Supply Chain and Sanctions Investigations Evidence about who made it, who owns them, and where it went

01Scope

What supply chain and sanctions investigations cover

Three questions sit at the centre of this work. First, was any part of a product made with forced labour, anywhere upstream. Second, is any party in the transaction chain a sanctioned person, owned or controlled by one, or acting for one. Third, did goods subject to export controls reach an end user, end use or destination they should not have. Each question has its own legal regime, but in practice they overlap, because the same opaque intermediaries, trading companies and logistics routes appear in all three.

Supply chain and sanctions investigations are different from routine screening. Screening checks names against lists. Investigation asks what sits behind the names: who owns the supplier's parent, where the cotton or polysilicon or aluminium actually came from, why a distributor in one country is ordering five times what its market can absorb. The output is evidence that a company can rely on when a customs authority, a regulator, a bank or a business partner asks hard questions.

Delator approaches supply chain and sanctions investigations as investigations, not as compliance paperwork. A case lead is assigned, a written scope is agreed, and findings are graded and sourced. Where the work needs boots on the ground in a supplier's country, such as verifying that a factory exists and operates as described, a locally licensed partner in Delator's network carries out that step within local law.

02Forced labour

Forced labour import bans and disclosure laws that drive the work

Forced labour enforcement has shifted from voluntary reporting to import bans with real commercial consequences. In the United States, Section 307 of the Tariff Act of 1930 prohibits importing goods made wholly or in part with forced labour, and U.S. Customs and Border Protection enforces it through Withhold Release Orders and Findings against specific producers or products. The Uyghur Forced Labor Prevention Act, in effect since June 2022, goes further: it creates a rebuttable presumption that goods mined, produced or manufactured wholly or in part in the Xinjiang Uyghur Autonomous Region, or by entities on the UFLPA Entity List, are made with forced labour and are barred from entry.

To overcome the presumption, an importer must fully comply with CBP's guidance, respond completely to CBP's requests for information, and show by clear and convincing evidence that the goods were not made with forced labour. In practice, many importers instead seek to show that their goods fall outside the presumption altogether, by demonstrating with documentary evidence that no part of the supply chain touches Xinjiang or a listed entity. Either way, the burden sits with the importer, and the evidence must trace the supply chain to raw material.

The European Union adopted its Forced Labour Regulation, Regulation (EU) 2024/3015, in late 2024. It will apply from 14 December 2027 and will prohibit placing products made with forced labour on the EU market, making them available there, or exporting them from the EU. Investigations will be risk-based and led by national competent authorities or, for risks outside the EU, the European Commission, which will maintain a database of forced labour risk areas and products. Companies with EU sales have a window now to build the tracing capability that the regulation will expect.

03Tracing

Tracing a product back to its raw material

A finished garment, solar module, battery or car part may pass through five or more tiers of suppliers before reaching an importer. The importer typically knows its direct supplier well, knows less about that supplier's suppliers, and knows almost nothing beyond. Forced labour risk concentrates at the far end, in raw material extraction and early processing, which is exactly where visibility is lowest.

Delator builds the chain from documents: purchase orders, commercial invoices, packing lists, bills of lading, production records, mill certificates, transaction records between tiers, and transport documents showing movement of inputs. Each link is tested for consistency. Quantities should balance across tiers. Dates should make sense against production lead times. A supplier that claims to source from a particular mine or gin should be able to show records that match what that source actually produces and ships.

Documents are then tested against independent evidence. Trade and shipping data can confirm or contradict claimed input routes. Corporate registries reveal whether a supplier shares owners or addresses with listed entities. Open-source research in local languages can surface labour transfer programmes, state-linked recruitment or other indicators that a supplier's own disclosures omit. Scientific methods such as isotopic analysis are used by CBP for some commodities, and where a client commissions such testing, Delator integrates the results into the wider evidence picture.

Why social audits are not enough on their own

Announced social audits capture conditions on the day of the visit and rely heavily on management-provided records. In regions where state-imposed forced labour is alleged, independent auditors have reported that credible audits are not possible at all. Delator treats audit reports as one data point among many, tests them against trade data, ownership research and partner site intelligence, and reports plainly where the evidence does not support the audit's conclusions.

