Pharma supplier risk monitoring that tells you which products a warning letter reaches, within the hour
Warning letters and disasters at supplier sites flagged within the hour.
See one case, screen by screen ↓Watching the supplier sites behind your medicines — API makers, key starting material makers, packaging and device suppliers — for regulatory actions, hazards, financial and trade events, and working out what each one means for supply. Supplier Risk Monitoring adds seven agents that map each signal to the site it hits and trace it to products, weeks of cover, second sources and filings, for the risk lead to decide.
How to choose AI solutions for life sciences →
Updated
A warning letter, an import alert, a typhoon track or a credit downgrade at a supplier site usually reaches the sourcing team days later — through trade press, or through the supplier's own notice, which the supply agreement asks for within five business days and which often comes late. Then someone has to work out whether it is even our site: the same group runs several units, a group name alone is not a match, and the key starting material makers at tier 2 are rarely in the vendor master.
Working out what the action reaches takes longer still: which products and markets sit behind the site, how many weeks of cover remain once held lots are left out, which second source is approved in which filing, and whether a prior approval supplement or a shortage notification is now owed. That work runs across ERP, the quality system, the filing register and planning, and every day it takes comes straight off the cover.
Estimated split for one regulatory action at a single-source API site, by hand and with the solution. The team estimate for the whole job by hand is two to five days.
Seven agents read the feeds, pin each signal on the supplier it hits and trace the path to products, cover and second sources; the risk lead decides.
Northwind Bio watches 214 supplier sites in 31 countries. On 7 October at 06:12, two new FDA items reach the signal tape: warning letter 320-26-41 and an Import Alert 66-40 entry for Hanvar Fine Chemicals in Vapi, India. Here is what happens next, screen by screen, in the working solution.
Omar's home is the graph: tier-2 suppliers, tier-1 supplier sites, critical materials and products with their annual sales. Single-source paths are drawn thick, second approved sources dashed — $11.3B of sales sit on single-source paths. Signals already read are tags on their sites: Typhoon 58 km on Kestrel Taizhou, CCC+ on Lumen Glass, Duty 25% on Shenlan Biochem, Port +6 d on Corlis Penang. Two new FDA items wait on the signal tape.
“Reading 96 feeds every 15 minutes · 214 supplier sites in 31 countries.”
The signal reader takes the event, firm, FEI, address and dates from warning letter 320-26-41 and the Import Alert 66-40 entry. The site matcher lands them on Hanvar Vapi Unit II — FEI 3009817742 and Plot 214/2, GIDC Phase I. The thick path lights through talmirex sodium to Talmirex 20 mg tablets ($0.7B US) and Talmirex 40 mg tablets ($0.5B US).
“Vapi Unit II is the only US source of talmirex sodium · $1.2B of US sales on the path.”
Hanvar also runs Vapi Unit IV, which makes talmirex hydrochloride for Talmirex oral solution. Neither the letter nor the alert names it: different FEI (3011094418), different address (Plot 88, Phase III). It is logged on the site with no alert and stays on watch because it shares the group quality unit. Of 41 signals read in 24 hours, 9 matched our sites, 1 was a near miss and 31 were set aside, each with the reason.
The site matcher never matches on a group name alone — it names the unit.
The alert writer raises A-1042, FDA warning letter and import alert, on Hanvar Vapi Unit II: score 91, Talmirex 20 mg and 40 mg tablets, $1.2B a year, 23.3 weeks of cover, owner Omar Haddad. It sits above the Lumen Glass credit downgrade, Typhoon Haleka near Kestrel Taizhou and three other open alerts.
The dependency mapper traces Vapi Unit II to talmirex sodium and to both tablet strengths, US and EU. The impact and cover calculator reads 412 kg on hand, 96 kg held at the port, 29 kg a week and 9.1 weeks of finished goods. The alternate source finder finds Meridian Química in Tarragona, approved for the EU, with 180 kg by 30 November. The regulatory impact checker finds the US filing names Unit II only.
“US filing names Unit II only · a new site needs a prior approval supplement · cover under 26 weeks: shortage notification assessment.”
Cover is the API on hand at Raleigh — 412 kg, 388 released and 24 in test, at 29 kg a week — plus 9.1 weeks of finished goods: 23.3 weeks for the 20 mg, 26.8 weeks for the 40 mg. The EU is supplied from Tarragona, and the oral solution is not affected. Every number cites its source row, and the warning letter opens beside it with the passages highlighted.
