INDUSTRY WORKFLOWS · GUIDEUPDATED 2026-08-20
Industry Workflows
Manufacturing Supply Chain Compliance Screening
Screening suppliers, subcontractors and distributors in manufacturing: export controls and the Entity List, forced-labour and supply-chain due diligence law, and how to run tiered checks across a large vendor master.
Manufacturing compliance has two distinct screening problems and they are usually solved by different teams. The inbound problem is the supplier base: thousands of vendors in a master file, several tiers deep, where sanctions and forced-labour exposure sits with a sub-supplier nobody in procurement has ever contracted with. The outbound problem is distribution: components and equipment that may be dual-use, sold through distributors and integrators into end uses the manufacturer does not see. Both sit under a widening body of law. Export controls run through the EU dual-use regime in Regulation (EU) 2021/821, the US Export Administration Regulations and the Bureau of Industry and Security Entity List, and the UK Strategic Export Control Lists. Supply-chain conduct law runs through the US Uyghur Forced Labor Prevention Act, Regulation (EU) 2024/3015 on products made with forced labour, the Corporate Sustainability Due Diligence Directive (EU) 2024/1760, and national statutes such as Germany's supply chain due diligence act. The practical answer is a tiered workflow: light checks across the long tail, deep checks where spend, jurisdiction or technology risk concentrates.
What this workflow covers
SCOPE- Tier the vendor master by spend, jurisdiction, technology sensitivity and system access, and set screening depth from the tier rather than screening everything to the same standard.
- Screen suppliers, contract manufacturers, subcontractors, distributors, integrators and logistics providers — the same workflow, applied to inbound and outbound counterparties.
- Cover sanctions lists plus export-control restricted-party lists: OFAC SDN and Consolidated lists, the EU consolidated list, the UK Sanctions List, and the BIS Entity, Denied Persons, Unverified and Military End User lists.
- Identify beneficial owners and parent groups for higher-tier suppliers; ownership rules extend a designation automatically to entities a designated person owns or controls.
- Apply end-use and end-user diligence on the outbound side — catch-all controls can bite even where the distributor and the item both screen clean.
- Map forced-labour exposure to specific inputs and regions, and hold the evidence: the Uyghur Forced Labor Prevention Act operates as a rebuttable presumption, so the burden of proof sits with the importer.
- Prepare for the EU supply-chain regime — Regulation (EU) 2024/3015 on forced labour and Directive (EU) 2024/1760 on corporate sustainability due diligence both require a documented, risk-based process rather than a one-off check.
- Push visibility past tier one where risk warrants: ask critical suppliers to disclose their own subcontractors and screen those names in the same pass.
- Batch re-screen the whole vendor master on a fixed cycle rather than tracking individual anniversaries, and re-screen on trigger events such as ownership change or an enforcement report.
- Retain screening evidence with the supplier record so procurement, trade compliance and audit read the same file rather than three parallel ones.
Key statistics
DATA- EU forced labour prohibition
- Regulation (EU) 2024/3015
- Official Journal of the European Union
- EU corporate due diligence duty
- Directive (EU) 2024/1760 (CSDDD)
- Official Journal of the European Union
- US forced labour presumption
- Uyghur Forced Labor Prevention Act — rebuttable presumption on importers
- U.S. Customs and Border Protection
Compliance glossary
TERMS- Vendor master
- The system of record holding every approved supplier for a manufacturing organisation. It is the natural unit for batch sanctions re-screening because it contains the legal names, countries and identifiers that screening requires.
- Rebuttable presumption
- A legal standard under which goods are treated as prohibited unless the importer produces clear and convincing evidence to the contrary. It is the mechanism of the US Uyghur Forced Labor Prevention Act and shifts the evidentiary burden onto the importer.
- CSDDD
- The Corporate Sustainability Due Diligence Directive, Directive (EU) 2024/1760, which requires in-scope companies to identify, prevent and mitigate adverse human rights and environmental impacts in their own operations and their chains of activities.
- Tier-n supplier
- A supplier beyond the direct contracting relationship — the supplier of a supplier. Tier-n exposure is where most sanctions and forced-labour surprises originate, because the contracting entity screens clean while an upstream input does not.
Authoritative references
SOURCES- 01Entity List and other lists of parties of concern
Bureau of Industry and Security
- 02Uyghur Forced Labor Prevention Act
U.S. Customs and Border Protection
- 03Directive (EU) 2024/1760 on corporate sustainability due diligence
Official Journal of the European Union
- 04Regulation (EU) 2021/821 on the control of dual-use items
Official Journal of the European Union
Expert perspective
NOTE“Risk controls perform best when sanctions checks and ownership context are reviewed together.”
Frequently asked questions
Q&A- What is supply chain sanctions screening in manufacturing?
- It is the control that checks suppliers, subcontractors, distributors and their owners against sanctions lists, export-control restricted-party lists and adverse media before contracting and periodically afterwards. In manufacturing it also extends outbound, because distributors and integrators can route controlled components to restricted end users the manufacturer never sees directly.
- How deep into the supply chain should screening go?
- Tier one is the baseline, with deeper tracing where risk concentrates: critical single-source components, sensitive technology, high-risk jurisdictions and inputs associated with forced labour. Full tier-n visibility is rarely achievable, so most programmes require higher-tier suppliers to disclose critical subcontractors and screen those disclosed names as part of the same review.
- What is the BIS Entity List and how does it differ from the SDN List?
- The Entity List is maintained by the US Bureau of Industry and Security and names foreign parties subject to specific export licence requirements under the Export Administration Regulations. The SDN List is maintained by OFAC and blocks property and prohibits dealings outright. A supplier can be on the Entity List without being an SDN, so both must be screened.
- How does the Uyghur Forced Labor Prevention Act affect manufacturers?
- It creates a rebuttable presumption that goods mined, produced or manufactured wholly or in part in Xinjiang, or by entities on the associated CBP entity list, are made with forced labour and are inadmissible to the United States. The burden of rebutting it sits with the importer, which means the supply-chain mapping and documentary evidence must exist before a shipment is detained.
- What is the EU forced labour regulation?
- Regulation (EU) 2024/3015 prohibits placing or making available on the Union market, and exporting from it, products made with forced labour at any stage of production. It applies across all sectors and to domestic and imported goods alike, and it is enforced by national authorities through investigations that can order withdrawal and disposal of the goods.
- How do you screen a large vendor master without stalling procurement?
- Run batch screening across the full file on a schedule and reserve analyst review for the results that need it. New vendors get a fast name-and-country check at requisition, with ownership tracing, PEP checks and adverse media applied only to higher tiers. Screening at requisition rather than at contract signature removes most of the perceived delay.
- When should a manufacturer re-screen an existing supplier?
- On a fixed cycle — commonly quarterly for high-risk categories and annually for the long tail — and immediately on trigger events: a change of ownership or control, an enforcement action or adverse media report, a new designation touching the supplier's country or sector, a contract renewal, or a material expansion of scope.
Q.01
Q.02
Q.03
Q.04
Q.05
Q.06
Q.07