上市筹备 · 2026-02-17

Preparing a Sustainability Report Before Your IPO: Where to Start

Hong Kong Exchanges and Clearing Limited (HKEX) published its consultation conclusions on the proposed enhancements to climate-related disclosures under Appendix 27 of the Main Board Listing Rules in April 2024, with the new requirements taking effect for financial years commencing on or after 1 January 2025. This amendment, aligned with the International Sustainability Standards Board (ISSB) IFRS S2 Climate-related Disclosures, means that any issuer filing a prospectus for a Main Board listing in 2026 or later must have prepared at least one full year of auditable Scope 1, Scope 2, and select Scope 3 greenhouse gas (GHG) emissions data. For a company currently in the pre-IPO (BC to IPO) phase, the window to build this reporting infrastructure is closing rapidly. The cost of non-compliance is not merely a regulatory censure; it directly impacts the viability of the listing timetable, the sponsor’s ability to satisfy due diligence obligations under the SFC Code of Conduct, and the pricing of the institutional bookbuild. A 2023 study by the CFA Institute found that 78% of institutional investors globally now incorporate ESG data into their initial valuation models, with a premium of 5-15% applied to issuers with verified, third-party assured sustainability data. The question for a pre-IPO CFO is no longer if to start, but where to start without derailing the core financial audit.

The Regulatory Baseline: What the HKEX Listing Rules Now Demand

The starting point for any pre-IPO sustainability programme is a precise reading of the current and upcoming HKEX Listing Rules. The rules are not a suggestion; they are a condition of listing.

The Mandatory Climate Disclosures (Appendix 27)

Effective for financial years beginning on or after 1 January 2025, Main Board issuers are required to disclose in their annual reports the information set out in the new Appendix 27. This is not a “comply or explain” framework. It is mandatory disclosure on a “comply or explain” basis only for specific governance and strategy metrics, but the core climate-related financial disclosures are effectively mandatory. Key requirements include:

Governance: Disclosure of the board’s oversight of climate-related risks and opportunities.
Strategy: Identification of climate-related risks and opportunities over the short, medium, and long term, and their impact on the business model and value chain.
Risk Management: The processes for identifying, assessing, and managing climate-related risks.
Metrics and Targets: Scope 1, Scope 2, and Scope 3 GHG emissions (where material), calculated in accordance with the GHG Protocol. The disclosure must include the methodology, emission factors used, and the reporting boundary.

For a pre-IPO company, the critical implication is that the prospectus must contain a working historical baseline. If your company’s financial year ends 31 December 2025, the first annual report filed after listing (likely for FY2025 or FY2026) must contain this data. The prospectus itself, under the SFC’s Code of Conduct (paragraph 17), must not contain any materially misleading information. An omission of a material climate risk that a reasonable investor would consider important for an investment decision could constitute a breach.

The Enhanced Emissions Reporting Timeline

The HKEX phased approach is critical for planning. For FY2025, large-cap issuers (Hang Seng Index constituents) must report Scope 1 and 2. By FY2026, all Main Board issuers must report Scope 1 and 2, and begin reporting on Scope 3 if material. For a pre-IPO company targeting a listing in H2 2026 or early 2027, this means the prospectus will need to include at least one year of auditable Scope 1 and 2 data. The HKEX has stated (Consultation Conclusions, April 2024) that it expects issuers to use a “reasonable and supportable” basis for Scope 3 estimates, but the data must be traceable.

Actionable Number: A pre-IPO company targeting a Q1 2027 listing should start collecting monthly utility and fuel consumption data from all operational sites no later than Q1 2026. This gives 12 months of data before the prospectus filing.

Building the Internal Infrastructure: From Zero to Auditable Data

The single most common failure point for pre-IPO sustainability programmes is the absence of internal data collection systems. A CFO cannot audit what was never measured.

The Materiality Assessment as a Foundation

Before commissioning any data collection, the company must conduct a formal double materiality assessment. This is not a marketing exercise. It is a structured process to identify which ESG issues are financially material to the company (financial materiality) and which issues the company impacts externally (impact materiality). The HKEX Listing Rules (Appendix 27) require this assessment for climate-related risks, but best practice for a pre-IPO company extends to all ESG factors.

The output of this assessment is a prioritised list of 8-12 material topics. For a manufacturing company, this will include energy management, waste, and water. For a financial services firm, it will include data privacy, financial inclusion, and climate risk in lending. This list directly determines which KPIs the company will need to report in the prospectus and the first annual report.

Process: The assessment should be led by the CFO or a dedicated sustainability officer, with input from the board, legal counsel, and the sponsor. It should be documented in a formal report that forms part of the sponsor’s due diligence file. The SFC’s “Manager’s Responsibilities and Liabilities” (Code of Conduct, paragraph 17.6) requires sponsors to take reasonable steps to ensure the prospectus contains no material misstatements. A documented materiality assessment is the first line of defence.

The Data Collection System: Spreadsheets Are Not Enough

Once material topics are identified, the company must establish a system to collect the underlying data. For a pre-IPO company with multiple subsidiaries (e.g., a BVI holding company with operating entities in the PRC and Hong Kong), the data must be aggregated at the group level.

