Why Enterprise Buyers Now Require a Vendor Carbon Footprint Audit

Lucas: Luna, have you seen the new procurement checklist that JPMorgan sent to its software vendors last quarter? Luna: I haven't, but I'm guessing it's not just about uptime and SLAs anymore. Lucas: Exactly. Buried on page fourteen is a clause that would have been unthinkable three years ago: a mandatory vendor carbon footprint audit.

And it's not optional. You don't comply, you don't get the deal. Luna: So we're talking Scope 1, 2, and 3 emissions data as a contract requirement? Lucas: That's exactly it.

And the interesting part is that JPMorgan is not alone. Microsoft started including similar language in its supplier agreements back in 2023. But now it's spreading fast. I talked to a procurement officer at a large European bank last week, and she told me that over sixty percent of their new software RFPs now include a carbon audit request.

Luna: That's a huge shift. How are vendors actually measuring this? Especially Scope 3 - that's the supply chain emissions, which for a SaaS company could be everything from cloud hosting to employee laptops. Lucas: Right, and that's exactly where it gets messy.

Let me give you a concrete example. There's a mid-market CRM company I'll call CloudSales - about 500 employees, maybe 50 million in annual recurring revenue. They were in the final stage of a 15-million-dollar deal with a Fortune 500 financial services firm. The deal was basically done.

Then procurement drops this carbon audit requirement. Luna: Ouch. Did they have the data? Lucas: Not even close.

They had a rough number for their office electricity - Scope 1 and 2 - but Scope 3? Zero. They didn't know what their AWS hosting emissions were, let alone the carbon footprint of their sales team's flights or the devices they issued to employees. The deal stalled for three months while they scrambled to hire a consultant and implement a carbon accounting tool.

Luna: And did they eventually close? Lucas: They did, but only after they signed up with a platform called Watershed to get a verified audit. And they had to commit to annual reporting with a third-party auditor. The whole process cost them around 200 grand, which is a lot for a mid-market company.

But losing a 15-million-dollar deal would have been worse. Luna: So who are the winners here besides the climate? There's clearly a new compliance software category emerging. Lucas: Absolutely.

Companies like Watershed and Persefoni are the obvious ones. They've built platforms that help enterprises track and report emissions across their entire value chain. Watershed just raised a Series C at a valuation north of two billion. Persefoni is also doing well, especially with financial services firms that need to align with the Partnership for Carbon Accounting Financials.

Luna: And the SEC's new climate disclosure rules - they were finalized in March 2026, right? That's definitely accelerating this. Lucas: It's a huge catalyst. The SEC now requires publicly traded companies to disclose Scope 1 and 2 emissions, and for many, Scope 3 as well, if it's material.

That means if you're a public company buying software, you need your vendors' data to fill in your own disclosure. So procurement is becoming a data-collection function. Luna: So the vendor carbon audit isn't just a nice to have - it's becoming a prerequisite for doing business with any large enterprise. Lucas: Exactly.

And the standard they're using is the Greenhouse Gas Protocol, which categorizes emissions into three scopes. But here's the kicker: there's no universal accreditation body yet for carbon audits. So buyers are having to decide what counts as 'verified.' Some accept a self-reported audit if it's done using a recognized methodology.

Others demand third-party assurance from firms like DNV or SGS. Luna: That sounds like a recipe for confusion. Are we seeing any pushback from vendors? Lucas: Some, but not much.

The vendors that resist are usually smaller ones who don't have the resources. But they're learning quickly that it's a deal-killer. I've heard of a few cases where a vendor outright refused, and the buyer just moved on. There's enough competition in most software categories that buyers can afford to be picky.

Luna: If today's episode was useful for what you're building or running, the way these conversations stay ad-free is listener support. You can find us at buy me a coffee dot com slash fexingo. Lucas: Yeah, it's a small way to keep the show going. Appreciate anyone who chips in.

Luna: So back to the carbon audit - what about startups that want to sell to enterprises? Should they start building this capability now? Lucas: Absolutely. If you're a B2B SaaS founder and you're not already collecting emissions data, you're at a competitive disadvantage.

Even if your current customers don't ask for it, the ones you'll want in two years will. And it's not just about compliance - it's also a signal. A company that can show a detailed, verified carbon footprint is saying, 'We're mature, we're transparent, we're ready for your scrutiny.' Luna: It's a trust signal, essentially.

And in enterprise sales, trust is everything. Lucas: Exactly. And here's one more number that stuck with me: according to a survey by Salesforce, 78 percent of enterprise buyers say they've walked away from a deal because the vendor's sustainability practices didn't align with their own. That's not a niche concern anymore - that's mainstream procurement.

Luna: So what's the one thing a vendor should do this week if they want to prepare? Lucas: Start with your cloud provider. If you're on AWS, Azure, or GCP, they all have carbon footprint dashboards. Pull that data.

Then map your employee travel and device procurement. You don't need a full-blown audit yet, but you need a baseline. Once you have a baseline, you can start talking to buyers who ask. Luna: And for buyers, what's the red flag to watch for?

Lucas: If a vendor says they're 'carbon neutral' but can't show you the underlying data, that's a red flag. Carbon neutrality claims are often based on offsets that may not be credible. What you want is a detailed inventory - Scope 1, 2, and 3 - with a clear methodology. The gold standard is third-party verification, but at minimum, they should be using a recognized framework like the GHG Protocol.

Luna: So it's about moving from marketing claims to actual data. That seems like a healthy trend. Lucas: It really is. And I think five years from now, a carbon audit clause will be as standard as a data security clause.

It's just part of doing enterprise software business.