Guide
Voluntary US CBP supply-chain security programme that underpins FAST, lower exam rates, and trusted-trader benefits.
CTPAT (Customs-Trade Partnership Against Terrorism) is a voluntary US Customs and Border Protection programme that certifies importers, carriers, brokers, and other supply-chain parties as meeting CBP's supply-chain security requirements. Members get reduced border exam rates, priority processing during disruptions, and — critically for carriers — eligibility for the FAST driver programme. Canada's equivalent is Partners in Protection (PIP); the two are recognised by each other through a mutual-recognition arrangement.
Joining CTPAT is not a one-time form — it is an ongoing commitment to a published set of Minimum Security Criteria (MSC). Members write a security profile covering physical security, personnel security, container and trailer security, business partner screening, cyber security, and incident reporting. CBP reviews the profile and, if accepted, the member enters Tier I.
A subsequent CBP validation — an on-site audit of the member's facilities and processes — moves the member to Tier II. Tier III is reserved for members who exceed the MSC and have a track record of validated compliance.
For carriers, CTPAT is effectively required if you want your drivers to meaningfully use FAST lanes — every load moved through a FAST lane must have a CTPAT-enrolled carrier. Carriers with high cross-border volume, particularly to major importers, almost always benefit.
For smaller carriers, the compliance overhead is real: written policies, background checks, trailer inspection routines, and physical security at the yard. If your volume is modest and your shippers are not CTPAT-importers, the juice may not be worth the squeeze.
Canada's equivalent programme is Partners in Protection (PIP), administered by CBSA. A mutual-recognition arrangement between CTPAT and PIP means that a member of one programme generally gets reciprocal treatment in the other's jurisdiction for most benefits — but the two are separately administered, and dual-enrollment is common for carriers operating in both directions.
The most common compliance gap at validation time is gap between the written security profile and actual yard practice — a documented trailer-inspection protocol that nobody actually follows. Validators open-ended the site visit by asking drivers and dispatchers what they do, not by reading the profile.
The second common gap is business-partner screening — CTPAT members are responsible for verifying that their significant supply-chain partners either meet CTPAT criteria or have a documented security profile of their own.
CBP does not charge a CTPAT application fee. The real cost is internal: drafting the security profile, implementing the required controls, training staff, and preparing for validation. Most carriers budget several thousand dollars of internal time plus the cost of physical security upgrades.
Yes. CTPAT is a carrier programme; FAST is a driver programme. Many CTPAT carriers employ non-FAST drivers who use the regular commercial queue. The FAST lane only requires a FAST-qualified driver for the specific load that uses it.
No, but they are cousins. CTPAT is the US programme. AEO (Authorised Economic Operator) is the World Customs Organization's international framework, with equivalent programmes in the EU and elsewhere. Both are supply-chain security schemes; CTPAT and the EU's AEO are mutually recognised.
Suspension removes the exam-rate benefit and affects FAST eligibility. CBP issues a suspension letter with the grounds; members typically have the opportunity to correct the issue and re-validate. Repeated or serious violations can result in expulsion from the programme.
Written for operational context by the BorderPro team. Not legal or customs-compliance advice — verify program specifics with CBSA, CBP, or a licensed customs broker before acting on them. Programs evolve and this page may not reflect every recent change.
BorderPro files ACE and ACI eManifests, tracks PARS/PAPS, and surfaces broker RNS — in one dashboard.