Jurisdiction report when the group is registered outside the EU – supply risk

When a corporate group's registration sits entirely outside the European Union, the standard due-diligence toolkit available for EU-resident counterparties simply does not apply. There is no Business Registers Interconnection System (BRIS) entry to query, no unified beneficial-ownership register accessible from Lisbon, and no cross-border enforcement mechanism that compels the foreign registry to provide certified documents on demand. What you have instead is a layered verification problem: local registry availability, translation and apostille requirements, structural opacity at the holding level. And. critically from a supply-chain perspective. the practical question of whether the entity you are contracting with has the authority, capitalisation, and operational continuity to perform. This report sets out the order of steps, the sources consulted, and the categories of risk that remain structurally unverifiable even after a thorough multi-source inquiry.

Why Non-EU Jurisdiction Compounds Supply Risk

Supply risk – the probability that a counterparty fails to deliver goods, services. Alternatively. Obligations on the agreed terms – is elevated whenever verification of the counterparty's legal and financial status is materially harder than normal. Non-EU group registration introduces four compounding layers:

Registry accessibility. EU member-state business registers have harmonised their external access interfaces to varying degrees. Non-EU registers range from fully digitised and publicly searchable (e.g., Companies House in the United Kingdom. This post-Brexit remains highly transparent) to registries that require a local representative to submit a written request in person. Pay a fee in local currency. Additionally, wait several weeks for a paper response. In some jurisdictions – including several in Southeast Asia, West Africa, and parts of the CIS bloc – registry entries are not publicly searchable at all without a formal power of attorney. This creates asymmetry: your counterpart can inspect Portuguese commercial registry data instantly through the Registo Comercial online portal, while you may have no equivalent route to verify their own registration without engaging local counsel.

Group structure opacity. Non-EU holding structures, particularly those using intermediate entities in low-disclosure jurisdictions (certain Caribbean overseas territories. Certain Pacific island states, parts of the Gulf), routinely place the operational contracting entity several layers below the true beneficial owner. The entity signing your supply contract may be a purpose-built subsidiary with minimal paid-in capital and no independent assets. Without access to a functioning beneficial-ownership register at the top-holding level, tracing the actual decision-making and guarantee capacity is a documentary exercise that will never be fully complete.

Translation and apostille chains. Even when registry documents are obtainable, they must be translated and, in most cases. Legalised via the Hague Apostille Convention chain. or. There, the issuing state is not a party to the Convention, via consular legalisation. Each step introduces delay and the possibility of inaccuracy. A commercially-oriented translation of a corporate charter may not capture nuances in the authorisation clauses that matter for determining whether the signatory of your supply agreement was actually empowered to bind the company.

Currency of information. Even a correctly obtained, translated, and legalised extract from a foreign registry reflects a point-in-time snapshot. Share transfers, change of directors, and capital restructurings that occurred after the extract date will not appear. In jurisdictions where registry updates are filed with delays measured in months rather than days, a current extract may already be substantially out of date at the moment you receive it.

Typical Order of Steps in a Non-EU Jurisdiction Report

Step 1 – Identify the registration jurisdiction and entity type. The counterparty's stated domicile must be verified against the actual legal system governing its formation. A company incorporated in, say. The Cayman Islands but operating through a branch registered in an EU member state presents a different risk profile than a purely domestic entity in a high-disclosure jurisdiction such as Singapore or Canada. The first task is to confirm where the parent entity was formed, what type of legal person it is under local law, and which registry (or registries) hold its foundational documents.

Step 2 – Assess registry accessibility and engage local counsel if necessary. For jurisdictions where public online access is not available. The report process requires instructing local lawyers or notarised agents to obtain an official extract. This is not optional: unofficial data sources. commercial databases, web searches, aggregator services. do not constitute verified registry evidence and cannot replace an official extract in a legal proceeding or in a bank's compliance review. The time required for this step varies enormously: from same-day in digital-first jurisdictions to six weeks or more in registries that still rely on physical files.

Step 3 – Collect and analyse foundational documents. The minimum document set for a non-EU group typically includes: the certificate of incorporation or equivalent constitutional document. the current memorandum and articles of association (or the equivalent under local law). a current list of directors and. There. Obtainable, shareholders or members. and any filing confirming the group's registered address and any branch registrations in countries where the entity operates. Each document must be cross-referenced with the counterparty's representations in the supply agreement – particularly the authority clause and the representations on solvency.

