CSRD ESRS S1. What audit-grade workforce disclosure actually means.
Two days after the Pay Transparency transposition deadline. The first ESRS S1 reports already filed for FY 2024. The data most companies will fail on first audit is not the head-count or the gender pay gap. It is the qualitative layer underneath.
Bytru.place
Published9 Jun 2026
Read11 min
AudienceHR Leader · Board
The first ESRS S1 reports for financial year 2024 have already been filed. The European Sustainability Reporting Standards moved workforce metrics from PR text into auditable line-items overnight — and limited assurance from a statutory auditor sits behind every line. The numerical layer (head-count, gender ratios, gender pay gap, training hours) is what most companies prepared for. The qualitative layer (how categories of workers were defined, what objective criteria justify decisions, how grievance mechanisms actually work in practice) is where the first audit gap is opening up.
The standard covers the undertaking's own workforce — employees, non-employee workers under operational control, and workers in the value chain where material — and requires disclosures in three broad areas: characteristics of the workforce, working conditions, and equal treatment and opportunities. Each area has a set of mandatory metric disclosures plus a set of policy and process disclosures that explain how those metrics are produced.
Reporting is phased by undertaking type and size. Large undertakings already subject to the Non-Financial Reporting Directive reported on financial year 2024, filed in 2025. Other large undertakings report on financial year 2025. Listed small and medium undertakings follow on financial year 2026 with simpler proportional standards. Certain non-EU undertakings with significant EU presence come into scope from financial year 2028.
Why does ESRS S1 raise the audit bar?
Two changes from the previous regime are operative.
First, the disclosures are subject to limited assurance from the first reporting year, provided by a statutory auditor or an independent assurance services provider. The Commission is required to review whether to move to reasonable assurance by 2028 in light of feasibility. Limited assurance is a lower bar than reasonable assurance, but it is a sharply higher bar than the unaudited sustainability reports many companies were producing under the Non-Financial Reporting Directive.
Second, the standard demands process and outcome evidence, not only metrics. ESRS S1 is constructed around a "DR" framework: disclosure requirements covering material impacts, risks and opportunities; the undertaking's policies; the actions and resources allocated; the targets and metrics. The metric is the tip. The four layers underneath — impacts, policies, actions, targets — are where the audit attention lands when the metric looks fine but the system that produced it is opaque.
What does ESRS S1 actually require?
The metric disclosures fall into three categories. Auditable evidence is required at three levels for each.
Already in most HRIS systems. Audit-grade evidence: payroll reconciliation, dated org chart, contract registry. The audit risk is data-quality drift across acquired entities and joint ventures, not the underlying number.
2
Category 2 · Working conditions
Adequate wages, collective bargaining coverage, working-time arrangements, lost-time accident frequency, training hours per employee.
Partly in HRIS, partly in time-and-attendance and EHS systems. Audit-grade evidence: payroll detail, collective bargaining agreements, time-and-attendance reconciliations, incident logs. The audit risk is the gap between policy and practice — what the contracts say versus what people actually experience.
3
Category 3 · Equal treatment and opportunities
Gender pay gap, percentage of women in management, persons with disabilities, training and skills development for under-represented groups, incidents of discrimination and remedial actions.
Partly in HRIS, partly nowhere observable. Audit-grade evidence requires not only the gap or the incident count but the system that produced it — voice equity in meetings, recognition timing, promotion-track inclusion. This is the category where most companies will fail first audit.
The three ESRS S1 disclosure categories · Categories 1 and 2 are in the HR system · Category 3 is where the audit gap sits
Three categories of disclosure — and the audit gap
Auditors are not looking for the headline number alone. They are looking for the system that produced the number. For Categories 1 and 2, the system is well-instrumented in existing HR and EHS technology: HRIS for head-count and contracts; time-and-attendance for working hours; EHS systems for accident frequency. The audit risk here is data quality and process discipline — not absence of data.
For Category 3 — equal treatment and opportunities — the system that produces the metric is partly nowhere. The gender pay gap can be calculated from payroll. The reason for the gap cannot. The number of women in management can be counted. The behaviour that produced the count — who got heard in meetings, whose ideas were credited, who was on the short list for stretch assignments — is observable only if the organisation has instrumented it.
An auditor performing limited assurance asks whether anything has come to their attention that suggests the disclosures are materially misstated. In practice, on Category 3, they ask: how do you know? If the answer is "we have a policy on inclusive hiring," that is documentation. If the answer is "we measure the conditions that produce inclusive outcomes weekly and can show the trend," that is evidence. The standard sits closer to the second answer than to the first.
Where does behavioral data fit?
Behavioral measurement sits exactly at the layer that Category 3 cannot be defended without. The voice equity that produces equal recognition. The promotion-track inclusion that produces equal advancement. The grievance mechanism use that produces credible incident counts. All three are behavioral signals — observable in the working week, recorded continuously, aggregated over time.
Google's Project Aristotle finding sits adjacent to the regulatory shift. After studying 180 teams over three years, the researchers concluded:
"Psychological safety was far and away the most important of the five key dynamics we found — it's the underpinning of the other four."
Google re:Work · Project Aristotle · 2015
Read alongside ESRS S1, the finding has an audit translation: the conditions that produce equal outcomes in a team are behavioral. A pay gap or a promotion gap or a discrimination-incident pattern that traces back to an under-instrumented working environment cannot be defended in audit. It can only be defended if the working environment was instrumented.
What the first-audit failures will look like
Three failure modes are already visible in the early FY 2024 filings reviewed by audit firms and EFRAG observers.
