Case study: Regulation watch (EU/US/Global) — a startup-to-enterprise scale story

When the European Union's Corporate Sustainability Reporting Directive (CSRD) entered force in January 2024, it instantly created compliance obligations for approximately 50,000 companies, up from roughly 11,700 under the prior Non-Financial Reporting Directive. A 2025 survey by PwC found that 72% of in-scope companies lacked the internal capabilities to meet the directive's 1,178 data points across 12 European Sustainability Reporting Standards (ESRS) topics (PwC, 2025). Simultaneously, the US Securities and Exchange Commission finalized its climate disclosure rules, California enacted SB 253 and SB 261, and the International Sustainability Standards Board (ISSB) published IFRS S1 and S2 as global baselines. This regulatory avalanche created an unprecedented market opportunity for technology companies that could help organizations monitor, interpret, and operationalize sustainability regulation across jurisdictions. The journey from startup regulatory intelligence tool to enterprise-grade compliance platform reveals patterns that sustainability leads, investors, and founders should study carefully.

Why It Matters

The regulatory landscape for sustainability has undergone a structural shift. Between 2020 and 2025, the number of mandatory sustainability disclosure requirements worldwide increased from 276 to over 700, spanning climate, biodiversity, human rights, and circular economy domains (GRI and University of Stellenbosch, 2025). Companies operating across multiple jurisdictions face overlapping, sometimes contradictory, requirements. A European automotive manufacturer exporting to the US, sourcing materials from Asia, and selling into emerging markets must simultaneously comply with the EU CSRD, the EU Carbon Border Adjustment Mechanism (CBAM), the US SEC climate rules, California's emissions disclosure mandates, and potentially dozens of additional national frameworks.

The cost of non-compliance is escalating rapidly. The EU CSRD carries penalties that member states are setting at up to 10 million euros or 5% of net turnover, whichever is higher, for material misstatements. The SEC's climate disclosure rules expose companies to securities fraud liability for inaccurate emissions reporting. In 2024, the French Duty of Vigilance Law resulted in a court ordering TotalEnergies to overhaul its climate strategy, while German supply chain due diligence legislation (LkSG) triggered formal investigations of 47 companies in its first 18 months of enforcement (German Federal Office for Economic Affairs and Export Control, 2025).

For sustainability leads, understanding how regulatory technology (RegTech) companies have scaled provides insight into which solutions deliver genuine compliance capability versus those that offer superficial coverage. For investors, the regulatory compliance market for sustainability is projected to reach $28.7 billion by 2028, growing at a compound annual rate of 23.4% (Verdantix, 2025). Choosing the right platform has become a strategic decision with material financial implications.

Key Concepts

Regulatory intelligence refers to the systematic collection, analysis, and dissemination of information about current and forthcoming regulations that affect an organization's operations. Unlike simple news monitoring, enterprise-grade regulatory intelligence includes horizon scanning for proposed rules, impact assessment modeling, and gap analysis against existing compliance postures.

Double materiality is a foundational concept introduced by the EU CSRD that requires companies to assess both the impact of sustainability issues on the company (financial materiality) and the company's impact on people and the environment (impact materiality). Operationalizing double materiality assessment requires regulatory tracking tools that can map disclosure requirements to specific business activities and value chain relationships.

Interoperability mapping describes the process of identifying equivalences and gaps between regulatory frameworks across jurisdictions. For example, ISSB IFRS S2 climate disclosures overlap significantly with CSRD ESRS E1 (Climate Change) but diverge on Scope 3 reporting granularity, double materiality requirements, and transition plan specificity. Companies that must comply with both frameworks need tools that can identify shared data points to avoid duplicative reporting efforts.

Regulatory change management encompasses the organizational processes, workflows, and governance structures required to translate new regulatory requirements into operational compliance. This includes responsibility assignment, deadline tracking, evidence collection, and audit trail management across departments including legal, finance, sustainability, procurement, and operations.

What's Working

Persefoni's trajectory from carbon accounting startup to enterprise regulatory compliance platform illustrates how regulatory demand can accelerate scaling. Founded in 2020 as a carbon footprint measurement tool, Persefoni recognized by 2022 that its clients needed not just emissions data but the ability to map that data to specific regulatory disclosure formats. The company raised $101 million in Series B funding in 2022 and subsequently expanded its platform to support CSRD, SEC, ISSB, and California disclosure requirements. By Q4 2025, Persefoni served over 200 enterprise clients including multinationals with operations in 30+ countries. The platform ingests emissions data, financial data, and supply chain information, then automatically generates disclosure-ready outputs formatted to the specific requirements of each applicable regulation. Persefoni's net revenue retention rate exceeded 140% in 2025, indicating that existing clients consistently expanded their usage as new regulatory requirements came into effect (Persefoni, 2025).

The key product-market fit insight was that enterprises do not want separate tools for each regulatory framework. They want a single platform that can ingest operational data once and produce compliant outputs for every jurisdiction where they operate. This "report once, comply everywhere" approach dramatically reduced the total cost of compliance for large multinationals that previously maintained separate reporting processes for EU, US, and other jurisdictions.

