A Sponsor's Methodology for Assessing the Supply Chain Risk of a Listing Applicant

The SFC’s thematic inspection of sponsor due diligence on supply chains, published in its December 2024 circular, found that in 7 out of 12 listing applications reviewed, sponsors had failed to identify red flags in supplier concentration, payment terms, or logistics dependencies that were material to the applicant’s revenue recognition. This finding is not an isolated regulatory exercise. It sits within a broader enforcement trajectory: the SFC’s 2023-24 annual report recorded 18 disciplinary actions against sponsors and intermediaries, with supply chain verification cited as a deficiency in 4 cases. For a sponsor holding SFC Type 6 (advising on corporate finance) and Type 6A (sponsorship) licences, the margin for error on supply chain diligence has narrowed to near zero. The following methodology is designed to meet the standard of “reasonable due diligence” as articulated in the SFC’s Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission (SFC Code, para. 17.1 – 17.6), and to withstand the scrutiny of both the Listing Division of HKEX and the SFC’s Enforcement Division.

The Regulatory Baseline: What the SFC and HKEX Require

The starting point for any sponsor’s supply chain assessment is not a commercial judgment but a regulatory obligation. Under HKEX Listing Rule 3A.02, a sponsor must exercise “reasonable care and skill” to ensure that the listing document contains all information that is material from an investor’s perspective. The SFC’s Code of Conduct para. 17.2(b) explicitly requires the sponsor to “take reasonable steps to satisfy itself that the listing document contains all information which is material from an investor’s perspective.” Supply chain risk—whether raw material sourcing, manufacturing concentration, or logistics bottlenecks—directly affects revenue forecasting, margin stability, and going-concern assumptions. A failure to probe these areas can render a prospectus misleading.

The SFC’s December 2024 circular on sponsor due diligence (SFC Circular, 12 December 2024, ref: CT/CS/2024-12) specified three areas of heightened scrutiny: (i) supplier concentration exceeding 30% of total procurement costs; (ii) reliance on a single logistics provider for more than 50% of outbound shipments; and (iii) payment terms that deviate from industry norms by more than 60 days. These thresholds are not safe harbours—they are red-flag triggers. A sponsor that does not independently verify the applicant’s disclosures against these benchmarks, using third-party data, is at risk of a finding of inadequate diligence.

Distinguishing Between “Verification” and “Inquiry”

A common deficiency in SFC enforcement cases is the conflation of management inquiry with independent verification. The SFC’s Enforcement Report 2023-24 (SFC, July 2024, p. 22) noted that in 3 of the 4 supply chain-related disciplinary actions, the sponsor had relied solely on management representations and unaudited internal reports. The SFC’s expectation, as stated in the same report, is that the sponsor must “obtain independent, objective evidence that corroborates management’s claims.” This means site visits, supplier confirmations, cross-referencing with customs data, and—where the applicant operates in a jurisdiction with limited public data—engagement of local legal counsel or forensic accountants.

The HKEX Listing Division’s Approach to Supply Chain Disclosure

The HKEX Listing Division, in its Guidance Letter GL57-13 (revised September 2024), explicitly addresses supply chain risks in the context of “material business risks” that must be disclosed in the prospectus risk factors section. The letter states that if an applicant derives more than 60% of its revenue from a single customer or more than 50% of its gross profit from a single product line that depends on a specific supply chain node, the sponsor must disclose the concentration and the associated risk. The Listing Division also expects the sponsor to comment, in the sponsor’s declaration, on whether the applicant has any supply chain arrangements that could be terminated without cause on less than 90 days’ notice, as this affects going-concern assessment.

Step 1: Mapping the Supply Chain with Verifiable Data Points

The first operational step is to construct a supply chain map that goes beyond the applicant’s internal records. A sponsor should require the applicant to provide a list of all suppliers accounting for more than 5% of total procurement costs, with the following data for each: (i) legal name and jurisdiction of incorporation; (ii) ultimate beneficial owner (UBO) information; (iii) years of relationship with the applicant; (iv) payment terms (in days); (v) any exclusivity arrangements; and (vi) any history of default or late delivery. This list must be cross-referenced against the applicant’s audited financial statements for the track record period (typically 3 financial years under HKEX Listing Rule 4.04).

