Compliance teams usually know their direct suppliers well, but that covers only the first layer of the supply chain. Regulations increasingly require data from the tiers beyond them, where teams often have no direct relationship or visibility:
That blind spot is common. In McKinsey’s 2025 supply chain risk survey, 95% of respondents reported visibility into tier 1 suppliers, but only 42% had visibility into tier 2 or beyond. Gaps at those tiers can lead to penalties or lost market access.
In compliance, supply chain visibility means knowing where your materials come from and what they contain, with data that holds up when regulators and customers look closely. Without that insight, you’re exposed to risks you can’t see.
A tier 1 supplier may pass every audit while still sourcing from a high-risk smelter or using a restricted substance. The audit covers that supplier’s own operations, so the problem stays out of your records until someone else finds it.
Reaching the deeper tiers of your supply chain often depends on whether direct suppliers can and will pass your request along. Under most regulations, the burden of proof falls on your company, not your suppliers. Sub-tier visibility allows you to identify risk while you still have time to fix it, not after a shipment is stopped at the border.
Full end-to-end visibility is rare, and few programs need it for every part. The goal is to find risk where it’s most likely to sit. Because tier 1 suppliers are your only route to deeper tiers, each request also has to be easy for them to forward. These practices improve supplier engagement and help you catch gaps before they disrupt your business:
Check past declarations, certificates, and audit results before sending a new request. A full material declaration (FMD) is a reusable compliance asset that lists each substance in a part down to the material level. When a new substance is restricted, the answer may be in the FMDs on file, so you don’t have to ask suppliers again. That same detail also helps show where risk sits deeper in the chain.
Prioritize the materials, sourcing regions, and product lines with the greatest regulatory exposure. Ranking your suppliers by those factors shows where to start. A targeted request to the right suppliers gets further than a broad one sent to everyone.
The Responsible Minerals Initiative’s Conflict Minerals Reporting Template (CMRT) is built to move up the supply chain, with each supplier combining responses from its own suppliers into one. FMDs based on standards such as IPC-1752A do the same for substance data.
Tell tier 1 suppliers which parts are in scope and which fields a response must include. For a CMRT, “complete” might mean every smelter is named with its smelter ID instead of listed as unknown. If they’re reluctant to share their own sources, ask for smelter or origin data rather than supplier names.
A response rate shows who replied, not whether the reply is usable. Track how much of each response is complete and validated, then follow up on the gaps. Whatever stays unanswered is where risk goes unnoticed. For more on measuring supplier response rates, read our blog 5 Steps to Stronger Supplier Engagement.
Most companies have no contract or relationship with their tier 2 suppliers, so sub-tier data reaches them only through the companies they purchase from. How engaged those suppliers are sets the ceiling for what you can see further upstream.
Tier 1 suppliers usually stall when asked about their own suppliers, for one of four reasons:
These problems rarely show up in response rates. A tier 1 supplier can return a declaration that covers only its own operations or fill sub-tier fields with estimates its suppliers never confirmed, and it still counts as a response. Your reporting looks healthy while risk in those tiers goes unchecked. For a closer look at what response rates miss, read our blog Beyond Supplier Response Rates: How to Build Reliable Compliance Data.
Compliance traceability means tracing a product’s materials back through each supplier to the source, with documentation to prove every step. Visibility shows you where the risk sits. Traceability is the proof regulators expect, and it breaks if the records are missing at any tier. Here is how that plays out across four regulations:
U.S. Dodd-Frank Act: Companies that use tin, tantalum, tungsten, or gold (3TG) in their products file Form SD with the SEC each year by May 31. To show where those minerals came from, they identify the smelters and refiners that processed them, using data collected through the CMRT.
In each case, the data that satisfies the requirement comes from suppliers several tiers back, and a gap there becomes yours to explain.
Regulations require sub-tier data, but they’re just part of the picture, and penalties aren’t the only cost of going without it. Customer demands and new product-level rules raise the stakes too.
Supply chain visibility in compliance means knowing who supplies your products, where their materials come from, and what those materials contain, across every tier of the supply chain. It also means having verified data to prove it when a regulator or customer asks.
Many definitions treat visibility as logistics: tracking shipments, inventory, and lead times. That matters for operations, but it doesn’t answer compliance questions. A regulator isn’t asking where a container is. It’s asking what’s in the product and where it came from.
Knowing a supplier’s name isn’t the same as having its data. A supplier list shows who you buy from, while visibility requires declarations, smelter lists, or origin records you can verify. For example, a smelter named in a CMRT can be checked against the Responsible Minerals Initiative’s list of conformant smelters and refiners.
A tier 1 supplier is a company you buy from directly. You hold the contract and issue the purchase orders, so you can ask for compliance data yourself.
Tier 2 suppliers are your suppliers’ suppliers. Tier 3 and beyond are the raw material processors, smelters, mines, and farms further upstream. Together, they make up your upstream supply chain: every supplier and source that contributes materials or components to your products before they reach you.
In the electronics industry, for example, tier 1 might be the contract manufacturer that assembles your circuit boards, tier 2 the company that makes the capacitors on those boards, and tier 3 the smelter that processes the tantalum inside them. Past the contract manufacturer, most of your supply chain, and much of its risk, stays out of sight.
Blind spots beyond tier 1 don’t stay hidden. They show up as detained shipments, failed customer audits, or gaps in a regulatory filing. Increasing outreach won’t close them: your direct suppliers are your only route to sub-tier data, and every repeat request makes them less likely to pass yours along. Deeper visibility starts with healthy tier 1 engagement, built on fewer, clearer asks.
Our guide, Transform Supplier Fatigue into Better Supplier Engagement, shows how to get there. You’ll learn to spot early warning signs, such as portal drop-offs and recycled data, and see how disengaged suppliers put market access at risk.
Inside is a four-part framework for rebuilding supplier trust: shrink the ask, simplify the experience, share the why, and show suppliers their data drives real outcomes. It also explains why transaction-level traceability is becoming the new baseline. The guide is written for compliance, sustainability, procurement, and supplier management teams that depend on sub-tier data to meet regulatory requirements.