CDP Data: What It Is, Who Uses It and How to Make Yours Audit-Ready

CDP data is the environmental information that companies, cities, states and regions disclose to CDP each year, together with the scores CDP assigns. It forms the world’s largest primary corporate environmental dataset, and it doesn’t stay in CDP’s portal. Investors, ratings providers, customers and policymakers pull it into decisions that affect your cost of capital, your contracts and your reputation.

That makes the quality of your CDP data a business issue, not just a reporting one. This article covers what’s in the dataset, who uses it, how it’s accessed, and how enterprise teams make sure the numbers they submit hold up.

What’s Inside CDP Data

Every disclosure adds structured data points to CDP’s dataset. For companies, that typically includes:

• Greenhouse gas emissions: Scope 1, Scope 2 (location- and market-based) and Scope 3 by category, plus verification status
• Targets: absolute and intensity targets, base years, science-based target status and progress
• Transition plans: decarbonization levers, milestones and capital allocation
• Governance: board oversight, management responsibility and climate-linked incentives
• Risks and opportunities: physical and transition risks, with estimated financial impact
• Water security: withdrawals, discharges and exposure to water-stressed regions
• Forests: exposure to commodities such as palm oil, soy, cattle, timber, cocoa, coffee and rubber
• Scores: A to D- ratings (or F for non-response) for climate, water and forests

Standardized questions make the data comparable across sectors, regions and years. That comparability is its value.

Who Uses CDP Data

Investors and Financial Institutions

Capital markets signatories are the original audience. For the 2025 cycle, 640 investor signatories with US$127 trillion in assets requested disclosure through CDP. They use the data to:

• Screen portfolios for climate and nature risk
• Assess transition readiness and temperature alignment
• Prioritize company engagement and proxy voting
• Build sustainable and climate-aligned products

Ratings and Index Providers

CDP data feeds into third-party ESG ratings, benchmarks and indices. The number you submit to CDP can shape how several other raters see you.

Corporate Buyers

More than 270 major purchasing organizations use CDP’s supply chain program to request data from roughly 45,000 suppliers. Buyers use supplier CDP data to calculate their own Scope 3 emissions, set supplier engagement targets and inform sourcing decisions.

Policymakers, Researchers and NGOs

Governments, academics and civil society use aggregated CDP data to track corporate progress, study trends and design policy.

How CDP Data Is Accessed

CDP makes its data available through several channels:

• Public responses and scores on CDP’s website for eligible disclosers, including the annual A Lists
• Datasets for financial institutions and other users, such as a full GHG emissions dataset, net-zero and temperature alignment data, corporate response datasets and detailed scores
• Supply chain membership, which gives buyers standardized data on their suppliers
• An Open Data Portal with free data from city, state and region disclosers

For disclosing companies, the key takeaway is simple: assume your CDP data will be read, reused and compared by people you’ll never meet.

Why CDP Data Quality Matters

Once submitted, your data travels. An error in one Scope 3 category or an unexplained jump in emissions can flow into ratings, customer carbon models and investor screens. Correcting the record later is far harder than getting it right the first time. And the stakes rise in 2027: with CDP’s scoring deadline moving up to the week of July 26, there’s less time to catch and fix errors before you submit.

Common data quality problems include:

• Inconsistency across disclosures: CDP says one number, the annual report says another, the CSRD report a third
• Unexplained year-over-year changes caused by methodology shifts or boundary changes
• Weak Scope 3 coverage based on broad spend-based estimates
• No audit trail, so verifiers and stakeholders can’t trace figures back to source data
• Key-person risk, where only one analyst understands last year’s calculations

Each one erodes trust, and trust is what CDP scores and investor decisions ultimately reward.

5 Ways to Make Your CDP Data Audit-Ready

1. Centralize in a System of Record

Store emissions, energy, water and governance data in one place, not across spreadsheets, email threads and point tools. A single source of truth is the foundation for everything else.

2. Build In Data Lineage

Every figure should trace back to its source, its calculation and its approver. Lineage makes third-party verification faster and makes your data defensible when questioned.

3. Assign Clear Data Owners

Name an owner for every data point, from facilities managers on energy to procurement on supplier data, with deadlines and validation rules.

4. Map Once, Reuse Everywhere

Much of your CDP data overlaps with ISSB, CSRD, GRI and SB 253 requirements. Map each data point to every framework it serves so the numbers stay consistent everywhere they appear.

5. Document Methodology Changes

When boundaries, emission factors or calculation methods change, record why. Clear explanations protect your credibility and your CDP score.

How Novisto Strengthens Your CDP Data

Novisto gives enterprise sustainability teams a system of record for non-financial data. With audit-grade data lineage, every number, decision and calculation is traceable and defensible. Automated data connectors and validation rules replace manual data chasing. And reporting interoperability lets you map your data once and report across 34 global standards, regulations and frameworks.

The result: CDP data that investors, customers and verifiers can trust, and that your team can reproduce with confidence year after year.

See how Novisto turns fragmented sustainability data into audit-ready disclosure.

Book a Demo