A counterparty due diligence exercise for supply risk is not a single fixed product. it is a layered process where each tier of investigation adds a distinct category of information on top of the last. The entry tier confirms that a supplier legally exists and is in good standing. the intermediate tier maps financial resilience. Ownership structure and sanctions exposure. the extended tier probes operational concentration, sub-supplier dependencies and litigation history that could interrupt delivery. Knowing exactly what is and is not covered at each level allows procurement, legal and finance teams to calibrate effort against the actual stakes of the contract before committing resources.
Why Tiered Counterparty Checks Matter in Supply Relationships
Supply-side counterparty risk is qualitatively different from credit risk in a lending transaction. A lender's primary concern is whether a borrower will repay; a buyer's primary concern is whether a supplier can continue to perform – on time, at the contracted specification, without interruption. The risk variables are therefore broader: corporate health matters. However, so do geographic concentration of manufacturing, single-source inputs. Labour disputes, regulatory licences and the financial condition of sub-tier suppliers who never appear on the main contract.
A tiered framework exists because not every supply relationship warrants full investigation. A low-value, easily substitutable supplier of office consumables presents negligible supply risk. A sole-source manufacturer of a critical component embedded in a regulated product may justify the deepest available scrutiny. Matching the depth of diligence to the materiality of the relationship is both a cost-management discipline and a governance obligation under modern supply-chain transparency legislation.
Tier One: Identity, Legal Status and Basic Standing
What this tier covers. The first tier establishes that the counterparty is a real, validly incorporated legal entity in the jurisdiction it claims. That it has not been dissolved or struck off. Additionally, that it is not operating under a formal insolvency procedure. The sources are official company registries – the commercial register, trade register or equivalent public filing system in the relevant jurisdiction – and, where applicable, published insolvency court gazettes or official government portals.
Specific data points typically retrieved. At this tier you would expect to obtain: the counterparty's registered legal name and any trading names. its company registration number and date of incorporation. the registered office address. the names of directors or equivalent officers as filed with the registry. confirmation of current active status. and the stated share capital or corporate type. In many European jurisdictions, filed annual accounts are also accessible at this level, though their depth varies considerably by entity size and local reporting obligations.
What this tier does not resolve. Registry data is backward-looking and its freshness depends on the filing cycles of the jurisdiction. in some countries. Annual accounts may be filed with a lag of twelve to eighteen months. A company can appear active in the registry while already experiencing severe financial distress that has not yet triggered formal insolvency filings. Beneficial ownership, group structure, sanctions exposure and operational capacity are all outside the scope of a tier-one search. This level is adequate for a preliminary screen or for very low-value, easily replaceable suppliers; it is not sufficient for any relationship involving significant contract value, long lead times or single-source dependency.
Tier Two: Financial Health, Ownership and Sanctions Screening
What this tier adds. The second tier builds on basic legal status to address the question of whether the supplier is financially robust enough to perform and whether it presents compliance risk. The key additions are: a structured review of filed financial statements covering at minimum the prior two to three financial years. identification of the beneficial ownership chain. This includes ultimate beneficial owners above the applicable disclosure threshold. and screening against major sanctions lists. Debarment registers and politically exposed persons databases.
Financial statement analysis in the supply context. For supply risk specifically, the financial metrics that matter most are not always the same as those a lender would prioritise. Working capital adequacy is critical – a supplier with thin liquidity may be unable to purchase raw materials for a large order without advance payment, creating dependency and performance risk. Debt maturity profiles matter because a refinancing event in the middle of a long-term supply agreement can be destabilising. Revenue concentration is also relevant: if the target supplier derives a dominant share of its revenue from a small number of customers. Loss of one relationship could threaten its viability, even if its current accounts look healthy.
Beneficial ownership and group structure mapping. Many supply-chain disruptions arise not from the direct contracting entity but from a parent or affiliate. A subsidiary may appear financially sound while its parent group is under severe stress. a change of control at the parent level may affect contractual change-of-control provisions or introduce sanctions-linked ownership without any change to the subsidiary's own registry filing. Tier two therefore traces the ownership chain upward to identify the ultimate parent, intermediate holding companies, and any group entities that could affect performance or compliance.
Sanctions, debarment and PEP screening. Screening at this tier uses consolidated databases drawn from the EU consolidated list, UK OFSI list. US OFAC SDN and sectoral lists, UN Security Council lists. Additionally, national debarment registers relevant to the supplier's jurisdictions of operation. The objective is to identify whether any entity in the ownership chain. Alternatively, any director. Is listed. since supplying to or through a listed entity can give rise to strict liability regardless of whether the buyer was aware. PEP screening adds a further dimension: commercial relationships with politically exposed persons require enhanced due diligence under most anti-money laundering regimes and carry reputational exposure beyond legal liability.
What tier two does not resolve. Financial statements capture the past; they cannot predict a future liquidity crisis triggered by a commodity price shock or a key-customer insolvency. Sanctions screening is a point-in-time exercise – lists change, and a clean result today does not guarantee compliance tomorrow. Critically, tier two typically covers only the direct supplier entity and its immediate parent structure. Sub-tier suppliers – the entities that supply the supplier – remain opaque at this level. Operational risk factors such as factory certifications, environmental licences, labour compliance and geographic concentration of production facilities are also outside scope.
