Order-risk alerts that reach beyond direct suppliers

Looking beyond the company you buy from

Japan’s Resilire connects not only direct suppliers but also the raw-material and component suppliers those companies depend on. It maps items and production sites like branches, then identifies which points may be affected by earthquakes, floods, accidents, or geopolitical changes.

In July 2026, it also announced a feature that automatically estimates and maps land transport routes between sites, and sends alerts when those routes fall within a disaster impact area. The aim is to look beyond whether a factory is intact and check whether vehicles carrying parts can actually move.

In a case published by Resilire involving a plastics-related manufacturer, investigation after a risk event fell from about three days to within 24 hours. At another pharmaceutical manufacturer, direct suppliers were asked to enter information about their own suppliers. The company said this filled almost all second-tier suppliers and more than 80% of third-tier suppliers. These are cases published by the companies and their customers, so it is still necessary to verify whether other businesses would see the same results.

A document from Japan’s Cabinet Secretariat described Resilire users that had identified the operating status of 80–90% of all suppliers through the second tier by January 6 during the 2024 Noto Peninsula earthquake. This suggests that a contact list alone is not enough. Companies need to build connection data before an incident and be able to send verification requests immediately.

In a survey of 300 South Korean small and medium-sized enterprises by the Ministry of SMEs and Startups (중소벤처기업부), the government ministry responsible for small-business and startup policy, and the Korea SMEs and Startups Agency (중소벤처기업진흥공단), 69% had no plan for responding to supply-chain changes. Only 18% had completed or were preparing such a plan. The survey included some sectors outside manufacturing, but 31.3% said it was difficult to find alternative suppliers. Another survey found that 75.7% of SMEs collecting manufacturing data entered it manually. Before risk-alert technology, these businesses need a low-friction tool for collecting supplier, item, and factory information.

What changes for a 12-person parts supplier

Consider Kim, the owner of a 12-person plastic injection-molding company that makes automotive parts. Kim knows the direct material distributors and mold suppliers, but only learns which country and factory a material distributor sources from when a problem occurs.

Purchase orders are in the company’s business software, while supplier contacts are split across spreadsheets and phones. When raw-material supply becomes a problem, Kim downloads purchase records again, compares production schedules with delivery orders, then calls or messages each supplier to check operating status and inventory. If responses are slow, the decision about which customer orders to explain first is delayed too.

With a new service, Kim first links critical raw materials and components to direct suppliers. Suppliers receive a short link that works on a phone without a login, where they can enter their own suppliers, production country, factory region, and whether alternatives are available. If revealing a detailed company name is difficult, Kim sees only the risk area and whether there is an impact, while supplier names are visible only to approved staff.

When an earthquake or port closure occurs, the screen should show potentially affected materials and orders before the event itself. Kim opens a red-marked order and sends an operating-status check to suppliers at once. Responses come in three states: operating normally, delay expected, or checking. Kim then decides the order in which to contact customers.

Some work still remains with people. Persuading suppliers to share sensitive supplier information, testing the quality of substitutes, and negotiating price, minimum order quantities, and delivery times with new suppliers do not become automatic. The service reduces the time needed to make decisions; it does not eliminate supply interruptions.

The difficult thing to copy is not the map or alert screen. It is the accumulated record of which contact person actually responds, which item is made at which factory, when it was last verified, and whether a supplier responded within the promised time during past incidents. This data exists only when suppliers participate repeatedly and trust that their information will not be exposed carelessly.

That means there is no need to build a giant map for all manufacturing from the start. One lead manufacturer can select a few critical items, have direct suppliers invite the next tier, and run a contact drill each quarter. As suppliers brought in by one company connect with other customers, a response network and verification record emerge that new competitors will find harder to copy.

Elsewhere, the work started small with connections

UK-based Matrix Footwear used the open SC-DEX format and Open Supply Hub to ask four direct manufacturing partners about their next-tier suppliers. Rather than first installing a complex new system, it sent a simple file, collected responses, and organized production locations using the same standard.