The 96 kg held at the port is not counted as cover until FDA releases it.
A: bring Tarragona into the US filing — a prior approval supplement now and a 180 kg order, first US lot release about week 22, inside the 23.3 weeks. B: ask FDA to exclude talmirex sodium from the alert with independent batch testing — outcome uncertain, 9–20 weeks. C: wait for Hanvar — removal from Import Alert 66-40 typically takes a year or more after re-inspection. Option A is suggested, with six tasks and owners.
The regulatory impact checker advises only — regulatory decides, and no agent files or notifies a regulator.
The alert writer drafts the letter to Rakesh Varma, Hanvar's managing director, for Sam Patel to send. It cites clause 9.3 — written notice of any warning letter or import alert within five business days, not yet received — and asks by 14 October for Hanvar's FDA response and corrective action plan, the status of the 96 kg held at the port and, under clause 14.2, the technical information to qualify a second source.
Agents draft supplier messages; people send them.
Omar approves “Bring Tarragona into the US filing” for A-1042, with the reason prefilled in the sign dialog: “Cover is 23.3 weeks; Tarragona recovers US supply in about 22 weeks if we file this month. Exclusion request kept as a fallback.” He signs with his password; six tasks will go to their owners.
Meaning of signature: “I approve this response plan.” Name, date and time are recorded in the audit trail.
A-1042 moves to Mitigating. Dana Okafor orders 180 kg from Tarragona by 9 October; Priya Raman files the prior approval supplement by 23 October and decides on a shortage notification by 14 October; Dr. Maya Chen confirms Tarragona for US supply in the quality system by 16 October; Lena Ortiz, the supply planner, holds the 412 kg for US Talmirex and allocates the 40 mg strength; Sam Patel asks Hanvar for its response and CAPA plan.
“Signed · A-1042 is now Mitigating · 6 tasks sent to their owners.”
The same import alert, seen by the five people who carry the response — what their week looked like, and what it looks like now.
Seven agents read the feeds, pin each signal on the supplier it hits and trace the path to products, cover and second sources; the risk lead decides.
Reads every feed — FDA warning letters and import alerts, EU non-compliance reports, news in 6 languages, weather and seismic, credit, trade and sanctions notices, supplier mail — and pulls the event, firm, address, FEI and dates, quoting the sentence each comes from.
Builds and refreshes product → material → supplier site, two tiers deep, every night from bills of materials, the approved supplier list, the vendor master and supplier surveys, and marks single-source paths per market.
Resolves each signal to a supplier site by FEI or DUNS, then address, legal entity, parent and distance — or explains in one line why it is not ours, including near misses in the same group.
Works out weeks of cover per product and market — released and in-test material against planned weekly use, plus finished goods — and the time to recover for each option.
Finds second sources and ranks them by approval status per market, capacity, lead time and price, and asks suppliers for capacity when needed.
Reads section 3.2.S.2.1 of each filing to list the ones that name the site, the change each option needs — a prior approval supplement, an EU variation — and flags cover under 26 weeks for a shortage-notification assessment.
Writes the cited alert — what happened, impact, cover against time to recover, two or three options with one suggested and why, and the tasks — and drafts the supplier message citing the agreement clauses.
Decides the response. The agents propose; a named person decides.
Ask what a signal means for your products, what depends on a site, or tell it what to watch. Every answer carries its citations.
Is there a second source for talmirex sodium?
Yes — Meridian Química, Tarragona. It is approved for the EU but not named in the US filing, so US use needs a prior approval supplement (4-month review goal). Meridian can release 180 kg by Nov 30 and 120 kg a month from January. If we file this month, US supply recovers in about 22 weeks — inside the 23.3 weeks of cover.
Do we owe FDA a shortage notification?
Probably an assessment, not yet a notice. Talmirex US cover is 23.3 weeks, under the 26-week line, and the recovery plan lands at about week 22. The response plan includes a task for Priya Raman to decide by Oct 14. EU reporting is not triggered: EU supply continues from Tarragona.
Which single-source materials come from China?
Two single-source materials start in China, both tier 2 — which is why they rarely show up in a vendor master: KSM-7 from Kestrel Pharmachem, Taizhou → Calder Linz → Corventa ($2.6B), with the Typhoon Haleka alert open; and KSM-T3 from Yanhe Intermediates, Linyi → Hanvar Vapi Unit II → Talmirex. Orbefil base from Shenlan Biochem is dual-sourced with Tarragona.
