China Supplier Due Diligence: How to Verify a Supplier Before Sharing Product Information

Supplier due diligence and an NNN agreement answer different questions. Due diligence asks, “Who are we dealing with, and how does that company connect to the people, money, files, and factory in this project?” An NNN asks what the identified parties may disclose, use, or do with the buyer’s non-public information. The second control depends on getting the first identification reasonably right.

A document can contain careful restrictions and still leave a practical gap if it names only a sales company while an undisclosed factory receives the drawings. The same issue arises when a trading company signs, an affiliate collects the deposit, and a third entity performs engineering. The concern is not that multi-entity structures are automatically improper. It is that the agreement and disclosure chain should reflect the structure that actually exists.

1. 1. Begin with low-information screening. Discuss general product category, processes, approximate volume, certifications, and capacity without releasing the complete technical package.
2. 2. Verify the real entity. Obtain the Chinese legal name and registration details for the party presenting itself as the supplier.
3. 3. Map receipt and production. Ask which entity will receive files, perform engineering, make samples, manufacture, and use any subcontractors.
4. 4. Sign the project-appropriate NNN. Name the relevant verified parties and connect the permitted purpose and information flow to the actual engagement.
5. 5. Release core information in controlled stages. Share only what the confirmed recipient needs for the current quotation, engineering, or sampling decision.
6. 6. Upgrade controls as the work changes. Sampling, paid development, tooling, and production introduce ownership, quality, delivery, and asset questions that an NNN does not fully govern.

The sequence is not rigid paperwork for its own sake. Basic verification and NNN drafting can proceed in parallel, and the depth of review should remain proportionate. What matters is avoiding a substantive disclosure to an entity that has not been identified or included in the control structure merely because a draft agreement is circulating.

This guide focuses on entity and transaction verification rather than NNN clauses. Once the parties and information path are understood, Read the China NNN Agreement Guide before detailed disclosure for agreement timing, scope, and the transition to manufacturing control.

Start with the entity’s formal Chinese company name and Unified Social Credit Code. Those identifiers provide a practical basis for comparing the supplier’s documents with public registration information. Also record the registered address, legal representative or other registered responsible person, company type, and current registration status. These fields help distinguish entities with similar English names and show which company the record actually describes.

Then move beyond the registry record. Identify the company currently communicating with the buyer, the proposed contract party, the entity that will receive product information, and the entity expected to manufacture. They may be the same company, but that should be established rather than assumed. If they differ, document the role and relationship of each party before deciding which entities need to sign or acknowledge relevant obligations.

An English company name cannot by itself identify a Chinese legal person. The same is true of an Alibaba or marketplace store name, website brand, email signature, catalogue logo, salesperson’s name, or group label. These are useful commercial clues, but translations and trading names are not necessarily unique, registered, or consistent across documents.

No item in this list is final proof on its own. A license image can be old, a public record can lag or omit context, and a matching bank account does not prove manufacturing capability. Conversely, a difference between entities may be explainable through an export, group, or agency arrangement. The cross-check is designed to expose differences early enough for the buyer to ask what they mean.

Preserve the source, access date, copies supplied by the supplier, and written explanations. Due diligence is more useful when another team member can reconstruct why the project proceeded and which conditions were outstanding at that date.

A Chinese business license is a structured identity document, not a supplier rating. Read the fields as a connected record and cross-check the current information through the official publicity system. Focus first on the registered Chinese name and Unified Social Credit Code rather than the visual appearance of the red seal, layout, or an English translation added by the supplier.

Unified Social Credit Code

Helps identify the registered entity across records. It does not prove that the presenter controls the company or that every supplied document is current.

Official Chinese name

Identifies the legal entity for comparison with contracts and accounts. It does not establish that similarly branded affiliates are the same party.

Legal representative

Shows the person recorded in that role. It does not mean every document signed by that person, or by someone else, is automatically authorized for every purpose.

Company type

Provides context about the registered organizational form. It does not alone reveal the operating relationship among a parent, affiliate, trading company, and factory.

Registered address

Provides the official registered location. It may be an office and should not be assumed to be the actual manufacturing site.

Date of establishment and business term

Show registration timing and the stated operating period. Age alone does not establish reliability, capacity, or suitability.

Business scope

Describes registered activities and can help frame follow-up questions. It is not a technical capability certificate or proof that specific equipment, staff, or export experience exists.

Registration status and authority

Indicate the publicly recorded status and responsible registration authority. Status wording and its implications should be checked in context rather than translated into an automatic pass or fail.