Step 4 – Beneficial ownership tracing. This is the step where non-EU structures most frequently hit a hard ceiling. If the group's ultimate holding entity is registered in a jurisdiction that has not implemented a public beneficial-ownership register. The maximum achievable is an identification of the immediate legal owners at each layer, stopping where the chain becomes unverifiable. The report must state explicitly where tracing stopped and why – this is a disclosure obligation, not a gap to paper over.

Step 5 – Sanctions and watch-list screening. This step is mandatory regardless of registry accessibility. All entities in the identified corporate chain, and all natural persons identified as directors or shareholders, must be screened against applicable sanctions lists. For a Portuguese counterparty engaging a non-EU group, the relevant primary lists are the EU Consolidated Sanctions List. The UN Security Council Consolidated List, and. depending on contract currency and bank involvement. the OFAC Specially Designated Nationals list. Screening must be documented with timestamps because list entries change.

Step 6 – Operational verification. Registry information tells you the legal skeleton. It does not tell you whether the entity is actually trading. For supply-chain purposes, the operational layer. actual production capacity, facility ownership or lease, existence of key supplier relationships, insurance coverage. must be verified through separate channels: certificates of commercial activity. VAT registration confirmations where available, credit-bureau reports where the jurisdiction has a functioning credit bureau, and. There, the contract value justifies it, a physical site visit or verification by a local correspondent.

Step 7 – Produce the report and flag residual uncertainty. A professionally prepared jurisdiction report on a non-EU group documents each of the above steps. Specifies the sources used and the date of each query, identifies what could not be verified and why, and summarises the supply-risk implications. It does not present a binary "pass/fail". it presents a risk-graded assessment that the contracting party can use to decide whether to proceed. To require contractual guarantees (parent company guarantee, letter of credit, advance payment bond), or to decline the relationship.

What a Jurisdiction Report Can and Cannot Verify

Verifiable through official sources: legal existence and standing as of the date of the registry extract. registered name and any trade names on file. type of legal entity and governing law. identity of registered directors (not necessarily all beneficial owners). registered office address. stated share capital (not actual liquid assets). existence of any branch registrations in other jurisdictions that participate in BRIS or equivalent disclosure systems.

Typically verifiable with significant effort: constitutional authority of signatories. By analysis of the articles of association and any board resolutions provided. absence of entry on public sanctions lists (point-in-time). group structure to the extent recorded in official filings. presence of insolvency proceedings in jurisdictions with public insolvency registers.

Structurally unverifiable without local judicial process or voluntary disclosure: actual beneficial ownership where the group sits in a non-disclosure jurisdiction. real financial position (non-EU groups are not subject to EU mandatory financial reporting requirements unless they have EU-listed securities). existence of undisclosed encumbrances on assets. off-balance-sheet liabilities and related-party exposures. the current operational status of facilities not subject to public licensing disclosure. and any adverse regulatory action taken by a non-EU regulator that does not publish enforcement decisions.

This distinction between verifiable and unverifiable matters enormously in a supply-contract context. If a supplier defaults and the contracting party seeks to enforce in Portugal or across the EU. The depth of the upfront verification record determines the credibility of any "good faith" defence and may affect the enforceability of guarantee clauses against foreign parent entities.

Contractual Protections When Verification Is Incomplete

Because the verification ceiling for non-EU groups is structurally lower than for EU-registered counterparties, the supply agreement itself must carry a heavier compensatory load. The following structural provisions are commonly employed when the jurisdiction report reveals significant unverifiable areas:

Parent company guarantee. If the ultimate beneficial holding entity cannot be fully identified, a guarantee from the highest identified entity in the chain with demonstrable assets provides a contractual backstop. The guarantee must be governed by a law under which enforcement in Portugal is predictable – ideally EU law or the law of a jurisdiction with a bilateral enforcement treaty with Portugal.

Performance bond or standby letter of credit. Issued by a bank in a jurisdiction whose banking-sector regulation is broadly equivalent to the EU framework. This provides an instrument that can be called on default without initiating proceedings against the foreign entity itself. The instrument must be payable on first demand, not conditional on a court judgment that would require recognition of a non-EU decision.

Retention of title and step-in rights. For supply of goods, contractual retention of title until full payment ensures that the buyer has a proprietary claim in insolvency. For supply of services or licensed IP, step-in rights allowing the buyer to complete the service using the supplier's resources and sub-contractors upon notice of material breach mitigate continuity risk.

