RED FLAG REPORT

Undisclosed Subcontractors: The Hidden Risk Your Supplier Spreadsheet Will Never Show

Published: June 2026 · By OptiSupply · 6 min read

Your supplier passed their SMETA audit. Their ESG questionnaire came back clean. Their code of conduct is signed and filed. And yet — somewhere downstream in their production network, there's a facility you've never heard of, producing goods under your label, that has never been inspected by anyone.

This is the undisclosed subcontractor problem. And under CSRD, it's now your legal responsibility to find it before your auditor does.

      ⚑ Red Flag Stat: In OptiSupply's vetting database, undisclosed subcontractors appear in approximately 1 in 3 supplier checks for textile manufacturers in Turkey, India, and Bangladesh.
    

Why Subcontractors Go Undisclosed

It's rarely deliberate fraud on the part of your tier-1 supplier. More often, it's a combination of:

Capacity overflow: Your supplier takes on more orders than their declared facilities can handle — they quietly outsource the overflow to a subcontractor without telling you
Audit avoidance: The subcontractor knows they wouldn't pass a social compliance audit, so both parties agree to keep the relationship off the books
Long-standing relationships: Small, local workshops that have always been part of the production chain, predating any formal compliance programme
Technical specialisation: Specific production steps (embroidery, washing, dyeing) outsourced to specialists not considered "real" suppliers by your tier-1

What CSRD Says About Subcontractors

The Corporate Sustainability Reporting Directive requires EU brands to disclose material sustainability impacts across their entire value chain — not just tier-1 suppliers. The European Sustainability Reporting Standards (ESRS) specifically reference "downstream and upstream value chain actors."

In practice, this means if a subcontractor two or three tiers deep is causing environmental harm or labour rights violations, and you could reasonably have known about them through adequate due diligence — you share exposure to the regulatory and reputational consequences.

How to Detect Undisclosed Subcontractors

1. Capacity vs. Workforce Analysis

This is the simplest signal. If a supplier declares annual production capacity of 2 million units but employs 200 workers on a 5-day week, the maths don't work. That gap has to be filled somewhere — almost certainly by subcontractors.

2. Registry and Trade Record Cross-Referencing

Customs and trade records often reveal shipment patterns that don't match declared production sites. We look for outbound transfers to unknown or adjacent entities — particularly in the 30–60 day window before delivery to your warehouse.

3. Local Business Registry Deep Dives

In many jurisdictions, subcontractors are registered as separate legal entities under the same ownership group as your tier-1 supplier. A registry check on the owning family or holding company often surfaces 3–5 related entities not declared to brands.

4. Audit Scope vs. Production Evidence

SMETA and BSCI audits cover specific, declared facilities. If production evidence (shipping manifests, fabric certs, finishing records) points to locations not included in the audit scope, those are likely undisclosed facilities.

      Case example: A Turkish supplier declared two production units on their BSCI audit scope. Trade registry research surfaced a third entity — same ownership, different VAT number — registered 8km away. Capacity: 400 workers. Never audited. Running seam-finishing operations for the brand's highest-volume SKUs.
    

The CSRD Disclosure Gap

When an undisclosed subcontractor surfaces during a regulatory audit or investigative journalism piece, brands face a specific CSRD disclosure gap: they reported ESG metrics based on an incomplete value chain, meaning their sustainability reports contain material misstatements.

This is not a minor compliance technicality. It's the kind of gap that triggers CSRD enforcement actions, triggers investor divestment, and drives the kind of press coverage no procurement team wants.

The 48-Hour Solution

The challenge with undisclosed subcontractor detection has always been that it requires time-consuming, country-specific registry research that most brands can't do in-house. OptiSupply's vetting process runs these checks as standard — for every supplier, on every order.

You submit a supplier. We run the full check — registry, ownership, capacity analysis, trade records, related entity mapping. You get a dossier with all findings in 48 hours.

FIND YOUR UNDISCLOSED SUBCONTRACTORS

Submit a supplier name and country. We'll tell you what's in their production network that isn't in your spreadsheet.

START A FREE CHECK →