Annex 1 to the General Rules of Foreign Trade for 2025

Formats and Models of Foreign Trade

For the purposes of Article 31, first paragraph of the Federal Tax Code (CFF), in relation to Rule 1.2.1., the auxiliary formats and models used by foreign trade users are made known, as follows:

Content

I. Official identifications and proof of address.
II. Foreign trade formats:

References

Indicative References	Format Name	Authority Before Which It Is Presented
A. Authorizations
	Name of the Authorization
A1. Temporary import authorization.	Corresponding Customs	Free writing
A2. Temporary import authorization of boats / Authorization for temporal importation of boats.	Corresponding Customs	Free writing
A3. Temporary import authorization of goods, intended for the maintenance and repair of goods temporarily imported.	Customs or entry section	Free writing
A4. Authorization to import goods only once, without having concluded the registration procedure or being suspended in the Importers Registry, (Rule 1.3.5.).	DGOA	Free writing
A5. Authorization to natural persons to import goods only once, without being registered in the Importers Registry, (Rule 1.3.6.).	ACNCE / Corresponding ADJ	Free writing
A6. Registration authorization for the Sectoral Exporters Registry (Rule 1.3.7.).	AGSC/ADSC	Free writing
A7. Authorization for the importation of specially constructed or transformed vehicles, equipped with various devices or apparatus to fulfill a contract derived from a public bid, (Rule 4.2.9.).	ACAJACE	Free writing
A8. Rectification authorization of customs declarations.	ACAJACE	Free writing
A9. Authorization to import goods for national security purposes.	ACAJACE	Free writing

Indicative References	Notice Name	Authority Before Which It Is Presented	Submission Medium
B. Notices
B1. Notice of compensation of contributions and revenues to foreign trade.	Corresponding Customs	Free writing
B2. Temporary export notice.	Corresponding Customs	Free writing
B3. Temporary import or export notice and return of containers.	Entry or exit Customs	Free writing
B4. Notice of introduction of donated goods to the country's border strip (Rule 3.3.6., fraction II).	Customs where the operation will be processed.	Free writing
B5. Notice to extend the term granted by SE to change to the definitive import regime or return goods temporarily imported to abroad (4.3.8.).	ACAJACE	Free writing
B6. Notice for the transfer of auto parts located in the border strip or region to the automotive or vehicle manufacturing industry in the rest of the national territory.	ACAJACE	Free writing
B7. Notice of option for the determination of provisional value (global transport insurance).	ADACE	Digital Window
B8. Notice of registration of electronic devices and work instruments.	Entry Customs	Free writing
B9. Notice of transfer of goods subject to the Duty Free fiscal deposit regime.	Entry or exit Customs	Free writing
B10. Notice of transfer of goods from companies with IMMEX Program, RFE or Authorized Economic Operator.	ADACE or customs as applicable	SAAI
B11. Notice of transfer of goods from companies with IMMEX Program in the Authorized Economic Operator modality, item: holding company of companies.	AGACE	SAAI
B12. Electronic notice of import and export.	Customs	SAAI
B13. Volumetric Storage Capacity Notice (Rule 2.3.8.).	Corresponding Customs	Free writing
B14. Assignment conferred on the customs broker to carry out foreign trade operations or its revocation.	* Electronic Format: RFC Procedures/Importers and Exporters/Update your assigned tasks	AGSC	SAT Portal
B15. Assignment conferred on the customs agency to carry out foreign trade operations or its revocation.	* Electronic Format: Procedures/RFC/Importers and Specific Sectors/Update of Assigned Tasks	AGSC	SAT Portal
B16. Electronic notice of rejection (Rule 1.8.2.).	DGIA	SAT Portal
B17. Notice of safe return of foreign vehicles.	ADACE	Digital Window

Indicative References	Certificate Name	Authority Before Which It Is Presented
C. Certificates
C1. Certificate of temporary import, return or transfer of containers.	Customs	Digital Window
C2. Certificate of origin of agricultural products.	Customs Authority	Upon request
C3. Certificate of transfer of goods.	Customs Authority	Upon request

Indicative References	Declaration Name	Authority Before Which It Is Presented
D. Declarations
D1. Postal Form.	Customs Personnel
D2. Customs declaration for passengers coming from abroad (Spanish and English).	Customs	Free writing
D3. Passenger money departure declaration (Spanish and English).	Customs	Free writing
D4. Declaration of Internment or Extraction of cash amounts and/or documents for payment (Spanish and English).	Customs	Free writing / SAT Portal
D5. Declaration for Movement in Customs Account of Goods, Imported to Return in the Same State in accordance with Art. 86 of the L.A.	Customs	Free writing
D6. Document of origin of extracted, industrialized or manufactured mineral products.	Corresponding Customs
D7. Payment of contributions to foreign trade (Spanish, English and French).	Customs	Free writing / SAT Portal
D8. Temporary import declaration for trailers, semi-trailers and container carriers.	Customs	Free writing / SAAI
D9. Multiple payment form for foreign trade.	* Simplified electronic format at the electronic address: https://pccem.mat.sat.gob.mx/PTSC/cet/FmpceContr/faces/resources/pages/pagos/formularioMultiplePago.jsf.	SAT Portal

Indicative References	Format Name	Authority Before Which It Is Presented
E. Formats
E1. Official gummed label for internal transit control by air.	Customs
E2. Value Manifestation.	Customs Authority	Digital Window
E3. Company Profile.	AGACE	Digital Window
E4. Customs Broker Profile.	AGACE	Digital Window
E5. Land Transporter Profile.	AGACE	Digital Window
E6. Courier and Package Profile.	AGACE	Digital Window
E7. Controlled Premises Profile.	AGACE	Digital Window
E8. Strategic Controlled Premises Profile.	AGACE	Digital Window
E9. Railway Transporter Profile.	AGACE	Digital Window
E10. Industrial Parks Profile.	AGACE	Digital Window
E11. General Warehouse Profile.	AGACE	Digital Window
E12. Manifestation of will to assume joint liability in terms of Rule 7.3.3., fraction XIII.	ACAJACE	SAT Portal
E13. Request for issuance of advance ruling.	ACAJACE/ACNCE	Free writing
E14. Format to present the Report on compensation or reduction of expenses against the revenue due.	AGACE	Digital Window

Indicative References	Request Name	Authority Before Which It Is Presented
F. Requests
F1. Request for Issuance of Certified Copies of Customs Declarations and their Annexes.	ANAM / DGIA	Digital Window
F2. User and password request to enter the Integrated Customs Operation System (SOIA).	DGMEIA	Free writing
F3. Request for Security Matrix for Delivery of Foreign Trade Information.	DGMEIA	Free writing

III. Auxiliary models used by foreign trade users.

Indicative References	Model Name	Authority Before Which It Is Presented
M1.1. Customs Declaration (Pedimento).	Customs	Free writing
M1.2. Import Customs Declaration. Part II. Partial shipment of goods.	Customs	Free writing
M1.3. Export Customs Declaration. Part II. Partial shipment of goods.	Customs	Free writing
M1.4. Transit Customs Declaration for transshipment.	Corresponding Customs	Free writing
M1.5. Simplified Form of the Customs Declaration.	Corresponding Customs	Free writing
M1.6. Consolidated Notice Format.	Corresponding Customs	Free writing
M1.7. Operation Document for Customs Clearance (DODA).	Corresponding Customs	Free writing
M1.8. Electronic Capacity Letter.	Corresponding Customs	SAAI
M1.9. Capacity Letter for international exhibitions.	Corresponding Customs	Annexed to the customs declaration
M1.10. Report of exports of submanufacturing or submaquila operations.	None
M1.11. List of documents.	Customs	Free writing

I. Official identifications and proof of address:

a) For the purposes of the procedures contained in the General Rules of Foreign Trade (RGCE) and its Annexes, official identification shall be understood as any of the following valid documents:

Voter ID card issued by the National Electoral Institute (INE).
Passport.
Professional ID card with photograph. Electronic professional ID cards are excepted.
Driver's license and, in the case of minors, a valid driving permit.
In the case of minors, the ID card issued by public educational institutions (affiliated with the SEP) or private institutions with official validity recognized, accredited with photograph and signature, or the Personal Identity Card (Cédula de Identidad Personal) issued by the National Population Registry (RENAPO) of the Ministry of the Interior (SEGOB), valid.
In the case of senior citizens, the ID card of the National Institute of Senior Citizens (INAPAM).
In the case of foreigners, the corresponding migratory document issued by the competent authority (in its case, migratory extension or renewal).

b) Likewise, for the purposes of foreign trade formats and procedures, proof of address shall be understood as any of the following documents:

Account statement in the name of the taxpayer provided by institutions of the financial system. This document must not be older than four months, counted from the payment deadline.
Last property tax receipt; in the case of receipts for periods less than one year, it must not be older than four months, and in the case of annual receipts, it must correspond to the current fiscal year. (This document may be in the name of the taxpayer or a third party; in the case of legal entities, it may be in the name of one of the partners or shareholders; it is not necessary that it be shown as paid).
Last receipt for electricity, gas, pay TV, internet, telephone, or water services, provided that such receipt is not older than four months (this document may be in the name of the taxpayer or a third party; when legal entities state that they cannot obtain these receipts in their name, it may be in the name of one of the partners or shareholders; it is not necessary that they be shown as paid); in the case of annual service receipts, it must correspond to the current fiscal year.
Last settlement in the name of the taxpayer from the Mexican Social Security Institute (IMSS).
Contracts of:
i. Lease, accompanied by the last rent payment receipt with an age not greater than four months that meets fiscal requirements, or the sublease contract and the last rent payment receipt with an age not greater than four months that meets fiscal requirements (this document may be in the name of the taxpayer or a third party, except in the case of legal entities where it may be in the name of one of the partners or shareholders).
ii. Trust agreement duly notarized.
iii. Bank account opening that is not older than three months (this document may be in the name of the taxpayer or a third party, except in the case of legal entities where it must be in the name of the entities themselves).
iv. Electricity, telephone, or water services, that is not older than two months (these documents may be in the name of the taxpayer or a third party).
Settlement or residence letter in the name of the taxpayer, issued by State or Municipal Governments or their equivalents in Mexico City according to their territorial scope, that is not older than four months.
Alignment and official number receipt issued by the State, Municipal Government or its equivalent in Mexico City; this receipt must contain the taxpayer's address and be not older than four months (this document may be in the name of the taxpayer or a third party, except in the case of legal entities, where it must be in the name of the entities themselves).
Official receipt or payment order issued by the State, Municipal Government or its equivalent in Mexico City; this receipt must contain the taxpayer's fiscal address, be not older than four months, and in the case of annual payment, must correspond to the current fiscal year (this document may be in the name of the taxpayer or a third party, except for the RFC registration procedure in the case of legal entities, and it is not necessary that it be shown as paid).
In the case of wage earners and taxpayers without economic activity, the valid voter ID card issued by the National Electoral Institute (INE), when it indicates the address.

The presentation of any of the documents referred to in the preceding subsection shall only have an indicative value regarding the location of the address indicated by the taxpayer for the purposes of the procedures presented in accordance with this Resolution; therefore, they shall not be understood as proof of fiscal address in procedures resulting from the exercise of verification powers by customs authorities, nor for the purposes of Article 10 of the Federal Tax Code (CFF) and other applicable legal provisions.

II. Foreign trade formats:

A1. Temporary Import Authorization

Date of entry ||||||| Expiration date ||||||| day month year day month year

Customs/customs section

Key

1. Owner's Data.
Full name (paternal surname/maternal surname/first name(s)), trade name or corporate name ___________________________________________________________________________________ Address ________________________________________________________________________________

2. Importer's Data.
Full name (paternal surname/maternal surname/first name(s)), trade name or corporate name ___________________________________________________________________________________ Address ________________________________________________________________________________ Driver's License No. ___________________________________________________________________ Passport No. ____________________________ S.S.N. __________________________________________ ________________________________

Signature

3. Description of the goods.

4. Customs/customs section authorization.
Name _________________________________________________________ Employee badge No. __________________________________________ _________________________________

Signature

Stamp

Customs/Customs Section

5. Return Data.
Date ________________________________ day month year

Customs/customs section ______________________________ Key ___________________________________________________ Place ___________________________________________________

Front

Instructions

I. Write clearly, in block letters and with a ballpoint pen.
II. This application must be presented in original and copy.
III. Keep your application to be delivered at the BANJERCITO vehicle control office through which you will effect your return. It is your proof of the legal stay of your goods.
IV. This document is not valid if it shows erasures or alterations.
V. Remember that by providing inaccurate or false data, you will be subject to sanctions related to the presumption of smuggling.

Fields 1, 2 and 3 will be filled out by the importer; the rest are for exclusive use of the customs authority.

These data must be filled out by the customs authority:

Folio No. - The customs authority will note the folio number of the corresponding internal registry.
Date of entry - Will note the date of entry of the goods into national territory, starting with the day, month and year.
Expiration date - The date on which the temporary import of the goods expires will be noted, starting with the day, month and year.
Customs/customs section - Will note the name of the customs or customs section through which the goods are introduced.
Key - Will note the key of the customs or customs section through which the goods are introduced.

The importer will provide the following data:

1. Owner's Data:
Full name (paternal surname/maternal surname/first name(s)), trade name or corporate name.
Will note the name of the owner or trade name, starting with the paternal surname, maternal surname and first name(s), as well as their complete address.

2. Importer's Data:
Full name (paternal surname/maternal surname/first name(s)), trade name or corporate name.
Will note the name of the importer or trade name, resident abroad if applicable, starting with the paternal surname, maternal surname and first name(s), as well as their complete address.
Driver's License No. - Will note the driver's license number.
Passport No. - Will note the passport number.
S.S.N. - Will note the social security card number.
Signature - Will affix their autograph signature.

3. Description of the goods:
In this box, will note the description, nature, state, origin and other characteristics of the goods, as well as other data that allow their identification, or in their absence, the technical or commercial specifications necessary for their identification, such as brand, model, type, serial number, size, color, etc.

The following data must be filled out by the customs authority:

4. Customs/customs section authorization:
Name - Will note the full name of the person granting the authorization on behalf of the customs.
Employee badge No. - Will note the personal identification (badge) number of the customs employee granting the authorization.
Signature - The employee who authorized the application will affix their signature.
Stamp of the Customs/customs section - In this space, the stamp of the customs or customs section granting the authorization will be placed.

5. Return Data:
Date - Will note the date of return of the goods, starting with the day, month and year.
Customs/customs section - Will note the name of the customs or customs section through which the goods will be returned.
Key - Will note the key of the corresponding customs or customs section.
Place - Will note the name of the city, municipality and state corresponding to the customs or customs section.

Back

A2. Temporary Import Authorization of Boats / Authorization for temporal importation of boats

Folio No./No. Of Folio:

TO BE FILLED OUT BY THE IMPORTER/THE IMPORTER WILL PROVIDE THE FOLLOWING INFORMATION

1. Date of entry / Date of entryExpiration date / Expiring date
||||||| ||||||___|
day/day month/month year/year day/day month/month year/year

2. Owner's generals.
Full name (Last name/name) or company's name.
________________________________________________________________________________________ Address___________________________________________________________________________ ________________________________________________________________________________________

3. Importer's generals.
________________________________________________________________________________________ Last nameMiddle nameName Address ________________________________________________________________________________________ ________________________________________________________________________________________ Driver's license ________________________________________________________________________________________ Passport number _________________________________________________________________ Mexican citizen ( ) Non Mexican citizen ( ) If non Mexican, indicate your migratory status: ________________________________________________________________________________________ Owner ( ) Spouse ( ) Ancestor ( ) Descendant ( ) Other ( )

4. Boat's information.
Class of boat
________________________________________________________________________________________ Name___________________________________Trademark __________________________ Length__________________________________Model _________________________________ Model year ________________________ Registry number ________________________________________________________________________________________ ________________________________________________________________________________________ Motor (motors) ________________________ Hull's series __________________ Color ______________________________________Ownership's title ________________________________________________________________________________________

22 DIARIO OFICIAL Viernes 17 de enero de 2025
Número de serie/ Serial number Número de matrícula/Enrol number ________________________________________________________________________________________ VIN/VIN _________________________________________________________________________________ Finalidad a la que será destinada la embarcación/The object of boats ________________________________________________________________________________________ ________________________________________________________________________________________
5. Destino de la embarcación/Boat´s destination: Explotación/Exploration
________________________________________________________________________________________ Exploración/Exploration ________________________________________________________________________________________
6. Declaro bajo protesta de decir verdad que retornaré oportunamente al extranjero la embarcación importada
temporalmente a los Estados Unidos Mexicanos y que me abstendré de cometer infracciones o delitos relacionados con su indebida utilización durante su estancia en este país.
I hereby declare under oath that I will opportunely return abroad the temporarily imported boat, and that I will abstain myself of commiting any penalties or felonies related with their improper use while their stay in this country. __________________________________ Firma/ Signature ESTE FORMATO DEBIDAMENTE REQUISITADO AMPARA LA LEGAL ESTANCIA EN EL PAÍS DE LA EMBARCACION/ THIS FORM, ONCE STAMPED, COVERS THE LEGAL STAY OF THE BOAT IN MEXICO.
7. Autorización de la aduana o sección aduanera/Customs office or customs section
authorization.
Nombre/Name _______________________________________________________ No. de gafete del empleado/Employee gafet number _____________________________ Firma/Signature Sello Aduana o sección aduanera/ Seal Customs office or customs Section
8. Datos del retorno/Return information.
Fecha/Date _______________ ______________ _______________ día /day mes/month año/year Aduana o Sección aduanera/Customs office or customs section ________________________________________________________________________________________ Clave/Code_____________________________________________________ Lugar/Place______________________________________________________________________________ REVERSO/BEHIND REVERSE __________________________________

Viernes 17 de enero de 2025 DIARIO OFICIAL 23
Instrucciones / Instructions
-Escribir con claridad, letra de molde y bolígrafo/Write clearly with ballpoint pen.
-Esta solicitud se debe de presentar en original y copia/This form should be submitted in original and a copy.
-Conserve su solicitud autorizada para ser entregada en la oficina de control de la aduana por donde vaya a efectuar su retorno. Este documento es su comprobante de la estancia legal de su embarcación/This form is your legal importation document, and it should be provided to the customs control office when returning abroad. -Este documento no es válido si presenta raspaduras o enmendaduras/This document is not valid if it presents scratchings or amendments. -Recuerde usted que al proporcionar datos inexactos o falsos se hará acreedor a sanciones relacionadas con la presunción de contrabando/You are liable for any false statements or inaccurate information provided in this document to penalties related to smuggling presumption. -No. de Folio/No. of Folio.- La autoridad aduanera anotará el número de folio del registro interno que corresponda/Custom´s authority will provide each form with its corresponding number. Los campos 1, 2, 3, 4, 5 y 6 serán llenados por el importador, los campos 7 y 8 son de uso exclusivo de la autoridad aduanera/Camp 1, 2, 3, 4, 5 and 6 must be completed by the importer, camp 7 and 8 are for official use only. Estos datos deberán ser llenados por el importador/The importer will provide the following information:

Fecha de ingreso/Date of entry.- Anotará la fecha de ingreso de la embarcación a territorio nacional/The
date on which the boats has crossed the mexican border.
Fecha de vencimiento/Expyring date.- Se anotará la fecha en que venza la importación temporal de la embarcación/The date on which the authorization for the temporal importation of the boat expires.
Datos del propietario/Owner´s generals.
Nombre completo (apellido paterno/apellido materno/nombre(s)), razón o denominación social y domicilio fiscal/Full name (last name/name) or company´s name and complete address should be written down.
Datos del importador/Importer´s generals.
Anotará el nombre del importador, así como su dirección completa/The importer´s name and complete address should be written down.
Licencia de conducir/Drivers license.- Anotará el número de la licencia de conducir/The driving license number should be written down.
Pasaporte/Passport.- Anotará el número de pasaporte/The passport number should be written down.
Nacional o Extranjero/Mexican or Non Mexican Citizen.- Anotará con una X si es nacional o extranjero/Mark with an X whether you are Mexican or Non Mexican Citizen.

24 DIARIO OFICIAL Viernes 17 de enero de 2025
Si es extranjero, indique su calidad migratoria: Indicará mediante número asignado a su calidad migratoria/If Non Mexican, state your migratory status: Indicate by your assigned number your migratory status.
Marcará con una X si la persona que solicita la importación temporal de la embarcación es el propietario, cónyuge, ascendiente o descendiente/Mark with an X whether the person that requires the temporal importation of the boat is the owner, spouse, ancestor or descendant.
4. Datos de la embarcación/Boat´s information.- En este recuadro anotará los datos de la embarcación,
tales como: clase de embarcación, nombre, marca, eslora, tipo, modelo, número de registro, número de motor, número de serie del casco, color, número del título de propiedad, número de serie, número de matrícula NIV /The boat´s information should be written down, such as class, name, trademark, length, model, model year, registry number, motor number, hull´s series number, color, real state property, serial number, enrol number, vehicle identification number.
5. Destino de la embarcación/Boat´s destination: Señalará con una X la opción correspondiente al destino
de la embarcación, pudiendo ser: explotación o exploración/An X mark should be marked at the correspondant boat destination (Exploitation or exploration). Finalidad a la que será destinada la embarcación/The object of boats: El importador señalará el uso que le dará a la embarcación/The importer´s object of boats should be written down.
6. Firma/Signature.- Asentará su firma autógrafa/Your signature should be written down.
Notas/Notes:
Deberá acreditar la propiedad de la embarcación para lo cual deberá anexar a la presente solicitud copia de cualquiera de los siguientes documentos: el documento equivalente, el contrato de fletamento, título de propiedad, o bien del certificado de registro otorgado por la autoridad competente/The boats ownership should be proved by annexing to this application form any of the following documents: invoice, transport contract, ownership´s title or the registry certificate granted by the competent authority. Deberá anexar copia de la siguiente documentación/A copy of the following documents should be attached:
I. Las características técnicas de las mercancías antes descritas/The technical characteristics of the above
mentioned merchandise are indicated;
II. Acta constitutiva en la que se establezca dentro del objeto social de la empresa, que se dedicará a la
prestación de los servicios de exploración o explotación, y /Company´s by-laws in which exploration or exploitation should be included at the company´s purpose, and
III. En su caso, el contrato, concesión o autorización correspondiente, para la prestación de los servicios
que requieran de dichas mercancías para su cumplimiento/If the case may be, the contract, concession or correspondant authorization which demonstrates that with the above mentioned merchandise, the services will be rendered.

Viernes 17 de enero de 2025 DIARIO OFICIAL 25
A3.
Autorización de importación temporal de mercancías, destinadas al mantenimiento y reparación de las mercancías importadas temporalmente Importación temporal. ( ) Retorno. ( ) Fecha ||||||| día mes año Aduana/Sección aduanera ______________________________ Clave: ________________________________________

Datos del importador.
Nombre o Razón Social: _______________________________________________________________________________ Paterno Materno Nombre(s) R.F.C.
(Nota: En caso de extranjeros, deberá declararse el R.F.C. genérico EXTR 920901 TS4) Domicilio:___________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________
Datos relativos al pedimento, o a la forma oficial utilizada para la importación temporal de los bienes objeto de
mantenimiento o reparación.
Fecha de importación temporal
Fecha de vencimiento día mes año día mes año
No. de pedimento/ No. de folio de la forma oficial: ________________________________________________ Descripción de la mercancía:
Marca: ______________________________________ Modelo: _______________________________________________ Tipo: ________________________________________ No. de Serie: ___________________________________________ Unidad: ______________________________________ Cantidad: _____________________________________________ __________________________________________________________________________________________________
Datos de las partes, refacciones, o bienes destinados al mantenimiento o reparación.
Descripción de la mercancía: ___________________________________________________________________________ Especificaciones técnicas o comerciales:__________________________________________________________________ En su caso:
Marca: _____________________________________________ Modelo: ________________________________________ Tipo: _______________________________________________ No. de Serie: ____________________________________ No. de parte: ______________________________________________________________________________________ __________________________________________________________________________________________________
Destino que se le dará a las partes o refacciones reemplazadas:
Retornadas ( ) Destruidas ( ) Importadas definitivamente ( ) Autorizó ingreso/salida en aduana.
Nombre: __________________________________________________________________ No. de gafete del empleado: __________________________________________________ Cargo: ____________________________ _________________________ Firma Sello Aduana
Datos de la destrucción o importación definitiva de las partes o refacciones reemplazadas.
Pedimento de importación definitiva: Aduana/sección/clave:
_____________________________________ __________________________________________ Fecha y No. del acta de destrucción: Autoridad ante la que se presentó el aviso de destrucción:
______________________________________ __________________________________________ Declaro bajo protesta de decir verdad que los datos asentados en la presente solicitud son ciertos.
____________________________________________________________ Nombre y firma del importador o su representante legal

26 DIARIO OFICIAL Viernes 17 de enero de 2025
Instrucciones
No. de folio: La aduana de entrada, asignará un número consecutivo a la solicitud de la operación.
Operación: Se deberá marcar con una X la operación que se va llevar a cabo, importación temporal o retorno, según se trate.
Fecha: Se deberá anotar la fecha de presentación de la solicitud ante la autoridad aduanera.
Aduana/sección aduanera: Se deberá declarar la aduana y/o sección aduanera, por la cual se llevará a cabo la operación.
Clave: Se deberá declarar la clave de la aduana y sección aduanera, por la cual se llevará a cabo la operación de mantenimiento o reparación, conforme al apéndice 1 del Anexo 22.

Datos del importador:
Nombre o Razón Social: Se deberán declarar el apellido paterno, materno y el nombre, de la persona que presenta la solicitud.
RFC: Se deberá declarar la clave en el RFC de la persona física o moral encargada en llevar a cabo la operación. En caso de extranjeros, se deberá declarar la clave en el RFC, genérico EXTR920901TS4.
Domicilio: Se deberá declarar el domicilio fiscal de la persona física o moral encargada de llevar a cabo la operación. En el caso de extranjeros, deberá declarar el domicilio fiscal del residente en territorio nacional.
Datos relativos al pedimento, o la forma oficial utilizada para la importación temporal de los
bienes objeto de mantenimiento o reparación:
Fecha de importación temporal: En este campo se deberá declarar la fecha día, mes y año, de la importación temporal.
Fecha de vencimiento: En este campo se deberá declarar la fecha día, mes y año, del vencimiento de la importación temporal.
No. de pedimento/No. de folio de la forma oficial: En este campo se debe declarar el número de pedimento o el número de folio del documento que la autoridad aduanera asignó para llevar a cabo la operación.
Descripción de la mercancía: Se deberá señalar la descripción comercial de la mercancía objeto del mantenimiento o reparación.
Marca: En caso de tener marca, se deberá anotar la marca comercial del bien.
Modelo, Tipo, No. de serie: En caso de contar con la información del Modelo, Tipo y/o número de serie, deberá ser declarada en la solicitud.
Unidad: Se deberá declarar la unidad de medida comercial de las mercancías objeto de mantenimiento o reparación.
Cantidad: Se deberá declarar la cantidad de bienes que serán objeto del mantenimiento o reparación.

Viernes 17 de enero de 2025 DIARIO OFICIAL 27
3. Datos de las partes o refacciones, o bienes destinados al mantenimiento o reparación:
Descripción de la mercancía: Se deberá señalar la descripción comercial de la mercancía objeto del mantenimiento o reparación.
Especificaciones técnicas o comerciales: Se deberá señalar la descripción comercial de la mercancía objeto del mantenimiento o reparación.
Marca: Se deberá anotar la marca comercial del bien.
Modelo, Tipo, No. de serie: En caso de contar con la información del Modelo, Tipo y/o número de serie, deberá ser declarada en la solicitud.
Cantidad: Se deberá declarar la cantidad de bienes que serán objeto de la autorización.
4. Destino que se le dará a las partes o refacciones reemplazadas:
Destino: En este caso se deberá marcar con una X el uso al que será(n) sometida(s) la(s) mercancía(s) que fueron objeto del reemplazo, retornadas, destruida o importada definitivamente.
5. Datos de la destrucción o importación definitiva de las partes o refacciones reemplazadas:
Pedimento de importación definitiva: Se declara el número del pedimento con el cual se efectuó el cambio de régimen de las mercancías reemplazadas.
Aduana/sección/clave:
Fecha y No. del acta de destrucción: Se deberá señalar la fecha y No. del acta de destrucción, de las partes o refacciones reemplazadas.
Autoridad ante la que se presentó el aviso de destrucción: Se deberá declarar el Nombre de la autoridad aduanera a la que se presentó el aviso de destrucción de las partes o refacciones.
6. Nombre y firma del importador o su representante legal:
Se deberá declarar el apellido paterno, materno y el nombre, del importador o el representante legal de la empresa que presenta la solicitud y asentar la firma autógrafa.
Observaciones:
En la presente solicitud se deberá escribir con claridad, letra de molde y bolígrafo, se debe de presentar en original para la aduana, copia para el importador y copia para quien en su caso tenga la custodia de la mercancía. Este documento no es válido si presenta raspaduras o enmendaduras. Recuerde usted que al proporcionar datos inexactos o falsos se hará acreedor a sanciones relacionadas con la presunción de contrabando. Deberá anexar los documentos que, en su caso, demuestren el destino de las partes o refacciones reemplazadas. En el caso de refacciones para aeronaves, se deberá presentar una autorización por aeronave. Sólo se podrá hacer uso de esta solicitud, cuando las partes o refacciones puedan ser susceptibles de ser identificadas plenamente. No están sujetas a este tipo de operaciones las mercancías consumibles, tales como aceites, remaches, tornillos, cintas adhesivas, material sellante, líquidos, cables, entre otros.

28 DIARIO OFICIAL Viernes 17 de enero de 2025
A4.
Autorización para importar mercancía por única vez, sin haber concluido el trámite de inscripción o estando suspendidos en el Padrón de Importadores (Regla 1.3.5.)
Información General del Solicitante.
1. ¿Está suspendido en el Padrón
de Importadores
SI NO 2. ¿Ha iniciado el trámite para la inscripción en el Padrón de Importadores y no ha concluido?
SI NO
3. Señale el tipo de persona 4. ¿Ha realizado esta solicitud
con anterioridad en el presente ejercicio fiscal?
SI NO
Persona Moral
Persona Física
5. Nombre completo [(apellido paterno/materno/nombre
(s)], razón o denominación social:
Clave en el RFC
6. Domicilio fiscal:
Calle___________________________________ No. y/o letra exterior ________________________________ No. y/o letra interior _____________ Colonia______________________ Código Postal__________________ Municipio o Alcaldía_________________________________ Localidad ______________________________ Entidad Federativa ________________________________________________________________________ Teléfonos ______________________________________________________________________________________
7. Domicilio para oír y recibir notificaciones:
Calle_________________________ No. y/o letra exterior ___________ No. y/o letra interior __________ Colonia_____________________ Código Postal_____________ Municipio o Alcaldía___________________ Localidad _________________________ Entidad Federativa _______________________________________ Teléfonos _____________________________________________________________________________________
8. Persona(s) autorizada(s) para oír y recibir notificaciones y teléfonos:
9. Actividades en general a que se dedique el interesado:

Viernes 17 de enero de 2025 DIARIO OFICIAL 29
Información General de la Mercancía.
1. Descripción de la mercancía:
a) Descripción detallada de la mercancía a importar:_________________________________________________________________________________ ________________________________________________________________________________________ ________________________________________________________________________________________ b) Cantidad de mercancía: __________________________________________________________________ ________________________________________________________________________________________ c) Valor de la mercancía según el documento equivalente que corresponda:
________________________________________________________________________________________ ________________________________________________________________________________________ d) Fracción (es) arancelaria (s) y número (s) de identificación comercial de la mercancía (s) a importar:

2. Aduana por la que ingresará: ______________________________________________________________
3. Razón o justificación de la necesidad de importar mercancía:

4. La mercancía a importar es:
Explosiva Inflamable
Contaminante Radiactiva
Corrosiva Perecedera
Fácil descomposición Animales vivos
Datos del representante legal
1. Nombre completo [apellido paterno/materno/nombre (s)] Clave en el RFC
2. Domicilio fiscal:
Calle __________________________________________________ No. y/o letra exterior ________________ No. y/o letra interior _____________Colonia ____________________________________________________ Código Postal ____________________ Municipio o Alcaldía _______________________________________ Localidad ________________________________ Entidad Federativa ________________________________ Teléfonos _______________________________________________________________________________ Declaro bajo protesta de decir verdad, que todo lo asentado es cierto. _________________________________________________________ Firma autógrafa del solicitante o representante legal DIA________MES__________________AÑO __________

30 OFFICIAL GAZETTE Friday, January 17, 2025
Instructions
This application shall be filled out in two copies, either typed or in block letters, using a black or blue ink pen, and the figures must not invade the limits of the boxes.

