The Hidden API Concentration Risk Facing Pharma Procurement

Active pharmaceutical ingredient (API) supply chain risk is no longer a theoretical concern for pharma procurement teams. It is a measurable concentration problem. According to USP’s Medicine Supply Map, India held 48% of total active API Drug Master Filings (DMFs) as of 2023, with China’s share climbing to 16%, up from 13% in 2021. Together, two countries account for nearly two-thirds of the filings that document where the world’s drug ingredients are made.

That is not a diagram problem. It is a dollar exposure problem, and most pharma companies cannot answer a simple question when a regulator or a board member asks it: if our top three API suppliers each lost a single facility tomorrow, how much revenue would be at risk, and for how long?

Why tier-1 API relationships hide the real exposure

Procurement teams often qualify a drug substance CDMO and consider the sourcing question closed. But CDMOs frequently depend on a single upstream supplier or a narrow set of chemical precursor sources, particularly for older, lower-margin generic APIs. FDA testimony on pharmaceutical supply chains notes that most API manufacturing facilities supplying the U.S. market sit overseas, and many rely on precursor chemicals sourced from a small number of countries. The risk that matters is usually two or three tiers below the contract procurement actually signed.

Tier-1 supplier scorecards give false comfort. A CDMO can look financially healthy and still be one factory shutdown away from a shortage, because the exposure sits in a precursor supplier nobody has assessed. Drug shortage risk, in practice, is a sub-tier visibility problem wearing a finished-product label.

What the data actually shows

The FDA’s 2025 Drug Shortages Report to Congress tracks the agency’s ongoing effort to mitigate shortages tied to manufacturing disruption, quality failures, and sourcing concentration. Separately, a 2025 executive order strengthened the U.S. Strategic Active Pharmaceutical Ingredients Reserve (SAPIR), directing agencies to identify roughly 26 critical medicines and build a six-month domestic API supply for them. Reuters reported the order was framed explicitly around building a “resilient” supply chain for essential medicines.

Government reserves cover 26 critical compounds. They do nothing for the thousands of other APIs and excipients a mid-size pharma company depends on for its own portfolio. That gap is where procurement risk management has to operate, and it requires continuous, supplier-level data rather than a quarterly compliance checklist.

A single-source API supplier with deteriorating financials is a drug shortage risk long before the FDA lists the product as unavailable.

What the proactive alternative looks like

Chain Verity (chainverity.ai) was built for the gap between government-level reserves and company-level exposure. Instead of a static risk score, procurement and quality teams get continuous monitoring of financial and operational signals across API manufacturers, CDMOs, and the precursor suppliers behind them, extended to tier 2 and tier 3 rather than stopping at the primary contract.

The output is not just a flag. When a supplier’s risk profile deteriorates, the system quantifies working capital at risk in dollars and recommends a specific next step: whether to start qualifying a second source now given typical 12-15 month CDMO timelines, when to trigger a contingency plan before a GMP finding becomes a shutdown, and which contract terms to revisit first. For API and excipient agreements, that usually means exclusivity clauses that block dual sourcing, minimum purchase commitments that lock in a distressed supplier, pricing indexation tied to volatile precursor costs, and audit or step-in rights that determine how fast a company can respond to a failed inspection. Getting ahead of a renewal with that data in hand is a different negotiation than renewing on autopilot and learning about a problem from a headline.

Companies evaluating this approach as design partners can see how the monitoring and recommendation layer works together at chainverity.ai/#design-partners.

Frequently Asked Questions

Q: How concentrated is the global API supply chain?
A: USP’s Medicine Supply Map found India held 48% of total active API DMFs in 2023, with China at 16%, the EU at 17%, and the U.S. at 9%. DMF location reflects where API manufacturing facilities are registered, not the exact volume sourced from each region, but it is the clearest available proxy for geographic concentration.

Q: What is the Strategic Active Pharmaceutical Ingredients Reserve?
A: SAPIR is a U.S. government program to stockpile APIs, rather than finished drugs, for medicines considered critical to national health security. A 2025 executive order directed federal agencies to identify about 26 critical medicines and build a six-month domestic API supply for them.

Q: How can procurement teams monitor tier 2 API suppliers if they don’t have a direct contract with them?
A: Continuous monitoring platforms that track financial signals, facility-level data, and regulatory filings can surface risk at the precursor and sub-tier level even without a direct commercial relationship, which is the only way to catch a problem before it reaches the CDMO holding the actual contract.

Q: What should a pharma procurement team do when a sole-source API supplier shows early distress signals?
A: Begin qualifying a second source immediately given the 12-15 month typical CDMO qualification window, review the existing contract for exclusivity or minimum-volume clauses that would block dual sourcing, and confirm audit and step-in rights are strong enough to act before a shortage is declared.