IT-Specific ESG Baseline & Materiality
Full ESG baseline across all campuses and data centres — PUE measurement, energy source mapping, Scope 2 market-based accounting, BRSR Core gap analysis and DPDP / CSRD scope determination.
From data centre carbon footprint and Scope 3 Category 11 (software products in use) to responsible AI governance and BRSR Core assurance — we help Indian IT companies build ESG programmes that satisfy global clients, SEBI and institutional investors simultaneously.
₹11.4L Cr
India IT & BPM sector revenue FY24 — ESG data now a top-10 client requirement
43%
of Fortune 500 IT procurement RFPs now include ESG criteria as an evaluation factor
82%
of India IT companies' Scope 2 is from purchased electricity — highest leverage decarbonisation point
2030
net zero commitment deadline for 78% of top 20 Indian IT companies — most lack credible pathways

Based on SASB Industrials, GRI standards and our proprietary materiality database across 200+ clients.
IT company Scope 2 emissions are overwhelmingly from data centre electricity. Power Usage Effectiveness (PUE), renewable energy share and Scope 2 market-based vs location-based disclosure are the top investor questions in IT ESG due diligence.
Global technology buyers (BFSI, pharma, retail) embed ESG clauses in master service agreements — requiring verified GHG data, BRSR disclosures and responsible AI policies as contract conditions. IT companies failing ESG RFP criteria are losing deals.
Investor ESG frameworks (MSCI, Sustainalytics) are developing AI governance metrics — bias audits, explainability, data privacy and algorithmic impact assessments. SEBI BRSR and EU AI Act both create disclosure obligations.
Gender pay gap, women in leadership, PWD hiring ratios and LGBTQ+ inclusion policies are BRSR Core mandatory disclosures — and among the top social metrics weighted by institutional ESG investors in IT.
E-Waste Management Rules require IT companies to register as producers and meet Extended Producer Responsibility collection targets. BRSR Core mandates waste generation, recycled content and EPR compliance disclosures.
India's DPDP Act 2023 and ISO 27001 alignment are governance KPIs in BRSR and investor ESG scoring. Cybersecurity incidents are classified as G-pillar governance failures — triggering rating agency scrutiny.
Framework / Regulation
Type
Scope & Applicability
Effective
Securities & Exchange Board of India
Listed IT companies in NIFTY 1000. Assured GHG, energy, DEI and governance KPIs — 49 total.
FY 2023–24
Ministry of Electronics & IT (MeitY)
All digital businesses processing Indian personal data. Consent, data localisation and breach notification obligations.
2024–25 Active
MoEFCC
IT equipment producers, importers and bulk consumers. EPR collection targets and CPCB registration.
Active
European Commission
Indian IT companies with EU subsidiaries or large EU revenue exposure. ESRS double materiality reporting.
2025–2026
SBTi Coalition
GHG reduction targets aligned to 1.5°C covering Scope 1, 2 & 3 Cat. 11 (products in use). Required by CDP.
Investor-Driven
Climate Group / CDP
Corporate commitment to 100% renewable electricity by target year. Required by some global procurement programmes.
Client-Driven
European Commission
Risk-based AI governance obligations for high-risk AI systems sold or deployed in EU. Affects Indian IT and AI companies.
2025–2026
NASSCOM
Industry ESG reporting framework for IT & BPM sector. Used by small/mid-cap IT companies as BRSR foundation.
Voluntary
A four-phase programme designed for multi-campus IT operations — from data centre carbon metering to client RFP ESG responses, BRSR Core assurance and responsible AI governance.
Full ESG baseline across all campuses and data centres — PUE measurement, energy source mapping, Scope 2 market-based accounting, BRSR Core gap analysis and DPDP / CSRD scope determination.
ISO 14064-3 verified Scope 1, 2 & 3 inventory. Scope 2 market-based vs location-based, renewable energy certificate (REC) strategy, SBTi ICT target validation and net zero pathway modelling.
Solar/wind PPA structuring, REC procurement, data centre energy efficiency audit, DEI programme design with quantified targets and e-waste EPR registration and collection network.
Annual BRSR Core assured disclosure with simultaneous client RFP ESG response pack, EU CSRD data set and CDP submission — from a single verified data infrastructure.
Typical ESG Maturity Uplift
Certifications We Deliver
Pulled from all three practice areas — Strategy & Advisory, Finance & Risk, and Governance & Social — filtered for information technology priority.
ISO 14064-3 verified Scope 1, 2 & 3 inventory with campus-by-campus PUE measurement and renewable energy gap analysis. SBTi ICT target validation and PPA/REC procurement strategy.
End-to-end BRSR Core data collection, KPI calculation (GHG intensity per employee, DEI ratios, e-waste EPR, data privacy governance), narrative drafting and third-party assurance.
Comprehensive ESG response pack for client RFPs and MSA ESG clauses — verified GHG data, BRSR excerpts, renewable energy certificates and responsible AI policy documentation.
AI ethics policy drafting, algorithmic impact assessment methodology, bias audit framework and EU AI Act risk classification for high-risk AI systems — aligned to SEBI BRSR governance disclosures.
Gender pay gap analysis, women in leadership target-setting, PWD hiring programme design and POSH audit — with quantified DEI KPIs aligned to BRSR Core social disclosures.
Structuring of sustainability-linked credit for green data centre construction, on-site solar and energy efficiency capex — with KPI ratchets on PUE improvement and renewable energy share.
ESG Astraa analysis shows that Indian IT companies with investor-grade ESG programmes are winning 18–26% more enterprise RFPs where ESG criteria are evaluation factors. This is a direct top-line impact.
Large BFSI and pharma clients are requiring IT suppliers to commit to 100% renewable electricity by 2030. IT companies without a credible RE100 roadmap are being removed from preferred vendor lists.
Indian IT companies with EU subsidiaries above €40M revenue are subject to full ESRS reporting from FY2025. Many are unaware their EU entity triggers the parent company ESG reporting cascade.
Non-compliance with India's DPDP Act is classified as a governance failure by ESG rating agencies — equivalent to GDPR violations in severity scoring. Data breach incidents now materially impact BRSR governance scores.
A practical guide to BRSR Core assurance, GHG inventory, renewable energy strategy and client ESG RFP compliance — with a 12-month implementation calendar for mid-size and large IT companies.
PDF Document
Our IT ESG team will assess your BRSR Core readiness, data centre carbon footprint and client ESG RFP gaps — and give you a clear priority action plan within 2 weeks.
No commitment · SBTi ICT & CSRD specialists · 2-week turnaround