Accessibility

Indirect Supplier Risks: Managing 'Substantiated Knowledge' in Germany

GI
German Compliance Institute
March 24, 2026
  • 10 mins read
Indirect Supplier Risks: Managing 'Substantiated Knowledge' in Germany
In this article

Introduction

In recent years, businesses in Germany have had to adapt to the German Supply Chain Due Diligence Act (LkSG), which came into effect in 2023. This law imposes significant obligations on companies to ensure human rights and environmental standards throughout their supply chains. While the focus of these regulations is often placed on direct suppliers, indirect suppliers—also referred to as Tier 2 suppliers—present unique challenges and risks that need to be addressed for effective compliance.

The idea of gaining substantiated knowledge about these suppliers, particularly in complex, multi-tiered supply chains, may seem daunting. However, with the right strategies, technologies, and collaborative efforts, businesses can manage indirect supplier risks effectively. This blog will explore the significance of indirect supplier risks, the role of substantiated knowledge, and the tools and strategies businesses can implement to manage and mitigate these risks in compliance with the LkSG.

What is LkSG and Why It Matters for Indirect Suppliers?

The German Supply Chain Due Diligence Act (LkSG) was introduced to address growing concerns about the human rights and environmental practices within global supply chains. For the first time, businesses in Germany were legally required to ensure that their supply chains were free from human rights violations, child labor, forced labor, and significant environmental harm.

The scope of LkSG is not limited to direct suppliers. It also covers indirect suppliers or Tier 2 suppliers, which are businesses or entities that provide products or services to direct suppliers. This extension of responsibility reflects a broader recognition of how companies’ practices affect global supply chains, including those outside of their direct relationships.

Key LkSG Requirements

  • Due diligence obligations: Companies must monitor and assess the human rights and environmental risks in their supply chains.
  • Transparency: Businesses must disclose information about their supply chain practices, including any risks associated with suppliers.
  • Risk mitigation: Companies must take action to address identified risks, including ceasing relationships with suppliers that engage in harmful practices.
  • Internal monitoring: Implement systems to assess the effectiveness of risk management measures within their supply chain.

As companies strive to comply with the LkSG, they often find it challenging to track and assess the practices of their indirect suppliers. Understanding the risks and the legal requirements surrounding indirect suppliers is crucial for ensuring full compliance and minimizing potential legal or reputational damage.

What is LkSG and Why It Matters for Indirect Suppliers?

Why Should Businesses Focus on Indirect Suppliers?

It is often assumed that businesses only need to monitor and manage risks within their Tier 1 suppliers, the companies with whom they have direct contractual relationships. However, Tier 2 suppliers, which may be located far down the supply chain, also play an essential role in meeting LkSG compliance. These suppliers can significantly impact the ethical and legal standing of a company, and overlooking them can lead to severe consequences, including:

  1. Reputational Damage: If a company’s Tier 2 suppliers engage in unethical labor practices or violate environmental laws, the primary company could suffer damage to its reputation—even if it is not directly involved in the malpractice.
  2. Legal Penalties: Under the LkSG, companies that fail to monitor or control their indirect suppliers could face hefty fines or legal action. Ignoring risks associated with these suppliers may lead to breaches of compliance.
  3. Operational Disruptions: Tier 2 suppliers often face challenges such as financial instability, labor disputes, or natural disasters. These risks can lead to supply chain disruptions, affecting production timelines and profitability.

While businesses may not have direct contracts with their indirect suppliers, monitoring and mitigating risks among these suppliers is essential to avoid potential legal, operational, and reputational fallout.

The Concept of 'Substantiated Knowledge' in Due Diligence

One of the most critical requirements of the LkSG is the concept of "substantiated knowledge". The law mandates that companies not only assess the risks of direct suppliers but also take reasonable steps to monitor and assess indirect suppliers' practices. This knowledge must be substantiated, meaning it must be accurate, verified, and actionable.

What is Substantiated Knowledge?

In the context of supply chain due diligence, substantiated knowledge refers to having reliable, verifiable information about a supplier’s operations and their impact on human rights and the environment. The knowledge gathered should be credible, transparent, and based on solid evidence rather than assumptions or vague claims.

