Reality, I suppose that most procuments is played along the line : this Singapore company claimed it was for their local legal entity, and here the certificate/contract they signed.

At this stage, there is no reason to not sign the contract to provide whatever they ask. DD done, risk management done, risk but acceptable etc.

So yes everyone is playing the game.