Pharma
- What applies
- EU GMP Guide Chapter 7 carries the quality agreement, the EU GDP Guidelines 2013/C 343/01 distribution; frame: Directive 2001/83/EC.
How do life sciences companies establish supply chain governance that is resilient and compliant, without carrying single-source risks into the next crisis?
We help pharma, biotech, MedTech and IVD companies map their supply chain, contractually secure GMP-critical suppliers and build resilience through dual sourcing. Qualifying a second supplier only once the first fails means the regulatory variation is no longer in your hands.
Overview
Which supply chain risks exist in life sciences?
Supply chain mapping down to tier 2 · Quality agreements per EU GMP Guide · GDP-compliant distribution
Last updated: September 18, 2026
Supply chains in life sciences are highly regulated: every supplier of GMP-critical materials is part of the quality system, and every change is a regulatory event.
- Single-source suppliers for GMP-critical materials create dependencies that geopolitical events and capacity shortages made visible during the pandemic years.
- Switching suppliers without full qualification and without the necessary regulatory variation is not a procurement risk but a compliance risk.
- A lack of transparency over tier 1 and tier 2 suppliers makes it harder to ensure the traceability that the MDR (EU 2017/745) and IVDR (EU 2017/746) require across the supply chain.
- Quality agreements per EU GMP Guide Chapter 7 are missing or fail to robustly govern change notification and audit rights. This is the most common finding for outsourced activities.
Industries
What this means in your industry
Biotech
- What applies
- EU GMP Guide Chapter 7 and the EU GDP Guidelines 2013/C 343/01 apply as in pharma.
MedTech
- What applies
- MDR (EU) 2017/745 requires traceability across the supply chain.
IVD
- What applies
- IVDR (EU) 2017/746 requires traceability across the supply chain likewise.
Services
How we support you
Supply chain transparency mapping
Complete mapping of the supply chain down to tier 2: critical materials, single-source points and regulatory dependencies. The result is a risk map that names every critical source and its alternatives.
Resilience strategy & dual sourcing
Dual-sourcing concepts for critical materials, with a qualification roadmap for the second supplier and business continuity plans for crisis scenarios. The result is a documented plan defining which second supplier is qualified and when.
How we work together
What it comes down to
Supply chain governance depends on whether transparency, criticality and resilience build on one another at all. First the supply chain must be mapped down to tier 2, because a single-source point often hides not at the direct supplier but at a shared intermediate used by two seemingly independent sources.
Only on this map can you assess criticality and prioritize which suppliers need a robust quality agreement per EU GMP Guide Chapter 7 with clear audit rights and change-notification obligations. Start with contracts, and you cleanly govern suppliers whose risk you do not yet know.
The real bottleneck is the qualification of the second supplier. It involves not only audits and sample testing, but also the regulatory variation through which the alternative supplier is added to the marketing authorisation, and both require lead time.
If dual sourcing is only triggered when the primary supplier fails, the replacement arrives too late and the supply gap is already there.
This is why the qualification roadmap for critical materials belongs at the start of the resilience strategy, not in the crisis plan. In parallel, GDP-compliant distribution per 2013/C 343/01 ensures that cold-chain and transport conditions do not end at your own loading dock, where the greatest risks of a highly regulated supply chain would otherwise continue uncontrolled.
Our approach
Our approach
Step
Result
01
Supply chain mapping
Risk map of the supply chain down to tier 2 with single-source points and critical materials flagged.
02
Criticality & risk assessment
Prioritized list of suppliers by supply and compliance risk, from which the measures are derived.
03
Governance & contracts
Quality agreements and audit rights per EU GMP Guide Chapter 7 standardized for the critical suppliers.
04
Resilience & dual sourcing
Qualification roadmap for second suppliers and a business continuity plan for the most critical sources.
05
GDP & traceability assurance
GDP-compliant distribution conditions and end-to-end traceability across the supply chain demonstrated.
Common pitfalls
Where projects commonly fail
The second supplier is only sought once the first one fails.
By then there is no time left for qualification or for the regulatory variation, and the supply gap is already there before the replacement can deliver.