For indirect suppliers, this means businesses must go beyond surface-level assessments and dig deeper into the practices and operations of their suppliers, often relying on third-party audits, supplier questionnaires, sustainability reports, and on-the-ground inspections.

How to Gather Substantiated Knowledge

The process of gathering substantiated knowledge requires a multi-faceted approach, utilizing both traditional methods and technological solutions:

  1. Supplier Audits: Regular on-site audits and remote audits through digital platforms can help businesses assess the practices of Tier 2 suppliers. These audits examine labor practices, environmental impact, and general compliance with local and international regulations.
  2. Supplier Questionnaires: Sending detailed surveys to Tier 2 suppliers asking specific questions about their labor practices, environmental footprint, and compliance with local laws can provide valuable insight into their operations. These questionnaires should cover the suppliers' practices, policies, and actions regarding human rights, environmental impact, and sustainability efforts.
  3. Data and Reporting: Transparency reports, annual sustainability reports, and third-party certifications (such as ISO 14001 for environmental management or SA8000 for social accountability) offer essential data on a supplier's compliance with international standards.
  4. Technology Platforms: In the age of digital transformation, companies are turning to supply chain transparency platforms that use blockchain, AI, and data analytics to track the flow of goods and services throughout the supply chain. These platforms help businesses verify information about indirect suppliers in real time.
  5. Industry Collaborations: Engaging with industry groups and initiatives such as the Responsible Business Alliance (RBA) or the Ethical Trading Initiative (ETI) can offer companies access to shared knowledge and best practices for managing Tier 2 supplier risks.
The Concept of 'Substantiated Knowledge' in Due Diligence

Managing Tier 2 Supplier Risks

Indirect suppliers can introduce a wide range of risks into the supply chain. These risks can span from labor violations to environmental harm and even legal compliance issues. Effectively managing these risks requires a comprehensive strategy that involves proactive monitoring, engagement, and transparency.

Key Risks in Tier 2 Suppliers

  1. Labor Risks: The possibility of child labor, forced labor, or unsafe working conditions is significant when it comes to Tier 2 suppliers. Especially in low-cost countries where labor laws may be less stringent, businesses must be vigilant in ensuring their indirect suppliers uphold ethical labor standards.

  2. Environmental Risks: Tier 2 suppliers may engage in practices that violate environmental regulations, such as improper waste disposal, illegal logging, or unsustainable resource extraction. These environmental violations can severely damage a company’s reputation and lead to fines or operational disruptions.

  3. Supply Chain Disruptions: Political instability, strikes, or natural disasters can cause disruptions in the operations of indirect suppliers, leading to delays, shortages, or quality issues in the final product.

  4. Reputational and Legal Risk: Non-compliance with human rights or environmental laws can result in public scandals or legal challenges, potentially leading to a loss of business, legal penalties, or both. Companies are increasingly expected to show transparency and actively work to mitigate these risks within their supply chains.

How to Mitigate Tier 2 Supplier Risks

Effective management of Tier 2 supplier risks involves adopting a comprehensive approach that combines due diligence, engagement, and continuous monitoring.

1. Regular Audits and Risk Assessments

Conduct regular audits and risk assessments for your Tier 2 suppliers to evaluate their compliance with the LkSG and other relevant laws. These assessments should focus on key risk areas, including labor practices, environmental standards, and financial stability.

2. Digital Transparency Tools

Leveraging digital tools such as blockchain-based platforms, AI-powered analytics, and cloud-based monitoring systems can provide real-time insights into your indirect suppliers’ operations. These platforms can help businesses trace the origins of materials, monitor sustainability efforts, and assess risk factors.

3. Supplier Training and Education

Offer training programs to Tier 2 suppliers on the importance of LkSG compliance, ethical practices, and sustainable sourcing. Educating suppliers not only helps them meet the required standards but also fosters a sense of responsibility and partnership between businesses.

