Supply Chain Due Diligence: Suppliers, Origins and Hidden Risks

A direct supplier can pass onboarding while subcontracting production to an undisclosed factory. Supply chain due diligence examines those upstream relationships, product origins and sourcing claims. It helps buyers identify harmful practices and business exposure, then decide which evidence and corrective action are needed.

Key Takeaways

• Examine manufacturers, intermediaries and sub-suppliers beyond the direct contractor.
• Assess harm to workers and the environment alongside governance and operational exposure.
• Connect sourcing claims to specific entities, facilities, goods and records.
• Assign responsibility for follow-up and test whether corrective measures work.

What Does Supply Chain Due Diligence Cover?

Supply chain due diligence is an ongoing process for identifying, preventing and addressing adverse impacts connected to the goods and services a business buys. Human rights, labour conditions and environmental harm are central concerns. Buyers also examine corruption, ownership, sanctions exposure and operational dependencies relevant to procurement.

The scope extends from raw materials and production through intermediaries and logistics. It changes with the product, geography and evidence available. A supplier questionnaire is one input, not the completed process.

Establish Who Actually Produces and Moves the Goods

Start with a product, material or service that matters to the procurement decision. Identify the direct supplier, actual manufacturer, production location, relevant processors, subcontractors and logistics providers.

Distinguish a seller’s registered address from the manufacturing site. Separate the country of dispatch from the claimed production origin. Record where information comes from and which upstream relationships remain unknown.

Vendor verification establishes facts about an individual supplier. Chain-level analysis connects that supplier to the facilities, inputs and counterparties behind the delivery. An approved intermediary does not establish the conditions at an undisclosed factory.

Match the Evidence to the Risk

Different questions require different evidence:

• Human rights and labour: recruitment practices, forced or child labour, wages, working hours, safety and access to grievance channels.
• Environmental impacts: pollution, waste, water use, emissions and damage linked to extraction or production.
• Governance and sourcing: bribery indicators, undisclosed subcontracting, inconsistent origin claims and ownership links.
• Operational dependencies: critical facilities, financial distress, route disruption, cyber incidents and limited replacement options.

For harm to people and the environment, prioritisation should reflect severity and likelihood. Give severity particular weight when assessing potential human-rights impacts. Contract value alone is not an adequate proxy.

Compare supplier disclosures with relevant records, credible local reporting and specialist findings. For sanctions screening, examine the applicable restrictions and relevant ownership or transaction context; a name match alone does not resolve the issue.

Check an audit or certificate’s issuer, date, facility and scope. Evidence about one site does not automatically cover another. Public allegations require corroboration. Desk research cannot replace worker engagement, site inspections or specialist environmental assessment where those are necessary.

Turn Findings Into Follow-Up and Review

Assign an owner to each material issue. Specify the evidence required, corrective measure, deadline and test for completion. Purchasing, compliance, sustainability and legal teams should know who can approve an exception or escalate an unresolved concern.

A corrective-action plan might require disclosure of a subcontractor, changes to recruitment practices or investigation of a pollution complaint. Confirm implementation and outcomes rather than accepting another policy statement. Where appropriate, the response should include remedy for people affected by harm.

Ending a relationship is not automatically the best response to every finding. Consider the severity, prospects for improvement and consequences of disengagement. Applicable prohibitions or urgent safety concerns may require different action.

Revisit the assessment after changes to factories, ownership, materials or routes. Review incidents and credible complaints. Record decisions and communicate the response to relevant stakeholders. Measure whether interventions reduced the identified harm, not simply whether suppliers returned forms.

Build a Tier-by-Tier Evidence Map

Consider a hypothetical buyer purchasing components from Distributor A. The distributor names Factory B as the manufacturer. Shipping records available to the buyer identify Exporter C, while the supplied audit covers a different site.

Record four connected questions:

1. Which relationship is claimed? Identify who sells, manufactures, exports and transports the components.
2. What supports the connection? Attach relevant orders, product records, shipping documents and site-specific evidence.
3. What remains unresolved? Establish whether Exporter C is an ordinary intermediary, whether the audit covers production and whether subcontracting occurred.
4. Who must resolve it? Name the responsible reviewer, requested documents and escalation deadline.

The discrepancy does not prove misconduct. It identifies a missing connection that affects how much confidence the buyer can place in the sourcing claim.

Keep source dates, matching identifiers and contradictory evidence with each material link. When a factory or route changes, the map shows which earlier findings need to be revisited.

Understand the Limits of the Review

Legal duties depend on jurisdiction, company scope and activity. The EU Corporate Sustainability Due Diligence Directive and the UK Modern Slavery Act’s transparency provisions are different frameworks. Neither should be reduced to a claim that every business faces identical obligations.

Molfar Intelligence investigates ownership, affiliations, trade-route indicators and adverse information through third-party due diligence. Source-referenced findings inform procurement and specialist review. They do not substitute for an on-site labour or environmental audit, or a legal opinion.

Frequently Asked Questions

How do I conduct supply chain due diligence beyond tier-one suppliers?

Start with priority goods or services. Identify upstream manufacturers, facilities and intermediaries. Request records connecting each material relationship, then investigate significant gaps. Document which tiers remain unverified and how that uncertainty affects the decision.

What evidence should I request to verify a supplier’s declared manufacturing location?

Request the manufacturer’s legal name, site address and records relevant to the product and period. Compare production documentation, available shipping records and site-specific audit evidence. Distinguish a registered office or dispatch point from the actual factory.

How is supply chain due diligence different from a supplier audit?

An audit examines defined conditions or controls within a stated scope and period. Due diligence also identifies upstream relationships, assesses impacts, directs corrective action and reviews outcomes. An audit can contribute evidence without establishing the condition of the entire chain.

What should we do when a supplier cannot identify an upstream manufacturer?

Record the gap and request product-specific traceability evidence. Set a proportionate deadline and escalation route. Assess the potential harm, legal restrictions and procurement dependency before deciding whether to continue, impose conditions, pause or disengage.

‍