How to Analyze Customer Concentration Risk

By Kevin Fernando · Sep 24, 2026 · 10 min read

Customer concentration risk is measured as the percentage of total revenue from a company's top customers. Analyze it by gathering customer revenue data from SEC filings, calculating concentration ratios, and comparing results to industry benchmarks. High concentration occurs when the top 5 customers account for more than 50% of revenue, signaling vulnerability to customer loss.

Customer concentration risk measures how dependent a company is on a small number of customers for its revenue. When revenue is concentrated among a few large clients, the loss of even one customer can materially damage financial performance. This risk is especially acute for companies in early growth stages, those serving a limited number of large enterprises, or those in industries with consolidating buyer bases.

Analyzing concentration risk requires three steps: gathering the raw customer revenue data, calculating the right metrics for your business model, and comparing your results to industry benchmarks. Unlike many financial metrics, concentration analysis is not standardized across all industries, a healthy concentration level for a software-as-a-service company differs sharply from one for a high-volume consumer goods distributor. This guide walks through the measurement process, shows how to identify when concentration becomes dangerous, and explains the specific tactics companies use to reduce their vulnerability.

What customer concentration risk is

Customer concentration risk is the vulnerability a company faces when a significant portion of its revenue depends on a small number of customers. If one or a few customers represent a large share of total revenue, the loss of that customer relationship, through competitive displacement, financial failure, or strategic shift on the customer's part, can cause a sharp drop in company revenue and profitability.

This risk matters because it affects business stability and valuation. A company with concentrated revenue is harder to forecast, riskier to lend to, and more vulnerable to market downturns that affect its largest customers. Investors, lenders, and analysts flag concentration as a red flag during due diligence. Public companies are required to disclose major customer relationships, and private companies often face questions about concentration during fundraising or acquisition discussions.

Concentration risk is distinct from but related to other revenue risks. A company might have diversified customers but concentrated geography, or diversified products but concentrated customer types. This guide focuses on customer concentration specifically: the revenue dependence on individual customer relationships.

How to measure customer concentration risk

Measuring concentration requires two inputs: the revenue breakdown by customer, and the right metric for your business model. The process is straightforward but the benchmarks vary. A SaaS company's healthy concentration level differs from a manufacturer's, which differs from a high-volume retailer's.

Gather customer revenue data

Start by identifying where customer revenue data lives. For public companies, this information is typically found in the notes to the financial statements, usually in a note labeled "Customer Concentration" or "Major Customers." The SEC requires disclosure when a single external customer represents 10 percent or more of a public entity's revenues, so public company filings will flag the largest customers by name or identifier.

For private companies, customer revenue data is often found in internal management reports, CRM systems, or accounting records. If you are analyzing a private company, request a customer revenue schedule from management or the data room during due diligence. This schedule should list each customer and the revenue they generated over the period in question, typically the last twelve months.

Once you have the data, sort customers by revenue in descending order. You will calculate metrics based on the top 1, top 5, and sometimes top 10 customers, depending on your business model. Ensure the revenue figures are consistent with the company's reported total revenue on the income statement, any discrepancy signals a data quality issue to investigate.

Select the right concentration metrics

The most common concentration metrics are the percentage of revenue from the top customer, the top 5 customers, and the top 10 customers. The metric you emphasize depends on your business model.

For typical B2B or B2C businesses with moderate customer counts, focus on the top 5 customers as a percentage of total revenue. This captures the risk from your largest relationships without being overly sensitive to small customer movements.

For SaaS and software businesses, track both the largest single customer and the top 5 combined. These businesses often have a smaller number of large enterprise customers alongside many smaller ones, so both metrics matter.

For high-volume businesses like retailers or consumer goods distributors, track the top 10 customers and sometimes the top 25. A single customer percentage can be misleading when you have thousands of customers; concentration risk in these businesses is more about whether your top tier has grown too large relative to the rest.