4. Supplier Engagement and Collaboration

Building strong relationships with Tier 2 suppliers is crucial for ensuring compliance. Open communication and collaboration enable businesses to address issues before they escalate, provide support, and promote continuous improvement in supplier practices.

The Future of Supply Chain Compliance in Germany

As global supply chains become more complex, regulatory frameworks like LkSG will continue to evolve. The demand for corporate social responsibility (CSR) and environmental sustainability will only grow stronger, with future regulations likely extending even further down the supply chain. Businesses that stay proactive in managing indirect supplier risks and improving their supply chain transparency will be better positioned to comply with evolving legal requirements.

Embracing Sustainability

Companies must recognize that managing indirect supplier risks is not just about compliance—it’s also about contributing to a more sustainable, ethical global economy. By implementing practices that prioritize sustainability and human rights, businesses can not only ensure legal compliance but also improve their brand reputation and consumer loyalty.

Managing the risks posed by Tier 2 suppliers is essential for ensuring compliance with the German Supply Chain Due Diligence Act (LkSG) and protecting a company’s reputation. By gathering substantiated knowledge, leveraging technological tools, and building strong supplier relationships, businesses can effectively mitigate these risks.

For professionals looking to enhance their understanding of LkSG compliance and develop effective strategies for managing indirect supplier risks, our Supply Chain Due Diligence Compliance (LkSG) course offers comprehensive training. The course covers everything from risk identification to supplier management, helping businesses stay ahead of evolving regulations and safeguard their supply chains.

This blog provides a comprehensive understanding of the challenges and opportunities associated with indirect supplier risks under the German Supply Chain Due Diligence Act (LkSG). If you have any further questions or need additional information, feel free to contact 

Conclusion

Managing the risks posed by Tier 2 suppliers is essential for ensuring compliance with the German Supply Chain Due Diligence Act (LkSG) and protecting a company’s reputation. By gathering substantiated knowledge, leveraging technological tools, and building strong supplier relationships, businesses can effectively mitigate these risks.

For professionals looking to enhance their understanding of LkSG compliance and develop effective strategies for managing indirect supplier risks, our Supply Chain Due Diligence Compliance (LkSG) course offers comprehensive training. The course covers everything from risk identification to supplier management, helping businesses stay ahead of evolving regulations and safeguard their supply chains.

This blog provides a comprehensive understanding of the challenges and opportunities associated with indirect supplier risks under the German Supply Chain Due Diligence Act (LkSG). If you have any further questions or need additional information, feel free to contact

Tags:

Frequently Asked Questions

01 What is 'substantiated knowledge' in the context of indirect supplier risks in Germany? +

Substantiated knowledge' refers to the verified and credible information that a company has about its indirect suppliers, such as risks related to labor conditions, environmental impact, or compliance with legal standards. This knowledge helps businesses manage potential risks in their supply chains.

02 Why is managing indirect supplier risks important in Germany? +

Managing indirect supplier risks is essential for compliance with German and EU laws, such as the Supply Chain Due Diligence Act. Companies must ensure that their suppliers adhere to environmental, human rights, and labor laws to avoid reputational damage, legal penalties, or financial risks.

03 What are the key risks associated with indirect suppliers in Germany? +

Key risks include non-compliance with labor laws, unethical practices, environmental damage, and inadequate working conditions in the supply chain. These risks can impact the company’s reputation and legal standing if not properly managed.

04 How can companies gain substantiated knowledge about their indirect suppliers in Germany? +

Companies can gather substantiated knowledge by conducting audits, engaging in direct communication with suppliers, requiring transparency in reporting, and using third-party certifications or risk management tools. They can also utilize risk assessment platforms to monitor supplier practices.

05 What steps can businesses take to manage indirect supplier risks effectively in Germany? +

 Businesses can manage these risks by implementing clear due diligence processes, such as supplier evaluations, audits, and continuous monitoring. Establishing strong contractual agreements with suppliers and educating them on compliance expectations is also crucial for risk mitigation.

Schaffen Sie heute eine starke Compliance-Basis

Strukturierte Online-Compliance-Schulungen im Einklang mit deutschen Regulierungsstandards.