CTPAT Minimum Security Criteria for 3PLs and Highway Carriers

The validation letter gives thirty days' notice, and the security officer discovers that the seal log is a spreadsheet nobody has reconciled since spring, the route waypoints were set for a lane the carrier stopped running, and the dispatch team has never been asked to verify a driver's explanation for a late arrival. Every one of those is a written "must" in the criteria the carrier signed up to.

CTPAT's Minimum Security Criteria are specific: a 17-point conveyance inspection, high-security seals meeting ISO 17712, a four-step seal check, pre-set transit times between waypoints, and annual reviews of the risk assessment and seal procedures. Run as daily records rather than a binder, they make a validation visit a sampling exercise instead of a scramble, and the same records answer a shipper's security questionnaire.

• What this guide covers: the 12 criteria categories, eligibility for highway carriers and third-party logistics providers, conveyance and seal controls, tracking and route rules, people and cyber criteria, and what CBP validation involves.
• What it adds: a seal event record, a timestamped route deviation, an illustrative annual cost in USD and INR, and a comparison with India's AEO-LO accreditation for logistics operators.

How the 12 criteria categories sit under three focus areas

CBP publishes a separate Minimum Security Criteria (MSC) booklet for each business type, and each booklet groups its criteria into 12 categories under three focus areas. Every criterion is marked "Must" or "Should", and the booklet notes that ID numbers not listed do not apply to that business type.

• Corporate Security focus area: 1 Security Vision and Responsibility, 2 Risk Assessment, 3 Business Partners, 4 Cybersecurity.
• Transportation Security focus area: 5 Conveyance and Instruments of International Traffic Security, 6 Seal Security, 7 Procedural Security, 8 Agricultural Security.
• People and Physical Security focus area: 9 Physical Security, 10 Physical Access Controls, 11 Personnel Security, 12 Education, Training and Awareness.

The criterion numbers quoted in this guide come from the Highway Carriers booklet dated October 2021. The Third Party Logistics Providers booklet uses the same structure but its own selection of criteria, so a 3PL should map its programme to its own booklet rather than borrow a carrier's or an importer's checklist. The table below assigns each category to an owner and the record a validator will ask to see.

Who qualifies: highway carrier and 3PL eligibility in practice

Eligibility is narrower than many applicants expect. A highway carrier must be an active US/Mexico or US/Canada carrier, and a 3PL must handle international cargo bound for the US with its own transport, consolidation or warehousing assets.

CBP's highway carrier page lists the conditions: an active cross-border operation, a staffed business office in the US, Mexico or Canada, a four-letter SCAC and a US DOT number, a company officer designated as the primary cargo security officer, a signed partner agreement and a security profile in the CTPAT Portal. Carriers crossing both borders apply as Mexican carriers, and Mexico-based applicants also supply incorporation and RFC tax identification documents.

• 3PL cargo test: directly involved in handling and managing international cargo destined for the US; domestic-only providers are not eligible.
• 3PL asset test: logistics functions performed with the 3PL's own transportation, consolidation or warehousing assets on the client's behalf.
• 3PL subcontracting limit: no more than one level of subcontracting beyond the 3PL, except to other CTPAT members; double brokering is not allowed.
• 3PL licensing: licensed or bonded by the FMC, TSA, CBP or DOT, with a staffed office in the United States.

The subcontracting limit connects directly to carrier vetting. Highway carrier criterion 3.8 requires a member that subcontracts inbound US transport to another highway carrier to use either a CTPAT-certified carrier or one working directly for the member under a written contract that requires adherence to all the criteria. Our double brokering prevention guide covers the identity checks that stop an unvetted carrier entering the chain.

Conveyance inspections: the 17-point check at the yard and the dock

For land border crossings, conveyances and trailers must be inspected at the storage yard and, where feasible, on entering and leaving the yard and at the point of loading. The highway carrier booklet sets this as a 17-point inspection: seven points on the tractor and ten on the trailer.

• Tractor, seven points: bumper, tyres and rims; doors, tool compartments and locking mechanisms; battery box; air breather; fuel tanks; interior cab compartments and sleeper; fairing and roof.
• Trailer, ten points: fifth wheel area including the natural compartment and skid plate; exterior front and sides; rear bumper and doors; front wall; left side; right side; floor; ceiling and roof; inside and outside doors and locking mechanisms; outside and undercarriage.
• Supervisory searches, criterion 5.8: management should run random searches after drivers have inspected, at the yard, after loading and en route, without warning.
• Pest findings, criterion 5.7: visible pest contamination must be removed, and the documentation retained for one year.

Criterion 12.2 requires drivers and others who perform these inspections to be trained for both security and agricultural purposes, including signs of hidden compartments, contraband in natural compartments and pest contamination, with refresher training after an incident or a procedure change. Agricultural Security in category 8 also requires written procedures to prevent visible pest contamination, including compliance with wood packaging material rules.

