Inside the counterfeit parts clause: sourcing, traceability and flowdown

Prevention depends on duties that are agreed once and then rely on supplier behavior for years. Here is what has to be tracked for the clause to mean anything.

What does a counterfeit parts prevention clause require?

A working clause requires four things: procurement from original manufacturers or authorized distributors with franchised-source evidence, documented traceability back to the original manufacturer for every delivered lot, immediate notification and quarantine when suspect parts are identified, and flowdown of the same obligations to every sub-tier supplier. Industry standards such as AS5553 and AS6174 are frequently incorporated by reference, which imports a detailed control set into the agreement.

Last updated: September 24, 2026 · Reviewed by the Aavenir Manufacturing practice

Key takeaways

  • ✓Authorized sourcing is the primary control, and independent-distributor exceptions need an approval path.
  • ✓Traceability is only useful if the records are retained and retrievable for the product life.
  • ✓Flowdown fails silently at the second tier, where nobody checks that the clause was passed on.
  • ✓Suspect part notification duties carry short windows and interact with government reporting rules.

Counterfeit electronic parts remain a persistent supply chain problem, and the primary defense is contractual. Standards such as AS5553 for electronic parts and AS6174 for materiel set out control frameworks, and prime contractors flow the resulting requirements down through their supply base as clauses in purchase agreements and terms and conditions. Those clauses are usually well drafted, frequently incorporated by reference, and rarely managed after signature.

The gap between clause and control is where the risk lives. A supplier agreement may require procurement from franchised sources, complete traceability, immediate notification of suspect parts and flowdown to sub-tiers. Whether any of that actually happens depends on evidence that someone has to ask for, on approval paths for the exceptions, and on a check that the flowdown reached the second and third tier rather than stopping at the first.

This datasheet sets out the duties a counterfeit parts clause creates and what tracking each one requires. The framing is deliberately operational, because the drafting problem in this area is largely solved and the operating problem is not. The organizations that manage this well tend to be those that separated the two questions early: whether the clause is present in an agreement, which is a contracting question, and whether the duties it creates are being evidenced, which is a supplier management question. Conflating them produces a compliance report that counts signatures rather than controls.

The duties the clause creates

Counterfeit prevention clauses vary in length but converge on the same control set. These are the duties that generate ongoing work rather than one-time attestation.

  • Authorized sourcing, requiring purchase from the original component manufacturer or its franchised distributors, with documented evidence of the source chain.
  • Exception approval, governing the narrow circumstances in which independent distributors or open-market sources may be used, and the testing that must accompany them.
  • Traceability records, requiring documentation back to the original manufacturer for each lot, retained for a defined period and produced on request.
  • Suspect part notification, obliging the supplier to notify, quarantine and refrain from returning suspect material into the supply chain.
  • Sub-tier flowdown, extending the same obligations down the chain, with the supplier responsible for its own suppliers’ compliance.

Each of these is verifiable, which distinguishes them from many supplier quality commitments. A franchised-source certificate either exists or does not. A traceability record either reaches the original manufacturer or stops somewhere in the middle. The practical question is whether anyone is verifying, and on what cycle, or whether verification happens only during an escape investigation. There is also a reporting dimension where government contracts are involved. Discovery of suspect or counterfeit material can trigger external reporting duties with their own timelines, and those timelines run from discovery rather than from the conclusion of an internal investigation.

Flowdown stops where nobody checks

A first-tier supplier accepting a counterfeit prevention clause does not mean its own suppliers accepted one. Flowdown compliance is the most commonly assumed and least commonly verified element of the control, and it is where an escape usually originates.

What tracking each duty requires

Turning the clause into a control means giving each duty an evidence type, a cycle and an owner. These are the practical mechanisms. Clause version currency belongs in the same record, since requirements change between standard revisions and a supply base can carry several vintages simultaneously without anyone noticing.

  • Source evidence at receipt. Certificates of conformance and franchised-source documentation captured per lot rather than per supplier, because sourcing can change lot to lot without any change to the relationship.
  • Exception register. Every open-market or independent-distributor purchase recorded with its approval, the testing performed and the result, so the exception population is visible rather than anecdotal.
  • Traceability retrieval tests. Periodically request full traceability for a sampled lot and measure whether it can be produced within the contractual window. A retention duty never exercised is an assumption.
  • Flowdown attestation with evidence. Ask suppliers to evidence the clause in their own sub-tier agreements, not merely to confirm that they flow it down.
  • Notification performance. Track elapsed time from supplier discovery to notification, since this window is short and interacts with wider reporting duties where government contracts are involved.

Five steps to an operating counterfeit control

Step 1, inventory the clause across the supply base

Establish which agreements carry a counterfeit prevention clause, which standard they incorporate and what version. Portfolios built over time usually carry several vintages, with materially different requirements, and the same extraction work supports broader supplier contract automation.

Step 2, classify the supply base by risk

Obsolete and long-lifecycle components, high-value programs and suppliers with known open-market activity carry disproportionate exposure. Verification effort should concentrate there rather than being spread evenly.

