There is a manufacturing company in Monterrey that has been filing its plant's Annual Operating Report for four years. Every year, between March and June, the EHS team consolidates the data on fuel consumption, electricity and hazardous waste. They hire an external consultant, upload the form in SINATEC, receive SEMARNAT's acknowledgment and save it in a shared folder. End of process.
Six months later, that same team receives an email from its European buyer requesting emissions data under the GHG Protocol. They hire another consultant. That consultant asks for exactly the same records they already handed to SEMARNAT. That is not administrative inefficiency. It is a data infrastructure problem with a direct cost of capital.
The Annual Operating Report is the mechanism by which the federal government knows what Mexico's industrial companies pollute, how much and from which sources. What few sustainability teams have connected yet is that this information already is, for the most part, a Scope 1 inventory under the GHG Protocol standard. The questions we hear most from CFOs and sustainability directors who work with Bono are always the same: how do I improve my CDP Score without rebuilding my inventory from scratch? How do I prove my real emissions to the bank assessing my green loan? What data do I need for the CBAM that applies in 2026? Are my plant records enough for CDP? How do I integrate all of this without hiring a different consultant for each report?
In this article we answer each of those questions from the data your company already has. Your COA already has the data. What's missing is connecting it to capital.
The Annual Operating Report is the legal instrument through which federally regulated industrial companies report their pollutant emissions, waste and annual consumption to SEMARNAT.
The GHG Protocol, the global standard developed by the World Resources Institute (WRI) and the World Business Council for Sustainable Development (WBCSD), establishes that Scope 1 covers exactly the sources the COA already captures: combustion in boilers, furnaces and generators, and the plant vehicle fleet. Companies that do not connect that data to their carbon inventory are paying two consultants to measure the same thing, and the second invoice has no impact on their CDP Score.
The COA is your raw Scope 1 inventory. When SEMARNAT receives that data, it enters it into the Pollutant Release and Transfer Register (RETC), the system where the federal government consolidates the national inventory of industrial pollution sources. In turn, the National Institute of Ecology and Climate Change (INECC) uses that information to build the national greenhouse gas inventories that Mexico reports in its international commitments. What your plant reports in the COA ends up, in some form, on the tables of global climate negotiation.
Filing is mandatory from March 1 to June 30 each year, reporting the prior year. It applies to companies with a Single Environmental License (LAU), generators of 10 tonnes or more of hazardous waste per year, facilities with wastewater discharges into national bodies of water, and federally regulated fixed sources in sectors such as chemicals, metalworking, cement, automotive, food and beverage, and power generation.
And without a filed COA, there is no active LAU. Without an LAU, the plant cannot operate under its current conditions.
In practice, what happens at most facilities is this cycle: EHS consolidates the data, the consultant uploads it, the finance team never sees the report, and the sustainability team that wants to improve the CDP Score the following year starts from scratch with a new spreadsheet. It is the same data measured twice, with no connection between regulatory compliance and carbon strategy.
The GHG Protocol defines Scope 1 in exactly the same way the COA captures its data: combustion in boilers, furnaces and generators, industrial process emissions, plant vehicle fleet. Companies that do not connect those records to their carbon inventory are doing that work twice and will pay for the duplication in the spread on their next credit line.
At most industrial companies in Mexico, the CFO does not know the company's CDP Score. The sustainability team knows the number but does not translate it into cost of debt. And the bank's credit desk, which does turn that number into financing terms, never receives the report because no one thought to send it. That organizational fracture is not a cultural problem: it is a data infrastructure problem.
Why does this matter financially? Because the Carbon Disclosure Project (CDP) evaluates companies across three dimensions: disclosure, awareness and management of climate risk. The first dimension requires a verifiable Scope 1 and Scope 2 inventory, with consistent data year after year. Companies that reach CDP without that inventory end up with D or F scores. Under CDP's criteria, companies at those levels are considered opaque by capital markets, which translates directly into higher debt spreads and less access to green financing instruments.
Carbon is already cost of debt. And if the data to improve it is already in your COA, leaving it on the EHS server is an opportunity cost paid with more expensive capital quarter after quarter. The Science Based Targets initiative (SBTi) targets also require a verifiable Scope 1 inventory as the starting point to validate reduction pathways aligned with 1.5C. That inventory is already, in large part, in the COA folder on the EHS server. BloombergNEF documented that global sustainable finance surpassed one trillion dollars in 2023. The bottleneck for industrial companies in Mexico is not the supply of that capital: it is the absence of verifiable data to access it.
What you gain by filing it correctly:
Most implementation problems are not about the report itself. They are about the absence of infrastructure that connects that data with the decisions where it actually creates value.
