A supply chain due diligence checklist for 2026 needs to cover a lot more than whether a factory can physically make your product. Legal standing, financial stability, forced-labour and ESG exposure, cybersecurity, business continuity, and how concentrated your risk is across too few suppliers all sit outside a standard factory audit — and any one of them can cause a genuine problem even when the factory itself is perfectly capable.
Last updated: 27 August 2026.
What Should a Supply Chain Due Diligence Checklist Cover in 2026?
Six areas, each catching a different category of risk that factory capability alone won’t reveal.
| Area | What You’re Actually Checking |
|---|---|
| Legal & sanctions screening | The supplier’s legal entity and key officers aren’t on relevant sanctions lists (OFAC, EU, UN), checked at onboarding and re-screened periodically as lists change. |
| Financial health | Credit standing, recent funding or ownership changes, and signs of cash-flow strain that could affect their ability to fulfil orders reliably. |
| Forced labour & ESG compliance | Labour practices and material origin, particularly relevant given expanding forced-labour import restrictions in the US, UK, and EU. |
| Cybersecurity | Basic data-handling and security practices where the supplier touches your designs, specifications, or customer information. |
| Business continuity & insurance | Whether the supplier has a contingency plan and appropriate insurance coverage for disruption, not just a production line. |
| Concentration risk | How much of your total supply depends on this one supplier or region — the risk that compounds quietly across an otherwise well-vetted supply base. |
This broader framing follows the same logic as the OECD’s guidance on due diligence for responsible business conduct: due diligence is a continuous, risk-based process across the whole supply chain, not a one-off check on a single supplier at onboarding.
How Is This Different From Vetting a Single Manufacturer?
Scope. Our manufacturer vetting checklist focuses on a specific factory before your first order — licensing, on-site audit, quality systems, references. A supply chain due diligence checklist operates at a wider level: it looks across your whole supplier base for legal, financial, and compliance exposure, and includes things a single-factory audit was never designed to catch, like concentration risk across multiple suppliers or a sanctions issue that surfaces only after onboarding. Used together with our list of signs of an unreliable supplier, the two give you both depth on any one supplier and visibility across the full picture.
How Often Should This Checklist Be Refreshed?
More often than most businesses assume. Sanctions lists update as frequently as weekly in some jurisdictions, so screening needs to be an ongoing process, not a one-time check. A full review across all six areas — financial health, ESG standing, business continuity, concentration risk — is worth doing at least twice a year for suppliers that matter most to your production, and immediately after any major geopolitical or regulatory shift.
Where Does Novex Fit In?
This checklist closes out the same thinking behind our recent posts on how to reduce supply chain risk and build a genuine backup supplier strategy — due diligence isn’t a single event, it’s an ongoing part of managing supply risk. Our Supply Focused Methodology runs this alongside individual supplier vetting for every engagement, under the same transparent, fee-based model.
Frequently Asked Questions
What’s included in a supply chain due diligence checklist?
Six core areas: legal and sanctions screening, financial health, forced labour and ESG compliance, cybersecurity, business continuity and insurance, and concentration risk across your supplier base.
How is supply chain due diligence different from a factory audit?
A factory audit checks whether one specific supplier can make your product to the right standard. Supply chain due diligence looks more broadly — legal, financial, and compliance exposure across your whole supplier base, including risks a single-factory audit wouldn’t catch.
How often should sanctions screening be repeated?
Continuously, in practice. Some sanctions lists update as often as weekly, so a one-time check at onboarding isn’t sufficient — ongoing monitoring is necessary to catch changes after a supplier relationship has already started.
Why does concentration risk matter if every individual supplier passes due diligence?
Because risk can compound across suppliers, not just within one. If several well-vetted suppliers all sit in the same region or depend on the same raw material source, a single disruption can still affect your entire supply base at once.
Can a small or mid-size business realistically run this checklist in-house?
Parts of it, yes — but ongoing sanctions monitoring, ESG verification, and financial health checks across a full supplier base are time-intensive to maintain properly, which is why many mid-size manufacturers bring in a partner to run this alongside day-to-day sourcing.
Talk to Us About Your Supply Chain Due Diligence
If you want a clear-eyed view of where your supply chain due diligence currently has gaps, get in touch and we’ll help you work through the checklist against your actual supplier base.