The license cannot prove actual production capacity, quality systems, current staffing, ownership of equipment, control of a factory, or ability to manufacture the proposed product. A broad manufacturing scope cannot answer those questions. A registered address may differ from the production location for legitimate reasons, but the difference should be explained and supported.

Treat a license image as a starting document. Images can be outdated, cropped, altered, or detached from the company now negotiating with the buyer. Search the Chinese name and credit code in the official system, compare current details, and investigate material differences. A realistic verification process tests identity and consistency; it does not approve a supplier because the image looks formal.

“Supplier” describes a commercial relationship, not a single legal or operational role. The company answering an inquiry may be a direct manufacturer, a trading company, a sourcing or export company, a manufacturer using a separate export entity, a group company coordinating an affiliated factory, or a business that subcontracts some or all production. Several of these roles can appear in one legitimate transaction.

A trading company is not automatically a bad supplier, and a factory is not automatically safer. A capable trading company may coordinate components, quality, communication, and export documentation effectively. A poorly controlled direct factory may still mishandle files, subcontract without approval, or fail to meet quality obligations. The due diligence question is whether the disclosed structure fits the work and whether responsibility is clear.

Request evidence that helps connect the stated role to the project: the production address, dated production photos or a live video walkthrough, a relevant equipment list, the name of the certification holder, sample shipment origin, an available audit report, and a written explanation of purchasing or subcontracting. None of these items proves the entire relationship alone. Together they can reveal whether the supplier’s account remains consistent.

Pay attention to mixed structures. A manufacturer may use a Hong Kong or mainland export company for collection and logistics. A group sales company may contract while an affiliate produces. A factory may outsource molds or specialized processes. These arrangements call for a clearer entity map and contract allocation, not an automatic rejection.

For the focused identity question, see how to distinguish the real factory from a trading company. The broader decision here is whether every material participant is known and whether the buyer can place information, payment, and performance obligations on the parties that actually control them.

Registration status

Current registration information helps establish whether the entity appears in the official system and what status is publicly displayed at the time of review. A status that differs from what the supplier represented should trigger clarification. The appropriate response may be to continue, pause, or obtain further evidence depending on the wording, timing, transaction, and project exposure. Avoid turning an unfamiliar translated label into an unsupported legal conclusion.

Business scope

The registered business scope provides context about stated activities and can help identify questions about manufacturing, trade, services, or technology work. It does not independently prove technical capability, export capability, product quality, factory ownership, or ability to complete a specific order. A broad scope may coexist with limited real operations, while a capable company’s exact project role may still require explanation.

Operating history

Record the establishment date and compare material changes visible in available records with the supplier’s story. Frequent or recent changes to the name, address, shareholders, or legal representative are not automatically disqualifying; they may reflect ordinary restructuring. They matter when they disrupt continuity, conflict with supplied documents, or leave unclear which entity owns assets and accepts obligations. Check whether the entity appears in an abnormal-operation list or other relevant public disclosure and ask for an explanation where appropriate.

Registered capital

Registered capital should not be treated as cash in the bank, available working capital, debt-paying ability, factory size, or a promise of performance. Capital structures and contribution arrangements require context. This guide does not use a minimum registered-capital threshold because a single number cannot establish whether a supplier is safe for a particular disclosure, sample, tooling payment, or production order.

Registration data is a verification input, not a supplier score.

Read the fields together with operational evidence and transaction consistency. An older company with a broad scope may still be the wrong contract party. A newer specialized company may be appropriate for a limited project after its role and resources are verified. The decision should follow the risk being taken, not a simplistic ranking assembled from public fields.

Public risk records can add context after the entity has been matched correctly. Searches may include civil and commercial disputes, enforcement records, dishonest judgment debtor information, equity pledges, movable-property security or other relevant public filings, administrative information, and credit warnings. The purpose is to identify questions that may affect the proposed transaction, not to manufacture a numerical risk score from incomplete data.

Useful official starting points include the China Enforcement Information Open Network, China Judgments Online, and Credit China. Database access, search functions, publication practices, and coverage may change. A platform being unavailable or returning no result does not establish that no dispute or risk exists.

Reconcile search findings with supplier documents and written explanations. Repeated contract or payment disputes that resemble the proposed relationship may justify deeper review or changed payment conditions. A single unrelated matter may require little action after identity and context are confirmed. Record what was searched, when, under which entity identifiers, and what limitation affected the result.

The output should be a short list of verified signals, unresolved questions, and consequences for the next step. It should not claim certainty that the public sources cannot provide.

The company negotiating the order may not be the only entity that touches the product. A supplier relationship can involve a sales company, engineering company, actual factory, affiliated factory, subcontractor, mold maker, and component supplier. Due diligence should follow the information and work through that chain, not stop at the first company name supplied to the buyer.