Tier Three: Operational Resilience, Sub-Tier Mapping and Litigation History
What this tier adds. The extended tier is reserved for strategic suppliers, sole-source manufacturers, or any counterparty whose failure would cause material business interruption or regulatory non-compliance. It adds three categories of analysis not covered at tier two: operational due diligence, sub-tier supply chain mapping, and a structured litigation and regulatory enforcement review.
Operational due diligence. This component investigates the counterparty's physical and regulatory capacity to perform. It may include: review of manufacturing or logistics certifications relevant to the product or service (ISO standards, sector-specific licences, food safety approvals, CE marking authorisations). assessment of geographic concentration risk. This means whether production is concentrated in a single facility. Region or country exposed to specific political, environmental or infrastructure risk. review of key-person dependencies and management continuity. and analysis of the supplier's own procurement practices insofar as they can be established from public or voluntarily disclosed information.
Sub-tier supply chain mapping. The most significant supply disruptions in recent years have frequently originated not at the first-tier supplier but two or three levels down the chain. a sole-source producer of a specialised input. A logistics provider with a geographic monopoly. Alternatively, a raw-material supplier in a jurisdiction subject to sudden export restrictions. Tier-three work attempts to identify the most critical sub-tier relationships by combining supplier-disclosed information with sector intelligence and trade data analysis. The objective is not to conduct full due diligence on every sub-supplier. that would be impractical. but to identify single points of failure and concentration risks that are not visible from the direct contract alone.
Litigation and regulatory enforcement history. Court registries and regulatory enforcement databases. There, publicly accessible, can surface a pattern of commercial disputes. Product liability claims, employment tribunal decisions, environmental enforcement actions or competition investigations involving the counterparty. A single litigation event may be unremarkable; a pattern of disputes with customers over delivery failures, quality defects or payment terms is material supply-risk intelligence. Regulatory enforcement history is particularly relevant where the supplier holds licences that could be revoked. a manufacturing authorisation. An import licence, a data processing registration. since revocation would render performance impossible regardless of the supplier's financial health.
What even tier three cannot guarantee. No due diligence exercise, however thorough, eliminates supply risk. It reduces information asymmetry and allows more informed contractual protection. force majeure provisions, step-in rights, dual-sourcing obligations. Audit rights and termination triggers can all be structured more precisely when the actual risk profile of the counterparty is understood. But geopolitical events, natural disasters, and the actions of state actors operate outside any registry or database. The value of extended diligence is that it identifies the knowable risks; contract design and business continuity planning address the residual unknowns.
Selecting the Right Tier: A Decision Framework
Factors that escalate to tier two or three. Legal and procurement teams should consider escalating diligence depth when any of the following apply: the supplier is sole-source or would be difficult to replace within the lead time of the contract. the contract value or duration is material relative to the buyer's own operations. the product or service is regulated and the supplier holds a licence or certification on which the buyer's own compliance depends. the supplier operates in a jurisdiction with elevated political. Sanctions or rule-of-law risk. or the supply relationship involves significant transfer of confidential technical information that creates ongoing dependency.
Factors that permit tier one. Tier one is generally sufficient where the supplier provides a commodity good or service available from multiple alternative sources with short substitution lead times. where the contract value is modest and performance failure would cause inconvenience rather than material loss. and where the supplier is a large. Publicly listed entity whose financial information, ownership structure and regulatory standing are already publicly disclosed in depth through capital markets obligations.
Periodic refresh and trigger-based re-screening. Counterparty risk is not static. A supplier that was financially sound at contract inception may deteriorate over a multi-year agreement. Best practice involves scheduling periodic refresh reviews. typically annual for tier-two and above. and establishing internal triggers that prompt immediate re-screening: a change of control. A news report of financial difficulty, the emergence of a sanctions designation in the supplier's jurisdiction. Alternatively, a failure event in the supply relationship itself.
How Ferraz & Whitmore Supports Counterparty Risk Assessment
Our team advises buyers and suppliers across the full range of counterparty risk questions arising in supply agreements: structuring due diligence programmes proportionate to the risk profile of the relationship. Reviewing and negotiating contractual protections informed by the diligence findings, advising on sanctions compliance obligations where supply chains cross sanctioned jurisdictions. Additionally, representing clients in disputes arising from supplier failure. We work across European jurisdictions and beyond, drawing on the registry systems, enforcement databases and sector intelligence relevant to each assignment.
Supply chain legal complexity has increased substantially under the EU Corporate Sustainability Due Diligence Directive and equivalent national legislation now in force or implementation across multiple European markets. Understanding what your diligence programme actually covers – and what it does not – is no longer purely a commercial discipline; it is a legal compliance requirement for a growing range of buyers. Our corporate law and trade and sanctions practices work jointly on assignments that span both the commercial and regulatory dimensions of supply-side counterparty risk.
To discuss how counterparty due diligence can be structured for a specific supply relationship or supplier portfolio, contact us at info@ferrazwhitmore.com or visit our contacts page.
Disclaimer: This article is provided for general informational purposes only and does not constitute legal advice. The scope and content of counterparty due diligence programmes vary by jurisdiction, sector and the specific circumstances of each relationship. Ferraz & Whitmore does not accept liability for decisions taken in reliance on this general information without prior legal consultation. Registry data and screening results are subject to the accuracy and currency of official sources. References to legislation reflect the position as of the publication date and may be subject to subsequent amendment.