Guide · Trusted-Trader Programs

What Does Partners in Protection (PIP) Require?

By Mandy-Lynn Aitken, 30 years on both sides of the supply-chain auditUpdated September 27, 2026

You're the one who gets the questionnaire — from a customer mapping their own chain, from a broker who needs your file before a load clears, sometimes straight from CBSA if a shipment gets a second look. The question is always some version of the same thing: are you a Partners in Protection member? And the honest answer, more often than the industry likes to admit, is that the file has been open for months and nobody has closed it. PIP asks Canadian companies — carriers, brokers, forwarders, warehouse operators, manufacturers, exporters, importers, anyone who actually touches the movement of goods — to put a company profile, a security profile, and a documented list of every business partner on file with CBSA, and keep all three true. This guide walks through what CBSA actually reads, section by section, and where PIP meets C-TPAT if you also cross south.

What is Partners in Protection?

PIPis the Canada Border Services Agency's trusted-trader program — Canada's side of the same idea as the U.S. C-TPAT program. You put your operation on paper for CBSA: who you are, what you move, how you secure it, and who else touches it on the way. In return you get faster clearance and fewer examinations. Applying costs nothing. Keeping it true costs everything you have.

Where most companies underestimate this requirement is the word documented. It doesn't mean your tier-one list — the names on your purchase orders. Over 25 years doing this from both sides of the desk, I've watched directors discover, usually mid-review, that a supplier pool of three thousand is closer to twelve thousand once you follow it to tier two and tier three. Each supplier carries its own layer of sub-suppliers, carriers, and handoffs underneath it, split into categories most companies have never mapped. PIP's business-partner requirement is asking for that whole depth, not the letterhead.

Before you read the five requirements below, try the exercise first. Take the supplier or partner you'd call most critical — the one you could not run without — and open their file. Can you name their sub-suppliers? Their carrier? The port or facility where the actual production happens? If the file stops at the name on the invoice, you already know where PIP's business-partner section is going to find you.

What does PIP require of Canadian companies?

PIP asks for five things, and every one of them is a document that has to stay true.

1. A completed company profile. Start here: who you are, what you move, how the operation is actually structured today — not the version somebody wrote at onboarding and never touched again.

2. A written security profile. Then the real work: physical security, personnel security, your procedures, documented the way CBSA expects to read them, with evidence attached instead of promised. It has to match the floor. A binder full of good writing does not help a reviewer standing in a warehouse the binder still describes as open two years after it closed.

3. Documented business partners. Every carrier, warehouse, and handoff belongs in the record — tier two and tier three included, not just tier one. Partners who go quiet when you ask for their security standing get flagged, never ignored.

4. Proof the procedures work. A profile is a claim. A review tests the claim against the dock, the driver, and the double shift: training records for the people who execute the procedure, incidents and corrections logged, not just described.

5. A profile that stays current. New lane, new partner, new building — each one quietly ages the profile you filed. PIP membership is a document with a named owner, updated the week something in the chain changes, not a form you filed once and moved on from.

Put together, those five items add up to one job: proving, on paper and on the floor, that you actually know your own chain.

How does the PIP application process work?

You submit a security profile to CBSA. CBSA reviews it against the minimum security requirements, runs a risk assessment, and may schedule a site validation visit. After that, membership involves periodic CBSA site visits to confirm what you documented is what actually happens.

There is no membership fee. PIP, like C-TPAT and AEO, is free to apply for. The cost is the work: writing the profiles, screening every business partner, documenting all of it, year after year. Most companies find that getting in is the easy part. The obligation that comes back every year, and is hardest to prove, is verifying that your business partners still meet the criteria. The application is a moment. The partner due diligence is the job.

Two practical notes on rhythm. First, trusted-trader programs generally expect a roughly 12-month re-attestation cadence, so build your evidence collection around an annual cycle rather than a one-time push. Second, start renewal outreach 60 to 90 days before any program deadline, so the evidence is in hand before the paperwork is due.