A shared group name does not automatically place every affiliate under one contract. Likewise, a sales company’s signature may not bind the factory that actually receives drawings. The contract structure depends on the facts, but the buyer should at least identify the material parties and decide whether they sign directly, are expressly covered, or receive information only through a controlled recipient responsible for them.

Subcontracting deserves specific attention. Ask what processes leave the main facility, which entities perform them, what information they need, and whether the buyer’s prior approval is required. The answer may differ between a mold shop receiving limited dimensions and an affiliated factory receiving the complete product package. Disclosure controls should reflect that difference.

Apply a minimum-necessary approach. A component supplier may need an interface specification but not the full BOM; a packaging vendor may need artwork but not native mechanical files. Restricting unnecessary distribution reduces operational exposure and makes later evidence easier to reconstruct.

Keep the entity map current. Sampling may introduce an engineering affiliate, tooling may introduce a mold maker, and production may move to another facility. A material change should trigger a fresh identity and access check before the next file transfer.

Reconciliation means placing the main transaction identifiers side by side and explaining every material difference. The aim is not to force every document into one name when the commercial structure legitimately uses several entities. It is to prevent the buyer from discovering after payment or disclosure that the company bound by the contract was not the company receiving the money, holding the files, or making the goods.

Common differences include payment through an affiliate or export company, collection by a Hong Kong or other offshore entity, a request to pay a personal account, a contract party different from the factory, or an invoice issued by another company. A salesperson may explain that all entities have the same owner. That statement may be relevant, but common ownership does not make separate companies legally identical or automatically allocate responsibility among them.

A mismatch is not automatic proof of fraud. Export, tax, group, agency, and settlement arrangements can have commercial explanations. It is nevertheless a reason to pause the affected payment or core disclosure long enough to understand the path. The larger the payment, the more sensitive the information, and the greater the dependency on one factory, the stronger the supporting record should be.

1. 1. Pause the affected action. Do not send funds or the complete file package while a material identity difference remains unexplained.
2. 2. Request a written entity map. Ask the supplier to state how the contract, production, invoice, export, and collection companies relate.
3. 3. Obtain supporting documents. Review licenses, account-holder evidence, invoices, authorizations, group information, and relevant agreements in proportion to the risk.
4. 4. Allocate obligations. Confirm which entity is responsible for files, performance, defects, refunds, tooling, and other material commitments.
5. 5. Confirm payment effect. Establish in the transaction documents whether payment to the named recipient satisfies the buyer’s obligation to the contract party.
6. 6. Decide by amount and stage. Accept, condition, restructure, or reject the arrangement based on the documented explanation and current exposure.

Independently verify changed wire instructions through an established contact channel. Preserve the final instructions and the explanation for any third-party account. For a concise payment-stage review, see how to verify a Chinese supplier before paying a deposit.

Due diligence should deepen as the buyer exposes more valuable information, money, assets, and operational dependency. A supplier does not need the same review for an initial capability conversation as it does before receiving native design files, collecting a tooling payment, or becoming the sole source for production. Use the next project decision to set the review depth.

1. Screening

   Confirm the basic Chinese legal entity and available public registration. Ask what role the company claims and whether it uses another factory. Keep the discussion at a capability level and do not send core drawings, BOMs, source files, customer details, or other information unnecessary for the first screen.

2. Before disclosure

   Verify the intended file recipient, actual factory, engineering participants, and access chain. Resolve material entity differences and put the appropriate NNN in place before meaningful non-public information moves. Define which files are released now and which remain withheld.

3. Sampling

   Identify the entity performing engineering and making or shipping samples. Confirm sample fees, file versions, requested changes, test responsibility, and acceptance expectations. Check whether another company or specialist will receive product information during development.

4. Tooling

   Identify the mold maker, tooling custodian, payment recipient, and physical location. Before payment, document ownership, authorized use, access, maintenance, movement, and transfer arrangements. Verify whether the contract party actually controls the entity holding the asset.

5. Production

   Reconcile the manufacturing contract, bank account, invoice, production site, quality responsibility, approved subcontracting, export path, delivery obligations, and defect responsibility. Confirm that changes since screening have not placed performance outside the agreed structure.

6. Ongoing monitoring

   Refresh relevant checks before a material payment or commitment and when the supplier changes its name, account, ownership information, location, factory, subcontracting path, or transaction documents. New adverse records or unexplained operational changes may also justify a focused review.

