See the dependency before it becomes the exposure
Supplier relationships carry risk that financial statements and standard diligence do not show. Sanctir maps dependency, ownership, and adversarial exposure across a supply base so decisions rest on the actual structure, not the org chart.
What financial diligence does not surface
Standard vendor diligence produces a list: who a company buys from, at what volume, on what terms. That list answers a commercial question. It does not answer a structural one — and the risks that end an engagement, freeze a transaction, or trigger a compliance event are structural.
A supply base analyzed as a list of vendors hides three things a data room will not surface: concentration in a single foreign source that no second supplier can replace on any useful timeline; beneficial ownership that resolves, through intermediate holding structures, to a restricted party or an adversarial jurisdiction; and tier-three and tier-four dependencies that never appear in a contract because the buyer never had privity with them. Each becomes visible only when the base is analyzed as a network of ownership and dependency rather than a schedule of counterparties.
A structural map of the supply base
Dependency mapping
Concentration and single-point-of-failure analysis across tiers — where the base depends on a source that cannot be substituted quickly, and how far down the chain that dependency actually runs.
Beneficial-ownership resolution
Who ultimately controls each node. Ownership traced through intermediate and holding structures to the parties that actually hold control, not the entity named on the invoice.
Restricted-party & jurisdictional risk
An overlay identifying where ownership or control resolves to a sanctioned, listed, or otherwise restricted party, and where jurisdictional exposure — Section 889, FIRRMA/CFIUS-adjacent, or sanctions — sits in the base.
Concentration analysis
Where dependency clusters into single points of failure, and which of those points carry compounding risk because dependency and adversarial exposure coincide in the same node.
Prioritized diversification
A ranked set of recommendations — which relationships to diversify, in what order, and where the effort buys the most resilience before disruption or a compliance event forces the issue.
The same tradecraft, applied to commercial sourcing
This service applies the node-control and beneficial-ownership methodology Sanctir uses in its sanctions and threat-finance research directly to a commercial supply base. The analytic standard is the same: dependency and ownership are resolved to a persistent structure rather than accepted at the level of the named counterparty, exposure is stated with its basis, and the limits of the analysis are named rather than assumed away. The reasoning behind an assessment is visible before an engagement begins.
Where structural sourcing analysis changes a decision
Corporate development
Acquirers who need to understand a target’s sourcing exposure — single-source concentration, hidden ownership, restricted-party risk — before a transaction closes, not after integration surfaces it.
Investment funds
Funds performing target or portfolio diligence that need supply-base exposure mapped as part of the risk picture, alongside the financial and legal work a data room already covers.
Primes & mid-tier contractors
Contractors under DFARS, Section 889, and FIRRMA-adjacent pressure who must know where restricted-party or adversarial exposure sits in their base before a flow-down obligation or a compliance event makes it their problem.
Organizations facing sourcing risk
Companies that need to understand their sourcing exposure before a disruption or a compliance event forces the issue — while diversification is still a choice rather than a scramble.
How an engagement is structured
An initial scoping conversation is provided at no charge, to define the supply base in question and the decision the analysis has to support. A typical engagement then runs in four stages: scope — fixing the boundary of the base and the tiers in view; mapping — building the dependency and tier structure; ownership resolution — tracing control to the parties that actually hold it; and exposure reporting — a structured deliverable identifying concentration, restricted-party and jurisdictional exposure, and prioritized diversification recommendations. The work is delivered as a discrete, fixed-fee work product structured for audit, legal review, and executive decision-making.
The analytic approach, in published work
The same beneficial-ownership and node-resolution logic this service applies to a supply base is set out in Sanctir’s published assessments — including the structural argument for resolving counterparties to a persistent identity rather than clearing each new corporate name as unknown.
Discuss a supply-chain engagement
An initial scoping conversation is provided at no charge. Describe the supply base and the decision in general terms first; use an encrypted channel for anything specific.