Executive Summary (The 30-Second Brief)
- The Threat: 50 million people are in modern slavery, manufacturing is a top 5 sector, and G20 countries imported US$468 billion in at-risk goods. Six converging laws (UK, Australia, Canada S-211, Germany LkSG with 851 audits in 2024, Norway, EU CSDDD effective 2028) cascade due diligence to your factory.
- The Friction: Human rights compliance requires 7 categories of workforce data -- recruitment fees, migrant worker percentages, grievance mechanisms, living wages -- from HR, payroll, and compliance systems that carbon calculators cannot access.
- The Marupass Solution: Marupass uses AI to extract data from raw PDFs and locks it on a Blockchain Audit Trail, instantly generating ESRS S1/S2 social compliance reports covering workforce, safety, and human rights data.
The Audit You Have Never Prepared For
Every year, your buyer sends you a carbon questionnaire. You know the questions. You know the format. You may even have a system for answering them.
Now imagine a different questionnaire arrives. It asks:
- Do any of your workers pay recruitment fees to obtain employment?
- Are any workers' passports held by the employer or a labor broker?
- What percentage of your workforce are migrant workers on temporary contracts?
- Do you have an anonymous grievance mechanism accessible to all workers?
- Can you document working hours, overtime, and rest day compliance for every employee?
These are not hypothetical questions. They are the data requirements flowing from six converging modern slavery laws — each requiring your buyer to conduct human rights due diligence across their supply chain. Including your factory.
50 million people are in modern slavery worldwide. That number increased by 10 million since 2016. 86% of forced labor occurs in the private sector. Manufacturing is one of the top 5 sectors. And G20 countries imported US$468 billion in goods at risk of modern slavery.
Your carbon calculator cannot answer a single one of those questions.
Six Laws. One Direction. Your Supply Chain.
Six major jurisdictions have enacted mandatory modern slavery or human rights due diligence legislation. Each has different thresholds. All cascade to suppliers.
| Law | Jurisdiction | Companies Covered | Supplier Impact |
|---|---|---|---|
| UK Modern Slavery Act (2015) | United Kingdom | Revenue >£36M | Must publish annual statement |
| Australia Modern Slavery Act (2018) | Australia | Revenue >A$100M | Must report on supply chain risks |
| Canada S-211 (2024) | Canada | Revenue >CA$40M or 250+ employees | 4,313 reports filed in 2025 |
| Germany LkSG (2023) | Germany | 1,000+ employees | 851 BAFA audits in 2024 |
| Norway Transparency Act (2022) | Norway | 50+ employees | Broadest SME coverage |
| EU CSDDD (2024) | European Union | 5,000+ employees / EUR 1.5B+ (Phase 1) | Effective July 2028 |
None of these laws directly target SME suppliers. All have high revenue or employee thresholds.
But every law requires the covered entity — your buyer — to conduct due diligence across their supply chain. The German LkSG requires monitoring direct suppliers and investigating indirect suppliers upon "substantiated knowledge." The EU CSDDD requires Tier 1 due diligence by default, with deeper scrutiny when "plausible information" indicates risks.
In practice, this means questionnaires, audits, and data requests flowing to every tier — including your 200-person factory that is not covered by any of these laws but supplies a company that is.
The Numbers That Reveal Systemic Failure
Walk Free and WikiRate analyzed 225 corporate reports across 3 mandatory human rights due diligence laws. The findings:
- Only 6% of companies have fully implemented human rights due diligence
- 80% have not taken any steps toward implementation
- Only 14% disclosed incidents of forced labor in their supply chains over an 8-year period
- Only 49% provide details on remediation measures when incidents are found
Canada's second annual report under S-211 (4,313 reports received by May 2025) found that only 5% of reporting organizations indicated they had taken measures to remediate actual instances of forced labor or child labor. 95% reported no corrective action.
KnowTheChain's 2025 ICT Benchmark — assessing the 45 largest information and communications technology manufacturers — found:
- Average score: 20 out of 100
- Purchasing practices average: 5 out of 100
- 84% scored zero on purchasing practices
- Companies scoring below 15/100 include major brands: NVIDIA (11), Canon (13)
- Only 3 companies scored above 50 (Samsung 61, HPE 53, Cisco 51)
Active Defense Shield: The purchasing practices score of 5/100 means your buyers are not helping you comply — they are simply pushing requirements downward. The supplier who builds workforce data capability independently does not wait for buyer support that is not coming. They create their own defense.
The Data Categories You Have Never Collected
When your buyer's CSDDD or LkSG compliance team sends their human rights due diligence questionnaire, they will request seven categories of workforce data:
1. Workforce Composition
Headcount by contract type (permanent, temporary, agency), migrant worker percentage, age demographics, gender breakdown. Not a headcount number — a structured breakdown that reveals vulnerability patterns.
2. Recruitment Practices
Whether workers paid recruitment fees to labor brokers. Whether passports or identity documents are retained by employers. Whether workers have freedom of movement. These are the specific indicators of forced labor that due diligence laws target.
3. Working Conditions
Working hours per employee, overtime hours, rest day compliance, wage records compared to local living wage benchmarks (not just minimum wage). Time-series data showing patterns, not single snapshots.
