Corporate climate disclosure runs on one accounting framework. Whether a company reports to CDP, sets a target through the Science Based Targets initiative, or files a CSRD sustainability statement, the underlying math traces back to the same standard: split emissions into Scope 1, Scope 2, and Scope 3, then total them up. For a building portfolio, most of that number comes down to two scopes and one recurring mistake.
This is a working guide to what each scope actually covers in a building, where Scope 2 reporting goes wrong most often, and what a carbon accounting process needs to look like to survive an auditor's questions rather than just a sustainability report's footnotes. It's written for the people who actually own that number day to day: facilities and energy managers who supply the underlying data, and the ESG or sustainability leads who have to defend it to a lender, a tenant, or an assurance provider.
What the GHG Protocol is, and why building operators need to know it
The GHG Protocol Corporate Standard was published by the World Resources Institute and the World Business Council for Sustainable Development in 2001 and has been revised since. It is not one option among several. CDP scoring, the Science Based Targets initiative, and mandatory regimes including CSRD and the SEC's climate rule all build their reporting requirements on its three-scope structure. A company that gets its scope boundaries wrong doesn't just misreport a number; it fails the underlying framework every downstream disclosure depends on.
For most companies, Scope 1 and 2 are a rounding error next to Scope 3 supply chain emissions. Buildings are the exception. A commercial real estate portfolio's operational energy use, the fuel it burns and the electricity, steam, or heat it buys, is usually the single largest source in its entire inventory. That's why a facilities or ESG team working on a building's carbon footprint spends most of its time in Scope 1 and Scope 2, not chasing supplier data for Scope 3. It also means the stakes are higher than they'd be for, say, a software company: a mistake in a building's Scope 2 method can move the headline number more than any other line item in the report, and financing terms, tenant ESG requirements, and audit sign-off increasingly hinge on it.
Scope 1: what a building burns on-site
Scope 1 covers direct emissions from sources the operator owns or controls. In a building, that's a short list:
Natural gas boilers and furnaces
On-site combined heat and power (CHP) units
Backup diesel generators
Refrigerant leaks from chillers, HVAC, and cold storage equipment
Fleet vehicles the operator owns, where applicable
The calculation itself is simple in principle: activity data (liters of diesel, cubic meters of gas) multiplied by a published emission factor, in kilograms of CO2e per unit. EPA's Scope 1 and Scope 2 inventory guidance walks through the factor sets most US-based teams use; UK and EU teams typically pull from DEFRA or national inventory equivalents instead. The factor set matters less than picking one, documenting it, and applying it consistently across years, since switching factor sources mid-series is one of the more common reasons an otherwise sound Scope 1 trend line becomes indefensible under audit.
The line item that gets missed most often isn't combustion at all. It's fugitive refrigerant emissions: leaking HVAC and chiller systems can outweigh a building's entire gas boiler load, and they rarely show up on a utility bill, which is exactly why they're absent from so many first-pass inventories. Capturing them requires refrigerant handling records, not energy data, which is precisely why they fall through the cracks in a process built around invoices.
Scope 2: the scope most buildings get wrong
Scope 2 covers purchased energy: electricity, steam, heat, or cooling bought from a utility or district system rather than generated on-site. For an all-electric building with no gas heating, this is typically the largest line in the entire inventory.
It's also where the GHG Protocol has a rule most building teams either don't know or don't apply. The Scope 2 Guidance published in 2015 requires dual reporting for any company with contractual energy instruments: a location-based figure, using the average emission factor for the regional grid, and a market-based figure, using the factor tied to specific power purchase agreements, renewable energy certificates, or guarantees of origin.
