Customs and Border Protection is rejecting country of origin claims from importers who did a lot of the right things. One company recently compiled more than a thousand pages of documentation, receipts, factory photographs, employee records, equipment logs, in response to a formal challenge covering close to twenty entries. The origin claim was still rejected, and the company was hit with tens of thousands of dollars in additional duties.
This isn't a story about a company that didn't try hard enough. It's what a growing number of importers are running into: putting in real effort, and still coming up short when it actually counts.
Doing the work isn't the same as doing the right work
For years, supplier compliance has meant collecting the right certificates, completing the required audits, and keeping files somewhere retrievable in case anyone asks. Most companies doing that work are doing plenty of it. A thousand pages of documentation, produced under pressure and on short notice, is not nothing.
What's changed is what CBP actually wants to see. Recent enforcement, sharpened by this year's executive order tightening importer accountability, is looking for real-time evidence from the factory floor, staffing records, export paperwork from the supplier's own side, a documented history of audits and corrective actions, visibility past the first-tier supplier. Producing a lot of paperwork fast, after a challenge lands, isn't the same as having already built that picture.
Here's the part most companies underestimate: they often have more of this already than they realize. Photos from a supplier visit two years ago. An old audit report. A spreadsheet tracking a corrective action that got resolved and forgotten. The information usually exists somewhere, scattered across teams, inboxes and individual people's files, without anyone having pulled it into one place. That gap, between having the information and being able to produce it fast, is exactly what turns a routine CBP request into a costly scramble.
Six places to start
Six areas are worth building into daily operations now, long before a challenge ever lands.
Geotagged visual evidence
A photo sitting in an inbox six months after a factory visit says very little. A photo tied to a specific inspection, timestamp, and GPS location at the moment it was taken says a great deal more. Regular on-site audits that capture images this way build a running, verifiable record of a factory floor, not a reconstruction of one.
Factory employment records
Authorities have increasingly requested staffing information as part of forced labor due diligence, not just product paperwork. This is often the hardest evidence to collect. Suppliers can be reluctant to share it, and verifying it takes time, which is exactly why it belongs on the list of things to start now, not the list of things to scramble for later.
Supplier export documentation
The paperwork a supplier files with its own customs authority, showing where a shipment actually originated, carries weight an importer's own records can't replicate alone. The value comes from tying a specific export document to a specific factory, product and shipment, not from collecting more of it in isolation.
Active supplier due diligence
An audit is a snapshot. What happens after it, whether findings were raised, whether corrective actions followed, whether anyone verified the fix, is where due diligence actually lives. A supplier file with a documented history of resolved issues tells a far stronger story than one clean score from eighteen months ago.
Visibility beyond tier one
Knowing who shipped the finished product is no longer the whole picture. Materials and components carry their own origin questions, and the companies caught flat-footed are usually the ones who never looked upstream of their direct supplier. Nobody maps an entire supply chain overnight. Start with the highest-risk product lines and work outward.
A trial audit
Pick a recent import order at random. Give the team 24 hours to compile everything: manufacturing location, the suppliers and factories involved, supporting origin evidence, inspection and audit history, corrective actions, production-site evidence. Then ask one more question: how long did it take to find it all? An answer that involves digging through inboxes, shared drives, and someone's phone is the gap an external request will find first.
Building the evidence trail, not just the file
Most companies already hold more of this than they realize. It's rarely all missing. It's spread across inboxes, PDFs, old audit files and someone's phone, sitting alongside real gaps, categories like employment records, export documentation, or visibility into tiers beyond the first, that haven't been started at all.
Both problems produce the same result. When someone asks for the full picture, a request that should take an afternoon turns into weeks of digging, or turns up gaps nobody had flagged before.
The fix isn't collecting more for its own sake. It's connecting what already exists and steadily closing the categories that don't, so the full picture is sitting there before anyone has to ask for it.
Run the trial audit described above.
Twenty-four hours is usually enough to find out whether that evidence trail already exists, or still needs to be built. If you want a clearer view of where yours already stands, talk to the Qarma team. We'll walk through it using your actual supply chain data, not a hypothetical one.