Worker-focused field work through licensed partners

Where a scope includes interviews with workers or verification of conditions at a site, that work is carried out by a locally licensed partner with experience in worker-sensitive inquiries. Worker safety comes first: interviews are voluntary, conducted away from management where possible, and designed so that no individual can be identified as a source. Findings that would expose a worker to retaliation are reported in aggregate.

04Sanctions

Ownership, control and sanctions exposure in counterparties

Sanctions screening tools match names against lists such as OFAC's Specially Designated Nationals and Blocked Persons List, the UK sanctions list and the EU consolidated list. They are necessary and insufficient. Under OFAC's 50 Percent Rule, any entity owned 50 percent or more, directly or indirectly, individually or in the aggregate, by one or more blocked persons is itself blocked, whether or not it appears on a list. An unlisted supplier, customer or joint venture partner can therefore be just as prohibited as a listed one.

The EU and UK apply ownership and control tests that differ in detail from OFAC's approach, and control can arise without majority ownership, for example through rights to appoint directors or influence over how assets are used. That makes ownership and control mapping a core part of supply chain and sanctions investigations. Delator traces ownership through every layer it can document, identifies where shares are held by nominees or trusts, and looks for indicators of control by designated persons through family members, associates or newly formed vehicles.

The stakes are significant. OFAC civil penalties are imposed on a strict liability basis, meaning a company can be liable even if it did not know it was dealing with a blocked party. In April 2024, the statute of limitations for civil and criminal violations of the International Emergency Economic Powers Act and the Trading with the Enemy Act was extended from five to ten years, which lengthens the period over which past dealings can be examined. The UK's Office of Financial Sanctions Implementation has also been able to impose civil penalties on a strict liability basis since June 2022.

• Recent transfers of shares from a designated person to relatives, associates or trusts, especially around designation dates
• Companies whose ownership falls just below 50 percent across several designated holders whose interests may aggregate
• Directors or signatories who also appear in companies linked to designated persons
• Changes of name, registered office or jurisdiction shortly after a related party is designated
• Payments routed through third countries with no commercial reason for the route
• Reluctance to provide ownership information, or ownership documents that do not reconcile with registry records

Maritime and logistics red flags in sanctions investigations

Many sanctions evasion schemes run through shipping. U.S. advisories on maritime sanctions evasion and the Russian oil price cap have described deceptive practices including disabling or manipulating a vessel's automatic identification system, ship-to-ship transfers in open water, frequent changes of flag or name, falsified cargo and origin documents, and complex ownership through single-ship companies in multiple jurisdictions.

For clients in commodities, shipping, insurance and trade finance, Delator's work in this area combines vessel ownership research, flag and classification history, port call records, and analysis of transport documents against what the vessel actually did. The aim is to answer a specific question, such as whether a cargo's stated origin is credible or whether a charterer is linked to a designated party, rather than to produce generic risk ratings.

Logistics providers also matter in non-maritime supply chains. Freight forwarders acting as consignees, transit through free zones, and repeated last-minute changes of routing all deserve scrutiny. Delator looks at the full movement of goods, not only the parties named on the invoice.

05Export controls

Export controls, diversion and the end-user question

Export controls focus on what an item is, where it is going, who will receive it, and what it will be used for. In the United States, the Export Administration Regulations administered by the Commerce Department's Bureau of Industry and Security control dual-use items and impose licence requirements tied to destinations, end users on lists such as the Entity List, and prohibited end uses. Foreign direct product rules extend U.S. jurisdiction to certain items made abroad with U.S. technology or equipment.

Diversion is the risk that keeps compliance teams awake. A product is sold lawfully to a distributor in a permitted country and then re-exported to a restricted destination or end user. Authorities have repeatedly warned that intermediaries in third countries have been used to route controlled items to Russia and other restricted destinations. The United States, EU, UK and Japan jointly published a Common High Priority List of items, such as certain electronic components, that have appeared in Russian weapons systems and warrant heightened diligence.

The EU added a further obligation in its twelfth sanctions package in December 2023: Article 12g of Regulation 833/2014 requires EU exporters to contractually prohibit re-export to Russia, or for use in Russia, of certain goods including common high priority items, when selling to most third countries. Contract clauses only work if someone checks whether they are being honoured, which is where investigation comes in.