The two numbers can differ enormously, and a simple example shows why. Take a building that buys 1,000 MWh a year on a grid with an average factor of 300 kg CO2e/MWh: location-based emissions land at 300 tonnes. If that same building also holds renewable energy certificates covering the full 1,000 MWh with a near-zero residual factor, its market-based figure could sit close to zero. Both numbers are correct, they're just answering different questions, and the Scope 2 Guidance exists precisely because reporting only one of them tells an incomplete story. Buildings get this wrong in three directions: reporting only the flattering market-based number, reporting only location-based and ignoring legitimate procurement choices, or blending the two into a single figure that satisfies neither method and won't reconcile against either one under review.
Scope 3: what applies to buildings (and what doesn't)
Scope 3 spans fifteen upstream and downstream categories, and for most companies it's where the bulk of total emissions sit. For a building specifically, the categories that matter most are purchased goods and services (fit-out materials, refurbishment, the embodied carbon in construction) and, where a landlord doesn't control tenant metering, downstream leased assets.
Both are real, and both are becoming harder to skip: CSRD phases in Scope 3 disclosure requirements over time, and EPA's Scope 3 guidance is a reasonable starting point for scoping the categories that apply. But they sit largely outside what a facilities or operations team can instrument and act on day to day, since embodied carbon in a concrete frame poured years ago isn't something a building management system will ever measure. This piece stays focused on the Scope 1 and Scope 2 boundary, which is where a building owner has direct control over both the data and the outcome.
Scope 4? Avoided emissions are a separate metric, not a replacement
Scope 4, or "avoided emissions," is a WRI concept for the emissions a product or service prevents elsewhere, compared against a counterfactual baseline. A more efficient chiller replacing an old one avoids emissions relative to what the old unit would have produced. It is not part of the formal GHG Protocol Corporate Standard, and it is not a building owner's own inventory figure.
The reason it's worth knowing about: vendors selling efficiency equipment or software sometimes present Scope 4 "savings" alongside a building's actual Scope 1-3 numbers in a way that muddies the conversation. Avoided emissions are a comparative claim against a hypothetical baseline, not an absolute one, and they should never be netted against or substituted for a building's own reported footprint. An auditor reviewing a Scope 1-3 inventory has no use for a vendor's avoided-emissions claim, and including one in the same report invites exactly the kind of question a defensible inventory is meant to avoid.
Building a defensible carbon accounting process
Two decisions determine whether a building's carbon number holds up under scrutiny, and neither is the emission factor.
The first is the organizational boundary: equity share, financial control, or operational control. Each produces a different answer for a jointly owned or managed asset, and the GHG Protocol requires picking one and applying it consistently. Whichever approach is chosen, Scope 1 and Scope 2 reporting for everything inside that boundary is mandatory under the standard; Scope 3 remains more discretionary in scope, though less so every reporting cycle. When a portfolio changes through acquisition or disposal, the baseline year has to be restated under the same boundary, or year-over-year comparisons stop meaning anything.
The second is data quality, and this is where most of the gap between an estimate and an audit-ready figure actually lives. A monthly utility invoice is often an estimated read, reconciled against an actual meter only periodically, sometimes months after the fact. Validated meter data closes part of that gap. Reconciling submeter and BMS readings against utility bills closes the rest of it, and it's the difference between a number a sustainability report can quote and one that survives limited or reasonable assurance under CSRD. Continuous meter and BMS data is what makes that reconciliation practical at portfolio scale rather than a one-off annual exercise done by an outside consultant once a year.
CSRD's phased assurance requirement raises the bar further. Limited assurance, the initial standard, asks an auditor to review whether anything in the inventory looks implausible; reasonable assurance, coming later in the phase-in, is closer to a financial audit and requires the underlying data trail to hold up to sampling. A Scope 2 figure built on twelve estimated bills and a spreadsheet formula survives limited assurance on a good year. It does not survive reasonable assurance, because there's no evidence trail behind the number beyond the bill itself. Building that trail before it's mandatory is cheaper than retrofitting it under a deadline.
This is territory we've covered from other angles: how continuous building data changes what CSRD reporting actually requires, what continuous compliance monitoring looks like operationally, and why ESG reporting built on sensor data holds up better under continuous compliance scrutiny than an annual snapshot does. The common thread across all of it is the same one that applies to Scope 1 and 2: the accounting framework is only as good as the data feeding it, and a framework this widely mandated deserves data that doesn't need caveats.