General Information of the Applicant

Mark with an X if you are suspended in the Importers Registry.
Mark with an X if you have initiated the registration process with the Importers Registry and it has not concluded.
Mark with an X if it is a natural person or a legal entity.
Mark with an X if you have made a request previously in the current fiscal year.
Write the full name, business name or corporate name, as well as the RFC key of the importer, which is twelve or thirteen positions depending on the case.
Write the tax address, specifying street, exterior and interior number, neighborhood, postal code, Borough or Municipality, Locality, Federal Entity and phone numbers.
Write the address for hearing and receiving notifications, specifying street, exterior and interior number, Neighborhood, Borough or Municipality, postal code, Locality, Federal Entity and phone numbers. This item shall only be filled in if it is different from the preceding item.
Mark the full names of the persons authorized to hear and receive notifications, as well as the phone number of each of them.
Write the general activities in which the applicant is engaged.

General Information of the Merchandise

Write within the description of the merchandise the following:
a) The detailed description of the merchandise to be imported, indicating the data that allow its individual identification (serial number, part, brand or model), or in its absence, the technical or commercial specifications. In the case that there is more than one merchandise, the description must be made for each of them. b) The total quantity of each merchandise to be imported, indicating the unit of measurement for marketing (kilo, gram, meter, piece, liter, pair, set, etc.) and the tariff unit of measurement. c) The value of each of the merchandise, according to the equivalent document that corresponds. d) The tariff fraction and the NICO of each of the merchandise to be imported.
Indicate the Customs Office through which the merchandise will enter.
Record the reason or justification of the necessity for which the procedure is carried out.
Mark with an X if the merchandise to be imported is explosive, flammable, contaminating, radioactive, corrosive, perishable, easily decomposable or live animals.

Data of the Legal Representative

The general data of the legal representative shall be recorded, specifying the full name and the RFC key.
Write the tax address of the legal representative, specifying Street, Exterior and interior number, Neighborhood, postal code, Borough or Municipality, Locality, Federal Entity and Phones.
The applicant or their legal representative shall sign their autograph signature.
For any clarification in the filling of this form, you can obtain information on the SAT Portal or visit the ANAM offices located at Paseo de la Reforma No. 10, Tabacalera Neighborhood, Cuauhtémoc Borough, postal code 06030 of the SAT located at Avenida Hidalgo, number 77, C.P. 06300 Guerrero Neighborhood, Cuauhtémoc Borough, Mexico City, during an attention schedule from Monday to Thursday from 9:00 to 17:00 hours, and Friday from 9:00 to 14:00 hours.

Friday, January 17, 2025 OFFICIAL GAZETTE 31
Procedure Instruction for the Authorization to import merchandise only once, without having concluded the registration process or being suspended in the Importers Registry (Rule 1.3.5.)
Who presents it?
Natural and legal persons obliged to register in the Importers Registry who have not yet concluded the registration process or who are suspended in the said Registry.
To whom is it directed?
To the DGOA.
Sending options:
You can also send the application and documents via SEPOMEX or using the services of courier companies.
When is the authorization application presented?
After five days have passed since presenting through the SAT Portal, the application for registration in the Importers Registry or in the case of being suspended, the application to lift said suspension in the Importers Registry, according to the procedure sheets 5/LA Application for registration in the Importers Registry and 7/LA Application to lift the suspension in the Importers Registry, Sectoral Importers Registry or both or, in its case, of a sector or specific sectors of the latter. How is it presented? In writing through the form called Authorization to import merchandise only once without having concluded the registration process or being suspended in the Importers Registry (Rule 1.3.5.), attaching the documents provided for in the form:
I. Copy of the document that accredits that the merchandise is in deposit at the customs.
II. Documents that accredit that the merchandise is explosive, flammable, contaminating, radioactive, corrosive, perishable or easily decomposable or live animals.
III. Copy of the equivalent document or document that justifies the ownership of the merchandise to be imported, or in its case, a declaration under oath of telling the truth, that it is its legitimate owner.
IV. Copy of the registration folio of the application for registration in the Importers Registry or in the case of being suspended, of the application to lift said suspension in the Importers Registry, which is presented electronically on the SAT Portal, according to the procedure sheets 5/LA Application for registration in the Importers Registry and 7/LA Application to lift the suspension in the Importers Registry, Sectoral Importers Registry or both or, in its case, of a sector or specific sectors of the latter, in which the date of sending is stated.
V. Original or certified copy and copy for comparison, of the official identification of the legal representative or of the natural person who presents the application.
VI. Certified copy and copy for comparison, of the public deed or power of attorney through which legal representation is accredited.
What document is obtained?
Copy of the official letter of Authorization by which the DGOA is requested to allow the importation of the merchandise only once without having concluded the registration process or being suspended in the Importers Registry. In what time frame is the authorization issued? In a period not greater than three months, counted from the date on which the application was duly filled out together with the corresponding documentation. Applicable legal provisions Articles 59, fraction IV, of the Law, 86 of the Regulation and rule 1.3.5.

32 OFFICIAL GAZETTE Friday, January 17, 2025
A5.
Authorization to natural persons to import merchandise only once, without being registered in the Importers Registry, (Rule 1.3.6.)
Before filling out this form, read the instructions on the back.
Indicate, if applicable, the number of the official letter with which you were granted registration in the Importers Registry:
________________________________________________________________________________________ Indicate, if applicable, the number of the official letter if you have initiated the process for registration in the Importers Registry and it has not concluded:
________________________________________________________________________________________ ________________________________________________________________________________________ Indicate if you have made a request previously in the current fiscal year, if affirmative state the number with which you obtained the authorization:

General Information of the Applicant
Natural Person
RFC Key:
________________________________________________________________________________________ First Name(s) First Last Name Second Last Name
1.1. Address for hearing and receiving notifications, as well as the persons authorized for such effects
Street ___________________________ No. and/or letter exterior __________ No. and/or letter interior ________ Neighborhood ________________ Postal Code _________ Municipality or Delegation ______________________ Locality ___________ Federal Entity _____________________ Phones ______________________ Authorized personnel to hear and receive notifications:
________________________________________________________________________________________ Phones ________________________________________________________________________________________
Data of the legal representative
RFC Key:
________________________________________________________________________________________ First Name(s) First Last Name Second Last Name

Friday, January 17, 2025 OFFICIAL GAZETTE 33
Indicate with an x, that you declare, under oath of telling the truth, that the legal representative has the faculties to carry out acts of administration or those necessary to carry out the procedures of this procedure.
3. Information related to the procedure
3.1. Description of the merchandise:
Detailed description of the merchandise to import, indicating the data that allow its individual identification (serial number,
part, brand or model), or in its absence,
the technical or commercial specifications.
When it is about more than one merchandise, the description must be made for each of them.
Quantity of the merchandise to be imported, indicating the unit of measurement for marketing (kilo, gram, meter, piece, liter, pair, set, etc.).
Value of each of the merchandise, of according to the equivalent document that corresponds:
Tariff fraction(s) of the merchandise to be imported:
Customs Office through which the merchandise will enter:
Reason or justification of the necessity of the procedure.
3.2. Indicate with an x, that you declare, under oath of telling the truth, that the merchandise that is
intended to be imported will be destined for the personal use of the interested party or to carry out the purposes of its corporate object and will not be commercialized.
3.3. Indicate with an x, that you declare, to be the legitimate owner of the merchandise described in this
format in case of not having the equivalent document that justifies the ownership.
I declare under oath of telling the truth, that the data recorded in this format are true.
_________________________________________________________ Name and signature of the applicant (Natural person applicant or legal representative)

34 OFFICIAL GAZETTE Friday, January 17, 2025
Instructions
General Information
This form is freely printable and must be filled out in two copies or in block letters, using a black or blue ink pen, and the figures must not invade the limits of the boxes.
Presentation Options
The procedure must be presented at the official office of the ACNCE in person or using the services of SEPOMEX as well as those of Courier companies or before the ADJ that corresponds to the tax address of the applicant, through the tax mailbox. When the procedure is presented via tax mailbox, the present format duly filled out and the requirements indicated in these instructions must be attached digitally. The procedure takes effect from the date of receipt of the application in accordance with the means of presentation. Specific Indications When the space is insufficient for the item General Information related to the procedure, item 3.1., the merchandise can be described in an attached document referencing it in this format. Requirements
I. Proof of address.
II. Equivalent document that supports the ownership of the merchandise to be imported. If the information is
in a language other than Spanish, attach a translation of it.
III. Notarial power of attorney authorizing the legal representative to carry out acts of administration.
IV. Official identification of the legal representative and of the natural person who presents the application.
In the case that the procedure is presented before the ACNCE, it must be attached to the documentation referred to in this section.
For items III and IV, the documentation can be presented in certified copy. When presented in certified copy or in original, a simple copy for comparison must be attached.
Additional Information of the Procedure
The authorization will be granted in a period not greater than three months, counted from the date on which the application was duly filled out together with the corresponding documentation, provided that there is no request for additional information and documentation. A copy of the authorization official letter will be obtained by which the DGOA is requested to allow the importation of the merchandise without being registered in the Importers Registry. For any doubt about the filling of the format and/or requirements, as well as any consultation about the applications presented, you can obtain information on the SAT Portal or contact MarcaSAT 55 627 22 728 and the phone (55) 5802-1335.

Friday, January 17, 2025 OFFICIAL GAZETTE 35
A6.
Registration Authorization for the Sectoral Exporters Registry (Rule 1.3.7.)
FILL CLEARLY THE INDICATED FIELDS:
DATE OF PRESENTATION:
DAY _____ MONTH _____ YEAR ________
MARK WITH AN X THE PROCEDURE YOU REQUEST:
APPLICATION FOR REGISTRATION LIFT THE SUSPENSION A) CURRENT IDENTIFICATION DATA OF THE APPLICANT.
RFC KEY
NATURAL
PERSON
LEGAL
ENTITY
PATERNAL SURNAME, MATERNAL SURNAME, FIRST NAME(S), OR CORPORATE NAME OR BUSINESS NAME STREET NUMBER AND/OR LETTER EXTERIOR NUMBER AND/OR LETTER INTERIOR NEIGHBORHOOD POSTAL CODE PHONE LOCALITY MUNICIPALITY FEDERAL ENTITY MAIN TRADE OR ACTIVITY:
MARK WITH AN X IF IT IS 100%
EXPORTER
SELLER (VENDOR) IN NATIONAL
TERRITORY, OF THE MERCHANDISE
INDICATED IN THE REQUESTED
SECTORS
INDICATE WITH AN X IF IT IS PRODUCER PACKAGER MARKETER B) MARK WITH AN X THE NAME OF THE SECTOR OR SECTORS IN WHICH YOU WISH TO REGISTER OR REINCORPORATE.
1) ALCOHOL, DENATURED ALCOHOL AND
UNCRYSTALLIZABLE HONEY.
9) GOLD, SILVER AND COPPER.
2) BEER. 10) PLASTICS.
3) TEQUILA. 11) RUBBER.
4) FERMENTED ALCOHOLIC BEVERAGES
(WINES).
12) WOOD AND PAPER.
5) DISTILLED ALCOHOLIC BEVERAGES
(LIQUEURS).
13) GLASS.
6) CIGARETTES AND WORKED TOBACCO. 14) IRON AND STEEL.
7) ENERGY DRINKS, AS WELL AS
POWDER CONCENTRATES AND SYRUPS FOR
PREPARING ENERGY DRINKS.
15) ALUMINUM.
8) IRON ORES AND THEIR
CONCENTRATES.
C) DATA OF THE LEGAL REPRESENTATIVE.
PATERNAL SURNAME, MATERNAL SURNAME, FIRST NAME(S) RFC KEY EMAIL: PHONE:
I DECLARE AND ASSUME UNDER OATH OF TELLING THE TRUTH THE RESPONSIBILITY FOR THE TRUTH AND AUTHENTICITY OF THE INFORMATION AND DOCUMENTATION PROVIDED _________________________________________________________________ AUTOGRAF SIGNATURE OF THE LEGAL REPRESENTATIVE OR APPLICANT

36 OFFICIAL GAZETTE Friday, January 17, 2025
Instructions
I. Fill clearly the fields indicated.
II. Do not exceed the limits of the boxes.
III. Present 2 copies of this application duly filled out, comply with the requirements established in article
87 of the Regulation, rule 1.3.7., as well as with the procedure sheets 141/LA Application for registration in the Sectoral Exporters Registry or 142/LA Application to lift the suspension in the Sectoral Exporters Registry, contained in Annex 2.
IV. Write the date on which you present your application dd/mm/yyyy.
V. Mark with an X the procedure you request: Application for Registration or Application for authorization to lift
the suspension.
A) CURRENT IDENTIFICATION DATA OF THE APPLICANT.
I. Mark with an X if the promoter is a natural person or a legal entity.
II. Write the full name, business name or corporate name as appropriate, exactly as it is
registered with the RFC; in case of change of corporate name or business name or capital regime, you will write the new data assigned by the ADSC.
III. Write the RFC key of the exporter, which is twelve or thirteen positions depending on the case.
IV. Write the complete tax address specifying Street, Exterior and interior number, Neighborhood,
Delegation or Municipality, postal code, Locality, Federal Entity and Phones.
V. Write the main trade or activity.
VI. Mark with an X, if you are 100% Exporter or if you are a Seller (Vendor) in National Territory,
of the merchandise indicated in the Requested Sectors.
VII. Indicate with an X if you are, producer, packager or marketer.
B) SECTORS IN WHICH YOU WISH TO REGISTER OR REINCORPORATE.
I. Mark with an X the name of the sector or sectors in which you wish to register or lift the
suspension to reincorporate, according to the merchandise listed in Annex 10, fraction II, relative to the Sectoral Exporters Registry.
C) DATA OF THE LEGAL REPRESENTATIVE.
I. Write the full name and the RFC key.
II. Write email address and phone number.
III. The applicant (interested party or legal representative) shall sign their autograph signature.
Documents you must attach:
I. Copy of valid official identification and/or notarial instrument that accredits the legal personality of the
applicant of the procedure, as appropriate (natural person or legal entity).
II. If the legal representative is foreign, attach a copy of the document that proves their legal stay in
the country and that accredits that their migratory situation allows them to hold the positions mentioned in the constitutive act or corresponding power of attorney, in accordance with article 65 of the Migration Law.
III. Regarding foreign natural persons residing in national territory, include, in addition, a copy of the
document through which they prove their migratory situation in the country and that they are authorized to carry out business activities.
IV. If the natural person is represented by a third person, attach notarial power of attorney or power of attorney
in which they are authorized to carry out this procedure, in accordance with article 19 of the CFF.
V. If you changed the corporate name or business name of the company, you must send a copy of the public deed
notarized before a Notary Public, in which said change is stated.
VI. For the case of the application for registration in the Sectoral Exporters Registry, of Annex 10,
fraction II, sectors 8 to 15, the specific requirements indicated in the procedure sheets 141/LA Application for registration in the Sectoral Exporters Registry and 142/LA Application to lift the suspension in the Sectoral Exporters Registry, contained in Annex 2 and in accordance with what is established in the respective Registration Guides for the Sectoral Exporters Registry must be met. Reports and Result Consultation:
I. By phone to MarcaSAT: 55 627 22 728 and 01-87-74-48-87-28 for United States and Canada
options 7-3.
II. Personal attention in the SAT offices located in various cities in the country, on the days and hours
established in the following electronic address:
https://sat.gob.mx/personas/directorio-nacional-de-modulos-de-servicios-tributarios
III. Via Chat: http://chat.sat.gob.mx

Friday, January 17, 2025 OFFICIAL GAZETTE 37
A7.
Authorization for the importation of vehicles especially constructed or transformed, equipped with devices or diverse apparatus to fulfill a contract derived from public bidding, (Rule 4.2.9.)
Before filling out this form, read the instructions on the back.
Resident in territory national.
Resident in the foreign country

General Information of the Applicant.
Natural Person Legal Entity
RFC Key: RFC Key:

First Name(s) First Last Name Second Last Name __________________________________________ Business name or corporate name.
1.2. Address for hearing and receiving notifications, as well as the persons authorized for such effects.
Street _________________________ No. and/or letter exterior __________ No. and/or letter interior ______________ Neighborhood ________________________ Postal Code _______ Municipality or Delegation __________________ Locality _________________ Federal Entity _____________________ Phones ____________________ Authorized personnel to hear and receive notifications:
________________________________________________________________________________________ Phones _______________________________________________________________________________
2. Data of the legal representative.
RFC Key:
________________________________________________________________________________________ First Name(s) First Last Name Second Last Name Indicate with an x, that you declare, under oath of telling the truth, that the legal representative has the faculties to carry out acts of administration or those necessary to carry out the procedures of this procedure.
3. Information related to the procedure.
3.1. Description of the vehicle to be imported temporarily:
Brand: Serial Number:
Model: Year:
3.2. Tariff fractions and NICO in which the vehicle object of the
authorization is classified:
8705.20.01 00
8705.20.99 00
8705.90.99 00
3.3. In the case of being a resident in the foreign country, indicate the data of the joint responsible in
national territory who is up to date with the fulfillment of their tax obligations.
Natural Person Legal Entity
RFC Key: RFC Key:

First Name(s) First Last Name Second Last Name ___________________________________________ Business name or corporate name.

38 OFFICIAL GAZETTE Friday, January 17, 2025
4. Reason or justification for the need to import merchandise:
________________________________________________________________________________________ ________________________________________________________________________________________ I declare under oath that the data entered in this form is true. _________________________________________________________ Name and signature of the applicant (The resident in national territory or the resident abroad or the legal representative) Instructions General Information This form is freely printable and must be filled out in two copies, typed or in block letters, with a black or blue ink pen, and the figures must not invade the limits of the boxes. Presentation Options The procedure must be submitted at the official registry office of the ACAJACE. Via SEPOMEX or using the services of courier and package companies. The procedure takes effect from the date of receipt of the application in accordance with the means of presentation. Specific Indications In the general information section of the applicant, when it concerns a resident abroad, the box must be left blank unless they have an RFC key. Requirements
I. Favorable opinion from the SE.
II. Service provision contract. When the service provision contract is in a language other than Spanish, it must be accompanied by its translation.
III. Call for international public bidding carried out under the free trade treaties to which the Mexican State is a party and which are in force, and the award of the corresponding contract.
IV. When the applicant is a resident abroad, they must attach a free-form letter in which a resident in national territory, up to date in the fulfillment of their tax obligations, assumes joint and several liability in accordance with Article 26, fraction VIII of the CFF, for tax credits that may arise in the event of non-compliance with the obligation to return the authorized vehicles.
V. Notarial power or articles of incorporation authorizing the legal representative to perform administrative acts, when the applicant is a legal entity.
Additional Information on the Procedure
Once the form has been submitted duly filled out in compliance with its instructions, the authority will respond via a letter addressed to the applicant, within a period of three months in accordance with Article 37 of the CFF, counted from the date of receipt of the application. For any clarification in filling out this form, you can obtain information on the SAT Portal or contact via 55 12 03 1000 extension 43236, or visit the Taxpayer Assistance Modules of the Decentralized Administration corresponding to your tax domicile. Complaints and reports at 55-88-52-22-22.

Friday, January 17, 2025 OFFICIAL GAZETTE 39
A8.
Authorization for rectification of customs declarations

Data of the individual or legal entity applicant.
1.1. Full name / Name or corporate name.
1.2. RFC key including the homoclave.
1.3. Predominant activity.
1.4. Tax domicile or domicile for hearing and receiving notifications.
Street Number and/or exterior letter Interior Number and/or letter Neighborhood Postal Code Municipality/Delegation Federal Entity Telephone Email
Data of the legal representative of the individual or legal entity applicant.
2.1. Full name.
Paternal surname Maternal surname Name
2.2. RFC key including the homoclave.
Telephone Email
Grounds for rectification:
Mark with an X the corresponding option or options, as appropriate.
I.- Deriving from the rectification, a payment of undue amounts is generated and the declaration shows payment in cash, in accordance with Annex 22, appendix 13; except when it concerns the grounds in rule 6.1.1., fraction I, subsections a) to g). II.- Change of customs regime of the merchandise. III.- Identification data of vehicles that have a VIN, classified in subheadings 8703.21, 8703.22, 8703.23, 8703.24, 8703.31, 8703.32, 8703.33, 8703.90, 8704.21, 8704.22, 8704.23, 8704.31 and 8704.32.

40 OFFICIAL GAZETTE Friday, January 17, 2025
4. Data to be rectified for the declaration:
4.1 Number(s) of
declaration(s)
4.2 Field(s) to be rectified (Location and
description, as well as fields related to the requested rectification)
4.3 Says 4.4 Must say
5. Indicate the cause of the error in the declaration(s) or the justification for the rectification:
6. List the documentation that supports the error in the declaration(s) or the justification for the
rectification:
7. Describe the considerations by which the attached documentation proves the error in the declaration(s) or the justification for the rectification:
8. Indicate, if applicable, the amount of the payment of undue amounts of the operation or operations:
9. State the business reasons that motivated the request:
10. Mark with an X the corresponding option, as appropriate.
If affirmative, describe the situation in which it is found:
Yes No
10.1. The promotion has been previously raised before the same authority or another different one.
10.2. The promotion has been the subject of any administrative or judicial process.
10.3. It is subject to the exercise of verification powers by the SHCP.
10.4. If item 10.3 is affirmative, indicate whether the declaration(s) of this
request are subject to verification powers.
10.5. It is within the period for tax authorities to issue the resolution.
10.6. It is up to date in the fulfillment of its tax obligations and is not
published in the lists referred to in articles 69, with the exception of fraction VI and 69-B, fourth paragraph of the CFF.
10.7. It is located at its tax domicile with the RFC.
10.8. It has a tax mailbox.
10.9. It has defense mechanisms filed against the tax mailbox.
Once the above has been stated, the ACAJACE is requested to carry out the authorization for rectification in terms of rule 6.1.1.
_________________________________________________________ Name and signature of the applicant or of the legal representative

Friday, January 17, 2025 OFFICIAL GAZETTE 41
Instructions
Information that must be provided in each field:

The data of the individual or legal entity requesting the procedure must be indicated.
1.1. Write the full name of the individual or legal entity requesting the procedure.
1.2. Indicate the RFC key with homoclave or identification number in the case of residents abroad.
1.3. Describe in detail the activities to which the individual or legal entity requesting the procedure is dedicated.
1.4. Indicate the tax domicile or domicile for receiving notifications of the individual or legal entity requesting the procedure.
If applicable, the data of the legal representative of the individual or legal entity requesting the procedure must be entered.
2.1. Write the full name.
2.2. Write the RFC key with homoclave.
The ground for which the corresponding rectification is requested must be selected. In case of
being in the ground of fraction I, it is suggested to consult the exceptions in accordance with rule 6.1.1., fraction I, subsections a) to g).
In this field, the data of the declaration(s) to be rectified are indicated.
4.1. The number(s) of the declaration(s) must be entered.
4.2. The fields of the declaration(s) to be rectified will be described, indicating their location and description,
as well as the fields related to the requested rectification.
4.3. The information currently described in the field of the declaration(s) subject to rectification will be transcribed.
4.4. The information with which it is intended to replace the expression in this
form will be stated.
Describe in detail the facts and circumstances in which the alleged error consisted,
specifying the reason why it was allegedly generated or the justification for the rectification requested.
The documentation with which you consider that the error is proven or supports the
justification of the rectification must be listed, which must be attached to a storage device for electronic equipment (CD, USB, etc.).
The way in which the attached documents prove the existence of the error or the
justification for the rectification in question must be explained, taking into account what was expressed in points 5 and 6 above.
Indicate, if applicable, the amount of the payment of undue amounts of the operation or operations related to the
declaration(s) subject to rectification.
State the business reasons that motivated the operation, specifying precisely the benefits
it intends to obtain or, in its absence, the damages and losses it wishes to avoid if the rectification is authorized.

42 OFFICIAL GAZETTE Friday, January 17, 2025
10. Indicate whether the individual or legal entity requesting the procedure is located in any of the following situations
and, if affirmative, explain the situation in which it is found.
10.1. Indicate whether the facts or circumstances on which the promotion is based have been previously
raised before the same authority or another different one.
10.2. Indicate whether the facts or circumstances on which the promotion is based have been the subject of
defense mechanisms before administrative or jurisdictional authorities and, if applicable, the sense of the resolution.
10.3. Indicate whether it is subject to the exercise of verification powers, established in
Article 42 of the CFF, indicating the periods and the contributions subject to review.
10.4. Indicate whether the declaration(s) of this request are subject to verification powers,
established in Article 42 of the CFF.
10.5. Indicate whether it is within the period for tax authorities to issue the resolution to
which Article 50 of the CFF refers.
10.6. It is up to date in the fulfillment of its tax obligations and is not published in
the lists referred to in articles 69, with the exception of fraction VI and 69-B, fourth paragraph of the CFF.
10.7. It is located at its tax domicile with the RFC.
10.8. It has a tax mailbox.
10.9. Indicate whether the individual or legal entity requesting has defense mechanisms filed against the
tax mailbox.
Documents that must be attached:
I. Simple copy of the notarial instrument, from which it is evident that the person signing the request for
rectification is authorized to carry out the corresponding procedures before the respective authority.
II. Simple copy of the official document where the name, photograph and signature appear, which coincides with the
physical profile of the legal representative.
III. Simple copy of the CFDI or equivalent documents that cover the merchandise described in the declaration(s).
IV. The documents referred to in Article 36-A of the Law and, if applicable, the other necessary documents
that support its request, which must be contained in a storage device.
Additional Information on the Procedure:
The resolution letter will be notified to the applicant via tax mailbox, personally or by certified mail.
For any clarification in filling out this form, you can obtain information through MarcaSAT at 55 627 22 728; or visit the Taxpayer Assistance Modules of the Decentralized Administration corresponding to your tax domicile. Complaints and reports at 55 88 52 22 22.

Friday, January 17, 2025 OFFICIAL GAZETTE 43
A9.
Authorization to import merchandise for national security purposes Before filling out this form, read the instructions on the back.

General Information of the Applicant.
1.1. Data of the head of the instance referred to in the National Security Law or of the head of
ANAM, of the person designated by these or of the one with powers to represent said heads.
RFC Key:
Name(s) First surname Second surname
1.2. Domicile for hearing and receiving notifications, as well as the persons authorized for such effects.
Street _________________ No. and/or exterior letter ____________ No. and/or interior letter ____________________ Neighborhood ___________________________________ Postal Code __________________________________ Municipality or Alcaldía ________________________________ Locality _______________________________ Federal Entity ______________________________________ Telephones _________________________ Authorized personnel for hearing and receiving notifications:
________________________________________________________________________________________ ________________________________________________________________________________________ Telephones ________________________________________________________________________________________
Information related to the procedure.
2.1. Merchandise to be imported.
Detailed description
Tariff fraction
NICO Quantity Unit of measurement of commercialization Brand Model Serial number

44 OFFICIAL GAZETTE Friday, January 17, 2025
2.2. Reason or justification for the need to import the merchandise:

2.3. Total value of the merchandise (according to the CFDI, equivalent document or letter of donation, as
corresponds). ____________________________________________________________________________ _______________________________________________________________________________________
2.4. Customs, customs section or place designated for the entry of the merchandise.

2.5. Customs, customs section or place designated for the clearance of the merchandise.

2.6. In case of not having the CFDI or equivalent document or document with which
ownership of the merchandise to be imported is demonstrated, indicate with an x that, declares under oath to be the legitimate owner of the merchandise described in the present form:
2.7. Data of the officials authorized to receive the merchandise.
RFC Key:
________________________________________________________________________________________ Name(s) First surname Second surname Email ________________________________________________________________________________________ Telephone(s)_______________________________________________________________________________ I declare, under oath, that the data entered in this form is true. _________________________________________________________ Name and signature of the applicant (Head of the Instance referred to in the National Security Law authorized/ANAM)

Friday, January 17, 2025 OFFICIAL GAZETTE 45
Instructions
General Information
This form is freely printable and must be filled out in two copies, typed or in block letters, with a black or blue ink pen and the figures must not invade the limits of the boxes.
Presentation Options
The procedure must be submitted at the official registry office of the ACAJACE.
Via SEPOMEX or using the services of courier and package companies.
The procedure takes effect from the date of receipt of the application in accordance with the means of presentation.
Specific Indications
I. In the Section Related to the Procedure:
a) In item 2.1., you will indicate the detailed description of the merchandise to be imported, indicating the technical or commercial specifications of the merchandise to be imported, as well as indicating the total quantity (in letters and numbers) of the merchandise to be imported mentioning the unit of measurement of commercialization (kilo, gram, meter, piece, liter, pair, set, etc.). When the space is insufficient, the merchandise can be described in an attached document referencing it in this form. b) In item 2.7., you will indicate the data of the officials authorized to receive the merchandise. In case the space is insufficient, additional boxes can be added to the form. Requirements
I. Certificate of appointment of the head of the instance referred to in the National Security Law, of
the person designated by him or of the one with powers to represent said head.
II. CFDI, equivalent document or document with which ownership of the merchandise to be
imported is demonstrated or, if applicable, letter of donation issued by the foreign donor where it indicates the merchandise and the data of said donor [name, Tax Identification Number, address, telephone(s) and email].
III. Catalogs, photographs and other documentation containing data that allow the authority
to identify the merchandise subject to importation.
IV. Certificate of appointment or letter of designation of the official authorized to receive the
merchandise at the customs, customs section or designated place, which must be issued by the instance referred to in the competent National Security Law.
V. The documentation with which the exemption or compliance with the regulations or
non-tariff restrictions that the merchandise must meet for its definitive importation is accredited.
Additional Information on the Procedure
Once the form has been submitted duly filled out in compliance with its instructions, the authority will respond via a letter addressed to the applicant, within a period of three months in accordance with Article 37 of the CFF, counted from the date of receipt of the application. Likewise, the authority will send a copy in electronic or digital document to the customs through which the clearance will be carried out. When the ACAJACE detects merchandise that is not necessary to carry out the actions destined to National Security, it will communicate it within five days, counted from the day following the day the authorization request is duly integrated. For any clarification in filling out this form, you can obtain information on the SAT Portal or contact via 55 12 03 1000 extension 43236, or visit the Taxpayer Assistance Modules of the Decentralized Administration corresponding to your tax domicile. Complaints and reports at 55-88-52 -22-22.

46 OFFICIAL GAZETTE Friday, January 17, 2025
B1.

Friday, January 17, 2025 OFFICIAL GAZETTE 47
Instructions
I. This form will be filled out typed or in block capital letters, with a black or blue ink pen.
II. This form will be filled out in pesos without cents and the amount will be rounded so that amounts of 1 to
50 cents adjust to the unit of the immediate preceding peso and amounts of 51 to 99 cents adjust to the unit of the immediate superior peso.
Example: 1) $150.50 = 150
2) $150.51 = 151
III. This form is presented before the customs and its annexes for validation in register 514 of the SAAI and
to be able to make the corresponding payment.
IV. Individuals when represented for the first time and present a promotion, must attach two copies of the
notarial power of attorney that accredits the personality of the applicant and in the case of legal entities they must present two copies of the testimony of the articles of incorporation of the same and two copies of the power that accredits the personality of its representative.
V. When another legal representative is designated, they must attach the original and two copies of the power that accredits
their appointment.
VI. The RFC key will be noted, according to twelve or thirteen positions and the CURP, in the case of
individuals who have the Population Registration Key provided by the SEGOB.
VII. This form will not be valid if it has strikethroughs, scrapes or amendments.
Note:
Regarding amounts paid for IGI, DTA, and, if applicable, compensatory quotas, the amount actually paid will be noted in accordance with appendix 13 of Annex 22.
In no case can IVA and IEPS in Foreign Trade Operations be compensated, in accordance with
Article 138 of the Regulation.
Filling out:

General data of the taxpayer:
You will note the paternal surname, maternal surname and name(s) or denomination or corporate name, tax domicile.
You will mark in the box with an x the reason why the compensation is applied:
a) Change in value of the CFDI or equivalent document. b) Change of CFDI or equivalent document. c) Modification in Incremental Values. d) Change to modified data and declared in the observations field. Application by preferential tariff treatment in accordance with an Agreement or International Treaty to which the Mexican State is a Party and which is in force. e) Others, specify the reason for the generation of the balance in favor.

