Pharmaceutical supplier risk monitoring that runs on a quarterly cycle is now structurally behind the market. On September 29, 2026, US Section 232 tariffs on imported patented medicines and their ingredients expanded to mid-sized and smaller drugmakers that were left off the first company list, with rates that can reach 100%. A risk report finalized in July treated that cost as a scenario. This week it is on the invoice.
The direct answer for pharma CPOs: supplier risk data has to refresh as fast as tariff rules, FDA actions and supplier finances actually change, and every risk score has to explain itself so a buyer can act on it the same week. A risk report that arrives after the event is a history lesson, not a decision tool.
Why quarterly supplier risk reports fail pharma procurement
The American Society of Health-System Pharmacists and the University of Utah Drug Information Service counted 227 active US drug shortages in Q2 2026, a third straight quarterly rise. Just under half (48%) of new 2026 shortages involve sole-source products.
Supplier disclosure will not save you either. According to the ASHP and University of Utah shortage report, manufacturers listed the cause of 59% of 2025 shortages as “unknown” or gave no reason at all. Procurement has to see the problem in the data first: stretched payables, credit downgrades, quality findings.
Real-time supplier risk data: what changed in the last 90 days
Duties began July 31 for 17 large manufacturers and now apply to the rest of the industry. The April 2026 proclamation sets a 100% default rate, a 20% rate for companies with Commerce-approved onshoring plans that rises to 100% on April 2, 2030, and a 15% rate for products from the EU, Japan, South Korea, Switzerland and Liechtenstein. It also notes that 85% of patented APIs were sourced abroad as of 2025.
A Commerce Department notice published September 23 set 0% treatment for certain specialty medicines and for products imported solely for clinical trials or R&D. Generics are exempt for now, but the administration announced a phased plan in July for imported generics: no duties through July 2028, then 100%, rising to 200% a year later.
Two suppliers of the same molecule can now face a 0%, 15%, 20% or 100% duty. A traffic-light score built last quarter cannot tell you which one you are buying from.
Explainable supplier risk scores beat traffic lights
Red flags without reasons create alert fatigue. A useful score names the signals that moved (days payable outstanding up 18 days, an FDA Form 483 observation, a tariff tier change) and converts them into dollar exposure.
What good looks like: from live data to specific decisions
Chain Verity monitors 200+ financial signals per supplier across tier 1, 2 and 3, and quantifies working capital at risk in dollars rather than colors. It turns that live supplier monitoring into recommendations a pharma procurement team can act on.
Avoiding disruption before it starts. When a sole-source API or sterile fill-finish supplier shows compounding signals, such as lengthening payables plus a new tariff cost it cannot pass through, Chain Verity flags it as a diversification trigger and recommends starting second-source qualification now, because FDA requalification of an alternate supplier takes many months. It also identifies when to trigger contingency plans: building safety stock on exposed SKUs, engaging the supplier early on its onshoring plan, and sequencing generics dual-sourcing ahead of the July 2028 tariff step.
Restructuring contracts with live risk data. Chain Verity points to the specific clauses to revisit where exposure is concentrating:
- Pricing indexation: add duty-sharing or tariff pass-through caps so a tier change does not reset landed cost overnight.
- Minimum volume commitments: reduce or make conditional any minimums with suppliers whose cost base just shifted.
- Exclusivity: carve out the right to qualify a second API source when a sole-source supplier’s risk score crosses a set threshold.
- Audit and reporting rights: require disclosure of country of origin, onshoring plan status and quality events, since most shortage causes go unreported.
- Termination and step-in triggers: tie them to objective events such as FDA warning letters, credit downgrades or sustained payables stretch.
Pharma teams can apply to become a Chain Verity design partner.
Frequently Asked Questions
Q: How often should pharma procurement teams refresh supplier risk data?
A: Continuously for critical and sole-source suppliers. Tariff tiers, FDA inspection outcomes and supplier credit can all change within weeks, and nearly half of new 2026 drug shortages involve a single manufacturer.
Q: Do the Section 232 pharmaceutical tariffs affect generic API suppliers?
A: Not yet. Generics and biosimilars are currently exempt, and Commerce must reassess that exemption within a year of the April 2026 proclamation. A separate phased plan announced in July would add duties on imported generics starting after July 2028, so dual-sourcing work should start now.
Q: What is an explainable supplier risk score?
A: It is a risk score that shows which underlying signals drove the change, such as payables, credit, quality findings or tariff exposure, and what that means in dollars.
Q: Which pharma supplier contract clauses should be revisited after the September 29 tariff expansion?
A: Start with pricing indexation and tariff pass-through terms, then minimum volume commitments, exclusivity on sole-source APIs, audit and origin-reporting rights, and termination or step-in triggers. Prioritize suppliers in the 100% tier.
Featured image: Photo by M Joko Apriyo Putro / Wikimedia Commons / CC BY-SA 4.0
