Compliance Buying Center — Roles, Pain, and Interview Priority
Mapping the buying center and the “pain center,” which aren’t always the same people. Organized by function and proximity to compliance pain.
The People Who Do the Work (Operators)
These are the highest-signal interviews for understanding the actual workflow pain.
Trade Compliance Manager / Trade Compliance Analyst — The single most important role to reach. This person runs restricted party screening, manages HTS classifications, files ISF/entry summaries, handles CBP inquiries. They live in spreadsheets and legacy tools daily. At mid-size importers this might be one person doing everything; at large companies it’s a team.
Export Control Officer / Export Compliance Specialist — Owns BIS Entity List screening, license determination, end-use checks, deemed exports. Different workflow than import compliance but often the same buyer. Defense/aerospace companies have dedicated teams; commercial semis companies often have one person wearing multiple hats.
Supplier Quality Engineer / Supplier Development Manager — Runs supplier onboarding and qualification. Owns the questionnaires, audits, and ongoing monitoring. At semiconductor companies specifically, this role touches material declarations (CMRT, EMRT for conflict minerals), which is adjacent to UFLPA traceability.
Customs Broker (in-house or third-party) — The person who actually files entries with CBP. At companies that have brought this in-house, they’re a gold mine for understanding what data flows look like. Third-party brokers (Livingston, Expeditors, C.H. Robinson customs teams) see patterns across many importers.
Supply Chain Analyst / Procurement Analyst — Does the data work: tracking suppliers, mapping tiers, running reports. Often the person who gets tasked with “figure out our Xinjiang exposure” and has to cobble it together manually.
The People Who Buy (Budget Holders)
These are the people who sign the check. Understanding their decision criteria matters for product-market fit.
VP / Director of Trade Compliance — At large importers (retailers, OEMs, distributors), this is a dedicated role reporting to Legal or Supply Chain. They own the compliance budget and choose the tools. Companies like Target, Apple, Intel, Flex have this role.
General Counsel / Associate GC — At mid-size companies, compliance tooling often falls under Legal. The GC cares about enforcement risk, not workflow efficiency. Different buying language than an operator.
Chief Compliance Officer (CCO) — At companies with heavy regulatory exposure (defense, financial services adjacent to trade), this C-level role owns the compliance program holistically. OFAC, anti-corruption, export controls, sanctions all roll up here.
VP Supply Chain / Chief Supply Chain Officer — When compliance is framed as a supply chain visibility problem (which is our thesis), this person is the strategic buyer. They care about resilience, not just screening. This is where the digital twin pitch eventually lands.
Chief Procurement Officer (CPO) — Owns supplier relationships and onboarding. At companies where supplier risk management is the framing, CPO is the buyer. Coupa, Ariba, Jaggaer sell to this person.
The People Who Set Policy / Strategy (Executives)
Higher-signal for thesis validation than for workflow understanding.
VP Risk / Enterprise Risk Manager — Sees compliance as one node in a broader risk framework. Useful for understanding how compliance tooling competes for budget against cybersecurity, financial risk, operational risk.
Board Audit Committee Members — At public companies, UFLPA and sanctions compliance is increasingly a board-level topic. Not interviewable directly, but former board members or governance consultants can describe what questions the board asks.
CFO (at mid-market importers) — Often the de facto compliance budget holder at companies too small for a dedicated CCO. Cares about the cost of compliance: headcount, fines, shipment delays, detention costs.
The People Who Enforce / Advise (External)
These give you the “what’s coming next” perspective and help calibrate severity.
Trade Compliance Attorney (outside counsel) — Partners at firms like Miller & Chevalier, Hogan Lovells, Akin Gump, Steptoe & Johnson who advise on UFLPA, EAR, OFAC. They see the problem across dozens of clients and know where enforcement is headed.
Customs & Trade Consultants — Firms like Braumiller Law Group, Sandler Travis, Deloitte/PwC/EY trade advisory practices. They implement compliance programs and can describe the tool landscape honestly since they work across many clients.
Former CBP / BIS / OFAC Officials — People who wrote or enforced the rules. They know what enforcement actually looks for vs. what the regulations say on paper. Often available through consulting firms or think tanks post-government.
Big 4 Supply Chain Risk Partners — Deloitte, PwC, EY, KPMG all have supply chain risk practices. They sell advisory services that your product could either complement or displace. Understanding their engagement model tells you a lot about willingness to pay.
The People in the Semiconductor Value Chain Specifically
Foundry Compliance Teams (TSMC, GlobalFoundries, Samsung) — How do foundries manage export controls on manufacturing technology? What does their customer screening look like?
Fabless Design Company Ops (Qualcomm, NVIDIA, AMD, Broadcom) — They don’t manufacture but must comply with EAR deemed export rules, end-use screening, and increasingly UFLPA for packaging/testing subcontractors.
OSAT Compliance (ASE, Amkor) — Outsourced assembly and test companies are the link between design and finished product. Their supply chain exposure to restricted regions is high and under-scrutinized.
Distributor Compliance (Arrow, Avnet, Digi-Key) — Semiconductor distributors handle massive volumes of transactions with screening obligations on both the buy and sell side. They’re also the most likely early adopters of any screening tool because volume = pain.
OEM Supply Chain Teams (Apple, Dell, HP, automotive Tier 1s) — Large buyers who must trace components through multiple tiers. Their UFLPA exposure is through polysilicon in solar, but the methodology extends to any forced labor risk in packaging or raw materials.
Priority Matrix
| Role | Pain Signal | Budget Authority | Ease of Access | Interview Priority |
|---|---|---|---|---|
| Trade Compliance Manager | Highest | Low | Medium | #1 — operator truth |
| VP/Dir Trade Compliance | High | High | Medium | #2 — buyer + pain |
| Customs Broker (3PL) | High | None (but sees patterns) | High | #3 — cross-client view |
| Trade Compliance Attorney | Medium (sees it secondhand) | None | High | #4 — enforcement direction |
| Supplier Quality Engineer | High | Low | Medium | #5 — onboarding workflow |
| Export Control Officer | High | Low-Medium | Medium | #6 — BIS/EAR specific |
| CPO / VP Supply Chain | Medium | Highest | Low | #7 — strategic buyer |
| Semis Distributor Compliance | Highest (volume) | Medium | Medium | #8 — sector-specific |
| GC / CCO | Low (delegates) | High | Low | Lower — useful for buying motion, not workflow |
The biggest gap in the current interview set (per the vault’s own signal-synthesis) is rows 1, 3, 5, and 8 — the operators and sector-specific practitioners. The advisor network is strong; the people who actually run restricted party screening and supplier onboarding every day are underrepresented.