48 OFFICIAL GAZETTE Friday, January 17, 2025
3. Data of the original declaration:
In this table you will note the No. of declaration to 15 digits, customs section, date of payment of the declaration, IGI, DTA and, if applicable, the Compensatory Quota, noting the total of these concepts in the respective row and finally the key of the operation under the international treaty to which the Mexican State is a Party and which is in force, if applicable, according to appendix 8 of Annex 22.
4. Data of the rectification declaration:
In this table you must note the data, following the instructions of point number 3, with the exception of the date of payment of the declaration.
5. Amount susceptible to compensation:
In this table you will note the No. of declaration, customs section and date of payment of the declaration on which the compensation is made. The compensation number field is used in the case where the balance in favor obtained from the import is not exhausted when compensating against a single tax, requiring filling out another compensation notice for the remainder of the balance pending to be compensated, in which case they will note the compensation number that is being made. (Example: 1, 2, 3).
6. Data of the legal representative:
You will note the paternal surname, maternal surname and name(s) of the legal representative, their RFC key to thirteen digits, their CURP, as well as their signature.
Attachments:
I. Two copies of the declaration that gave rise to the compensation.
II. Two copies of the rectification declaration of the importer.
III. Copy of the certificate of origin or certification of origin, if applicable.
IV. Two copies of the notice of withdrawal, if applicable.
V. Two copies of the notarial power of attorney that accredits the legal personality of the applicant (Individual or Legal Entity).
VI. Two copies of the testimony of the articles of incorporation of the legal entity.
VII. Tariff Fractions.

Friday, January 17, 2025 OFFICIAL GAZETTE 49
B2.
Temporary Export Notice
Folio No.:
Export Date: ||||||| Return Date: ||||||| Day Month Year Day Month Year Customs/Customs Section: Key:

Exporter Data:
Full Name:
______________________________________________________________________________________ (Last name paternal/maternal/first name(s), corporate name or business name) Address:
_____________________________________________________________________________________ RFC
Description and quantity of the merchandise:
________________________________________________ Signature of the exporter or legal representative
Authorization of the customs/customs section:
Name:
__________________________________________________________________ Employee badge No.: ___________________________________________ __________________________________ Signature Seal Reviewed by Customs
Return Data:
Date: _______________________________
Day Month Year
Customs/customs section: ______________________________________________________________ Key: ________________________________________ Name: ________________________________________________________________________________ Employee badge No.: _________________ _____________________________ Signature This notice shall be presented in duplicate: the original for the customs office and the copy for the exporter.

50 OFFICIAL GAZETTE Friday, January 17, 2025
Instructions
This Notice shall be presented, when there is no obligation to present a petition, in accordance with Article 116, penultimate paragraph of the Law.
I. Write clearly, in block letters, with a ballpoint pen (blue or black ink).
II. This application must be presented in original and copy.
III. Keep your application to be shown at the customs office through which you will effect its return.
IV. This document is not valid if it presents scratches or erasures.
V. Remember that by providing inaccurate or false data you will be subject to sanctions
related to the presumption of smuggling.
VI. The folio number will be recorded by the customs authority receiving the temporary export notice.
VII. Export Date.- You will record the date of exit of the merchandise from the national territory, indicating the
day, month and year.
VIII. Return Date.- The date on which the maximum term allowed by the Law or Chapter
4.4. of the RGCE, for the temporary export of the merchandise, will be recorded, indicating the day, month and year.
IX. Customs/Customs Section.- You will record the name of the customs or customs section through which the
merchandise is exported.
X. Key.- You will record the key of the customs or customs section through which the merchandise is exported.

Exporter Data.
a) Full Name.- You will record the full name, corporate name or business name, as appropriate. b) Address.- You will record the complete address. c) RFC- You will record your key in the RFC of twelve or thirteen positions as appropriate.
Description and quantity of the merchandise.
a) In this box you will record the: quantity, description, nature, state, origin and other characteristics of the merchandise, as well as the data that allow its identification, or in its defect the technical or commercial specifications necessary for its identification, such as brand, model, type, serial number, size, color, etc. b) Signature of the exporter or legal representative.- The exporter or the legal representative will record their autograph signature. The following data must be filled out by the customs authority:
Authorization of the Customs/Customs Section:
a) Name.- You will record the full name of the person granting the authorization on behalf of the customs. b) Employee badge number.- You will record the number of the personal identification (badge) of the customs employee granting the authorization. c) Employee signature.- The employee who authorized the application will record their signature. d) Seal.- Customs/Customs Section Seal.- In this space the seal of the customs or customs section granting the authorization will be placed.
Return Data:
a) Date.- You will record the date of return of the merchandise, starting with the day, month and year. b) Customs/customs section.- You will record the name of the customs or customs section through which the merchandise is returned. c) Key.- You will record the key of the Customs or Customs Section that corresponds to it. d) Name.- You will record the full name of the person granting the authorization for the return of the merchandise, on behalf of the customs. e) Employee badge number.- You will record the number of the personal identification (badge) of the customs employee granting the authorization. f) Employee signature.- The employee who authorized the return will record their signature.

Friday, January 17, 2025 OFFICIAL GAZETTE 51
B3.
Notice of temporary import or export and return of containers IMPORT ( ) EXPORT ( ) RETURN ( ) Folio No.
DATE OF ENTRY, EXIT OR RETURN: EXPIRATION DATE:
( DD / MM / YY ): ( DD / MM / YY ):

OWNER DATA:
Full name (paternal last name/maternal last name/first name [s]):
Corporate name or business name:
Address: Tax Identification Number or Tax ID
Number:
Phone: Email:
DATA OF THE PERSON WHO IMPORTS, EXPORTS OR RETURNS THE CONTAINERS:
Full name (paternal last name/maternal last name/first name [s]):
Corporate name or business name:
Address: Tax Identification Number or Tax ID
Number:
IMMEX Program Number:
Phone: Email:
DATA OF THE CARRIER AND/OR WHO PERFORMS THE PROCESSING:
Full name (paternal last name/maternal last name/first name [s]):
Corporate name or business name:
Address: Tax Identification Number or Tax ID
Number:
Phone: Email:

52 OFFICIAL GAZETTE Friday, January 17, 2025
4. CONTAINER DATA:
Number of containers: Description: Unit value:
SIGNATURE: ______________________________
5. VALIDATION OF THE IMPORT, EXPORT OR RETURN NOTICE:
DATE: Customs/customs section: Key:
( DD / MM / YY ):
Name: Employee badge No.
Signature
Customs/customs section
SIGNATURE:

RECTIFICATION: Folio No.:
Data and observations related to the rectification:
CUSTOMS OR CUSTOMS SECTION INVOLVED IN THE RECTIFICATION:
DATE: / /
DD / MM / YY
Customs/Customs Section: Key:
Name: Employee badge No.
Signature
SIGNATURE: _____________________________________ Customs/Customs Section

Friday, January 17, 2025 OFFICIAL GAZETTE 53
Instructions
General Notes.
This application must be presented to the entry or exit customs office in triplicate for validation.
I. Complete with block letters and ballpoint pen.
II. This document is not valid if it presents scratches or erasures.
Whoever performs the operation must indicate the type of operation to be performed (import, export or return) and fill in fields 1, 2, 3, 4 and 6; the remaining fields are for exclusive use of the customs authority. The following data must be filled out by the customs authority:
Date of import, export or return. You will record the date of entry, exit or return of the containers to/from national territory, starting with the day, month and year.
Expiration Date.- The date on which the temporary import or export expires will be recorded starting with the day, month and year.
The importer or exporter will provide the following data:
Folio No.- The importer/exporter must assign the folio number, which will consist of a key of 8 digits, as follows: the first 3 digits will correspond to the key and section of the customs office where the procedure is carried out and the following 5 digits will correspond to the consecutive order number of the internal registration of the importer/exporter.

Owner Data:
Full name (paternal last name/maternal last name/first name(s)), corporate name or business name.
You will record the name of the owner or corporate name, starting with the paternal last name, maternal last name and first name(s), tax identification number, complete address, phone and email.
Data of the importer/exporter or of who returns the containers:
Full name (paternal last name/maternal last name/first name(s)), corporate name or business name.
You will record the name or corporate name of who imports, exports or returns the containers, starting with the paternal last name, maternal last name and first name(s), RFC key, complete address, phone, email and, if applicable, IMMEX Program number.
Data of the carrier and/or who performs the processing:
Full name (paternal last name/maternal last name/first name(s)), corporate name or business name.
You will record the name or corporate name of the carrier or of who performs the processing starting with the paternal last name, maternal last name and first name(s), RFC key, complete address, phone and the data of the document with which they identify.

54 OFFICIAL GAZETTE Friday, January 17, 2025
4. Description of the containers:
In this box you will record the quantity, unit value, description and other characteristics that allow their identification.
Signature.- The person who imports, exports or returns the containers must record their autograph signature.
Fields 5 and 7 must be filled out by the customs authority:
5. Authorization of the Customs/Customs Section of the import, export or return:
a) Date, Customs, Customs Section and Key.- You will record the date of import, export or return of the containers to/from national territory, starting with the day, month and year; the name and key of the Customs or Customs Section through which the containers are imported, exported or returned. b) Name.- You will record the full name of the person granting the authorization on behalf of the customs. c) Employee badge No.- You will record the personal identification number (badge) of the customs employee who validates the notice. d) Signature.- The employee who validated the notice will record their signature. e) Customs/Customs Section Seal.- In this space the seal of the Customs or Customs Section that validates the import, export or return notice will be placed.
6. Rectification:
This field must be filled in for the case of return of containers when some clarification regarding them is appropriate, indicating the folio number involved in the clarification and the observations that apply.
7. Customs/Customs Section intervening in case of rectification:
a) Date, Customs, Customs Section and key.- You will record the date on which the rectification is carried out in relation to the return of the containers starting with the day, month and year; the name and key of the Customs or Customs Section through which it is carried out. b) Name.- You will record the full name of the person intervening in the rectification on behalf of the customs. c) Employee badge No.- You will record the personal identification number (badge) of the customs employee intervening in the rectification. d) Signature.- The customs employee intervening in the rectification will record their signature. e) Customs/Customs Section Seal.- In this space the seal of the customs or customs section intervening in the rectification will be placed.

Friday, January 17, 2025 OFFICIAL GAZETTE 55
B4.
Notice of introduction of donated merchandise to the country's border strip (Rule 3.3.6., fraction II) REGISTRATION NUMBER:

Data of the Donee.
Name, Corporate Name or Business Name.
Key in the
RFC:
Fiscal Address: (Street, Number and/or inner/outer letter, neighborhood, neighborhood, Municipality/Delegation, Federal Entity).
Phone: ( ) Fax: ( ) Email:
Predominant activity:
Data of the legal representative of the Donee.
Name: [Paternal Last Name, Maternal Last Name, First Name(s)].
Key in the
RFC:
Phone: ( ) Fax: ( ) Email:
Data of the Notarial Power with which they accredit their representation: (Notary No., Deed No., Date, Volume, No. of the RPPyC).
Data of the foreign donor.
Name, Corporate Name or Business Name.
Key in the RFC or TAX ID NUMBER:
Address:
Phone: ( ) Fax: ( ) Email:

56 OFFICIAL GAZETTE Friday, January 17, 2025
4. Description of the merchandise.
Mark with an X if the merchandise is: New Used Part of your patrimony Description and value:
Quantity: Unit
Measure:
Tariff fraction, and
NICO:
Brand: Model: Serial number:
5. Purposes to which the merchandise will be destined.
Indicate with an X the purposes to which the merchandise will be destined.
Cultural Teaching Public health Social service Research Specify.
6. Protest of telling the truth and signature of the person presenting the declaration:
I DECLARE UNDER PROTEST OF TELLING THE TRUTH, THAT THE INFORMATION AND DOCUMENTATION PROVIDED IS COMPLETE, CORRECT AND TRUE.
NAME AND SIGNATURE: PLACE: DATE:
DD MM YYYY
7. FOR OFFICIAL USE ONLY. DD MM YYYY
Customs Employee (Name, signature and badge number):
Seal of the Customs or Customs
Section.

Friday, January 17, 2025 OFFICIAL GAZETTE 57
Instructions
This Notice must be filled out electronically, by machine or with block letters if filled out by hand, using blue or black ink and uppercase letters.
It must be filled out in duplicate, keeping one copy with the donee and one with the customs or customs section.
The format and annexes must be presented at the official office of the customs office through which the operation will be processed.
Registration Number.- You must record the Registration Number of the Donee that the Customs assigned to you.

Data of the applicant:
You must record the name, corporate name or business name, key in the RFC, fiscal address, indicating street, number and/or inner/outer letter, neighborhood, postal code, Municipality/Delegation, Federal Entity, telephone number, fax, email and the predominant activity of the company.
Data of the legal representative of the applicant:
You must record the name, corporate name or business name, key in the RFC, the fiscal address, indicating street, number and/or inner/outer letter, neighborhood, postal code, Municipality/Delegation, Federal Entity, telephone number, fax and email. Data of the Notarial Power with which they accredit their representation.- You must attach a certified copy of the notarial power with which they accredit their representation of the Donee and record the corresponding data on the name of the Notary, number of the Notary Office, of the Public Deed, Date, Volume, and the number under which said power was registered before the Public Registry of Property and Commerce.
Data of the foreign donor:
You must record the Name, Corporate Name or Business Name, key in the RFC or Tax Identification Number, the address, the telephone number, fax, email of the donor, who must be a foreign person.
Description of the merchandise:
You must mark with an X if the merchandise is new, used, or if it is part of your patrimony and provide the data of Description and value Quantity, Unit, Measure, Tariff fraction, and NICO, Brand, Model and Serial number. In the case that to describe the total merchandise to be introduced the fields of the application are not sufficient, you must attach on supplementary sheets the Description, Quantity, Unit, Measure, Tariff fraction, and NICO, Brand, Model and Serial number.
Purposes to which the merchandise will be destined:
You must mark with an X the purposes to which the merchandise will be destined are Cultural, Teaching, Public health, Social service or Research, specifying the use that will be given to the merchandise.
Protest of telling the truth and signature of the person presenting the declaration:
The representative or attorney-in-fact of the Donee, must declare under protest of telling the truth that the information and documentation provided is complete, correct, true and without any omission, recording their name and signature by hand, place where the document is signed and the date, indicating day, month and year.
Only for official use:
The customs personnel where the procedure is carried out must record the date, indicating day, month and year and the name, signature, employee badge number and seal of the Customs.
ANNEXES:
The Notice of introduction of donated merchandise to the country's border strip (Rule 3.3.6., fraction II), in accordance with what is established in rule 3.3.6., fraction II, must be accompanied by:
I. The documentation with which it accredits that the Donor delivers the donated merchandise to them.
II. In its case, the supplementary sheets for the description of the merchandise to be introduced.

58 OFFICIAL GAZETTE Friday, January 17, 2025
B5.
Notice to extend the term granted by the SE to change to the definitive import regime or return to the foreign country temporarily imported merchandise (imported temporarily) (4.3.8.)
Before filling out this form, read the instructions on the back.

General Information of the Applicant.
Legal Entity
Key in the RFC
________________________________________________________________________________________ Corporate name or business name.
1.1. Address for hearing and receiving notifications, as well as the persons authorized for such effects.
Street_________________ and/or outer letter _________________ No. and/or inner letter ___________________ Neighborhood ___________________________________________________ Postal Code___________________ Municipality or Territorial Demarcation _________________________ Locality__________________________ Federal Entity ________________________________________ Phones______________________________ Authorized personnel for hearing and receiving notifications_______________________________________________ Phones________________________________________________________________________________
Data of the Legal Representative.
Key in the RFC
________________________________________________________________________________________ First Name(s) First Last Name Second Last Name Indicate with an x, that you declare, under protest of telling the truth, that the legal representative has the faculties to perform acts of administration or those necessary to perform the procedures of the present procedure.
Information related to the procedure.
3.1. Cancellation of the IMMEX Program.
Means of notification of the
IMMEX Program cancellation
Number of
Office or folio
Date of notification
Day Month Year
By Office (personal notification)
By Acknowledgment of VUCEM
Expiration date of the sixty natural days granted by the SE.
Day: Month: Year:

Friday, January 17, 2025 OFFICIAL GAZETTE 59
3.2. If you have a new IMMEX Program, indicate the following:
IMMEX Program Number:
Date on which the new IMMEX Program was authorized:
Day: Month: Year:
3.3. Of the Extension.
Indicate the expiration date of the one hundred eighty natural days, of the extension requested in the present form.
Day: Month: Year:
I declare, under protest of telling the truth, that the data recorded in this form are true.
_________________________________________________________ Name and signature of the applicant (Legal Representative of the Company with IMMEX Program) Instructions General Information.
The present form is freely printable and must be filled out in two copies by machine or with block letters, with a ballpoint pen in black or blue ink and the limits of the boxes must not be invaded.
Presentation Options.
The procedure may be presented at the official office of the ACAJACE.
Via SEPOMEX or using the services of courier and package companies.
Requirements:
I. Office or acknowledgment of cancellation of the IMMEX Program.
II. Notification of the cancellation of the IMMEX Program, or the acknowledgment of receipt of the procedure of
cancellation issued by the Digital Window.
III. Notarial power or articles of incorporation where the legal representative is authorized to perform acts of
administration.
IV. Authorization of the new IMMEX Program, in case the SE authorizes it within the term of sixty
days.
Additional information of the procedure.
No document is obtained, nevertheless, the acknowledgment of receipt will be obtained.
When the notice is presented after the sixty natural days following the date of notification of the cancellation of the respective IMMEX Program, is not accompanied by all the documents indicated in the requirements section and does not comply with the indicated instructions, this will have no legal effect whatsoever. That the IMMEX Program has not been cancelled in terms of article 25 of the IMMEX Decree. When the space is insufficient, the missing information can be written on an attached document, making reference to it. For any clarification in the filling out of this form, you can obtain information on the SAT Portal or contact MarcaSAT 55 627 22 728. Complaints and reports to 55 885 22 222.

60 OFFICIAL GAZETTE Friday, January 17, 2025
B6.
Notice for the transfer of auto parts located in the border strip or region to the final automotive or vehicle manufacturing industry for road transport in the rest of the national territory Before filling out this form, read the instructions on the back.

General Information of the Applicant
Legal Entity
Key in the RFC:
________________________________________________________________________________________ Corporate name or business name.
1.1. Address for hearing and receiving notifications, as well as the persons authorized for such effects.
Street No. and/or outer letter No. and/or inner letter ___________ Neighborhood Postal Code ___________________________________ Municipality or Territorial Demarcation___________________________________________________________ Locality ________________________________________________________________________________ Federal Entity ________________________________________________________________________ Phones _______________________________________________________________________________ Authorized personnel for hearing and receiving notifications:
________________________________________________________________________________________ Phones _______________________________________________________________________________
Data of the Legal Representative
Key in the RFC:
________________________________________________________________________________________ First Name(s) First Last Name Second Last Name Indicate with an X that you declare, under protest of telling the truth, that the legal representative has the faculties to perform acts of administration or those necessary to perform the procedures of the present procedure.

Viernes 17 de enero de 2025 DIARIO OFICIAL 61
3. Related information with the procedure
3.1. Data of the automotive terminal industry or manufacturing company of transport vehicles that receives the transported merchandise.
Legal Entity
RFC Key:
________________________________________________________________________________________ Trade name or corporate name.
3.2. Detailed description of the merchandise subject to transport.

3.3. Supply period of the merchandise that has been sold to the automotive terminal industry or manufacturing company of transport vehicles.
________________________________________________________________________________________ dd/mm/yyyy
3.4. Address of the automotive terminal industry or manufacturing company of transport vehicles where the merchandise transport will take place.
Street __________________ No. and/or exterior letter ______________ No. and/or interior letter _______________ Neighborhood __________________________________________ Postal Code ___________________________ Municipality or Delegation ___________________________ Locality _________________________________ Federal Entity ________________________________ Phones _______________________________
3.5. In the case of merchandise susceptible to being individually identified, the following information must be indicated, in order to distinguish them from other similar ones.
Serial Number: Part:
Brand: Model:
The technical or commercial specifications necessary to distinguish said merchandise from other similar ones.
I declare, under oath, that the data recorded in this form are true.
_____________________________________________________________________________________ Name and signature of the applicant (Legal representative of the legal entity of the Auto Parts Industry Company).

62 DIARIO OFICIAL Viernes 17 de enero de 2025
Instructions
General Information
This form is freely printable and must be filled out in two copies by machine or with block letters, using a black or blue ink ballpoint pen, and the figures must not invade the limits of the boxes.
Presentation Options
The procedure may be presented at the official records office of the ACAJACE.
It can also be submitted via SEPOMEX or using courier and package delivery services.
The procedure takes effect from the date of receipt of the application in accordance with the means of presentation.
Specific Indications
When the space is insufficient in items 3.2. or 3.5. of the section Related information with the procedure, the missing information can be written on an attached document referencing it.
Requirements
I. Declaration under oath by the legal representative of the automotive terminal industry or manufacturing company of transport vehicles that receives the merchandise, where it declares:
a) That the merchandise has been acquired by the automotive terminal industry or manufacturing company of transport vehicles and assumes joint liability, under article 26, fraction VIII, of the CFF, in case of non-compliance. b) The supply period of the merchandise that has been sold to the automotive terminal industry or manufacturing company of transport vehicles. c) The address of the automotive terminal industry or manufacturing company of transport vehicles where the merchandise transport will take place. d) Detailed description of the merchandise subject to transport for the automotive terminal industry or manufacturing company of transport vehicles located in the rest of the national territory.
II. Notarial power of attorney or articles of incorporation authorizing the legal representative of the automotive terminal industry or manufacturing company of transport vehicles to perform acts of administration.
III. Notarial power of attorney or articles of incorporation authorizing the legal representative of the auto parts industry company to perform acts of administration.
IV. Authorization of the IMMEX Program, issued by the SE, currently valid.
Additional Procedure Information
No document is obtained, nevertheless, the receipt acknowledgment is granted.
The documents that must accompany during the transport of parts and components from the border strip or region to the rest of the country are:
I. Original of the acknowledgment of the notice of transport of parts and components from the border strip or region to the rest of the country.
II. Original of the CFDI or equivalent document of the merchandise in question, which contains the IMMEX Program number, data of the vehicle in which the merchandise transport is effected, address to which the merchandise will be transported, and it must state that under oath this operation is carried out in terms of rule 4.3.12.
For any clarification in filling out this form, you can obtain information on the SAT Portal or contact MarcaSAT: 55 627 22 728. Complaints and reports to 55 885 22 222.

Viernes 17 de enero de 2025 DIARIO OFICIAL 63
B8.
Notice of registration of electronic devices and work instruments Customs: __________________________________________ Folio No.: _______________ Each resident in the country must fill out this form.
Name:
||_________________ Paternal Surname Maternal Surname First Name(s) Address:
|| Street No. Neighborhood ___________________|| Postal Code City State R.F.C.____________________________ Date of departure: l__________||_________l Day Month Year Traffic: a) Air ( ) b) Land ( ) c) Maritime ( ) d) Rail ( ) a) Airline and flight number: ______________________________________________________________ b) Passenger road transport line and run: _______________________________________________ c) Maritime line and registration number: ________________________________________________________ d) Railway line and train number: __________________________________________________________ Name of the merchandise Brand Model Serial No. Quantity Made in Observations and/or accessories of the merchandise:
I declare under oath that the data recorded in this notice are true.
Customs Seal
_________________________ ___________________________________________ Signature Name and signature of the customs authority

64 DIARIO OFICIAL Viernes 17 de enero de 2025
Instructions
I. If you are a resident in the country and travel abroad or to the border strip or region, you may carry with you electronic devices, or work instruments, necessary for the development of your activity, provided they are instruments or devices that can normally and commonly be transported by a person, in accordance with article 103 of the Regulation.
II. If you comply with what is stated in the previous point, you must fill out the registration form for electronic devices or work instruments.
III. Once filled out, you must go to the customs module of the airport hall of the locality, to the entry customs by land route, the maritime terminal customs, or the railway terminal customs, in order for it to be stamped and signed by the customs authority.
IV. You must record the following data:
a) Personal data: you must record the personal data of the resident in the country. b) Date of departure: you will record the date of departure abroad or date of entry into the border strip or region. c) Traffic: you will mark with an X the type of transport you use: air, land, sea, or rail. If by air route: indicate the airline and flight number you are traveling on. If by land route: indicate the passenger road transport line and the run you are traveling on. If by sea route: indicate the maritime line you are traveling on and the Control or Registration No., and if by rail: indicate the railway line you are traveling on and the train number. d) Name of the merchandise: indicate the common name of the merchandise. e) Brand: record the commercial brand of the merchandise. f) Model: to which the merchandise belongs. g) Serial Number: registered on the device or instrument. h) Quantity: record the number of products you are carrying with you. i) Made in: record the country where the merchandise was made. j) Observations: you can record in this field any other data that helps identify the device or instrument. k) Signature: the resident signs this notice. l) Name and signature: in this field, the name and signature of the customs authority authorizing this notice will be recorded. m) Seal: the customs authority will stamp this notice.
V. The folio number will be recorded by the customs authority authorizing the notice.
If you wish to report any irregularity in the behavior of the customs authority, you can communicate it to the following phone number 55 88 52 22 22.

Viernes 17 de enero de 2025 DIARIO OFICIAL 65
B9.

66 DIARIO OFICIAL Viernes 17 de enero de 2025
Instructions
Main header of the notice:
Field Content
1. Folio of the notice. Folio number of the notice, integrated by:
1. The first digit must be the last digit of the year
of the operation.
2. Annual consecutive number generated by the company
authorized to designate merchandise to fiscal warehouse for display and sale of foreign and domestic merchandise in international airports, border areas, and high-seas ports (Henceforth authorized company).
2. RFC Key of the company. RFC Key of the authorized company.
3. Corporate name or trade name. Corporate name or trade name of the authorized company.
4. Authorization number. Authorization number that ANAM grants to the authorized
company.
5. Means of transport. Indicate the type of means of transport in which the
merchandise is conducted, according to appendix 3 of annex 22.
6. Transport identification. Identification of the transport in which the
merchandise is conducted.
If the means of transport is a land vehicle, the circulation plates, brand, and model will be recorded. If it is railroad, the wagon or platform number will be recorded.
In the case of maritime transport, the name of the vessel will be recorded.
7. Date of preparation of the notice. Date of preparation of the notice.
8. Address of the authorized establishment
that transfers the merchandise.
Address of the authorized establishment that transfers the merchandise.
9. Authorization number of the
authorized establishment that transfers the merchandise.
Authorization number that ANAM grants to the authorized establishment that transfers the merchandise.
10. Address of the authorized establishment
that receives the merchandise.
Address of the authorized establishment that receives the merchandise.
11. Authorization number of the
authorized establishment that receives the merchandise.
Authorization number that ANAM grants to the authorized establishment that receives the merchandise.
12. Observations. Observations. Data already cited in the notice shall not be declared.

Viernes 17 de enero de 2025 DIARIO OFICIAL 67
Merchandise Block:
1. Sequence. Number of the sequence of the merchandise in the notice.
2. Tariff fraction, and NICO. Tariff fraction, according to the TIGIE and NICO
applicable to the merchandise as appropriate.
3. Product code. Type of product in which the merchandise is classified,
according to the inventory control system of the authorized company.
4. Unit of measure. Unit of measure of the merchandise according to the
appendix 7 of Annex 22.
5. Quantity. Quantity of merchandise according to the unit of measure
declared in the previous point.
6. Value. Commercial value of the merchandise expressed in dollars of
the United States of America.
7. Commercial description of the
merchandise.
Commercial description of the merchandise.
Header for secondary pages of the notice:
1. Folio of the notice. Folio number of the notice, integrated by:
1. The first digit must be the last digit of the year
of the operation.
2. Annual consecutive number generated by the company
authorized to designate merchandise to fiscal warehouse for display and sale of foreign and domestic merchandise in international airports, border areas, and high-seas ports (Henceforth authorized company).
2. RFC Key. RFC Key of the authorized company.
3. Name, corporate name or trade
name.
Name, corporate name or trade name of the authorized company.
4. Authorization number. Authorization number that ANAM grants to the authorized
company.

68 DIARIO OFICIAL Viernes 17 de enero de 2025
B10.
Notice of transport of merchandise from companies with IMMEX Program, RFE or Authorized Economic Operator Folio of the notice Type of Operation Type of Transport Date of Preparation Data of the Company that transfers Certification RFC Key Program Number Corporate name or trade name Address of the origin plant or warehouse Data of the Receiving Company RFC Key Program Number Corporate name or trade name Barcode Address of the destination plant or warehouse Data of the merchandise that is transferred Sequence Commercial Description Unit of Measure of commercialization Quantity Value in dollars Customs of exit of the merchandise Data of the person who prepares the notice e.firma Name CURP Serial Number Notice of transport of merchandise from companies with IMMEX Program, RFE or Authorized Economic Operator, in accordance with rules 4.3.6., 4.8.11. and 7.3.3., fraction XXI.
Page of

Viernes 17 de enero de 2025 DIARIO OFICIAL 69
Instructions
Header of the transport notice, for the main page and secondary pages, if applicable.
Field Content
1. Folio of the Notice Folio number of the Notice, integrated by:
1. One digit to indicate the last digit of the current year.
2. Seven more digits for the annual consecutive number
assigned by the person who transfers the merchandise.
Note: Does not apply, regarding the field Type of operation, item 3.
2. Date of preparation Date of preparation of the notice.
3. Type of Operation Type of Operation in question:
1. Between localities, warehouses, or plants of the same
company with IMMEX Program.
2. Between a company with IMMEX Program and companies
of Submanufacturing or Subcontracting.
3. Between a person authorized to designate merchandise
to the strategic supervised precinct regime and the company that performs repair, maintenance, or calibration of machinery and equipment (it will be delivered printed before the corresponding ADACE).
4. Temporary export of merchandise of the Authorized
Economic Operator, for repair, maintenance, or substitution abroad (it will be delivered printed before the Customs corresponding).
4. Type of Transport Type of Transport in question:
1. From border region or strip to the interior of the national
territory.
2. From the National Territory to border region or strip.
3. From one point of the border region or strip to another of the
same, when it is required to transit through the rest of the national territory.
4. Regarding transports referred to in the field Type of
operation, item 3.
5. Regarding transports to a exit customs, for the
type of operation, of item 4.
Data of the company that transfers:
5. RFC Key RFC Key of the company that transfers the merchandise.
6. Program Number IMMEX Program Number of the company that transfers
the merchandise, if applicable.
7. Corporate name or trade name Corporate name or trade name of the company that transfers the
merchandise.
8. Address of the origin plant or
warehouse
Address of the plant or warehouse where the merchandise to be transferred is located.