Seal control from the seal log to the VVTT check before the border

Seal security is the most document-heavy category and the easiest to test. Every sealable shipment must be sealed immediately after loading with a high-security seal meeting the current ISO 17712 standard, and every seal movement must appear in a log that reconciles to shipping documents.

Criterion 6.1 requires detailed written seal procedures kept at the local operating level and reviewed at least once a year. They must cover restricted access to seals and secure storage, recording receipt and issue of seals in a log, what to do when a seal is broken in transit, and how to handle discrepancies, including retaining altered seals and reporting compromised seals to CBP and the relevant foreign authority where applicable.

CTPAT seal control for highway carriers under the October 2021 Minimum Security Criteria requires ISO 17712 high-security seals applied right after loading (criterion 6.2), written seal procedures reviewed at least once a year (6.1), documented seal audits reconciling inventory to logs (6.6), and the four-step VVTT check (6.7) on every seal.

• View: look at the seal and the container locking mechanisms and confirm they are intact.
• Verify: compare the seal number with the shipment documents.
• Tug: pull the seal to confirm it is affixed properly.
• Twist: twist and turn a bolt seal to make sure its parts do not unscrew or separate.

Two further rules catch carriers out. LTL carriers picking up local freight without a consolidation hub must at least use a high-security padlock, then seal with an ISO 17712 seal at the last pickup before the border (criterion 6.3). Members holding seal stock must be able to show a laboratory testing certificate proving the seals meet ISO 17712 (criterion 6.5). The record below shows how a seal event can be captured so these checks run automatically.

{
  "eventType": "SEAL_VERIFIED",
  "eventTime": "2026-10-14T07:52:00-05:00",
  "location": { "type": "SHIPPER_DOCK", "siteId": "MTY-DOCK-04" },
  "conveyance": { "tractorId": "TR-118", "trailerId": "TL-5523", "scac": "ABCD" },
  "seal": {
    "number": "4417-AX-0912",
    "type": "BOLT",
    "issuedFromLogEntry": "SL-2026-10-0381",
    "iso17712LabCertificateRef": "CERT-SEAL-2025-07"
  },
  "documents": { "bolNumber": "BOL-77810", "bolSealNumber": "4417-AX-0912" },
  "vvtt": { "view": true, "verify": true, "tug": true, "twist": true },
  "inspector": { "employeeId": "E-2291", "role": "DRIVER" },
  "rules": [
    "reject if seal.number != documents.bolSealNumber",
    "reject if any vvtt step is false",
    "reject if issuedFromLogEntry is missing or already consumed",
    "alert security manager on any reject within 15 minutes"
  ]
}

Tracking, route waypoints and reviews of the dispatch log

Tracking criteria are where highway carriers differ most from other members. A tracking log or GPS must follow the conveyance en route to the US, cross-border routes must have pre-set waypoints and transit times, and management must check the logs against independent time-stamped documents.

Criterion 5.21 requires pre-designated routes with anticipated transit times between waypoints for peak and non-peak periods, and, where GPS is used, geofencing with alarms set to minimal tolerances. Criterion 5.22 requires procedures for significant route deviations and late arrivals, with drivers notifying dispatch and dispatch independently verifying the cause. After any stop, criterion 5.23 requires a documented inspection of seals and locks before the trip resumes.

• Tracking log, criterion 5.11: a tracking and monitoring log or GPS is a "must"; paper driver logs must record stops and the inspections done.
• Trailer coupling, criterion 5.19: where GPS is fitted, a sensor coupling should track the trailer as well as the tractor.
• Random reviews, criterion 5.27: management must review tracking logs against time-indicative documents such as fuel receipts, scale logs, toll receipts and ACE data, and record unaccounted gaps.
• Collusion controls, criterion 7.13: based on risk, procedures must reduce the chance of drivers and dispatchers colluding to falsify travel times.

The trace below shows a northbound load where every individual record existed but the chain between them broke. It is illustrative; the identifiers follow the seal event above.

1. 05:10, carrier yard: TR-118 and TL-5523 pass the 17-point inspection, record INS-26-10-1142, signed by the yard supervisor.
2. 07:52, shipper dock: Loading completes, seal 4417-AX-0912 is applied and VVTT recorded; BOL-77810 carries the same number.
3. 09:20, en route: GPS shows a 42-minute stop 18 km from the border, outside every waypoint; geofence alarm GF-3307 fires. The driver messages "flat tyre"; dispatch acknowledges and closes the alarm without checking.
4. 10:15, before the bridge: The driver performs a last-chance VVTT check and the seal is intact, but no post-stop inspection was logged after the 09:20 stop.
5. Controlled version: The TMS will not close GF-3307 until dispatch attaches independent evidence, here a tyre shop receipt timed 09:31, and the driver logs a post-stop seal check; the weekly 5.27 review samples the trip against toll and fuel receipts.

Tracking for security overlaps with, but is not the same as, high-value theft prevention. Our guide to TAPA trucking and facility security for high-value cargo covers an industry standard aimed at theft; CTPAT aims at smuggling and terrorism risk on cargo bound for the US, so its evidence centres on seals, inspections and verified transit time.

