ESG is moving from voluntary to mandatory. It is not yet broad law in Canada, but the OECD framework Canada follows expects it, and the moment you sell into the US or EU, your customers' due-diligence laws become your obligation, for every supplier in your chain, not just your own walls. XFACTOR VERIFIED maps your suppliers, assesses each one, and proves the claims, supplier by supplier, so your disclosure holds up.
Has proving your suppliers' ESG record become one more report you do not have the data to defend?
Your disclosure goes out every year. Every claim in it rests on a supplier you may never have audited. One unverified line, and it is your name on the filing.
A wave of due-diligence legislation has turned voluntary reporting into legal obligation, and every one of these laws holds you responsible for your suppliers, not just your own walls. A self-declared scorecard does not satisfy them. Verified, documented due diligence does.
Every one of these names the buyer, not the supplier. Most are EU and OECD. Canada has no broad ESG law yet, but the day you sell into the US or EU, your customers' rules become yours. XFACTOR runs the risk-based due diligence they require, supplier by supplier, and documents the proof before a regulator or a customer asks for it.
Environmental, Social, Governance. Each one is now backed by due-diligence law that holds you responsible for your suppliers, not just your own operations. Here is what each pillar demands, and how XFACTOR verifies it across your chain.
One assessment covers all three pillars, supplier by supplier, the way the OECD six-step due-diligence process expects.
Prove all threeMost of your suppliers sit in the safe band. The exposure lives in the tail, the few whose environmental, social or governance evidence does not hold. Due-diligence law expects you to find that tail and act on it, supplier by supplier.
Your suppliers' practices are becoming your liability.
A forced-labour allegation two tiers up. An emissions claim you cannot evidence. A supplier in a high-risk region you never mapped. The regulator does not ask what you intended. It asks what you verified.
ESG makes you prove your suppliers meet the standards your buyers and regulators now write into the contract. Here is what that exposes, and exactly how we handle each one.
Not a self-declared scorecard. A guided assessment each supplier completes, scored against the environmental and human-rights criteria the law names, with every answer on record.

What if one assessment satisfied every ESG framework at once, without spending a fortune, without the manual work, and without chasing a single supplier?
Two themes: ESG and your obligations first, then the 15-day free trial. Straight answers, no hedging.
In Canada, broad ESG is not yet law, but the moment you sell into the US or EU, your customers' due-diligence laws (the EU CSDDD, Germany's LkSG) and the OECD framework Canada follows require you to run risk-based due diligence on your suppliers: map your supply chain from raw materials to finished goods, identify high-risk regions and suppliers, assess them against environmental and human-rights criteria, document the evidence, and remediate what you find, up to terminating non-compliant suppliers. That supplier-by-supplier work is what XFACTOR VERIFIED runs for you, end to end. We are not a certification service, we are the platform that handles what the law requires you to do with your suppliers.
All of them, from one assessment. The OECD Guidelines are the benchmark every supply-chain due-diligence law is built on, adhered to by 50 countries. We assess your suppliers against the environmental and social criteria those frameworks name, including GRI's Supplier Environmental Assessment (308) and Supplier Social Assessment (414), and align the record with CDP and IFRS S1 and S2 disclosure. You run the evidence once and it serves every report.
Yes. The platform assesses each supplier against the environmental, social and governance criteria the law names, then documents current evidence, findings, corrective actions and remediation, the way the OECD six-step due-diligence process expects. It is built to stand up to a regulator, an auditor, or a customer's procurement team, not just produce a good-looking report. The founder has a career-long record across these programs.
That is the signal. A supplier who refuses a documented ESG assessment is a risk you have now identified, which is itself part of due diligence. The platform flags non-responders, documents the outreach, and surfaces them as a high-risk gap. The law expects you to assess, mitigate, and where necessary terminate suppliers who cannot demonstrate compliance, so a documented refusal and your response plan is evidence you did your part. Refusing to be assessed is a finding in itself.
Yes. Your first 8 suppliers are completely free for 15 days. No credit card, no sales call, no contract required. We assess them with the same methodology a regulator-grade ESG audit uses. If we do not surface a gap worth more than the ten minutes it takes to start, you have lost nothing. We run it free because once you see what the platform finds in 15 days, the conversation about the rest of your supplier base is easy.
Because showing beats telling. In 15 days you watch real gaps surface in 8 of your own supplier base, at no cost and no risk. If what you find is worth more than the ten minutes it takes to start, the decision on the rest is yours. No demo, no pitch, no pressure.
No card, no contract, no commitment. You drag your supplier list in, Morpheus maps it, and the assessments run. The 15-day trial clock starts the moment your first supplier receives their invite. If you decide to assess the rest of your supplier base after the trial, that is when pricing comes in, and it is published on the site. No sales call required.
Every supplier in the 15-day trial goes through the full intake: email verification, address validation, and watchlist screening against the US Consolidated Screening List (OFAC, BIS, DDTC). Then each supplier receives the cinematic scenario assessment, narrated by Morpheus, behaviourally scored. You get findings, gap analysis, and a Corrective Action Plan for every gap found. The only thing gated behind a paid plan is assessing more than 8 suppliers and accessing the full Master Risk Assessment Report for your entire supplier base.
For you, setup is minutes. You upload your supplier list and Morpheus handles the intake: email verification, address check, watchlist screening, and tier assignment. Suppliers typically complete their scenario assessment in 20 to 40 minutes. The trial window is 15 days, and most teams see findings well before the midpoint. You do not reformat a spreadsheet and you do not chase anything manually.
No. The platform handles outreach automatically. Once you upload your list, Morpheus sends each supplier their assessment invitation, follows up with a Day 3 nudge and a Day 7 nudge if they have not responded, and tracks completion status in your dashboard in real time. You see who has finished, who is in progress, and who has not opened it yet, without sending a single email yourself.
If we don't surface a gap worth more than the ten minutes it takes to start, you've lost nothing.
Show me my gaps
Every product below works on its own — or as a section inside your CommandCenter. Same service, two homes. This is the road from zero to hero on ESG.
XFACTOR VERIFIED runs the 5-Step risk assessment on every supplier you answer for under ESG — regulatory certificates tracked, whole supply chains mapped, and a 300-to-600-page master report that turns supplier risk into signed, audit-ready proof. Never a per-supplier fee.
See XFACTOR VERIFIED →Your security program doesn’t stop at one commitment. XFACTOR COMMANDCENTER commands the certification programs you answer to government for — C-TPAT, PIP, AEO, and Bill S-211 — with six department cockpits, real training, monthly self-audits, and one calendar, so the whole program stands behind what your ESG work claims.
See XFACTOR COMMANDCENTER →For the government programs you also carry, XFACTOR VALIDATED keeps you ready for the day an officer reviews your program: mock officer visits per department, a prep playbook, and a post-visit response engine that answers the real findings report in your own approved language. Live inside CommandCenter today, standalone in August.
See XFACTOR VALIDATED →
XFACTOR VANTAGE is the intelligence layer over everything the family sees — ESG recommendations, automation recommendations, and the stats flywheel. Coming soon; no promises before it’s real.
A first look at VANTAGE →