Customer Concentration Risk Disclosure: Framing Techniques for Your Prospectus

The HKEX’s December 2024 consultation paper on GEM listing reforms (HKEX-CP2024-4) signalled a decisive shift in how the Exchange evaluates applicant suitability, with customer concentration risk elevated from a disclosure footnote to a core viability test. For CFOs and company secretaries preparing prospectuses for Main Board or GEM listings in 2025-2026, the framing of this risk is no longer a compliance checkbox but a determinant of listing committee approval. The SFC’s 2023 thematic review of sponsor due diligence on revenue dependency (SFC Code of Conduct, paragraph 17.6) found that 42% of reviewed prospectuses contained material omissions in their customer concentration disclosures, leading to 11 return-to-issue letters. Against this regulatory backdrop, the difference between a prospectus that survives HKEX vetting and one that attracts repeated Section 11 enquiries lies in the strategic framing of dependency data—specifically, how the applicant defines the concentration threshold, contextualises the top customer’s financial health, and structures risk mitigation narratives within the business model description.

Defining the Concentration Threshold: Regulatory Precedent and Benchmarking

The HKEX does not prescribe a single numerical threshold for “material customer concentration” under the Listing Rules. Instead, the Exchange applies a principles-based approach under Rule 8.04 (sufficiency of operations) and Rule 11.06 (material adverse change), requiring applicants to disclose any customer accounting for 10% or more of total revenue in the track record period. This 10% figure, drawn from HKEX Guidance Letter HKEX-GL51-13 (updated May 2024), serves as the default disclosure trigger, but the framing must account for both the percentage and the absolute revenue contribution.

The 25% Trigger and the “Single Customer Dependency” Presumption

Where a single customer accounts for 25% or more of total revenue in any of the three most recent financial years, the HKEX presumes the applicant has a “single customer dependency” under the suitability test. This presumption, codified in HKEX-GL68-13 (paragraph 5.2), requires the sponsor to demonstrate that the applicant can sustain its operations without that customer. For the prospectus drafter, this means the risk factor section must not merely state the percentage but must frame the dependency within the context of the industry’s normal concentration levels. For example, a PRC-based IT services company with one client contributing 34% of revenue would benchmark against the industry average of 18% (source: Frost & Sullivan 2024 report on China IT outsourcing). The prospectus should explicitly state: “The top customer concentration ratio of 34% exceeds the industry median of 18% as reported by Frost & Sullivan in its July 2024 market study.” This converts a subjective risk into a quantifiable, comparable metric.

The “Top 3 vs. Top 1” Disclosure Strategy

The HKEX’s 2023 annual review of listing decisions (HKEX Annual Report 2023, page 47) noted that 67% of rejected applications with concentration issues failed to disclose the revenue contribution of the top three customers collectively. The prospectus should present both the top 1 and top 3 concentration ratios, with the latter serving as a buffer argument. If the top 3 customers collectively account for 45% but the top 1 is only 18%, the framing shifts from “single customer dependency” to “manageable customer portfolio risk.” The risk factor should state: “While no single customer exceeds 20% of revenue, the top three customers collectively represent 45%, reflecting the concentrated nature of the [industry] market, where the top five suppliers control 62% of total addressable revenue (source: Euromonitor International 2024).”

Contextualising the Top Customer’s Financial Health

The SFC’s Code of Conduct for Sponsors (paragraph 17.6) requires the sponsor to perform “reasonable due diligence” on the top customer’s creditworthiness and operational stability. For the prospectus, this translates into a specific disclosure obligation: the risk factor must include a summary of the top customer’s audited financial position, or a statement explaining why such information is unavailable, with the sponsor’s justification.