How a diversion investigation runs

Delator starts with the client's own data: order volumes by distributor and over time, shipping destinations, payment sources, and any discrepancies between stated end users and delivery addresses. Order spikes that do not fit a distributor's market, payments from third parties, freight forwarders as consignees, and requests to change delivery terms late in a transaction are classic BIS red flags. Trade data can show onward shipments from the distributor's country that match the client's product categories.

From there, the case lead tests the distributor and its customers through registry research, ownership mapping and lawful open sources. Where a site visit or end-user verification is needed in the distributor's country, a locally licensed partner in Delator's network carries it out. Serial number or lot tracing, when the client's products carry identifiers, can tie specific units recovered in a restricted market back to the sale that released them.

06Internal reviews

Supporting internal reviews and voluntary self-disclosure decisions

When a company discovers that it may have violated sanctions or export controls, counsel must decide quickly whether to disclose voluntarily, and the decision turns on facts. How many transactions were involved. Over what period. Which employees knew what, and when. Whether the conduct was isolated or systemic. Whether controls failed or were bypassed. Delator supports counsel in establishing those facts through document review, transaction analysis, counterparty research and, where appropriate, interviews coordinated with counsel.

Voluntary disclosure has real value. Under OFAC's Enforcement Guidelines, a voluntary self-disclosure generally results in a fifty percent reduction in the base penalty amount. BIS and the Department of Justice's National Security Division also have policies that give significant weight to timely, complete voluntary disclosures and cooperation. Disclosures have to be accurate and complete to earn credit, which means the underlying investigation must be careful and well-documented.

Delator's role in these matters is factual. It does not advise on whether to disclose or how to characterize conduct, and it does not communicate with regulators on a client's behalf. It supplies counsel with evidence, transaction schedules and root-cause analysis that make a disclosure credible and a remediation plan specific.

07Due diligence

Pre-transaction and onboarding supply chain and sanctions investigations

Not every engagement begins with a problem. Companies increasingly commission supply chain and sanctions investigations before signing with a new supplier, distributor or joint venture partner, and before acquiring a business whose supply chain they will inherit. An acquirer that buys a company with forced labour exposure in its supply base or a history of sanctions violations may inherit detentions, penalties and remediation costs along with the target's revenue.

Pre-transaction work focuses on the questions that would most change the deal: who owns the counterparty, whether its key inputs come from high-risk regions or listed entities, whether it has sold controlled items into restricted markets, and whether its own compliance documentation holds up under testing. Findings feed directly into deal terms, representations, indemnities and post-closing integration plans. Delator's international due diligence page covers the wider integrity and reputational side of this work.

08Programs

Testing compliance programmes against what regulators expect

Regulators have been explicit about what good compliance looks like. OFAC's Framework for Compliance Commitments, published in 2019, describes five essential components: management commitment, risk assessment, internal controls, testing and auditing, and training. BIS has published Know Your Customer guidance and red flags for exporters. CBP has published operational guidance for importers on the UFLPA and expectations for supply chain tracing documentation.

Investigation evidence is often the most honest test of a programme. If a review finds that a sanctioned party slipped through, the question becomes which component failed: was the risk assessment blind to that market, did screening miss an ownership chain, did a sales team override a hold, or was nobody checking at all. Delator reports root causes in specific terms so that remediation targets the actual failure rather than adding generic controls.

For companies building capability ahead of the EU Forced Labour Regulation, Delator can run a pilot tracing exercise on a high-risk product line. The pilot shows what documentation suppliers can actually provide, where the chain goes dark, and what it would take to close the gaps before authorities begin asking.

09Evidence

Building evidence that customs authorities and regulators will accept

An evidence package for CBP or another authority has to be complete, consistent and traceable. Every claim about origin should be backed by documents that connect to one another, and the package should explain the chain in a way an officer can follow without having to reconstruct it. Gaps should be acknowledged and addressed, not hidden, because inconsistencies discovered by the authority damage credibility across the whole submission.

Delator prepares supply chain maps showing each tier, the documents supporting each link, and the reconciliation of quantities and dates. Translation of supplier documents is handled carefully, since mistranslated product descriptions or company names are a common source of discrepancies. Counsel decides what is submitted and how it is framed. Delator's job is to ensure the factual foundation is solid.

The same discipline applies in sanctions and export matters. Transaction schedules, ownership charts and counterparty profiles are cross-referenced to source documents so that counsel can stand behind every figure in a disclosure or a response to a regulatory inquiry.

