Supplier Due Diligence in Ukraine: What the Register Proves and What It Is Allowed to Show
A registered company and a working supplier are two different findings
A European buyer that has already identified a Ukrainian supplier, manufacturer, contractor or distribution partner is past the question of whether Ukraine belongs in its supply base. What remains is whether this company is legitimate, capable of the work and safe enough to contract with on the terms proposed.
Verification answers that in layers, and the layers are not interchangeable. Legal existence establishes nothing about who controls the company, and control establishes nothing about whether the person offering to sign can bind it. Neither shows that the plant presented to the buyer is controlled by the counterparty, staffed as described or able to release capacity to a new customer. Whether revenue quality supports an investment thesis is a separate exercise, belonging to commercial due diligence rather than counterparty verification.
What Ukraine's corporate record now shows, and what it has stopped showing
Ukraine's corporate information sits in one place. The Unified State Register of Legal Entities, Individual Entrepreneurs and Public Organisations, held by the Ministry of Justice, carries the registration code, status, registered address, activity classification, shareholders and authorised signatories. Basic searches are free, and since 19 January 2026 the Ministry has again published register datasets as open data with weekly updates, after almost four years of suspension on security grounds.
That reopening arrived alongside a countervailing movement which matters more than the reopening itself. Law No. 4576-IX, in force since 18 November 2025, created a special regime for register information lasting through martial law and for a year afterwards. Under Cabinet Resolution No. 1737, electronic extracts from the property rights register now show only country and region for real estate held by legal entities, with the cadastral number withheld, and Cabinet Resolution No. 1257 allows an enterprise in the defence-industrial sphere to have its own information restricted in public registers, including in commercial databases and the court record. A sparse or unusually clean record is therefore no longer reliable evidence about a company, since it may be the intended result of an authorised restriction, and verification now has to separate an absence of adverse findings from an absence of visible data.
Ownership data that is public, deferred by design, and commercially live
Ukraine's beneficial ownership regime is transparent in form. Under anti-money-laundering legislation in force since 2020, most legal entities must declare their ultimate beneficial owner and file an ownership-structure diagram in the same public register record, and the statutory test turns on decisive influence rather than a fixed shareholding, so a person holding no registered shares can be the declared owner.
Reliability is a separate matter. Filing deadlines are suspended for the duration of martial law, penalties for failing to update ownership data do not apply until three months after it ends, and the revised form permitting automated checking takes effect only ninety days after it is lifted. A populated ownership field may therefore be years out of date, and an empty one may be entirely lawful.
The discrepancy procedure gives this layer its commercial force. Banks and other regulated entities that identify an inconsistency must notify the Ministry of Justice, the registrar records a note of possible inaccuracy, and an unanswered request leads to the ownership data being struck out. A bank in that position must stop servicing the client, so a flagged or missing entry warns that the counterparty may shortly be unable to receive payment at all.
Who may sign, and whose sanctions exposure travels
Authority is a distinct finding from existence. The register records the head of the company and any other persons who may act on its behalf, together with restrictions on their powers, and Ukrainian courts treat those entries as reliable evidence of representation. It cannot show whether a commitment falls within the approval thresholds set by the charter, so a buyer taking on a long-term or high-value obligation should obtain the charter and corporate approvals, and put enforceability to qualified counsel.
Sanctions screening has a similar shape and a sharper consequence. Ukraine maintains a free State Register of Sanctionscovering national designations and court rulings, while EU, UK and US lists apply independently. Screening the entity name alone has become insufficient. The EU codified definitions of owning and controlling into its Ukraine-related asset-freeze regulation in October 2025, setting ownership at fifty per cent or more of proprietary rights, and in March 2026 the Court of Justice held that a fifty per cent holding by a listed person creates a rebuttable presumption that the company's funds must be frozen even where the company itself is unlisted. A counterparty can pass a name screen and still have its accounts blocked by its own bank, so any listed connection among shareholders, directors or beneficial owners belongs with specialist counsel before money moves.
Filed accounts prove a history, not the capacity to perform
Financial disclosure follows enterprise size. Public-interest entities, large companies and medium-sized enterprises publish audited annual statements on their own websites, and such statements are expressly not commercial secrets, while small and micro enterprises sit outside the obligation altogether. Filed accounts are also historical, and in Ukraine the gap between reported history and present capacity is unusually wide.
More current evidence sits in the Unified State Register of Debtors and in insolvency notices published on the judiciary portal, although court publication can be delayed or restricted, so a nil result is weak evidence. Where an advance payment or extended credit is proposed the buyer is funding working capital, and should ask about banking relationships, security already granted over assets and the source of funds for this contract.
From claimed capacity to capacity that is actually available
No register establishes production capability, so this layer rests on primary evidence and on the buyer's own testing. The distinction that does the analytical work separates capacity that is claimed, capacity that is installed, capacity that is uncommitted and capacity that can be sustained, and a counterparty can be honest about a nameplate figure that assumes three shifts, uninterrupted power and no competing orders.
