Social, environmental and climate risk for banks

institutions using ESGreen's infrastructure: 60+
companies assessed and monitored: 100K+
public, regulatory and global sources integrated: 70+
critical risk layers in the ESGreen Score: 12

Data as of Sep 2026. Source: ESGreen database.

What the bank needs to demonstrate has changed.

Three regulations move social, environmental and climate risk from policy to the number, the table and the auditor's test.

New GRSAC: BCB Res. 586 and BCB IN 772, already published.

The regulations bring quantitative tables into the report, with S1 and S2 disclosing first. The first disclosure uses a reference date prior to it: the numbers that will be published are already taking shape in today's portfolio. The draft of CP 127/2025 provided for exposures and financed emissions by economic sector, agricultural credit by biome, exposure to drought and heavy rainfall by region, exposures to social and environmental risk, and a transition plan.
IFRS S1/S2 report: CMN Res. 5,185/2024.

Already mandatory for listed financial institutions and S1 and S2 conglomerate leaders, with S3 next, and with reasonable assurance by an independent auditor.
Rural credit: CMN Res. 5,268/2025.

Vegetation clearing check against PRODES/INPE and, for contracts above 300 ha, remote sensing monitoring that is “documented, auditable and assessable by the Central Bank.”

The regulatory environment has evolved. Monitoring needs to evolve with it.

Where risk stalls the bank's routine

Social, environmental and climate risk: The new GRSAC brings quantitative tables, and the draft provided for breakdowns by sector, biome and region.; The counterparty base rarely has this breakdown ready, with source and date.
Credit and committee: Which operations in the portfolio could generate losses in the next 90 days?; Relevant changes reach the assessment late, and climate risk is still treated separately from the financial decision.
Compliance and AML: Identification gaps expose the institution to regulatory risk.; One-off lookups do not track what changes in clients, suppliers and partners after onboarding.
Sustainability and reporting: Every number in the IFRS S1/S2 report needs to withstand a reasonable assurance test.; Without a trail to the origin, the data becomes an audit qualification.
IT, architecture and security: Contracting data and cloud services follows the requirements of CMN 4,893.; Integration, security and privacy need answers before the proof of concept.
Executive board: Capital, provisions and reputation.; The board sees the portfolio. The manager sees the contract. The regulator sees the evidence.

From CNPJ to land parcel, inside the credit pipeline.

Seven routines that the ESGreen infrastructure supports, from origination to the report.

Classify counterparties by CNAE and sector.

Registration data enriched by CNPJ, with CNAE, registration status and ownership structure, as the basis for the GRSAC sector tables and for the DRSAC.

Module: Data & API
Measure the climate exposure of the rural portfolio.

Rainfall, water deficit, frost, extreme temperature and wind by coordinate, converted into exposure in reais by contract and by region.

Module: IRC-ESGreen
Flag social and environmental risk by debtor.

Environmental embargoes and infractions, the MTE employer register, critical lawsuits, restrictive lists and adverse media, consolidated into the ESGreen Score and recalculated with every new event.

Module: ESGreen Score
Bring risk into origination.

Lookup via API in the origination flow and a report per operation that can be attached to the credit file.

Module: Data & API and IRC-ESGreen
Check rural credit impediments.

CAR (rural environmental registry), embargoes, the MTE employer register and vegetation clearing after July 31, 2019, by CPF, CNPJ and property.

Module: ESGreen Pre-assessment
Monitor corporate clients, suppliers and partners.

Continuous tracking by CNPJ and CPF, with alerts by type and by company and case logs recorded with the counterparty.

Module: ESGreen Monitoring
Hand the audit trail to the auditor.

Every data point with source, date and version; dated IRC runs; versioned methodology.

