China Supplier Due Diligence

Treat due diligence as a control system

A one-time company search answers a narrow question: which legal entity does this record describe, and what did the available sources say on the search date? It does not approve a product, confirm a production line, authenticate every document, or predict performance.

The broader management principle is well established. The OECD due-diligence guidance is risk-based and expects companies to identify, address, track, and communicate about significant impacts across business relationships. The UN Guiding Principles on Business and Human Rights describe due diligence as an ongoing process that should begin early and be prioritized where risks are most significant.

This guide applies that operating idea to import procurement. Commercial, quality, legal, product-compliance, financial, and responsible-sourcing reviews are not interchangeable. They can share a supplier file, but each needs an owner, a decision, and an escalation path. Requirements also vary by destination market, product, industry, order value, and the buyer's own policies. A company report is therefore an input to a decision, not the decision itself.

Classify the order before classifying the supplier

Teams often apply the same checklist to a USD 300 stock sample and a USD 150,000 custom product. The result is either wasted effort or dangerous under-review. Begin with an order-risk brief and select controls that match the exposure.

Risk can move a transaction up a tier even when the amount is small. A low-cost electrical component used in a safety function may deserve more scrutiny than an expensive decorative item. The same is true where the buyer shares proprietary drawings, depends on one factory, sells to a regulated customer, or cannot replace the product quickly.

Stage 0: write the sourcing brief

Before collecting supplier documents, write one page that explains the purchase. This prevents the review from becoming an accumulation of whatever files the salesperson happens to send.

• Define the exact product, intended use, destination markets, forecast volume, and required delivery window.
• Identify regulated or customer-specific requirements that need qualified advice.
• Record expected order value, deposit, balance trigger, Incoterm, tooling, IP, and switching cost.
• List non-negotiable requirements and the facts that are still assumptions.
• Assign procurement, quality, finance, legal or compliance, and logistics owners before deadlines arrive.

The output is not a supplier score. It is a review plan. For example, "new supplier of machined pump housings" is too vague. A better brief says that the part uses a buyer-owned drawing, goes into industrial equipment sold in two markets, requires material traceability, has a 40 percent deposit, and cannot be replaced within twelve weeks. Those facts determine what must be verified.

Stage 1: establish identity and roles

Anchor the file to the Chinese legal name and Unified Social Credit Code of each relevant mainland entity. Record who is speaking, who will sign, who manufactures, who exports, who issues the invoice, and who receives the funds. Those roles may be split legitimately, but an unexplained split is a hold, not a reason to guess.

China's market-entity registration rules list core registered matters such as legal name, entity type, business scope, address, registered capital, and legal representative. They also provide that a market entity has one registered name. Read the official registration regulation. Separately, the enterprise-information disclosure rules cover registration records, annual reports, licensing, penalties, equity changes, and related public information, with different sources and update duties. Review the disclosure regulation.

Save the query date and source alongside the result. Then resolve name, address, status, scope, age, representative, and material history conflicts. A registry record supports identity; it does not prove the person in the chat controls that company. Verify contact continuity through more than one channel and document why every affiliate belongs in the transaction.

Use the minimum company and beneficiary gate for a focused payment review. If the commercial role is uncertain, work through the factory-or-trading-company evidence test rather than inferring the answer from a business scope phrase.

Stage 2: qualify capability, site, and product evidence

Now ask whether the proposed operating chain can perform this order. The U.S. International Trade Administration advises companies entering China to evaluate partners carefully and consider regional, sector, regulatory, and IP context. Its China market-entry guidance is aimed at U.S. firms, but the practical warning is wider: suitability depends on the objective and context, not just on the existence of a company.

Build a capability hypothesis and test it. If the supplier says it machines the pump housing in-house, identify the approved site, relevant equipment, process steps, technical staff, metrology, capacity constraints, critical subcontractors, and comparable production evidence. Use live remote evidence or an appropriate independent audit when the exposure justifies it. A warehouse tour cannot prove machining capacity, and a machine on a factory floor does not prove the supplier controls it or uses it for your order.

Keep three conclusions separate:

1. Entity conclusion: the legal and commercial parties are identified.
2. Capability conclusion: the operating chain appears able to execute the defined process at the required scale.
3. Product conclusion: samples, tests, documents, and production controls support the product requirements.

For a deeper site and capability workflow, use the Chinese manufacturer verification guide. Review registered wording through the separate business-scope procedure; do not turn that field into a factory certificate.

Stage 3: make the sample test the real proposition

A sample order should reduce specific uncertainties. Decide whether it tests appearance, dimensions, materials, function, packaging, documentation, production lead time, communication, or all of them. Record which site and process produced it. A hand-finished development sample may be useful, but it is not evidence that the normal line will reproduce the same result.

Freeze the approved sample or its measurable specification. Give it an identifier, date, drawing revision, photographs, test results, deviations, and custody record. Reconcile the sample supplier, future contract seller, manufacturer, invoice issuer, and beneficiary before assuming that a successful sample validates the later payment chain.

Commercial assumptions belong in this stage too. Challenge a price that depends on an unexplained material substitution, an unusually short lead time, an impossible capacity claim, or an MOQ that changes after drawings are disclosed. The sample-order review provides the narrower checks for this decision.

Stage 4: convert evidence into an approvable contract

The contract should name the verified seller, identify operating affiliates, and bind the responsible party to controlled specifications. Confirm signing authority, manufacturer and subcontractor restrictions, inspection access, acceptance, remedies, delivery, tooling, IP, change control, document requirements, and the approved payment route with qualified counsel where needed.

