CSRD/ESG vs EU AI Act

How EU sustainability reporting and AI regulation create converging governance duties for companies

Confronto rapido

Panoramica affiancata delle principali dimensioni normative

Dimensione	CSRD/ESG	EU AI Act
Primary focus	Requiring companies to report on environmental, social and governance (ESG) impacts, risks and opportunities under the European Sustainability Reporting Standards (ESRS)	Regulating AI systems in every sector through a risk-based classification, so that AI in the EU is safe, transparent and trustworthy
Scope	As amended by Directives (EU) 2025/794 and 2026/470: EU undertakings and groups exceeding both EUR 450 million net turnover and 1,000 employees, from financial years starting 1 January 2027; non-EU groups with more than EUR 450 million EU turnover from FY2028; listed SMEs are out of scope. Large public-interest entities already under the NFRD have reported since FY2024	Any provider, deployer, importer or distributor of AI systems placed on the EU market or affecting people in the EU, whatever the company's size or sector
Reporting requirements	Annual sustainability statement in the management report, following the ESRS on environmental (E1-E5), social (S1-S4) and governance (G1) topics, subject to limited assurance	Technical documentation for high-risk AI systems, reporting of serious incidents, registration of high-risk AI in the EU database and transparency notices for certain AI interactions
Risk assessment	Double materiality assessment: how sustainability matters affect the business (financial materiality) and how the business affects people and the environment (impact materiality)	Risk classification of AI systems by intended use, with conformity assessments for high-risk AI and fundamental rights impact assessments for deployers of certain high-risk systems
Governance	Disclosure of board oversight of sustainability matters, of how ESG fits into strategy, of due diligence processes across the value chain and of stakeholder engagement	Quality management systems, human oversight, measures to support the AI literacy of staff and organisational measures proportionate to the AI system's risk level
Penalties	Set by Member States when transposing the CSRD; typically fines, public statements and possible liability for directors who breach reporting obligations	Prohibited practices: up to EUR 35 million or 7% of global turnover; high-risk violations: up to EUR 15 million or 3%; incorrect information to authorities: up to EUR 7.5 million or 1%
Due diligence	Reporting on value chain impacts upstream and downstream, and on the processes used to identify, prevent, mitigate and remedy adverse impacts. Companies with up to 1,000 employees can decline value chain requests that go beyond the voluntary standard	Value chain duties for AI: providers must ensure training data quality, importers and distributors must verify compliance, and deployers must monitor how the AI system performs in use

Differenze principali

Che cosa distingue queste normative

CSRD/ESG
The CSRD requires disclosure; the AI Act requires compliance
The CSRD is a disclosure framework: companies must report transparently on sustainability performance, but no specific sustainability outcome is mandated. The AI Act is product regulation: it sets mandatory requirements for AI systems, bans certain practices and imposes strict duties for high-risk AI, whatever a company discloses.
EU AI Act
The AI Act uses a product safety model
The AI Act sorts AI systems into risk tiers with conformity assessments and CE marking, borrowing from EU product safety law. The CSRD follows a reporting standard model in which companies use materiality assessments to decide which ESRS topics to report on, a very different mechanism.
CSRD/ESG
The CSRD covers the full ESG spectrum
The CSRD requires reporting on climate, pollution, biodiversity, resource use, workforce, communities, consumers and governance. The AI Act focuses on the safety, transparency and fundamental rights impact of AI systems. Still, AI systems increasingly have environmental and social effects that companies may need to report under the CSRD.
EU AI Act
AI Act fines far exceed typical CSRD enforcement
The AI Act's maximum fine of EUR 35 million or 7% of global turnover is one of the highest in EU law. CSRD penalties are set by Member States and tend to follow existing corporate reporting enforcement, which is generally milder. CSRD reports are subject to assurance, though, and misstatements can carry serious market and reputational consequences.

Dove si sovrappongono

Ambiti in cui le due normative hanno punti in comune

Both involve board-level governance: the CSRD requires disclosure of board oversight of sustainability, while the AI Act requires governance structures for AI risk management and human oversight
Both look at the value chain: the CSRD requires reporting on sustainability impacts across the value chain, while the AI Act sets duties on AI components, training data and downstream use
The environmental impact of AI is becoming a CSRD topic: the energy use and carbon footprint of AI systems, particularly large language models, may need to be disclosed under ESRS E1 (Climate change)
Both address effects on people: the CSRD through impact materiality covering affected communities and workers, the AI Act through fundamental rights impact assessments by deployers of high-risk AI
Both promote transparency and accountability: the CSRD through standardised public reporting, the AI Act through technical documentation, registration databases and user notices

Quale si applica al Suo caso?

Scenari comuni e quale normativa prevale

You are a company in CSRD scope that uses AI

Both apply. Under the AI Act, make sure your AI systems meet the requirements of their risk tier. Under the CSRD, consider whether AI-related topics are material: the environmental footprint of your AI infrastructure (E1), the workforce effects of AI automation (S1), AI governance processes (G1) and how AI affects consumers (S4). Handling AI governance and ESG reporting together saves work.

CSRD/ESGEU AI Act

You are an AI provider below the CSRD thresholds

The AI Act applies to your AI systems according to their risk class. The CSRD does not require you to report, but clients in scope may ask for sustainability data about your AI products for their value chain reporting. If you have up to 1,000 employees, you can decline requests that go beyond the voluntary reporting standard.

EU AI Act

You are a company in CSRD scope that does not use AI systems

Only the CSRD applies. Focus on your ESRS reporting, including the double materiality assessment, value chain information and governance disclosures. The AI Act does not apply if you do not develop, deploy or use AI systems.

CSRD/ESG

Domande frequenti

Domande comuni su queste normative

The CSRD does not mention AI, but companies using AI may need to report on it under several ESRS topics. The environmental impact of AI systems (energy use, data centre emissions) is relevant to ESRS E1 (Climate change). AI's effect on the workforce (automation, reskilling) is relevant to ESRS S1 (Own workforce). AI governance may be relevant to ESRS G1 (Business conduct). Companies should run AI through their double materiality assessment to decide what to report.

Both involve the board, from different angles. Under the CSRD, companies disclose how the board oversees sustainability strategy and reporting. The AI Act requires providers and deployers to set up human oversight and governance for AI risk. For companies subject to both, building AI governance into existing ESG governance avoids duplication and keeps oversight coherent.

Yes, and it closes an interesting loop. AI tools can help companies collect, analyse and report sustainability data, particularly for value chain information and double materiality analysis. Any AI used for CSRD reporting must itself comply with the AI Act. Sustainability reporting is not one of the high-risk uses listed in Annex III, so such tools usually fall outside the strictest obligations, but the AI Act's general rules still apply.

Both change companies, in different ways. The CSRD changes how large companies report their effect on society and fold sustainability into strategy, which touches investor relations, brand and access to capital. The AI Act changes how companies build and deploy technology, which touches innovation, product development and competitive position. Together, they push companies towards more responsible and transparent practice.

With Radar, Reversa's agents read the official sources for both frameworks, including ESRS delegated acts, EFRAG publications, national transposition acts and AI Act implementing measures, and tell you which changes affect you, and why. Lawmaking follows amendments such as the Omnibus directives from draft to adoption. Compliance carries the obligations of both texts to controls, owners, deadlines and evidence, so shared governance work is done once.