Module: All modules

From origination to the report: monitoring, reporting and verification

Monitoring

Counterparties tracked by CNPJ and CPF; rural portfolio land parcels tracked by the IRC-ESGreen (Climate Risk Index), with climate data updated daily.
Reporting

PRSAC and GRSAC reporting and IFRS S1/S2 reporting organized with evidence, plus an executive dashboard, an operational dashboard, a report per operation and regulatory reporting as input for the DRSAC.
Verification

Every result traceable to its source, with date and version. Evidence trail ready for reasonable assurance.
Decision

Credit policy, committee and a suggested action per operation: monitor, require insurance, review the limit, strengthen collateral, provision or block. The decision remains with the bank.

From the rearview mirror to the portfolio's windshield.

From the rearview mirror to the portfolio's windshield.
Before	With the IRC-ESGreen
Historical average	Forecast from 7 to 90 days
Municipal view	Analysis by coordinate
Explains past events	Identification of land parcels and contracts
Little connection with current contracts	Financial exposure and preventive action

The differentiator is not forecasting rain. It is identifying which operations may be affected and what to do beforehand.

Explore the IRC-ESGreen

Platform modules for banks

A platform in three layers: data, intelligence and applications. Each layer feeds the next.

ESGreen Score

ESG risk by CNPJ, from 0 to 1,000 (the higher, the lower the risk), across 12 layers and 5 dimensions, with a Confidence Index.
IRC-ESGreen

Climate Risk Index by land parcel, contract and portfolio, from 0 to 100 (the higher, the greater the risk), with exposure in reais.
ESGreen Monitoring

Clients, suppliers and partners tracked continuously, with alerts and incident management.
Individuals (CPF)

KYC and monitoring of individual clients, shareholders and executives: politically exposed persons, sanctions, lawsuits and certificates, with alerts per person.
Alert Center

Every alert handled by the right area, with an owner, a follow-up deadline, the counterparty's response and a recorded sign-off.
ESGreen Pre-assessment

Individual report by CNPJ or CPF for onboarding, credit and compliance.
PRSAC and GRSAC

From the social, environmental and climate responsibility policy to the GRSAC report, with evidence and platform data as input.
IFRS S1/S2 reporting

Sustainability and climate reporting organized by the standard's pillars, with evidence for every answer.
Data & API

70+ sources, a data model by CNPJ, CPF, land parcel, contract and portfolio, and delivery via API, dashboard, report, alerts and batch.

Every requirement mapped to a data point, a piece of evidence and a report.

The bank is the one that complies with the regulation. ESGreen provides data, evidence and an audit trail.

Regulations for banks: status, requirements and how ESGreen helps
Regulation	Status	What it requires	How ESGreen helps
BCB Res. 586/2026 + BCB IN 772/2026 (new GRSAC)	PublishedPhased effectiveness. S1 and S2 make the first quantitative disclosure, based on a reference date prior to it; S3 and S4 follow	GRSAC report with quantitative tables, counterparties classified by CNAE. Per the draft of CP 127/2025: exposures by sector, agricultural credit by biome, drought and heavy rainfall by region, social and environmental exposures, transition plan.	Classification by CNAE, ESGreen Score by counterparty and IRC-ESGreen by land parcel and region as inputs for the tables.
CMN Res. 5,185/2024 (IFRS S1/S2)	In forceAlready mandatory for listed financial institutions and S1 and S2 leaders; S3 next	Sustainability report (CBPS 01/02) with reasonable assurance by an independent auditor.	Evidence trail ready for reasonable assurance and physical risk inputs for IFRS S2.
BCB Res. 151/2021 (DRSAC)	In forceSemiannual submission, in February and August	Social, environmental and climate risk assessments of exposures and debtors.	Flags by counterparty, with source and date, ready to go into the document.
CMN Res. 4,945/2021 (PRSAC)	In force	Social, environmental and climate responsibility policy approved and applied.	From policy to evidence: the PRSAC applied to customers, suppliers and transactions.
CMN Res. 4,943 and 4,944/2021	In force	Social, environmental and climate risk in integrated risk management (S1 to S4; S5 under the simplified regime).	ESGreen Score and IRC-ESGreen as inputs for risk appetite, limits and stress tests.
CMN Res. 5,268/2025 (rural credit)	In forceIn phases: PRODES check already required for properties above 4 fiscal modules and on the way for the rest. Remote monitoring of contracts above 300 ha already required	Check for vegetation clearing after July 31, 2019 and documented, auditable remote sensing monitoring.	Checks by CPF, CNPJ and property and climate risk by land parcel, with source, date and version.
Brazilian Sustainable Taxonomy and MRV system	VoluntaryFor now. S1 and S2 banks are slated for the first wave of the MRV system, which is moving toward mandatory verification	PAS (sustainable on-balance-sheet assets) and POVS (off-balance-sheet enabling operations) indicators, with classification by CNAE.	Prepared for the TSB MRV system: classification by CNAE and evidence per operation.
BCB Circular 3,978/2020 (AML/CFT)	In force	Procedures to know clients, employees, partners and outsourced service providers.	Continuous third-party monitoring against restrictive lists, international sanctions and news.
CMN Res. 4,893/2021	In force	Cybersecurity policy and requirements for contracting data processing, data storage and cloud services.	Trust page and supplier due diligence materials sent on request.