It identified 34 second-tier suppliers and more than 30 production locations. One supplier refused to disclose information, but the remaining information created a structure for continuing the next-tier investigation. The basic tools are free; paid use begins when they are automatically connected to an existing company system.

France’s Danone used Everstream Analytics to examine raw-material supply chains alongside disaster, weather, and transport risks. Pricing has not been disclosed. It is an enterprise service for procurement teams that buy raw materials across many countries.

Danone said it connected and monitored 60% of its total purchased-item categories in the first year. During disruption to Red Sea shipping, it identified suppliers that needed to reroute around the Cape of Good Hope, notified procurement staff, and prepared a response. This figure comes from a customer case published by the service company and needs separate verification.

Medical-device company Medtronic believed that only 29 companies directly supplied components for one product. When Everstream traced the relationships further, it said more than 13,000 companies appeared through the fourth tier.

According to the service company, it had previously taken about four months to learn about an incident at the fourth tier, while after the connections were mapped it could learn about risks almost immediately. A small manufacturer does not need to investigate all 13,000 companies, but a single critical component can still depend on more hidden suppliers than expected.

Four things you could build from this

1. Post-disaster alerts for affected orders

• What it does: Overlays disaster areas with supplier factories and shows affected raw materials, production schedules, and customer orders in priority order.
• Who uses it: The owner of a plastic injection-molding or metal-processing company with around 12 employees, where production depends on several imported materials.
• Why now: Risk news arrives quickly, but order and supplier information is scattered across spreadsheets and phones, so finding the actual impact takes time.
• First screen: Show the number of at-risk orders, expected delivery dates, and suppliers that have not yet responded before showing today’s incidents.

2. A managed service for building supplier contact networks

• What it does: Organizes scattered supplier lists and sends suppliers an input link to collect next-tier suppliers and emergency contacts on the customer’s behalf.
• Who uses it: A procurement team at an industrial pump manufacturer that rebuilds its contact files whenever a staff member changes.
• Why now: As real adoption cases show, the difficult work is supplier participation and information updates, not building the screen.
• First screen: Show each supplier’s invitation status, response status, last verification date, and information-sharing scope in one row.

3. A single-source dependency review service

• What it does: Analyzes uploaded purchase records to find critical items concentrated with one supplier, one country, or one factory, then prioritizes responses.
• Who uses it: A finance manager at a cosmetics-container manufacturer that buys materials through domestic distributors but does not know the real production country.
• Why now: Buying locally does not reveal whether that distributor depends on a single overseas factory.
• First screen: Show items with no alternative source, how long remaining inventory can last, and three questions that need checking.

4. An alternative-supplier ledger with verification records

• What it does: Helps users find candidate suppliers with sample-testing and actual delivery records, alongside processing methods, materials, equipment, and delivery regions.
• Who uses it: A quality manager at a machinery-parts company that must find an alternative supplier within days when its existing plating supplier stops operating.
• Why now: Finding alternative suppliers is widely reported as difficult, and a list of company names alone cannot establish quality or delivery reliability.
• First screen: After users enter a required process and material, show contactable candidates, test history, minimum-order conditions, and the date each record was last verified.

Why this matters where you are

You can check whether purchasing teams in your market know the suppliers behind their direct suppliers, and how long it takes them to assess an affected order after a disruption. The agencies, datasets, and supply-chain structure will differ by market, but the underlying need is the same: collect supplier connections before an incident and verify them repeatedly. A small test can start with a few critical items, clear information-sharing rules, and a regular contact drill.

What to check today

Call three manufacturing procurement managers for 10 minutes each. Ask how long it took them to check beyond their direct suppliers during their most recent supply delay, and whether they would enter connection information for five critical items. If two of the three have experienced a process taking more than half a day and say they would try it if they could control the scope of information disclosure, a small pilot combining contact-network building and order-impact alerts may be worth testing.