The scenario that motivated us to build Apvyne in the first place goes like this: a procurement team has diversified their CM base across four vendors in two geographies. On paper, this looks like responsible supply chain risk management. In practice, all four CMs are sourcing their custom PCB assemblies from the same specialty fabricator—a fact none of them volunteered and that the procurement team had no way to discover through standard supplier qualification processes.
When the PCB fabricator has a capacity crisis, all four CMs are affected simultaneously. The apparent diversification was real at Tier 1. It was an illusion at Tier 2.
Why PCB Concentration Risk Is Particularly Acute
Printed circuit board fabrication occupies an unusual position in electronics supply chains. PCBs are highly customized to the specific product they go into—layer count, copper weight, trace tolerances, surface finish, and specialized materials like Rogers high-frequency laminates or thick-copper power boards. That customization means CMs often work with a small number of PCB fabricators who understand their specific requirements and have qualified their processes against the relevant certifications (IPC Class 2 or Class 3, ITAR-controlled fabrication, UL certifications for high-voltage applications).
The qualification process for a new PCB fabricator is not trivial. It involves design-for-manufacturability reviews, first article inspection, testing against the specific product's functional and dimensional requirements, and often several rounds of iteration before the fabricator is approved for production volumes. This means CMs don't switch PCB vendors casually, and they often end up concentrating volume with a small number of fabricators who have passed their qualification bar.
When multiple CMs converge on the same qualified PCB fabricator—because it's the best option for a given combination of technical requirements and geographic location—each CM makes a rational individual sourcing decision. The aggregate effect on your supply base is a single-source dependency that no individual CM would describe as a risk to their own business.
The Information Asymmetry Problem
Contract manufacturers treat their supplier networks as proprietary. There are legitimate commercial reasons for this: supplier relationships represent years of qualification investment, negotiated pricing, and process knowledge. A CM that reveals its PCB fabricator to a customer is, in some sense, revealing the architecture of its own competitive advantage.
This creates a structural information asymmetry. The procurement team sees four CMs and reasonably infers diversification. The CMs each see their own supply network and have no particular incentive to disclose that their sub-tier structure overlaps with competitors they may not even know you're using.
We're not saying CMs are being deceptive—most simply don't have the data infrastructure to know whether their PCB fabricator is also supplying your other CMs. They know their own supply chain; they don't know the aggregate picture across all of your CMs. That aggregate picture only becomes visible if you have data from all of them in the same place and can run cross-supplier overlap analysis.
How Concentration Compounds Across Multiple CMs
The severity of PCB concentration risk scales with how many of your CMs share the dependency. A single CM sourcing from a sole-source PCB fabricator is a supply risk for that CM's deliverables. Two CMs sharing the same fabricator doubles your exposure on a capacity disruption. Four CMs sharing the same fabricator means a single sub-tier event can affect your entire electronics supply base simultaneously.
The compounding effect extends to lead time recovery. If you have four CMs each delivering 25% of your volume and one has a PCB supply disruption, you can temporarily shift volume to the other three while the first resolves the issue. If all four have the same PCB disruption at once, there is no internal rebalancing option. Recovery depends entirely on the PCB fabricator resolving its capacity issue or on the lengthy process of qualifying an alternate fabricator.
Qualifying an alternate PCB fabricator under normal conditions takes three to six months for a complex board. Under crisis conditions, with production halted and expedite pressure on every qualified fabricator in the market, that timeline gets worse, not better.
The Cascade Scenario
Take a mid-size industrial controls manufacturer with annual revenues in the range of $150–300M and a product portfolio spanning programmable logic controllers, motor drives, and HMI panels. Their electronics supply base includes four established contract manufacturers, each qualified for different product lines based on capabilities and capacity.
A sub-tier mapping exercise reveals that three of the four CMs source their multi-layer PCBs from a pair of fabricators located in the same industrial cluster. Both fabricators are highly qualified and have strong delivery track records. The risk isn't that either fabricator is financially distressed or operationally weak. The risk is geographic: both facilities sit in a region with known flood risk, and both share the same grid connection for industrial power.
Under normal conditions, this concentration is invisible and doesn't affect operations. Under a regional stress event—one that's statistically unlikely in any given year but not over a 10-year horizon—three of four CMs lose their primary PCB supply simultaneously. The recovery path requires either geographic diversification of the fabricator base (which takes months to qualify) or holding substantially higher safety stock of PCB assemblies (which requires capital and has its own risks).
Neither mitigation option is particularly attractive, but both are tractable if you know the risk exists in advance. Neither is available as a rapid response once the disruption has already occurred.
What Procurement Teams Can Actually Do About It
The first step is visibility: knowing which CMs share sub-tier PCB fabricators and understanding the geographic distribution of those fabricators. Without this data, any mitigation effort is speculative.
Once concentration is mapped, the response options depend on the severity of the concentration and the criticality of the affected supply paths. For high-criticality product lines with a single-source PCB dependency spanning multiple CMs, the strategic options are:
Fabricator diversification requirements in CM contracts. Include language in CM agreements requiring them to qualify at least one alternate PCB fabricator in a different geographic location for programs above a certain spend threshold. This transfers some of the diversification work to the CMs themselves, but it requires you to know about the concentration first in order to negotiate the contract language.
Directed supplier introduction. Identify a qualified PCB fabricator that your current CMs aren't using and facilitate introductions between the fabricator and your CMs. This is more hands-on but gives you direct influence over the sub-tier qualification process.
Safety stock strategy calibrated to recovery time. For supply paths where sub-tier diversification is impractical in the near term, increase safety stock of finished PCB assemblies to cover a realistic recovery window. The capital cost of this buffer needs to be weighed against the financial exposure of a production stoppage.
None of these options are costless. But the cost of any of them is lower than the cost of discovering the concentration after a disruption has already occurred—at which point you're making decisions under time pressure with no good options available.
What the Conversation with Your CMs Looks Like
One positive side effect of having sub-tier data is that it changes the quality of conversations with your CMs. Instead of asking open-ended questions about their supply base—which CMs have little incentive to answer comprehensively—you can ask targeted questions about specific concentration patterns you've already identified.
"We see that your primary PCB fabricator is the same facility being used by another CM in our supply base. Can you walk us through your qualification plan for an alternate fabricator?" is a more productive conversation starter than "Tell us about your supply chain risk." The first question signals that you have data; the second sounds like a compliance checkbox.
CMs generally respond well to procurement teams that demonstrate real supply chain knowledge rather than checklist compliance. The conversations that start from "we know your sub-tier structure" tend to be more collaborative and more informative than the ones that start from "please fill out this survey."