70 DIARIO OFICIAL Viernes 17 de enero de 2025
Data of the receiving company:
9. RFC Key RFC Key of the company that receives the merchandise.
10. Program Number IMMEX Program Number of the company that receives
the merchandise, if applicable.
In case of submanufacturing or subcontracting operations or repair or maintenance company it is declared null.
11. Corporate name or trade name Corporate name or trade name of the company that receives
the merchandise.
12. Address of the plant or warehouse
destination
Address of the plant or warehouse where the transferred merchandise is received.
Data of the merchandise that is transferred:
13. Sequence Number of the sequence of the merchandise in the
notice.
14. Commercial description Commercial description of the merchandise necessary and sufficient,
to physically identify the merchandise.
15. Unit of measure of
commercialization
Key corresponding to the unit of measure of commercialization of the merchandise, according to Appendix 7 of Annex 22.
16. Quantity Quantity of merchandise according to the unit of measure of
commercialization.
17. Value in dollars Commercial value of the merchandise expressed in dollars of the
United States of America.
18. Exit Customs. Indicate the Customs through which the temporary
export of the merchandise will be carried out, in accordance with rule 7.3.3., fraction XXI.
General Data:
19. Barcode The barcode formed by must be recorded:
Folio of the notice:
1 digit, corresponds to the last digit of the current year.
7 digits, annual consecutive number assigned by the person who transfers the merchandise.
This numbering must start with 0000001.
RFC Key of the person who transfers the merchandise.
Validation acknowledgment generated by the SAAI.
After each field, including the last one, the control characters, carriage return and line feed must be presented.
NOTE: Does not apply, regarding the field Type of operation, item 3.
Data of the person who prepares the notice:
20. Name Name of the person who prepares the notice.
21. CURP CURP of the person who prepares the notice.
22. Serial Number Serial number of the certificate of their e.firma of the person
who prepares the notice.
23. e.firma Electronic signature of the electronic notice, generated by the person who
prepares it.

Viernes 17 de enero de 2025 DIARIO OFICIAL 71
B11.
Notice of transport of merchandise from companies with IMMEX Program in the modality of Authorized Economic Operator subject control of companies Folio of the Notice RFC Key and corporate name or trade name of the Corporate Controller Program Number Data of the company that transfers Certification RFC Key Corporate name or trade name Address of the origin plant or warehouse Data of the receiving company RFC Key Corporate name or trade name Electronic validation acknowledgment Date and time of validation Address of the destination plant or warehouse Barcode Data of the merchandise that is transferred Sequence Unit of measure Quantity Description Name and CURP of the legal representative who authorizes the notice Notice of transport of merchandise from companies with IMMEX Program in the modality of corporate controller in accordance with rule 7.3.4., fraction II, subsection b).
Page
of

72 DIARIO OFICIAL Viernes 17 de enero de 2025
Instructions
Header of the transfer notice, for the main page and the secondary pages if applicable Field Content
1. Folio of the Notice. Folio number of the Notice, integrated by:
1. One digit to indicate the last digit of the current year.
2. Seven more digits for the annual consecutive number
assigned by the corporate controller.
2. RFC Key and corporate name or
trade name of the Corporate
Controller.
RFC Key and corporate name or trade name of the Corporate Controller.
3. Program Number. IMMEX Program Number granted to the Corporate
Controller.
Data of the company that transfers and of the company that receives:
4. RFC Key of the company that
transfers.
RFC Key of the company that transfers the merchandise.
5. Corporate name or trade name of the
company that transfers.
Corporate name or trade name of the company that transfers the merchandise.
6. Address of the origin plant or
warehouse.
Address of the plant or warehouse where the merchandise to be transferred is located.
7. RFC Key of the company that
receives.
RFC Key of the company that receives the merchandise.
8. Corporate name or trade name of the
receiving company.
Corporate name or trade name of the company that receives the merchandise.
9. Address of the destination plant or
warehouse.
Address of the plant or warehouse where the transferred merchandise is received.
Data of the merchandise that is transferred:
10. Sequence. Number of sequence of the merchandise in the Notice.
11. Unit of measure. Key of the unit of measure of commercialization of the
merchandise that is transferred, according to appendix 7 of
Annex 22.
12. Quantity. Quantity of merchandise according to the unit of measure of
commercialization.
13. Description. Description of the merchandise that is transferred.
14. Electronic validation acknowledgment. Electronic validation acknowledgment issued by the SAAI M3.
15. Date and time of validation. Date and time of validation of the Notice.
16. Barcode. IMMEX Program granted to the Corporate Controller,
folio of the Notice up to 8 characters (alphanumeric) and electronic signature generated by the SAAI M3 up to 7 characters (alphanumeric).
After each field, including the last one, the control characters, carriage return and line feed must be presented.
Footer of the transfer notice:
17. Name of the legal representative
who authorizes the notice.
Full name of the legal representative who authorizes the notice with their e.firma.
18. CURP of the legal representative who
authorizes the notice.
CURP of the legal representative who authorizes the notice with their e.firma.

Friday, January 17, 2025 OFFICIAL GAZETTE 73
B12.
Import and Export Electronic Notice
Patent or
Authorization
Dispatch
Customs
Entry No.
Notice
Folio
Certification
Means of
Transport
RFC Key of the
Carrier
Economic
Number
License Plates
Description of the merchandise
Barcode
Unit of Commercialization Measure Quantity e.firma Instructions Header of the notice for the main page and secondary pages, if applicable Field Content

Patent or Authorization. Patent of the customs broker or Authorization of the customs agency, customs attorney, importer or exporter who promotes the
dispatch.
Dispatch Customs. Key of the Dispatch Customs, according to appendix 1 of
Annex 22.
Entry No. Number of the consolidated entry document that covers the
shipment, according to the following:
1 digit, it must correspond to the last digit of the current year, unless it is a consolidated entry initiated in the immediate previous year or the entry original of a rectification.
6 digits, which will be progressive numbering by customs in which they are authorized for the dispatch, assigned by each customs broker or customs agency, customs attorney, importer or exporter, referred to all types of entry.

74 OFFICIAL GAZETTE Friday, January 17, 2025
4. Notice Folio. Consecutive number per entry that the customs broker or
customs agency, customs attorney, importer or exporter, assigns to the shipment.
General Data:
Field Content

Means of Transport. Key of the means of transport in which the merchandise is conducted,
according to appendix 3 of Annex 22.
RFC Key of the
carrier.
RFC Key of the carrier that conducts the merchandise to the Customs/Customs section of dispatch.
Economic Number. Economic number when the merchandise is transported in
trailer, semi-trailer or container. Otherwise it is declared null.
License Plates. License plate number of the transport that conducts the merchandise to
the Customs/Customs section of dispatch. This field is optional.
Description of the merchandise. Materials, parts, components or packaging material
used in the manufacturing, transformation or repair process of products from the sector (for example: indicate sector electrical, electronic, auto parts, automotive, etc.).
Unit of Commercialization Measure.
Key corresponding to the unit of commercialization measure of the merchandise, according to appendix 7 of Annex 22.
In the case of operations referred to in rules
3.7.32. and 7.3.3., fraction XXX, in other cases it is declared null.
Quantity. Quantity of merchandise according to the unit of measure of
commercialization.
In the case of operations referred to in rules
3.7.32. and 7.3.3., fraction XXX, in other cases it is declared null.
Barcode. The barcode printed by the customs broker or
customs agency, customs attorney, importer or exporter, according to what is stated in the section CFDI or document equivalent of consolidated entries of appendix 17 of
Annex 22.
Footer:
e.firma. e.firma of the electronic notice, corresponding to the customs broker or customs agency, customs attorney, importer or exporter, who promotes the dispatch.
It must be printed in four copies, the one corresponding to the Customs, customs broker or customs attorney, carrier and importer or exporter.

Friday, January 17, 2025 OFFICIAL GAZETTE 75
B13.
Volumetric Storage Capacity Notice (Rule 2.3.8.)
Before filling out this request, read the instructions on the back.
Number of official document with which the authorization or concession was granted Date of the official document dd/mm/yyyy

Name and/or Trade Name:
________________________________________________________________________________________ RFC Key including the homoclave ________________________________________________________________________________________ LEGAL REPRESENTATIVE DATA
Legal representative data
Paternal surname Maternal surname Name
RFC Key including the homoclave
________________________________________________________________________________________ Phone Email Indicate with an x, that you declare, under oath, that the legal representative has the authority to perform acts of administration or those necessary to carry out the procedures for this process. AUTHORIZED SURFACE AND OCCUPIED VOLUMETRIC CAPACITY DATA
Authorized surface and occupied space
Total authorized surface m2
Volumetric storage capacity m3
Occupied volumetric space
18% 20%
Attach the following documentation:
I.- Photographic support where the 18% space as well as the 20% of the volumetric capacity of occupied storage is visible.
II.- Copy of the Authorization official document and, if applicable, official document of extension or of surface expansion.
III.- Copy of the notarial testimony of the power, by which the person signing the document is authorized, to perform acts of administration or power of attorney signed before two witnesses and ratified the signatures of the grantor and witnesses before the tax authorities, notary or public official. IV.- Copy of the taxpayer or legal representative's identification, prior to checking with the original. I declare, under oath, that the data entered in this application is true. _____________________________________________________________ Name and signature of the applicant (Legal Representative of the Legal Entity)

76 OFFICIAL GAZETTE Friday, January 17, 2025
Filling Instructions
The form must be presented before the Customs corresponding to the territorial jurisdiction where the authorized or concessioned party is located.
For the purposes of article 15, fraction IV of the Law, legal entities that have authorization or concession to provide the services of handling, storage and custody of merchandise, must indicate the following:
Provide the number and date of the official document with which the authorization was granted, and if applicable, the corresponding extension:
I. Data of the holder of the authorization or concession.
The Name, Denomination or Trade Name and their twelve-position RFC key must be entered.
II. You must provide the full name, RFC key, phone and email of the
legal representative of the authorized or concessioned legal entity.
III. You must register the total authorized surface taking into account, if applicable, the expansion
or reduction of:
a) The surface expressed in square meters (m 2 ), b) The volumetric storage capacity expressed in cubic meters* c) The volumetric space effectively occupied (18% and 20%)

The volumetric storage capacity must be in function of the total authorized surface.

Friday, January 17, 2025 OFFICIAL GAZETTE 77
B16.
Electronic Rejection Notice (Rule 1.8.2.)
GENERAL DATA
RFC Key Pre-validator
Trade Name
REJECTION DETAIL
LEVEL
Name Provider
Rejection Reason
Rejection Date
Instructions for filling out the Electronic Rejection Notice format (Rule 1.8.2.)
Those authorized to provide the services of electronic pre-validation of the data entered in the entries according to rule 1.8.1., have the obligation to fill out this format, if as a result of the review of the vehicle history, the vehicle does not meet the conditions to be imported in accordance with rule 3.5.1., fraction II.

Columns and/or rows cannot be added or removed.
Sheets cannot be added or the name changed (Rejection).
Use one file per rejection.
All data is required.
The following fields will be filled in, as indicated below:
General Data:
Field Content
RFC Key Indicate the RFC key of the authorized (13 positions) to provide the services of electronic pre-validation of the data entered in the entries according to the rule 1.8.1. Example: AAAA010101XXX.
Trade Name Indicate the Trade Name corresponding to the RFC key of the Authorized who provides the services of electronic pre-validation of the data entered in the entries according to rule 1.8.1.
Rejection Detail:
NIV Indicate the Vehicle Identification Number, which corresponds to the combination of alphanumeric characters assigned by the manufacturers or assemblers of vehicles, for identification purposes.

78 OFFICIAL GAZETTE Friday, January 17, 2025
Provider Name Indicate the name of the company providing vehicle background information in the country of origin, with which the consultation was made, as it appears on the internet page of said provider. Example: Carfax. Rejection Reason Indicate only the numeral corresponding to the reason for rejection, using for this the Rejection Reasons catalog. Rejection Date Write the rejection date of the vehicle with a date format dd/mm/yyyy (already configured in the format file). Example: 15/10/2016. Rejection Reasons Catalog:
Numeral Description
1 Stolen.
2 Damaged.
3 Restricted or prohibited for circulation in the country of origin, in any of the following conditions:
3.01 Parts only.
3.02 Assembled parts.
3.03 Total loss.
Except when it concerns vehicles whose title is of the Salvage type, as well as those that additionally bear the labels clean; rebuilt/reconstructed; or corrected.
3.04 Dismantlers.
3.05 Destruction.
3.06 Non repairable.
3.07 Non rebuildable.
3.08 Non street legal.
3.09 Flood.
Except when it additionally bears the labels clean; rebuilt/reconstructed; or corrected.
3.10 Junk.
3.11 Crush.
3.12 Scrap.
3.13 Seizure / Forfeiture.
3.14 Off-highway use only.
3.15 Water damage / water damage.
3.16 Not eligible for road use.

Friday, January 17, 2025 OFFICIAL GAZETTE 79
3.17 Recovered (Salvage), when it concerns the following types:
Except when it concerns vehicles whose title is of the Salvage type different from those indicated here, as well as those that additionally bear the labels clean; rebuilt/reconstructed; or corrected.
3.17.1 - DLR SALVAGE.
3.17.2 - SALVAGE-PARTS ONLY.
3.17.3 - LEMON SALVAGE.
3.17.4 - SALVAGE LETTER-PARTS ONLY.
3.17.5 - FLOOD SALVAGE.
3.17.6 - SALVAGE CERT-LEMON LAW BUYBACK.
3.17.7 - SALVAGE CERTIFICATE-NO VIN.
3.17.8 - SALVAGE TITLE W/ NO PUBLIC VIN.
3.17.9 - DLR/SALVAGE TITLE REBUILDABLE.
3.17.10 - SALVAGE THEFT.
3.17.11 - SALVAGE TITLE-MANUFACTURE BUYBACK.
3.17.12 - COURT ORDER SALVAGE BOS.
3.17.13 - SALVAGE / FIRE DAMAGE.
3.17.14 - SALVAGE WITH REPLACEMENT VIN.
3.17.15 - BONDED SALVAGE.
3.17.16 - WATERCRAFT SALVAGE.
3.17.17 - SALVAGE KATRINA.
3.17.18 - SALVAGE TITLE WITH ALTERED VIN.
3.17.19 - SALVAGE WITH REASSIGNMENT.
3.17.20 - SALVAGE NON REMOVABLE.
3.18 Stolen (Stolen).
Only when the title indicates that it was recovered (recovered), and this last state remains in force.
3.19 Frame Damage.
3.20 Fire Damage.
3.21 Recycled.
3.22 Crash Test Vehicle.
4 Others.

80 OFFICIAL GAZETTE Friday, January 17, 2025
C2.
Certificate of Origin of Agricultural Products Date: ||||||| Day Month Year Fill in by machine or block letters.
1.- Name and address of the ejidal commissioner, the representative of the colonists or communal members, of the agricultural or livestock association.
Name:
________________________________________________________________________________________ Address:
________________________________________________________________________________________ ________________________________________________________________________________________ RFC Key, if applicable:
________________________________________________________________________________________ 2.- Population to which they are destined:
________________________________________________________________________________________ Municipality:
________________________________________________________________________________________ State:
________________________________________________________________________________________ 3.- Description of the merchandise 4.- Quantity 5.- Weight 6.- Volume I declare under oath that:

The information contained in this document is true and I am responsible for proving what is declared here.
I am aware that I will be responsible for any false or omitted declaration made in or related to this document.
I commit to preserving and presenting, if required, the necessary documents that
support the content of this certificate, as well as to notify in writing all persons to whom I deliver this certificate, of any change that could affect the accuracy or validity of the same.
The goods are of origin from the territory and meet the origin requirements applicable to them.
This certificate is composed of _____ sheets, including all its annexes.
7.- Authorized signature of the ejidal commissioner, the representative of the colonists or communal members, of the agricultural or livestock association to which the small owner belongs or of the SADER.

Signature
Seal

Friday, January 17, 2025 OFFICIAL GAZETTE 81
C3.
Certificate of Transfer of Goods
1. ADACE
2. NO. OF FOLIO:
3. NO. OF ATTACHED SHEETS:
4. DATE OF ISSUE:
5. PERIOD:
6. ORIGINAL: COMPLEMENTARY:
DATA OF THE AUTOMOTIVE INDUSTRY TERMINAL OR MANUFACTURING OF VEHICLES OF AUTOTRANSPORT
7. DENOMINATION OR TRADE NAME 8. R.F.C.
9. TAX ADDRESS STREET AND NUMBER POSTAL CODE
COLONY FEDERAL ENTITY
10. LEGAL REPRESENTATIVE DATA 11. R.F.C.
12. NO. OF NOTARIAL TESTIMONY
DATA OF THE AUTO PARTS INDUSTRY
13. DENOMINATION OR TRADE NAME 14. R.F.C.
15. TAX ADDRESS STREET AND NUMBER POSTAL CODE
COLONY FEDERAL ENTITY
16. NO. OF IMMEX PROGRAM
A. PARTS AND COMPONENTS DESTINED FOR THE NATIONAL MARKET
17. PART NUMBER
18. DESCRIPTION 19. QUANTITY 20. DOCUMENTS THAT COVER THE
MERCANDISE DESTINED FOR THE NATIONAL
MARKET
FRONT

82 OFFICIAL GAZETTE Friday, January 17, 2025
B. PARTS AND COMPONENTS EXPORTED TO COUNTRIES OTHER THAN THE UNITED STATES OF AMERICA, CANADA, MEMBER STATES OF THE COMMUNITY OR OF THE EFTA.
21. PART NUMBER
22.
DESCRIPTION
23.
EXPORTED
QUANTITY
24. NO.
EXPORT ENTRY
25. DATE OF THE
EXPORT ENTRY
26. CUSTOMS
OF THE
EXPORT
ENTRY
27. NAME AND SIGNATURE OF THE LEGAL
REPRESENTATIVE
BACK

Friday, January 17, 2025 OFFICIAL GAZETTE 83
C. PARTS AND COMPONENTS EXPORTED TO THE UNITED STATES OF AMERICA, CANADA,
MEMBER STATES OF THE COMMUNITY OR OF THE EFTA.
1. UNITED STATES OF AMERICA OR CANADA
28.
PART NUMBER
29.
DESCRIPTION
30.
EXPORTED
QUANTITY
31. NO.
EXPORT ENTRY
32. DATE OF THE
EXPORT ENTRY
33. CUSTOMS OF THE
EXPORT ENTRY
2. MEMBER STATES OF THE COMMUNITY
PART NUMBER DESCRIPTION EXPORTED
QUANTITY
NO. EXPORT
ENTRY
DATE OF THE
EXPORT ENTRY
CUSTOMS OF THE
EXPORT ENTRY
3. MEMBER STATES OF THE EFTA
PART NUMBER DESCRIPTION EXPORTED
QUANTITY
NO. EXPORT
ENTRY
DATE OF THE
EXPORT ENTRY
CUSTOMS OF THE
EXPORT ENTRY
34. NAME AND SIGNATURE OF THE LEGAL
REPRESENTATIVE
BACK

84 OFFICIAL GAZETTE Friday, January 17, 2025
Instructions
This form must be filled in by machine or with uppercase block letters, with a black or blue ink ballpoint pen and the digits must not invade the limits of the boxes.
This form will not be valid if it presents strikethroughs, scratches or amendments.

You will write the ADACE key.
You will write the consecutive folio number of the certificate, which will be composed of 16 digits, the
which are formed as follows:
3 digits of the name of the issuing company.
2 digits of the month.
4 digits of the year.
3 digits of the first three letters of the R.F.C. of the recipient.
4 digits of the consecutive certificates.
You will write the number of sheets attached to this certificate, each additional sheet must be
numbered with consecutive numbers.
You will write the day, month and year in which the certificate was prepared.
You will write the month and year in which the operations covered by the certificate were carried out.
Indicate with an X if the certificate is original or complementary.
Data of the automotive industry terminal or manufacturing of autotransport vehicles:
Denomination or trade name.
RFC Key.
Tax address: Street, Number, postal code, colony and Federal Entity.
Legal representative data (paternal surname, maternal surname and name(s)).
RFC Key of the legal representative.
Notarial Testimony Number.
Data of the auto parts industry:
Denomination or trade name.
RFC Key.
Tax Address: Street, Number, postal code, colony and Federal Entity.
IMMEX Program Number, assigned by the SE.
A. Parts and components destined for the national market:
Part number: you will write the part number, series or lot that corresponds to the part or component
acquired from the auto parts industry company, which must coincide with that indicated in the CFDI, equivalent document or document that covers the physical delivery of the part or component.
Description of the part or component: you will write the description of the part or component, in case
the space is insufficient you may present attached sheet(s), always that you write the number of sheets that make up the annex, in the corresponding box.
Total quantity of each part or component destined for the national market.
You will write the number of the document that covers the merchandise destined for the national market.

Friday, January 17, 2025 OFFICIAL GAZETTE 85
B. Parts and components exported to countries other than the United States of America, Canada, Member States of the Community or of the EFTA:
21. Part number: write the part number, series or lot that corresponds to the part or component
acquired from the auto parts industry company, which must coincide with that indicated in the CFDI, equivalent document or document that covers the physical delivery of the part or component.
22. Description of the part or component: you will write the description of the part or component, in case
the space is insufficient you may present attached sheet(s), always that you write the number of sheets that make up the annex, in the corresponding box.
23. Exported Quantity: you will write the total quantity of each part or component exported.
24. Export Entry: the one corresponding to the entry that covers the export of the part or
component or of the vehicle to which each part or component is incorporated.
25. Date of the export entry.
26. Customs of the export entry: you will write the name of the customs or customs section
corresponding.
27. Name and Signature of the Legal Representative.
Original: for the receiving company.
Copy: for the person issuing the certificate.
Important note: The certificate must be printed on letterhead paper of the issuing company.
C. Parts and components exported to the United States of America, Canada, Member States of
the Community or of the EFTA:
28. Part number: you will write the part number, series or lot that corresponds to the part or component
acquired from the auto parts industry company, which must coincide with that indicated in the CFDI, equivalent document or document that covers the physical delivery of the part or component.
29. Description of the part or component: you will write the description of the part or component, in case
the space is insufficient you may present attached sheet(s), always that you write the number of sheets that make up the annex, in the corresponding box.
30. Exported Quantity: you will write the total quantity of each part or component exported.
31. Export Entry: the one corresponding to the entry that covers the export of the part or
component or of the vehicle to which each part or component is incorporated.
32. Date of the export entry.
33. Customs of the export entry: you will write the name of the Customs or Section corresponding.
34. Name and Signature of the Legal Representative.
Original: for the receiving company.
Copy: for the person issuing the certificate.
Important note: The certificate must be printed on letterhead paper of the issuing company.

86 OFFICIAL GAZETTE Friday, January 17, 2025
D2.

Friday, January 17, 2025 OFFICIAL GAZETTE 87

88 OFFICIAL GAZETTE Friday, January 17, 2025

Friday, January 17, 2025 OFFICIAL GAZETTE 89

90 OFFICIAL GAZETTE Friday, January 17, 2025
D3.

Friday, January 17, 2025 OFFICIAL GAZETTE 91

92 OFFICIAL GAZETTE Friday, January 17, 2025
D4.

Friday, January 17, 2025 OFFICIAL GAZETTE 93

94 OFFICIAL GAZETTE Friday, January 17, 2025

Friday, January 17, 2025 OFFICIAL GAZETTE 95

96 OFFICIAL GAZETTE Friday, January 17, 2025

Friday, January 17, 2025 OFFICIAL GAZETTE 97

98 OFFICIAL GAZETTE Friday, January 17, 2025

Friday, January 17, 2025 OFFICIAL GAZETTE 99

100 OFFICIAL GAZETTE Friday, January 17, 2025
D5.

Friday, January 17, 2025 OFFICIAL GAZETTE 101

102 OFFICIAL GAZETTE Friday, January 17, 2025

Friday, January 17, 2025 OFFICIAL GAZETTE 103
D6.
Origin document for extracted, industrialized or manufactured mineral products Date: ||||||| Day Month Year Fill in by machine or block letters.
TO BE FILLED BY THE INTERESTED PARTY
1.- Name, trade name or corporate name and tax domicile of the individual or legal entity:
Name:
________________________________________________________________________________________ Address:
________________________________________________________________________________________ RFC Key:
________________________________________________________________________________________ 2.- Population to which they are destined:
________________________________________________________________________________________ Municipality:
________________________________________________________________________________________ State: _________________________________________________________________________________ 3.- Place where the products subject to the entry of the border strip or region to the rest of the country are extracted, manufactured, or industrialized. _______________________________________________________________________________________ 4.- Description of the merchandise 5.- Quantity 6.- Weight 7.- Volume 8.- I declare under oath that:

The information contained in this document is true and I am responsible for proving what is declared here. I am aware that I will be responsible for any false or omitted declaration made in or related to this document.
I commit to preserving and presenting, if required, the necessary documents that support the content of this document, as well as notifying in writing all persons to whom I deliver this document, of any change that could affect its accuracy or validity.
This certificate is composed of _____ sheets, including all its annexes.

Signature of the interested party or their legal representative EXCLUSIVE FOR OFFICIAL USE 9.- Signature of presentation before the customs office.
Name of the customs office:___________________________________________ Customs office key: ____________________________________________ Employee name: __________________________________________ Employee badge number:
____________________________________________________________ _________________________ Signature Seal

104 OFFICIAL GAZETTE Friday, January 17, 2025
D7.

Friday, January 17, 2025 OFFICIAL GAZETTE 105

106 OFFICIAL GAZETTE Friday, January 17, 2025

Friday, January 17, 2025 OFFICIAL GAZETTE 107

108 OFFICIAL GAZETTE Friday, January 17, 2025

Friday, January 17, 2025 OFFICIAL GAZETTE 109

110 OFFICIAL GAZETTE Friday, January 17, 2025
D8.
Temporary import entry for trailers, semi-trailers and container chassis Entry Number Consecutive Number by Transport Company Economic Number Data of the Transport Company. Certifications Name, trade name or corporate name:
R.F.C.:
Tax Domicile:
Data of the Authorized Company.
Name, trade name or corporate name:
R.F.C.:
Data of the Unit.
Transport Date of issue
Brand
Model Time of issue
Line
Economic No. Electronic Signature
Serial No.
License Plate No. Barcode
Nominal value
Tariff fraction.
Type Unit
This document must be presented by the interested party, both at the time of its introduction to national territory, and upon RETURN of the vehicle, for certification by the electronic computing system printer of the SAT, without which the annotations of introduction and return appearing in this Temporary Import Entry will not be valid; based on articles 16-B and 107 of the Law, 19 and 21 of the Internal Regulations of the SAT, as well as rule 4.2.1. I declare under oath that I will return, within the legal deadline, the vehicle described above, aware that if I do so late I will be subject to the sanction established in article 183, fraction II of the Law, and that I will abstain from committing infractions or crimes related to the improper use or destination of said vehicle during its stay in national territory. Likewise, I declare under oath that the data recorded is true. __________________________________________________________________________________ Name and Signature

Friday, January 17, 2025 OFFICIAL GAZETTE 111
Instructions
Field Content
I. Name, trade name or corporate name
of the transport company.
Name, trade name or corporate name of the transport company that requests the temporary import.
II. RFC Key of the transport company.
RFC Key of the transport company. In cases where the temporary import is carried out by a foreigner, the key EXTR920901TS4 will be noted.
III. Tax domicile of the transport company.
Tax domicile of the transport company, or, if it is a foreigner, the address that appears in the official documents, composed in case of the street, number exterior, interior number, postal code, municipality, city Federative Entity and country.
IV. Name, trade name or corporate name
of the authorized company.
The name, trade name or corporate name of the company authorized by the ANAM, in terms of article 16- B of the Law, must be noted.
V. RFC Key of the authorized company.
RFC Key of the company authorized by the ANAM, in terms of article 16-B of the Law.
VI. Data of the unit. The type of transport (road,
railway, maritime), brand, model, line, economic number, serial number, license plate number, nominal value, tariff fraction, unit type (trailer, semi-trailer or container chassis) must be noted.
In the case of the serial number, only the digits should be printed in parentheses.
VII. Entry number. Folio number integrated by:
I. A digit to indicate the Authorized Company key.
II. Three digits to indicate the Customs Office Key.
III. A digit to indicate the last digit of the current year.
IV. Six more digits for the annual consecutive number by
Customs Office assigned by the authorized company issuing the entry.
Each of these groups of digits must be separated two blank spaces, except between the digit that corresponds to the last digit of the current year and the six digits of the progressive numbering.
VIII. Consecutive by transport company.
Consecutive entry number processed by the Transport Company per year.
IX. Date of Issue. Day, month and year in which the validation of the
Entry is carried out by the Integrated Administrative Software (SAIT).
X. Time of Issue. Hours, minutes and seconds in which the validation
of the Entry is carried out by the SAIT.
XI. Electronic Signature. Electronic Signature generated by the SAIT.
XII. Barcode. SAIT Key with 2 characters (numeric), Customs Office key
with 3 characters (numeric), folio of the temporary import entry for trailers, semi-trailers and container chassis up to 7 characters (alphanumeric) and Electronic Signature generated by the SAIT up to 7 characters (alphanumeric). After each field, including the last, the control characters, carriage return and line feed must be presented.
XIII. Name and signature. Signature of the transporter, legal representative or person
authorized by the legal representative.

112 OFFICIAL GAZETTE Friday, January 17, 2025
E1.
Official seal for internal air transit control MINISTRY OF FINANCE AND PUBLIC CREDIT United Mexican States National Agency of Customs of Mexico Merchandise in Transit Warning:
The merchandise contained in this package is under fiscal control and must be delivered to the destination customs office personnel.
Whoever violates, alters or destroys the content of this package or detaches this label, will be sanctioned in accordance with articles 186, fractions I and II and 187, fraction I of the Law and 113, fraction I of the CFF. The same sanctions will be imposed to those who tolerate these acts. Dimensions: 7cm. Width. 14 cm. Length. Color: Fluorescent orange background. Legends in black color.

E3.
Company Profile
Acknowledgment of Receipt
First Time: Renewal:
Addition:
Modification:
The data provided will replace the data provided when you requested your authorization.
General Information.
The objective of this Profile is to ensure that companies implement security practices and processes that ensure their supply chain to mitigate the risk of contamination of their merchandise with illicit products. Companies interested in obtaining their registration in the Registry of the Company Certification Scheme in the Authorized Economic Operator modality under the headings of Importer and/or Exporter, Holding Company, Aircraft, SECIIT, Textile and Logistics Outsourcing referred to in rule 7.1.4., must demonstrate that they have documented and verifiable processes required in this document according to the model or business design they have established according to a risk management, seeking during the implementation of minimum security standards the application of a culture of analysis that supports preventive and reactive decision-making against threats and/or risk circumstances in accordance with the values, mission, vision, codes of ethics and conduct of the company itself. Filling Instructions:
I. You must fill out a Profile for each of the facilities that operate under the same RFC, where they carry out manufacturing processes of products of
foreign trade and, in their case, of those facilities related as: industrial and/or manufacturing plants, warehouses, distribution centers, consolidation among others. This information must coincide with what is stated in your Registration Request in the Company Certification Scheme.
II. Detail how the company complies with or exceeds what is established in each of the numerals as indicated.
III. The format of this document is divided into two sections, as detailed below:

Standard.
Standard description
1.1 Sub-standard.
Sub-standard description
Response. Explanatory Notes.
Describe and/or attach... a) Points to highlight...
IV. Indicate how you comply with what is established in each of the sub-standards, so you must attach the procedures in Spanish that, if necessary, are required, or provide a detailed explanation of what is requested in the Response field.
The section regarding Explanatory Notes is a guide regarding the points that must be included in the Response, of each sub-standard, indicatively pointing out those points that should not be excluded from your response.
V. Once this Company Profile has been answered, you must attach it to the Registration Request in the Company Certification Scheme referred to in the
first paragraph of rule 7.1.4., fraction IV.
For the purpose of verifying what is stated in the previous paragraph, the SAT through the AGACE may carry out an inspection of the installation indicated here, with the exclusive purpose of verifying what is stated in this document.
VI. Any incomplete Company Profile will not be processed.
VII. Any question related to the Registration Request in the Company Certification Scheme and the Company Profile, direct it to the contacts that
appear on the SAT Portal.
VIII. In the event of being authorized with the Registration in the Company Certification Scheme, this format must be kept updated and notify
when the circumstances under which the registration was granted have changed and as a result changes or modifications are required in the information provided and provided in this Company Profile to the authority, in accordance with what is established in rule 7.2.1., third paragraph, fractions III and IV.
IX. When as a result of the inspection visit there are non-compliances related to the minimum security standards, the applicant may
correct them before the issuance of the resolution established in rule 7.1.6., for which they will have a maximum period of three months counted from the notification of the non-compliances indicated.
Installation Data.
A Company Profile must be filled out for each of the facilities that belong to and operate under the same RFC and that carry out processes of manufacturing foreign trade products and, in their case, of those facilities related as: industrial and/or manufacturing plants, warehouses, distribution centers, consolidation, etc.