People, access and cyber criteria that a validator tests on paper

The people and cyber criteria are mostly written procedures plus evidence that they run. A validator will sample a hiring file, a training roster, a driver identification log and the date of the last cybersecurity policy review.

• Driver identification, criterion 10.3: drivers delivering or receiving cargo must show government-issued photo ID before cargo is released, or carrier-issued photo ID where that is not feasible.
• Pre-hire checks, criterion 11.1: written processes must screen applicants and periodically check current staff, verifying employment history and references where the law allows.
• Background screening, criterion 11.2: a "should", subject to local law and database availability, extending to temporary staff by sensitivity of the role.
• Training records, criterion 12.1: evidence such as logs, sign-in sheets or electronic records, ideally with date, attendees and topics.
• Cyber reviews, criteria 4.6 to 4.9: policies reviewed at least annually, access restricted by role, individually assigned accounts and secure remote access such as VPN or multi-factor authentication.

Annual reviews anchor a highway carrier's CTPAT evidence: the risk assessment under criterion 2.3, the cybersecurity policies under criterion 4.6 and the written seal procedures under criterion 6.1 must each be reviewed at least once a year, and a validator will compare the dated review records with the CTPAT Portal security profile.

Most of the personnel evidence already exists for safety compliance. The driver qualification file checklist covers FMCSA records a US motor carrier keeps anyway; adding the CTPAT identity, reference and training items to the same file avoids a second, inconsistent personnel folder. Cyber evidence works the same way: the access review that IT already runs for audit can carry the CTPAT criterion numbers, so one dated sign-off serves both.

What a CBP validation involves and how often it recurs

Certification and validation are separate steps set by statute. Under the SAFE Port Act, codified in Title 6 of the US Code, CBP is to complete certification within 90 days of an application where practicable, validate within one year of certification where practicable, and revalidate at least once in every four-year period.

Section 964 sets the 90-day certification target and section 965 the one-year validation target, both qualified "to the extent practicable". Section 969 requires a framework for revalidation not less frequently than once during each four-year period after the initial validation. In practice a Supply Chain Security Specialist reviews the security profile, visits facilities and samples records against the criteria the member claims to meet.

India's AEO-LO accreditation and how it differs from CTPAT

CTPAT's highway carrier and 3PL categories are not open to Indian domestic operators, so the Indian counterpart for a logistics provider is the Authorised Economic Operator programme's single-tier AEO-LO status under CBIC Circular 33/2016-Customs. CBP's October 2024 CTPAT global presence map lists India among its mutual recognition partners.

The AEO programme, set up by Circular 33/2016-Customs of 22 July 2016 and amended by Circular 3/2018-Customs of 17 January 2018, offers importers and exporters three tiers and gives logistics providers, custodians and terminal operators, customs brokers and warehouse operators a single LO tier. A Jawaharlal Nehru Custom House FAQ of August 2019 summarises eligibility as being established in India, involved in customs-related activity, having handled at least 25 bills of entry or shipping bills in the last financial year and three financial years of business.

• Application annexures: AEO-LO applicants submit the application form, a security plan (Annexure B), a process map (Annexure C), and evidence against the safety and security requirements listed in Annexure E.5.1 to E.5.7.
• Physical verification: the AEO team visits the premises, aiming to do so within 90 days, with a stated maximum of 180 days from complete application to certificate.
• Validity and renewal: the certificate runs five years for AEO-LO; the renewal application is due 90 days before it lapses.
• Change notices: changes such as a new legal entity, address, senior customs personnel or locations must be notified within fourteen days.

India's AEO-LO accreditation under CBIC Circular 33/2016-Customs, as amended by Circular 3/2018-Customs, covers logistics providers, custodians, customs brokers and warehouse operators in one tier, requires at least 25 customs documents in the last financial year, and remains valid for five years, against CTPAT's four-year revalidation cycle.

Illustrative annual cost of the security programme in USD and INR

The running cost of compliance is mostly labour on inspections and reviews, not hardware. The figures below are illustrative for a 60-tractor US/Mexico carrier and an Indian container freight station operator seeking AEO-LO; rates and volumes are assumptions to replace with your own.

The useful number is the unit cost, because it can be compared with what a held load costs. If one shipment held at the border for a seal discrepancy costs the carrier a lost day of tractor and driver time plus the customer's penalty, a few avoided incidents a year pay for the review hours. Treat the table as a template: replace each rate with your payroll and supplier figures before taking it to a budget meeting.

Checks the TMS should enforce and calls left to the security officer

Write the criteria that compare two recorded values into the TMS as hard stops, and leave judgments about intent or credibility to trained people. Software can read a seal photo or summarise a partner's answers, but it should not close a deviation or approve a subcontractor on its own.

The same principle applies when you vet new carriers more generally; the carrier onboarding checklist lists the documents to collect before a first tender. For more on transport compliance, see the logistics and supply chain hub. If you need seal, inspection and route evidence captured in your TMS before the next validation, send us an RFP describing your lanes, fleet size and subcontracting model.