Almost all of that evidence has to come from the counterparty and be reconciled item by item rather than accepted as a capability pack, with one third-party exception. Where the counterparty has supplied Ukrainian public buyers, ProZorropublishes award and contract data showing what was delivered, to whom and at what value.
What physical verification adds, and why it still needs corroboration
Physical verification answers questions documents cannot. It shows whether machinery is installed and running rather than stored, whether the people described are present and doing the work, whether the line is producing for the counterparty or for another customer, and whether maintenance and quality practice match the standard promised. With the property register now withholding corporate location data, title confirmation belongs with the visit.
A visit is not self-validating. Sites can be prepared, production scheduled for the day and idle equipment presented as available, so observation is worth what its corroboration is worth. It should be tested against the production records for the periods observed, calibration files, utility invoices and contactable customer references.
Certificates that exist, and systems that produce evidence
Certification evidence is frequently over-read. A certificate establishes that a body assessed something on a date, so its value depends entirely on the entity, site and product family named in its scope. The more demanding test is whether the system produces the records the buyer and its own customers require, batch by batch, which is answered by requesting twelve months of traceability and non-conformance records rather than the certificate itself.
For product placed on the EU market, the conformity assessment agreement that would make Ukrainian certificates acceptable has not been concluded. Ukraine adopted harmonising legislation in April 2026 covering accreditation and technical regulation, with machinery, low-voltage equipment and electromagnetic compatibility as the first sectors, but until it takes effect a Ukrainian certificate does not substitute for EU conformity assessment. Where customers impose traceability, origin or ESG reporting obligations, those requirements belong in qualification rather than in the first delivery.
Power, people and the counterparty's own continuity
Resilience at counterparty level has become one of the more testable layers, because Ukraine's protective mechanisms generate documents. The United Nations human rights monitoring mission recorded that attacks through the 2025 to 2026 winter cut generation capacity and forced nationwide scheduled restrictions, and the transmission operator disconnects industrial consumers first where the system allows. Backup generation capacity, fuel arrangements and the share of the process that can run on them therefore determine whether a plant keeps producing, and each is verifiable by inspection and invoice. Energy continuity planning in Ukraine sits behind this assessment.
Workforce protection is equally documentary. Ukrainian employers retain military-age staff through critical-enterprise status and employee reservation, and the rules tightened during 2026. Reserved employees must now be paid at least three minimum wages, and every previously granted status had to be revalidated against new criteria by 1 September 2026, so a certificate issued earlier in the year no longer proves current standing. With martial law and mobilisation running to 31 October 2026 under the twentieth extension since February 2022, current status and reservation coverage should be requested for the roles the contract depends on.
What each verification layer can and cannot establish
Verification layer | Evidence available in 2026 | What it establishes | What it does not establish | When deeper verification is justified |
|---|---|---|---|---|
Legal existence and identity | Unified State Register record and weekly open-data extracts covering status, legal form, registered address, activity codes and charter capital | That the entity exists, is not in liquidation, and is the entity named in the draft contract | That it trades, produces, employs anyone or controls any asset, and defence-sector data may lawfully be withheld | The record is thin or newly created, or the registered address does not correspond to the operating site |
Ownership and control | Beneficial owner and ownership-structure fields in the same record, plus any registrar note of possible inaccuracy | The declared ownership chain and controlling person, and whether a third party has challenged the entry | Actual control exercised contractually, through family or informally, and entries may be years old given suspended deadlines | A legal entity or foreign holding appears in the chain, ownership changed recently, or the field is empty or flagged |
Authority to contract | Register data on the head and other authorised persons, including recorded restrictions, with the charter and corporate approvals available on request | Who may represent the company and whether limits on representation are recorded | Whether this transaction, at this value, requires shareholder or supervisory approval under the charter | Value is material relative to charter capital, the signatory is not the registered head, or a power of attorney is offered |
Sanctions and compliance | Ukrainian State Register of Sanctions, EU, UK and US lists, and the ownership data behind the entity | Whether the entity or a named individual is itself designated | Whether the entity is caught by ownership or control tests applied to a listed shareholder, which is a legal assessment | Any shareholder, director or beneficial owner is listed or connected, or ownership passes through a higher-risk jurisdiction |
Financial standing | Published audited accounts for medium and larger enterprises, the debtors register, and enforcement, insolvency and court records | Reported historical performance, disclosed liabilities, and whether enforcement or insolvency is on foot | Current liquidity, working capital available for this contract or how an advance payment would be used, and small enterprises need not publish at all | Advance payment, tooling investment or extended credit is proposed, or filings are absent or discontinuous |
Technical and production capability | Equipment and asset lists, title or lease documents, payroll and energy records, production and maintenance records, public procurement award history | That identified assets exist and that comparable work has been delivered and paid for | How much of that capacity is uncommitted and available to this buyer across the contract period | Buyer volume is significant relative to claimed capacity, or the product needs customisation, tooling or qualification |
Quality, certification and traceability | Certificates with scope and site annexes, accreditation of the issuing body, calibration, inspection and batch records, customer approvals | That a certificate exists and which entity, site, process and product it covers | That the system produces the records the buyer or its customers require, and Ukrainian certificates are not yet accepted as EU-equivalent | Customers impose traceability, origin or ESG obligations, or the product is regulated in the destination market |
Operational resilience | Current critical-enterprise decision and reservation coverage, backup generation and fuel arrangements, site, input and subcontractor dependency | What protections are in place today and what the counterparty has provided for | That contracted volume continues through a sustained outage or the loss of key personnel | Counterparty is a sole source, the product is hard to transfer, or the site sits close to the front line |
How much verification is proportionate
Diligence depth should follow exposure rather than supplier size, and the threshold to watch is the point at which further verification costs less than being wrong. Relationship type shifts the standard more than any single financial measure, because an agency, exclusive distribution or joint venture arrangement exposes the buyer to the counterparty's conduct and not only to its delivery performance. The positions below are commercial judgement, not a prescribed standard.
