Pharmaceutical supply chain risk rarely shows up at the tier procurement teams actually monitor. Most risk programs stop at the active pharmaceutical ingredient (API) supplier, confirming that two or three qualified vendors exist for a given molecule. But a growing body of evidence shows the real exposure often sits one tier deeper: in the key starting materials (KSMs) that every one of those API makers depends on, frequently sourced from a single shared plant.
That is the direct answer to a question more CPOs are asking this year: is my drug’s supply chain actually diversified, or does it just look that way on paper? For many generic and off-patent medicines, the honest answer is the latter.
The Tier Procurement Doesn’t See
A 2026 update from the U.S. Pharmacopeia (USP), covered by Fierce Pharma, found that key starting material sourcing represents the earliest and most concentrated tier of the pharmaceutical supply chain. A finished drug can list four API manufacturers spread across three countries, and a procurement scorecard will read that as resilience. What the scorecard doesn’t show is that all four API makers may buy the same KSM from the same single facility. If that plant floods, loses a GMP certification, or gets caught in an export restriction, four “diversified” suppliers fail at once, for the same reason, on the same day.
This is a structural feature of pharma sourcing, not an edge case. The Council on Foreign Relations’ 2026 report on U.S. pharmaceutical dependence traces how reliance on concentrated upstream sourcing has already produced real shortages, citing the antibiotic amoxicillin, the anti-coagulant heparin, and the circulatory stimulant norepinephrine as drugs where American hospitals had to ration care, delay surgeries, or substitute less effective treatments when that concentration broke down.
What the Concentration Data Actually Shows
The numbers back this up. Drug Master File filings, which track where API manufacturing capacity actually sits, show the U.S. accounted for just 3% of filings in 2024, down from 23% in the early 1980s. The European Union fell from 63% to 6% over the same period. India and China now account for 43% and 45% of filings respectively, according to the CFR analysis. That is where the industry’s manufacturing base has physically relocated, tier by tier, over four decades.
Downstream, the effect shows up in the FDA’s Drug Shortages Database, which the agency updates as it works with manufacturers to manage active shortages. The FDA’s own 2024 Drug Shortages Report to Congress documents the mitigation work required just to keep pace, concentrated heavily in sterile injectables: chemotherapy agents, sedation drugs, and IV fluids among them. Quarterly compliance reviews and static supplier scorecards were built for a world where the API tier was the risk boundary. They were not built to catch a KSM plant going down two tiers below it.
A four-supplier API book can still be a single point of failure if every one of those suppliers draws from the same upstream plant.
What Sub-Tier Visibility Actually Requires
Chain Verity (chainverity.ai) was built around the idea that tier-1 visibility isn’t visibility at all if the failure point sits at tier 2 or tier 3. Getting ahead of KSM-level concentration risk means three things procurement teams don’t get from an annual audit: continuous financial and operational monitoring of sub-tier suppliers, not just the API vendor of record; mapping which finished-dose and API suppliers share a common upstream source, so “four suppliers” can be tested against the question of whether it is really one; and quantifying exposure in dollars of at-risk working capital and revenue, not a red-yellow-green label that treats a single-source KSM the same as a fully diversified one.
None of that requires waiting for a shortage notice to appear on the FDA database. The data needed to see a KSM concentration problem already exists in financial filings, customs records, and regulatory inspection histories. It just isn’t being connected to the procurement decision until it’s too late. Teams that want a continuously updated view of where that exposure sits can see how real-time monitoring works on Chain Verity’s platform overview, or join the design partner program to pressure-test it against an actual supplier book.
Frequently Asked Questions
Q: What is a key starting material (KSM) in pharmaceutical manufacturing?
A: A KSM is an early-stage chemical input used to synthesize an active pharmaceutical ingredient. It sits one or more tiers upstream of the API itself, and multiple API manufacturers frequently source the same KSM from a single production facility, even when the finished drug appears to have a diversified supplier base.
Q: Why do multiple API suppliers still create shortage risk?
A: Because API supplier diversity does not guarantee KSM supplier diversity. If several API manufacturers depend on one shared KSM plant, a disruption at that single facility can halt production across all of them simultaneously, regardless of how many API vendors are qualified.
Q: How concentrated is API manufacturing today?
A: Per Drug Master File filing data cited in CFR’s 2026 report, India and China together account for roughly 88% of global API DMF filings as of 2024, while the U.S. and EU combined account for under 10%, a sharp reversal from four decades ago.
Q: How can procurement teams get visibility into tier 2 and tier 3 pharma suppliers?
A: By moving from static, quarterly supplier audits to continuous monitoring of financial and operational signals across sub-tier suppliers, and by explicitly mapping shared upstream dependencies, like a common KSM source, rather than treating each API vendor’s risk as independent.
