Supplier Due Diligence in Ukraine: What the Evidence Proves

On 19 January 2026 Ukraine’s Ministry of Justice resumed publishing its register of legal entities as open data refreshed every week, ending a suspension of bulk access that had begun in April 2022. The dataset names founders, beneficial owners and managers across a population that the State Statistics Service counted at 1,572,225 legal entities on 1 July 2026. It deliberately omits where each entity is located, which activities it has registered and how it can be contacted. For anyone conducting supplier due diligence, Ukraine in 2026 therefore offers an unusual evidence environment.

Official records say a great deal about who a company is and who is recorded as owning it and signing for it. They say much less about where it operates, what it owns and what it can produce, and several of those gaps were created by legislation adopted since 2022 to protect defence and infrastructure enterprises. The record can settle identity questions with some confidence while leaving capability questions largely untouched.

This analysis takes the wider conditions for doing business in Ukraine as given and concentrates on one named counterparty, whether a supplier, manufacturer, distributor, agent, contractor or joint venture partner. It asks how far public and official evidence can establish that counterparty’s legitimacy, ownership, authority, sanctions position, financial standing and capability, and where that evidence stops. A second question follows directly, because once the record runs out, the further evidence worth obtaining depends on what the buyer loses if an unresolved point proves wrong.

Source: UA Consulting, compiled from Ministry of Justice open data, NSDC, State Tax Service, Cabinet Resolution No. 1737, State Customs Service and European Commission guidance

What the register settles about identity and authority to sign

The Unified State Register of Legal Entities, Individual Entrepreneurs and Public Formations (USR) is the authoritative record of whether a Ukrainian legal entity exists. Under Law No. 755-IV it records the entity’s name, identification code, legal form, founders and their shares, charter capital, the head and other persons entitled to act for it, any restrictions on that representation, and status markers such as termination or bankruptcy proceedings. The same law treats information entered in the register as reliable in a dispute with a third party, unless that party knew or could have known it was wrong. For anyone seeking to verify a Ukrainian company, this is the one layer where an entry carries a legal presumption in addition to descriptive value.

That presumption has practical weight for authority to contract. In a ruling of 3 December 2025, the Grand Chamber of the Supreme Court held that a contract stating that a director acts under the charter does not by itself show the counterparty had read the charter. It treated checking the register for the director’s powers as reasonable diligence on the counterparty’s part. The register settles who is recorded as head and whether registered limits on representation apply. It does not show whether internal documents required shareholder or supervisory board approval for a particular transaction, and whether an unapproved contract would bind the company is a question for counsel.

When the signatory is someone other than the head, the evidence shifts to a power of attorney. Under a regulation approved by the Cabinet in August 2025, any interested person can scan the QR code on a notarial document in the state Diia application and see whether the document is present in the electronic notarial system. That check establishes that a notarial instrument was issued. The reviewed sources do not establish whether it also reports revocation, so the scope of the powers and their continuing validity still have to be read from the instrument and confirmed with the issuing company.

Throughout this analysis, counterparty verification means establishing facts about one named entity from three kinds of evidence. National registers establish facts as recorded on a given date, and some of those records are declarations the state does not check in advance. Documents supplied by the counterparty can extend the evidence considerably, although they come from the party with the strongest interest in the outcome. Operational checks, including site visits, test specific claims at a specific moment, and none of the three establishes how the counterparty will perform over the life of a contract.

Recorded ownership is a declaration, and it can arrive late

Ukrainian law defines the ultimate beneficial owner (UBO) as the natural person who exercises decisive influence over an entity, including through a direct or indirect holding of at least 25% of capital or voting rights, and it excludes nominees and agents from the definition. Entities file an ownership structure alongside the UBO details. Since amendments that took effect on 29 December 2022, the former annual confirmation has been abolished and changes must be filed within 30 working days of occurring.