Installation Information. Profile Number of the company: of RFC Key:
Name and/or Corporate Name:
Name and/or Denomination of the Installation
Type of Installation
Street Number and/or exterior letter Number and/or interior letter Neighborhood Postal Code Municipality/Delegation Federative Entity Age of the plant (years of operation):
Predominant activity of the plant:
Products that it manufactures or handles in this plant:
(As applicable)
Avg. number of monthly shipments
(EXP):
(By means of transport)
Avg. number of monthly shipments
(IMP):
(By means of transport)
Total number of employees in this installation:
Installation surface (m2
):
Certifications in security programs: (Indicate if this installation has a certification from any of the following programs) CTPAT Yes No Level: Pre-Applicant: Applicant: Certified: Certified/Validated:
CTPAT Account number
(8 digits):
Manufacturer Identification Code (MID): Date of last visit in this installation:
Authorized Economic Operator from other countries (AEO):
Yes No Program: Registration:
Other supply chain security programs:
Yes No Program: Registration:

Certifications: (Indicate if you have certifications that you consider impact your supply chain process, for example: ISO 9000; Reliable Logistics Processes, among others) Name: Category: Validity:
Name: Category: Validity:

Supply Chain Security Planning.
The company must develop documented policies and procedures to carry out an analysis that allows the identification of risks and weaknesses in its supply chain with the objective that the company's senior management implements strategies that help mitigate the risk in the operations of its organization. Likewise, to build a solid supply chain security program, the company must have a Security Committee that incorporates representatives of all relevant departments, forming a multifunctional team that identifies areas of opportunity and proposes continuous improvement actions throughout the supply chain and installations of the company. In the same way, the company must have designated points of contact for the Authorized Economic Operator Program, which must be involved and know the requirements of the Authorized Economic Operator, belong to the company and prove its relationship with it, as well as respond to its specialist in supply chain security (this is assigned once the company already has the Authorized Economic Operator Program). If as a result of the risk analysis, new security measures arise to be incorporated into the company, these must be included in the existing procedures of the company and, if necessary, develop new procedures, which creates a more sustainable structure and emphasizes that supply chain security is everyone's responsibility.
1.1 Risk analysis.
The company must establish measures to identify, analyze and mitigate security risks within the supply chain and in its facilities. For the above, it must develop a written process to determine risks according to its organization's model (example: location of facilities, type of merchandise and country of origin, volume, customers, suppliers, routes, hiring of personnel, classification and handling of documents, Information Technology, potential threats, etc.), which allows it to implement and maintain appropriate security measures. According to the above, the company also must have a written process based on its risk analysis to select new business partners and monitor those with whom it is already working. This procedure must be updated at least once a year, so that it allows to permanently identify other risks or threats that are considered in its operation and in the supply chain, as a result of some security incident or when they originate from changes in the initial conditions of the company, as well as to identify that the policies, procedures and other control and security mechanisms are being complied with. It is important to point out, that the Company's Security Committee must participate in the preparation and updating of the risk analysis, as well as in the maintenance of the Authorized Economic Operator Program.

Response: Explanatory Notes:
Indicate which are the sources of information used to qualify risks during the analysis phase.
Attach the risk matrix, as well as the documented procedure to identify risks in the supply chain and the installations of your company, which must include as a minimum the following points:
I. Periodicity with which it reviews and/or updates the
risk analysis.
II. Aspects and/or areas of the company that are
incorporated into the risk analysis.
III. Methodology or techniques used to perform the
risk analysis.
IV. Responsible for reviewing and/or updating the risk
analysis of the company.
Likewise, the documented procedure to identify risks in the supply chain and its facilities, should contemplate the risk appreciation and management process, and include the following aspects:
I. Establishment of a context (cultural, political,
legal, economic, geographic, social, etc.).
II. Identification of risks in its supply chain
and its facilities.
III. Risk analysis (causes, consequences,
probabilities and existing controls to determine the level of risk as high, medium and low).
IV. Risk evaluation (decision making to
determine the risks to be treated and priority to implement the treatment).
V. Risk treatment (application of alternatives
to change the probability that risks occur).

VI. Risk monitoring and review (monitoring of
the results of the risk analysis and verification of the effectiveness of its treatment).
It is suggested to use the administration, management and risk evaluation techniques according to the international standards ISO 31000, ISO 31010 and ISO 28000 that, according to your business model, you should implement.
1.2 Security policies.
The company must have a policy oriented to prevent, ensure and recognize threats in the security of the supply chain and installations of the company, such as drug trafficking, money laundering, arms trafficking, human trafficking, prohibited merchandise and acts of terrorism. To promote a culture of security, companies must demonstrate their commitment to supply chain security and the Authorized Economic Operator Program through a statement highlighting the importance of protecting the flow of national and international commerce from criminal activities, established through the security policy. The senior officials or executives of the company who must endorse and sign the security policy, can be the president of the company, the director executive, the general manager or personnel with a homologue position with decision-making authority. Response: Explanatory Notes:
State the security policy oriented to prevent, ensure and recognize threats in the supply chain and installations of the company, indicate who is responsible for its review, signature and dissemination to employees, as well as the periodicity with which its update is carried out. This policy must be communicated to employees through a program and/or dissemination campaign. The security policy must be signed by a senior official of the company and be displayed in various areas of the company, including the company website, posters in key areas of the company (reception, shipments, receipts, warehouse, etc.), and as part of the company's initial and reinforcement training.

1.3 Internal Audits in the Supply Chain.
In addition to routine monitoring in control and security, it is necessary to schedule and conduct periodic audits, which allow for the evaluation of all processes regarding security in the company's supply chain in a more critical and in-depth manner, as well as to ensure that employees follow the company's security procedures. Audits must be carried out by the Company's Security Committee, establishing a documented procedure, as well as a program or schedule for their execution. Although it is necessary that the audits be focused on supply chain security and based on the evaluation, review, and execution of minimum security standards, their focus must be adjusted to the size of the organization, risk level, business model, and variations between facilities. Audits can be general or focus on specific areas or processes according to their work program. The objective of an internal audit focused on the Authorized Economic Operator Program is to verify and ensure that employees follow the company's security procedures. The review process does not have to be complex; however, the formats and records used for the application of these reviews must evidence that the application and execution of the evaluated processes were validated, as well as the follow-up and closure of preventive, corrective, and improvement actions identified. The organization's senior management must review the results of the audits and undertake the required corrective or preventive actions. The audit process must ensure that the necessary information is collected to allow management to perform this evaluation. The review must be documented, and the company's Security Committee must provide and register periodic updates on the progress or results of any audit, exercise, or validation. Answer: Explanatory Notes:
Describe the documented procedure to carry out an internal audit focused on supply chain security; ensure you include the following points:
I. Indicate how the company carries out the scheduling or calendarization to perform an internal audit on supply chain security.
II. Indicate who participates in them, the records kept thereof, and the frequency with which they are carried out.
III. Indicate how the company's management verifies the results of security audits, how it carries out and/or implements preventive, corrective, and improvement actions, as well as the follow-up and closure thereof.
IV. The formats used during internal audits must be duly completed, and through them, evidence that security procedures and measures are being put into practice.

1.4 Contingency and/or Emergency Plans.
A documented contingency and/or emergency plan must exist; this plan must address crisis management, security recovery plans, and the resumption of operations to ensure business continuity in the event of a situation that affects the normal development of activities and foreign trade operations of the company in its supply chain. A crisis or contingency may include the interruption of the transmission and exchange of commercial data due to a cyberattack, a fire, the kidnapping of a transport driver by armed persons, (a customs closure, a bomb threat, the detection of suspicious packages, a power outage, theft and/or damage to goods, threats or extortion, blockades or road closures, among others). Such plans must be communicated to personnel through periodic training, as well as conducting tests, practical exercises, and annual drills of the contingency and emergency plans to verify their effectiveness; records must be kept of these, duly completed and signed (for example: result reports, minutes, or reports, which must be supported by video recordings, photographs, etc., that demonstrate their execution). The contingency and/or emergency plan must be updated as necessary, based on changes in operations and the organization's risk level. Answer: Explanatory Notes:
Attach the documented contingency and/or emergency plan to ensure business continuity in the event of an emergency or security situation that affects the normal development of the company's foreign trade activities. This procedure must include, by way of example and not limitation, the following:
I. What situations it covers, describing the action plan and steps to be followed in case of crisis, as well as the tasks assigned to personnel during the handling of such contingencies.
II. What mechanisms it uses to disseminate and ensure that these plans are effective.
III. Include the scheduling and execution of tests, practical exercises, and annual drills and how they are documented (for example: result reports, minutes, or reports, which must be accompanied by video recordings, photographs, etc., that demonstrate their execution).

Physical Security.
The company must have established mechanisms and documented processes to prevent, detect, or deter the entry of unauthorized personnel into the facilities. All sensitive areas of the company must have physical barriers, control elements, and deterrents against unauthorized access.
2.1 Facilities.
Facilities must be constructed with materials that can resist unauthorized access. Periodic documented inspections must be carried out to maintain the integrity of the structures, and in the event that an irregularity is detected, the corresponding repair must be made, for example: result reports, minutes, or reports, which must be accompanied by video recordings, photographs, etc., that demonstrate their execution. Likewise, the territorial limits, as well as the various accesses, internal routes, and the location of the buildings must be fully identified. Answer: Explanatory Notes:
Indicate the predominant materials with which the facility is constructed (for example: metal structure and sheet metal walls, brick walls, concrete, cyclone mesh, among others), and indicate how the review and maintenance of the integrity of the structures is carried out. Indicate the personnel or area responsible for carrying out the tasks of inspection, maintenance, and repair of damage to the facilities. Attach a distribution or architectural plan of the complex, where the limits of the facilities, access routes, emergency exits, location of buildings, critical areas, parking lots, and boundaries can be identified.
2.2 Access at Gates and Booths.
The entrance or exit doors for vehicles and/or personnel must be attended, controlled, watched, and/or supervised. The number of access doors must be kept to the minimum necessary. Access to sensitive areas must be restricted according to the job description or assigned tasks. Answer: Explanatory Notes:
Indicate how many doors and/or accesses exist in the facilities, as well as the operating hours of each, and indicate how they are monitored (in case of having assigned personnel, indicate the quantity).
Detail if there are doors and/or accesses that are blocked or permanently closed.
Describe how you ensure that access to sensitive areas is restricted according to the job description or assigned tasks (include the type of records and controls you use).

2.3 Perimeter Fences.
Perimeter fences and/or peripheral barriers must be installed to ensure the parameters of the company's facilities, according to a risk analysis. Fences, interior barriers, or a mechanism must be used to identify and segregate international cargo, as well as high-value and dangerous cargo. These must be inspected regularly and carry a record of the review with the aim of ensuring their integrity and identifying damage, which must be repaired as soon as possible by the personnel designated for these tasks. Storage areas, high-value, dangerous, and/or restricted-access areas must be clearly identified and monitored to prevent unauthorized entry. Answer: Explanatory Notes:
Describe the type of fence, peripheral barrier, and/or walls that the company has; ensure you include the following points:
I. Specify which areas are segregated.
II. Indicate their characteristics (material, dimensions, etc.).
III. In case of not having walls, justify the reason in detail.
IV. Frequency with which the integrity of the perimeter walls is verified and the records kept with the aim of ensuring their integrity and identifying damage, which must be repaired as soon as possible.
V. Indicate the personnel or area responsible for carrying out the tasks of inspection and repair of damage.
Describe how the cargo destined for foreign countries, dangerous material, and high-value material are segregated; ensure you include the following points:
I. Indicate how you separate national merchandise and foreign trade merchandise, and if it is additionally identified (for example: different packaging, labels, wrapping, among others).
II. Identify and indicate the restricted-access areas (dangerous goods, high value, confidential, etc.).

The procedure for inspecting perimeter fences could include:
I. Personnel responsible for carrying out the process.
II. How and how often inspections of fences, perimeter walls, and/or peripheral barriers and buildings are carried out.
III. How the inspection record is kept.
IV. Who is responsible for verifying that repairs and/or modifications meet the technical specifications and necessary security requirements.
2.4 Parking Lots.
Access to the facility parking lots must be controlled and monitored by security personnel or personnel designated for this task. Private vehicles (of employees, visitors, suppliers, contractors, among others) must be prohibited from parking within the merchandise handling and storage areas, as well as in adjacent areas. Answer: Explanatory Notes:
Describe the procedure for the control and monitoring of parking lots; ensure you include the following points:
I. Those responsible for controlling and monitoring access to the parking lots.
II. Identification of the parking lots (specify if the visitor and employee parking is separated from the merchandise storage and handling areas).
III. How entry and exit of vehicles to the facilities is controlled. Indicate the records made for parking control, the existing control mechanisms (for example: key cards, card readers, badges, etc.), how they are assigned, and the responsible area for doing so.
IV. Policies or mechanisms to prevent the entry of private vehicles into the merchandise storage and handling areas.

2.5 Key and Lock Device Control.
Windows, doors, as well as interior and exterior fences, according to their risk analysis, must be secured with locking devices. The company must have a documented procedure for the handling and control of keys and/or locking devices for interior areas considered critical. Likewise, they must keep a record and establish signed responsibility letters by persons who have keys or authorized access according to their level of responsibility and duties within their work area. Answer: Explanatory Notes:
Indicate if all doors, windows, interior and exterior entrances have closing or security mechanisms.
Attach the documented procedure for the handling and control of keys and/or locking devices; ensure it includes the following points:
I. Those responsible for administering and controlling key security.
II. Format and/or control record for key lending.
III. Treatment of loss or non-return of keys.
IV. Indicate if there are areas where access is gained with electronic devices and/or any other access mechanism.
2.6 Lighting.
Lighting inside and outside the facilities must allow for clear identification of people, material, and/or equipment located therein, including the following areas: entrances and exits, handling, loading, unloading, and storage areas for merchandise, perimeter and/or peripheral fences, interior fences, and parking areas, and must have an emergency and/or backup system in sensitive areas. Answer: Explanatory Notes:
Describe the procedure for the operation and maintenance of the lighting system; ensure you include the following points:
I. Indicate which areas are illuminated and which have a backup system (indicate if you have an auxiliary power plant or any other mechanism to supply electricity in case of any contingency).

II. How you ensure that the lighting system is appropriate in each of the company's areas, so as to allow clear identification of personnel, material, and/or equipment located therein.
III. Person responsible for the control and maintenance of lighting systems.
IV. Maintenance and review program (if it coincides with another process, indicate it).
The procedure may include:
I. How the lighting system is controlled.
II. Operating hours.
III. Identification of areas with permanent lighting.
2.7 Communication Devices.
The company must have communication devices and/or systems in order to contact security personnel and/or authorities immediately in the event of an emergency and security situation. Additionally, a backup system must be available and its proper functioning verified periodically. Answer: Explanatory Notes:
Describe the procedure that personnel must follow to contact the company's security personnel or, in their case, the corresponding authority in the event of any security incident.
Indicate if operational and administrative personnel have or have access to devices (landline phones, mobile phones, alert and/or emergency buttons, etc.) to communicate with security personnel and/or the appropriate person (these must be accessible to users, to be able to react promptly). Indicate what type of communication devices the company's security personnel uses (landline phones, cell phones, radios, alarm system, etc.).

Describe the procedure for the control and maintenance of communication devices; ensure you include the following points:
I. Policies for the assignment of mobile communication devices.
II. Maintenance or replacement program for fixed and mobile communication devices.
III. Indicate if you have backup communication devices, in case the permanent system fails, and, if so, describe them briefly.
The procedure may include:
I. Person responsible for the proper functioning and maintenance of communication devices.
II. Record of verification and maintenance of devices.
III. Method of assignment of communication devices.
2.8 Alarm Systems and Closed-Circuit Television and Video Surveillance.
Alarm systems, closed-circuit television, video surveillance, and security technologies must be used to monitor, notify, or deter unauthorized access and prohibited activities in the facilities and other areas considered sensitive, notify the corresponding area, and also be used as evidence in investigations derived from any security incident. These systems and security technologies must be placed according to a prior risk analysis, in such a way that areas involving the handling, loading, unloading, and storage of merchandise, raw materials, and packaging materials, security inspections of cargo vehicles, as well as the access of personnel, visitors, suppliers, passenger and cargo vehicles, and other areas considered sensitive, are monitored and watched. These systems must allow clear identification of the area or environment being monitored, be recording permanently, and keep a backup of the recordings for at least one month, considering that, if your logistical processes exceed this period, the period for maintaining these backups must be increased, with the aim of having the necessary elements to assign corresponding responsibilities in the event of a security incident. Alarm systems, closed-circuit television, video surveillance, and security technologies must have a documented operation procedure that includes supervision of the good condition of the equipment, verification of the correct position of the cameras, indicate the frequency with which recordings must be backed up, as well as those responsible for their operation. Such a system and all security technology infrastructure must have restricted access.

Answer: Explanatory Notes:
Mention the documented procedure in which the operation of the external alarm central or sensors is indicated, and if applicable, describe the following points:
I. Indicate if all doors and windows have alarm sensors, as well as the areas where motion sensors are available.
II. Procedure to follow in the event of an alarm activation.
Describe the documented procedure for the operation of alarm systems, closed-circuit television, video surveillance, and security technologies (this must be reviewed and updated annually and according to the risk analysis or circumstances); ensure you include the following points:
I. Indicate the number of security cameras of the alarm and closed-circuit television and video surveillance systems installed, and their location by area (Detail if it covers the loading and unloading zones, including the entry and exit points of the facilities, to cover the movement of vehicles and individuals, and where the inspection mentioned in sub-standard 7.2 is carried out). Attach a layout or map of the distribution of security cameras.
II. Indicate the location of the alarm systems, closed-circuit television, video surveillance, and security technologies, where the monitors are located, who reviews them, as well as the operating hours, and if applicable, if there are remote monitoring stations. All security technology infrastructure must be physically protected against unauthorized access.

III. Periodic and random reviews of recordings must be carried out. Indicate how they review them (random, every week, special events, restricted areas, etc.), who the designated personnel are, and how management is involved in the reviews. The results of the reviews must be documented to include corrective actions for audit purposes.
IV. Indicate for how long these recordings are kept (must be at least one month).
V. Alarm systems, closed-circuit television, video surveillance, and security technologies must have an alternative energy source that allows them to continue functioning in the event of an unexpected loss of direct power. For the above, indicate if the alarm and closed-circuit television and video surveillance systems and security technologies are backed up by an electrical power plant or any other mechanism to supply electricity, which guarantees their operation.
These systems should have an alarm/notification function, indicating a failure condition in operation and/or recording; indicate if your systems have this function.
VI. Indicate if, in addition to the alarm and closed-circuit television and video surveillance systems, you use any other type of technology to strengthen the security measures you already have.

VII. Describe the procedure that has been implemented to regularly test and inspect alarm systems, closed-circuit television and video surveillance systems, and security technologies, and to ensure their proper functioning. The results of the inspections and operational tests must be documented, as well as any necessary corrective actions (which must be implemented as soon as possible). Additionally, the documented results of these inspections must be retained for a sufficient period for audit purposes.

VIII. Indicate whether the alarm provider and providers of alarm and closed-circuit television and video surveillance systems have access to the security cameras, if they are responsible for monitoring them, how access is controlled, and who is responsible for said monitoring.

Physical access controls.
Physical access controls are mechanisms or procedures that prevent and prevent unauthorized entry to the facilities, maintain control of the entry of employees, visitors, and suppliers, and also protect the company's assets. Access controls must include the identification of all employees, visitors, and suppliers at all entry points. Likewise, records must be maintained and the documented mechanisms or procedures for entry to the facilities must be evaluated permanently, serving as the basis for beginning to integrate security as one of the primary functions within any company.

3.1 Security personnel.
The company must have security and surveillance personnel. This personnel plays an important role in the physical protection of the facilities and merchandise during its transport, handling, and storage within the company, as well as for controlling the entry and exit of all people to the building. Security personnel must have a documented procedure to carry out their functions and have full knowledge of the mechanisms and procedures in emergency situations, detection of unauthorized persons, or any security incident at the facility. Management must periodically verify compliance with procedures, policies, and functions through internal audits with the objective of verifying their correct execution.

Response: Explanatory Notes:
Describe the documented procedure for the operation of security personnel and ensure you include the following points:
I. Indicate the number of security personnel working at the company.
II. Specify the positions and/or functions of the personnel and operating hours.
III. In case of hiring an external service, provide the general data of the company (tax ID key, trade name, address), and specify the number of employees, operational details, records, and reports they use to perform their functions.
IV. In case of having armed personnel, describe the procedure for the control and storage of weapons.

3.2 Employee identification.
There must be an employee identification system for access to the facilities. Employees should only have access to those areas they need to perform their functions. The management or the company's security personnel must adequately control the delivery and return of badges, ID cards, and/or employee identification credentials. Procedures for the delivery, return, and change of access devices (for example, keys, badges, and/or credentials, proximity cards, etc.) must be documented. Access to sensitive areas must be restricted according to the job description or assigned tasks.

Response: Explanatory Notes:
Describe the procedure for employee identification and ensure you include the following points:
I. Identification mechanisms (badge and/or photo ID, access control, biometrics, proximity cards, etc.).
II. Indicate if employees use uniforms, how they are assigned (by position, area, functions, etc.) and withdrawn (if applicable).
III. Indicate how personnel hired by a business partner, working within the facilities (contractors, subcontractors, in-house services, sub-maquila, etc.) are identified.

Describe how the company delivers, changes, and withdraws employee identification and access controls and ensure you include the responsible areas for authorizing and administering them.
Indicate how you ensure that access to sensitive areas is restricted according to the job description or assigned tasks (include the type of records and controls you use).
Attach the documented procedure for the control of identifications.

3.3 Identification of visitors and suppliers.
To access the facilities, visitors and suppliers must present official identification with a photo for documentation upon arrival and a record must be kept. All visitors and suppliers must receive a temporary identification, must be accompanied by company personnel during their stay at the facilities, and ensure that the visitor/supplier always wears the provisional identification provided in a visible place. This procedure must be documented.

Response: Explanatory Notes:
Describe the procedure for access control of visitors and suppliers, ensure you include the following points:
I. Specify what records are kept (personal forms for each visit, logbooks, among others).
II. The visitor and supplier record must include the following:
a) Date of the visit. b) Visitor's name. c) Identification number with photo (official documents such as: driver's license, passport, INE, etc.). d) Entry and exit time. e) In the case of vehicular access, the form must include the data of the private or cargo vehicle (model, license plate, trailer number, etc.).
III. Specify who is the person responsible for accompanying the visitor and/or supplier and if there are restricted areas for their entry.

3.4 Procedure for identification and withdrawal of unauthorized persons or vehicles.
The company must have documented procedures that specify how to identify, confront, or report unauthorized or identified persons and/or vehicles. This procedure must be communicated to responsible personnel through training. The training must be documented.

Response: Explanatory Notes:
Attach the documented procedure to identify, confront, or report unauthorized or identified persons and/or vehicles.
The procedure must include:
I. Responsible personnel.
II. Designate a person or area responsible for being informed of security incidents.
III. Instructions for confronting and addressing unidentified personnel.
IV. Specify in which cases the corresponding authorities must be reported.
V. How the registration of security incidents and the measures adopted in each case is carried out.

3.5 Courier and package deliveries.
Courier and package deliveries intended for company personnel must be examined upon arrival and departure, before being distributed to the corresponding areas and destinations. Likewise, the company must have a documented procedure for the receipt and review of courier and packages, which must be communicated to responsible personnel through training. The training must be documented.

Response: Explanatory Notes:
Describe the procedure for the receipt and review of courier and packages and ensure you include the following:
I. Personnel in charge of carrying out the procedure.
II. Indicate how the personnel or supplier of the courier and package service is identified (indicate if an additional procedure to supplier access is required).

III. Specify how the review of the courier and/or packages is carried out, what mechanism is used, the records kept, and in case, the incidents detected.
IV. Describe the characteristics or elements to determine which courier and/or packages are suspicious.
V. Specify what action is taken in case of detecting suspicious courier and/or packages.

Business partners.
The company must have written and verifiable procedures for the selection and contracting of new business partners and monitoring of partners already working with them, such as: carriers (long haul, cross-dock or transfer, Ex Works, subcontractors, etc.), for the transport and/or distribution of merchandise subject to foreign trade, customs brokers, logistics outsourcing providers (3PL/4PL), warehouses, sub-maquila companies, manufacturers, sellers, national and foreign suppliers of parts and raw materials, direct and indirect, cleaning service providers, private security, personnel hiring, high-security seal providers, collection and recycling, IT systems and Technology providers, among others), and according to their risk analysis, require them to comply with security measures to strengthen the international supply chain. The risk analysis that the company performs regarding its business partners (clients and suppliers) must include risks related to the identification of activities related to money laundering and terrorist financing. Additionally, the company must have a documented social compliance policy and program among its employees and business partners that, at a minimum, addresses how the company guarantees that goods, inputs, or merchandise imported into Mexico for the elaboration of its final product were not extracted, produced, or manufactured, totally or partially, with prohibited forms of work, that is, forced or compulsory, including forced or compulsory child labor under Article 23.6 of the USMCA and the Agreement establishing the merchandise whose importation is subject to regulation by the Ministry of Labor and Social Welfare, published in the Official Gazette on February 17, 2023.

4.1 Selection criteria.
There must be documented procedures for the selection, follow-up, and renewal of commercial relationships with business associates or suppliers, which include interviews, reference verification, evaluation methods, and use of provided information. The information derived from the investigation and/or evaluation of business associates and/or suppliers must be documented and integrated into a file (physical or electronic). The procedure for the selection of business partners must include indicators to detect clients or suppliers that may not be legitimate or with unlocated addresses, in addition to investigations, reviews, or evaluations of said partners for the identification and control of activities related to money laundering and terrorist financing. If the investigation and/or evaluation of any business partner leads to substantial doubts about the veracity of their operations or services, the company must avoid hiring them and, if applicable, notify their security specialist or Authorized Economic Operator Program contact and the corresponding authority about their suspicions.

Response: Explanatory Notes:
Attach the documented procedure for the selection and contracting of new business partners and monitoring of partners already working with them. This includes any type of supplier that has a commercial relationship with the company and, if applicable, with the service outsourcing company, in its supply chain (it is in the next sub-standard where it is requested to differentiate those at risk in its supply chain), ensure you include the following points:
I. What information is required from your business partner.
II. What aspects are reviewed and investigated.
III. Indicators to identify clients or suppliers that may not be legitimate (payments above standard rate, in cash; having little knowledge of the merchandise to be shipped; being evasive; minimal contact information (cell phone, contact points, emails, among others); recently created companies or businesses without commercial history, etc.) or with unlocated addresses. This point refers to pointing out all those alerts to determine that a business partner is not reliable and thus, conduct a deeper investigation and evaluate if you should work with them.
IV. Indicate if you maintain a physical or electronic file of each of your business partners, as well as the information it must contain.
V. Specify how the services of your business partner are evaluated and what points you review.

The file must include at least the following:
I. Company data (name, tax ID key, activity, etc.).
II. Legal representative data.
III. Proof of address.
IV. Commercial references (if applicable).
V. Contracts, agreements, and/or confidentiality agreements and security policies.
VI. If applicable, certificate or certification number in the security programs to which they belong.

4.2 Security requirements.
The company must have a documented procedure in which, according to its risk analysis, it requests additional security requirements from those business partners that intervene in its supply chain, whether as suppliers of materials for the elaboration, packaging, or packing of merchandise subject to foreign trade, as well as transport service providers (long haul, cross-dock or transfer, Ex Works, subcontractors, etc.), for the transport and/or distribution of merchandise subject to foreign trade, customs brokers, logistics outsourcing providers (3PL, third-party logistics or 4PL, main logistics provider), warehouses, sub-maquila companies, manufacturers, sellers, national and foreign suppliers of parts and raw materials, direct and indirect, cleaning service providers, private security, personnel hiring, high-security seal providers, collection and recycling, IT systems and Technology providers, among others. The requirements must be based on the company Profile established by the AGACE, or in case it exists, the specific Profile for each actor in the supply chain that corresponds to them. The company must request from its business partners the documentation that accredits and proves that they comply with the minimum security standards established in the company Profile, either through a written declaration issued by the legal representative of the partner, agreements or contractual clauses, backed by documentation supporting compliance with the requirements established in the Authorized Economic Operator Program. For the case of the Service Outsourcing Company that has business partners contracted to provide customs management, storage, handling, transport, and/or distribution of merchandise subject to foreign trade services on its behalf, they must be registered in the Registry in the Certification of Companies Scheme, in the modalities of Authorized Economic Operator and Certified Commercial Partner in any of its areas or have the CTPAT Program, granted by the CBP. Likewise, the company must take into account and know the specific requirements of the Authorized Economic Operator Program that will be applicable to each of its business partners, based on their activity within the supply chain. In the case of the company's business partners that provide their services within the facilities, they must be obliged to comply with these supply chain security requirements.

Response: Explanatory Notes:
Describe the procedure that indicates how you carry out the identification of business partners that require compliance with minimum security standards. Ensure you include the following points:
I. A register of business partners that must comply with security requirements, and mention what type of providers these are (carriers for the transport and/or distribution of merchandise subject to foreign trade, warehouses, custody service, private security company, customs brokers, etc.).
II. Indicate in what documentary form (agreements, accords, contractual clauses, and/or addenda) you ensure that your business partners comply with security requirements.
III. Indicate if there are agreements, accords, contractual clauses, and/or addenda regarding the implementation of security measures with your service providers inside your company, such as: private security, cafeteria, gardening, cleaning and maintenance services, IT providers, etc.
IV. Indicate if you have business partners to whom membership in a supply chain security program is required (for example: CTPAT or any other WCO Authorized Economic Operator Program), as well as the information and documentation requested from them.

4.3 Business partner reviews.
The company, through the Security Committee, must perform periodic security evaluations (as well as those derived from risk situations) of the processes and facilities of business associates based on a risk analysis to guarantee that they have minimum security standards required by the company based on the Authorized Economic Operator Program, keep records of them, which allow verifying that the processes and security measures are being executed, as well as the corresponding follow-up. When inconsistencies are found, the company must communicate them to its partner and/or supplier and provide a justified period to address the observations or areas of opportunity identified or, in case, have the necessary measures to sanction it. Performing security evaluations of business partners is important to guarantee that there is a solid security program and that it functions correctly, which is why, in addition to a documented procedure, there must be a program or calendar for the execution of said reviews or security evaluations, prioritizing partners that are more critical according to their risk analysis. If a member is not evaluated and the company does not know if the processes and facilities of its business partners function correctly, it puts its supply chain at risk.

Response: Explanatory Notes:
Describe the procedure to carry out evaluations for the verification of security requirements (processes and facilities) of your business partners, ensure you include the following points:
I. Periodicity with which you make visits to the business partner (these must be at least once a year and derived from risk situations).
II. Program or calendar for the execution of security reviews.
III. Record or report of the verification, and in case, the corresponding follow-up.
IV. The verification formats must be duly filled out, placing the date, name, and position of those who participate in the review, signatures, etc.
V. Specify what action measures are taken when business partners do not comply with the established security requirements.
In case of having business partners with CTPAT certification or another supply chain security certification program, indicate the periodicity with which their status is reviewed, how you register it, and the actions you take in case it is detected that it is suspended and/or cancelled, according to what is established in your procedure.

The procedure must include:
I. Periodicity of visits.
II. Points of review in security matters.
III. Preparation of reports.
IV. Feedback and agreements with the business partner.
V. Follow-up to agreements.
VI. Measures in case of detection of non-compliance with requirements.
VII. Record of evaluations.
VIII. Area or person responsible for carrying out this procedure.

Process security.
Control measures must be established to guarantee the integrity and security of merchandise in processes related to transport (in any of its modalities), handling, customs clearance, storage, and/or distribution of cargo throughout the supply chain. These control measures and procedures must be documented and ensure the integrity of your import and export shipments from the point of origin to their final destination.

