Is DitchCarbon only spend-based, or does it also use primary data?

No. DitchCarbon uses the most specific method your data supports: product level where LCA or PCF data exists, supplier-specific (primary) spend-based where an organisation discloses its own emissions, and industry spend-based only where nothing has been published. Each figure shows which of the three produced it.