver is a large customer's questionnaire rather than a public report, VSME may fit better than full GRI. Either way, the underlying data is the same — emissions, workforce, suppliers — which is the point we made in the ESG software guide.

Building your first report

A first GRI-aligned report for a small company is a six-week project, not a year:

  1. Run a lightweight materiality review. One afternoon with the founding team: what do customers ask about, what does the bank ask about, where are your real impacts? That list is your reporting scope.
  2. Collect the numbers you already have. Energy, water, waste, headcount, turnover, supplier counts. GRI's Topic Standards tell you exactly which data points each topic needs, so you can collect to the standard rather than guessing.
  3. Write honestly. Small-company reports earn credibility by being specific and modest. "We measured X, we don't yet measure Y, here's our plan" reads far better than generic commitments.
  4. Say which standard you used. "Prepared with reference to GRI Standards" is a legitimate first-year claim. Full "in accordance with" compliance is a later ambition, not an entry ticket.

Keep it alive

A sustainability report is a snapshot; the questions it answers keep coming all year. The smart small companies publish the underlying evidence as living company-level documents — one live, dated page per commitment and per number, updated when reality changes, and published in the languages your stakeholders actually read. That's the Sustalium pattern: €10 per document, one URL per topic, so next year's report is mostly an export of pages you already maintain. The report becomes the marketing of your compliance work instead of a parallel project. GRI gives you the structure; the habit of keeping evidence current gives you the rest.

How Sustalium Helps with GRI Reporting

  • One page per topic — each commitment and each number lives as a dated company-level page.
  • Translations built in — publish each page in the languages your stakeholders read.
  • Next year's report is an export — assemble the report from pages you already maintain instead of a parallel project.

The Report Is the Export. The Pages Are the Product.

Publish the underlying evidence once, keep it current, and let the report write itself. Start structuring your data free and publish the verified asset when you are ready.

See the Trust Hex in Action →

Frequently Asked Questions

GRI or ESRS?

ESRS if you're in CSRD scope — it's the EU legal baseline. For voluntary reporting, GRI is the pragmatic choice, and the EU's voluntary VSME standard suits SMEs answering value chain requests.

Do I have to report every GRI topic?

No. You run a materiality exercise and report on the topics that matter to your business and stakeholders. That selectivity is the framework's strength.

Can I claim compliance in year one?

"Prepared with reference to GRI Standards" is a legitimate first-year claim. Full "in accordance with" compliance is a later ambition.

Last updated: September 22, 2026

Global Digital Trust & Compliance

Sustalium is the digital-first platform for managing complex business certificates and sustainability declarations across global supply chains.

Environment & ESG
  • Digital Product Passport (DPP)
  • Carbon & Water Footprint
  • Circularity & Reuse (ISO 14021)
  • De-Forestation Free
Product & Food Safety
  • FSMA 204 (FDA Traceability)
  • REACH & RoHS Compliance
  • PFAS-Free & VOC Declarations
  • Prop 65 & TSCA Title VI
Social & Ethical
  • ISO 26000 Responsibility
  • Modern Slavery Statements
  • UFLPA Forced Labor Traceability
  • Ethical Labor Declarations
Governance & Trade
  • Swiss Made & Origin Claims
  • GDPR & AI Ethics (EU AI Act)
  • CE Marking & UKCA Conformity
  • Bill S-211 (Canada) Reporting
Start Free

Have questions about a specific standard?
Contact our compliance team at compliance@sustalium.com