CLIMATE ESSENTIALS LIMITED

Climate Essentials for Supply Chains

Climate Essentials for Supply Chains is a platform that enables organisations to measure, manage and reduce Scope 3 emissions. Buyers can baseline emissions using industry averages and invite suppliers to provide primary data through a co-branded interface, and track supplier progress, net zero status and the impact of their reductions.

Features

• Supplier invitation and onboarding functionality
• Scope 3 baseline using industry averages (DESNZ carbon factors/spend)
• Primary carbon data collection from invited suppliers
• Automatic replacement of averages with suppliers primary data
• Allocation of supplier emissions to buyer Scope 3
• Co-branded supplier interface with buyer logo
• Tracking supplier net zero targets and status
• Monitoring supplier reduction strategies and impacts
• Aggregated Scope 3 dashboards and insights
• Optional suppliers access to Net Zero Community (webinars, toolkits, resources)

Benefits

• Improves Scope 3 data accuracy over time
• Enables scalable supplier climate engagement
• Reduces manual Scope 3 data collection effort
• Supports credible Scope 3 net zero planning
• Identifies high-impact suppliers and priorities
• Tracks supplier progress and reduction impacts
• Strengthens collaboration with key suppliers
• Supports reporting and procurement requirements
• Ability to demonstrate progress towards net zero
• Provides suppliers access to Climate Essentials net zero community (optional)

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at a.campbell@climateessentials.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

242727699195929

Contact

Anna Campbell
07562 681330
a.campbell@climateessentials.com

About the service

• Service categories:

  Applications

  Supply chain management

  • Supply chain planning
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: No. The Climate Essentials software has no technical constraints that buyers need to be aware of. It is cloud-based and does not require specific hardware configurations beyond a standard internet connection and web browser.; ; Personalised support, advanced advisory input, and tailored guidance are available separately through optional consultancy packages, should buyers require additional hands-on assistance.
• System requirements:
  • Cloud-based web application accessible via a standard internet connection
  • Modern web browser required (e.g. Chrome, Edge, Firefox, Safari)
  • No additional software installations or licences required
  • No specific operating system requirements (works across Windows, macOS, Linux)
  • No specialist hardware or virtual machine configuration needed
  • Security managed at application level; no buyer-side antivirus dependencies required

User support

• Email or online ticketing support: Yes
• Support response times: Support channels: Email support and online ticketing; ; Support hours: Monday to Friday, 9:00am–5:00pm (UK time); ; Response time: Within 48 hours during working days; ; Weekend queries: Requests received over weekends or public holidays are responded to on the next working day; Enhanced support and faster response times are available through optional consultancy and support packages.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Standard support (included) covers email and telephone support. Email queries are responded to within 48 hours during working days Telephone support available Monday to Friday, 9:00am–5:00pm (UK time). The standard support covers platform access, functionality and general technical issues. The standard support is included within the service price.; ; With Enhanced support (optional), we include a dedicated Account Manager / named point of contact, priority response times, proactive support and regular service check-ins. Also available: advisory support for reporting, data quality and reduction planning. This is available through optional support services, starting at £250/day, subject to scoping.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We help users start using the service through a structured onboarding process included as standard. This includes guided onboarding to support initial setup, remote online training sessions, and access to user documentation and guidance materials. Ongoing email and telephone support is also available during working hours to assist users as they become familiar with the platform. Onsite training and tailored, in-person sessions can be provided at an additional cost, subject to buyer requirements and agreement.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: When a contract ends, users can request extraction of their data by contacting the Climate Essentials support team via email. Upon receipt of the request, the dedicated Climate Essentials team will securely provide all relevant user data in a standard, machine-readable format, such as CSV or JSON. This ensures buyers can retain, archive or migrate their data in line with their own data management requirements.
• End-of-contract process: At the end of the contract, buyer access to the Climate Essentials service is disabled unless the contract is renewed. All data remains securely retained in line with agreed data retention policies during the contract period.; The contract price includes access to the Climate Essentials software, standard onboarding, online training, user documentation, and standard email and telephone support during working hours.; Data extraction at contract end is available on request and provided in a standard machine-readable format (CSV or JSON) at no additional cost.; Any additional services, including enhanced support, dedicated account management, consultancy, custom functionality, or onsite training, are provided at an additional cost and subject to separate agreement.
• Documentation accessibility standard: WCAG 2.2 A

