2024 Universal Registration Document

Environmental, social and governance data are produced internally by a network of ESG representatives trained in internal control requirements. VINCI’s non-financial performance is monitored via reporting tools that are also used for financial reporting.

The ESG teams at the business units and divisions regularly perform internal and external audits. In 2024, five ESG audits were carried out jointly by the Environment and Human Rights teams and the Internal Audit department. In addition, the Group’s Audit Department conducts an annual self-assessment of internal control relating to the following areas: the internal control environment, financial and accounting information, the environment, human rights, compliance and IT security (see paragraph 2.4, “Internal control”, of chapter D, page 184). The 2024 questionnaire included specific questions on the implementation of the CSRD.

Internal environmental risk management

The environmental risk monitoring policy is translated into operational guidelines in the business lines. Each business line establishes a road map taking into account the specific nature of its activities and geographies, with the aim to drive continuous improvement. In subsidiaries, chief executives and senior management are in charge of ensuring regulatory compliance and the implementation of risk prevention procedures in their operational scope, taking into account their specific activities and challenges. They are assisted by the network of environment officers, who provide environmental expertise.

VINCI encourages its subsidiaries to obtain environmental certification such as ISO 14001 to improve the effectiveness of their environmental management system. VINCI Concessions is expanding ISO 14001 certification to enhance risk prevention in airports and other concessions, which requires:

• a regulatory monitoring and compliance assessment process;
• an assessment of significant environmental aspects and impacts during normal operations and in the event of an incident;
• proactive systems to reduce risks (containment pallets under hazardous products, for example);
• clear procedures and training to ensure that workers are informed and fully prepared to respond effectively in the event of an incident;
• drills to practise responding to emergency situations.

All of VINCI Autoroutes’ construction, maintenance and operation businesses are ISO 14001 certified. In 2024, 43 VINCI Concessions entities, including 29 airports, obtained this certification. Furthermore, 83% of Cobra IS’s revenue is ISO 14001 certified.

ISO 14001-certified revenue

In addition, ISO 9001, which is a core standard for audits, also covers all aspects relating to the management, selection, monitoring and assessment of subcontractors. Upon completion of an audit, observations are shared with the heads of the relevant project and the audit report is sent to management at every level.

In addition, the VINCI Autoroutes concession companies with operations activities are ISO 45001 certified. The aspects covered and audited as part of this certification include company policy, leadership and management engagement, employee participation, training and awareness, work preparation and organisation, risk prevention for external companies, regulatory compliance, accident management, and management of materials, equipment and products. For more information on the Group’s health and safety certification process, see paragraph 2.6, “Assessing the situation of subsidiaries, subcontractors and suppliers”, of chapter F, “Duty of vigilance plan”, page 285.

The Diversity label is awarded by an outside organisation (Afnor Certification, in France). The certification process examines action plans focused on preventing discrimination, promoting inclusion and diversity, and respecting equality. By the end of 2024, 11 Group companies in France had been awarded this label, including all the VINCI Autoroutes entities. Outside France, several Group entities have been recognised for their inclusive processes and practices, such as in the United Kingdom with the label from the National Centre for Diversity and in Spain with certifications from Aenor, but also in Germany with the Charta der Viefalt.

1.4 Strategy and business model

General information on the business model (Group strategy, value chain, resources, value creation and stakeholders) is presented in the institutional section of this Universal Registration Document on pages 18 to 19.

1.4.1 Interests and views of stakeholders

The Executive Committee and the Board of Directors are regularly informed of the interests and views of stakeholders that could have a direct impact on the Group. Board meetings frequently begin with news reports, especially on industries where the Group is active. The Board is presented with summaries of financial and non-financial roadshows to provide a better understanding of investors’ specific expectations on sustainability issues. The presentation of sustainability information was also added to the agenda for the 20 February 2025 meeting of the VINCI SA Social and Economic Committee, which approved the Sustainability report as submitted. Lastly, VINCI’s Board of Directors includes two employee representatives to speak for employees and act on behalf of their interests.