Novata's approach to mid-market and private equity regulatory compliance demonstrates a different but equally successful scaling path. Co-founded in 2021 by the Ford Foundation, S&P Global, Hamilton Lane, and others, Novata targeted the private equity and private credit market where portfolio companies face regulatory disclosure requirements but lack dedicated sustainability teams. By 2025, Novata's platform served over 1,500 portfolio companies across 180 private equity funds, providing automated regulatory applicability assessments, data collection workflows, and disclosure generation. The company's growth was driven by a network effect: as limited partners (LPs) increasingly required ESG disclosure from general partners (GPs), GPs in turn required portfolio companies to use standardized data collection tools. Novata's revenue grew approximately 280% between 2023 and 2025 (Novata, 2025).

Watershed's integration of regulatory tracking with decarbonization planning shows how combining compliance with action drives enterprise adoption. Watershed, which raised $100 million in Series C funding in 2024 at a valuation exceeding $1.8 billion, built regulatory tracking directly into its emissions measurement and reduction planning platform. When a new regulation is enacted, the platform automatically identifies which clients are affected, assesses their current data readiness, and generates gap analyses with specific action items. This approach converted regulatory compliance from a reactive burden into a proactive strategic planning tool. By late 2025, Watershed served more than 300 enterprises including Airbnb, Stripe, and Carlyle Group, with 90% of clients using the regulatory tracking module alongside emissions measurement (Watershed, 2025).

What's Not Working

Fragmented point solutions continue to create compliance gaps. Many organizations have assembled patchwork technology stacks with separate tools for carbon accounting, CSRD reporting, supply chain due diligence, and CBAM compliance. A 2025 survey by Deloitte found that enterprises using four or more separate sustainability compliance tools spent 65% more on total compliance costs than those using integrated platforms, primarily due to data reconciliation efforts, duplicated data collection requests to business units, and inconsistent methodology application across tools (Deloitte, 2025).

Regulatory interpretation accuracy remains uneven across providers. The complexity of sustainability regulation means that software platforms must make interpretive judgments about requirements. A 2025 audit by the European Financial Reporting Advisory Group (EFRAG) found significant variations in how software platforms interpreted CSRD data point requirements, with some platforms omitting up to 23% of mandatory disclosures for certain ESRS topics. Companies that relied solely on software-generated compliance assessments without independent legal review discovered material gaps during their first assurance engagements.

Scaling across non-EU/US jurisdictions proves difficult. While most RegTech platforms have achieved strong coverage of EU and US regulatory requirements, coverage of regulations in markets such as Brazil (CVM sustainability reporting rules), India (SEBI BRSR requirements), Japan (SSBJ standards), and emerging frameworks across Southeast Asia and Africa remains inconsistent. Companies with significant operations in these regions report that they still require manual regulatory tracking and local legal counsel for compliance, undermining the promise of global regulatory intelligence platforms.

Data quality at the entity level is the binding constraint. Even the most sophisticated regulatory tracking platform cannot generate accurate disclosures from poor underlying data. Scope 3 emissions, biodiversity impact metrics, and human rights due diligence indicators require data from suppliers, customers, and portfolio companies that is often unavailable, inconsistent, or unreliable. Multiple regulatory compliance startups that achieved rapid early growth have faced client churn when customers discovered that the platform could identify what they needed to report but could not solve the underlying data availability problem.

Key Players

Established Companies

Wolters Kluwer: Global information services company with a dedicated ESG regulatory intelligence division covering over 100 jurisdictions. Revenue from sustainability compliance solutions exceeded $400 million in 2025.

S&P Global: Through its Sustainable1 division, provides regulatory tracking integrated with ESG data, credit risk, and commodity analytics for financial institutions.

MSCI: Offers regulatory compliance mapping tools integrated with its ESG ratings and climate risk analytics, serving over 6,500 institutional clients globally.

SAP: Enterprise resource planning giant with embedded sustainability reporting modules that map directly to CSRD, SEC, and ISSB requirements within existing financial reporting workflows.

Startups

Persefoni: Carbon accounting and regulatory compliance platform serving 200+ enterprises across 30+ countries with multi-framework disclosure generation.

Novata: Private equity focused ESG data management and regulatory compliance platform covering 1,500+ portfolio companies.

Watershed: Integrated emissions measurement, reduction planning, and regulatory compliance platform valued at over $1.8 billion.

Normative: Stockholm-based carbon accounting and regulatory compliance platform backed by Google, specializing in EU CSRD and CBAM compliance for mid-market companies.

Plan A: Berlin-based sustainability platform providing automated CSRD compliance, carbon accounting, and supply chain emissions tracking for European enterprises.

Investors

Brookfield Asset Management: Major investor in sustainability compliance technology through its technology growth fund.

General Atlantic: Led Watershed's $100 million Series C round, reflecting conviction in regulatory-driven demand for compliance platforms.