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: WCAG 2.2 A
• Description of service interface: The Climate Essentials for Supply Chains interface is a secure, web-based platform designed for procurement and sustainability teams. Buyers access a central dashboard where they can upload supplier lists via CSV to create an initial Scope 3 baseline using industry average data. The interface allows buyers to invite suppliers to provide primary emissions data through a co-branded supplier portal. As primary data becomes available, it can replace estimates to improve accuracy. Dashboards provide visibility of supplier emissions contributions, net zero status, reduction plans and quantified impacts on Scope 3 emissions.
• Accessibility standards: WCAG 2.2 AAA
• Accessibility testing: We have tested the Climate Essentials service interface with a range of assistive technology use cases to support accessibility. This includes keyboard-only navigation (use without a mouse), screen reader compatibility, and voice-assisted navigation. Testing focused on form inputs, data entry workflows, dashboard navigation, and report generation to ensure key functionality remains accessible. Findings from this testing have informed ongoing interface improvements, including clearer focus states, logical tab ordering, and accessible labels. Accessibility considerations are reviewed as part of regular platform updates to support inclusive use across organisations.
• API: No
• Customisation available: Yes
• Description of customisation: Platform-level functionality changes are delivered by Climate Essentials as an additional, chargeable service, depending on feasibility, complexity and agreed scope

Scaling

• Independence of resources: Climate Essentials is hosted on Microsoft Azure and designed to operate in a scalable, multi-tenant cloud environment. Azure automatically manages capacity, load balancing and resource allocation to ensure consistent performance as user demand changes. This means usage by one organisation does not negatively impact others. The platform is monitored to maintain availability and performance, and infrastructure resources can scale as required to meet demand, ensuring users experience reliable and consistent service levels at all times.