Two features limit what the entry proves about beneficial ownership in Ukraine. The information is supplied by the entity itself, and the registrar’s checks operate after filing, through a procedure revised in 2025 under which the registrar can demand explanations within 10 working days. Under transitional rules explained by the Ministry of Justice, liability for missing or late UBO filings also does not apply during martial law, with filings due within three months after it ends. An entry therefore establishes the ownership position the entity has declared at its last filing, and it does not establish that the declaration is current.

The deeper limit concerns control, which a declared structure may not capture. The UBO test captures holdings and decisive influence as the entity describes them, whereas the buyer’s practical question is often who makes commercial decisions, who benefits from payments and whether a related party stands behind the supplier. Some of those points can be tested against the chain of founders, the history of management changes and documents the counterparty provides, including shareholder agreements. A civil-society audit under Ukraine’s Open Government Partnership commitments concluded that a unified UBO verification system would involve 21 authorities and 50 registers, which indicates the scale of cross-checking that no single entry performs. Where the gap between declared ownership and actual control changes the contracting decision, its interpretation passes to legal counsel.

Sanctions screening has three stages, and a list answers only the first

Ownership becomes a compliance question as soon as sanctions enter the picture. Ukraine’s State Register of Sanctions, maintained by the Staff of the National Security and Defense Council of Ukraine (NSDC), opened on 1 February 2024 with 17,202 natural and legal persons, and it offers free public access and electronic extracts. EU measures concerning Ukraine’s territorial integrity apply to almost 3,000 individuals and entities. Ukraine brings its own lists into line with EU decisions through specific NSDC decisions, such as one adopted on 30 January 2026, so sanctions screening in Ukraine requires both sources.

A name check against these lists establishes whether the counterparty itself is listed. For an EU buyer, the prohibition also reaches entities owned or controlled by listed persons, and Council Regulation (EU) 2025/2037 of 23 October 2025 wrote that test into Regulation (EU) No 269/2014. Owning now means holding 50% or more of the proprietary rights, and controlling is defined through criteria that include the right to appoint a majority of the board and the de facto exercise of dominant influence. The Commission’s guidance of 6 May 2026 states that no official list of ownership percentages exists, that the assessment falls to compliance and due diligence functions, and that holdings of separate listed persons are aggregated.

The Court of Justice added a further element on 12 March 2026. Interpreting the Belarus regime in Case C-84/24, it held that assets of an unlisted company in which a listed person holds 50% must be presumed to be controlled by that person and frozen, subject to the company’s right to show otherwise. The Commission’s guidance cites the judgment in its questions and answers on the Ukraine-related regime. Screening a Ukrainian counterparty therefore moves through three separate stages, in which name screening establishes listing status and an ownership and control investigation establishes, on the evidence available, whether a listed person stands behind the entity. Whether a given structure actually brings the counterparty within a prohibition is a legal determination, and the same guidance treats control as a factual assessment for national competent authorities.

United States or United Kingdom rules become relevant where the buyer’s own structure or transactions bring it within their reach. Their tests differ in detail, with the US Treasury applying a 50% aggregate ownership rule and UK regulations combining a more-than-50% ownership test with a broader control test. Across all three regimes the analytical consequence is the same. A clean name check shows that the supplier is not listed on the lists checked at that date, and it says nothing about the persons whose ownership or control could bring the supplier within scope.

Financial records describe reported history better than present capacity

Financial standing is the layer where Ukrainian public evidence is widest and its limits are easiest to miss. Law No. 996-XIV requires public-interest entities and large and medium enterprises to publish annual financial statements on their websites. The State Statistics Service also publishes an open dataset of annual statements covering reporting years 2021 to 2025, with the most recent years limited to statements filed in 2026 and the simplified small and micro enterprise forms shown separately for 2021 and 2022. These records establish what the company reported about its assets, liabilities, revenue and result for a past year.

They do not establish current liquidity, the ability to fund working capital for a new order or the reliability of the figures, since the statutory audit requirement does not extend to smaller companies. The timing of filings also needs care when reading these records. Under rules adopted in 2022, companies that did not submit statements during martial law may do so within three months after it ends. A missing year is therefore an inconsistency to be explained and not in itself an adverse fact.