Proportionality matters. The sensitivity of the information, payment amount, reversibility of the decision, uniqueness of the supplier, tooling value, lead time, and cost of switching all affect how much evidence is reasonable. A modest standard sample may support a limited check; custom tooling and sole-source production create a different dependency.

Define conditions in operational terms. Instead of recording only “medium risk,” state what must happen before the next action: identify the production entity, correct the agreement name, obtain written payment authorization, restrict a subcontractor’s access, or complete a manufacturing control document. A condition tied to a decision is more useful than an abstract score.

Most verification failures are not caused by one unavailable database. They arise when a buyer treats one clue as a complete answer or allows the project to move faster than the identity and transaction record.

1. 1. Relying on the English name.

   Extract the registered Chinese name and credit code, then use them consistently in the review.

2. 2. Saving a license image without checking it.

   Cross-check current official registration and investigate material differences.

3. 3. Treating registered capital as cash or capacity.

   Use operational and transaction evidence instead of an unsupported capital threshold.

4. 4. Treating business scope as capability proof.

   Verify the people, equipment, site, certifications, and processes relevant to the order.

5. 5. Assuming every trader is bad and every factory is safe.

   Assess the disclosed role, control, responsibility, and evidence for the actual structure.

6. 6. Ignoring the file recipient.

   Map which companies and people can receive, forward, and use each file category.

7. 7. Leaving contract, payment, and factory differences unexplained.

   Obtain a written entity map and allocate obligations before committing.

8. 8. Searching only one database.

   Use appropriate sources and supplier documents, and record the limits of each search.

9. 9. Failing to resolve namesakes.

   Match the Chinese name with the credit code, location, and other identifiers.

10. 10. Paying or disclosing before the review catches up.

    Stage payments and files so unresolved identity questions do not become irreversible exposure.

11. 11. Verifying only at onboarding.

    Refresh checks when entities, accounts, factories, subcontractors, or project exposure change.

12. 12. Treating due diligence as the contract.

    Follow verification with the NNN and manufacturing controls appropriate to the next stage.

A concise review note should identify the evidence used, unresolved differences, decision owner, conditions, and date for reassessment. That record helps sourcing, engineering, finance, and legal teams act on the same entity picture instead of maintaining separate assumptions.

Assign each unresolved item to a person and a decision deadline. Sourcing may confirm the production site, finance may verify payment instructions, engineering may limit the initial file set, and the contract owner may correct the party names. A review is not complete merely because concerns were listed; the team should know which concern blocks progress, which can be monitored, and who can approve a documented exception.

Use this checklist as a review record, not a universal approval form. Mark the source and date beside each completed item, note differences rather than forcing a yes/no answer, and set the next action according to the current project stage.

Add project-specific items where the relationship involves regulated products, customer-mandated compliance, unique components, software access, tooling, or a critical single-source dependency. Those checks may require technical, quality, financial, compliance, or specialist input beyond the entity and supplier-control scope of this guide.

For each checklist group, record one of four outcomes: confirmed, inconsistent, not available, or not applicable at the current stage. “Not available” should remain visible rather than being treated as a pass. Attach the supporting document or source reference, identify who reviewed it, and state whether the finding affects disclosure, signature, payment, tooling, or production.

Finish with a dated proceed decision and specific conditions. For example, the team may permit a general quotation while withholding native files, approve a sample payment after the account relationship is documented, or require the actual factory to join the agreement before tooling. This turns the checklist into a controlled handoff instead of a folder of documents that no one has reconciled.

Due diligence, an NNN, and a manufacturing agreement are connected controls, not substitutes. Each answers a different project question and becomes useful at a different point in the buyer’s commitment.

Due diligence cannot prevent misuse of files. It can identify the parties and inform whether disclosure should occur, but it does not create the necessary restrictions. An NNN cannot prove manufacturing capability and does not fully control quality, tooling, price, delivery, or production performance. A manufacturing agreement may address those matters, but it cannot repair the foundational problem of naming the wrong party or leaving the actual factory outside the structure.

Connect the layers in sequence. Verify before material commitment, use an NNN before non-public disclosure, and introduce manufacturing control before development, tooling, or production obligations deepen. Revisit the entity map whenever the supplier introduces an affiliate, subcontractor, new payment recipient, or different facility.

The transition should be triggered by what the supplier is about to receive or do, not by an arbitrary calendar date. A request for detailed CAD, a paid engineering change, a mold invoice, or a production forecast can each signal that the current control layer is no longer enough.

For the disclosure-control layer, use the China NNN Agreement Guide. As the project moves into tooling and production, the next guide in the customer journey will address manufacturing agreement control in greater detail; this page deliberately stops at the transition rather than duplicating that production-stage guidance.