How do life sciences companies build a resilient, compliant supply chain without carrying single-source risks into the next crisis?
We help pharma, biotech, MedTech and IVD companies map their supply chain, contractually secure GMP-critical suppliers, and build resilience through planned dual sourcing. The limiting factor is rarely the contract itself, but the sequence: anyone who only qualifies a second supplier once the first one fails has lost control of the regulatory variation.
- Pharma
- Biotech
- MedTech
- IVD
Overview
Which supply chain risks exist in life sciences?
Supply chain mapping down to tier 2 · Quality agreements per EU GMP Guide · GDP-compliant distribution
Last updated: 2026-06-13
Supply chains in life sciences are highly regulated: every supplier of GMP-critical materials is part of the quality system, and every change is a regulatory event. The weak points where supply and compliance most often break down:
- Single-source suppliers for GMP-critical materials create dependencies that geopolitical events and capacity shortages made visible during the pandemic years.
- Switching suppliers without full qualification and without the necessary regulatory variation is not a procurement risk but a compliance risk.
- A lack of transparency over tier 1 and tier 2 suppliers makes it harder to ensure the traceability that the MDR (EU 2017/745) and IVDR (EU 2017/746) require across the supply chain.
- Quality agreements per EU GMP Guide Chapter 7 are missing or fail to robustly govern change notification and audit rights. This is the most common finding for outsourced activities.
Services
How we support you
Supply chain transparency mapping
Complete mapping of the supply chain down to tier 2: critical materials, single-source points and regulatory dependencies. The result is a risk map that names every critical source and its alternatives.
Supplier governance & contract management
Quality agreements and technical agreements per EU GMP Guide Chapter 7 with defined audit rights and change-notification obligations. Standardized contractual requirements for all GMP-critical suppliers.
Learn more →Resilience strategy & dual sourcing
Dual-sourcing concepts for critical materials, with a qualification roadmap for the second supplier and business continuity plans for crisis scenarios. The result is a documented plan defining which second supplier is qualified and when.
GMP & GDP supply chain compliance
Ensuring compliance across the entire chain: GDP-compliant storage and distribution per EU GDP Guidelines 2013/C 343/01, traceability under MDR/IVDR and importer requirements. The deliverable is a gap analysis with an action plan.
Learn more →How we work together
What it comes down to
Supply chain governance is not decided at the level of the individual contract, but by the sequence in which transparency, criticality and resilience build on one another. First the supply chain must be mapped down to tier 2, because a single-source point often hides not at the direct supplier but at a shared intermediate used by two seemingly independent sources. Only on this map can you assess criticality and prioritize which suppliers need a robust quality agreement per EU GMP Guide Chapter 7 with clear audit rights and change-notification obligations. Anyone who reverses this sequence and starts with contracts cleanly governs suppliers whose risk they do not yet even know.
The real bottleneck is the qualification of the second supplier. It involves not only audits and sample testing, but also the regulatory variation through which the alternative supplier is added to the marketing authorization, and both require lead time. If dual sourcing is only triggered when the primary supplier fails, the replacement arrives too late and the supply gap is already there. This is why the qualification roadmap for critical materials belongs at the start of the resilience strategy, not in the crisis plan. In parallel, GDP-compliant distribution per 2013/C 343/01 ensures that cold-chain and transport conditions do not end at your own loading dock, where the greatest risks of a highly regulated supply chain would otherwise continue uncontrolled.
Our approach
Our approach
Step
Result
Supply chain mapping
Risk map of the supply chain down to tier 2 with single-source points and critical materials flagged.
Criticality & risk assessment
Prioritized list of suppliers by supply and compliance risk, from which the measures are derived.
Governance & contracts
Quality agreements and audit rights per EU GMP Guide Chapter 7 standardized for the critical suppliers.
Resilience & dual sourcing
Qualification roadmap for second suppliers and a business continuity plan for the most critical sources.
GDP & traceability assurance
GDP-compliant distribution conditions and end-to-end traceability across the supply chain demonstrated.
Common pitfalls
Where projects commonly fail
The second supplier is only sought once the first one fails.
By then there is no time left for qualification or for the regulatory variation, and the supply gap is already there before the replacement can deliver.
Single-source points are only seen at tier 1.
If two qualified suppliers source the same tier 2 intermediate, the dependency is merely shifted, not resolved. This only becomes visible when mapping down to tier 2.
The quality agreement does not govern change notification robustly.
If the supplier changes a process or material without timely notice, the deviation surfaces only at incoming goods inspection or during an audit, instead of being flagged in advance.
GDP is treated purely as a wholesale topic.
Manufacturers, too, must ensure GDP-compliant conditions for shipment per EU GDP Guidelines 2013/C 343/01; the cold chain does not end at your own loading dock.
Supply chain transparency is confused with a supplier list.
Without linking material, criticality and regulatory status, the list is not a governance tool but merely an address book.
FAQ
Frequently asked questions
Sources
- EU-GMP-Leitfaden (EudraLex Volume 4), primary text, in particular Chapter 7 (Outsourced Activities)
- Guidelines on Good Distribution Practice of medicinal products for human use (2013/C 343/01)
- Regulation (EU) 2017/745 (MDR) and Regulation (EU) 2017/746 (IVDR), traceability
- https://theentourage.de/expertise/supply-chain-governance/ (existing page content, revised)
Life Science Journal
Regulatory updates, straight to your inbox.
New requirements, authority decisions and practice notes. Once a month, unsubscribe any time.
Case Studies
What this looks like in practice
Regulations & standards considered
- EU GMP Guide (EudraLex Volume 4)
- EU GMP Guide Chapter 7 (Outsourced Activities / Quality Agreement)
- EU GDP Guidelines 2013/C 343/01 (Good Distribution Practice for medicinal products for human use)
- Directive 2001/83/EC (Community code relating to medicinal products for human use)
- EU 2017/745 (MDR), traceability across the supply chain
- EU 2017/746 (IVDR), traceability across the supply chain
Related topics
Supplier Development & Qualification →
Qualification and development of GMP-critical suppliers
Managing Supply Shortages →
Acute shortage scenarios and business continuity in supply
Good Distribution Practice →
GDP-compliant storage and distribution per 2013/C 343/01
Good Manufacturing Practice (GMP) →
GMP requirements for outsourced activities and suppliers
Have a concrete project?
Briefly outline your situation. We'll respond with an initial assessment, usually within one business day.
Prefer direct? +49 89 4161170-0
info@theentourage.de
- Reply usually within one working day
- 4 offices: DE · CH · IT · US
- 100% life sciences