Tax evidence is thinner than it was before 2022. The State Tax Service does not currently publish tax-debt information, citing the risk that disclosure would help identify defence and critical infrastructure enterprises, and the register of VAT payers can be searched only after the user identifies themselves. The service reported that 13,200 businesses met its risk criteria in early August 2026, down from 24,900 at the start of 2025, a status that can lead to the blocking of VAT invoices. The reviewed sources identify no public lookup for that status, so evidence of it has to come from the counterparty’s own tax account.

Enforcement and court records answer narrower questions than they appear to. Under the Law on Enforcement Proceedings, an entry in the Unified Register of Debtors is made when enforcement proceedings open and removed when they end, and the open dataset does not show the amount owed. An entry establishes that an enforceable obligation was unpaid when proceedings opened, without measuring the debt or showing whether it reflects a dispute, a timing issue or financial distress. The Unified State Register of Court Decisions was restored to public access in June 2022, yet publication follows anonymisation and some decisions are withheld from public view, so the absence of a decision does not establish the absence of litigation.

Insolvency evidence is more direct than enforcement or court evidence. The Code of Ukraine on Bankruptcy Proceduresrequires the announcement of opened proceedings to appear on the judiciary’s web portal no later than the following day, and bankruptcy is also recorded as a status in the USR. On 1 July 2026, 3,363 legal entities were in bankruptcy proceedings before commercial courts, according to the Ministry of Justice, roughly 0.2% of all registered legal entities on a UA Consulting calculation from the two official counts. A clean insolvency check therefore excludes one serious outcome while saying little about the ordinary pressures on a supplier’s cash.

For trading history, public procurement is the richest official source. Prozorro publishes contracts awarded, their amendments and a performance report that the contracting authority must post within 20 working days of the contract expiring, being completed or being terminated. A supplier’s history there establishes that it won public contracts of stated value and whether they were reported as completed or terminated early. It does not grade delivery quality or cover private-sector work, and defence contracts containing restricted information are not published during martial law. A new Law on Public Procurement came into force on 24 June 2026 and is due to apply in full from 24 March 2027, and the reviewed sources do not yet show how its reporting rules will change this record.

Evidentiary value of Ukrainian and EU official records for a named counterparty, September 2026

Source: UA Consulting, based on the official sources cited in this section, including Law No. 755-IV, Commission sanctions guidance and Cabinet Resolution No. 1737

Where the public record goes quiet by design

The gaps that matter most for a supplier or manufacturer are concentrated in one group of fields. Law No. 4576-IX, in force since 18 November 2025 for the duration of martial law and one year after, restricts free access to information on defence enterprises’ activities, locations, real property and intellectual property. It also lets such enterprises record a correspondence address in place of their actual location. Cabinet Resolution No. 1737 of 24 December 2025 goes further, removing property addresses and land cadastral numbers from electronic extracts of the real property register for legal entities, while banks with service contracts keep full access.

A second layer of restriction applies to suppliers in the defence-industrial sector. Under Cabinet Resolution No. 1257 of 3 October 2025, enterprises that are critical for the defence-industrial sector can apply to have information about them temporarily restricted in the public electronic registers they specify. Company-level customs records are unavailable to outsiders as well, because the State Customs Service publishes transaction data only in anonymised form. The reviewed sources identify no general register of ownership of industrial machinery, and the register of encumbrances over movable property records pledges and other encumbrances without establishing title.

Taken together, these rules remove from public view much of the data that would link a legal entity to a physical operation, while identity, recorded ownership and management remain visible. That reading is UA Consulting’s interpretation of the combined rules, each of which states its own security objective. The pattern has two consequences for verification, and both shift work from the register to the counterparty. A thin public footprint can be lawful and is not in itself a warning sign, particularly for suppliers serving defence or critical infrastructure. The connection between the entity in the register and the plant presented in a commercial discussion now has to be established from documents the counterparty provides or from observation.