5.1 Process mapping.
There must be a map that shows step by step the logistical process of the flow of merchandise and the required documentation through your international supply chain.
The company must take into account and include within its mapping all parties involved in its supply chain, containing those that handle import and export documentation, such as customs brokers, others that may not handle the cargo directly but may have operational control such as carriers (long haul, cross-dock or transfer, Ex Works, subcontractors, etc.), logistics outsourcing providers (3PL/4PL), storage, sub-maquila, national and foreign suppliers, direct and indirect, etc. If within your supply chain any part of the transport is subcontracted, it is indispensable that it be considered within your risk analysis and process mapping, since, the more direct and indirect suppliers, the greater the risk involved.

Response: Explanatory Notes:
Attach the document where the mapping of processes through which your import and export merchandise passes is illustrated and described, from the point of origin to the destination, with the purpose of having correctly identified each of the steps that involve the elaboration and delivery of the final product.

Process mapping must include the names (RFC key and corporate name) of the companies that provide services in their logistics chain.
This mapping must contain at least the following aspects:
I. Origin of:
a) Raw materials. b) Packaging, wrapping, and/or crating. c) Container and/or semi-trailer.
II. Delivery and/or receipt of the merchandise.
III. Transfer of the merchandise.
a) Indicate the points and areas for rest or safeguarding of cargo vehicles during the transfer of merchandise subject to foreign trade (import and export), as well as the documentation generated when the cargo enters and leaves the facilities. b) Indicate the estimated times that said vehicles remain in the rest (reposo) or safeguarding areas (company yards, exit customs, customs broker or agency facilities, warehouses, transfer yards or transport, among others).
IV. Storage and/or distribution.
V. Customs clearance.
VI. Delivery to final destination.
VII. Information flow related to the merchandise.
If applicable, indicate if there is a sub-manufacturing process and provide the general data of the company (Name, RFC key, and address) and the SE permit in which authorization as a sub-manufacturing company is granted, as well as the productive process they carry out.

5.2 Warehouses and distribution centers.
When the company has warehouses and distribution centers for merchandise subject to foreign trade, outside the production and/or manufacturing facilities belonging to it, these must be subject, according to their characteristics, to what is established in this document, in order to maintain integrity in their supply chain. Answer: Explanatory Notes:
According to the process mapping of their merchandise, if the logistics chain of foreign trade merchandise involves moving to a warehouse or distribution center, these must comply with the minimum security requirements established by the AGACE. In this way, they are obligated to fill out a Company Profile for each of these installations mentioned here. For the above, indicate how many warehouses and/or distribution centers are used, provide their general data (name and address), and briefly explain what activity is carried out in this installation. Additionally, include also those warehouses and/or distribution centers that are used for national products or fixed assets, as a reference (these do not need to fill out a Company Profile). Likewise, indicate if these belong to the company or if it is a service contracted through a third party. In this case, according to the supplier selection criteria mentioned in the section regarding Commercial Partners, indicate how you ensure that they meet the minimum security requirements (warehouses and/or distribution centers managed by a third party are not obligated to present a Company Profile).

5.3 Delivery and receipt of cargo.
The company must ensure the identification of transport medium operators who carry out the delivery or receipt of the cargo. Likewise, the company must designate a person responsible for supervising the loading or unloading of the shipment, verifying the detailed description of the merchandise, weight, labels, marks, and quantity, cross-referencing this information with the corresponding purchase or delivery orders. In the same way, the driver transporting the merchandise must be provided with the required documentary information for its correct transfer, which includes, by way of example and not limitation, destination, route to be maintained, contact data, and/or procedure in case of any security incident or inspection by any authority, among others. When the cargo is stored overnight or for a prolonged period in the shipping area, measures must be taken to secure the cargo against unauthorized access; this area must be monitored by its alarm systems, closed-circuit television, and video surveillance systems and have restricted access. The cargo preparation areas and the immediate surrounding areas must be inspected regularly to ensure that these areas remain free of visible pest contamination. During the loading and unloading process of merchandise, the company's security area (supervisor or security guard) must be present to validate that the process is being carried out correctly, mitigate the risk of shipment contamination (prohibited, illicit merchandise, or pests), and register said review (incident reports, records, reports, etc.). As evidence that the high-security seal and/or lock was placed correctly, digital photographs must be taken at the moment of loading the vehicles. Whenever possible, these images should be sent electronically to the destination or delivery contact point of the merchandise for verification. Also, the personnel responsible for the shipping and/or receiving area must review the information included in the import and/or export documents to identify or recognize suspicious cargo shipments. Likewise, specific training must be provided on identifying common errors in export shipment documentation, with the objective of preventing these from resulting in security incidents or suspicious merchandise. If the company has its own cargo transport, it must provide training to transport operators to review import and/or export documentation in order to identify or recognize suspicious cargo shipments, such as:
I. Originating from or destined to unusual places;
II. Different routes;
III. Cash payments;
IV. Observing unusual shipping and/or receiving practices;
V. Lack of information.

Answer: Explanatory Notes:
Attach the documented procedure indicating the procedure for the delivery and receipt of cargo and ensure that the following points are included:
I. Method to identify transport operators.
II. Documentation delivered to operators.
In addition to transport documents and customs documents (Bill of Lading, manifests, etc., which must be presented to the authority in a legible, complete, accurate, and timely manner), there must be a record accompanying the entry and exit of merchandise, which includes:
a) Date. b) Driver's name. c) Photo identification number (official documents such as: driver's license, passport, INE, etc.). d) Address of the origin point (location/installation) where the transporter collects the cargo destined for abroad. e) High-security seal or lock number. f) Entry and exit time (the cargo record must be kept secure and drivers must not have access to it). g) In the case of vehicular access, the format must include the data of the cargo vehicle (model, license plate, trailer number, etc.). This record must be kept secure and drivers must not have access to it.

III. The delivery and receipt of cargo should be by appointment, whenever the company's operation allows it and in a specific area or place so that it is monitored by security personnel, an employee, or closed-circuit television and video surveillance systems.
IV. The transporter must notify the installation of the estimated arrival time for the scheduled collection, the driver's name, and the truck number.
V. Person responsible for supervising the loading or unloading of the merchandise and cross-referencing the information.
VI. How it verifies and guarantees that the cargo preparation areas and the immediate surrounding areas remain free of visible pest contamination. In case of identifying any type of visible pest, contamination, trash, insects, grass, weeds, or overgrown grass, how it is reported and what actions are taken regarding it.
VII. Indicate who is responsible for taking digital photographs of the place and the placement of the high-security seal and/or lock, as well as of the merchandise loading process, and, if applicable, how they send them to the destination contact point or cargo delivery (including the seal and/or lock number(s)).
VIII. Indicate how it controls or what security measures it has implemented to mitigate the risk of collusion or complicity between employees, such as the driver and personnel in the dispatch or shipping, receiving, warehouse, security guards areas, etc.

IX. Indicate if it carries out permanent or random reviews of the luggage of transport operators who enter its facilities to deliver or pick up cargo. In case of identifying any anomaly or having a suspicion, describe the actions taken regarding it and how it reports to the authority.
X. In high-risk areas, when feasible from an operational point of view, the land transporter should use a convoy method (e.g., a minimum of two trucks traveling together) to transport the cargo, in addition to having communication between the other cargo vehicles and the personnel responsible for the transfer of the merchandise.
The merchandise delivery and receipt procedure must include:
I. Inspection method at the access point to the company.
II. Designation of personnel responsible for receiving the driver and merchandise upon arrival.
III. Maintenance of a schedule of expected arrivals and treatment of unexpected arrivals.
IV. Registration of transport documents and customs documents accompanying the entry and exit of merchandise (Bill of Lading, manifests, etc., which must be presented to the authority in a timely manner), which accompany the entry and exit of merchandise, showing the origin point (location/installation) where the transporter collects the cargo destined for abroad.
V. Designate personnel responsible for supervising the loading and/or unloading of merchandise.
VI. Weighing, counting, measuring, and marking of merchandise (compare with provided documentation).

VII. In the case of merchandise exit, verify if there are additional security requirements imposed by clients.
VIII. Verification of the integrity of any lock and/or seals on the loading and/or unloading (how locks or seals are used and recorded in documents, placed according to the procedure established in the standards and according to current legal requirements).
IX. Identification and reporting of discrepancies.
X. In the case of merchandise exit, indicate what documentation will be delivered to the transporter.
XI. Report to the corresponding department of the receipt and/or exit of merchandise.
5.4 Merchandise tracking procedure.
The company is responsible for monitoring and supervising the integrity of its merchandise throughout the supply chain, so it must have documented procedures that establish the use of technology for the tracking and supervision of activities of the transport medium movement that transfers foreign trade merchandise. For land transfers, companies must have a documented policy prohibiting unscheduled stops. The company must establish documented internal or provider procedures to ensure at all times the location of the transit transporter's vehicle. These procedures must be carried out under a risk analysis that includes, by way of example and not limitation, the identification of predetermined routes, estimated delivery times between intermediate points, as well as overnight stay and/or rest (yards, exit customs, customs broker or agency facilities, freight agents, among others), which must be registered and incorporated into the tracking process. Likewise, measures and actions to be taken in case of identifying any delay in the route due to weather conditions, traffic, route changes, or inspection by any authority or any security incident must be included. If services of a provider are contracted, the company must have access to the transporter's GPS monitoring system, so that it can track the movement of its shipments. If the driver makes stops during their journey, they must register them and carry out inspections of the transport means, containers, trailers, and semi-trailers used as International Traffic Instruments, as well as of the closing devices, seals, and/or locks to verify their integrity and identify signs of manipulation before resuming the trip. The supervision data and registration of all vehicles in transit carrying foreign trade merchandise, as well as route histories, must be preserved for one year when the authority and/or the transporter must carry out an evaluation due to a security incident or for audit purposes.

Answer: Explanatory Notes:
Attach the documented procedure to monitor the transfer of merchandise.
This procedure must include, among other aspects according to its operation:
I. Have GPS whose external hardware is hidden and can resist attempts to remove it, indicate the type of system implemented by the units used and, if it is a third-party or subcontracted service, describe the consultation tools available to monitor the merchandise.
II. Identification of predetermined routes, estimated delivery times between intermediate points, as well as overnight stay and/or rest (yards, exit customs, customs broker or agency facilities, freight agents, among others). Once the time between assigned points has been determined, there must be a tracking process (route audit) and the corresponding records.
III. In the case of geofences, within their parameters, minimum tolerances allowed for the preset transit route must exist or be established.
IV. There must be systems or procedures with instructions in case of a delay in the route (stops, changes or diversions of route, mechanical failures, accidents, etc.). Likewise, drivers must notify (their supervisor and, if applicable, the sender or consignee of the merchandise) any significant delay in the route due to weather, traffic, accidents, mechanical failures, route change, etc. And on its part, the company must independently verify the cause of said delay.

V. Detail if it has a means that allows communication with the transporter during their transfer and if it has more than one form of communication.
VI. When tracking is carried out by a third party, indicate who is responsible, and how it verifies that it is being carried out correctly, according to the procedures that the company indicates to it.
VII. In case of having own cargo transport, GPS or equivalent technology should be used to ensure that the trailer is also monitored and tracked. Describe how this tracking is performed.
VIII. GPS records or route histories must be safeguarded for cases of security incidents and audits.
The procedure must also include that, in case of identifying a real or concrete threat to the security of a shipment or transport medium; how the company informs its commercial partners in its supply chain that may be affected and, if applicable, to the authority as appropriate, about this type of incidents or presumptions. Indicate if the company uses custody services for its shipments and, if applicable, indicate if there is a documented process for their operation in which policies and restrictions are indicated, as well as the means of communication between the escort and the transporters (if applicable, indicate the RFC key and corporate name of the company providing the service).
5.5 Report of discrepancies in cargo.
There must be documented procedures to detect and report missing, excess, prohibited merchandise, or any other discrepancy in the delivery or receipt of merchandise, which must be investigated and resolved. It must be verified that the cargo matches what is indicated in the description declared in the packing list or the shipping document, specifying the detailed description of the merchandise and the data that allow its correct identification and quantification.

Answer: Explanatory Notes:
Attach the documented procedure to detect and report discrepancies in the delivery or receipt of merchandise and ensure that it includes the following points:
I. Persons responsible for carrying out the review.
II. Documents to cross-reference.
III. Areas to which the information is reported.
This procedure must be applied both to the merchandise received from import; if applicable, in the review at intermediate points; as well as in the final delivery of merchandise to its client.
5.6 Processing of information and cargo documentation.
The company must have documented procedures to ensure that the electronic and/or documentary information used during the movement and clearance of cargo, as well as the information received from business associates, is legible, complete, accurate, reported in time, and protected against changes, losses, or introduction of erroneous information. Likewise, forms and documentation related to import and/or export should be secured to prevent unauthorized use. Answer: Explanatory Notes:
Describe the procedure for the processing of information and cargo documentation, ensure to include the following points:
I. Detail how it transmits relevant information and documentation for the transfer of its cargo with all those involved in its supply chain (indicate if it uses a specific computer control system and briefly explain its function). Likewise, detail how it validates that the provided information is legible, complete, accurate, reported in time, and protected against changes, losses, or introduction of erroneous information.
II. Forms and documentation related to import and/or export must be secured to prevent unauthorized use.
III. Indicate how business associates transmit information with the company and how they ensure its protection.

5.7 Inventory Management, control of packaging, container, and crating material.
The company must have documented procedures for inventory control and cargo storage, and periodic reviews and audits must be carried out to verify their correct management. Likewise, it must have a documented procedure for the control of packaging, container, and crating material of the merchandise, which must also include the control, dissemination, and prevention procedure of visible pest contamination, in the case of using wooden crating materials (such as pallets, boxes, crates, cages, reels, dunnage, chocks, supports, or platforms) to stack, move, and protect the cargo throughout its entire supply chain. Answer: Explanatory Notes:
Attach the documented procedure for inventory management. This must include, among other aspects according to its operation:
I. The frequency with which it carries out stock verification (periodic inventory). Indicate if there is a scheduled calendar documented to carry them out.
II. Indicate what is done in case of surpluses and shortages in inventories.
III. Indicate the treatment given to the control and handling of packaging, container, and crating material, and if applicable, of shrinkage, waste, or excess material, which must also include the control, dissemination, and prevention procedure of visible pest contamination, in the case of using wooden crating materials (such as pallets, boxes, crates, cages, reels, dunnage, chocks, supports, or platforms) to stack, move, and protect the cargo.
This point is also focused on reducing the risk of introduction or dissemination of quarantine pests of importance to the country through packaging (imports), for which reason, describe how it complies with the provisions indicated by SEMARNAT and NOM-144 SEMARNAT-2017, in concordance with International Standard for Phytosanitary Measures No. 15 denominated Regulation of Wood Packaging Material used in International Trade, which emanate from the Food and Agriculture Organization of the United Nations.
IV. Indicate how the fumigation process is to kill, inactivate, sterilize, desiccate, or eliminate pests. What actions are taken in case of requiring quarantine of crating materials.
V. Indicate the area responsible for carrying out this process, as well as the documentation or certificate.
The applicant's procedures may include:
I. Warehouse only accessible to authorized personnel.
II. Frequency of stock control.
III. Control of incoming merchandise, transfers to other warehouses, permanent and temporary withdrawals.
IV. Actions taken if irregularities, discrepancies, losses, or thefts are identified.
V. Treatment of deterioration or destruction of merchandise.
VI. Separation of various types of merchandise, for example, high value or dangerous.
6. Customs Management.
The company must have documented procedures in which internal and operational policies are established, as well as the necessary controls for the due compliance of customs obligations.
Likewise, it must have specialized personnel and documented procedures that establish the verification of the information and documentation generated by the customs broker or, if applicable, ensure the processes carried out by the customs representative.
6.1 Customs clearance management.
The company must have a documented procedure in which criteria are established for the selection of a customs broker or, if applicable, a customs representative, who, according to national legislation, are authorized to promote on behalf of others the clearance of merchandise.

Answer: Explanatory Notes:
Describe the selection and evaluation procedure for the customs agent or representative and ensure it includes the following points:
I. Selection criteria.
II. Evaluation methods and frequency.
III. Describe the indicators with which you evaluate the service of customs agents.
Indicate the full name and patent number and/or authorization of the customs agent or representative authorized to promote your foreign trade operations.

6.2 Customs Obligations.
The company must have a documented procedure that establishes how it maintains updated inventory control of foreign trade merchandise in accordance with what is established in Article 59, fraction I of the Law and the information referred to in Annex 24 sections A and B, as applicable. The company must have a documented procedure for compliance with customs obligations arising from the foreign trade operations it carries out. This must include, at least, compliance with what is established in Article 59, fractions II and III of the Law, which will allow verification of the origin and provenance of the merchandise, through a control that allows identifying the country of origin, the Free Trade Agreement or Commercial Agreement under which the tariff preference was applied, and the document that supports said preference, in case of applying a tariff preference according to self-certification, having all the elements that certify the origin of the merchandise, as well as the correct determination of the customs value. These procedures regarding the origin of the merchandise must describe the cases in which the origin of the same is declared and the documentation with which the originating character must be demonstrated. In the case of companies that introduce merchandise into the national territory under a deferral or tariff refund program, the company must have a procedure in which it describes how it determines the payment of taxes on foreign trade, in accordance with the Treaties of which Mexico is a party, in accordance with what is established in Article 63-A of the Law. In the case of having a development program authorized by the SE, it must have documented procedures to comply with what is required in the same, among which are inventory control, return deadlines and restrictions regarding the change of destination of the temporarily imported merchandise, among others established in Article 24 of the IMMEX Decree, as well as the Annual Report of Foreign Trade Operations referred to in Article 25 of said decree.

Answer: Explanatory Notes:
Attach the procedure by which it establishes how it maintains updated inventory control in terms of fraction I of Article 59 of the Law.
Attach the procedure to comply with customs obligations that result in the verification of the country of origin and the valuation of foreign trade merchandise in terms of fractions II and III of Article 59 of the Law. Regarding this, for the purposes of restrictions on the refund of customs duties on exported products and on tariff deferral programs, only the origin must be demonstrated when the imported merchandise is originating and is subsequently sent to another signatory party of the International Treaty or Commercial Agreement in question. With regard to countervailing duties, the origin must be demonstrated when the tariff fraction of the imported merchandise is subject to such measures. And the origin must also be demonstrated in the case of merchandise that is imported with preferential tariff treatment under an International Treaty or Commercial Agreement of which Mexico is a party. The origin will be considered demonstrated when the company has the certificate of origin or other document provided for in the applicable provisions. Indicate if you have an IMMEX Program authorized by the SE, and if so, attach the procedure to comply with the obligations established in Articles 24 and 25 of the IMMEX Decree, among which are, by way of example and not limitation, the following:
I. Register where production processes are carried out.
II. Return of merchandise within authorized deadlines.
III. Automated inventory control.
IV. Annual Operations Report, among others.
In case of having any other export promotion program, attach the procedure to comply with the obligations derived from it.

6.3 Customs Verification.
The company, in order to guarantee compliance with the mandate entrusted to a third party, as well as to verify the truthfulness of the information declared in its name before the competent authorities, must have documented procedures so that the personnel designated by the company periodically verifies that the customs declarations registered in its accounting match what appears registered in SAAI Web and, if applicable, report to the customs authority any discrepancy in said information. The company, likewise, must have a procedure for the filing of customs declarations for their adequate control. Likewise, the company must have documented procedures, in which the periodic verification of the correct tariff classification of merchandise subject to foreign trade and the verification of tariff and non-tariff regulations and restrictions to which they are subject are established.

Answer: Explanatory Notes:
Attach the procedure established to verify the information that appears registered in SAAI Web, and cross-reference with the customs declarations and documentation requested from the customs agent and/or customs representative. Attach the documented procedure for the verification of the correct tariff classification and NICO. This must include, among other aspects according to your operation:
I. Method for the review and verification of the tariff classification and NICO of the merchandise and their corresponding tariff rates, non-tariff regulations and restrictions.
II. Maintenance of an updated file of foreign trade products. Detail what items you concentrate in it (tariff fraction, NICO, Rates, Regulations, Opinions, among others) and with what frequency it is updated.
III. The tools, systems, programs or technical information that you use to classify your merchandise.
IV. Report to the corresponding areas the changes in the tariff fractions and the implications that are generated in rates and regulations; likewise when it comes to changes in the NICO.

Security of cargo vehicles, containers, train cars, trailers and/or semi-trailers.
The security of the means of transport (including cargo vehicles, pickup trucks, vans, etc.), containers, train cars, trailers and semi-trailers must be maintained to protect them from the introduction of unauthorized persons and/or materials. For this reason, it is necessary to have documented procedures to identify, review, seal and maintain their integrity. Likewise, the process of inspecting means of transport, containers, train cars, trailers and semi-trailers used as Instruments of International Traffic, must include an agricultural inspection procedure to look for visible pests and serious structural deficiencies. Pest contamination is defined as visible forms of animals, insects or other invertebrates (living or dead, at any stage of the life cycle, including eggs, etc.), or any organic material of animal origin (including blood, bones, hair, meat, secretions, excretions, etc.); plants or vegetable products (including fruits, seeds, leaves, twigs, roots, bark, etc.); or other organic material, including fungi, soil or water; when such products are not the declared cargo within the Instruments of International Traffic. For this reason, it is necessary to have procedures to correctly seal and maintain the integrity of containers and trailers from the point of origin of the merchandise. A high-security seal must be applied to all containers and trailers for foreign trade shipments, which must comply with or exceed the ISO 17712 Standard for high-security seals. With the aim of maintaining supply chain security, the company must systematically inspect all cargo vehicles upon entry and exit of its facilities (domestic and international traffic), in addition to keeping a record.

7.1 Cargo Integrity and Use of Seals in Containers and Trailers.
The company must have a documented procedure where the means of transport are identified and, if applicable, the containers, train cars and/or semi-trailers used in its international logistics chain and indicate how their integrity is maintained. For this reason, as one of the security mechanisms, the company must use high-security padlocks or seals that comply with or exceed the ISO 17712 Standard in all containers and loaded trailers that are subject to foreign trade and maintain their integrity until delivery at the final destination. For this, the company must have documented procedures to place and verify the correct application of seals, their inspection at intermediate points, final destination and their replacement when they are opened by any authority. In the event of such an inspection, drivers must notify and record any unusual anomaly or structural modification found in the means of transport derived from said review. The procedures must include the steps to follow if it is discovered that a seal is altered, manipulated or there is an incorrect seal number in the documentation, the communication protocols to the commercial partners involved in the supply chain and the investigation of the security incident. These must be notified to security personnel, commercial partners that may be part of the affected supply chain, security specialist or contact of the Authorized Economic Operator Program. Likewise, it is necessary to have a documented procedure for the administration of the same which includes control, assignment, safeguarding, handling of discrepancies and destruction of seals and padlocks. Regarding the supplier of the seals and/or padlocks, it must be demonstrated how these comply with the ISO 17712 Standard. The company's management or a security supervisor must carry out periodic and documented audits of the high-security seals and/or padlocks, these reviews must include the verification of the inventory of stored seals and/or padlocks and the cross-check with inventory records and shipping documents. Also, the supervisors of the shipping area and/or warehouse managers must periodically verify the seal numbers used in the means of transport and Instruments of International Traffic to corroborate that the information is correct.

Answer: Explanatory Notes:
Detail the type of vehicles, means of transport, as well as containers and semi-trailers that the company uses to transport its merchandise (maritime containers, dry boxes, railway containers, tanks, among others). Indicate if the transport units, containers and/or trailers are owned by the company or a third party. Indicate the transport companies hired to carry out the transfer of foreign trade merchandise, indicating their name or corporate name, RFC key and fiscal address. Attach the documented procedure for the placement and review of seals and/or padlocks in vehicles, means of transport, containers, train cars, trailers and/or semi-trailers. This must include, among other aspects according to your operation:
I. Verify that the seal or padlock is intact and determine if there is evidence of improper manipulation.
In case of using a high-security padlock, (bottle type, cable, padlock, etc.), you must use the VVTT inspection method:
a) V- View the seal and lock mechanisms of the container (View). b) V- Verify the seal number (Verify). c) T- Pull the seal to ensure it is correctly placed (Tug). d) T- Twist and turn the seal to ensure it has closed (Twist and Turn).
II. Review and cross-reference the documentation containing the original seal or padlock number and, if applicable, the additional ones carried in the transport of the merchandise. In case of using the replacement seal and/or padlock, said number must be registered within the company's control. If altered seals and/or padlocks are identified, they must be kept to help carry out the investigation of said incident or discrepancy and, as appropriate, report the compromised seals and/or padlocks to the foreign authority.
III. If the company uses cable seals, they must be placed on the two vertical bars of the container.
IV. Review that the closing devices, hinges and pins are attached to the trailer or container and welded or riveted. Likewise, protective plates can be placed on the door hinges and/or a seal/adhesive tape can be placed on at least each side. Likewise, the correct functioning of handles, latches and all other locking or closing mechanisms of the cargo vehicles must be verified to detect manipulations and any inconsistency before placing any sealing device.
V. Indicate how they assign and replace high-security padlocks, in case that, during the route, it is inspected by another authority. If a seal and/or padlock breaks in transit, the cargo must be examined, the replacement seal and/or padlock number must be registered and the driver must immediately notify business associates when this happens, indicate who broke it and provide the new seal number.
Attach the documented procedure for the control and handling of seals and/or padlocks. This must include, among other aspects according to your operation:
I. What type of seals and/or padlocks you use in your operations (foreign trade, transit, storage, etc.).

II. Who has access and how padlocks and/or seals are safeguarded. The management of seals and/or padlocks must be restricted only to authorized personnel; stored in a safe place, have an inventory, control of their distribution and tracking (record of seals used, as well as of the receipt of new seals and/or padlocks).
III. Describe how the company's management or security supervisor participate in audits of high-security seals and/or padlocks, the reviews they perform, the records they generate and the actions they take in case of identifying discrepancies. Also, how the supervisors of the shipping area and/or warehouse managers verify seal numbers used in means of transport and Instruments of International Traffic to corroborate that the information is correct (this process can also be included within the internal audits referred to in sub-standard 1.3 of this document).
IV. How discrepancies in seal and/or padlock numbers are addressed.
V. Indicate who the supplier(s) is/are and how it is proven that the specifications of the seals and/or padlocks comply with the ISO 17712 Standard (attach certificate issued by the certifying company responsible for verifying compliance with the corresponding ISO).
All written procedures must be disseminated and maintained at the operational level so that they are easily accessible to employees in charge of carrying out the tasks described above, reviewed at least once a year and updated as necessary.

7.2 Inspection of means of transport, containers, train cars, trailers and semi-trailers.
There must be procedures established to verify the physical integrity of the structure of the means of transport, container, train cars, trailers and/or semi-trailer used as Instruments of International Traffic, even the reliability of the door lock mechanisms, in order to identify natural or hidden compartments. The inspections of means of transport or cargo vehicles, containers and trailers (land or railway cargo) must be systematic and carried out upon entry and exit of the company and, if applicable, at the merchandise loading point; and if the infrastructure allows, before arriving at the dispatch customs using the VVTT inspection method. A record of these inspections must be kept in an area with controlled access and carried out in a place monitored by alarm systems and closed-circuit television and video surveillance said system must cover the inspection process in its entirety. The documented procedure for its inspection must include, by way of example and not limitation, the following review points:
Means of Transport Trailers, Train Cars, Semi-trailers and Containers
I. Bumper;
II. Tires;
III. Floor (Tractor);
IV. Fuel tanks;
V. Cabin interior (bedroom and tool compartment);
VI. Air tanks;
VII. Chassis;
VIII. Fifth wheel area;
IX. Drive shafts;
X. Exhaust pipe;
XI. Engine.
I. Exterior and interior doors;
II. Side walls (left and right);
III. Intermediate and external roof;
IV. Front wall;
V. Internal floor;
VI. Refrigeration system.
For means of transport with trailer or integrated cargo compartment, the points indicated in the Trailers section must be added to the means of transport points.
Likewise, before loading the means of transport, containers, train cars, trailers and semi-trailers used as Instruments of International Traffic, they must undergo agricultural and security inspections to guarantee that their structures have not been modified to hide contraband or that they have been contaminated with visible agricultural pests, keep a record and be backed up by a documented procedure. If visible pest contamination is found during the inspection or transport of merchandise subject to foreign trade, it must be cleaned (washed, vacuumed, etc.) to eliminate said contamination. The driver must ensure before crossing that the cabin is clean and free of trash.

Answer: Explanatory Notes:
Attach the documented procedure to carry out the security and agricultural inspection of means of transport, containers, trailers and semi-trailers. This must include, among other aspects according to your operation:
I. Those responsible for carrying out the inspection.
II. Definition of the place or places where the inspection is carried out and indicate how the monitoring is carried out by alarm systems and closed-circuit television and video surveillance.
III. The review points for means of transport, trailers, semi-trailers and containers both for security and those for quality and agricultural inspections whose purpose is to look for visible pests.
IV. Instructions for the driver to ensure before crossing that the cabin is clean and free of trash.
Attach the established format for the inspection of means of transport or cargo vehicles, containers, train cars, trailers and/or semi-trailers. If you use other types of cargo vehicles to transport your merchandise (vans, pickups, 3.5 tons, tankers, etc.), your procedure and inspection format must include the process and review points. Likewise, the security and agricultural inspection format must include the following information:
I. Inspection date;
II. Inspection time;
III. Vehicle license plates (tractor and trailer);
IV. Container/trailer number;

V. Specific areas of the cargo vehicles that were inspected; and
VI. Name and signature of the employee who performs the inspection and the supervisor.
The security and agricultural inspection format of containers and Instruments of International Traffic must be part of the import and export documentation.
The documentation must be kept for one year for an investigation in case of any security incident, as well as to demonstrate continuous compliance with these inspection requirements.
Additionally, and according to the risk analysis, the company should carry out periodic random reviews of cargo vehicles after the transport personnel has carried out security inspections to verify that they have been carried out correctly, counteract internal conspiracies and prevent security incidents. The reviews must be carried out randomly, without prior notice, so that they do not become predictable, in addition to being carried out in different places where the means of transport may be susceptible to contamination. Indicate if the repair or maintenance of transport units, containers or trailers is carried out in the same facilities or is carried out with an external provider. Describe how it validates that the cargo vehicles, containers, trailers and semi-trailers used as Instruments of International Traffic, that transport its merchandise, meet the necessary physical-mechanical conditions for their transfer and crossing, in addition to validating that they have records of this type of maintenance for at least one year.

7.3 Storage of vehicles, means of transport, containers, train cars, trailers, and semi-trailers.
When means of transport, containers, trailers, and/or semi-trailers intended to transport foreign trade goods are empty and must be stored in parking areas, they must be secured with a padlock and/or indicative seal, or in a safe area that is guarded and/or monitored. When it is necessary to store or overnight a loaded container, trailer, and/or semi-trailer, it must be located in a safe area with perimeter barriers and monitored by alarm and closed-circuit television systems to prevent unauthorized access and manipulation of the goods; therefore, it must be closed with a high-security padlock in accordance with ISO 17712 Standard. Response: Explanatory Notes:
Indicate whether the company stores containers, trailers, and/or semi-trailers for subsequent dispatch, or those that are empty, and how it maintains their integrity within its facilities:
I. In the case of using padlocks and/or seals for empty containers, trailers, and semi-trailers, indicate which type is used.
II. In the case of using any container, trailer, and/or semi-trailer as a warehouse for raw materials and/or any other type of goods, indicate how it maintains their integrity and security.

Personnel security.
Documented procedures must be in place for the registration and evaluation of individuals seeking employment within the company, and methods must be established to conduct periodic verifications of current employees. Additionally, continuous training programs must exist for personnel to disseminate the company's security policies, as well as the consequences and actions to be taken in the event of any security breach or incident.