4. Grievance Mechanisms
Documentation of anonymous reporting channels accessible to all workers — including migrant and temporary workers. Number of complaints received. Resolution rates. Evidence that the mechanism is functional, not decorative.
5. Sub-Supplier Mapping
Identity and location of your own suppliers (Tier 2 and beyond). Country of origin for raw materials. This extends the due diligence chain deeper than your factory.
6. Remediation Evidence
If forced labor risks are identified — documented corrective action plans, follow-up verification, evidence of remedy for affected workers. Not just "we found nothing" but proof that you looked and what you found.
7. Policy Documentation
Anti-slavery policy (formal document), code of conduct (signed by management), training records for management and workers on forced labor identification and prevention.
These are not ESG metrics. These are human rights compliance data points. They come from HR systems, payroll databases, recruitment records, and compliance documentation — entirely different sources than energy bills and production logs.
Why Your Current ESG Tool Cannot Help
Problem 1: Wrong Data Architecture
Carbon calculators ingest utility bills and convert them to CO2 equivalents. Modern slavery compliance requires payroll data, recruitment records, working hour logs, and grievance documentation. These are structurally different data types from entirely different organizational systems.
No amount of carbon calculation sophistication can produce a recruitment fee disclosure or a migrant worker percentage.
Problem 2: Wrong Verification Framework
Environmental data is verified against emission factors and energy balances. Social data requires verification against labor law standards, living wage benchmarks, and ILO conventions. A system that verifies whether your electricity consumption matches your emission factor has no mechanism to verify whether your wages meet living wage thresholds in your specific region.
Problem 3: Wrong Reporting Cadence
Carbon data is reported annually or quarterly. Workforce data changes continuously — with every hire, every termination, every overtime shift, every grievance filed. Modern slavery indicators require ongoing monitoring, not periodic snapshots.
How Marupass Captures the Social Dimension
Marupass was architecturally designed for three ESG pillars — not one. The Social dimension is not a bolt-on module. It is a core data layer.
Social Events Table
The Universal ESG Ledger captures social events alongside resource flows and governance policies:
- Workforce snapshots: Headcount by gender, contract type, migrant status — updated as your workforce changes
- Safety incidents: Recorded as they occur, with severity, lost time, and resolution
- Training records: Hours per employee, curriculum coverage, completion rates
- Wage benchmarks: Compared against regional living wage data
- Grievance records: Complaints received, resolved, escalated — with anonymized tracking
ESRS S1/S2 Adapter
Your buyer's CSRD disclosure requires ESRS S1 (Own Workforce) and S2 (Workers in Value Chain) data. The ESRS adapter extracts your social events and formats them for buyer disclosure. You do not need to understand ESRS S2 sub-topic references. You record what happens in your factory. Marupass handles the regulatory translation.
Adversarial Social Verification
The Adversarial AI Auditor applies social-specific verification:
- Are reported working hours consistent with production output?
- Does workforce composition match the headcount reported in other submissions?
- Are living wage compliance claims supported by the correct regional benchmark?
- Is the grievance mechanism documented with accessible reporting channels?
Multi-Channel Sub-Supplier Data Collection
Modern slavery due diligence extends beyond your factory to your own suppliers. Marupass reaches Tier 2-3 suppliers through WhatsApp Business Channel, LINE Business Integration, and web portals — collecting workforce data from suppliers who lack enterprise software, in their language, on their preferred platform.
The Convergence Timeline
| Year | Development | Your Exposure |
|---|---|---|
| 2024 | Germany LkSG: 851 BAFA audits conducted | Active enforcement |
| 2025 | Canada S-211: 4,313 reports filed | Growing compliance base |
| 2025 | KnowTheChain: ICT manufacturers score 20/100 | Industry scrutiny intensifying |
| 2028 | EU CSDDD Phase 1: 5,000+ employee companies | Due diligence cascade begins |
| 2029 | EU CSDDD full scope: 1,000+ employee companies | Broader cascade |
Each year adds jurisdictions, adds covered companies, and adds data requests flowing to suppliers. The trajectory is toward universal supply chain human rights due diligence — not away from it.
Can You Pass That Audit?
50 million people in modern slavery. Manufacturing is a top 5 sector. Only 6% of companies have implemented due diligence. 80% have done nothing. Your buyer is among the 80% — but six laws are forcing them to start.
When they start, they will ask for workforce data you have never collected. Recruitment practices, migrant worker percentages, grievance mechanisms, living wage evidence, sub-supplier mapping. Your carbon calculator has zero answers.
50 million people. Six laws. Your buyer's audit is coming. The supplier who has structured workforce data — verified, exportable, covering every social metric their buyer's law requires — passes the audit. The supplier who only has carbon data has answered half the ESG equation and left the other half blank. That is not compliance. That is an active defense shield for the age of mandatory human rights due diligence.
- Watch the Magic Trick. You don't need another sales call. Watch our 3-minute interactive demo to see exactly how our AI turns a raw PDF into a verified modern slavery due diligence package instantly.
Your enterprise buyers need verified data. You need to protect your operational time. The gap between their question and your answer is just one email forward.