The present position is the product of successive changes since 2022 and not of a single closure. Registers were restricted, reopened through request-based channels and then partly restored, while new instruments such as the sanctions register and an international certificate database appeared alongside the new restrictions. The sequence matters for anyone relying on earlier checks, because a verification method designed before November 2025 may assume access that no longer exists.

Source: UA Consulting, compiled from Ministry of Justice open data, court.gov.ua, State Tax Service, NSDC, Council Regulation (EU) 2025/2037, Court of Justice of the EU and Cabinet of Ministers

From a registered company to proven capacity for this order

Four positions are easily conflated in a supplier discussion. A company can be registered, it can claim a production capability, it can own or control the productive assets behind that claim, and it can be demonstrably able to produce the required product in the required quantity and quality. The public register addresses only the first of these four positions. Each later position requires different evidence, and that evidence becomes more specific to the buyer’s order at every step.

Each step from registration to proven capacity needs different evidence
Evidence that can reach each stage of a supplier’s capability claim
Source: UA Consulting

A capability claim is tested by asking what would have to be true for it to hold. If a manufacturer states a monthly output, the relevant evidence covers whether the equipment exists, whether the company owns or leases it and whether it is maintained and running. It also covers whether the people and inputs needed to run the equipment are available and whether the stated output is plausible for that equipment and staffing. Title or lease documents for the site, invoices and customs declarations the supplier holds for imported machinery, maintenance logs, energy bills and production records typically carry that evidence. None of this amounts to a mandatory list, and the relevant subset depends on which part of the claim the buyer’s decision actually rests on.

Staffing claims can be partly anchored in official data. Annual financial statements report the average number of employees, which gives a historical reference for comparison with a claimed headcount. Current availability of workers is a separate question under general mobilisation and under martial law, which the Verkhovna Rada has extended to 31 October 2026. Employee reservation depends on critical-enterprise status, for which existing holders had to resubmit documents by 10 August 2026 to keep it beyond 1 September 2026, and by that date 86% of defence-industrial enterprises under review had confirmed it. The reviewed sources identify no public register in which a third party can check a given company’s status, so it is evidenced through the decision the company holds.

Physical capacity differs from capacity available to the buyer. A plant can be real, owned and staffed and still be committed to existing customers, so the share of claimed capacity the proposed order would absorb, and the counterparty’s current order book, often matter more than nameplate output. Where the order is large relative to the supplier’s reported revenue or headcount, that relationship is itself worth recording. Delivery history adds a further layer, and it carries most weight when it is documentary, in the form of delivery and acceptance records or public procurement reports, with references serving as a supplement.

Certification evidence has its own chain of validation to work through. A management-system certificate carries weight when an accredited body issued it, when it covers the relevant site and scope and when it is current. The National Accreditation Agency of Ukraine (NAAU) had its signatory status under the European co-operation for Accreditation multilateral agreement confirmed across its scopes in 2024, and it has been a member of the Global Accreditation Cooperation since November 2025. Since 26 October 2024, certification bodies accredited under the international arrangements have been required to upload accredited management-system certificates to the International Accreditation Forum (IAF) CertSearch database. A certificate missing from that database is an inconsistency requiring explanation, whereas one that is found establishes that an accredited body reports a valid certificate for the stated scope and site, without establishing that a product meets a particular customer specification.

Traceability and environmental, social and governance (ESG) evidence becomes part of verification when the buyer’s own obligations or customers require it. The EU carbon border adjustment mechanism (CBAM) entered its definitive regime on 1 January 2026, under which importers of covered goods such as steel, aluminium, cement and fertilisers account for embedded emissions. On such points the register establishes nothing, and the evidence is the supplier’s own data, the verification behind it and, where relevant, the safeguards discussed in the analysis of ESG requirements in Ukraine.

Operational resilience follows the same logic of national context and target-level evidence. Ukraine’s transmission system operator applied hourly outage and industrial power-limitation schedules in all regions on 16 January 2026 and limits for industry again on 30 March 2026. National data establish that constraints recur without establishing how a specific plant is affected. The relevant evidence is target-level, covering backup generation, output during past periods of limitation and the supplier’s continuity arrangements, while the design of protection across the supply chain belongs to the analysis of supply chain continuity from Ukraine.

