Guide · USMCA / CUSMA
What Must a USMCA Certificate of Origin Actually Contain?
By the time Procurement signs off, Finance has already built the duty savings into this quarter's numbers, the broker has already filed the entry on the assumption that the paperwork behind it is right, and Ops is counting on the goods clearing on schedule — and the one document holding up all three of those assumptions is usually the thinnest file in the building. Ask a customs broker for “the USMCA certificate of origin” and the honest answer is that it does not exist — the one NAFTA used, Customs Form 434, was retired along with NAFTA itself. What replaced it is a certification: nine required pieces of information that can sit on an invoice, a packing list, or a one-page document written from scratch, as long as all nine are actually there. Canada calls the same agreement CUSMA. Mexico calls it T-MEC. CBP enforces it at the US border, CBSA enforces it at the Canadian border, and both of them are checking the identical nine elements. In every one of these files I have opened, the goods qualified. What cost the shipment its preferential treatment was paperwork missing one of the nine.
Why does everyone keep asking for a form that doesn't exist?
For twenty-six years, a company moving goods across this border filled out one government form and the file was closed. NAFTA's Certificate of Origin had a fixed layout, fixed boxes, and one accepted shape. USMCA deliberately dropped that form to cut paperwork friction, and replaced the fixed shape with a short list of required content that can live on whatever document is already moving with the shipment.
For a company that builds the certification correctly, that is real relief. For one that doesn't, the same freedom means nothing stops a missing data element from riding along unnoticed — there's no box left unchecked to catch it. A paper form used to make an omission obvious before the shipment ever left the dock. Today, the first person to notice is usually a CBP or CBSA officer holding the shipment at the border — and that is usually the first anyone in the building hears about it.
The nine things a USMCA/CUSMA certification actually has to contain
Whatever document carries it — invoice, packing list, or a page on its own — a valid certification of origin has to contain all nine of these, set out in 19 CFR Part 182, Appendix Aon the US side and restated in CBSA's own proof-of-origin guidance on the Canadian side:
- The certifier. Who is certifying — the importer, the exporter, or the producer. State which one; the three carry different knowledge and different liability.
- Certifier details. Name, address (including country), email, and telephone number.
- Exporter details. Name, address, email, and phone — required only when the exporter is not the certifier; “same as certifier” is enough when that is true.
- Producer details. Name, address, email, and phone when the producer is not the certifier or exporter — or “Various” when there is more than one, or a statement that the information is available on request if the producer wants it kept confidential.
- Importer details. Name, address, email, and phone, if known — “Various” for more than one importer, “Unknown” if it genuinely isn't known yet.
- Description and classification. A description of the good and its six-digit Harmonized System tariff classification.
- The origin criterion. The specific rule-of-origin basis that makes the good “originating” under the agreement — tariff shift, regional value content, or wholly obtained in the territory.
- The blanket period. If the certification is meant to cover more than one shipment of the identical good, the period it covers — up to twelve months.
- Authorized signature, date, and certification statement. The signer taking responsibility, in writing, for the accuracy of everything above it.
Read that list as a checklist, not as trivia. Every one of the nine is something a validator or a customs officer can ask to see restated and backed up, and a certification missing even one of them is invalid — there is no partial credit for nine out of ten.
Who is actually allowed to sign it
The importer, the exporter, or the producer — and letting the importer sign at all is the real change from NAFTA, which only let the exporter or the producer certify. Under USMCA the importer can self-certify based on their own knowledge that the good qualifies, or on information the exporter or producer provided to them. An importer can now be the name on a certification about production facts they never saw with their own eyes.
Whoever signs owns the statement. If CBP or CBSA comes back with a question about the origin criterion claimed, or the tariff classification used, the agency is coming back to the signature on the certification — the name on that line answers for it, whether or not that person ever set foot on the production floor.
How long it's good for, and how long you have to keep it
A single-shipment certification is good for that shipment. A blanket certification can cover repeated shipments of the identical good for up to twelve months from the date it was signed — the clock runs from the signature date itself. I have watched companies track that clock against their fiscal year instead, and lose coverage mid-shipment without ever noticing the two calendars had drifted apart.
Record-keeping runs separately from validity, and it runs longer than most people expect. On the US side, the importer, the exporter, and the producer are each required to keep the certification and the records that support it for five years— exporters and producers from the date the certification was signed, importers from the date of importation. On the Canadian side, CBSA requires six years. One retention clock cannot be right for both borders at once — a company running a single number is correct for one of them and short on the other. CBP and CBSA can both ask for that file well inside those windows, long after the shipment itself has cleared and been forgotten.
Where this goes wrong — from watching it happen for over 25 years
I have seen the same three failures recur across industries, and none of them come from anyone trying to cut a corner.
The certifier isn't actually in a position to know.A trading company signs as “exporter” because that is the role on the invoice, but they never touched the actual production and have no visibility into whether the good really qualifies. The origin criterion gets checked off anyway, because the box has to say something, and nothing behind it would hold up if anyone asked.
The blanket certification quietly expires mid-shipment.Twelve months pass, nobody is tracking the signature date against the shipping calendar, and shipments keep moving under a certification that is no longer valid. It is almost never caught at the time — it surfaces when an auditor pulls entries against certification dates months later and finds a gap nobody saw.
Nobody has actually calculated the origin criterion.“It was assembled here” feels like enough, but the rule of origin behind a given tariff classification usually requires a specific regional value content calculation or a tariff shift — and nobody in the building has run those numbers. The certification names a criterion. The company has never checked whether the good genuinely meets it.
What it actually costs when one of the nine is missing or wrong
CBP or CBSA can deny the preferential tariff treatment outright, which means the full duty rate applies retroactively, with interest, on top of whatever penalty applies if CBP or CBSA reads the error as negligence. Neither agency has to catch it at the border to act on it — both can request the certification and the records behind it at any point inside that retention window, five years in the US and six in Canada, and the request goes to the certifier whose name is on the signature line. A problem from eighteen months ago can still land on that person's desk today, attached to a shipment everyone in the building had already stopped thinking about.
A correct certification is only as strong as the evidence sitting behind the signature — the actual production records, the actual tariff-shift or regional-value-content math, the actual producer who can be named and reached if CBP or CBSA calls. That evidence is exactly what a signed Master 5-Step Risk Assessment is built to hold: the producer and the supply chain behind a given good, mapped, verified, and kept current, so the origin criterion on the certification is a statement someone can actually stand behind. This is the work XFACTOR VERIFIED runs: the evidence the paperwork is supposed to be reporting, built and kept current before anyone asks for it.
Free guide
Free guide: How to Evaluate Supplier Risk
The evidence behind a correct origin claim is the same evidence behind a defensible supplier file. We'll email you the plain-English guide to what to check, and what a validator will ask for.
See what's actually standing behind your origin claims.
Read the 5-step risk assessment methodology, or see how Procurement gets one view of supplier readiness.
Sources: USMCA Center (CBP) · 19 CFR Part 182 — United States-Mexico-Canada Agreement (eCFR) · CBSA Memorandum D11-4-2, Proof of Origin · USMCA full agreement text (USTR)
The department this maps to: Procurement · Related reading: Supplier Due Diligence · Supply Chain Risk Assessment · C-TPAT vs PIP vs AEO · What Procurement Owns