Deadlines are set by regulators and may change. Official dates and estimates, with the review date, are on the regulatory map.

Where each requirement stands today

Deadlines may change. The direction does not: every requirement moves from drafting to consultation, from publication to effectiveness. And the evidence it will call for needs a history.

Under development

Foreseen in an official document, with no date set in a rule yet.
- TSB: MRV Portal and first wave (S1 and S2 banks, asset managers, funds and listed companies) TSB
- TSB: second wave, with credit cooperatives, insurers and pension funds TSB
- TSB: mandatory verification by accredited verifiers TSB
Proposed

Under consultation or with a proposed timeline. The direction is already set.
- SBCE: monitoring plan for regulated facilities SBCE
Published

Rule published. The requirement takes effect in stages.
- EUDR: zero-deforestation due diligence for large and medium-sized operators EUDR
- New GRSAC: quantitative tables in the report BCB 586
- CMN 5,268: PRODES check for properties of up to 4 fiscal modules CMN 5.268
- EUDR for micro and small operators EUDR
- New GRSAC: first quantitative disclosure, starting with S1 and S2 BCB 586
- CMN 5,185: IFRS S1/S2 reporting for S3 institutions CMN 5.185
In force

Already applies. Evidence must be kept up to date.
- CMN 5,185: IFRS S1/S2 reporting with reasonable assurance for publicly traded institutions and S1 and S2 leaders CMN 5.185
- CMN 5,268: PRODES check and remote monitoring in rural credit CMN 5.268

Informational content; not legal advice. Deadlines are set by regulators and subject to change; official dates are on the regulatory map. Status reviewed on 30/09/2026.

Data infrastructure the financial market already uses

LIFT

Participant in LIFT – Financial Innovation Lab (Central Bank of Brazil and Fenasbac), with the project “ESGreen Insights – Dados para Sustentabilidade”, published in LIFT Papers 2026.

Read about LIFT Papers 2026

Validated on a real rural credit portfolio

414 contracts
1,023 land parcels
160 cities in PR, SC and RS

Portfolio of a credit cooperative in Southern Brazil.

Alert issued

12 daysA −1.6 °C frost forecast for July 14 in Caxias do Sul, identified 12 days in advance.

Launch

IRC-ESGreen presented at FEBRABAN TECH 2026, August 24–26, 2026, in São Paulo.

See news

Documented citation

ESGreen is cited in the Sicredi 2025 Sustainability Report (ch. 6, p. 127, GRI 2-6 | 3-3) as the platform used to monitor and assess supplier ESG.

Data as of Sep 2026.

Can be integrated into the credit pipeline and risk systems.

