Scope 3 emissions: what they are and how to measure them

Last updated August 2026. The GHG Protocol splits a corporate footprint into three scopes. Scope 1 is what you burn, Scope 2 is the energy you buy, and Scope 3 is everyone else's emissions that exist because of your business: your suppliers' factories, the trucks that carry your freight, your employees' commutes, your products in use. The full breakdown of all three sits on our scope 1 2 3 emissions guide.

Scope 3 dominates because a modern company outsources most of its physical activity. A software firm's cloud bill, a manufacturer's steel coil, a retailer's inbound logistics: each is another organization's Scope 1 and 2, and your Scope 3.

Scope 3 emissions are the indirect greenhouse gas emissions that occur in a company's value chain but come from assets it does not own or control. The GHG Protocol organizes them into 15 categories across upstream activities, such as purchased goods and freight, and downstream activities, such as the use and disposal of products sold. They typically account for 70% to 90% of a corporate footprint.

The distinction that trips people up is control, not distance. Emissions from a leased vehicle can be Scope 1 or Scope 3 depending on whether the lease is finance or operating and which consolidation approach you chose, which is why the boundary decision comes before any number exists. That choice is worked through in operational vs financial control.

The cleanest example is a purchase. If you buy $2 million of steel, the emissions from smelting that steel are the mill's Scope 1 and your Scope 3 category 1. Nothing happened on your site, no fuel was burned by you, and the tonnes still belong in your inventory because your order caused them. The same logic covers the freight that delivered it, the flight your buyer took to negotiate the contract, and the emissions released when your finished product is eventually scrapped.

The pattern in that table is worth noticing: for most companies two or three categories carry almost the whole number, and the remaining twelve are rounding. Finding out which ones is the entire point of a first screening pass, and it takes days rather than months if you start from spend. Every category is defined with examples on Scope 3 categories, and three full company walkthroughs, line by line, are in Scope 3 emissions examples.

Until recently Scope 3 was voluntary territory. That has changed. The EU's CSRD requires material Scope 3 disclosure under ESRS E1, the ISSB's IFRS S2 requires Scope 3 for companies adopting it, California's SB 253 phases in Scope 3 reporting for large companies doing business in the state, and large customers increasingly push supplier questionnaires down their chain. If one of your customers reports Scope 3, your emissions are their category 1, and they will ask you for numbers.

The GHG Protocol Corporate Value Chain Standard defines fifteen categories: eight upstream (purchased goods and services, capital goods, fuel- and energy-related activities, upstream transport, waste, business travel, commuting, upstream leased assets) and seven downstream (downstream transport, processing, use of sold products, end-of-life, downstream leases, franchises, investments). Each is defined precisely, with examples, on our scope 3 categories reference.

Very few companies have all fifteen. A screening pass tells you which three or four actually matter for you; category 1, purchased goods and services, is the largest line for most.

Every measurement is activity data multiplied by an emission factor. The three passes below are the usual sequence, and the full methodology, including which US factor sets to apply to each category, is on how to calculate Scope 3 emissions.

A defensible first inventory uses all three, in that order, and documents which method sits behind every line. That is the core discipline of carbon accounting software: not the arithmetic, but keeping the trail from a reported tonne back to the invoice line and factor that produced it. How to prioritize the move from spend to activity data is covered in our post on what Scope 3 actually includes.

There are three triggers, and most US companies meet the third one first. Statute is the narrowest: California SB 253 requires companies over $1 billion in revenue doing business in the state to report Scope 1 and 2 from November 10, 2026, with Scope 3 following in 2027. Accounting standards are the second: IFRS S2 requires you to consider all 15 categories and disclose which you included, which reaches US companies through foreign subsidiaries, listings and parent-company consolidation.

