Woodcut illustration of one towering customer account looming over smaller customers while a founder studies the imbalance, showing customer concentration risk.

Customer Concentration Risk: When One Account Owns Too Much of Your Revenue

July 06, 2026

Executive Summary

Customer concentration risk is one of the few Financial Risk Management problems that gets worse precisely when things are going well, because the fastest-growing account is usually the one quietly becoming too big to lose.
The market has settled on rough thresholds: one customer above 10% of revenue is a disclosure-worthy flag, 10% to 20% is a caution zone, and above 30% is where some buyers simply stop bidding.
Concentration does not lower your valuation by lowering your profit. It lowers your valuation by raising the odds that the profit disappears, and buyers price that risk directly into the multiple.
The fix is rarely to shrink the big account. It is to make the revenue harder to leave through contract structure, and to grow the rest of the base fast enough that the ratio falls on its own.
Concentration you disclose early with a mitigation plan is a manageable fact. Concentration a buyer discovers in diligence is a deal-killer, and the difference is entirely in the timing.

A balance scale weighing one huge coin against many small coins with a warning line on a rising column, showing how much revenue rides on a single customer.

What Customer Concentration Risk Actually Measures

Bottom line up front: customer concentration risk measures how much of your revenue would walk out the door if a single relationship ended, and the reason it belongs at the center of your Financial Risk Management is that the number tends to hide until the moment it matters.

Start with the arithmetic, because it is simpler than people expect. Concentration for any customer is just that customer's revenue divided by total revenue. Track two figures every month: your top-1 customer share and your combined top-5 share. Practitioners generally treat more than 10% from a single customer and more than 25% from the top five as warning levels worth watching. The 10% line is not arbitrary. U.S. GAAP requires companies to disclose any customer contributing 10% or more of total revenue, which means the accounting profession long ago decided that a tenth of your revenue riding on one name is material information.

If you want a single number that captures the whole shape of your revenue, use the Herfindahl-Hirschman Index. Convert each customer's share to a percentage, square each one, and add them up. Below 1,000 is a healthy spread, 1,000 to 2,000 is moderate, and above 2,000 signals high concentration that deserves an action plan. The index rewards you for a long tail of customers and punishes you sharply for a whale, which is exactly the behavior you want a metric to have.

The reason to compute this monthly rather than annually is that concentration drifts. A star account that grows faster than the rest of the book pushes your ratio up even as your total revenue looks wonderful. The best quarter of your year can be the quarter your risk profile quietly deteriorates, and you will not notice unless you are measuring the mix, not just the total.

A buyer pressing down a tall wobbling coin tower connected by one thin thread to a distant customer, showing an investor discounting concentrated revenue for its fragility.

Why Investors Discount Concentrated Revenue

Here is the part founders find counterintuitive. A concentrated business and a diversified business can have identical revenue, identical margins, and identical growth, and the diversified one will still be worth more. The discount is not a penalty for poor performance. It is a price for fragility.

The numbers are not subtle. M&A advisors report that customer concentration above 30% from a single account can knock 20% to 35% off a sale price versus a diversified peer, and that some institutional private-equity buyers will not bid at all. In practice, many PE firms draw an internal line around 15% from any single customer, and exposure above 20% tends to trigger deeper diligence, escrow holdbacks, or a narrower pool of willing buyers. Lenders behave the same way. Once single-customer exposure passes roughly 20% to 30%, a lender may cap your advance rate, add covenants, or exclude the concentrated customer from the borrowing base entirely.

The investor logic is straightforward once you sit on their side of the table. As one M&A advisor put it bluntly, above 30% from one customer is "severe," valuation can drop by a third versus a diversified peer, and "most institutional PE simply walk away." A buyer is purchasing a stream of future cash flows. If a quarter or a third of that stream can be canceled with a single email from a single procurement officer, the buyer is not buying a company so much as buying a bet on one relationship they did not build and cannot control.

There is a genuine other side to this. Concentration supported by the right evidence is far more defensible than concentration left naked. Sophisticated investors will tolerate a large account when they can see "long-term contracts, strong relationships, and contingency plans," because those change the probability that the revenue actually leaves. The discount is a function of risk, and risk is a function of how easily the customer can go. Which is precisely why the levers that reduce the discount are contractual.

A large customer figure chained and anchored to a building by thick gold contract links and roots, showing contract and renewal levers that make a big account hard to leave.

Contract and Renewal Levers That Reduce the Risk

The instinct when a customer gets too big is to panic about the percentage. The more useful instinct is to ask a different question: how hard would it actually be for this customer to leave? A 30% account locked into a non-cancelable multi-year agreement is a fundamentally different risk than a 30% account on a month-to-month handshake, even though the concentration ratio is identical.

Contract structure is where you change the risk without changing the revenue. The levers that matter most are the ones that lengthen commitment and raise the cost of switching. Multi-year agreements with auto-renewal convert an annual re-decision into a passive default. Trading a modest price concession for a longer term is often the best deal you can make, because it buys down your single largest source of Financial Risk Management exposure. Master service agreements with meaningful termination thresholds and defined notice periods turn a sudden exit into a slow one, and a slow exit is one you can plan around.

