Here's a scenario that plays out more often than most merchants want to admit: your top supplier has a production delay. Lead times go from 3 weeks to 8 weeks. You don't have enough safety stock to cover the gap. Your best-selling products go out of stock. Revenue drops 30% for two months.
This isn't bad luck. It's vendor concentration risk -- and it's entirely measurable and largely preventable.
What vendor concentration risk is
Vendor concentration risk is the exposure your business has when a disproportionate share of your inventory, revenue, or margin depends on a small number of suppliers. The more concentrated your supply base, the more vulnerable you are to disruption from any single vendor.
This isn't just about catastrophic events like factory fires or geopolitical disruptions (though those happen). The everyday risks are just as damaging:
- Price increases. A vendor who knows they supply 60% of your inventory has leverage. They can raise prices and you have no immediate alternative.
- Quality issues. If your dominant supplier ships a bad batch, you can't quickly substitute from another source.
- Lead time extensions. When demand spikes and your primary vendor is backlogged, you wait. Competitors with diversified supply chains don't.
- Payment term changes. A concentrated vendor can shift from Net 30 to prepayment because they know you depend on them.
- Business failure. If your 70% vendor goes bankrupt, your business faces an existential threat.
How to measure vendor concentration
You don't need a supply chain degree to quantify this risk. Two metrics give you most of what you need.
The simple share method
Calculate each vendor's share of your total cost of goods sold (COGS) over the last 12 months:
| Vendor | COGS | Share |
|---|---|---|
| Vendor A | $340,000 | 52% |
| Vendor B | $130,000 | 20% |
| Vendor C | $85,000 | 13% |
| Vendor D | $55,000 | 8% |
| Others | $45,000 | 7% |
| Total | $655,000 | 100% |
In this example, Vendor A supplies over half of everything you sell. That's a red flag. The general rules of thumb:
- One vendor above 40% of COGS: High concentration risk. Diversification is urgent.
- One vendor above 25% of COGS: Moderate risk. Start identifying alternatives.
- No vendor above 20% of COGS: Healthy diversification. Monitor but no immediate action needed.
The Herfindahl-Hirschman Index (simplified)
For a more precise measure, use the Herfindahl-Hirschman Index (HHI). It sounds academic, but the math is simple: square each vendor's percentage share, then add them up.
Using the example above:
HHI = 52^2 + 20^2 + 13^2 + 8^2 + 7^2 = 2,704 + 400 + 169 + 64 + 49 = 3,386
How to interpret the result:
- HHI below 1,500: Low concentration. Your supply base is reasonably diversified.
- HHI 1,500 to 2,500: Moderate concentration. Pay attention.
- HHI above 2,500: High concentration. You have significant vendor dependency.
The example scores 3,386 -- well into the high-risk zone. For comparison, if you split your COGS equally across 5 vendors (20% each), the HHI would be 2,000. If you split across 10 vendors equally, it would drop to 1,000.
The HHI is useful because it captures not just the top vendor's dominance but the overall shape of your supply base. A business with vendors at 35%, 30%, 20%, 10%, 5% (no single dominant vendor) has an HHI of 2,450 -- still elevated because of concentration at the top.
Warning signs you're too concentrated
Beyond the raw numbers, watch for these operational signals:
You can't say no to a price increase. If your reaction to a 5% price hike from your main supplier is "we have no choice," that's vendor concentration manifesting as margin erosion.
Lead time disruptions cascade. A two-week delay from your primary vendor affects more than one or two products -- it affects entire categories or your top sellers.
You're not negotiating. In a healthy vendor relationship, both sides negotiate terms. If you're accepting whatever terms your top vendor offers because the switching cost feels too high, the power dynamic is broken.
Your vendor knows more about your business than you'd like. A highly concentrated vendor can see your order patterns, your growth trajectory, and your seasonal peaks. They can use that information strategically -- timing price increases to your peak ordering periods, for example.
Reorders go to the same vendor by default. If your purchasing process doesn't even consider alternatives for your high-volume products, you've built vendor concentration into your operations.