The sponsor must then independently verify the existence and operational capacity of each top-5 supplier. The SFC Circular of December 2024 recommends that sponsors conduct physical site visits for suppliers representing at least 60% of total procurement costs. For suppliers located in jurisdictions where the sponsor’s team cannot travel (e.g., due to visa restrictions or security concerns), the sponsor should engage a local agent—such as a licensed corporate services provider or a forensic accounting firm—to conduct the visit and report back. The cost of this engagement is part of the sponsor’s due diligence budget and cannot be passed to the applicant without disclosure in the sponsor’s fee arrangement.

Verifying Supplier Payments and Trade Finance

A common red flag is a mismatch between the applicant’s stated payment terms and the actual cash flow pattern. The sponsor should request the applicant’s bank statements for the track record period and cross-reference the dates and amounts of payments to each top-5 supplier against the purchase orders and invoices. If the average payment period exceeds the stated terms by more than 30 days, the sponsor must investigate whether the applicant is using trade finance or factoring to bridge the gap. The HKMA’s Supervisory Policy Manual SA-1 (revised January 2024) requires authorised institutions to report any unusual trade finance patterns that could indicate supply chain fraud. The sponsor should request, with the applicant’s consent, a letter from the applicant’s principal lending bank confirming the nature and volume of trade finance facilities used for supplier payments.

Assessing Logistics and Inventory Risk

For applicants in manufacturing, retail, or F&B, logistics dependencies are a material supply chain risk. The sponsor should require the applicant to disclose its top-3 logistics providers by volume of shipments, and the terms of the service agreements. If any logistics provider accounts for more than 40% of outbound shipments, the sponsor must assess the risk of a single point of failure. The HKEX Listing Decision LD148-2024 (September 2024) involved an applicant whose sole logistics provider was a related party; the Listing Division required the sponsor to obtain an independent valuation of the logistics services and to confirm that the pricing was at arm’s length. The sponsor must also assess the applicant’s inventory turnover ratio against industry benchmarks. If the ratio deviates by more than 30% from the industry average (as reported by Euromonitor or similar data providers), the sponsor must investigate whether there is inventory obsolescence or overstocking that could impair asset values.

Step 2: Legal and Contractual Risk Assessment

Supply chain risk is not solely operational; it is also contractual. The sponsor must review all material supply agreements (those representing more than 10% of total procurement costs) for the following provisions: (i) termination rights (with or without cause, notice period); (ii) price adjustment mechanisms (e.g., index-linked, fixed for a period, or subject to renegotiation); (iii) force majeure clauses with specific reference to geopolitical risks, trade sanctions, or pandemic-related disruptions; and (iv) dispute resolution clauses (arbitration seat and governing law). The SFC’s Code of Conduct para. 17.3 requires the sponsor to assess whether the applicant has “adequate contractual protections” against supply chain disruption.

Jurisdictional Risk and Sanctions Compliance

If any top-5 supplier is incorporated in a jurisdiction subject to trade sanctions imposed by the United Nations, the European Union, or the United States Office of Foreign Assets Control (OFAC), the sponsor must assess whether the applicant’s business could be disrupted by sanctions enforcement. The HKMA’s Circular on Sanctions Compliance (HKMA, 15 March 2023) reminds authorised institutions that they must not facilitate transactions that breach sanctions. The sponsor should instruct the applicant to provide a sanctions screening report for all top-10 suppliers, using a recognised screening tool (e.g., Dow Jones Risk & Compliance or World-Check). If any supplier appears on a sanctions list, the sponsor must disclose this in the prospectus risk factors and, where material, consider whether the applicant’s business model is sustainable.