Governing law and dispute resolution. An agreement to resolve disputes by arbitration under internationally recognised rules (ICC, LCIA. Alternatively, UNCITRAL) with a seat in a New York Convention state. Additionally. Governed by Portuguese law or the law of another EU member state, allows enforcement of an award against assets located in any of the 170+ states party to the Convention. This is materially more useful than a Portuguese court judgment when assets are located outside the EU.

Disclosure and update obligations. Given that registry information goes stale and non-EU registries may not proactively notify of changes. A supply agreement with a non-EU counterpart should include a contractual obligation to notify promptly of any change in ownership, director. Alternatively, capitalisation, with material breach and termination rights attached.

Sector-Specific Considerations for Supply Chains

Manufacturing and raw materials. For groups supplying physical goods, the critical additional layer of verification beyond corporate registration is export-control classification of the goods and the supplier's track record with national export control authorities. Non-EU suppliers of dual-use goods, components used in defence or aerospace. Alternatively. Materials subject to EU import restrictions require screening that goes beyond the commercial registry entirely and involves regulatory-compliance analysis under EU Trade and Sanctions law. See the firm's analysis in the Trade & Sanctions practice area.

Technology and software. Non-EU technology suppliers registered in jurisdictions subject to data-localisation requirements or mandatory government access to stored data (a category that includes several major economies) present a structural conflict with EU data-protection obligations. The jurisdiction report in a technology-supply context must therefore cross-reference against the GDPR adequacy decision status of the supplier's home jurisdiction and, where no adequacy decision exists, document the alternative transfer mechanism relied upon.

Professional and financial services. Groups providing financial services from outside the EU but targeting EU-resident clients may require passporting or third-country equivalence recognition under applicable EU sectoral directives (MiFID II, AIFMD, Solvency II). A group that lacks the required authorisation is not a permissible counterparty for certain regulated-sector procurement regardless of how strong its commercial registry standing appears.

How Ferraz & Whitmore Structures a Jurisdiction Report

Our jurisdiction reports on non-EU groups are produced in a standard three-tier structure, calibrated to the volume and complexity of verification required. All tiers include the official-source query log, the sanctions-screening certificate, and a written assessment of residual supply risk. The difference between tiers reflects the depth of group-structure tracing, the number of jurisdictions covered, and the inclusion of contractual-risk recommendations.

Tier	Coverage	Price (EUR)	Not included
Signal	Single entity · official extract from primary registry · sanctions screening · 2-page risk summary	290	Group structure tracing · contractual recommendations · multi-jurisdiction coverage
Standard	Up to 3 group entities · multi-source verification · beneficial-ownership tracing to identified ceiling · full written report with risk grading	530	Regulatory-compliance analysis · sector-specific licensing review · physical site verification
Extended	Full group (no entity cap) · all jurisdictions covered · contractual-protection recommendations · supply-agreement review for risk clauses · escalation to local counsel coordinated by Ferraz & Whitmore	1 100	Physical audit · actuarial assessment · regulatory licence applications in third countries

To request a report or discuss which tier fits your situation, write to info@ferrazwhitmore.com or use the contact form. We respond to all enquiries within one working day and will confirm the expected delivery timeline once the counterparty details have been received.

Frequently Asked Questions

Related Practice Areas

A jurisdiction report on a non-EU group rarely sits in isolation. The findings typically feed into one or more of the following practice areas at Ferraz & Whitmore:

• Corporate Law – for structuring the supply agreement, authority analysis, and governance representations
• Trade & Sanctions – for export-control classification, sanctions screening, and third-country regulatory compliance
• M&A – where the supply relationship is part of a broader acquisition or joint-venture negotiation
• Litigation & Arbitration – for enforcement strategy when a non-EU supplier has defaulted and assets must be identified and pursued across jurisdictions
• Banking & Finance – for structuring performance bonds, standby letters of credit, and other financial security instruments
• Data Protection – where the supply arrangement involves personal data processed outside the EU and transfer-mechanism analysis is required

Disclaimer: This page provides factual and analytical information about the process of verifying corporate groups registered outside the European Union. It does not constitute legal advice and does not establish a lawyer-client relationship. The information reflects general practice as of the publication date and may not reflect subsequent changes in applicable law, registry procedures, or sanctions frameworks in any particular jurisdiction. Readers should seek specific legal advice before entering into supply arrangements with non-EU counterparties or relying on any verification methodology described herein. Ferraz & Whitmore, Lda is registered with the Ordem dos Advogados de Portugal.