8.1 Employment background verification.
The company must have documented procedures to investigate and verify the information stated in candidates' resumes, criminal records (if local legislation and company policies allow), and job applications, in accordance with local legislation, either independently or through an external company. Similarly, for positions that, due to their sensitivity, require it and affect the security of shipments subject to foreign trade, in accordance with the previously conducted risk analysis, stricter hiring requirements must be considered, which must be carried out periodically. Regarding personnel already working in the company, periodic investigations must be conducted based on the activities and/or sensitivity of the employee's position. All information regarding personnel must be kept in personal files, which must have restricted access.

Response: Explanatory Notes:
Describe the documented procedure for personnel hiring, and ensure you include the following:
I. Requirements and documentation demanded.
II. Tests and exams requested.
Indicate the areas and/or critical positions identified as risky, according to your analysis, and indicate the following:
I. Indicate what additional requirements are necessary for specific areas and/or job positions, such as: criminal records (if legislation and company policies allow), certificate of non-criminal record, socioeconomic studies, clinical studies, toxicological (drug use) studies, etc. If applicable, indicate the positions or work areas where they are required and with what frequency they are carried out.
II. Indicate whether, prior to hiring, the candidate must sign a confidentiality agreement or a similar document.
In the case of hiring a service agency for personnel hiring, indicate if this agency has documented procedures for personnel hiring and how it ensures compliance with the same. Briefly explain what they consist of. The procedures for personnel hiring and contractors may include:
I. Thorough investigations of the work and personal backgrounds of new employees.
II. Confidentiality and liability clauses in employee contracts.
III. Specific requirements for critical positions.
IV. If applicable, the periodic update of the socioeconomic and physical/medical study of employees working in critical and/or sensitive areas.
V. Hiring process and requirements requested for temporary employees and contractors.
The company may consider the results of background verifications of candidates, as allowed by current legislation, to make hiring decisions.
Background verifications are not limited to identity and criminal record verification. In higher-risk areas, deeper investigations may be justified.

8.2 Personnel termination procedure.
Documented procedures must exist for personnel termination that include the delivery of identification and any other item provided to perform their functions (keys, uniforms, badges and/or credentials, computer equipment, passwords, tools, etc.). Likewise, this procedure must include the termination of access in any computer systems, access systems, among others that may exist. Response: Explanatory Notes:
Describe the procedure for personnel termination, and ensure you include the following:
I. Who is responsible for carrying out and following up on this procedure.
II. How the delivery of identification, uniforms, keys, and other equipment is performed and confirmed.
III. Indicate the control, record, and/or format in which the delivery of material and termination in computer systems (if applicable, attach) is identified and secured.
IV. Indicate the type of records of personnel who ended their employment relationship with the company, so that when it was for security reasons, their service providers and/or business associates are warned.

8.3 Personnel administration.
The company must maintain an updated system, control, or database of active employees. Likewise, it must carry out and maintain updated records of affiliation to social security institutions and other legal labor records. In the case where the company has personnel hired by its commercial partners and working within the facilities, it must ensure that they comply with the requirements established for the rest of its employees. Response: Explanatory Notes:
Indicate whether the company has an updated system, control, or database, both of personnel employed directly and that hired through a service provider company, and ensure it includes, by way of example and not limitation, the following information:
I. Full name.
II. Updated photograph at least every 5 years.
III. Personal data (age, name, date of birth, phone number, address, CURP, social security number, blood type, allergies, etc.).
IV. Affiliation.
V. Work background.
VI. Diseases.
VII. Medical exams.
VIII. Training.
IX. Results of periodic evaluations.
X. Observations.
XI. This personnel must be hired in accordance with current labor laws and regulations.

Information and documentation security.
Prevention measures must exist to maintain the confidentiality and integrity of information and documentation generated by the company's systems, including those used for information exchange with other members of the supply chain. Likewise, comprehensive documented policies and/or procedures must exist to protect Information Technology systems, including measures against misuse, as well as identifying and prioritizing actions to reduce cybersecurity risk. They may also address how a member shares information about cybersecurity threats with the government and other commercial partners.

9.1 Document classification and handling.
Procedures must exist to classify documents according to their sensitivity and/or importance. Sensitive and important documentation must be stored in a secure area that only allows access to authorized personnel. The useful life of the documentation must be identified, and procedures for its destruction must be established. The company must conduct regular reviews to verify access to information and ensure that it is not used improperly. Response: Explanatory Notes:
Attach the documented procedure for the registration, control, and storage of printed documentation (classification and filing of documents), which must include:
I. Control register for delivery, loan, among others of documentation.
II. Restricted access to the archive area.
III. Storage and classification policies.
IV. An updated security plan describing the measures in force regarding the protection of documents against unauthorized access, as well as against deliberate destruction or loss of the same.
V. In the case of electronic or digital information, it must adhere to the security criteria of sub-standard 9.2 Information Technology Security.

9.2 Information Technology Security.
To protect Information Technology systems against common cybersecurity threats, a company must have sufficient protection that promotes security in Information Technology infrastructure (software and hardware) against malware (viruses, spyware, worms, trojans, etc.), baiting, phishing, and internal/external intrusions (firewalls) in the companies' computer systems. Likewise, companies must ensure that their security software is active and receives periodic updates. In the case of automated systems and computer equipment, individual accounts requiring periodic password changes must be used. In order to protect the confidentiality, integrity, and availability of information, the company must have policies, procedures, and information technology standards established, which must be communicated through a training program for all employees who handle computer equipment and systems, which includes topics to prevent attacks through social engineering and all those threats to which they are exposed (malware, baiting, phishing, etc.). Companies that allow their employees to connect remotely to a network must use secure technologies, such as virtual private networks (VPN), to allow employees to access the company intranet securely when they are outside the office, as well as procedures designed to prevent unauthorized remote access.

For the above, there must be written procedures and infrastructure to protect the company against loss, theft, leakage, hacking, and/or ransomware of information, this includes the procedure for the recovery (or replacement) of Information Technology systems and/or data, as well as a system or software established to identify the abuse of Information Technology systems and detect inappropriate access and/or improper manipulation or alteration of commercial and business data, as well as a written procedure for the application of appropriate disciplinary measures to all offenders. Access to Information Technology systems must be protected against infiltration through the use of secure passwords, which include passphrases or other forms of authentication. Users of said Information Technology systems must safeguard and not share their access keys or passwords. All Information Technology infrastructure must be physically protected against unauthorized access. If a data leak or other unexpected event occurs resulting in the loss of data and/or equipment, the procedures must include the recovery or replacement of Information Technology systems and/or data. Response: Explanatory Notes:
Attach the procedure for the recovery or replacement of Information Technology systems and/or data, which includes how it backs up and guarantees the security of its information, in addition to protecting it from possible losses. Ensure you include the following points:
I. Indicate the frequency with which information backups are carried out.
II. Who has access to them and who authorizes the recovery of information.
III. Indicate what type of tests it performs and how often, to verify the security of the network, systems, and infrastructure.
IV. Mention if, to carry out this type of tests or vulnerability scans, it does so through software, a third party or provider, and if so, indicate the name or corporate name.
V. In case of finding vulnerabilities, describe the corrective actions that must be implemented.
VI. Indicate if it shares information about cybersecurity threats with its commercial partners participating in its supply chain (for example: communications, bulletins, emails, etc.).

VII. Systems must be protected with passwords and must be modified frequently, therefore indicate the procedure to change them.
VIII. Indicate if there are information security policies for their protection.
IX. There must be a system or software to detect and identify the abuse, intrusion, or unauthorized access of persons to its systems and/or Information Technology data (any system used by the company), as well as the abuse of the policies and procedures established by the company, including unauthorized access to internal systems, external websites, and the manipulation or alteration of commercial data by employees or contractors.
X. All offenders must be subject to the application of disciplinary measures, therefore, indicate the corrective policies and/or sanctions in case of the detection of any violation of Information Technology systems and security policies.
The policies and procedures for information technology and cybersecurity must be reviewed annually and updated due to an attack or according to situations that may put the company's systems at risk.
Describe the security measures used to allow employees to connect remotely to a network (VPN), to allow employees to access the company intranet remotely when they are outside the office.

In the case of allowing employees to use personal devices to perform the company's work, such devices must comply with the company's cybersecurity policies and procedures, security updates must be periodic, and there must be a method to access the company network securely. Indicate if commercial partners have access to the company's computer systems. If so, indicate what programs and how they control access to them. Indicate if the computer equipment has a backup power supply system that allows business continuity. The procedures regarding the backup of the company's information must also include:
I. How and for how long data is stored (data should be backed up once a week or as appropriate).
II. Business continuity plan in case of incident and how to recover information.
III. Frequency and location of backup copies and archived information.
IV. If backup copies are stored in sites alternative to the facilities where the data processing center is located.
V. Tests of the validity of data recovery from backup copies.

The procedures regarding the protection of the company's information must also include:
I. An updated and documented policy for the protection of the company's computer systems against unauthorized access and deliberate destruction or loss of information. All sensitive and confidential data must be stored in an encrypted or encoded format.
II. Detail if it operates with multiple systems (sites/locations) and how these systems are controlled.
III. Who is responsible for the protection of the company's computer system (responsibility should not be limited to one person, but to several, so that each can control the actions of the rest).
IV. Each user's access must be assigned through individual accounts and restricted according to the job description or assigned tasks. For this reason, describe how access authorizations and access levels to computer systems are granted (access to sensitive information must be limited to authorized personnel to make modifications and use the information). Authorized access must be monitored by the area responsible for granting it, to verify or, if applicable, report that access to confidential systems is based on job requirements.
V. Indicate the elements or format that passwords for access to Information Technology systems and computer equipment must have, frequency of changes, if there are other authentication methods, and who or what area provides those passwords.

VI. Indicate the name of the firewall and antivirus used (include licensing related), evidencing that this security software is active and receives periodic updates.
For the above, cybersecurity policies and procedures should include measures to prevent the use of counterfeit technological products or with incorrect licenses (software and hardware).
All computer equipment, electronic media (hard drives, cell phones, etc.), and information technology hardware containing confidential information related to the import and export process must be counted through periodic inventories and have such evidence. When these technological equipment must be discarded, there must be a documented procedure that includes how they must be formatted, disinfected, or destroyed appropriately to prevent information leakage.
VII. In the case of personnel termination, access to computer equipment, telecommunications, and network must be eliminated at the moment of the employee's separation, this includes email accounts, system access accounts, software, programs, etc.
VIII. Measures planned to handle incidents when the system is compromised.

Security training and awareness.
It must have a documented awareness program on threats established, designed, and updated by the Security Committee to recognize and create awareness about threats from terrorists and smugglers at each point in the supply chain. The training program must be comprehensive and cover all security requirements of the Authorized Economic Operator Program. Administrative and operational employees must know the company's established procedures to consider a risk situation and know how to report it. Specific training must be provided to employees who are in critical and/or sensitive areas determined under their risk analysis (security areas, shipments and receipts; as well as those who receive and open mail and packages, among others).

10.1 Training and awareness on threats.
The company must have a training and awareness program on security policies in the supply chain directed at all its employees (operational and administrative), and additionally, make available informational material regarding the procedures established in the company to consider a situation that threatens its security and know how to report it. In the same way, specific training must be offered according to their functions to help employees maintain cargo integrity, perform container, trailer and/or semi-trailer reviews for agricultural and security purposes, receipt and review of mail and packages, prevention of operations with proceeds of illicit origin (money laundering, terrorism financing, etc.), how to recognize and how to report internal conspiracies, protect access controls, as well as training regarding smuggling, cargo theft, placement of high-security seals and locks (VVTT inspection method), prevention of visible contamination by pests, etc. These topics must be established as part of new employee onboarding and periodically maintain update programs. Update training must be carried out periodically, after a security incident and when there are changes in the company's procedures. In addition to security training programs, an awareness program on alcohol and drug consumption must be included. Also, disseminate and train staff on the company's cybersecurity policies, procedures and standards (theft, leakage, hacking and/or information kidnapping), including access to computer equipment and systems via passwords or phrases. The personnel who operate and administer security technology systems must receive training related to their operation and maintenance, including self-training through operational manuals and other methods. These topics must be established as part of new employee onboarding and periodically maintain update programs. Training programs must encourage active employee participation in security controls and mechanisms, as well as maintain records of all training efforts provided by the company and the list of those who participated in them (videos, photographs, minutes, attendance lists, intranet or other system, didactic material, PowerPoint presentations, brochures, etc.). Training records must include the date of the training, the names of the attendees, the topics taught, in addition to having measures to verify that the training provided met all training objectives. Response: Explanatory Notes:
They must have a training program on security and prevention of security incidents in the supply chain for all employees who work for the company (administrative, operational, direct or indirect).
Briefly explain what the training program consists of and make sure to include the following:
I. Brief description of the topics taught in the program.
II. When they are taught (onboarding, specific periods, resulting from audits, security incidents, etc.).
III. Frequency of training, as well as updates and reinforcement.
IV. Indicate how participation in supply chain security training is documented (videos, photographs, minutes, attendance lists, intranet or other system, didactic material, PowerPoint presentations, brochures, etc.). Training records must include the date, the names of the attendees, the topics taught, in addition to having measures to verify that the training provided met all the objectives of the same.
V. Explain how employee participation in supply chain security issues is encouraged.
Training to perform the review of cargo vehicles, containers, trailers and/or semi-trailers for agricultural and security purposes must include the following topics:
I. Signs of hidden compartments;
II. Smuggling hidden in natural compartments;
III. Signs of pest contamination;
IV. Procedures to follow if something is found during an inspection of the means of transport or if a security incident occurs during transit; and
V. Agricultural review training must cover pest prevention measures, the regulatory requirements applicable to wooden packaging materials in accordance with International Phytosanitary Measure Standard No. 15, known as Regulation of wooden packaging used in International Trade, which emanate from the Food and Agriculture Organization of the United Nations and the identification of infested wood.

10.2 Awareness for transport medium operators.
The company must make known to the operators of the means of transport it uses for the transfer of goods destined for foreign trade, the security policies regarding agricultural and security inspection procedures of means of transport, loading and unloading, handling of security incidents, change of locks in case of inspection by other authorities, among others, that are implemented. The operators and the personnel who perform agricultural and security inspections of means of transport must be trained to inspect cargo vehicles for such purposes. In the case that the transport service is provided by a business partner, it must ensure that the operators and/or drivers know all the security policies and procedures established. Response: Explanatory Notes:
Describe the dissemination program on supply chain security focused on transport medium operators and make sure to include the following:
I. Indicate how this dissemination is carried out.
II. Point out the topics covered.
III. In case of using the services of a business partner for the transfer of your goods, indicate how the operators are informed of the company's security policies and procedures.
IV. Indicate how participation in supply chain security training for transport medium operators is documented (videos, attendance lists, brochures, etc.).
The topics that must include, by way of illustration and not limitation, are:
I. Access and security policies at the facilities.
II. Cargo delivery-receipt (including suspicious cargo shipments).
III. Confidentiality of cargo information.
IV. Transfer instructions.
V. Accident and emergency reports.
VI. Instructions for the placement of high-security locks and/or seals in case of inspection by other authorities, as well as the control and use of high-security seals and locks in transit (placement of a new one, review after any authorized stop, etc.).
VII. Installation and testing of security and unit tracking alarms, when applicable.
VIII. Identification of authorized formats and documents to be used.
IX. Signs of hidden compartments.
X. Smuggling hidden in natural compartments.
XI. Signs of pest contamination.
XII. Procedures to follow if something is found during an inspection of the means of transport or if a security incident occurs during transit.

Handling and investigation of incidents.
There must be documented procedures to report and investigate security incidents in the supply chain, the actions to be taken to prevent their recurrence, as well as to notify security personnel, business partners that may be part of the affected supply chain, security specialist or contact of the Authorized Economic Operator Program and other competent authorities. The reporting and investigation procedures must include the contact information or updated directory listing the names and phone numbers of the personnel requiring notification. The investigation and analysis of incidents must be documented (physical and/or electronic file), as well as corrective actions to prevent them from happening again, which must be implemented as soon as possible. In the case that the company identifies that any of its foreign trade shipments is involved in a situation that puts the security of the supply chain at risk, due to suspicion of a business partner or person, it must inform security personnel, business partners that may be part of the affected supply chain, security specialist or contact of the Authorized Economic Operator Program, as well as the competent authority and, if possible, before the border crossing, exit or customs clearance (import and export). The procedures must include the steps to follow if it is discovered that a seal is altered, manipulated or there is an incorrect seal number in the documentation, the communication protocols to the business partners involved in the supply chain and the investigation of the incident. All the aforementioned procedures must be reviewed periodically or at least once a year to ensure that the contact information and action protocols are correct.

11.1 Reporting of anomalies and/or suspicious activities.
In the event of detection of anomalies and/or suspicious activities related to supply chain security and in accordance with its logistical processes (related to access control, delivery, receipt and storage of goods, security inspections of cargo vehicles and transport operators, etc.), these must be notified to security personnel, business partners that may be part of the affected supply chain, security specialist or contact of the Authorized Economic Operator Program and the other competent authorities, keeping a record of said anomalies and/or unusual activities. Response: Explanatory Notes:
Describe the procedure to report or report anomalies and/or suspicious activities, as well as those that contain mechanisms to anonymously report problems related to security, make sure to include the following:
I. Who is responsible for reporting incidents.
II. Detail how it determines and identifies with which authority to communicate in different scenarios or presumption of suspicious activities.
III. Mention if it keeps a record of the report of these activities and/or suspicions and briefly describe what it consists of.

11.2 Investigation and analysis.
There must be written procedures to report or report anomalies and/or suspicious activities, as well as for the analysis and investigation of security incidents in the supply chain to determine their cause, in addition to corrective actions to prevent them from happening again, which must be implemented as soon as possible. The information derived from this investigation must be documented and available at all times for the authorities that require it. This information must include the documentation generated to carry out the foreign trade operation of the affected goods that allows identifying each of the processes through which the goods went, up to the point where the incidence was detected and that allows recognizing the vulnerability of the chain.

Response: Explanatory Notes:
Describe the documented procedure to initiate an investigation in the event of any security incident and make sure to include the following:
I. Responsible for carrying out the investigation.
II. Documentation that integrates the investigation file.
The documents to be included in the file derived from the investigation, by way of illustration and not limitation, may be:
I. General information of the shipment, purchase order.
II. Transport request; confirmation of means of transport; identification of transport operator (access records, exit, record of security inspections, etc.).
III. Container inspection formats; exit order; delivery records.
IV. Videos from alarm systems and closed-circuit television and video surveillance.
V. Documentation generated for the carrier (packing list, bill of lading, instruction sheet).
VI. Documentation generated for business partners (description of goods, proformas, CFDI or equivalent documents, etc.) and customs authorities.
VII. Documentation generated by the business partner (customs declarations, manifests, tracking and inspection reports, videos if applicable, etc.).
VIII. Unit tracking and monitoring report (GPS tracking).

E4.
Customs Broker Profile
Acknowledgment of Receipt
First Time: Renewal:
Addition:
Modification:
The data you provide will replace the data you provided when you requested your authorization.
General Information.
The objective of this Profile is to ensure that the Customs Broker implements security practices and processes, which help strengthen the supply chain by mitigating the risk of contamination in shipments with illicit products and likewise reducing the risk of incurring incidents during the customs clearance of goods. Customs brokers interested in obtaining the authorization referred to in rule 7.1.5., must have documented and verifiable processes. Likewise, the Customs Broker who is interested in the authorization must integrate the criteria required in this document into the business model or design that it has established, seeking during the implementation of security standards, the application of an analysis culture that supports decision-making in accordance with the values, mission, vision, codes of ethics and conduct of the Customs Broker itself. It is important to mention that the scope of the minimum security criteria required in this Profile is applicable to the essential operation performed by the Customs Broker, mainly to the processes related to the customs clearance of goods. Likewise, and taking into account the variety of integrated logistical services that a Customs Broker can currently provide to its clients, certain additional criteria are contemplated to be met, specifically for customs brokers who concentrate or have holding yards and/or maneuvers for the means of transport of goods subject to foreign trade in the same facilities where they provide their services. Filling Instructions:
I. You must fill out a Profile for each of the facilities associated with the customs office of assignment, as well as for each of the facilities associated with the additional customs offices of the customs patent. This information must coincide with what is stated in your application for Certified Business Partner of Customs Broker.
II. Detail how the Customs Broker complies with or exceeds what is established in each of the numerals as indicated.
III. The format of this document is divided into two sections, as detailed below:

Standard
Description of the standard
1.1 Sub-standard
Description of the sub-standard
Response Explanatory Notes
Describe and/or attach... a) Points to highlight...
IV. Indicate how you comply with what is established in each of the sub-standards, for which you must attach the procedures in Spanish, these procedures must be characterized by describing or defining the objective pursued by the document, the start and end of the process, measurement indicators, requirements, documents or formats to be used, responsible parties, to mention some.
V. In cases where only an explanation of the procedure is required, it must be detailed and placed in the Response field.
The field, referring to the Explanatory Notes is a guide regarding the points that must be included in the Response of each sub-standard, indicating in an indicative manner those points that should not be excluded from your response.
VI. Once this Customs Broker Profile has been answered, it must be attached to the Registration Request in the Enterprise Certification Scheme referred to in the first paragraph of rule 7.1.5., fraction II, subsection b).
For the purpose of verifying what is stated in the previous paragraph, the SAT through the AGACE may carry out an inspection of the installation, with the exclusive purpose of verifying what is stated in this document.
VII. Any incomplete Customs Broker Profile will not be processed.
VIII. Any question related to the Registration Request in the Enterprise Certification Scheme and the Customs Broker Profile, direct it to the contacts that appear on the SAT Portal.
IX. In the event of being authorized with the Registration in the Enterprise Certification Scheme, this format must be kept updated and notify when the circumstances under which the registration was granted have varied and as a result of these changes or modifications are required in the information stated and provided in this Customs Broker Profile to the authority. in accordance with what is established in rule 7.2.1., fourth paragraph, fractions I, II and VII.
X. For the renewal of the certified business partner, it will be subject to the procedure marked in rule 7.2.3.
XI. When as a result of the inspection visit there are non-compliances related to the minimum security standards, the applicant may remedy them before the issuance of the resolution established in rule 7.1.6., for which it will have a maximum period of three months counted from the notification of the non-compliances indicated.

Facility Data
A Customs Broker Profile must be filled out for each of the facilities associated with the customs office of assignment, as well as for each of the facilities associated with the additional customs offices under the customs patent. Customs Broker Information. Customs Broker Profile Number: from:
Customs Broker Name: ____________________ Patent: _______________ Authorization:
Assignment:
_________ Assignment: ________________
Authorized Customs Offices (name):
Name and/or Denomination of the installation:
Type of Installation
(administrative offices, facilities with merchandise storage or transport service, etc.):
Street Number and/or exterior letter Number and/or interior letter Neighborhood Postal Code Municipality/Delegation Federal Entity Age of the Installation (years of operation) Predominant activity Types of services:
Does it perform validation of customs declarations in this installation:
No. of average monthly operations (EXP): (By means of transport, maritime, air, land, rail, etc.)
No. of average monthly operations (IMP): (By means of transport, maritime, air, land, rail, etc.)
Total number of employees at this installation: Surface area of the Installation (m2):

Certifications in security programs: (Indicate if this installation has a certification for any of the following programs) Supply Chain Security Programs Yes No Program: Registration:
Certifying Body:
Certifications: (Indicate if you have certifications that you consider impact your supply chain process, for example: ISO 9000; Reliable Logistics Processes, among others) Name: Category: Validity:
Name: Category: Validity:
Name: Category: Validity:

Supply chain security planning.
The Customs Broker must elaborate policies and documented procedures to carry out an analysis that allows the identification of risks and weaknesses in its supply chain with the object of implementing strategies that help mitigate the risk in its operations. Likewise, to build a solid supply chain security program, the Customs Broker must have a Security Committee that incorporates representatives from all relevant departments, forming a multifunctional team that identifies areas of opportunity and proposes continuous improvement actions throughout the supply chain and the Customs Broker's facilities. In the same way, the Customs Broker must have designated points of contact for the Authorized Economic Operator Program, such personnel must be involved, know the program requirements, belong to the company and prove their relationship with it, as well as respond to their supply chain security specialist (this is assigned once the company already has the Authorized Economic Operator Program). If as a result of the risk analysis, new security measures arise that the Customs Broker must incorporate, these must be included in the existing procedures of the Customs Broker and, if applicable, elaborate new procedures, which creates a more sustainable structure and emphasizes that supply chain security is everyone's responsibility.

1.1 Risk analysis.
The Customs Broker must have measures to identify, analyze and mitigate security risks throughout the supply chain, including its facilities. For this reason, it must have a written and verifiable procedure to determine the risk in all its operations, based on its organization's model (example: location of facilities, type of merchandise and country of origin, volume, clients, suppliers, routes, hiring of personnel, classification and handling of documents, Information Technologies, potential threats, etc.) that allows it to implement and maintain appropriate security measures. In accordance with the above, the Customs Broker must also have a written process based on its risk analysis to select new business partners and monitor those with whom it is already working.

This procedure must be executed at least once a year, so as to allow the permanent identification of other threats or risks considered in its operation and in the supply chain, resulting from some incident or when they originate from changes in the initial conditions of the facilities and processes of the Customs Broker, as well as to identify that the policies, procedures, and other control and security mechanisms are being complied with. It is important to note that the Company's Security Committee designated by the Customs Broker must participate in the preparation and updating of the risk analysis and the maintenance of the Authorized Economic Operator Program.

Response: Explanatory Notes:
Indicate which are the sources of information used to qualify risks during the analysis phase.
Attach the risk matrix, as well as the documented procedure to identify risks in its daily operations throughout the supply chain and in its facilities, which must include at least the following points.
I. Periodicity with which it reviews and/or updates the risk analysis.
II. Aspects and/or areas that the Customs Broker incorporates into the risk analysis.
III. Methodology or techniques used to perform the risk analysis.
IV. Persons responsible for reviewing and/or updating the company's risk analysis.
Likewise, the documented procedure to identify risks in the supply chain and its facilities must contemplate the process of risk appreciation and management, and include the following aspects:
I. Establishment of a context (cultural, political, legal, economic, geographic, social, etc.).
II. Identification of risks in its supply chains and its facilities.
III. Risk analysis (causes, consequences, probabilities, and existing controls to determine the level of risk as high, medium, and low).
IV. Risk evaluation (decision-making to determine the risks to be treated and priority for implementing treatment).
V. Risk treatment (application of alternatives to change the probability of risks occurring).
VI. Risk monitoring and review (monitoring of the results of the risk analysis and verification of the effectiveness of its treatment).
It is suggested to use risk administration, management, and evaluation techniques in accordance with international standards ISO 31000, ISO 31010, and ISO 28000 that, according to its business model, must be implemented.

1.2 Security Policies.
The customs broker must have policies oriented towards preventing, securing, and recognizing threats to the security of the supply chain and facilities, such as drug trafficking, money laundering, arms trafficking, human smuggling, prohibited goods, acts of terrorism, as well as in the exchange of information, reflected in the corresponding procedures. To promote a culture of security, the Customs Broker must demonstrate its commitment to the security of the supply chain and the Authorized Economic Operator Program through a statement highlighting the importance of protecting the flow of national and international commerce from criminal activities, established through the security policy. The Customs Broker must endorse and sign the security policy.

Response: Explanatory Notes:
State the policies in matters of security oriented towards preventing, securing, and recognizing threats in the supply chain and facilities of the Customs Broker, who is responsible for their review, signature, and dissemination to employees, as well as the periodicity with which its update is carried out. This policy must be communicated to employees through a dissemination program and/or campaign. The security policy must be signed by the Customs Broker and be displayed in various areas of the facility, including the Customs Broker's website, posters in key areas of the facility (reception, import and/or export, human resources, etc.), and as part of initial and reinforcement training.

1.3 Internal Audits in the Supply Chain.
In addition to routine monitoring in control and security, it is necessary to schedule and carry out audits at least once a year that allow evaluating all processes in matters of security in the supply chain in a more critical and profound way, as well as guaranteeing that its employees follow the security procedures of the Customs Broker. The audits must be carried out by the Security Committee and a documented procedure must be established, as well as a program or calendar for their execution. Although it is necessary that the audits be focused on the security of the supply chain and based on the evaluation, review, and execution of minimum standards in matters of security, their focus must be adjusted to the size of the organization, level of risk, business model, and variations between facilities. The objective of an internal audit focused on the Authorized Economic Operator Program is to verify and guarantee that employees follow the security procedures of the Customs Broker. The review process does not have to be complex; however, the formats and records used for the application of such reviews must evidence that the application and execution of the evaluated processes were validated, in addition to the follow-up and closure of preventive, corrective, and improvement actions identified. The senior management of the organization must review the results of the audits, analyze the causes, and undertake the corrective and/or preventive actions required. The audit process must guarantee that the necessary information is collected to allow management to perform this evaluation. The review must be documented, in addition to the fact that the Customs Broker's Security Committee must provide and register periodic updates on the progress or results of any audit, exercise, or validation.

Response: Explanatory Notes:
Describe the documented procedure to carry out an internal audit, focused on security in the supply chain; ensure you include the following points:
I. Indicate how the scheduling or calendarization is carried out to perform an internal audit in matters of security in the supply chain, which has been implemented by the Customs Broker.
II. Indicate who participates in it, and the records that are made of it, as well as the periodicity with which they are carried out.
III. Indicate how the management or the Customs Broker verifies the results of the security audits, how it performs and/or implements preventive, corrective, and improvement actions, in addition to the follow-up and closure of the same.
IV. The formats used during internal audits must be properly filled out, and through them, evidence that the procedures and security measures are being put into practice.

1.4 Contingency and/or Emergency Plans.
There must be a documented contingency and/or emergency plan; this plan must address crisis management, security recovery plans, and the resumption of the organization related to the security of the supply chain and its facilities to ensure business continuity in the event of a situation that affects the normal development of activities and foreign trade operations. A crisis or contingency may include the interruption of commercial data movement due to a cyberattack, a fire, the kidnapping of a transport driver by armed individuals, a customs closure, a bomb threat, the detection of suspicious packages, a power outage, theft and/or damage to goods, threats or extortion, blockades or road closures, among others. Such plans must be communicated to administrative and operational personnel through dissemination programs and periodic trainings, as well as carrying out tests, practical exercises, and annual simulations of the contingency and emergency plans to verify their effectiveness, from which it must maintain a properly filled-out and signed record (for example: result reports, minutes, or reports which must be backed up by video recordings, photographs, etc., demonstrating their execution). The contingency and/or emergency plan must be updated as necessary, based on changes in operations and the organization's risk level.

Response: Explanatory Notes:
Attach the documented contingency and/or emergency procedure or plan related to the security of the supply chain and its facilities, to ensure business continuity in case of an emergency or security situation that affects the normal development of foreign trade activities (cancellation or suspension of patent, closure of customs, foreign trade activities considered risky according to its analysis, acts of terrorism, blockades, robberies, accidents, etc.). This procedure must include, by way of enumeration but not limitation, the following:
I. What situations it contemplates by describing the action plan and steps to be followed in case of crisis, as well as the tasks assigned to personnel during the handling of such contingencies.
II. What mechanisms it uses to disseminate and ensure that these plans are effective.
III. Contemplate the scheduling and carrying out of tests, practical exercises, and annual simulations and how they are documented (for example: result reports, minutes, or reports, which must be accompanied by video recordings, photographs, etc., demonstrating their execution).

Physical Security.
The Customs Broker must have established mechanisms and documented processes to prevent, detect, or deter the entry of unauthorized personnel into its facilities, and in its case, yards for freight transport means located in the same facilities, as well as the area where sensitive information is stored. According to the Customs Broker's risk analysis, the sensitive areas identified in its facilities must have physical barriers, control elements, and deterrence against unauthorized access.

Response: Explanatory Notes:
Indicate the predominant materials with which the facilities are constructed (for example, metal structure and sheet metal walls, brick walls, concrete, cyclone mesh, among others), and indicate how the review and maintenance of the structures is carried out. Indicate the personnel or area responsible for carrying out the tasks of inspection, maintenance, and repair of damages to the facilities. Attach a distribution or architectural plan of the facilities, where the limits of the facilities, access routes, emergency exits, location of buildings or offices, critical areas, parking lots, and boundaries can be identified.