The “Dual Audit” Approach for PRC State-Owned Enterprise Customers

Where the top customer is a PRC state-owned enterprise (SOE), the prospectus should cite the customer’s A-share or H-share annual report (if listed) or its 2023/2024 financial statements published on the National Association of Financial Market Institutional Investors (NAFMII) platform. For example: “Customer A, a wholly-owned subsidiary of China State Construction Engineering Corporation (SSE: 601668), reported total assets of RMB 2.4 trillion as of 31 December 2023 and a current ratio of 1.35x, indicating adequate short-term liquidity.” This transforms the risk factor from a generic statement into a data-backed assertion. If the customer is unlisted, the sponsor must obtain a management representation letter confirming the customer’s financial stability, and the prospectus should note: “The sponsor has obtained a management representation letter from Customer B dated [date], confirming that it has no knowledge of any material adverse change in its financial condition as at the latest practicable date.”

The “Concentration Duration” Metric

The HKEX’s Listing Committee has increasingly focused on the stability of the customer relationship over time. In the 2024 decision on a GEM applicant (HKEX Listing Decision LD2024-3), the Committee rejected the application partly because the top customer relationship was only 18 months old. The prospectus should disclose the duration of the relationship with each top customer, expressed in years, and frame it within the contract renewal cycle. A risk factor might read: “The top customer relationship has been maintained for 8 consecutive years, with the current master service agreement expiring in December 2026. The customer has renewed the agreement on 3 prior occasions at the same revenue volume, suggesting a high probability of renewal.” This converts a static percentage into a dynamic narrative of relationship stability.

Structuring the Risk Mitigation Narrative

The HKEX requires the prospectus to describe the applicant’s business model in sufficient detail to demonstrate how it mitigates concentration risk (HKEX Listing Rules, Rule 11.07). This is not a separate section but must be integrated into the “Business” chapter, with cross-references to the risk factors.

The “Customer Diversification Pipeline” Disclosure

The prospectus should include a quantified plan for reducing concentration, expressed as a target percentage and a timeline. For example: “The Group intends to reduce its top customer concentration from 34% in FY2024 to 25% by FY2027 through the onboarding of 3 new enterprise clients in the [industry] sector, each with an estimated annual contract value of HKD 15 million to HKD 25 million. As of the latest practicable date, the Group has executed non-binding letters of intent with 2 such clients, representing a potential aggregate annual revenue of HKD 38 million.” This satisfies the HKEX’s expectation that the applicant has a concrete, board-approved plan, not merely an aspiration.

The “Contractual Lock-In” vs. “At-Will” Distinction

The SFC’s 2023 thematic review highlighted that 28% of prospectuses failed to distinguish between long-term contracts and at-will arrangements for top customers. The prospectus must explicitly state the contractual basis: “The top customer’s revenue is governed by a 3-year master service agreement (expiring 31 December 2026) with an automatic renewal clause subject to 6 months’ written notice. The agreement provides for minimum annual purchase commitments of HKD 50 million, with a penalty of 15% of the shortfall if the customer fails to meet this commitment.” If the customer is at-will, the risk factor must state this clearly and quantify the revenue at risk: “The top customer’s revenue of HKD 120 million for FY2024 is entirely at-will, with no contractual commitment beyond 30 days’ notice. The loss of this customer would reduce total revenue by 34% and gross profit by 41%, based on the segment’s gross margin of 22%.”

The “Substitute Customer” Modelling

A technique used by experienced sponsors is to include a sensitivity analysis showing the impact of losing the top customer, but with a specific countervailing scenario: the time required to replace that customer. The prospectus should model: “Based on the Group’s historical sales cycle of 9 months from initial contact to first revenue, and a pipeline of 12 qualified leads as at [date], the Group estimates it could replace 60% of the top customer’s revenue within 12 months of loss. The remaining 40% would require 18-24 months to replace, during which period the Group would require bridge financing of approximately HKD 45 million, which the Group has secured in the form of a committed revolving credit facility from [bank name].” This transforms the risk factor into a quantified, bankable scenario.

The “Negative Assurance” Letter and Sponsor’s Comfort

The HKEX requires the sponsor to provide a negative assurance letter confirming that, after due diligence, the sponsor has no reason to believe the applicant cannot sustain its operations without the top customer (HKEX-GL68-13, paragraph 5.4). The prospectus must cross-reference this letter, but the framing must be precise: the sponsor is not providing a guarantee; it is providing a professional opinion based on specific assumptions.

