ESG Reporting with Oracle: What Companies Need to Know Now About CSRD, Sustainability, and EPM

ESG is no longer optional. With the CSRD (Corporate Sustainability Reporting Directive), the EU has created binding rules for sustainability reporting. The first companies are already required to report, with more following next year. Anyone who doesn't build the right systems and processes now will quickly find themselves under time pressure.

This article explains what ESG reporting actually involves, which timeline applies to which companies, what contribution Oracle HCM can make, and how Oracle Fusion Cloud Sustainability and Oracle Cloud EPM work together to turn all of this into a complete, audit-ready report.

ESG stands for Environmental, Social, and Governance — a framework investors, regulators, and the public use to assess how responsibly a company is run:

• E – Environmental: CO₂ emissions, energy consumption, water use, waste management, biodiversity

• S – Social: working conditions, diversity & inclusion, human rights, employee health, community engagement

• G – Governance: board structure, transparency & compliance, anti-corruption, compensation policy, shareholder rights

For large companies, this is no longer a voluntary commitment. With the CSRD, the EU has created a binding reporting obligation. The core rules apply uniformly across the EU, while sanctions, auditor selection, and the exact state of implementation can vary by member state.

The CSRD originally provided for a phased rollout, staggered by company size and stock market listing. With the Omnibus package, however, the EU has fundamentally revised this timeline. The amending directive (EU) 2026/470 has been in force since March 18, 2026, and has reorganized both the thresholds and the deadlines.

Companies with more than 1,000 employees and over €450 million in net revenue are subject to reporting requirements. This also applies to non-EU companies that generate this revenue within the EU.

For newly affected companies, the reporting obligation begins with fiscal year 2027, and the first mandatory report will be published in 2028. Companies that were already covered by the earlier NFRD directive are already reporting today.

Companies below these thresholds are not subject to the CSRD reporting obligation. Simplified standards for voluntary reporting are available to them. These are gaining practical relevance, since even without a legal obligation, banks, investors, and business partners who are themselves subject to reporting requirements increasingly expect robust sustainability data.

One important side note: now that the amending directive has entered into force, EU member states have twelve months to transpose it into national law.

For newly affected companies, the EU-level timeline is now settled. Since the CSRD is a directive rather than a regulation, however, the obligation only takes legal effect once each member state has transposed it into national law.

A common misconception is that ESG reporting can be handled entirely within the HR system. That's not the case. Oracle HCM delivers valuable data for the social (S) dimension of reporting, including:

• Headcount

• Turnover rates

• Salary structures

• Gender pay gap

For a complete, CSRD-compliant ESG report, however, this isn't enough. Data for the environmental and governance dimensions typically comes from ERP and SCM systems and falls outside the HCM scope. Anyone serious about ESG reporting therefore needs a solution that brings together data from multiple systems.

This is exactly where Oracle steps in with two coordinated products: Oracle Fusion Cloud Sustainability captures the data, and Oracle Cloud EPM turns it into the finished report.

1. Oracle Fusion Cloud Sustainability: Capturing and Structuring Data

Oracle Sustainability is a module within the Oracle Fusion Suite built specifically to automatically capture and structure ESG-relevant data from day-to-day business operations. Importantly, it's not a reporting tool in the strict sense — it covers the first step in the ESG process, before the data is processed further into a finished report.

The module pulls activity data together from all connected Oracle systems — for example, energy consumption from ERP, employee data from HCM, and supply chain data from SCM — and automatically assigns it to the appropriate ESG categories. This is based on a unified data model aligned with common ESG reporting standards.

Companies that use only individual Oracle modules, or that source their ESG data from other systems, can also use Oracle Sustainability as a central data platform. Activity data from external systems can be imported directly via REST interfaces or table imports.

For existing Oracle Fusion customers, the solution can be used license-free. Billing is consumption-based, according to the compute and storage resources of Oracle Cloud Infrastructure actually used.

2. Oracle Cloud EPM: Turning Data into an Audit-Ready Report

Oracle EPM has been the central tool for financial reporting in large enterprises for decades and has been specifically extended with ESG functionality. EPM takes the processed data from Oracle Sustainability and turns it into a complete, CSRD-compliant sustainability report.

Specifically, EPM offers:

• Pre-configured metrics and calculation models for all three ESG dimensions

• Approval workflows for sign-off across departments and by auditors

• A complete audit trail

• XBRL export for official submission to authorities

Beyond that, EPM makes it possible to link financial and ESG data within a single system, along with scenario planning for costs and emissions. Unlike Oracle Sustainability, Oracle Cloud EPM is a separate, paid product.

An early start gives companies the flexibility they need. The amending directive also includes a review clause, under which the scope of companies subject to reporting could be expanded again in the future. It's worth setting up your system landscape now so it can respond flexibly to new requirements.

For HR and HCM teams, an early start means metrics like turnover, salary structures, or the gender pay gap can be properly prepared and made exportable in good time.

For finance and compliance teams, introducing Oracle Sustainability and EPM early creates time to test approval workflows, clarify responsibilities across departments, and involve auditors early on.

ESG reporting isn't a project you can throw together right before the deadline — it requires clean data, clear responsibilities, and the right system landscape. Strategically speaking, early preparation protects against time pressure. The fiscal year 2027 start date is fixed at EU level. Late national transposition can delay enforcement, but it won't move the deadline, so waiting for the implementing law to be finalized only shortens the runway. Companies that start now give themselves the lead time needed to connect data sources properly and test processes without rushing.

If you'd like to clarify what your existing Oracle HCM can contribute to ESG reporting, and how Oracle Sustainability and EPM fit into your system landscape, talk to our HCM team.