In the credit pipeline, at the committee and in reporting. Via API, dashboard, report or alert.

Assessment report per operationattachable to the credit file.
Operational dashboardranking, filters and 360° view of the client.
Executive dashboardportfolio thermometer, map and scenarios.
Alertsby forecast event and affected operation.
APIlookup in the origination flow. Documentation on request.
Regulatory reportingevidence for the Central Bank, auditors and IFRS S2.

Ready for supplier due diligence

Regulated institutions assess providers of data processing, data storage and cloud computing services based on CMN Resolution 4,893/2021. The Trust page covers information security, privacy and the LGPD, and supplier due diligence material is sent on request.

See the Trust page Request due diligence package

An ESGreen expert confirms the scope and replies within one business day.

What changes in the GRSAC report with BCB Resolution 586?

BCB Resolution 586 and BCB IN 772, already published, replace BCB Resolution 139 and IN 153. The report now includes quantitative tables, in phases: S1 and S2 make the first disclosure, and S3 follows. Because the disclosure uses a reference date prior to it, the numbers in the first report are already taking shape in the portfolio. Official deadlines are on the regulatory map.

Which tables must the new GRSAC include?

The draft of Public Consultation 127/2025 provided for, among others, exposures and financed emissions by sector, agricultural credit by biome, exposure to drought and heavy rainfall by region, exposures to social and environmental risk, and a transition plan. The final list should be checked against BCB IN 772.

How does ESGreen support the reasonable assurance required by CMN 5,185?

Every piece of data delivered by ESGreen carries source, date and version, IRC-ESGreen runs are dated and the methodology is versioned. This lets the auditor trace every number back to its origin. ESGreen does not issue assurance: it provides the evidence trail that the bank presents to the auditor.

Does ESGreen integrate with the credit pipeline?

Yes. Risk can be queried via API in the origination flow, attached to the credit file as a report per operation and tracked through alerts. The integration scope is defined in the proposal.

Which sources does ESGreen use?

More than 70 public, regulatory and global sources, including Receita Federal, CNJ, IBAMA, ICMBio, MTE, IBGE, INPE and MapBiomas, as well as national restrictive lists (CEIS, CNEP, TCU, CVM) and international sanctions (OFAC, United Kingdom, European Union, Interpol and UN). The list by group is on the methodology page.

Is the ESGreen Score a credit rating?

No. The ESGreen Score, the IRC-ESGreen and ESGreen's indices are assessments based on public and regulatory data and proprietary models. They do not constitute a credit rating, investment recommendation or legal opinion and should be used as input for the bank's own decisions.

Shall we talk about the risks in your portfolio?

In a 30-minute conversation, we show the infrastructure applied to your portfolio, your credit pipeline and your regulatory obligations.

Demo with financial system cases
Pre-assessment of CNPJs in your base
Climate exposure reading of the rural portfolio

Or write to contato@esgreen.com.br

An ESGreen specialist replies within one business day to schedule a time.

Tell us what you need

Fields marked with * are required.

Name

Work email

We use this email to reply.

Institution

Job title

Type of institution

Subject

CNPJ for pre-assessment (optional)

Client, supplier or partner. An expert gets back to you with the pre-assessment.

How can we help?

0 of 2,000

Cookies and privacy

Social, environmental and climate risk built into the credit workflow.

What already applies and what is coming

New GRSAC: BCB Res. 586 and BCB IN 772, already published.

IFRS S1/S2 report: CMN Res. 5,185/2024.

Rural credit: CMN Res. 5,268/2025.

Classify counterparties by CNAE and sector.

Measure the climate exposure of the rural portfolio.

Flag social and environmental risk by debtor.

Bring risk into origination.

Check rural credit impediments.

Monitor corporate clients, suppliers and partners.

Hand the audit trail to the auditor.

Monitoring

Reporting

Verification

Decision

Where each requirement stands today

Under development

Proposed

Published

In force