I've sat in enough calls with ESG teams at consumer goods companies to recognize the pattern quickly. Someone on the sustainability team has been tasked with deforestation exposure disclosure. They've purchased a data product from one of the major ESG data aggregators. The product shows a risk score for each of their soy or palm oil suppliers, updated annually. The team considers the problem addressed.
It isn't. And the gap between what ESG land-use monitoring claims to deliver and what it actually delivers is getting harder to ignore as TCFD, GRI, and the EU Deforestation Regulation sharpen their evidentiary requirements.
The Annual Cadence Problem
Most ESG platforms that cover deforestation risk are built on annual land-cover change products — Hansen Global Forest Watch data, national government PRODES-style monitoring outputs, or proprietary annual composites. These are excellent products for what they are: comprehensive, spatially consistent records of forest cover change over a calendar year. They are not designed for supply chain due diligence.
Here's the operational reality: a company that discovers in its December annual report that one of its suppliers' source regions experienced deforestation between January and December of the prior year has essentially no practical response available. The deforestation occurred. The crop grown on that cleared land was already harvested and likely processed into the supply chain months ago. The financial relationship between the company and that supplier continued through the entire period of deforestation without interruption.
Annual cadence tells you what happened. It cannot tell you what is happening, and for supply chain management, that distinction matters enormously. A sourcing team that receives a confirmed deforestation flag on a supplier's production area in near-real-time can pause new purchase orders, request evidence of legality, or initiate an audit — before additional material is shipped. That window of actionability simply does not exist in annual reporting cycles.
What TCFD and GRI Actually Require — and Where the Gaps Are
The Task Force on Climate-related Financial Disclosures (TCFD) framework includes land-use change as a physical risk driver, particularly for companies with agricultural supply chains. The GRI 304 standard (Biodiversity) and GRI 13 (Agriculture, Aquaculture and Fishing Sectors) require disclosure of significant impacts on biodiversity and land-use change in supply chains.
What neither framework specifies is the monitoring cadence, spatial resolution, or detection methodology required to substantiate these disclosures. This is both a feature and a problem. It gives companies flexibility in how they monitor, but it also creates audit-grade ambiguity. When an ESG disclosure states "we monitor our suppliers' land-use practices for deforestation compliance," that statement is technically satisfiable by a once-a-year risk score from a data aggregator — and it is also satisfiable by continuous satellite change detection at parcel level. These are not equivalent evidential standards.
The EU Deforestation Regulation (EUDR) is more demanding. For in-scope commodities — cattle, cocoa, coffee, palm oil, soya, wood, and rubber — operators placing goods on the EU market must submit due diligence statements that include geolocation data of the production area and evidence that no deforestation occurred after December 31, 2020. The regulation's competent authorities can request substantiation of these claims. An annual risk score is unlikely to constitute substantiation; a time-stamped change detection record with spatial coordinates is.
The Supplier Polygon Problem
Even granting that a company is committed to monitoring deforestation in its supply chain, there is a second layer of complexity that is consistently underestimated: most companies don't actually know the precise production parcels their suppliers source from.
They may know the name and registration number of their direct tier-1 supplier. They may know the municipality or county the supplier operates in. But the specific GPS-bounded polygons of the fields, plantations, or forest concessions that produce the raw material? That data is frequently unavailable, contested, or actively withheld by suppliers who are concerned about competitive exposure or legal liability.
Without production-area polygons, satellite change detection cannot be applied precisely. You can monitor a supplier's declared sourcing region, which may cover hundreds of thousands of hectares. You can flag deforestation events within that region. But you cannot definitively link those events to the specific parcels your supplier sources from unless you have the actual parcel geometries.
This is the supplier engagement problem that satellite monitoring alone cannot solve. It requires contractual requirements for geolocation disclosure, third-party audits that collect GPS coordinates, or certification schemes (RSPO, FSC, etc.) that maintain parcel registries. Satellite monitoring is the verification layer — it requires the geolocation layer to sit beneath it to be fully effective.
Risk Score vs. Change Detection: A Practical Distinction
The ESG data market has converged on risk scores as the primary product format because they're easy to consume: a number from 0 to 100, updated periodically, aggregated to the supplier or commodity level. Risk scores are built from underlying data — historical deforestation rates, proximity to deforestation fronts, regulatory environment of the country of origin — and they are useful for portfolio-level screening and prioritization.
They are not the same as change detection. A risk score tells you that a supplier operates in a region where deforestation has historically been high. Change detection tells you that a specific land area changed from forest to non-forest on a specific date. The first is a probability estimate about a region; the second is an observation about a place and time.
For due diligence purposes under EUDR and comparable frameworks, the observation is what matters. A company defending a due diligence statement in front of a competent authority needs evidence, not scores. That evidence looks like: polygon ID, coordinates, detection date, area in hectares, spectral change magnitude, and source imagery timestamp. That's a different product category than a risk score, and treating them as interchangeable is one of the more common mistakes in this space.
The Additionality Question: What Satellite Monitoring Changes
We hear a version of this question regularly: if our supplier has already committed to a zero-deforestation policy and is certified by a third-party scheme, what does continuous satellite monitoring add?
Certification schemes typically conduct annual or biennial audits of a subset of suppliers. Audits check compliance at a point in time and cannot observe everything that happens between visits. The certification badge on a supplier's profile reflects their compliance status at the time of the last audit, which may be 18 months ago. Satellite monitoring watches continuously between audits and flags deviations in near-real-time — which is when they're actually addressable.
We're not arguing that certification schemes are insufficient or fraudulent. Many do excellent work and their on-the-ground verification capacity exceeds what remote sensing can provide. What we're saying is that satellite monitoring and certification are complementary, not substitutable. The satellite layer catches drift between audits; certification provides legal and standards framework; supplier engagement provides the parcel-level data that makes detection actionable.
What a Better Monitoring Stack Looks Like
For an ESG team working toward EUDR compliance or meaningful TCFD/GRI disclosure on land-use change, the components that actually provide defensible coverage are:
- Supplier geolocation data — GPS polygons of production areas, ideally verified against cadastral records, collected through supplier agreements and updated when sourcing relationships change.
- Continuous change detection — satellite-based monitoring of those polygons for forest cover change, generating time-stamped records with spatial coordinates and spectral evidence. Not annually; ideally at the 5–10 day cadence that Sentinel-2 revisit allows in the tropics.
- Alert triage and workflow — a process for reviewing flags, determining if a change is deforestation versus permitted land management, and escalating to the sourcing team when an alert is confirmed. An alert without a triage workflow doesn't improve outcomes.
- Evidence archive — a queryable record of all change detections, including detections that were reviewed and cleared, not just confirmed deforestation events. Regulators may ask for evidence of due diligence process, not just evidence of zero deforestation.
The honest assessment is that most ESG teams are operating with component one partially built (supplier lists without polygon geometries), component two weakly built (risk scores rather than change detection), and components three and four essentially absent. The gap between current practice and what EUDR will require is significant, and the regulation's enforcement provisions give operators relatively little time to close it.
The companies moving now — collecting parcel geometries from suppliers, standing up change detection at those locations, building triage workflows — will be better positioned when their due diligence statements get scrutinized. The ones waiting for the annual report cycle to tell them something went wrong will find out too late to do anything about it.