Supply Chain
Tier-2 and Tier-3 Supplier Transparency
Most DPP data sits with tier-2 and tier-3 suppliers. How to reach deeper into the chain, the obstacles you will meet and the approaches that work.
The uncomfortable truth about DPP data is that most of the fields you need sit not with your direct supplier (tier-1) but with their supplier. Fibre origin is with the spinner, dye chemistry with the dyehouse, ore origin with the smelter.
Why it is hard
- Knowledge gaps: tier-1 genuinely does not know many fields.
- Commercial protection: tier-1 does not want to reveal its supplier for fear you will buy direct.
- Capacity: tier-2 and tier-3 are often small firms with little questionnaire capacity.
- Fan-out: one shirt can involve dozens of suppliers by tier-3.
Approaches
| Approach | How it works | When it fits |
|---|---|---|
| Cascading contracts | Tier-1 passes the same obligation down | Long-term relationships |
| Certificate chains | Schemes like GRS/GOTS already audit the chain | Where a scheme exists |
| Shared platform | Supplier enters data once, several customers see it | With sector collaboration |
| Identity masking | Tier-2 identity is hidden, data flows up | High commercial sensitivity |
| Direct relationship | The brand works directly with critical tier-2 | Strategic materials |
Why identity masking works
Tier-1's real fear is exposure of its supplier list, not the data itself. If a platform can mask tier-2 identity and pass up only verified attributes — country of origin, certificate status, a carbon value — resistance drops sharply. See protecting trade secrets.
Set staged targets
Mapping the whole chain in a year is not realistic. A workable staging:
- Year 1: tier-1 complete; tier-2 country of origin and certificate status only.
- Year 2: tier-2 facility identity for critical materials.
- Year 3: tier-3 origin for high-risk materials.
Merge with adjacent regulation
- CSDDD: due diligence for human rights and environmental risks along the chain. See CSDDD.
- EUDR: origin at geolocation level for commodities such as timber, rubber and soy. See EUDR.
- CSRD: Scope 3 and value chain reporting. See CSRD and product data.
All three want largely the same map as the DPP; running them separately is waste.
Frequently asked questions
Can I verify tier-2 data?
Full auditing is expensive. In practice a three-part approach is used: document checks, consistency checks (mass balance) and site audits for high-risk items.
What if tier-1 will not share its supplier list?
Ask for attributes rather than identities: which country, which certificate, which process. Most regulatory fields ask for attributes, not names.
What is the typical depth in textiles?
Making-up (tier-1), fabric and dyeing (tier-2), yarn (tier-3), fibre and raw material (tier-4). See the textile DPP guide.