Single-source points are only seen at tier 1.
If two qualified suppliers source the same tier 2 intermediate, the dependency is merely shifted, not resolved. This only becomes visible when mapping down to tier 2.
The quality agreement does not govern change notification robustly.
If the supplier changes a process or material without timely notice, the deviation surfaces only at incoming goods inspection or during an audit, instead of being flagged in advance.
GDP is treated purely as a wholesale topic.
Manufacturers, too, must ensure GDP-compliant conditions for shipment per EU GDP Guidelines 2013/C 343/01; the cold chain does not end at your own loading dock.
Supply chain transparency is confused with a supplier list.
Without linking material, criticality and regulatory status, the list is not a governance tool but merely an address book.
Supply Chain & Technical Operations
Do any of these pitfalls apply to you?
In a first call we assess your situation and say what needs clarifying first in your case. Without obligation, reply usually within one working day.
FAQ
Frequently asked questions
Supply chain governance comprises the structures, processes and contracts with which life sciences companies steer, monitor and keep their supply chains compliant. It goes beyond operational supplier management and addresses strategic resilience as well as the requirements arising from the EU GMP Guide, the EU GDP Guidelines and the traceability mandated by the MDR (EU 2017/745) and IVDR (EU 2017/746).
A quality agreement is a legally binding contract between manufacturer and supplier that defines GMP obligations, quality control, change notification and audit rights. For outsourced activities, the EU GMP Guide requires in Chapter 7 a written agreement that clearly allocates responsibilities between the contract giver and the contract acceptor.
Good Distribution Practice per the EU GDP Guidelines 2013/C 343/01 defines the requirements for the storage and distribution of medicinal products for human use. GDP compliance is required of wholesalers and distributors; manufacturers, too, must ensure GDP-compliant conditions for shipping their products, for example in temperature-controlled transport.
Through dual sourcing of critical materials, strategic safety stock and the early qualification of alternative suppliers together with business continuity plans. What matters is that the second supplier, including the regulatory variation, is qualified before the primary supplier fails. Otherwise the alternative kicks in too late.
The MDR (EU 2017/745) and IVDR (EU 2017/746) require manufacturers to be able to identify at any time which economic operator a device was supplied to and from whom a device was sourced. This traceability presupposes a supply chain whose actors and material flows are documented, not just informally known.
Sources
- EU GMP Guide (EudraLex Volume 4), primary text, in particular Chapter 7 (Outsourced Activities)
- Guidelines on Good Distribution Practice of medicinal products for human use (2013/C 343/01)
- Regulation (EU) 2017/745 (MDR) and Regulation (EU) 2017/746 (IVDR), traceability
Image notice: The images on this page were generated using artificial intelligence. They do not depict real people, places, or events.
Life Science Journal
Regulatory updates, straight to your inbox.
New requirements, authority decisions and practice notes. Once a month, unsubscribe any time.
Case Studies
What this looks like in practice
Related insights
All insights →Regulations & standards considered
- EU GMP Guide (EudraLex Volume 4)
- EU GMP Guide Chapter 7 (Outsourced Activities / Quality Agreement)
- EU GDP Guidelines 2013/C 343/01 (Good Distribution Practice for medicinal products for human use)
- Directive 2001/83/EC (Community code relating to medicinal products for human use)
- EU 2017/745 (MDR), traceability across the supply chain
- EU 2017/746 (IVDR), traceability across the supply chain
Related topics
Supplier Development & Qualification →
Qualification and development of GMP-critical suppliers
Managing Supply Shortages →
Acute shortage scenarios and business continuity in supply
Good Distribution Practice →
GDP-compliant storage and distribution per 2013/C 343/01
GMP Consulting (Good Manufacturing Practice) →
GMP requirements for outsourced activities and suppliers
Have a concrete project?
Briefly outline your situation. We'll respond with an initial assessment, usually within one business day.
Prefer direct? +49 89 4161170-0
info@theentourage.de
- Reply usually within one working day
- 4 offices: DE · CH · IT · US
- 100% life sciences