Vendor concentration risk after the supply-chain reset.
Between 2021 and 2026, most small businesses we work with consolidated their vendor base. Fewer suppliers, deeper relationships, simpler procurement. The trade-off is that single-point dependencies have crept back in — quietly, often without anyone making a deliberate decision.
Supplier consolidation made sense at the time. Through the 2021–23 disruption, the businesses that did best were the ones with fewer, deeper supplier relationships and clearer terms. Procurement teams cut tail spend. Owners reduced the cognitive load of managing a long vendor list. Margins improved.
By 2026 the side effect is visible. The same SMBs that pruned aggressively are now structurally more concentrated than they realise. A single supplier carries 30%, 40%, sometimes 60% of a category. The relationship is good. Until it isn't.
Three concentration patterns inside SMBs
Category concentration
One supplier holds the majority of a single spend category. If they raise prices, miss a quarter, or get acquired, you have no alternative pre-vetted. The procurement effort to bring on a second source from cold is six to nine months — exactly when you don't have it.
Geographic concentration
Multiple categories source from the same region or, more subtly, from suppliers who themselves source from the same region. A jurisdictional shock — sanctions, export controls, transport disruption — hits multiple categories at once. The diversification you thought you had isn't diversification.
Key-person concentration
The supplier is fine; the relationship is held together by one person on their side. They leave, retire, or get promoted. The service quality drops. The relationship has to be rebuilt with someone who doesn't know your context.
None of these are crises by themselves. Each becomes one when something else moves at the same time — and in 2026 something else usually does.
The renewal-cycle audit
The cheapest moment to address concentration is at contract renewal. Two months before renewal, you have leverage. Two months after, you don't.
A renewal-cycle audit is a small piece of work with disproportionate value. It looks at:
- Spend share. What percentage of category spend does this vendor carry?
- Critical-path role. What breaks if they miss a quarter?
- Alternative suppliers identified. Have you got two pre-vetted alternatives that could be brought online inside 90 days?
- Key-person dependencies. Who, on their side, holds the relationship together?
- Counterparty signals since onboarding. Ownership changes, leadership turnover, adverse media, sanctions or compliance developments.
We work through the supplier file as you would if you had the time. The output is a one-page vendor summary per supplier in scope — concentration position, alternatives identified, key-person mapping, and a clear list of what changed about the counterparty since you signed them. It is sized to be usable in a procurement conversation that week.
The conversation you want to have
Renegotiation conversations go better when you've done the work and the vendor knows you've done the work. The audit gives you ground to stand on — not as a threat, but as a quiet readiness to do the alternative if the renewal terms don't make sense.
The audit also gives you the basis for an honest conversation internally. Concentration isn't necessarily wrong. The point of the work is to make it a chosen position rather than a drifted one.
Heading into a vendor renewal cycle?
Tell us which vendors are up for renewal in the next 90 days. We'll scope a Vendor & Supplier Review and tell you which ones repay the investigation.