Another useful metric is the Herfindahl-Hirschman Index, or HHI, which weights all customers by their revenue share. HHI is more sensitive to the distribution across all customers than a simple top-5 percentage, but it is more complex to calculate. Start with the simpler metrics; use HHI only if your analysis requires it.

Calculate customer concentration risk with a worked example

Suppose a company reports total annual revenue of $50 million.

To calculate the top 1 customer concentration, divide the largest customer's revenue by total revenue. This company's largest customer represents 30 percent of revenue.

To calculate the top 5 customer concentration, add the revenue from the five largest customers and divide by total revenue. The top 5 customers represent 94 percent of revenue.

These percentages are your concentration metrics. In this example, the company has extreme concentration: a single customer represents nearly a third of revenue, and the top 5 represent almost all of it. This is a high-risk profile for most business models.

Now compare your calculated metrics to your industry benchmarks, which we cover in the next section. This comparison tells you whether the concentration you measured is typical for your industry or a warning sign.

Identify what constitutes high concentration

Concentration thresholds vary by business model. There is no universal definition of "high concentration", context matters. The benchmarks below reflect industry norms and best practices.

For typical businesses, low customer concentration means the top 5 customers account for less than 25% of total revenue. High concentration means the top 5 customers account for more than 50% of total revenue. Between 25% and 50% is moderate concentration, which warrants monitoring.

For SaaS businesses, the target is no single customer exceeding 10% of revenue, with the top 5 customers below 25-30% of revenue. SaaS companies typically have higher customer counts and lower per-customer revenue than enterprise software, so concentration benchmarks are stricter.

For high-volume customer businesses like retail or consumer goods, the ideal is no single customer exceeding 1% of revenue, with the top 10 customers below 10-15% of revenue. These businesses have many customers and lower switching costs, so even small concentration is monitored closely.

For SMB-focused businesses with high customer volume and low deal value, a realistic benchmark is 1% or less for the top customer.

The SEC's mandatory disclosure threshold is 10 percent or more of a public entity's revenues. This is a regulatory floor, not a risk threshold. Many investors flag concentration well below 10 percent as a concern.

Recognize warning signs in concentration data

Beyond the raw concentration percentages, several patterns signal elevated or worsening concentration risk. Watch for these red flags when reviewing customer data over time.

A rising concentration trend is the most obvious warning sign. If the top 5 customers represented 40% of revenue two years ago and now represent 55%, concentration is worsening even if the current level is not extreme. Rising concentration often signals that the company is winning larger deals with existing customers but losing smaller customers, or that the company is becoming more dependent on a shrinking customer base.

Customer revenue volatility is another warning. If a single customer's revenue swings by 20 percent or more year-over-year, that customer relationship is unstable. Volatility combined with high concentration is especially risky: a large customer with unpredictable spending is a major vulnerability.

Loss of a previously large customer is a critical warning. If your top customer from last year is no longer in the top 5, that customer was lost. Even if the company replaced that revenue, the loss signals that customer relationships are at risk. If the company did not replace the revenue, concentration may have worsened even as total revenue fell.

Customer concentration in a single industry or geography compounds the risk. A company might have five large customers, but if all five are in the same industry or region, the company faces correlated risk. A downturn affecting that industry or region could damage multiple customer relationships simultaneously. Review customer concentration by segment to catch this pattern.

Contracts without renewal terms or with short notice periods are a red flag when combined with high concentration. A large customer with a month-to-month contract is riskier than one with a multi-year agreement. Check the contract terms of your top customers, not just their revenue share.

Mitigate customer concentration risk

Once you have identified concentration risk, the next step is to reduce it. Mitigation tactics fall into three categories: diversifying the customer base to spread revenue across more relationships, strengthening contracts to protect existing relationships, and monitoring concentration continuously to catch deterioration early.

Diversify the customer base

The most direct way to reduce concentration risk is to acquire new customers and grow revenue from smaller existing customers, so that no single customer represents an outsized share. This is easier to state than to execute, but the principle is clear: more customers means less dependence on any one relationship.