10Team

Who carries out supply chain and sanctions investigations at Delator

The case lead is a Delator Group consultant who manages the matter from scoping to final report. Behind that person are consultants whose backgrounds include U.S. military intelligence and the Department of Homeland Security, former law enforcement officers of many kinds, including people with experience in customs and trade-related enforcement environments, and technology specialists who handle trade data, document analytics and digital evidence. The network beyond Delator includes partners holding a wide range of licences and certifications in the countries where field work is needed.

Where a scope includes background checks on employees or individuals, such as the owners or managers of a supplier, Delator leverages a locally licensed partner in its network to complete that work and does not do it itself. Site visits, end-user verification and worker interviews are handled the same way. If a client needs traditional private investigation abroad that falls outside the corporate scope, Delator refers the client to a vetted investigator within its network who holds any licence local law requires and contracts with the client directly.

11Pitfalls

Common mistakes that weaken supply chain and sanctions investigations

Most failed reviews do not fail because the investigators missed something exotic. They fail because of ordinary shortcuts that leave the company with a file that looks thorough until someone tests it. Customs officers, sanctions regulators and counterparties' banks have seen many such files, and they know where to look for weaknesses.

The list below reflects the problems Delator most often has to unwind when it is brought in after an earlier review. Avoiding them from the start saves time and money, and it produces supply chain and sanctions investigations that can withstand scrutiny from a regulator, an auditor or an acquirer's diligence team.

• Relying on supplier declarations or questionnaires without asking for the transaction documents that should support them
• Stopping at the direct supplier because deeper tiers are hard to reach, when the risk sits at the raw material end
• Treating a clean screening result as proof that a counterparty is not owned or controlled by a sanctioned person
• Ignoring aggregation, so that several designated holders each below 50 percent are never added together
• Running reviews in English only when the most revealing information is published in local languages
• Failing to preserve evidence with dates and sources, so findings cannot be exhibited later
• Letting the business team that owns the relationship control the scope of the review
• Producing generic risk ratings that do not answer the specific question a regulator or bank has asked

Keeping the review independent

Commercial teams have every reason to want a supplier or distributor to pass. That does not make them dishonest, but it does mean the scope, the document requests and the conclusions should sit with counsel, compliance or an independent case lead rather than with the relationship owner. Delator reports to whoever the engagement letter names, usually counsel or the compliance function, and records every scope change in writing so the independence of the work is visible on the file.

12Getting started

How to scope a supply chain or sanctions matter

The first conversation usually focuses on the trigger and the deadline. A CBP detention has a response clock. A bank's request for information may come with a deadline for keeping an account open. A transaction has a signing date. Delator scopes the work to what needs to be known by when, and separates urgent tasks from those that can follow.

Clients should bring whatever they already have: supplier lists, purchase and shipping records, screening results, ownership information collected at onboarding, and any correspondence with authorities. The case lead reviews it, identifies the gaps that matter most, and proposes a phased plan with a written budget. Nothing proceeds beyond an approved phase without the client's agreement.

Expect the first phase to end with a clear decision point. The case lead will tell you what the evidence shows, how confident Delator is in each finding, what remains unknown, and what further work would cost and achieve. Some matters end there, because the first phase answers the question. Others move into deeper tracing, field work or evidence assembly for counsel, each under its own approved scope.

Ongoing monitoring once the investigation closes

Supply chains and ownership structures change continuously. A supplier cleared today may add a new input source next quarter, and a customer's shareholder may be designated next month. For that reason, many clients follow a completed investigation with a targeted monitoring arrangement focused on the counterparties and product lines that carried the highest risk.

Monitoring is narrower and cheaper than a full review. It typically covers changes in ownership and directors at key counterparties, new designations and entity list additions that touch the mapped chain, adverse media in relevant languages, and shifts in trade patterns such as a distributor's sudden change in volumes. When a trigger fires, the case lead assesses it and recommends whether a fresh inquiry is needed. This keeps supply chain and sanctions investigations from becoming a one-time snapshot that ages quickly.

Step by step

How an Engagement Works

1. 01

   Trigger and objective

   We clarify what prompted the review, which regimes are in play, and what decision or submission the findings must support.

