ERM CVS Compliance Mapping — DaedArch Platform Alignment

Scope

This compliance mapping document outlines the alignment of the DaedArch platform capabilities with the compliance requirements established by ERM CVS, the certification and verification subsidiary of ERM Group. The document delineates how the DaedArch platform’s sensor-based Measurement, Reporting, and Verification (MRV) capabilities address the independent assurance for carbon and sustainability claims, particularly focusing on Scope 3 and value chain emissions.

The scope of this document includes:

• An overview of ERM CVS compliance requirements.
• A detailed requirements matrix mapping DaedArch functionalities to ERM CVS standards.
• An assessment of compliance status.
• Identification of gaps between current capabilities and required standards.
• A remediation plan to address identified gaps.

Requirements Matrix

The following matrix outlines the compliance requirements of ERM CVS alongside the corresponding capabilities of the DaedArch platform.

| ERM CVS Requirement | DaedArch Capability | Data Format/Standard Used | Compliance Status | |---------------------------------------------------------|--------------------------------------------------------------|-----------------------------------------------------------|---------------------| | Independent assurance for carbon claims | Automated verification of carbon data via IoT sensors | JSON, XML for data interchange | Compliant | | Full chain-of-custody audit trails | Immutable logs and audit trails generated by the platform | Blockchain-based ledger | Compliant | | Expertise in Scope 3 and value chain emissions | Integration of supply chain data for Scope 3 calculations | CSV, API endpoints for data ingestion | Compliant | | Certification of sustainability claims | Generation of verification-ready reports | PDF/A-1b for report generation | Compliant | | Compliance with ISO 14064 standards | Algorithms certified against ISO 14064 | Internal algorithm documentation, adherence checks | Compliant | | Data integrity and security | End-to-end encryption of data and access controls | AES-256 encryption, OAuth 2.0 for API access | Compliant | | Real-time data processing and analysis | Real-time analytics dashboard | WebSocket API for real-time data flow | Compliant | | User authentication and access management | Role-based access control (RBAC) | JSON Web Tokens (JWT) for user sessions | Compliant | | Stakeholder engagement and reporting | Automated stakeholder reporting features | Integrated email and dashboard notifications | Compliant | | Continuous improvement and feedback mechanisms | Feedback loop for data accuracy and user input | Survey forms and feedback APIs | Compliant |

Notes on Data Formats and Standards

• JSON and XML: These formats are utilized for data interchange between the DaedArch platform and external systems, ensuring compatibility with ERM CVS's data requirements.
• CSV: Used for bulk data ingestion from supply chain partners, facilitating Scope 3 emissions calculations.
• PDF/A-1b: This format ensures that generated reports are compliant with archival standards, allowing for long-term storage and retrieval.
• Blockchain: The use of a blockchain-based ledger guarantees that audit trails are tamper-proof and verifiable.

Compliance Status

The compliance status of the DaedArch platform against the ERM CVS requirements is as follows:

• Compliant: The platform meets or exceeds the requirement.
• Partial Compliance: The platform meets some aspects of the requirement but lacks certain features or capabilities.
• Non-Compliant: The platform does not meet the requirement.

Summary of Compliance Status

• Total Requirements: 10
• Compliant: 10
• Partial Compliance: 0
• Non-Compliant: 0

Gap Analysis

While the DaedArch platform is currently compliant with all ERM CVS requirements, it is essential to conduct a gap analysis to identify any potential areas for improvement or enhancement. Below are the findings from the gap analysis:

| Requirement Description | Current Capability | Observations | |---------------------------------------------------------|--------------------------------------------------------|--------------------------------------------------------------| | Independent assurance for carbon claims | Automated verification via IoT sensors | Continuous calibration of sensors is required for accuracy. | | Full chain-of-custody audit trails | Immutable logs generated | Regular audits should be scheduled to ensure log integrity. | | Expertise in Scope 3 and value chain emissions | Integration of supply chain data | Partnerships with additional data providers may enhance accuracy. | | Certification of sustainability claims | Generation of verification-ready reports | Reports should include user feedback for continuous improvement. | | Compliance with ISO 14064 standards | Algorithms certified against ISO 14064 | Regular updates to algorithms may be necessary for compliance. | | Data integrity and security | End-to-end encryption | Security audits should be performed semi-annually. | | Real-time data processing and analysis | Real-time analytics dashboard | Potential for AI-driven insights to enhance analytics. | | User authentication and access management | Role-based access control (RBAC) | Multi-factor authentication (MFA) should be implemented. | | Stakeholder engagement and reporting | Automated stakeholder reporting | More customization options for reports may be beneficial. | | Continuous improvement and feedback mechanisms | Feedback loop for data accuracy | Implementing a formal feedback system could enhance user engagement. |

Remediation Plan

The following remediation plan outlines the actions necessary to address the observations identified in the gap analysis.

Action Items

1. Sensor Calibration Protocol:

• Action: Develop and implement a continuous calibration protocol for IoT sensors.
• Responsible Party: Technical Operations Team.
• Deadline: Q2 2024.

1. Regular Audit Schedule:

• Action: Establish a bi-annual audit schedule for log integrity.
• Responsible Party: Compliance Officer.
• Deadline: Q1 2024.

1. Data Provider Partnerships:

• Action: Identify and onboard additional data providers for supply chain emissions.
• Responsible Party: Business Development Team.
• Deadline: Q3 2024.

1. User Feedback Integration:

• Action: Create a structured user feedback mechanism for report generation.
• Responsible Party: Product Management Team.
• Deadline: Q1 2024.

1. Algorithm Updates:

• Action: Schedule quarterly reviews of algorithms to ensure ongoing compliance with ISO 14064.
• Responsible Party: Data Science Team.
• Deadline: Ongoing.

1. Security Audit Implementation:

• Action: Perform semi-annual security audits to assess data integrity measures.
• Responsible Party: IT Security Team.
• Deadline: Q2 2024.

1. Multi-Factor Authentication:

• Action: Implement MFA for all user accounts to enhance security.
• Responsible Party: IT Security Team.
• Deadline: Q1 2024.

1. Report Customization Features:

• Action: Develop and deploy customizable reporting features for stakeholders.
• Responsible Party: Development Team.
• Deadline: Q3 2024.

1. Formal Feedback System:

• Action: Design and implement a formal feedback system for continuous improvement.
• Responsible Party: Quality Assurance Team.
• Deadline: Q2 2024.

Monitoring and Review

The compliance status and the remediation plan shall be reviewed quarterly. Progress against the action items will be documented, and any necessary adjustments to the plan will be made in response to changing regulatory requirements or internal capabilities.

Conclusion

The DaedArch platform is compliant with the standards and requirements set forth by ERM CVS, with a comprehensive alignment of capabilities to ensure independent assurance for carbon and sustainability claims. The ongoing monitoring and remediation plan will facilitate continuous improvement, ensuring the platform remains at the forefront of compliance and innovation in the carbon markets.

This document serves as a foundational tool for both internal stakeholders and external reviewers to assess the compliance landscape and identify areas for future enhancement.