Versioned annexes matter because supplier diligence can otherwise end at the company level while the actual order remains undefined. A good company can still deliver the wrong revision. Put drawings, bill of materials, tests, tolerances, packaging, labels, approved sample reference, site, and change procedure into a package that both sides can identify later.

The separate pre-contract evidence-chain guide covers party, authority, annex, and execution controls in detail. This lifecycle page only sets the release rule: no contract approval while a material identity, role, capability, specification, authority, or payment-path question remains ownerless.

Stages 5 and 6: release money and shipment against evidence

Approval to sign is not approval to pay every milestone. Finance should compare the current beneficiary and instructions with the approved record each time money is released. Procurement and quality should confirm that the contractual milestone actually occurred. Separate the employee who requests a bank change from the person who verifies and approves it.

For a deposit, require the evidence defined by the risk brief. That may include the executed contract, final annex set, verified beneficiary, approved sample, tooling terms, production plan, or insurance and compliance items. Use the focused deposit-release workflow for that gate.

During production, preserve approved changes, material or component evidence, in-process results, nonconformance decisions, and dated progress records. The ISO 9001 Auditing Practices Group notes that controls over external providers should reflect risk and may include defined approval criteria, current approved-provider information, requirement verification, and performance monitoring. Read the external-provider guidance. ISO certification itself is not a substitute for order evidence.

Before shipment, inspect against the controlled revision and use a written sampling and acceptance plan appropriate to the product. Resolve failed results before the balance release or waiver. The pre-shipment inspection guide explains how to define the inspection and read its limitations. A passed inspection is evidence about the sample and criteria examined on that date; it does not erase contractual obligations or prove every unit.

Stage 7: monitor the relationship, not just the order

Repeat orders create familiarity, and familiarity is where controls are often removed. Keep a short performance record for quality, delivery, responsiveness, corrective action, document accuracy, bank continuity, and unauthorized changes. Review the supplier at a defined interval and whenever an event changes the risk.

Event-based revalidation is more useful than an annual calendar alone. Reopen the relevant gates when there is a new legal name or owner, status change, address or factory move, unexplained affiliate, new subcontractor, changed beneficiary, key contact turnover, sharp price shift, repeated delay, quality drift, complaint, enforcement signal, certificate change, tooling dispute, destination-market change, or materially larger order.

Do not restart every check after every event. Trace the change to the evidence it affects. A new bank account reopens identity, contact, relationship, and finance approval. A new production site reopens capability, product, contract, and inspection controls. Use the repeat-order review to turn those triggers into a renewal decision.

Give every evidence item an owner and a life

A due-diligence folder becomes unreliable when nobody knows who accepted a document or when it should be refreshed. Keep an evidence register with the item, source, entity, query or issue date, order and product scope, owner, finding, limitation, expiry or review trigger, and storage location.

One person can hold several roles in a small business, but the decisions should still be named. For material payments and bank changes, retain independent review even in a lean team. The supplier approval file guide shows how to assemble the complete record after the stage decisions are defined.

Escalate uncertainty instead of averaging it away

A numerical supplier score can hide a decisive problem. Ten acceptable documents should not cancel an unexplained beneficiary or a failed safety test. Use explicit outcomes:

• Release: required evidence is current, consistent, reviewed by the owner, and sufficient for this next commitment.
• Release with conditions: the remaining issue is bounded, an owner and deadline exist, and the next commitment does not outrun the control.
• Hold: a material fact is missing, inconsistent, stale, outside internal authority, or dependent on unverified supplier statements.
• Exit or specialist escalation: evidence is falsified, a critical test fails, access is persistently blocked, risk exceeds policy, or qualified legal, compliance, technical, or investigative judgment is required.

Write the reason in plain language. "Hold deposit because the contract seller differs from the beneficiary and no verified relationship or independently confirmed instruction is on file" is actionable. "Supplier score 67" is not.

A worked example: the pump housing order

The sourcing brief classifies the order as custom because the buyer owns the drawing, the casting material is critical, and replacement would take twelve weeks. Stage 1 identifies a Shenzhen trading company as seller and a Dongguan manufacturer as the proposed site. The relationship is documented, so the structure is not rejected merely because two entities are involved.

At Stage 2, a live site review and production records support machining capability, but the casting process is subcontracted. The buyer adds the foundry to the approved process map and requires material evidence. Stage 3 produces an acceptable sample, yet the report records that it came from a pilot setup rather than normal production. Stage 4 incorporates the drawing revision, approved sites, material requirement, change approval, and inspection plan into the contract package.

The deposit is released only after the contract and beneficiary checks pass. During production, the supplier proposes another foundry because of a delay. The change reopens capability, material, contract, and schedule decisions. It does not automatically restart the legal-entity search. Procurement holds the change, quality reviews new evidence and a validation sample, and an authorized contract amendment records the result. Before shipment, inspection checks the approved revision and material file. The final decision record explains both the release and its limits.

That is what due diligence looks like in operation: not perfect knowledge, but controlled commitments, visible uncertainty, and evidence that stays connected to the purchase.

Close each gate with a decision record

For every material commitment, preserve a short record containing the supplier and operating entities, product and order scope, risk tier, evidence reviewed with dates, conflicts found, unresolved items, conditions, owner approvals, next review trigger, and the decision: release, conditional release, hold, or exit.

The record should allow a colleague who was not in the supplier chat to understand why the team proceeded. It should also reveal what the review did not cover. Start by identifying the Chinese company, then route each finding to the correct product, site, contract, payment, shipment, or compliance owner.

This guide describes a procurement control framework. It does not provide legal, regulatory, sanctions, forced-labour, export-control, customs, tax, product-compliance, or technical advice, and it does not certify any supplier or transaction.