What a site visit can observe, and what it cannot

A site visit is an evidentiary instrument with a defined reach. Observation can establish whether the facility exists at the address presented, whether the equipment described is physically present and appears maintained, whether production is running and how material moves through the plant and warehouse. It can show whether quality checks are performed as described and roughly how many people are working. It can also show whether the activities attributed to the counterparty are carried out by it at that site, which matters where a trading entity presents a related producer’s plant as its own.

The limits of what observation can establish are equally specific. A visit does not establish who owns the equipment, whether the company is solvent, whether capacity will remain available for the buyer over the contract term or whether the operation complies with regulation. It also records conditions on a single day, which may differ from normal operation. Since Resolution No. 1737 took effect, a visit’s most distinctive contribution may be to connect the legal entity with a physical site, which the property register no longer does remotely, and that connection still has to be tied back to title or lease documents.

Whether a visit is practical depends on place and timing. As of 18 September 2026, UK travel advice advised against all but essential travel to several western regions and against all travel to most other areas. German advice dated 22 September 2026 warns against travel and states that unavoidable business stays require a security plan. Official advice therefore varies by region, changes over time and does not describe conditions at a particular site. The evidence does not support a blanket national judgement on site audits, and the decision rests on the location of the facility, the buyer’s own duty-of-care rules and the weight of the unresolved question.

The case for a visit strengthens as the unresolved question becomes physical. If the decision rests on identity, ownership or sanctions, a visit adds little that documents cannot provide. If it rests on whether specific equipment, processes or scale exist and belong to the counterparty, observation may be the only evidence that tests the claim directly. Where the buyer’s own staff cannot travel, local representatives or independent inspectors can carry out that observation under a defined brief.

Why the depth of verification should follow exposure

The evidence required varies because the cost of being wrong varies. A routine, replaceable purchase paid on delivery exposes the buyer mainly to a failed delivery, and the identity, sanctions and basic financial layers usually settle whether the counterparty is acceptable. A manufacturer receiving tooling, advance payments and a large share of future volume exposes the buyer to prepaid funds and assets at risk, disruption that is slow to reverse and possibly the qualification requirements of its own customers. In that relationship, the unresolved questions about control, capacity and continuity move from the background to the centre of the decision.

Exposure decides which unresolved question becomes material
Features of a relationship, the question each makes decisive and the evidence that addresses it

Source: UA Consulting

None of these features dictates a level of investigation on its own. Each indicates which unresolved question the decision now depends on, and each question has a matching form of evidence. Partner due diligence for a joint venture deepens the control questions further, because the partner’s owners become the buyer’s co-owners, which is part of the wider analysis of strategic partnerships and joint ventures in Ukraine. The same logic applies to a distributor already in the candidate set, a producer shortlisted for contract manufacturing or a supplier in a category chosen through the sourcing decision, and in each case verification follows that earlier decision without reopening it.

Two boundaries keep the exercise proportionate and inside its purpose. Counterparty verification for a trading relationship is distinct from commercial due diligence on an acquisition target, which tests an investment thesis and the business behind it. Where the work moves beyond desktop screening into assessing a supplier’s capacity and performance on the ground, it overlaps with operations consulting and execution support, while formal legal opinions on ownership, sanctions applicability or enforceability remain with counsel.

Recording what was established, what was inferred and what remains open

A contracting decision is easier to make and defend when the evidence is recorded layer by layer with the strength of each finding stated. The distinctions that matter separate a fact established by an authoritative record, a fact asserted by the counterparty and supported by its documents, an inference drawn from several sources and a question that remains open. Each deserves its own verb in the file, because “the register records” and “the company states” carry different weight for a procurement committee or compliance function reviewing the decision later.