Most industrial companies in Mexico operate in the first row of that table. What sets apart the ones in the last row is a single thing: infrastructure. The COA data and the data the GHG Protocol requires are the same. It is just that in the first case it lives in the consultant's drawer and in the second it reaches the bank's credit committee. Bono's infrastructure makes that conversion with the data the company already has, without duplicating the EHS team's work or building a parallel inventory from scratch.
The path from an archived COA to a CDP Score that improves access to capital has three steps. Bono's COA Data Framework runs them in sequence.
Before building anything new, Bono analyzes the last two or three years of COA data the company already has. We review methodological consistency across filings, identify sources reported with different emission factors from one year to another, and map which GHG Protocol categories are already covered by that information. In the cases we have supported with manufacturing and industrial companies in Mexico, COA records typically cover between 70% and 90% of the Scope 1 inventory the GHG Protocol requires. The gap is not about data: it is about methodology and destination. The information was there from the first filing. No one knew what to do with it beyond SEMARNAT.
Bono translates the COA data into the format that CDP and development banks recognize: it applies the correct emission factors per source, documents the organizational boundary of the inventory under the GHG Protocol, and produces the verifiable report that allows a company to move up in CDP. The GHG Protocol establishes that estimates based on sector averages are less precise than primary operational data. A well-documented COA already is primary data. Your COA already has the data. What's missing is connecting it to capital.
With a verifiable Scope 1 and 2 inventory, aligned with the GHG Protocol and backed by the COA's historical records, the company has the base documentation to access green credit from NAFIN, the IDB or the CAF, and to participate in its corporate customers' sustainable financing programs. Bono has supported companies in sectors such as metalworking and food and beverage in assembling that file with data they already had, presenting to CDP a consistent three-year profile of verifiable primary data instead of sector estimates that no bank auditor accepts without reservations. The data that used to live on the EHS server now reaches the credit desk with the structure the bank needs to open the instrument.
In Mexico, failing to file the COA within the March 1 to June 30 window can lead to fines of 51,870 to 311,220 pesos, and reporting incorrect data can reach up to 1,037,400 pesos, with amounts updated annually under the Unit of Measure and Update index. The cost that does not appear in EHS budgets is another one: failing to file the COA on time means failing to renew the LAU, which can force a company to obtain a new license to keep operating. In sectors with continuous processes such as petrochemicals or cement, that interruption can cost far more than the penalty.
In 2026, the COA takes on an additional dimension for exporting companies. The European Union's Carbon Border Adjustment Mechanism (CBAM) has applied, since this year, tariffs adjusted to the carbon intensity of products entering Europe: cement, steel, aluminum, fertilizers, electricity and hydrogen. For a Mexican exporting company, the carbon intensity of its production process already determines a cost at the border. A COA with inconsistent data can result in a tariff calculated on the European Commission's default factors, which usually exceed the plant's real emissions. In steel or cement, that difference per shipment has a concrete price in every operation.
In Colombia, the current carbon tax and Law 2169 of 2021 on energy transition and green growth create a growing obligation to document emissions with verifiable data. Colombian exporting companies in manufacturing and agribusiness face the same scrutiny from their European buyers under the CSRD. Those that already have their emissions inventory structured from primary operational data, equivalent in logic to what the COA produces in Mexico, are in a significantly better position in supply-chain audits. Those that do not, rebuild what they already measured.
You already measure for SEMARNAT. With the right infrastructure, that data also speaks to CDP and to the bank.
The base data is the same: fuel consumption by source, electricity, process emissions. The difference is in the format and the emission factors applied. The COA reports in tonnes of pollutants for SEMARNAT; the GHG Protocol converts them into tonnes of CO2 equivalent for the capital market. Bono makes that conversion with the records you already have, without starting from scratch.
Failing to file it can lead to fines of 51,870 to 311,220 pesos, and incorrect data can reach 1,037,400 pesos, with amounts updated by the UMA index. The bigger cost is usually the loss of the LAU, which forces a company to obtain a new license to operate. In sectors with continuous processes, that interruption can cost more than the financial penalty.
It is not enough on its own, but it is the most solid base to build the complete inventory. CDP requires Scope 1, 2 and 3 under the GHG Protocol, with consistent methodological audit across years. The COA covers most of Scope 1 and part of Scope 2 if electricity consumption is integrated. According to CDP, fewer than 2% of reporting companies reach level A; most do not get there for lack of data, but for lack of connection between the data they already have.
The CBAM requires European importers to declare the carbon intensity of the product they buy. Without verifiable data from the manufacturer, the European Commission applies default factors that usually exceed the plant's real emissions. The COA converted into a GHG Protocol inventory is the evidence to declare the real intensity of your process, reducing the tariff to pay on each shipment to Europe.
Every year that your COA does not feed your GHG Protocol inventory is a full CDP Score cycle below its potential, a debt spread you pay unnecessarily and a CBAM tariff calculated on the sector average instead of on your real plant.