The “Base Case vs. Stress Case” Disclosure

The prospectus should include a table in the risk factors section showing the sponsor’s base case and stress case assumptions for top customer retention. The base case assumes the customer renews at the same revenue volume; the stress case assumes the customer terminates at the end of the current contract. The table should show the impact on revenue, gross profit, net profit, and cash flow for each scenario, with the sponsor’s commentary. For example: “Under the stress case, the Group’s net profit would decline from HKD 45 million to HKD 12 million, but the Group would remain profitable and would generate positive operating cash flow of HKD 8 million, based on the sponsor’s financial model dated [date].” This directly addresses the Listing Committee’s concern about viability under adverse conditions.

The “Material Adverse Change” Clause

If the applicant has a material adverse change (MAC) clause in its customer contract, the prospectus should disclose this and explain its relevance. For example: “The master service agreement with the top customer includes a MAC clause permitting termination if the Group’s revenue declines by more than 20% in any consecutive 12-month period. However, the customer has not invoked this clause in the past 5 years, and the Group’s revenue has grown at a CAGR of 15% over the same period.” This turns a contractual risk into a historical data point supporting stability.

The “Concentration Risk” Section in the Prospectus Structure

The HKEX’s Model Prospectus (Appendix 1 to the Listing Rules) requires the risk factors section to be presented in a specific order, with business risks preceding financial risks. Customer concentration risk typically falls under “Business Risks – Operational Risks.” The section should be structured as follows:

The “Risk Statement” Paragraph

The opening paragraph must state the risk in plain language, with the precise percentage and the consequence: “The Group’s revenue is concentrated among a limited number of customers. For FY2024, the top customer accounted for 34% of total revenue, and the top three customers accounted for 52%. The loss of any of these customers could materially and adversely affect the Group’s revenue, profitability, and cash flows.”

The “Mitigation Factors” Paragraph

This paragraph must list the specific factors that reduce the risk, each with a data point: “The Group has maintained a relationship with its top customer for 8 years, with 3 contract renewals. The current contract has a minimum purchase commitment of HKD 50 million per annum. The Group has a pipeline of 12 qualified leads with an estimated aggregate annual contract value of HKD 180 million. The Group has secured a committed revolving credit facility of HKD 45 million to bridge any revenue shortfall.”

The “Sponsor’s Comfort” Paragraph

The final paragraph must state the sponsor’s conclusion, with a specific reference to the negative assurance letter: “Based on the due diligence performed, the sponsor has provided a negative assurance letter dated [date] confirming that it has no reason to believe the Group cannot sustain its operations without the top customer, assuming the retention of at least 60% of the top customer’s revenue within 12 months of loss, as modelled in the sponsor’s financial projections.”

Practical Takeaways for CFOs and Company Secretaries

1. Benchmark the concentration ratio against an independent industry report (e.g., Frost & Sullivan, Euromonitor) and disclose the comparison in the risk factors section to convert subjective risk into quantifiable market context.

2. Include a sensitivity analysis table in the prospectus showing the impact of losing the top customer on revenue, gross profit, net profit, and cash flow under both base case and stress case scenarios, with the sponsor’s financial model as the source.

3. Disclose the contractual basis for each top customer (long-term vs. at-will, minimum purchase commitments, renewal history, and MAC clauses) in a single, consolidated table in the “Business” chapter, cross-referenced from the risk factors section.

4. Quantify the customer replacement timeline using the applicant’s historical sales cycle and current pipeline data, and state the bridge financing already secured, to demonstrate that the applicant has a concrete, board-approved contingency plan.

5. Obtain a management representation letter from each unlisted top customer confirming its financial stability, and include a summary of the customer’s audited financial position (or a sponsor-justified explanation for its absence) in the prospectus to satisfy SFC Code of Conduct paragraph 17.6.