Common mistakes buildings make in GHG accounting
The errors that show up most often in a building's GHG Protocol inventory aren't exotic. They're a short, repeatable list:
Mixing location-based and market-based Scope 2 factors into a single blended total
Treating estimated utility bills as final figures rather than provisional ones pending meter reconciliation
Missing fugitive refrigerant leaks, often the largest non-combustion Scope 1 source in a commercial HVAC system
Changing the organizational boundary definition year to year without restating the baseline
Reporting only the Scope 3 categories that flatter the total, rather than the categories that are actually material
Treating a single annual site audit as equivalent to continuous data validation across the reporting period
Switching emission factor sources between reporting years without disclosing or restating the change
FAQ
What is the GHG Protocol?
The GHG Protocol Corporate Standard is the accounting framework, published by the World Resources Institute and World Business Council for Sustainable Development, that most corporate climate disclosure is built on. It defines Scope 1, Scope 2, and Scope 3 and underpins CDP, the Science Based Targets initiative, and mandatory regimes including CSRD.
What's the difference between Scope 1, Scope 2, and Scope 3 emissions?
Scope 1 is direct emissions from sources a company owns or controls, like on-site boilers or fleet vehicles. Scope 2 is indirect emissions from purchased electricity, steam, heat, or cooling. Scope 3 is every other indirect emission across the value chain, from purchased goods to downstream leased assets.
Is Scope 2 reported location-based or market-based?
Both, if the company holds any contractual energy instruments such as power purchase agreements or renewable energy certificates. The GHG Protocol Scope 2 Guidance requires dual reporting in that case: a location-based figure using the regional grid average, and a market-based figure using the contract-specific factor.
What counts as Scope 1 emissions in a building?
On-site fuel combustion (gas boilers, furnaces, CHP units, backup generators), fugitive refrigerant leaks from HVAC and chillers, and any fleet vehicles the building operator owns directly.
Do buildings need to report Scope 3 emissions?
Increasingly, yes, particularly under CSRD's phased-in requirements. The most material categories for a building are usually purchased goods and services (construction and fit-out) and downstream leased assets where tenants control their own metering. Most operational reporting work, though, still concentrates on Scope 1 and Scope 2.
What is Scope 4 emissions?
Scope 4, or avoided emissions, measures the emissions a product or service prevents relative to a baseline, not a company's own footprint. It's a WRI concept, not part of the formal GHG Protocol Corporate Standard, and shouldn't be combined with a building's Scope 1-3 figures.
How do you calculate the carbon footprint of a building?
Multiply activity data (fuel volume, kWh purchased) by the relevant emission factor for each source, separately for Scope 1 and Scope 2, then apply the correct organizational and operational boundary. Data quality, meter reads versus estimated bills, determines whether the resulting figure is estimate-grade or audit-grade.
Which regulations require GHG Protocol-based reporting?
CSRD in the EU, SEC climate disclosure rules in the US, and most voluntary frameworks including CDP and the Science Based Targets initiative all require or reference GHG Protocol-aligned Scope 1, 2, and 3 accounting.
A building's GHG Protocol number is only as reliable as the boundary decisions and the data behind it. Get the scope definitions right, pick a defensible accounting boundary, and back it with data that reconciles rather than a bill that estimates, and the figure holds up regardless of which framework asks for it next.
FrostLogic Explore brings sensor intelligence, scenario simulation, and grounded-inference AI to commercial and industrial buildings. Learn more about Sensor Intelligence or talk it through with us.
Curious how this would look on your building?
What's your building not telling you?
Tell us what you're trying to figure out: energy drift, a BMS you don't trust, compliance you're chasing. We listen first, then tell you straight whether Explore helps. 30 or 60 minutes, your pick. No commitment either way.