Real-world consequences
The cost of vendor concentration isn't theoretical. Here's what it looks like in practice:
Stockout on your top sellers. Your primary vendor has a production issue. Your top 5 products (all from this vendor) go out of stock for 6 weeks. Those products account for 35% of your revenue. You lose roughly $45,000 in revenue and an unknown amount in customer lifetime value as buyers go to competitors.
Forced margin compression. Your top vendor raises prices 8%. Because they supply 55% of your COGS, your blended COGS increases by 4.4%. On $600,000 in annual revenue at a 40% margin, that's $26,400 in lost gross profit per year -- and you have no alternative supplier ready to fill the gap.
Inventory imbalance. When your primary vendor has excess capacity, they push you to order more than you need ("buy 500 units and we'll give you 10% off"). You end up overstocked on their products and understocked on products from smaller vendors you've been neglecting.
Diversification strategies
Diversification doesn't mean spreading your orders evenly across 20 vendors. That creates its own problems -- higher transaction costs, more relationships to manage, and less volume leverage with each supplier. The goal is reducing catastrophic concentration while maintaining operational efficiency.
Set maximum vendor share thresholds
Establish a rule: no single vendor should exceed 30-35% of total COGS. When a vendor approaches that threshold, actively seek alternatives for your next reorder. This is a policy decision, not a one-time project.
Qualify backup suppliers before you need them
For every product sourced from your top vendor, identify at least one alternative supplier. Get samples. Negotiate terms. Place a small trial order. You don't need to split volume yet -- you need a tested backup you can scale up quickly if needed.
Dual-source your top products
For your highest-revenue products, split orders between two vendors. A 70/30 split gives you most of the volume leverage with the primary while keeping the backup supplier engaged and their production line proven. If the primary fails, you can shift to 30/70 temporarily.
Diversify by geography
If all your vendors are in the same region, you're exposed to regional disruptions (natural disasters, port closures, regulatory changes). Having suppliers in different countries or regions adds resilience.
Build inventory buffers for concentrated products
If you can't diversify a vendor relationship quickly (some products have limited supplier options), increase your safety stock for those products. Yes, it ties up more capital. But it buys you time to react when the inevitable disruption occurs. Calculate the cost of extra inventory versus the cost of a stockout and make the trade-off explicitly.
Negotiate protective contract terms
For concentrated vendor relationships, negotiate terms that protect you: price lock periods, guaranteed lead times with penalties for delays, and minimum fill rate commitments. A vendor who supplies 40% of your inventory should be willing to guarantee service levels.
Tracking vendor dependency in your analytics
The challenge with vendor concentration risk is that it doesn't show up in standard ecommerce dashboards. Shopify doesn't tell you that 55% of your COGS flows to one supplier. WooCommerce doesn't flag when a vendor's share is creeping up quarter over quarter.
You need to track this deliberately. At minimum, maintain a quarterly vendor concentration report with:
- Each vendor's share of total COGS
- HHI score and trend over time
- Lead time reliability by vendor (on-time delivery percentage)
- Margin by vendor (some vendors may be concentrated but high-margin, which changes the risk calculus)
Spark by MishiPay can surface vendor-level analytics across your connected stores. Ask "Which vendor supplies the largest share of my COGS?" or "What's my vendor concentration index?" and get an immediate breakdown. Tracking the trend over time is where the real value lies -- if your HHI is climbing quarter over quarter, you know your diversification efforts aren't keeping pace with your ordering patterns.
The bottom line
Vendor concentration risk is invisible until it isn't. When everything runs smoothly, having a dominant supplier feels efficient -- one relationship to manage, consistent quality, volume discounts. When that supplier stumbles, the efficiency becomes fragility.
Measure your concentration now, while things are stable. Set thresholds. Qualify backups. Build the diversification into your purchasing process so it happens systematically, not reactively.
The merchants who survive supply chain disruptions aren't the ones with the best crisis management. They're the ones who measured their exposure, built alternatives, and were never dependent on a single vendor in the first place.
Know your vendor exposure
Spark analyzes your supply chain concentration across all connected stores. See which vendors hold too much power before it becomes a problem.