How exposure should set verification depth
Exposure driver | Position that keeps verification light | Position that pushes verification deeper | What the deeper work should add |
|---|---|---|---|
Contract value and duration | Single order, short term, standard terms | Multi-year commitment, or value material to either party | Review of audited accounts and continued financial monitoring through the term |
Payment structure | Payment after delivery and acceptance | Advance payment, tooling funding or extended credit | Evidence of working capital, confirmation of banking relationship and account ownership, staged payments or security |
Substitutability | Qualified alternatives available at comparable cost | Sole source, long requalification, or customer-approved supplier | Site verification, capacity testing, and transferability of specification and tooling |
Ownership complexity | Single resident individual shareholder, stable for years | Layered, foreign or recently changed ownership | Ownership tracing beyond the register and enhanced compliance review |
Sanctions sensitivity | No listed connections, low-risk sector | Any listed shareholder, director or connected entity, or higher-risk jurisdiction in the chain | Legal assessment of ownership and control before any payment is made |
Regulatory and customer requirements | Unregulated product, no customer approval needed | Regulated product, origin or traceability duties, customer audit rights | Quality-system audit, records testing and verification of certificate scope |
Operational dependency | Standard catalogue product held in stock | Buyer's own line stops without the input | Resilience verification and continuity evidence tested against contracted volume |
Relationship type | Arm's-length supply | Agency, exclusive distribution, joint venture or shared intellectual property | Management interviews, reference checks, and governance and information rights agreed before signature |
From evidence gaps to a defensible contracting decision
Recurring warning signs are more useful read as evidence gaps than as a list of offences. Unexplained ownership layers, a recent change of shareholder and inconsistency between the register and the counterparty's own account all raise the same question about who benefits from the contract, while discontinuous filings, enforcement entries and tax debt bear on capacity to perform. Claimed capacity the physical evidence does not support, and certificates whose scope excludes the relevant site, bear on delivery reliability. Resistance to reasonable verification and payment instructions to an account other than the contracting party's bear on the integrity of the counterparty, and the second of those should halt matters until explained.
The output should be a record management can defend, which means classifying each material proposition as verified, unverified or contradicted, stating the residual risk and naming what has been referred for legal or technical review. Unresolved items then become contract terms rather than open questions, through staged payments, acceptance testing, audit and information rights, notice of ownership or management change, and a right to reassess. Where the relationship is strategically important or funded in advance, those same items warrant monitoring after signature, since ownership, sanctions status and critical-enterprise standing all change within a normal contract term. The step from desktop screening into supplier qualification and site assessment needs people who can be present, and belongs in the onboarding budget.
What is likely to change, and what will not
Two developments would materially improve verification. Ownership data should become more reliable once martial law ends, because suspended deadlines restart, penalties resume and the revised form with automated checking takes effect, none of which is tied to a calendar date. Conformity assessment should become simpler if the industrial products agreement is concluded. Accession negotiations set the direction, with the fundamentals cluster opened in June 2026subject to interim benchmarks and seven of thirty-three chapters open.
Three constraints will probably persist. Selective closure of register data on security grounds will remain part of the environment, so absence of data will keep requiring interpretation rather than reassurance. No register will establish available capacity, which keeps capability verification a manual exercise. And the distance between legal existence and the ability to perform a specific contract is not a transparency problem that better data resolves. A supplier can be legally real and commercially weak, financially active and operationally incapable, well equipped and fully committed elsewhere, clean on a name screen and compromised through a shareholder. Verification is worth taking to the depth at which a buyer knows which of those it has proved, and which it has merely been told.