EQT Ventures: Active investor in European RegTech companies targeting sustainability compliance, with portfolio companies including Plan A.

Action Checklist

• Conduct a regulatory applicability assessment covering all jurisdictions where your organization operates, has subsidiaries, or generates significant revenue, including forthcoming regulations with announced effective dates through 2028
• Evaluate whether your current compliance technology stack provides integrated multi-framework reporting or relies on fragmented point solutions that create reconciliation overhead
• Assign clear internal ownership for regulatory change management, including a named individual responsible for monitoring new requirements and triggering implementation workflows
• Map data availability against disclosure requirements for each applicable framework, identifying Scope 3 categories, biodiversity metrics, and supply chain indicators where data gaps exist
• Establish a legal review checkpoint in your disclosure preparation process to validate software-generated compliance assessments against independent regulatory interpretation
• Build relationships with local regulatory counsel in non-EU/US jurisdictions where your organization has material exposure, particularly Brazil, India, Japan, and key ASEAN markets
• Negotiate platform contracts that include regulatory update commitments specifying timelines for incorporating new regulations and amendments into the software
• Create a cross-functional compliance steering committee with representation from legal, finance, sustainability, procurement, and operations to coordinate enterprise-wide regulatory response

FAQ

Q: How should an organization choose between building in-house regulatory tracking capabilities versus purchasing a platform? A: The build versus buy decision depends primarily on organizational scale and jurisdictional complexity. Companies operating in fewer than three regulatory jurisdictions with fewer than 500 reportable data points may find that internal legal and sustainability teams can manage compliance using structured spreadsheets and legal alert services. Organizations subject to five or more frameworks across multiple jurisdictions almost universally find that purpose-built platforms provide superior coverage, reduce total compliance cost by 30 to 50%, and significantly lower the risk of material omissions. The critical evaluation criteria are: regulatory update frequency and accuracy, interoperability mapping across frameworks, integration with existing data systems (ERP, carbon accounting, supply chain management), and the platform's track record in supporting first-time assurance engagements.

Q: What is the typical implementation timeline for an enterprise regulatory compliance platform? A: Based on deployment data from leading providers, implementation timelines range from 8 to 16 weeks for organizations with mature data infrastructure and defined compliance processes, to 6 to 12 months for organizations that must simultaneously establish data collection processes, assign internal responsibilities, and configure reporting workflows. The primary bottleneck is not software deployment but data readiness: connecting the platform to emissions data sources, financial systems, HR databases, and supply chain management tools. Organizations that invest in data architecture before platform selection typically achieve 40 to 60% faster implementations and higher first-year compliance accuracy.

Q: How do regulatory compliance platforms handle the tension between EU double materiality and US/ISSB financial materiality approaches? A: Leading platforms maintain separate materiality assessment modules for double materiality (CSRD) and financial materiality (SEC, ISSB) frameworks. The practical approach is to conduct the broader double materiality assessment first, since it encompasses both financial and impact dimensions, then filter the results to identify the subset of material topics that meet the financial materiality threshold for US and ISSB reporting. This approach eliminates the need for two entirely separate materiality processes. Persefoni and Watershed both employ this methodology, reporting that it reduces total materiality assessment effort by approximately 35% compared to conducting parallel assessments.

Q: What are the early warning signs that a regulatory compliance platform is not delivering adequate coverage? A: Key indicators include: the platform fails to flag new regulatory developments within 30 days of publication; generated disclosures require more than 20% manual editing before submission; the platform does not distinguish between mandatory and voluntary disclosure elements within each framework; regulatory updates are delivered as bulk content changes without impact assessment specific to your organization's profile; and the assurance provider identifies material gaps or errors that the platform did not flag during its compliance assessment process.

Sources

• PwC. (2025). CSRD Readiness Survey: How Companies Are Preparing for Europe's Sustainability Reporting Revolution. London: PricewaterhouseCoopers International.
• GRI and University of Stellenbosch. (2025). Carrots and Sticks 2025: Sustainability Reporting Policy Worldwide. Amsterdam: Global Reporting Initiative.
• German Federal Office for Economic Affairs and Export Control (BAFA). (2025). Supply Chain Due Diligence Act: Enforcement Report 2023-2024. Eschborn: BAFA.
• Verdantix. (2025). Market Size and Forecast: ESG and Sustainability Reporting Software 2024-2028. London: Verdantix Ltd.
• Deloitte. (2025). Sustainability Compliance Technology Survey: Integration, Cost, and Effectiveness. New York: Deloitte Touche Tohmatsu Limited.
• Persefoni. (2025). Annual Impact Report: Platform Growth and Client Outcomes. Tempe, AZ: Persefoni Inc.
• Novata. (2025). ESG Data Management for Private Markets: 2025 Platform Overview. New York: Novata Inc.
• Watershed. (2025). Enterprise Climate Platform: Product and Impact Update. San Francisco, CA: Watershed Technology Inc.