Alert me when a supplier’s credit rating drops two notches
Done — new rule “Credit drops two notches”: any rating action of two notches or more on a supplier or its parent raises a Financial alert, owned by Dana Okafor. Run on today’s data it would have caught one: Lumen Glass AG, B− to CCC+ — already alert A-1041.
13 screens from the working solution, on its sample data. Pick one to see it large.
What to watch, when a signal raises an alert and who owns it are settings — each shows what it would catch today, and changes are versioned.
| Setting | Default | Choose from |
|---|---|---|
| What to watch | 10 feeds, checked every 15 minutes | FDA warning letters · FDA import alerts · EU non-compliance reports · FDA inspection classifications · trade press and news · weather and seismic · credit · trade and export control · sanctions · supplier notices — each on or off |
| Hazard distance | 150 km | Step up or down — today Typhoon Haleka, 58 km from Kestrel Taizhou, raises an alert |
| Earthquake size | M5.0 within 50 km of a site | Step up or down |
| High severity below | 26 weeks of cover on a single-source path | Step up or down — 3 open alerts are high at 26 weeks |
| Same-group check · Reach tier 2 · Filing check | On | Each on or off |
| Who owns each alert type | Regulatory and natural hazard: Omar Haddad | Omar Haddad · Dana Okafor · Sam Patel · Dr. Maya Chen · Priya Raman · Lena Ortiz |
| Dependency map refresh | Nightly at 02:00 | Bills of materials and the vendor master from ERP, the approved supplier list from the quality system · or refresh now |
| Changes need a person | Category manager accepts | New or removed sources wait before the map changes · tier-1 supplier survey every 6 months |
Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.
“demo” = seen in the working solution, on its sample data · “target” = the design goal, measured in the live solution · “estimated” = our estimate (by hand: two to five days, team estimate) · “typical” = published figures (FDCA 506C and FDA's guidance on notifying FDA of a permanent discontinuance or interruption in manufacturing — six months ahead, or as soon as practicable and no later than 5 business days after; published supply risk-sensing case studies on seven-figure cost avoidance within six months). People, companies, sites, products, filings and documents named on this page are fictional — characters and sample data in the working solution.
Watching the supplier sites behind your medicines — API makers, key starting material makers, packaging and device suppliers — for regulatory actions, hazards, financial and trade events, and working out what each one means for supply. Supplier Risk Monitoring adds seven agents that map each signal to the site it hits and trace it to products, weeks of cover, second sources and filings, for the risk lead to decide.
The signal reader pulls the firm, FEI, address and dates from the letter or alert entry. The site matcher matches on FEI first, then address, legal entity and parent. A group name alone is never a match, so a sister unit with a different FEI and address is logged as a near miss with the reason.
Yes. The dependency mapper reads the sources your tier-1 suppliers declare in a survey every six months, so key starting material makers appear on the graph two tiers deep, and signals at their sites are matched like any other.
The impact and cover calculator adds released and in-test material against planned weekly use to finished-goods weeks, per product and market, and cites the source row for each number. Held or detained stock — such as lots held at the port of entry — is not counted until it is released.
The regulatory impact checker lists the filings that name the affected site, the change each option needs — a prior approval supplement in the US, a variation in the EU — and flags cover under 26 weeks for a shortage-notification assessment. It advises only; regulatory decides, and no agent files or notifies a regulator.
Yes. The agents propose options; a named risk lead chooses, gives the reason and signs. Supplier letters are drafted by the agents and sent by people, no agent places an order, dependency map changes wait for the category manager, and supplier approval stays in the quality system.
Yes. The feeds watched, hazard distance, earthquake size, the cover threshold for high severity, the same-group, tier-2 and filing checks, and the owner of each alert type are settings. You can also describe a new rule in one sentence and approve it; rule changes are versioned.
The Agentic Solution Engine builds and deploys it from your requirements and documents — your bills of materials, approved supplier list, vendor master and supply agreements — and it goes live once every quality gate has passed. We will walk you through it on your own suppliers first.
Any backorder or stock question answered in seconds, from the source systems.
1-min demoNo-Code Agent BuilderA new data assistant built by an analyst in minutes, with no code.
1-min demoDrug Shortage Early WarningRanked, cited shortage alerts raised weeks before stock runs out.
1-min demoWe'll run Supplier Risk Monitoring on your own bills of materials, supplier sites and recent regulator actions.