2. 02

   Written scope

   The case lead agrees suppliers, counterparties, markets, phases, partner involvement and budget in writing.

3. 03

   Document and data review

   Consultants review supplier, transaction, shipping and screening records and reconcile them across tiers.

4. 04

   Ownership and trade research

   We map ownership and control, test claimed origins against trade data, and research counterparties in local languages.

5. 05

   Partner field work

   Where needed, a locally licensed partner verifies sites, end users or individuals within local law, with worker safety built in.

6. 06

   Graded findings and root cause

   You receive risk-graded findings, explanations of control failures and specific remediation recommendations.

7. 07

   Evidence package

   We assemble supply chain maps, ownership charts and indexed documents for counsel's submissions or disclosures.

Deliverables

What You Receive

• Tier-by-tier supply chain maps with supporting documents for each link
• Quantity and date reconciliation across tiers
• Ownership and control charts for counterparties tested against OFAC, UK and EU rules
• Risk-graded findings report with sources and confidence levels
• Diversion analysis covering distributors, consignees and onward shipments
• Transaction schedules supporting counsel's disclosure or response decisions
• Root-cause analysis and remediation recommendations mapped to programme components
• Indexed evidence package suitable for customs or regulatory submissions prepared by counsel

Industries

Who Uses Supply chain & sanctions Services

• Apparel and textilesCotton and fabric chains face intense forced labour scrutiny and frequent detentions.
• Solar and energy equipmentPolysilicon and component chains are a stated UFLPA enforcement priority.
• Automotive and batteriesAluminium, steel, critical minerals and battery inputs pass through many tiers and regions.
• Electronics and semiconductorsCommon high priority items carry acute diversion and export-control risk.
• Food and agricultural productsSeafood, tomatoes and other commodities have been subject to forced labour enforcement.
• Shipping, commodities and trade financeVessel ownership, cargo origin and counterparty control drive sanctions exposure.
• Industrial machineryDual-use equipment and spare parts are frequent targets of diversion through third countries.

Credentials

Who Does the Work

Delator Global's consultants come from backgrounds where finding facts under pressure is the job: U.S. military intelligence, the Department of Homeland Security, former law enforcement officers of every kind, former bounty hunters, and technology specialists across networks, applications, forensics and data. Behind them sits a network of locally licensed partners holding a wide range of licences and certifications, so every part of an engagement is done by someone entitled to do it in that country.

• Military intelligenceCollection planning, analysis and reporting discipline.
• Homeland securityFederal investigative and border, trade and financial crime experience.
• Law enforcementInterviewing, evidence handling and courtroom testimony.
• Bail enforcementLocating people who do not want to be found, lawfully.
• TechnologyNetwork, application, cloud and forensic specialists.
• Licensed partnersLocal licences for the work local law reserves.

Related services

Related Delator Global Services

• CorporateInternational Due DiligenceInternational due diligence answers a simple question that is hard to answer well: who is really on the other side of this deal, and what will we inherit if we sign? Delator Group consultants lead the work for legal, compliance and deal teams, scoping each review to the risk, the jurisdiction and the decision it has to support.
• CorporateInternational Corporate InvestigationsInternational corporate investigations rarely stay inside one legal system.
• CorporateAnti-Bribery and Corruption InvestigationsA suspicious commission to a customs agent, a consultant paid through a third country, a hospitality budget that keeps growing near a tender deadline: these are the facts that start anti-bribery and corruption investigations.
• CorporateInternational Asset TracingInternational asset tracing is the work of finding out what a debtor, a fraudster or a counterparty really owns or controls outside its home country, and where it sits, so that a judgment, an arbitral award or a fraud claim turns into money.
• ConsultingInternational Security ConsultingDelator Global provides international security consulting to general counsel, CFOs, CISOs and compliance leaders who need practical advice on risks that cross borders.

Every Delator Global service

Countries

Where Delator Global Works

Delator Global handles matters in 152 countries, with a country page for each and a city page for every city over 200,000 people. Larger markets are listed below; the full list is on the international page.

• United Kingdom
• Canada
• Mexico
• Germany
• France
• India
• Brazil
• Australia
• Japan
• United Arab Emirates
• South Africa
• Nigeria
• China
• South Korea
• Spain
• Italy
• Netherlands
• Poland
• Turkey
• Philippines
• All 152 countries