Analytics

• Service usage metrics: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: Users can export their data directly from the Climate Essentials platform by downloading CSV files. Alternatively, users can request a full data export by contacting the Climate Essentials support team, who will provide the data in a standard machine-readable format such as CSV or JSON.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: Private network or public sector network
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Climate Essentials is hosted on Microsoft Azure and is architected to support high availability and resilience. The underlying cloud infrastructure benefits from Azure’s own availability and redundancy commitments, including geographically resilient data centres and managed platform services. At present, Climate Essentials does not offer contractual application-level SLAs for platform uptime. Platform availability is continuously monitored, and operational alerts are in place to identify and respond rapidly to unplanned service issues. In the event of disruption, incidents are prioritised, and users are kept informed of progress and resolution timelines. Climate Essentials does provide defined service levels for customer support and communications. Queries submitted via the support inbox or platform contact channels receive an initial response within two working days, excluding UK public holidays. To ensure consistent service delivery, Climate Essentials actively manages internal resourcing and team capacity. Workloads are monitored across teams to avoid single-point dependencies, and planned annual leave is coordinated to maintain operational coverage across customer support, technical, and project delivery functions throughout the year. As no formal availability SLA is offered, refunds or service credits are not provided in the event that availability targets are not met. This position is reflected in the service pricing and contract terms.
• Approach to resilience: The Climate Essentials service is designed with resilience in mind and is hosted on Microsoft Azure, a highly resilient cloud platform. The service is deployed within Azure’s secure datacentre environment, benefiting from built-in redundancy, fault tolerance and automated recovery capabilities. Azure datacentres use resilient power, cooling and network infrastructure, with continuous monitoring and incident response.; ; Data is regularly backed up and stored in secure Azure environments to protect against data loss. Platform components can scale and recover automatically in the event of infrastructure issues, reducing the risk of service disruption.; ; Detailed information on the underlying datacentre architecture and resilience controls is available on request, in line with the government’s Asset protection and resilience principle.
• Outage reporting: The Climate Essentials service reports outages and service disruptions through email alerts. When an outage or significant service issue occurs, affected users are notified by email with information on the issue and, where appropriate, updates on progress and resolution.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is restricted using role-based and least-privilege controls.; ; Administrative and management interfaces are accessible only to authorised Climate Essentials personnel and approved customer administrators. Access is protected through strong authentication, including multi-factor authentication, and permissions are granted based on job role and operational need.; ; Support channels are restricted to verified customer contacts. Requests received via email or telephone are validated before any account or data changes are made. Support staff follow defined procedures to confirm identity and authorisation prior to providing assistance or accessing customer information.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Climate Essentials approaches security governance through a risk-based, proportionate framework aligned with recognised cloud security and data protection principles. Security responsibilities are clearly defined within the organisation, covering data protection, access control, incident management and supplier management.; The service is hosted on Microsoft Azure, and governance incorporates Azure’s security controls alongside internal policies and procedures. Access to systems and data is restricted on a least-privilege basis, with role-based access controls and multi-factor authentication in place.; ; Security risks are reviewed regularly, with periodic internal security and compliance reviews. Incidents are logged, managed and reviewed to support continuous improvement.
• Information security policies and processes: Climate Essentials follows documented information security policies and processes designed to protect the confidentiality, integrity and availability of customer data. These policies cover access control, data handling, incident management, change management and supplier security.; ; Responsibility for information security sits with senior management, with oversight provided at leadership level. Day-to-day security controls are implemented by the technical team, and access is granted on a least-privilege basis. Multi-factor authentication and role-based access controls are enforced.; ; Compliance with policies is maintained through internal security reviews, annual compliance and security assessments, logging and monitoring of system activity, and regular reviews of user access. Security incidents are recorded, investigated and used to inform continuous improvement.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Climate Essentials follows defined configuration and change management processes to ensure the service remains secure, stable and well controlled throughout its lifecycle.; ; Service components and configurations are tracked using version control and cloud configuration management within the Azure environment. Changes to application code, infrastructure configuration and security settings are recorded and traceable, allowing components to be monitored from deployment through to retirement.; ; Changes are assessed prior to implementation, with consideration given to potential security, performance and availability impacts. Security-relevant changes are reviewed by the technical team. Changes are deployed using managed release processes to minimise risk and support service continuity.
• Vulnerability management type: Undisclosed
• Vulnerability management approach: Climate Essentials operates a proportionate vulnerability management process aligned with the size and risk profile of the service.; Potential threats to the service are assessed through annual security and compliance reviews.; ; Information about potential threats is obtained from trusted sources including Microsoft Azure security advisories, vendor notifications, and publicly available vulnerability databases such as CVE notices. Azure’s built-in security monitoring and alerts also inform risk awareness at infrastructure level.; ; Security patches and updates are applied as part of planned maintenance cycles. Where a vulnerability is assessed as higher risk, patches or mitigations are prioritised and deployed as soon as practicable
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Climate Essentials applies a proportionate protective monitoring approach to identify and respond to potential security issues.; ; Potential compromises are identified through application logging, access logs, and security alerts provided by the underlying Microsoft Azure platform. Monitoring focuses on authentication events, access patterns, and system behaviour that may indicate unauthorised access or misuse.; ; When a potential compromise is identified, it is investigated by the technical team to assess scope and impact. Appropriate actions are taken, which may include restricting access, applying configuration changes, or deploying fixes. Where required, affected users are informed.
• Incident management type: Supplier-defined controls
• Incident management approach: Climate Essentials follows defined incident management processes to identify, manage and resolve service and security incidents.; ; Pre-defined processes are in place for common events such as service disruption, access issues and suspected security incidents.; ; Users can report incidents by contacting the Climate Essentials support team via email or telephone during working hours. Incidents are logged and prioritised based on impact and urgency.; ; Where an incident affects service availability or data, users are kept informed through email updates. Incident reports can be provided on request, outlining the nature of the incident, actions taken and resolution status.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Climate Essentials offers a free trial to allow potential buyers to explore the service before purchase. The free trial provides access to a dummy account with pre-populated example data, enabling users to view the interface, dashboards, visualisations and reporting functionality.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 3%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 7%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 12.5%
• Over £5,000,001: 15%

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: C12f794d-1e68-46d5-a201-bd5ad72bda7b
• Cyber essentials plus: No
• Cyber Essentials Alternative: You do not have a current and valid Cyber Essentials Plus certificate, or will not have in place within 12 months of the date of award but have an IASME certified equivalent.
• Other security certifications: No

Social value

• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at a.campbell@climateessentials.com. Tell them what format you need. It will help if you say what assistive technology you use.