Click here to download the BRSR Guide

Carbon at the Border: Why CBAM Is Really a Supply Chain Data Regulation

CBAM is not a climate regulation. It is a trade regulation — and your supply chain data is the currency it runs on.

Carbon has a price at Europe’s border. The companies paying the most aren’t the most polluting — they are the ones who didn’t measure.

That is the uncomfortable reality of the EU’s Carbon Border Adjustment Mechanism, in force since January 2026. CBAM is not a penalty for high emissions. It is a penalty for unverified ones, for not having the data infrastructure to demonstrate what your actual emissions are. Companies that cannot show their numbers pay a default value set by Brussels, calibrated to assume the worst.

For manufacturers in India and the GCC exporting steel, aluminium, cement, or fertilisers to Europe, this is no longer a future risk. It is a present cost.

For the manufacturers, processors, and industrial producers we work with across India and the GCC – steel, aluminium, cement, fertilisers – this is the most commercially urgent problem in their export strategy right now. And it is entirely solvable.

The data gap — by sector

The table below illustrates the scale of the opportunity. For every tonne of steel, aluminium, or cement your EU buyer imports from you, they pay a CBAM certificate based on your reported emissions. If that figure is a default, not your actual number, they are overpaying. And in most cases, significantly. For companies operating modern, lower-carbon processes, the gap between actual and default is often 20-95%.

Figure 1: Table: Estimated actual vs. EU default embedded emissions by sector

Data advantage = potential reduction in CBAM certificate obligation with verified actual data.

Sector / Product Origin Actual tCO₂/t EU Default Data Advantage
Steel (Blast Furnace) India 2.0–2.5 2.8 12–40%
Steel (Electric Arc) India 0.4–0.7 2.8 75–85%
Aluminium (Primary) India / GCC 12–18 20 10–40%
Aluminium (Secondary) India 0.5–1.0 20 95%+
Cement India 0.65–0.75 0.87 14–25%
Fertilisers (Urea) GCC 1.5–2.2 2.6 15–42%

Sources:

  1. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ:L_202502621
  2. https://taxation-customs.ec.europa.eu/carbon-border-adjustment-mechanism/cbam-legislation-and-guidance_en
  3. https://publications.jrc.ec.europa.eu/repository/handle/JRC134682
  4. https://worldsteel.org/publications/policy-papers/steels-contribution-to-a-low-carbon-future/
  5. https://www.iea.org/energy-system/industry/aluminium

What the numbers show in practice

Across the supply chain programmes we run for our client companies, the gap between estimated emissions and actual measured emissions typically runs 15 – 40%. At €50–80 per ton of CO₂, the current EU ETS range, for a mid-sized exporter shipping significant volumes to Europe, this translates to millions of euros in avoidable certificate costs annually.

That is a number a CFO needs to hear, not just a sustainability manager.

The cost of delay is legislated to increase

Default values are not static. The EU has legislated escalating penalties for companies that cannot provide verified data – 10% above real-world averages in 2026, rising to 30% from 2028. Every year without a data programme widens the gap.

Figure 2: Bar Chart: CBAM default value penalty escalation 2026–2028

Companies with verified actual data avoid this escalating cost entirely.

Sources:

  1. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ:L_202502621
  2. https://publications.jrc.ec.europa.eu/repository/handle/JRC134682

Verified data is a trade asset, not a compliance cost

The conversations happening inside European procurement teams are not about sustainability leadership. They are about vendor qualification. Across industries we track, from automotive, industrial manufacturing, to chemicals, EU importers are adding CBAM-readiness to supplier qualification criteria. Companies that cannot produce verified emissions documentation are being removed from tender shortlists not because of price, and not because of quality, but because the importer cannot absorb the compliance exposure of an unverified supplier.

“Scope 3 disclosure and CBAM compliance are not two workstreams. They are the same data problem, running through the same supply chains, requiring the same verified primary data.”

The compliance journey

CBAM readiness is not a one-off audit. It requires building a durable data infrastructure at the production level, one that serves CBAM, Scope 3, BRSR, and UK SRS from the same source. Here is what that journey looks like in practice:

Figure 3: Infographic: The five-stage CBAM compliance journey from exposure mapping to competitive differentiation

 Companies with verified data avoid the default penalty entirely (bottom left); those without pay an escalating premium.

Sources:

  1. https://eur-lex.europa.eu/eli/reg_impl/2025/2547/oj
  2. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ:L_202502621
  3. https://taxation-customs.ec.europa.eu/carbon-border-adjustment-mechanism_en

Three decisions that define your response

Find the gap.

The first question to answer is whether your actual embedded emissions are materially lower than the EU defaults for your product and country. For companies running modern facilities, they usually are. That gap is money your EU buyer is currently leaving on the table and the clearest argument for investing in verified data.

Build infrastructure, not a one-off project.

A single CBAM filing will not serve any company in FY27, when assurance becomes mandatory across CSRD, BRSR, and UK SRS simultaneously. Building the data system once, correctly, means it serves every framework from the same source without starting again under deadline pressure.

Move before you are asked.

By the time an EU buyer formally demands CBAM documentation, a company is already in a reactive position. The manufacturers using verified emissions data as a competitive differentiator today, moved before they were required to.

This is only the beginning

CBAM is the most visible regulation in this wave, but it is not the only one. EUDR enforcement begins December 2026. UK SRS mandatory climate disclosure starts January 2027. India’s BRSR Phase II value chain disclosures are due in annual reports being filed right now. These are not isolated requirements — they are the early architecture of a global system in which carbon content is priced, traced, and disclosed across supply chains.

The first CBAM declaration covers 2026 imports. It is due in 2027. The data collection for it is happening now, or it isn’t. That gap, between companies that started and companies that didn’t, is where market positions will quietly shift.