Findings that look adverse belong to three different categories. An inconsistency requiring explanation might be a signatory who is not the head recorded in the register, a missing year of financial statements or a certificate that cannot be found in the international database. An adverse fact is established by a record, such as an open enforcement proceeding, a bankruptcy announcement or a recorded owner who appears on a sanctions list. A decision-changing fact alters whether or how the buyer can contract, and a sanctions match on a controlling owner or evidence that the presented plant belongs to another entity would usually fall there. Many inconsistencies have ordinary explanations under current rules, including filing delays permitted under martial law and lawful restriction of defence-sector data, and the file should show how each was resolved.

For higher-exposure relationships, the check does not end at signature. The EU adds names in packages, and its 21st package of 23 July 2026 added 218 listings, while Ukraine applies sanctions through recurring NSDC decisions. Ownership changes reach the USR within the statutory filing period where companies comply, and the register’s open data are refreshed weekly. Re-screening at defined points, such as renewals, increases in volume or advance payments and changes in the counterparty’s ownership, keeps the file aligned with the exposure it was built to support.

What is scheduled to change the evidence before 2031

Few measures with fixed dates will change the Ukrainian record itself. The restrictions under Law No. 4576-IX and Resolution No. 1737 end one year after martial law ends, and martial law currently runs to 31 October 2026 after repeated extensions, so no date for restoring location and property data can be stated. The EU and Ukraine opened the first accession negotiating cluster on 15 June 2026, and the reviewed sources show no opening of the internal-market cluster that contains the company law and capital movement chapters. The Commission’s 2025 report on Ukraine recommends complementing beneficial ownership legislation and giving access to companies’ financial statements through the business register, which sets a direction without a timetable.

Ukrainian legislative change on financial monitoring remains at the proposal stage. Bill No. 14327-д, a revised bill on alignment with the Single Euro Payments Area that also carries financial-monitoring provisions, was registered by members of parliament in April 2026 and was awaiting plenary consideration in September 2026. The reviewed sources show no adopted change to beneficial ownership disclosure, and none can be assumed from a pending bill. An Agreement on Conformity Assessment and Acceptance of Industrial Products (ACAA) between the EU and Ukraine is also an objective and not yet in force, with the Deputy Minister of Economy describing a launch in 2027 as realistic in May 2026. Law No. 4831-IX, in force since April 2026, already provides for recognition in Ukraine of accreditation results from EU member states.

The firmer dates sit on the buyer’s side, and they raise the evidence a foreign company will ask of a Ukrainian supplier. The EU deforestation regulation applies from 30 December 2026 for most operators and from 30 June 2027 for micro and small operators, and the Forced Labour Regulation applies from 14 December 2027. The corporate sustainability due diligence directive (CSDDD), as amended in February 2026, applies to in-scope companies from 26 July 2029 and states that information should be requested from business partners with fewer than 5,000 employees only where it cannot reasonably be obtained by other means. That provision gives official records a larger role in the evidence file. For these obligations the future is law already adopted, whereas for Ukrainian register access the reviewed sources support no defensible five-year forecast.

What the evidence can carry into a contracting decision

For supplier due diligence in Ukraine, official records can establish a good deal about a specific counterparty in 2026. They establish that the entity exists and its current status, who is recorded as head and whether registered limits apply to representation, and what ownership the entity has declared. They show whether the entity or a named person appears on Ukrainian or EU sanctions lists, what it reported financially for past years and whether enforcement or bankruptcy proceedings are recorded against it. For a routine, replaceable relationship, that record often supports the decision without much further work.

What the record cannot carry is the link between the legal entity and a working operation. Since 2022, and more sharply since November 2025, location, activity, property and tax-debt data have been restricted or withheld, and the record never covered equipment ownership, available capacity or quality performance in the first place. Where the buyer’s exposure rests on those points, the decision depends on documents the counterparty supplies, on observation that tests them and on legal advice where control or sanctions applicability is in doubt. The evidence supports a clear distinction between a counterparty verified as a legal person and one whose ability to deliver the specific order has been tested.

To test what the evidence on a specific Ukrainian counterparty can support before you contract, speak with UA Consulting.