Related Party Supply Arrangements

A significant proportion of supply chain failures in SFC enforcement cases involve related party transactions. The SFC’s Enforcement Report 2023-24 (p. 28) cited a case where the applicant’s sole raw material supplier was a company owned by the applicant’s CEO’s brother-in-law, and the sponsor failed to identify the relationship. The sponsor must review the applicant’s register of directors’ interests and the list of connected persons (as defined under HKEX Listing Rule 14A.07) and cross-reference it against the UBO data of all top-10 suppliers. If any supplier is a connected person, the sponsor must ensure that the transaction is conducted on normal commercial terms, supported by an independent valuation, and disclosed in the prospectus under the “Connected Transactions” section. The HKEX Listing Rules Chapter 14A require that such transactions be approved by the independent shareholders if the consideration exceeds the de minimis thresholds (0.1% of the applicant’s market capitalisation for small transactions, 5% for larger ones).

Step 3: Stress Testing the Supply Chain Under Adverse Scenarios

The sponsor must go beyond static analysis and conduct scenario-based stress testing. The SFC’s December 2024 circular explicitly recommends that sponsors model the impact of a 90-day disruption to the supply of raw materials from the applicant’s top-3 suppliers. The sponsor should require the applicant to provide: (i) a list of alternative suppliers for each critical raw material; (ii) the lead time required to qualify a new supplier (including any regulatory approvals, such as for pharmaceutical or food ingredients); and (iii) the cost differential between the current supplier and the next-best alternative. If the applicant cannot identify at least one alternative supplier for each critical input, the sponsor must disclose this as a material risk.

Financial Impact Modelling

The sponsor should model the effect of a 20% increase in raw material costs (a standard stress test used by the HKMA for trade finance risk assessment) on the applicant’s gross profit margin and net profit. If the margin compression exceeds 500 basis points, the sponsor must consider whether the applicant has any price pass-through mechanism in its customer contracts. The HKEX Listing Decision LD145-2024 (July 2024) involved an applicant whose customer contracts had no price adjustment clauses; the Listing Division required the sponsor to disclose the risk of margin erosion in the prospectus. The sponsor should also model the impact of a 30% reduction in supplier payment terms (i.e., requiring payment in 30 days instead of 60 days) on the applicant’s working capital position. If the applicant’s cash conversion cycle extends beyond 120 days under this scenario, the sponsor must assess whether the applicant has sufficient committed credit facilities to cover the gap.

Geopolitical and Regulatory Scenario Testing

For applicants with suppliers in jurisdictions subject to ongoing geopolitical tensions (e.g., the PRC, Taiwan, Russia, or Myanmar), the sponsor should model a scenario where trade restrictions are imposed on imports from that jurisdiction. The HKMA’s Risk Management Circular on Geopolitical Risk (HKMA, 8 November 2023) requires authorised institutions to assess the impact of geopolitical events on their credit portfolios. The sponsor should apply the same logic: if the applicant’s top-3 suppliers are all located in a single jurisdiction that is subject to ongoing trade disputes, the sponsor must disclose the concentration risk and assess the feasibility of relocating production or sourcing from alternative jurisdictions within 12 months. If the applicant’s operations are in a sector covered by the PRC’s Foreign Investment Law or the National Security Review (effective January 2020), the sponsor must also assess whether any supply chain arrangement could be subject to regulatory scrutiny that could disrupt operations.

Actionable Takeaways

1. The sponsor must obtain independent, third-party verification of the existence and operational capacity of the applicant’s top-5 suppliers, including physical site visits or local agent reports, to meet the SFC’s standard of reasonable due diligence under the Code of Conduct para. 17.2(b).
2. Cross-reference the applicant’s payment terms against actual bank statement data for the track record period; a deviation of more than 30 days from stated terms requires investigation into potential trade finance reliance or undisclosed supplier financing.
3. Review all material supply agreements for termination rights, price adjustment mechanisms, and force majeure clauses; any agreement that can be terminated without cause on less than 90 days’ notice must be disclosed as a material risk in the prospectus.
4. Conduct scenario-based stress testing for a 90-day supply disruption to the top-3 suppliers and a 20% raw material cost increase; if margin compression exceeds 500 basis points or the cash conversion cycle extends beyond 120 days, the sponsor must assess the applicant’s resilience and disclose the findings.
5. For applicants with suppliers in jurisdictions subject to trade sanctions or geopolitical tensions, the sponsor must obtain a sanctions screening report for all top-10 suppliers and model the impact of trade restrictions on the applicant’s ability to continue operations, with disclosure of the concentration risk in the risk factors section.