Vodafone Earns EcoVadis Platinum Medal for Third Consecutive Year

Vodafone  has received a Platinum medal from EcoVadis for the third consecutive year, scoring 88 out of 100 and placing in the top 1% of all companies assessed by the sustainability ratings provider.

EcoVadis  evaluates companies across four areas: environment, labour and human rights, ethics, and sustainable procurement. Vodafone’s score has improved for four consecutive years, rising from 80 in 2023 to 88 in 2026 under the EcoVadis assessment methodology.

The company’s Labour and Human Rights performance improved as it continued investing in employee development, career planning, internal mobility, skills and wellbeing. During FY26, Vodafone expanded training aligned with areas including customer experience, operational excellence and artificial intelligence.

Its development programmes include Leadership Essentials, which provides training through Licence to Hire, Licence to Lead and Licence to Coach programmes. Vodafone also continued to provide employees with opportunities for cross-functional and international projects, allowing them to build new skills and experience across its markets.

Employee wellbeing remained another area of focus, with programmes covering physical and mental health, financial wellbeing and work-life balance. The company also maintained its commitment to providing a safe and healthy working environment for employees, contractors and partners.

Vodafone also recorded an improvement in its Sustainable Procurement score following further development of its supplier assessment, audit, training and sustainability programmes.

The company works with more than 8,500 suppliers, with ESG criteria incorporated into tendering, supplier selection and performance management. During FY26, Vodafone adopted a more systematic, risk-based approach to supply-chain due diligence and expanded audit coverage to approximately four times its FY25 level.

More than 238 suppliers were onboarded to Vodafone’s ESG performance-management system during FY26, covering more than half of its global procurement expenditure. The company also completed 21 detailed supplier audits across Africa, Asia and Europe, including audits involving Tier 2 and Vodacom-specific suppliers.

The audits resulted in 72 corrective action plans relating to human rights concerns, with issues addressed through actions agreed with suppliers and independent auditors. Vodafone also provides an anonymous Speak Up mechanism for workers across its supply chain.

On climate action, Vodafone continued implementing its Climate Transition Plan for FY25 to FY27, which outlines measures to reduce emissions, manage climate-related risks and support its longer-term net-zero ambitions.

During FY26, 100% of electricity purchased and used across Vodafone’s global operations was matched with electricity added to the grid from renewable sources, rounded to the nearest whole percentage point. Less than 0.2% was not matched because suitable purchasing mechanisms were unavailable in those locations.

Scope 1 and 2 market-based greenhouse gas emissions were 85% below Vodafone’s FY20 baseline, while Scope 3 emissions declined 11% year on year to 6.11 million tonnes of carbon dioxide equivalent, an 18% reduction from FY20.

Vodafone also highlighted its cybersecurity and information-security governance as part of its ethics performance. Cybersecurity remains a Board-level priority, supported by an in-house global cyber team of more than 900 employees and a common security model across its European and African markets.

The company maintains externally audited ISO 27001 information-security certifications covering its global technology function and 11 local markets. VodafoneThree achieved its first joint ISO 27001 certification in 2026 following 84 audit sessions involving nine functions, 63 teams and 200 people.

Vodafone UK also passed its Cyber Essentials Plus audit on 27 February 2026, covering controls including secure configuration, security updates, access control and malware protection.

The company said it continues to reinforce its security controls through mandatory cybersecurity training, quarterly phishing simulations, independent penetration testing and regular internal and external audits, completing more than 1,000 penetration tests annually across the Group.