Watch the termination-for-convenience clause with particular care. A large account whose contract lets it walk away for any reason on short notice carries far more risk than the raw percentage suggests, and buyers and lenders scrutinize exactly this. Longer non-cancelable terms and genuine auto-renewals materially improve how an outsider prices your risk. The deeper move is operational rather than legal: integrations, embedded data, and workflow dependencies that make your product expensive to rip out. Switching costs you build into the product are worth more than switching costs you write into the contract, because the customer feels them every day rather than once at renewal.

A founder planting many new saplings in a widening field around one giant customer tree, showing diversifying the base without shrinking the whale.

Diversification Without Stalling Your Growth

The advice to "just diversify" is easy to give and hard to follow, because the concentrated customer is usually also your best customer, and starving it to improve a ratio is a bad trade. The goal is not a smaller whale. The goal is a bigger ocean around it.

Diversification that works runs the denominator, not the numerator. You keep serving the large account at full strength while pointing dedicated sales capacity at new logos and smaller accounts, so the concentration ratio falls because the base grew, not because the whale shrank. Set explicit internal limits, something like no single customer above 20% and no single industry above 40%, and treat a breach as a material issue that triggers a written action plan rather than a shrug. The limit is not there to be never crossed. It is there to force a decision when it is.

The academic work suggests these thresholds are not just convention. A study of customer concentration and corporate risk-taking found two genuine inflection points, at roughly 9% and 27% of sales to a single customer, where a company's risk behavior changes materially. That maps almost exactly onto the practitioner rules of thumb, which is reassuring: the caution zone that begins near 10% and the danger zone that opens near 30% show up in the data, not just in advisor folklore. Building recurring revenue, tightening retention across the whole base, and diluting the mix over time is slow work, but it is the only version of diversification that raises enterprise value instead of merely rearranging it.

A founder openly presenting a chart of customer shares with one tall bar and a mitigation plan to a seated board, showing honest disclosure of concentration.

How to Disclose Concentration to a Board or a Buyer

The single most expensive mistake founders make with concentration is hiding it. Concealing a large account until late in a sale process reliably reduces your negotiating leverage and can kill the deal outright, because the buyer now distrusts not just the concentration but everything else you did not volunteer. Disclosed early with a plan, concentration is a fact to manage. Discovered in diligence, it is evidence of how you handle bad news.

Give your board the numbers on a schedule, not on request. The right board exhibit shows top-1 share, top-5 share, and HHI over time, paired with an explicit scenario: loss of Customer A equals this much revenue and this much EBITDA, and here is the pipeline depth that would replace it. Regulators and risk frameworks in adjacent industries insist on regular board-level reporting with predetermined actions when limits are breached, and the same discipline serves a private company well. A board that has seen the concentration every quarter is a board that helps you fix it. A board that learns about it during a sale is a board that wonders what else it missed.

For a buyer, put concentration front and center with the mitigation narrative attached. Show revenue and gross margin by top customer, the contract terms that govern each large account, the historical renewal and churn behavior of those accounts, and the pipeline that would backfill a loss. The story you want to tell is not "we have no concentration," because that is often not true and buyers know it. The story that earns the multiple is "we have concentration, we measure it monthly, we have locked it down contractually, and we are growing the base underneath it." That is a company in control of its own Financial Risk Management, and control is what a buyer is actually paying for.

A carved panoramic frieze from a whale-sized account and measuring scale to a chained contract, a widening grove of customers, and a founder presenting to a calm board, on managing customer concentration risk.

Frequently Asked Questions

What percentage of revenue from one client is risky?

The working rule is that a single customer below 10% of revenue is generally healthy, 10% to 20% is a caution zone that warrants board visibility and contract fortification, and above 20% to 30% is elevated risk that calls for active mitigation. The 10% figure is also the GAAP disclosure threshold, so it doubles as the level at which outsiders formally start paying attention.

How does customer concentration affect valuation?

It lowers your multiple by raising the perceived risk of your cash flows. Concentration above 30% from one account can reduce a sale price by 20% to 35% versus a diversified peer, and can shrink the buyer pool because many private-equity firms decline to bid on heavily concentrated businesses. The discount reflects fragility, not weak performance, which is why two companies with identical financials can be valued very differently.

What is a good way to measure concentration across the whole customer base?

Use the Herfindahl-Hirschman Index alongside simple top-1 and top-5 shares. Square each customer's revenue-share percentage and sum them: below 1,000 is low concentration, 1,000 to 2,000 is moderate, and above 2,000 is high. The index captures the full shape of your revenue rather than just the largest name, and it is easy to track monthly.

How do you reduce concentration risk without losing the big customer?

Grow the rest of the base and fortify the contract. Point dedicated sales effort at new and smaller accounts so the ratio falls because the denominator rose, and lock the large account into longer non-cancelable terms with auto-renewal and real switching costs. You are lowering the probability the revenue leaves and diluting its share at the same time, without starving your best relationship.

Should I tell a potential buyer about my concentration, or wait?

Tell them early, with a mitigation plan attached. Concentration disclosed up front is a manageable fact; concentration discovered in diligence undermines the buyer's trust in everything else and reduces your leverage. Lead with the numbers, the contract protections, the renewal history, and the pipeline that would replace a lost account.