None of this needs a new department or a standing meeting on your calendar. It needs the profile getting the same attention on your desk as everything else you're already accountable for — because once it does, it stops being the file that ages quietly in the background and becomes one more thing you know is handled.

How does PIP pair with C-TPAT?

PIP is CBSA's program. C-TPAT is the U.S. program, run by U.S. Customs and Border Protection. Different agencies, the same trusted-trader principles, and the review differs in the details: PIP centers on submitting a security profile followed by periodic CBSA site visits, while C-TPAT involves a CBP validation visit, given roughly thirty days' advance written notice, plus ongoing compliance checks.

The useful part is mutual recognition. Built on the WCO SAFE Framework, mutual recognition means two customs authorities accept each other's trusted-trader status. C-TPAT, PIP, and AEO satisfy each other, and the supplier evidence behind any of them feeds directly into Bill S-211 due diligence. A verified PIP chain earns standing toward C-TPAT and AEO. In practice, one well-run partner assessment supports several programs at once — the trap is doing the same supplier work twice for two programs when the underlying evidence is largely the same.

For Canadian companies selling into the United States, the pairing stopped being optional in 2026. The “Strengthening Customs Enforcement” executive order, signed June 3, 2026, directs that foreign importers of record be CTPAT-validated, where CBP deems them eligible, or file entries through a CTPAT-validated and licensed customs broker, within roughly 180 days, about November 30, 2026. It also sets a 50% minimum penalty floor for customs violations and an importer good-standing requirement. If your goods cross into the U.S., C-TPAT is now a practical requirement to import, and the evidence you build for PIP is the same evidence C-TPAT asks for.

What are the benefits of PIP membership?

The operational benefits are consistent across the trusted-trader programs: reduced cargo examinations and fewer inspections, shorter border wait times with priority processing, recognition as a low-risk trader with a customs point of contact, and mutual-recognition standing with partner programs worldwide.

The deeper benefit is defensibility. Membership gives you a documented, defensible record that you verified your supply chain — the thing that protects you when an incident, an audit, or a hard question arrives. Under Bill S-211, whose annual report is due May 31 each year, a thin answer on supplier due diligence can mean a fine of up to $250,000, with directors and officers personally liable. A living PIP profile, with partners documented and evidence attached, is exactly the kind of record that stands behind that report.

The benefit that never makes it into the program literature: your customers stop having to ask. One partner who can't show their security standing. One review that lands before the profile is finished. One customer who asks if you're in PIP and doesn't wait for the answer. Membership is increasingly the difference between being the supplier a customer approves today and the one they put on hold.

How do you keep a PIP membership current?

Treat the profile as a living document with a named owner, because that is how CBSA treats it. A review does not read your binder and go home. It checks the claim against the dock, the driver, and the double shift, and the distance between the written procedure and the lived reality is what fails you.

Keeping current means three habits. First, ownership: one named person accountable for keeping the company profile and security profile true, with updates whenever routes, partners, or buildings change, so the profile is review-ready on demand. Second, partner discipline: your documented partner list only stays true if you keep verifying the partners on it, communicating your security requirements, and flagging the ones who go quiet. An annual verification rhythm across your chain, with closer attention on the highest-risk partners, keeps the record honest between reviews. Third, train your people like the profile depends on them, because during a review it does. A driver or dock lead who can describe the procedure out loud, without checking a binder first, tells a reviewer more than the binder does — and that is worth building on purpose, not hoping for.

The failure mode is rarely dramatic. It is a profile written once, in a burst of effort, by someone who then went back to their real job, aging quietly while the chain kept changing underneath it. The fix is not more effort. It is a system that keeps the document alive without borrowing your team's evenings to do it.

Sources: C-TPAT Validation Process (CBP, PDF) · Executive Order 14411, Strengthening Customs Enforcement (Federal Register)

The programs this maps to: PIP · C-TPAT · Bill S-211