Documentation in place of evidence. The undertaking has a policy on equal treatment. The policy is well-drafted. The policy describes outcomes. No data is provided on whether the outcomes occur. Limited assurance procedures will surface this gap as a request for evidence; reasonable assurance procedures (when they arrive) will reject it.
Metric without methodology. The gender pay gap is reported as 4.2%. The methodology for calculating it is not described. The categories of workers used are not disclosed. The bands of pay are not provided. Auditors cannot verify the metric without the methodology underneath.
Inconsistency across affiliated regimes. The ESRS S1 filing shows one gender pay gap. The Pay Transparency Directive filing (under Directive (EU) 2023/970) shows a different one for the same undertaking and reporting period. Both regimes have different category definitions, different worker scopes, different reporting cadences. Auditors will ask which is correct, and why the two differ.
A 60-day pre-audit checklist
Four items, ranked by operational urgency for undertakings about to file for FY 2025.
Map the metric to the source system. For every ESRS S1 metric the undertaking is in scope to disclose, identify the system of record (HRIS, payroll, time-and-attendance, EHS, grievance log). Where the system of record does not exist for a required metric, flag it now — sourcing a new system three weeks before audit is not feasible.
Reconcile against affiliated regimes. Pay Transparency Directive filings, EU Whistleblower Directive disclosures, national diversity-reporting filings, sectoral regulatory filings. Inconsistencies are red flags for auditors; reconciliation explanations are the defence.
Document the methodology before the auditor asks. For every Category 3 disclosure, write a one-page methodology note: how categories were defined, what objective criteria justify decisions, what evidence underpins the policy claim. Auditors will request this on day one of fieldwork. Having it ready compresses the audit timeline by weeks.
Instrument the upstream conditions. Voice equity in meetings, recognition timing, exposure to high-visibility work, grievance-mechanism use, manager attention distribution. These are the conditions that produce Category 3 outcomes. Behavioral measurement is the audit trail ESRS S1 is moving toward, even where the standard does not explicitly require it yet.
Pre-launch · 50 teams per month
Audit-grade behavioral evidence for the qualitative layer ESRS S1 demands.
tru.place measures the behavioral conditions that produce workforce outcomes — voice equity, recognition timing, promotion-track inclusion. The evidence layer Category 3 disclosures cannot be defended without. Launching in 2026. Join the waitlist at tru.place — we're letting in 50 teams a month.
ESRS S1 (Own Workforce) is the social standard for own-workforce disclosures under the Corporate Sustainability Reporting Directive. Adopted by Commission Delegated Regulation (EU) 2023/2772, it requires undertakings in scope of CSRD to disclose specific workforce metrics and to describe the policies, processes and outcomes that produce them. Reporting is subject to limited assurance from the first year and may move to reasonable assurance over time.
Who is in scope?
Phased by company type and size: large undertakings already subject to the Non-Financial Reporting Directive report on financial year 2024 (filed in 2025); other large undertakings on financial year 2025; listed small and medium undertakings on financial year 2026 with simpler proportional standards; and certain non-EU undertakings with significant EU presence from financial year 2028 onwards.
Is ESRS S1 mandatory?
Yes, for undertakings in scope. The disclosures are required under CSRD as transposed into national law, and are subject to limited assurance by a statutory auditor or independent assurance services provider. Non-disclosure or inaccurate disclosure carries penalties under Member State implementing law.
What is the difference between quantitative and qualitative disclosures?
Quantitative disclosures are metrics — head-count, gender ratios, gender pay gap, training hours, lost-time accident frequency. Qualitative disclosures describe the policies, processes and outcomes that produce those metrics — how categories of workers were defined, what objective criteria justify pay differences, how grievance mechanisms work in practice. The quantitative side is mostly already in HR systems. The qualitative side is where the audit gap sits.
How does ESRS S1 relate to the Pay Transparency Directive?
They overlap in the pay-equity layer. Directive (EU) 2023/970 sets the pay transparency reporting and joint pay assessment regime; ESRS S1 requires audit-grade disclosure of the broader workforce metrics, including gender pay gap, working-time arrangements, and incidents of discrimination. Companies in scope of both regimes need a single auditable workforce-data source.
What level of assurance applies?
Limited assurance from the first reporting year. The European Commission is required to review whether to move to reasonable assurance by 2028 in light of feasibility for auditors. Limited assurance means the auditor performs procedures sufficient to express conclusions on whether anything has come to their attention that suggests the disclosures are materially misstated; reasonable assurance is a higher bar with broader procedures.
Sources & notes
Directive (EU) 2022/2464 of the European Parliament and of the Council of 14 December 2022 (Corporate Sustainability Reporting Directive). Retrieved 2026-05-22 from eur-lex.europa.eu.
Commission Delegated Regulation (EU) 2023/2772 of 31 July 2023 supplementing Directive 2013/34/EU as regards sustainability reporting standards (ESRS). Retrieved 2026-05-22 from eur-lex.europa.eu.
Directive (EU) 2023/970 of the European Parliament and of the Council of 10 May 2023 (Pay Transparency Directive). Retrieved 2026-05-22 from eur-lex.europa.eu.
Google re:Work (2015). Guide: Understand team effectiveness — Project Aristotle. Retrieved 2026-05-22 from rework.withgoogle.com.
The specific category definitions, materiality thresholds, and detailed disclosure requirements under ESRS S1 are set out in Annex I of Commission Delegated Regulation (EU) 2023/2772. National transposition of the underlying CSRD may add jurisdiction-specific requirements. Verify your specific obligations with statutory auditor and local counsel before filing.