Step 3, convert duties into tracked obligations

Each attestation cycle, retention period, exception approval and notification window becomes an obligation with an owner and an evidence requirement, alongside the PPAP and quality commitments already being tracked.

Step 4, test retrieval rather than trusting retention

Sample lots quarterly and request full traceability. Measuring whether records can actually be produced converts a contractual retention duty into a demonstrated capability, and the failures are usually informative.

Step 5, verify flowdown at the second tier

For the highest-risk suppliers, ask to see the clause as it appears in their sub-tier agreements. This is the step that most often reveals that the control chain is shorter than the contract implies.

See supplier flowdown duties tracked as obligations

Aavenir extracts counterfeit prevention, traceability and flowdown terms from supplier agreements and tracks the evidence each one requires.

Book a demo

Where obsolescence pressure creates exposure

Counterfeit risk rises sharply where authorized supply has ended. When a component goes end of life and no franchised source remains, the pressure to buy from the open market is operational rather than theoretical, and the exception path in the contract becomes the primary control. Organizations that manage this well treat obsolescence and counterfeit exposure as a single problem: the last-time-buy decision, the approved alternate, the open-market exception and the additional testing regime all belong to the same conversation. Those that manage them separately tend to discover the connection during an escape investigation, when the purchasing record shows an open-market buy made under schedule pressure with an exception approval that was granted informally and never recorded. The reverse case matters too. A supplier that flags an obsolescence risk early, while authorized stock remains available, gives the buyer a genuine choice between a last-time buy, a qualified alternate and a redesign. A supplier that flags it late leaves only the open market. Contractual obsolescence notification duties are therefore a counterfeit control, even though they sit in a different section of the agreement.

Counterfeit clause duties and evidence

A working reference for building the obligation set. The evidence column matters most, because a duty with no defined evidence type is not auditable regardless of how it is drafted.

DutyCycleEvidenceCommon failure
Authorized sourcingPer lotFranchised source documentationCertificate accepted without source chain
Open-market exceptionPer eventApproval plus test resultsApproved informally, never recorded
Traceability retentionContinuousRecords retrievable on requestRetention assumed, never tested
Suspect part notificationPer eventNotice with timestamp and quarantine recordLate notice, material already shipped
Sub-tier flowdownAnnualClause evidenced in sub-tier agreementAttested but not evidenced

Counterfeit prevention is one of the clearest examples of a contract clause whose value depends entirely on post-signature operation. The duties are specific, verifiable and well understood, which makes the usual failure, that nobody verifies them between escapes, unusually avoidable. Tracking source evidence per lot, maintaining a visible exception register, testing traceability retrieval rather than assuming it, and checking flowdown at the second tier converts a well-drafted clause into an actual control. For the wider commitment picture across the supply base, see obligation management for manufacturing. The cost is a modest amount of recurring verification work against a risk whose downside is measured in program delay and recall exposure.

For related guidance, see What IATF 16949 demands of supplier quality agreements, Export control clause flowdown, a contract control sheet and Engineering change notification clause obligations.

FAQ

Counterfeit clause questions

What is a counterfeit parts prevention clause? +
It is a supplier agreement provision requiring procurement from original manufacturers or franchised distributors, documented traceability back to the original manufacturer, immediate notification and quarantine of suspect parts, and flowdown of the same duties to sub-tier suppliers. Standards such as AS5553 and AS6174 are commonly incorporated by reference.
Why is sub-tier flowdown the weak point? +
Because a first-tier supplier accepting the clause says nothing about whether its own suppliers accepted one. Flowdown is routinely attested and rarely evidenced, and asking a high-risk supplier to show the clause as it appears in its sub-tier agreements is the check that most often reveals a shorter control chain than the contract implies.
How should open-market purchases be handled? +
Through a defined exception path with recorded approval and additional testing appropriate to the risk. The failure mode is not the exception itself but the informal approval granted under schedule pressure and never recorded, which leaves no evidence trail when an escape is later investigated.
What makes traceability records useful? +
Retrievability, not retention. A contractual duty to retain records for a defined period is only meaningful if the records can actually be produced within the contractual window. Sampling lots periodically and requesting full traceability converts an assumption into a demonstrated capability.
How does component obsolescence increase counterfeit risk? +
When authorized supply ends and no franchised source remains, operational pressure to buy on the open market rises and the contractual exception path becomes the primary control. Managing obsolescence and counterfeit exposure as one problem, alongside last-time-buy decisions and approved alternates, is substantially more effective than treating them separately.
What should be tracked continuously rather than annually? +
Source evidence at receipt, the open-market exception register and supplier notification timeliness. Annual attestation cycles suit flowdown verification and retention confirmation, but sourcing can change lot to lot without any change to the supplier relationship, so per-lot evidence is the only reliable basis.

Make flowdown clauses into working controls

Aavenir tracks sourcing, traceability, exception and flowdown duties across the supply base with the evidence each requires.

  • ✓Per-lot source evidence and a visible exception register
  • ✓Flowdown verification tracked to the second tier
  • ✓Standalone or native on ServiceNow