SB 253 Compliance Guide for SMBs: What You Need to Do Before 2027

Why Every SMB Needs to Care About SB 253

You've heard about California's climate disclosure law. Maybe you filed it under "big company problems." That's a mistake.

Here's why: Scope 3.

SB 253 (the Climate Corporate Data Accountability Act) directly applies to companies doing over $1B in revenue in California. But those companies have to report their Scope 3 emissions — and Scope 3 includes you, their supplier.

If you sell to enterprise clients, they're going to ask for your emissions data. If you can't provide it, you become a liability in their reporting. And liability means they find a new supplier.

This guide covers what SMBs need to do, when, and how to do it without burning your entire budget on consultants.

---

SB 253 Requirements at a Glance

| Phase | Revenue Threshold | Reporting Scope | Deadline | |-------|-------------------|------------------|----------| | Phase 1 | >$1B | Scope 1 + 2 | Jan 1, 2026 | | Phase 2 | >$1B | Scope 3 | Jan 1, 2027 | | Phase 3 | $100M–$1B | Scope 1 + 2 | Jan 1, 2028 |

Key requirements:

• Emissions reports must be independently verified (Phase 1 already, Phase 3 by a third party)
• Reports must follow the GHG Protocol Standards
• CARB (California Air Resources Board) has rulemaking authority and enforcement power
• Reports must be publicly disclosed

---

Step 1: Conduct a GHG Inventory

Before you report anything, you need to know what you're emitting. This means a GHG inventory — a complete accounting of your greenhouse gas emissions across all three scopes.

For Scope 1 (Direct Emissions):

• Fleet vehicles
• On-site combustion (heating, manufacturing)
• Fugitive emissions (refrigerant leaks, etc.)

For Scope 2 (Indirect Energy):

• Purchased electricity
• Purchased steam, heating, or cooling

For Scope 3 (Supply Chain): This is where it gets complex. The GHG Protocol defines 15 categories. For most SMBs, the biggest contributors are:

1. Purchased goods and services
2. Upstream transportation
3. Business travel
4. Employee commuting
5. Use of sold products (if applicable)

Action item: Start your GHG inventory now. Use a carbon accounting tool (like Eco-Auditor) to automate data collection rather than building spreadsheets from scratch.

---

Step 2: Choose Your Reporting Framework

SB 253 requires the GHG Protocol Corporate Standard. There's no choice here — it's the framework.

But within GHG Protocol, there are methodological choices:

• Location-based vs. market-based Scope 2 accounting
• Spend-based vs. activity-based Scope 3 estimation
• Control vs. equity share approaches for organizational boundaries

Our recommendation for SMBs:

• Use market-based Scope 2 (it's what investors and customers expect)
• Start with spend-based Scope 3 (faster, less data-intensive) and upgrade to activity-based over time
• Use the operational control approach for boundaries (simplest to implement)

---

Step 3: Set Up Data Collection

This is where most SMBs fail. Emissions data lives everywhere:

• Utility bills (Scope 2)
• Fleet management systems (Scope 1)
• Procurement data (Scope 3)
• Travel expense reports (Scope 3)

Manual approach: Create a data collection template, assign owners for each data source, and set monthly collection deadlines. Expect 40-60 hours per reporting period for a 50-person company.

Automated approach: Use a carbon accounting platform that connects to your existing systems. Eco-Auditor, for example, can pull utility data, categorize procurement spend, and calculate Scope 1-3 emissions in a fraction of the time.

Our take: If you're reporting once, spreadsheets work. If you're reporting annually (which you are), automation pays for itself by the second cycle.

---

Step 4: Get Third-Party Verification

SB 253 requires independent verification. This means:

• Phase 1: Limited assurance (like a financial review)
• Phase 2: Reasonable assurance (like a financial audit)

How to prepare:

1. Document your methodology and data sources from day one
2. Keep audit trails for every data point
3. Choose a verifier accredited by CARB (list will be published by CARB)
4. Budget $15K-50K for verification depending on company size and complexity

Common mistake: Companies wait until the report is finished to engage a verifier. Start the conversation 3-4 months before your reporting deadline. Verifiers can flag methodology issues early that would be expensive to fix later.

---

Step 5: Publish and Disclose

SB 253 requires public disclosure of emissions reports. This means:

• Reports must be accessible on your website or a CARB-designated platform
• Reports must follow the GHG Protocol format
• Updates and corrections must be disclosed

Strategic advantage: Early, transparent disclosure builds trust with customers, investors, and partners. Companies that report before the deadline signal that they take sustainability seriously — and they're the ones who win supply chain contracts.

---

The Cost of Non-Compliance

Let's be direct about the risks:

1. Direct penalties: CARB can impose administrative penalties for non-compliance
2. Supply chain exclusion: Large companies will drop non-reporting suppliers from their Scope 3 calculations
3. Investor risk: ESG-focused investors screen for compliance. Non-compliance is a red flag
4. Competitive disadvantage: Companies with verified emissions data win contracts over those without

---

Common Traps to Avoid

Trap 1: "We're too small for this." Even if you're not directly subject to SB 253, your customers probably are. Start collecting data now.

Trap 2: "We'll just use spreadsheets." Spreadsheets don't scale for annual reporting. They also don't produce audit-ready data. You'll redo the work every year.

Trap 3: "Scope 3 is someone else's problem." If you're in any large company's supply chain, it's your problem. And Scope 3 is typically 70-90% of total emissions.

Trap 4: "We'll hire a consultant and they'll handle it." Consultants can help, but they can't run your reporting forever. You need internal capability or a tool your team can use independently.

---

Tools and Resources

• Eco-Auditor — Automated carbon reporting for SMBs. Handles Scope 1-3 calculations, GHG Protocol alignment, and audit-ready reports. Built specifically for companies that don't have a sustainability team.
• GHG Protocol Corporate Standard — The required reporting framework. Free to download.
• CARB SB 253 Rulemaking Page — The official source for regulations, timelines, and verifier requirements.
• CDP Disclosure — Many companies use CDP alongside SB 253. If you're already disclosing to CDP, you have a head start.

---

Bottom Line

SB 253 compliance is not optional — even for SMBs that aren't directly regulated. The supply chain pressure is real, and companies that move early will have a competitive advantage.

Start your GHG inventory today. Choose a reporting framework. Set up data collection. Get verification lined up. And if you want to skip the spreadsheet nightmare, Eco-Auditor handles the whole process.

The deadline is closer than you think.