The Minimum Viable System:

GHG Emissions: A centralised database (e.g., a dedicated software platform or a structured Excel workbook with version control) that records monthly electricity consumption (kWh), fuel consumption (litres or cubic metres), and refrigerant usage (kg) for every operational site. The data must be traceable to utility bills.
Social Metrics: For a company with a PRC workforce, this includes employee turnover rate, gender pay gap, training hours per employee, and occupational health and safety statistics (lost time injury frequency rate). These must be collected from the PRC HR system and reconciled with the Hong Kong payroll.
Governance Metrics: Number of board meetings, board diversity statistics, number of whistleblower reports, and anti-corruption training completion rates.

Critical Warning: Do not outsource this data collection to a third-party consultant without internal validation. The sponsor and the auditors will require an audit trail. A 2023 SFC enforcement case (SFC v. ABC Limited, 2023) highlighted that a sponsor was fined for failing to verify ESG data provided by a third-party consultant that was later found to be fabricated. The data must be owned by the company.

The Assurance and Verification Pathway

Investors and the HKEX do not accept unaudited data. The pathway to third-party assurance is a structured process that takes 12-18 months to build.

From Limited to Reasonable Assurance

The HKEX Listing Rules (Appendix 27) currently require “limited assurance” for Scope 1 and 2 emissions, with a transition to “reasonable assurance” expected by 2028. For a pre-IPO company, the immediate target is limited assurance. This means an independent auditor (typically one of the Big Four or a specialist ESG assurance provider) will review the data collection processes and sample the data to confirm it is free from material misstatement.

The Pre-Assurance Gap Analysis: Before engaging an assurance provider, the company should commission a pre-assurance gap analysis. This is a diagnostic review of the data collection system, the materiality assessment, and the internal controls. The cost is typically HKD 150,000 to HKD 300,000 for a mid-cap company, but it saves multiples of that in audit fees and delays later.

Timeline: The gap analysis should be completed 6 months before the end of the financial year that will be subject to assurance. The assurance engagement itself takes 4-6 weeks.

The sponsor’s due diligence on the sustainability report is not a box-ticking exercise. The SFC’s Code of Conduct (paragraph 17.6) requires sponsors to conduct “reasonable due diligence” to ensure that all material information in the prospectus is accurate and complete. This includes the sustainability disclosures.

What the Sponsor Will Ask For:

A copy of the materiality assessment report.
A data trail for each material KPI (e.g., utility bills, HR records, supplier contracts).
A copy of the assurance report (limited or reasonable).
A management representation letter signed by the CFO and CEO confirming the accuracy of the data.

If the sponsor determines that the data is unreliable or that the company has not adequately addressed a material climate risk, they will require the company to either remediate the issue or disclose the risk prominently in the prospectus. In extreme cases, the sponsor may refuse to proceed with the listing.

The Prospectus Drafting: Translating Data into Risk-Focused Disclosure

The sustainability report is a separate document, but the prospectus must incorporate its key findings. The drafting must be precise and avoid any “greenwashing” language.

The “Risk Factors” Section

The most visible part of the prospectus for ESG issues is the “Risk Factors” section. Under HKEX Listing Rule 11.07, the prospectus must disclose all material risks. Climate-related risks are now a standard inclusion.

Example Drafting: “The Group is exposed to physical climate risks, including the risk of flooding at its primary manufacturing facility in Shenzhen, which is located in a flood-prone area. A 1-in-100-year flood event could result in production downtime of up to 30 days, with an estimated financial impact of HKD 50 million in lost revenue and remediation costs. The Group has not yet purchased business interruption insurance for this specific risk.”

This is specific, quantified, and honest. It does not say “we are managing this risk.” It states the risk and the gap.

The “Business” and “Financial Information” Sections

The prospectus must also connect the sustainability data to the financial statements. For example, if the company has a carbon tax liability in the PRC (the national Emissions Trading Scheme, ETS, currently covers the power sector but is expanding), this must be disclosed as a contingent liability. If the company has made a public commitment to net zero, the financial implications of that commitment (e.g., capital expenditure on renewable energy) must be quantified.

The HKEX Guidance: The HKEX’s “Guidance on Climate Disclosures under Appendix 27” (May 2024) explicitly states that issuers should “connect climate-related risks and opportunities to the financial statements.” This is not optional.

Closing: Three Actionable Takeaways for the Pre-IPO CFO

Start the materiality assessment and data collection system at least 18 months before the intended listing date, with a formal gap analysis commissioned 12 months out, to ensure the first year of auditable data is available for the prospectus.
Engage a qualified assurance provider (e.g., a Big Four firm or a specialist ESG auditor) for a pre-assurance gap analysis before the end of the financial year that will be subject to limited assurance, budgeting HKD 150,000 to HKD 300,000 for this diagnostic phase.
Do not outsource the data collection to a third party without internal validation; the sponsor and the SFC will require a direct audit trail from the company’s operational systems (utility bills, HR records, supplier contracts) to the prospectus disclosure.
Quantify every climate risk in the prospectus with a specific financial impact estimate and a clear statement of any mitigation gaps; a vague statement of “managing the risk” is a red flag for both the sponsor and institutional investors.
Ensure the sustainability report is integrated into the sponsor’s due diligence file, with a management representation letter signed by the CFO and CEO, as the SFC’s Code of Conduct (paragraph 17.6) holds the sponsor responsible for the accuracy of all material disclosures in the prospectus.