Who entered a figure, who changed it, what it was before, which document supports it and who signed it off: ESGTrack records all of it as the work happens, in a log you can verify, so the answer is there when an auditor, an assessor or your board asks.
Illustrative screen with sample data.
The audit trail shows who changed what, when, and what it was before and after — figures with their reviews, report answers with every saved version and decision, BRSR Core KPIs, registers and settings field by field, reports and filing, assurance and team changes. Those who run the account also see sign-ins and refused pages.
It filters by kind, area, person, dates and words, exports what is shown as CSV, and checks that the activity log behind it is unbroken: each entry carries the fingerprint of the one before, so an entry changed, added or removed afterwards is found.
Bills, logs, registers, certificates and meter photos are attached to the figure they support and fingerprinted with SHA-256, so a changed file is noticed. The evidence register lists every document behind the figures a person may see, with the figure beside it: the metric, site and month, the value, and whether it waits for review.
A file opens in a panel beside the list — a PDF in the browser's own viewer, a photo as a picture — and an approver can approve it, send it back with what to correct, or ask for clarification, then move on to the next. A file replaced later is kept apart, not overwritten.
Illustrative screen with sample data.
Saved versions of a report can be compared with each other or with the current data, and a version's disclosure answers restored. Reviewers go through the report chapter by chapter, and sign-off is sealed in an approval certificate.
Final submission records the approvals up to the board and freezes the filing pack with a SHA-256 fingerprint; a stored pack is checked against it before it is served, and a changed one is refused. Figures an assurer has signed are locked, and reopening one needs a recorded reason.
ESGTrack keeps the record; it does not certify or assure it. Assurance is your provider's — see assurance readiness.
ESGTrack carries 26 standard internal controls over ESG reporting and tests 15 of them itself every day — among them maker-checker on every figure, evidence files fingerprinted and re-verified, the activity log re-verified, and filed figures unchanged after the freeze — so the controls are shown working, not only written down.
Trust and securityYes. Every change, sign-in and approval is written to an activity log in which each entry carries the fingerprint of the one before. The audit trail page checks that the chain is unbroken; change, add or remove an entry and the check says where it breaks.
Who changed what, when, and what it was before and after: figures and their reviews, report answers with every saved version and decision, BRSR Core KPIs, registers and settings field by field, reports and filing, assurance, and team changes — and, for those who run the account, sign-ins and refused pages. It can be filtered and exported as CSV.
Yes, within their engagement: the figures, answers and KPIs of the years they are engaged for, and the registers they open. Entries about a confidential case, such as a POSH complaint or a protected disclosure, are shown only to those who may open the case.
Yes. Saved versions can be compared with each other or with the current data, and a version's disclosure answers can be restored. The filing pack frozen at final submission is fingerprinted and kept as filed.
No. ESGTrack keeps the evidence, approvals and record of every change, so that your auditors, assessors and board can follow a figure to its source. Assurance is your provider's.
An assessor or assurer tests whether each BRSR Core figure can be supported — by source records, a documented method, named approvals and a trail of every change. It helps to collect evidence with each figure as it is entered, separate who enters from who approves, explain unusual movements, and fix the boundary and factors before year end rather than during fieldwork.
5 min read
Reliable ESG data comes from a simple design decided before collection starts — which indicator, at which site, how often, in what unit, entered by whom, approved by whom, with what evidence. For suppliers, ask only the partners that matter (BRSR's 2% rule is a good start), ask for little, make answering easy, and record how good each answer is.
5 min read
See the audit trail, the evidence register and a KPI traced to its documents, on sample data or your own.