For B2B companies, this often means expanding into adjacent customer segments or geographies. If your revenue is concentrated in large enterprise customers, add a mid-market product or sales team. If your customers are concentrated in North America, expand to Europe or Asia. These moves take time and capital, but they reduce concentration by design.

For B2C or high-volume businesses, diversification happens through marketing and distribution expansion. Adding a new sales channel, entering a new geographic market, or launching a new product line all serve to spread revenue across a broader customer base.

A common mistake is to pursue diversification without managing the existing large customer relationship. The goal is to grow revenue from smaller customers faster than revenue from large customers grows, so that the large customer's percentage of total revenue declines. If you grow total revenue but the largest customer grows at the same rate, concentration stays flat. Intentional diversification requires both new customer acquisition and deliberate slower growth from the largest customers.

Strengthen customer contracts

For large customers that you cannot easily replace, strengthen the contractual relationship to reduce the risk of sudden loss. Multi-year contracts with automatic renewal clauses reduce the risk that a customer will leave without warning. Long notice periods, typically 90 days or more, give the company time to adjust if a large customer does decide to exit.

Price escalation clauses that tie price increases to inflation or market indices reduce the risk that a customer will renegotiate rates downward. Volume commitments or minimum purchase guarantees provide revenue visibility and make it harder for a customer to reduce spending suddenly.

Exclusivity or preferred vendor agreements, where applicable, can reduce the risk of a customer shifting to a competitor. These agreements often require concessions on price or terms, but they protect the relationship.

For companies with software or service contracts, consider tiered pricing or bundling strategies that increase switching costs. A customer who has integrated your product deeply into their operations is less likely to leave than one using a standalone tool.

Contracts alone do not eliminate concentration risk, but they reduce the downside if a customer relationship deteriorates. A large customer with a one-year notice period and a multi-year contract is less risky than one with a month-to-month arrangement.

Monitor and report concentration trends

Concentration risk is not static. Quarterly or annual monitoring of your customer concentration metrics ensures you catch deterioration early and can act before the risk becomes acute.

Build a simple dashboard that tracks the top 5 or top 10 customers' revenue and their percentage of total revenue over time. Include a trend line or a year-over-year comparison so you can see whether concentration is rising, falling, or stable. This dashboard should be reviewed by leadership and the board at least quarterly.

Set concentration thresholds that trigger action. For example, if the top customer reaches 25 percent of revenue, initiate a diversification project. If the top 5 customers exceed 60 percent, escalate the issue to the board. These thresholds should reflect your business model and risk tolerance, but having them in advance ensures consistent decision-making.

Include concentration metrics in investor communications and board reporting. Transparency about concentration risk builds credibility and allows investors and board members to hold management accountable for managing it. Companies that hide or downplay concentration risk often face harsh reactions when a large customer is lost.

Finally, tie concentration reduction to management incentives where possible. If your sales team is rewarded only on total revenue growth, they will pursue large deals that increase concentration. If they are rewarded on customer count or on revenue from new customer segments, they have an incentive to diversify. Alignment between incentives and risk management is essential.

Do this automatically

Manually gathering customer revenue data from financial statements, calculating concentration ratios for the top 1, 5, and 10 customers, and comparing results against industry benchmarks requires hours of spreadsheet work that must be repeated each reporting period. Software can automate the extraction of customer revenue figures, compute these concentration metrics in real time, and flag when thresholds are breached. Financial research runs this kind of analysis end to end and cites every figure back to its original source, across as many subjects as you need, with Mimir attaching a citation to every figure. It will not tell you whether to buy the stock. That judgment stays yours, and deliberately so. Every plan includes it, including the free one.

Start your first report and run it on something you already know well.

This article is general research and information about financial concepts. It is not investment advice, and it does not account for your circumstances or objectives. Nothing here is a recommendation to buy, sell, or hold any security.