The third is commercial, and it has no revenue threshold at all. A large customer asks you to disclose, usually through CDP, and non-response is recorded. Roughly 45,000 suppliers get that request each year. What the request involves, and why the customer is pushing, is set out in the CDP supply chain questionnaire, and the tooling side of answering one is on supplier emissions reporting software. The regulatory paths are on SB 253 reporting software and climate disclosure software. Which of these obligations actually reaches a US company, with the revenue thresholds and the exact filing dates, is set out on Scope 3 emissions reporting requirements.

You report Scope 3 by category, not as a single number, and you state the method behind each one. Every framework asks the same three things: which of the 15 categories you included, which you excluded and why, and whether each figure came from spend, activity data or a supplier. An honest "estimated from spend using EPA USEEIO factors" scores better everywhere than a precise-looking total with no method attached. The reporting mechanics, including what each framework wants in what format, are on Scope 3 emissions reporting requirements.

You cannot cut what you cannot attribute. Scope 3 reduction in practice means procurement decisions: supplier selection and engagement, material substitution, modal shift in logistics, product redesign for use-phase energy. Every one of those levers needs the inventory to show which supplier, lane or product carries the tonnes, which is why a classified, evidence-linked ledger beats a one-off consulting PDF that is stale the quarter it lands.

The sequencing matters too. Setting a reduction target before the baseline is stable means restating the target the first time you improve the data, so fix the base year and the recalculation policy first: how to set an emissions baseline year covers the decisions that are cheap now and expensive later.

It depends on which framework reaches you, and for most US companies the answer arrives through a customer rather than a regulator. Scope 3 is mandatory under California SB 253 from 2027, required under IFRS S2 in adopting jurisdictions, and effectively required by any large customer that sends you a CDP request. The federal SEC climate rule, which would have been the broadest US trigger, was proposed for full rescission on May 29, 2026, so California and customer pressure are now the whole US story.

The common thread is not precision, it is defensibility. Every regime accepts estimation, including spend-based estimation, in early years. What they do not accept is a number nobody can reproduce: which lines were included, which factor was applied, who changed the method between years. That lineage is the product of disciplined carbon accounting software, and it is what a consulting spreadsheet loses the day the engagement ends.

No, but you have to consider all 15 and say which ones you included. IFRS S2 states this explicitly: a company must consider the full set of categories and disclose which are in its reported figure, without being required to report all of them. CDP works the same way in practice, because a blank answer scores zero while an explained exclusion does not.

The distinction is between an exclusion and an omission. An exclusion is a documented decision with a materiality reason behind it, and reviewers accept it. An omission is a category that simply is not there, and it reads as incomplete work. Deciding which is which is a screening exercise, covered in Scope 3 materiality assessment.

Assurance is a sampling exercise, not a recalculation. The provider picks lines from your reported total and asks you to show the record behind each one. A figure that cannot be traced back to an invoice, meter reading or supplier response fails the sample regardless of how accurate the estimate was.

That is why the practical test of Scope 3 reporting readiness is not whether you have a number, it is whether you can produce the derivation of any single line in it on request. California phases assurance in deliberately: no assurance requirement for the 2026 Scope 1 and 2 report, and limited assurance over Scopes 1 and 2 beginning with reports submitted in 2027. The step to reasonable assurance over Scopes 1 and 2, plus limited assurance over Scope 3, is written into the statute for 2030 but CARB has expressly deferred it to a future rulemaking, so treat it as a planning assumption rather than a settled date. What those levels actually demand is explained in limited vs reasonable assurance, and the standards CARB accepts for each engagement are listed in SB 253 assurance requirements.

The classification step can be, and that is where the hours go. Screening a full accounts payable export means assigning thousands of lines to a scope, a category and an emission factor, which is a repetitive judgment task rather than an analytical one. Our approach drafts that classification with a confidence level per line, leaves a human to review the uncertain ones, and keeps each figure linked to the source record so the evidence trail survives into assurance.

What cannot be automated is the boundary, the materiality decisions and the basis of preparation. Those are judgments you have to make and document, and a tool that appears to make them for you has simply hidden them. What to look for in the tooling layer, including the capability checklist worth taking into a vendor call, is on Scope 3 emissions software.