How Do You Find the Right Contact at a Supplier?

Finding the right contact at a supplier means identifying the person who actually owns or can access the document, data, or response you need. Your ERP almost certainly has the wrong person. Those records store commercial contacts from onboarding years ago, not the Quality Manager, Sustainability Lead, or Regulatory Affairs owner who holds the files.

A sustainability lead at a Fortune 500 medical device company described the result: “A lot of our purchase orders give us access to the financial folks. But those people change roles, they leave the company. It isn’t a sustainability person. So they just ignore the emails we send.”

Why do internal contact databases go stale?

Contacts degrade predictably and nothing in procurement forces an update.

• Turnover: People leave and their replacement may never be added to the supplier record.
• Role changes: Promotions, department moves, facility transfers.
• Company changes: Mergers, acquisitions, rebrands, entity restructures.
• No update trigger: Unless someone actively maintains the record, it rots.

If only 60% of a 500-supplier list has a current contact, 200 suppliers need more research before or during the campaign. In one adjacent supplier-compliance program, a senior engineer reported spending three to four hours per day sending supplier emails while “hoping to God that email is still active.”

Which role should you target?

Use a tiered model. Match the role to the request first.

Request type	Target role
ISO 9001, ISO 13485, quality certs	Quality Manager, Quality Director, QMR
ISO 14001, EcoVadis, ESG	Sustainability Manager, EHS Manager
CMRT, RoHS, REACH	Regulatory Affairs, Product Compliance
CDP, emissions data	Sustainability Director, Environmental Manager
SOC 2, ISO 27001	Information Security Officer
Insurance, W-9	Risk Manager, Finance Controller

Tier 2: Operations Manager, Plant Manager, EHS Manager, or Supply Chain Manager at the supplier.

Tier 3: General Manager or Owner at companies under 100 employees. Keep requests simple.

Where should you look?

Internal sources first:

• Email archives (search the supplier domain)
• Audit report attendee lists
• Onboarding questionnaires
• Colleague knowledge not captured in the ERP

External sources:

• LinkedIn (company page, filter by “quality,” “sustainability,” “regulatory,” “EHS”)
• Corporate website leadership and department emails (quality@, sustainability@)
• Public filings and ESG reports naming program owners
• Certification body directories (BSI, TÜV, SGS, Bureau Veritas, DNV)
• EcoVadis or CDP platform records from past submissions

How do you validate before sending?

Finding a name is not enough.

1. SMTP validation: Confirms the mailbox exists without sending mail.
2. Domain check: Confirm the supplier still uses that domain after any rebrand.
3. Format matching: Infer first.last@ from known addresses at the same domain.
4. LinkedIn cross-reference: Confirm current employer and role.
5. Phone verification: For high-priority suppliers, call and ask for the person by name.

What if you cannot find anyone?

1. Call the main number. Ask for the Quality Manager by title, not name.
2. Email a generic department address (quality@, compliance@).
3. Ask your commercial contact for a referral, not to do the work themselves.
4. Use procurement leverage on the next PO or contract renewal.
5. Document attempts and escalate internally. An uncontactable supplier is a visible risk.

Why does scale make this a separate problem?

Contact discovery can be handled manually for a short supplier list. At hundreds of suppliers, it becomes its own workstream: role matching, research, email validation, failed-contact replacement, and record maintenance. In one adjacent supplier-compliance program, a senior engineer reported spending three to four hours per day on supplier email work.

How do you keep contacts current?

Revalidate before each campaign. Update records when emails bounce. Capture the sender every time a certificate or disclosure arrives. Check current employment and role instead of inferring accuracy from tenure.

Frequently asked questions

Should you contact multiple people at once?

After two failed attempts at one contact, yes. Parallel outreach to Quality and EHS is fine when you are unsure who owns the file.

What accuracy rate should you target before a campaign?

Aim to validate every contact before Day 0. Track delivery and replacement-contact work separately so silent inboxes are not mistaken for suppliers refusing the request.

Where Bridgecurrent fits

Bridgecurrent identifies the right person at each supplier by role, validates their email, and keeps records current as people change jobs. See Scope 3 Supplier Engagement: How to Build and Run the Program for the wider program around contact discovery and supplier follow-up.