C-TPAT · Manufacturers· U.S. Customs & Border Protection
The floor is the evidence.
A validator does not take your procedure manual at its word. They want to see the production floor, the shipping dock and the employee roster match what the manual claims, at the exact moment pressure is highest: end of shift, rush order, a trusted manager away.
Who CBP actually certifies here
CBP accepts direct C-TPAT membership from foreign manufacturers only from a limited list of eligible countries (Canada, Mexico, and a small set of others CBP names in its own eligibility requirements). Manufacturers outside that list are assessed as business partners of the certified importer who buys from them, the same mechanism described on the exporters page.
How the 5-step risk assessment applies
The five-step risk assessment maps every point where a finished good leaves your line and enters someone else’s custody, rates the threat at each one, holds your own facility against the twelve criteria, writes a corrective action plan with a named owner for every gap, and keeps the whole record current so it survives an unannounced walk-through.
The Minimum Security Criteria that carry the most weight for manufacturers
Physical Security
Perimeter fencing, lighting and locking devices around the production floor and the finished-goods storage area, not just the front office.
Procedural Security
Chain of custody from the end of the production line to the loaded conveyance, documented well enough that a discrepancy traces to a shift and a name.
Personnel Security
Pre-employment background screening for production and shipping staff, re-verified on a cadence, not only at hiring.
Physical Access Controls
Positive identification of employees, visitors and deliveries at every entry point, including the ones a double shift tempts people to prop open.
Business Partner Requirements
Your own sub-suppliers and contract packagers are assessed too, the same obligation your customer holds you to.
Source: U.S. CBP, C-TPAT Minimum Security Criteria (cbp.gov)
Questions specific to manufacturers
Can a foreign manufacturer join C-TPAT directly?
Only from the specific eligible countries CBP names in its own program eligibility requirements. Outside that list, your path is as a documented, assessed business partner of the certified U.S. importer you supply, which is the same five-step risk assessment, run on your facility, just filed under your customer’s certification rather than your own.
What actually fails a manufacturer in a C-TPAT review?
Almost never a missing policy document. It is the distance between the policy and the floor: a procedure that works during the day shift but not the night shift, a new hire onboarded after the busy season started, a sub-contractor nobody mapped. The assessment is built to find that distance before a validator does.
Also on C-TPAT
8 suppliers · 14-day trial
Start your 14-day trial: run your 8 highest-risk suppliers through the full C-TPAT 5-step risk assessment. No contract, no card.
30 years · 44,000 organizations · 500,000 assessments · 100% success on C-TPAT, PIP and AEO validations.