The conversation about carbon credit quality has shifted substantially over the past two years, but the documentation practices at most corporate sustainability teams haven't kept pace. The retirement certificate — the PDF that a registry generates when you retire a credit — remains the primary record that most sustainability reports cite as evidence of carbon procurement. External auditors are increasingly treating that as insufficient. Understanding what they're asking for instead, and why, is the most practical thing a sustainability officer can do before the next assurance engagement.
This piece is written for sustainability professionals who are responsible for managing carbon procurement under GHG Protocol accounting frameworks and who are preparing for third-party assurance of their net-zero or carbon-neutral claims. The standards landscape is real; the documentation gap is structural; and the path to closing it is achievable with the right workflows in place.
What the GHG Protocol Actually Requires
The GHG Protocol Corporate Standard and its Scope 2 Guidance (2015) established the foundational framework for how companies account for indirect emissions. For Scope 3, the relevant document is the Corporate Value Chain (Scope 3) Accounting and Reporting Standard (2011), though the protocol has issued supplementary guidance on nature-based solutions and carbon credits that is relevant to how retired credits can be accounted for.
A key distinction in GHG Protocol accounting: carbon credits retired against Scope 1 or Scope 3 emissions cannot be treated as eliminating those emissions from the inventory. They are accounted for separately, as a "beyond value chain mitigation" (BVCM) contribution. This means a company claiming carbon neutrality through credit retirement must still accurately report its full Scope 1, 2, and 3 emissions, and separately disclose the quantity and quality of credits used to offset the residual.
The documentation requirements under GHG Protocol for the BVCM portion include: the quantity of credits retired, the project type and registry, the vintage year, the serial numbers, and the retirement certificate. What's notably absent from the standard's explicit requirements — but what auditors under ISAE 3000 (the international standard for sustainability assurance engagements) are increasingly looking for — is the chain of evidence connecting the retirement certificate to the verified measurement that underlies it.
What Auditors Are Asking For That Isn't in the Standard
Assurance standards for sustainability reporting, including ISAE 3000 and the more recent ISSA 5000 (the IAASB's draft sustainability assurance standard), require assurance practitioners to obtain "sufficient appropriate evidence." For carbon credit claims, "appropriate evidence" is evolving.
Take a hypothetical scenario common in European consumer goods companies: a mid-size manufacturer with approximately 180,000 tonnes of Scope 3 emissions has purchased and retired 30,000 tonnes of VCUs from three different REDD+ projects in two different registries to support a "30% carbon neutral" claim on a product line. The sustainability team submits the three retirement certificates to the external auditor as documentation.
The auditor's materiality calculation places the carbon claim in scope for detailed review. Their questions go beyond the certificates: What are the serial number ranges, and can they be verified as currently retired in the registry (not merely "certificate issued")? Are any of the projects subject to open complaints or ongoing review at the registry level? Are the project vintage years consistent with the company's reporting period? Has the project developer publicly acknowledged any methodological changes that affect this vintage? Is there documentation that the broker through whom the credits were purchased was a legitimate intermediary with proper transfer records?
Most sustainability teams can answer two or three of those questions readily. Few can answer all of them programmatically. That's the documentation gap that the next generation of assurance engagements is exposing.
The TCFD and SBTi Dimensions
Two frameworks have accelerated the scrutiny of carbon procurement in ways that go beyond GHG Protocol accounting. TCFD (Task Force on Climate-related Financial Disclosures) recommendations, now embedded in mandatory climate reporting requirements in jurisdictions including the EU (CSRD), UK, and for large US public companies (SEC climate rules), require disclosure of transition plans and the role of carbon credits in those plans. The quality and verifiability of the credits cited in a transition plan affects the credibility of the overall transition narrative in the eyes of investors and analysts reviewing climate risk.
The Science Based Targets initiative (SBTi) is more prescriptive. Its Corporate Net-Zero Standard explicitly limits the role of carbon credits in meeting a company's near-term science-based targets — neutralization of residual emissions using credits is only permitted for residuals that cannot be reduced further with available technology. The standard requires that neutralization credits be "of high environmental integrity," with specific reference to the ICVCM's Core Carbon Principles as the relevant quality benchmark. SBTi-validated companies who use credits that later fail CCP eligibility review have a problem — not just in their sustainability reports, but in their SBTi commitment status.
We're not saying every company needs to achieve the documentation standard of a clinical trial for its carbon procurement. But the direction of travel is clear: the informal trust that retirement certificates represent legitimate impact is giving way to a documentation standard where the chain of evidence must be queryable, not just asserted.
Building the Documentation Stack Before the Audit
The documentation that a sustainability team should have on file for each carbon procurement transaction — ideally maintained in a structured format, not in an email folder — has four levels:
Level 1: Registry verification. For each serial number or serial number range, confirm in real time at the registry that the credits are in "retired" status and that the retirement record names your entity (or explicitly lists your entity as beneficiary). Do this at time of retirement, not months later at reporting time. Registry records can be corrected or updated; your confirmation at time of event is your contemporaneous evidence.
Level 2: Project-level documentation. Obtain and file the following for each project from which you've purchased credits: the project registration documents from the registry, the most recent verification report (the VVB's attestation that covers the vintage you purchased), and any material findings notices or methodology update letters issued by the registry for that project. Most of this is publicly available on registry project pages; the effort is in systematically retrieving and storing it, not in accessing it.
Level 3: Transaction records. Maintain a complete record of the custody chain from your purchase forward: the purchase agreement with your broker or developer, any transfer confirmations showing the serial numbers moved through their system to yours, and the retirement event confirmation. If you purchased through multiple intermediaries, the full chain matters — a retirement certificate in your name that was preceded by a disputed broker insolvency creates audit complexity you don't want to discover mid-engagement.
Level 4: Quality assessment. Document your diligence on the credit quality at time of purchase. This can include ratings from analytical firms, the ICVCM CCP eligibility status, or your own assessment based on the project documentation. The key is having a contemporaneous record of why you believed these credits met your quality criteria at time of purchase, not just a post-hoc assertion.
The Certification Question
Several programs have emerged to provide third-party certification of a company's carbon neutrality claim: SBTi validation, PAS 2060 (the British Standards Institute's carbon neutrality specification), and industry-specific standards. These programs add assurance value but they do not substitute for the underlying documentation stack. A PAS 2060 certification attests to the process; an ISAE 3000 limited assurance engagement attests to the accuracy of the reported quantities. Neither replaces the need for a complete, queryable chain of evidence at the credit level.
Sustainability officers who are preparing for mandatory climate reporting under CSRD (for companies in scope) or who are managing SBTi commitments should treat the Level 1–4 documentation stack as a continuous operational process, not an annual reconciliation exercise. Credits purchased in Q1 whose documentation gaps surface in Q4 during the audit process are a resource drain and a reputational risk. The documentation work is easiest when it's done at time of transaction.
The market infrastructure for making this documentation less manual is developing. Structured data exports from registries, verification report indexing, and chain-of-custody linkage at the serial-number level would dramatically reduce the labor involved in maintaining a complete procurement record. Until that infrastructure is fully mature, the burden falls on sustainability teams to build the documentation discipline themselves.