2.2 Accesses in Doors and Booths.
The entrance or exit doors for personnel and/or vehicles of the Customs Broker's facilities or, in its case, access to the yards for freight transport means located in the same place, must be attended, controlled, watched, and/or supervised either by its own properly trained personnel or by private security personnel. The number of access doors must be kept to the minimum necessary. Access to sensitive areas must be restricted according to the job description or assigned tasks.

Response: Explanatory Notes:
Indicate how many doors and/or accesses exist in the facilities, as well as the operating hours of each one and indicate how they are monitored (in case of having assigned personnel, indicate the quantity).
Detail if there are blocked and/or permanently closed doors and/or accesses.
Describe how it ensures that access to sensitive areas is restricted according to the job description or assigned tasks (include the type of records and controls it uses).

2.3 Perimeter Fences.
Perimeter fences and/or peripheral barriers must be installed to secure the perimeters of the Customs Broker's facilities, according to a risk analysis. In the case of having a yard for freight transport means located in the same facilities, it must be delimited, as well as the place where any maneuver and/or handling of cargo takes place as appropriate. These must be inspected regularly and keep a record of the review with the purpose of ensuring their integrity and identifying damages, which must be repaired as soon as possible by the personnel designated for these tasks.

Response: Explanatory Notes:
Describe the type of fence, peripheral barrier, and/or walls that the Customs Broker's facilities have; ensure you include the following points:
I. Indicate the characteristics of the same (material, dimensions, etc.).
II. In case of not having fences, justify the reason in detail.
III. Periodicity with which the integrity of the perimeter fences is verified, and the records that are kept with the purpose of ensuring their integrity and identifying damages, which must be repaired as soon as possible.
IV. Indicate the personnel or area responsible for carrying out the tasks of inspection and repair of damages.

In case of having a yard for transport means in its facilities, describe how it is delimited.
The procedure for the inspection of perimeter fences may include:
I. Personnel responsible for carrying out the process.
II. How and with what frequency the inspections of the fences, perimeter fences, and/or peripheral barriers and the buildings are carried out.
III. How the inspection record is carried out.
IV. Who is responsible for verifying that the repairs and/or modifications meet the technical specifications and necessary security requirements.

2.4 Parking Lots.
In the case of having parking lots in the facilities, access to them must be controlled and monitored by security personnel or designated for this task. It must be prohibited for private vehicles (of employees, visitors, suppliers, and contractors, among others) to park in its case within the yard for transport means, as well as in adjacent areas.

Response: Explanatory Notes:
Describe the procedure for the control and monitoring of parking lots; ensure you include the following points:
I. Persons responsible for controlling and monitoring access to the parking lots.
II. Identification of the parking lots (in its case) specify if the employee, visitor parking is separated from the storage and merchandise handling areas.
III. How the control of entry and exit of vehicles to the facilities is carried out.
Indicate the records that are made for the control of parking, the existing control mechanisms, for example: badges, card readers, lanyards, etc., how they are assigned and the responsible area for doing so.
IV. Policies or mechanisms (in its case) to not allow the entry of private vehicles to the storage and merchandise handling areas.

2.5 Key and Lock Device Control.
Windows, doors, as well as inner and outer fences must be secured with locking devices; these devices must be implemented according to the Customs Broker's risk analysis. Likewise, the Customs Broker must have documented procedures for the handling, storage, assignment, and control of keys in the facilities, keeping a record and establishing signed responsibility letters by the persons who have keys or authorized accesses according to their level of responsibility and work within their area of work.

Response: Explanatory Notes:
Indicate if all doors, windows, inner and outer entrances have locking or security mechanisms.
Attach the documented procedure or procedures for the control, storage, assignment, and handling of keys and/or locking devices of the facilities, offices, and inner areas.
Ensure that these procedures include the following points:
I. Persons responsible for administering and controlling the security of the keys.
II. Format and/or control record for the loan of keys.
III. Treatment of loss or non-return of keys.
IV. Indicate if there are areas in which access is gained with electronic devices and/or any other access mechanism.

2.6 Lighting.
Lighting inside and outside the facilities must allow clear identification of people, material, and/or equipment located there, including the following areas: entrances, exits, perimeter and/or peripheral fences, inner fences, and parking areas in its case. An emergency and/or backup system must be available in sensitive areas.

Response: Explanatory Notes:
Describe the procedure for the operation and maintenance of the lighting system.
Ensure you include the following points:
I. Indicate which areas are illuminated and which have a backup system (Indicate if it has an auxiliary power plant or any other mechanism to supply electricity in case of any contingency).
II. How it ensures that the lighting system has continuity in the event of lack of supply in each of the areas of the facilities, in such a way as to allow clear identification of the personnel, material, and/or equipment located there.
III. Person responsible for the control of the lighting systems.
IV. Maintenance and review program (in case it coincides with another process, indicate it).
The procedure may include:
I. How the lighting system is controlled.
II. Operating hours.
III. Identification of areas with permanent lighting.

2.7 Alarm Systems and Closed-Circuit Television and Video Surveillance.
Alarm systems, closed-circuit television, and video surveillance systems and security technologies must be used to watch, notify, or deter unauthorized accesses and prohibited activities in the facilities and other considered sensitive areas, notify the corresponding area, in addition to being used as a tool of proof in investigations derived from some security incident. These security systems and technologies must be placed according to a prior risk analysis in such a way that areas involving the access of personnel, visitors, and suppliers are kept under watch and monitored, and in its case, the access areas for passenger vehicles and cargo vehicles and others considered sensitive. Such systems must allow clear identification of the area or environment being watched, be permanently recording, and keep a backup of the recordings for at least one month, with the purpose of having the necessary elements to disclaim responsibilities in case of a security incident. Alarm systems, closed-circuit television, and video surveillance systems and security technologies must have a documented operation procedure that includes the supervision of the good condition of the equipment and the verification of the correct position of the cameras, indicating the frequency with which the backup of the recordings must be performed, as well as the persons responsible for their operation. Such a system and all security technology infrastructure must have restricted access.

Response: Explanatory Notes:
Mention the documented procedure that indicates the functioning of the external alarm central system or sensors, and in its case, describe the following points:
I. Indicate if the doors and windows have alarm sensors, as well as the areas where motion sensors are available.
II. Procedure to follow in case an alarm is activated.
III. Indicate the personnel, responsible area, or service provider to give maintenance, how failures are reported, and the records they use.
Describe the documented procedure for the operation of alarm systems, closed-circuit television, and video surveillance systems and security technologies (this must be reviewed and updated annually and according to the risk analysis or circumstances); ensure you include the following points:

I. Indicate the number of security cameras of the alarm systems, closed-circuit television, and video surveillance systems installed, technical characteristics, and their location. Detail if it covers the entry and exit points of the facilities, to cover the movement of vehicles and individuals, as well as the place of storage of the vehicles). Attach a layout or map of the distribution of the security cameras.
II. Indicate the location of the alarm systems, closed-circuit television, and video surveillance systems and security technologies, where the monitors are located, who reviews them, as well as the operating hours, and in its case, if there are remote monitoring stations. All security technology infrastructure must be physically protected against unauthorized access.
III. Periodic and random reviews of the recordings must be carried out. Indicate how they review them (random, every week, special events, restricted areas, etc.), who is the designated personnel, and how they are involved in the reviews. The results of the reviews must be documented to include corrective actions for audit purposes.
IV. Indicate for how long these recordings are kept (being at least one month).
V. The alarm systems, closed-circuit television, and video surveillance systems and security technologies must have an alternative energy source that allows these to continue functioning in case of an unexpected loss of energy.

directa. Therefore, indicate whether the alarm systems, closed-circuit television, video surveillance systems, and security technologies are backed by an electrical power plant or some other mechanism to supply electricity that guarantees their operation. These systems should have an alarm/notification function, indicating a failure condition in operation and/or recording; indicate whether your systems have such a function.

VI. Indicate whether, in addition to the alarm systems, closed-circuit television, and video surveillance, you use any other type of technology to strengthen the security measures already in place.

VII. Describe the procedure implemented to regularly test and inspect the alarm systems, closed-circuit television, video surveillance systems, and security technologies to ensure their proper operation. The results of the inspections and operational tests must be documented, as well as any necessary corrective actions (which must be implemented as soon as possible). Additionally, the documented results of these inspections must be retained for a sufficient period for audit purposes.

VIII. Indicate whether the provider of the alarm systems, closed-circuit television, and video surveillance has access to the security cameras, if they are responsible for monitoring them, how access is controlled, and who is responsible for said monitoring.

Physical access controls.
Physical access controls are mechanisms or procedures that prevent and prohibit unauthorized entry to the facilities, maintain control over the entry of administrative personnel and/or visitors, as well as operators/drivers of transport means, as applicable, and protect the assets of the Customs Broker.

Access controls must include the identification of all employees, visitors, and providers at all entry points. Furthermore, records must be maintained and the documented mechanisms or procedures for entry into the facilities must be permanently evaluated, serving as the basis for beginning to integrate security as one of the primary functions within them.

3.1 Security personnel.
Based on your risk analysis, the Customs Broker must have security and surveillance personnel or designated personnel. This personnel plays an important role in the physical protection of the facilities and, as applicable, the yard where cargo vehicles are stored, as well as in controlling access of all persons to the property.

The security personnel or designated personnel for these tasks must have a documented procedure to carry out their functions and have full knowledge of the mechanisms and procedures in emergency situations, detection of unauthorized persons, or any security incident at the facility. The Customs Broker must periodically verify compliance with procedures, policies, and functions through internal audits with the objective of verifying their correct execution.

Likewise, the Customs Broker must have devices and/or communication systems in order to have immediate contact with security personnel and/or the corresponding authorities.

Response: Explanatory Notes:
Describe the documented procedure for the operation of security personnel, and ensure you include the following points:

I. Describe the procedure that personnel must follow to contact security personnel, designated personnel, or as applicable, the corresponding authority.

II. Indicate what communication devices are used by security personnel or designated personnel (landlines, cell phones, radios, alarm systems, etc.).

III. Indicate the number of security personnel working at the Customs Broker's facilities.

IV. Specify the positions and/or functions of the personnel, and operating hours.

V. In the event of hiring an external service, provide the general data of the company (RFC key, corporate name, and address), specify the number of employees, operational details, records, and reports they use to perform their functions.

VI. In the event of having armed personnel; describe the procedure for the control and safeguarding of weapons.

3.2 Identification of employees, visitors, and providers.
There must be an identification system for employees, visitors, and providers for the purpose of accessing the facilities. Employees should only have access to those areas they need to perform their functions. Access to sensitive areas must be restricted according to the job description or assigned tasks.

Visitors and providers must present official photo identification for documentation upon arrival, and a record must be kept. All visitors and providers must receive temporary identification, be accompanied by personnel working with the Customs Broker during their stay at the facilities, and ensure that the visitor/provider always wears the provided provisional identification in a visible place.

The management or security personnel of the Customs Broker must properly control the delivery and return of identification badges for employees, visitors, and providers, and ensure that they always wear the provided identification in a visible place. This procedure must be documented, as well as the procedures for the delivery, return, and change of access devices (for example, keys, badges and/or credentials, proximity cards, etc.).

Response: Explanatory Notes:
Attach the documented procedure for the control of identifications.
Describe the procedure for the identification of employees and ensure you include the following points:

I. Identification mechanisms (badge and/or photo credential, uniform, access control, biometrics, proximity cards, etc.).

II. Identify whether employees use uniforms, how they are assigned (by position, area, functions, etc.) and withdrawn (as applicable).

III. Indicate how personnel contracted by a business partner, working within the facilities (contractors, subcontractors, etc.), are identified.

The procedure must also describe how the Customs Broker delivers, changes, and withdraws employee identifications and access controls, and ensure you include the responsible areas for authorizing and administering them.

Indicate how you ensure that access to sensitive areas is restricted according to the job description or assigned tasks (include the type of records and controls you use).

Describe the procedure for controlling access for visitors and providers, ensure you include the following points:

I. Specify what records are kept (personal forms for each visit, logbooks, etc.).

II. The record of visitors and providers must include the following:
a) Date of the visit; b) Name of the visitor; c) Identification number with photo (official documents, such as: driver's license, passport, INE, etc.). d) Time of entry and exit; e) In the case of vehicular access, the format must include the data of the private or cargo vehicle (model, license plate, trailer number, etc.).

III. Specify who is the person responsible for accompanying the visitor and/or provider, and if there are restricted areas for their entry.

3.3 Procedure for identification and removal of unauthorized persons or vehicles.
The Customs Broker must have documented procedures that specify how to identify, confront, or report unauthorized or identified persons and/or vehicles. This procedure must be communicated to responsible personnel through training. The training must be documented.

Response: Explanatory Notes:
Attach the documented procedure to identify, confront, or report unauthorized or identified persons and/or vehicles. The procedure must include:

I. Responsible personnel.

II. Designate a person or area responsible for being informed of security incidents.

III. Instructions for confronting and addressing unidentified personnel.

IV. Specify in which cases the corresponding authorities must be reported.

V. Specify how the recording of incidents and the measures adopted in each case is carried out.

3.4 Delivery of mail and packages.
Mail and packages destined for the Customs Broker or their personnel must be examined upon arrival and before being distributed to the corresponding areas and destinations. Likewise, the Customs Broker must have a documented procedure for the receipt and review of mail and packages, which must be communicated to responsible personnel through training. The training must be documented.

Response: Explanatory Notes:
Describe the procedure for the receipt and review of mail and packages and ensure you include the following:

I. Personnel in charge of carrying out the procedure.

II. Indicate how the personnel or provider of the mail and package service is identified (indicate if an additional procedure to the provider access procedure is required).

III. Specify how the review of the mail and/or packages is carried out, what mechanism is used, the records kept, and as applicable, detected incidents.

IV. Describe the characteristics or elements to determine which mail and/or packages are suspicious.

V. Specify what action is taken in the event of detecting suspicious mail and/or packages.

Commercial partners.
The Customs Broker must have written and verifiable procedures for the selection and contracting of new commercial partners and monitoring of partners already working with them, such as partnerships with other customs brokers, correspondent agencies, manufacturing companies, warehouses, transport companies, clients, providers of systems and Information Technologies, installation and maintenance of alarm and closed-circuit television and video surveillance systems, providers of high-security seals, collection and recycling, companies providing document digitization services, among others, and according to their risk analysis, require them to comply with security measures to strengthen the international supply chain.

The risk analysis performed by the Customs Broker regarding their commercial partners (clients and providers) must include risks related to the identification of activities related to money laundering and terrorism financing. Additionally, the Customs Broker must foster a documented social compliance policy and program that, at a minimum, addresses how among their employees and commercial partners they could guarantee that goods, supplies, or merchandise from Mexico or imported for the manufacture of products or merchandise do not originate from extraction, production, or manufacturing, totally or partially, using prohibited forms of labor, that is, forced or compulsory labor, including forced or compulsory child labor, under Article 23.6 of the USMCA and the Labor and Social Welfare Agreement that establishes the merchandise whose importation is subject to regulation by the Secretariat of Labor and Social Welfare, published in the Official Gazette of the Federation on February 17, 2023.

4.1 Selection criteria.
There must be documented procedures for the selection, follow-up, and renewal of commercial relationships with business associates or providers, which include interviews, reference verification, evaluation methods, and use of provided information. The information derived from the investigation and/or evaluation of business associates and/or providers must be documented and integrated into a file (physical or electronic). The procedure for the selection of commercial partners must include indicators to detect clients or providers that may not be legitimate or with unlocated addresses, as well as investigations, reviews, or evaluations of said partners for the identification and control of activities related to money laundering and terrorism financing. If the investigation and/or evaluation of any commercial partner leads to substantial doubts about the veracity of their operations or services, the Customs Broker must avoid their hiring and, as applicable, notify their security specialist or Authorized Economic Operator Program contact and the corresponding authority about their suspicions.

The Customs Broker must have a written procedure for the identification of vulnerable activities established in Article 17, fraction XIV, as well as for compliance with the obligations established in Article 18 of the Federal Law for the Prevention and Identification of Operations with Resources of Illicit Origin (LFPIORPI).

Response: Explanatory Notes:
Attach the documented procedure for the selection and contracting of new commercial partners, and monitoring of partners already working with them. This comprises any type of client and provider that has a commercial relationship with the Customs Broker, and ensure you include the following points:

I. What information is required from your commercial partner.

II. What aspects are reviewed and investigated (the result of the investigation must be integrated into the file).

III. Indicators to identify clients or providers that may not be legitimate (payments above the standard rate, in cash; having little knowledge of the merchandise to be dispatched; being evasive; minimal contact information (cell phone, contact points, emails, etc.); recently created companies or businesses without commercial history, etc.) or with unlocated addresses. This point refers to pointing out all those alerts to determine that a commercial partner is not reliable, thus conducting a deeper investigation and evaluating whether to work with them.

IV. Indicate if you maintain a physical or electronic file for each of your commercial partners, as well as the information it must contain.

V. For the case of providers, specify how the services of your commercial partner are evaluated and what points you review.

Likewise, the files for each of them must contain at least the documents that identify them fiscally and administratively depending on the type of relationship with the commercial partner. Considering the following:

I. Granted mandate: It will be issued in original independent of the one delivered electronically, for each foreign trade operation performed.

II. Copy of the mandate or power of attorney of the legal representative, as applicable.

III. Certified copy of the company's articles of incorporation (properly identified before the Public Registry of Property and Commerce).

IV. Registration in the RFC of the importer or exporter.

V. Notice of change of fiscal address, as applicable.

VI. Copy of official photo identification of the importer/exporter and of the legal representative, in case of being a legal entity.

Attach the documented procedure for compliance with the LFPIORPI, which must contain at a minimum:

I. Actions to take when any of the vulnerable activities marked in the cited Law are identified.

II. Notices to the SHCP (Ministry of Finance and Public Credit).

III. Integration of files of clients susceptible to this Law.

The file must include at a minimum the following:

I. Company data (name, RFC key, activity, etc.).

II. Legal representative data.

III. Proof of address.

IV. Commercial references.

V. Contracts, agreements, and/or confidentiality agreements.

VI. Security policies.

VII. As applicable, certificate or certification number in the security programs to which they belong.

4.2 Security requirements.
The Customs Broker must have a documented procedure in which, according to their risk analysis, they request additional security requirements from those commercial partners that intervene in their supply chain such as transporters, private security companies, providers of loading and unloading services, correspondent agencies, as well as those resulting from the analysis performed. As well as providers of cleaning services, cafeteria, private security, personnel contracting, high-security seal providers, collection and recycling, among others.

The requirements must be based on the minimum security requirements established by the AGACE, or in case they exist, the specific Profile for each actor of the supply chain corresponding to them.

The Customs Broker must request from their commercial partners the documentation that accredits and proves that they comply with the minimum security standards established in the Customs Broker Profile, either through a written declaration issued by the legal representative of the partner, agreements or contractual clauses, backed by documentation that validates compliance with the requirements established in the Authorized Economic Operator Program. Likewise, the Customs Broker must take into account and know the specific requirements of the Authorized Economic Operator Program that will be applicable to each of their commercial partners, based on their activity within the supply chain.

In the case of commercial partners that provide a service within the facilities of the Customs Broker, they must be obligated to comply with these supply chain security requirements.

Response: Explanatory Notes:
Describe the procedure that indicates how you carry out the identification of commercial partners that require compliance with minimum security standards. Ensure you include the following points:

I. A register of commercial partners that must comply with security requirements, and mention what type of providers these are (transport, storage, custodian service, private security company, correspondent agencies, loading and unloading service, etc.).

II. Indicate in what documentary form (agreements, accords, contractual clauses and/or addenda) you ensure that your commercial partners comply with security requirements.

III. Indicate if there are agreements, accords, contractual clauses and/or addenda regarding the implementation of security measures with your service providers inside the installation, such as: private security, cafeteria, gardening, cleaning and maintenance services, Information Technology providers, etc.

IV. Indicate if you have commercial partners to whom membership in a supply chain security program is required (for example: CTPAT or some other World Customs Organization Authorized Economic Operator Program) as well as the information and documentation requested of them.

Indicate the total annual number of declarations and the global value of those performed for each of the facilities from which you transmit the validation of declarations in each of the authorized customs offices of the customs patent.

In the case of partnerships with other customs brokers, there must be a list of the clients of the certified Customs Broker that are managed by said partnership.

Indicate the total annual number of declarations and the global value of those managed by each of the partnerships with other customs brokers to which they belong and indicate the following:

I. Name and denomination of the partnership.

II. Customs offices through which the partnership operates.

III. Complete address of the installation(s).

Describe how you ensure that the partnerships you have with other customs brokers, in which your patent is not an attachment or additional, comply with the minimum requirements in terms of security.

4.3 Commercial partner reviews.
The Customs Broker through the Security Committee must perform periodic security evaluations (as well as derived from risk situations), of the processes and installations of business associates based on a risk analysis, to guarantee that they have the minimum security standards required by the Customs Broker based on the Authorized Economic Operator Program, keep records of them, which allow verifying that the processes and security measures are being executed, as well as the corresponding follow-up.

When inconsistencies are found, the Customs Broker must communicate them to their partner and/or provider and provide a justified period established in a procedure to address the observations or areas of opportunity identified, or in case of failure, have the necessary measures to sanction them.

Performing security evaluations of commercial partners is important to guarantee that there is a solid and functioning security program. Therefore, in addition to a documented procedure, there must be a program or calendar for the execution of these reviews or security evaluations, prioritizing partners that are more critical according to their risk analysis. If a member is not evaluated and the Customs Broker does not know if the processes and installations of their commercial partners function correctly, it puts their supply chain at risk.

Response: Explanatory Notes:
Describe the procedure to perform evaluations to verify the security requirements (processes and installations) of your commercial partners, ensure you include the following points:

I. Periodicity with which you make visits to the commercial partner (these must be at least once a year and derived from risk situations).

II. Program or calendar for the execution of security reviews.

III. Registration or reporting of the verification and, where applicable, the corresponding follow-up.
IV. The verification format(s) must be properly completed, including the date, name, and position of those participating in the review, signatures, etc.
V. Indicate what action measures are taken when business partners do not meet the established security requirements.
VI. In the event of having business partners with CTPAT certification or another supply chain security certification program, indicate the frequency with which their status is reviewed, how it is recorded, and the actions taken in case it is detected that it is suspended and/or cancelled in accordance with what is established in your procedure. For partners who have such security certification (granted by an authority), it will not be necessary to carry out visits, provided that the status of the certification is valid in accordance with what is established in your procedure.
The procedure must include:
I. Review points on security matters.
II. Preparation of reports.
III. Feedback and agreements with the business partner.
IV. Follow-up on agreements.
V. Measures in case of detection of non-compliance with requirements.
VI. Record of evaluations.
VII. Area or person responsible for carrying out this procedure.

Process Security.
Control measures must be established to guarantee the integrity and security of processes related to the flow of information (in any of its modalities) provided by the importer/exporter, shipper, supervised facility, etc., which is used for the movement of goods and their foreign trade operations, ensuring at all times that this information is legible and is protected against exchange, theft, loss, or introduction of erroneous data. Likewise, established procedures must exist to prevent and detect undeclared goods or materials, and to prevent unauthorized personnel from having access to the goods and to the means of transport and containers. These procedures must be documented and ensure the integrity of import and export shipments from the point of origin to their final destination.

5.1 Process Mapping.
There must be a process map that describes step by step the information and operational flow for the transfer of foreign trade goods throughout the supply chain, allowing for a broad view of their foreign trade operations. The Customs Agent must take into account and include in their mapping all parties involved in their supply chain, containing those that handle import and export documentation, others who may not handle the cargo directly, but who may have operational control such as carriers (long-haul, cross-border or transfer, subcontracted, etc.), storage, sub-maquila, national and foreign suppliers, direct and indirect, etc. If any part of the transport is subcontracted within their supply chain, it is essential that it be considered within their risk analysis and process mapping, since, the more direct and indirect suppliers, the greater the risk involved. Response: Explanatory Notes:
Attach the document where the mapping of processes through which the flow of information and import and export goods passes is illustrated and described, from the point where they receive them until their delivery, with the purpose of having each of the steps involved in the receipt, dispatch of the goods until their delivery at the final destination well identified. This process mapping must contain at least the following aspects:
I. Verification of the corresponding registry.
II. Granted mandate.
III. Revalidation of the transport document, if applicable.
IV. Pre-dispatch review.
V. Tariff classification.

VI. Entry of the customs declaration (pedimento).
VII. Compliance with regulations and non-tariff restrictions (obligation to have permits from the competent authority before presenting the goods for dispatch).
VIII. Generation of the COVE (if applicable).
IX. Value declaration.
X. Determination of contributions.
XI. Review of information transmitted to the SEA with the documentation generated from the shipment (Gloss).
XII. Payment of contributions.
XIII. Payment of maneuvers.
XIV. Validation of the customs declaration.
XV. Presentation of goods before the automated selection mechanism.
XVI. Free customs clearance.
XVII. Customs Inspection.
XVIII. Procedure in case of taking samples (The importer may provide them through their Customs Agent at the time of dispatch provided that the samples contain the seals, stamps or any means that manifest that the laboratory result is preserved sterile or well it can be carried out by the authority).
XIX. Handling and control of security means, high-security padlocks/seals and others.
XX. Verification of the delivery of the goods at the agreed destination, if applicable.
XXI. Procedure for re-dispatch of goods.

XXII. Procedure for the promotion of the withdrawal of an import or export.
XXIII. Subdivision of the shipment.
XXIV. Effective communication to customs authorities for cases that represent a risk in terms of security.
XXV. Account of expenses of the shipment.
XXVI. Measurement for customer satisfaction.
XXVII. Treatment for complaints.
XXVIII. Verification of goods in transport.
XXIX. Consolidation of the shipment.
XXX. Formation of the electronic file of each of the customs declarations or customs documents (article 167 of the Law).

5.2 Delivery, receipt and discrepancies in the cargo.
The Customs Agent must supervise, according to the type of operations they perform and based on their risk analysis, the loading or unloading of the shipment, verifying the detailed description of the goods, weight, labels, marks, quantities and other data that help to quantify and fully identify the goods, comparing such information with the corresponding invoices, bill of lading, air waybill or packing list. Considering and derived from these reviews, the documented procedures to detect and report missing, surplus, prohibited goods or any other discrepancy in the delivery or receipt of the goods, which must be investigated and resolved. Likewise, the driver who transports the goods must be delivered the required documentary information for their correct transfer (for example: customs declaration, packing list, invoice, contact data and/or procedure in case of any security incident or inspection by any authority, among others). Response: Explanatory Notes:
Attach the documented procedure in which it indicates step by step how the delivery and receipt of the cargo is carried out, indicating how it controls or what security measures it has implemented to mitigate the risk of collusion or complicity between employees, such as the driver and the personnel of the dispatch areas (if applicable), warehouse, security guards, etc.

Attach the documented procedure to detect and report discrepancies in the delivery or receipt of the goods and ensure that it includes the following points:
I. Persons responsible for carrying out the review.
II. Documents to be compared.
III. Areas to which the information is reported.
This procedure must be applied to the merchandise received for import, export; and if applicable, in the review at intermediate points.

5.3 Processing of cargo information and documentation.
The Customs Agent must have documented procedures to ensure that the electronic and/or documentary information sent by their clients from their service request, during the movement and dispatch of goods, as well as the information received from business associates is legible, complete, accurate, reported in time and protected against changes, losses or introduction of erroneous information. The Customs Agent must have the information of each shipment of goods they carry out, in an accessible and secure manner, in written or electronic form. Likewise, the forms and documentation related to the dispatch should be secured to prevent unauthorized use. Response: Explanatory Notes:
Attach the documented procedure for the processing of cargo information and documentation. Briefly explain what it consists of.
I. Detail how you receive and transmit relevant information and documentation for the transfer of foreign trade goods with your business partners (indicate if you use a specific computer control system and briefly explain its function). Likewise, detail how you ensure that the information provided is legible, complete, accurate, reported in time and protected against changes, losses or introduction of erroneous information.

II. The electronic information of the shipments and cargo in general must include the seal number and/or padlock with which the cargo was secured and in case of changes due to the review of any authority.
III. Indicate in what way business associates transmit information to the Customs Agent, and how they ensure its protection.

5.4 Inventory Management, control of packaging, container and packing material.
If applicable, documented procedures must be in place for inventory control and storage of the cargo and periodic reviews must be carried out to verify its correct management (for example, for the case of subdivision of invoices or shipping documents, etc.). Likewise, if applicable, you must have a documented procedure for the control and supervision of the packaging and packing material of the goods (for example in the labeling processes of the goods), in which the control, dissemination and prevention procedure of visible pest contamination is also included, in the case of use of wooden packing materials (such as pallets, boxes, crates, cages, reels, dunnage, supports or platforms) to stack the cargo, move it and protect it throughout its entire supply chain. Response: Explanatory Notes:
Attach the documented procedure for inventory management. This must include among other aspects according to your operation:
I. The frequency with which you carry out the verification of stock (periodic inventory). Indicate if there is a documented scheduled calendar to carry them out.
II. Indicate what is done, in the case of excesses and shortages in inventories.
III. Indicate the treatment given to the control and handling of packaging, container and packing material, in which the control, dissemination and prevention procedure of visible pest contamination is also included, in the case of use of wooden packing materials (such as pallets, boxes, crates, cages, reels, dunnage, supports or platforms) to stack the cargo, move it and protect it.

IV. This point is also focused on reducing the risk of introduction or dissemination of pests of quarantine importance to the country through packaging (imports), therefore, describe how you comply with the provisions indicated by SEMARNAT and NOM-144 SEMARNAT-2017, in concordance with the International Standard for Phytosanitary Measures No.15 called Regulation of wooden packaging used in International Trade, which emanate from the Food and Agriculture Organization of the United Nations.
Regarding waste or surplus packaging and packing material, indicate the procedure carried out for its handling and/or destruction.
The applicant's procedures may include:
I. Warehouse only accessible to authorized personnel.
II. Frequency of stock control.
III. Control of incoming goods, transfers to other warehouses, consolidation or deconsolidation.
IV. Actions taken if irregularities, discrepancies, losses or thefts are identified.
V. Treatment of deterioration or destruction of goods.
VI. Separation of the various types of goods for example high value, dangerous.

5.5 Internal Communication.
The Customs Agent must have devices and/or communication systems in order to have immediate contact with the personnel of the different areas in charge of carrying out the customs dispatch of the goods. Additionally, a backup system must be available and its proper functioning must be verified periodically. Response: Explanatory Notes:
Describe in detail how the Customs Agent communicates with the personnel in charge of carrying out the dispatch of the goods, mainly with those who have direct contact with the goods and with the means of transport (agents, assistants, classifiers, etc.), in case of any security incident. Indicate if operational and administrative personnel have or have access to devices (radios, mobiles, landline phones, etc.), to communicate with each other and/or with whom it corresponds. These must be accessible to users, to be able to react promptly. Describe the procedure for the control and maintenance of communication devices, ensure you include the following points:
I. Policies for the assignment of mobile communication devices.
II. Maintenance or replacement program for fixed and mobile communication devices.
III. Indicate if you have backup communication devices when the permanent system fails and in case, briefly describe them.
The procedure may include:
I. Person responsible for the proper functioning and maintenance of communication devices.
II. Record of verification and maintenance of devices.
III. Method of assignment of communication devices.

Customs Management.
The Customs Agent must have documented procedures, in which internal and operational policies are established, as well as the necessary controls for the due compliance of customs obligations, with the object of guaranteeing the fulfillment of the entrusted mandate. Likewise, specialized personnel and documented procedures must be available, which establish the verification of the information and documentation generated in their name.

6.1 Customs Dispatch Management.
The Customs Agent must have documented procedures that detail each of the steps shown in their process map established in sub-standard 5.1.
Response: Explanatory Notes:
Attach the documented procedures that describe each of the points or steps that your process map (5.1) contemplates. These procedures must include the following points:
I. Persons responsible for each procedure.
II. Formats and documents used.
III. Systems used.
IV. Actor in the logistics chain with which information is exchanged.
The review of these procedures that detail the operation of the customs dispatch of the goods must at all times coincide with the information and/or documentation provided by the client. Mainly on the following topics:
I. Tariff classification (support of information or technical sheets of the merchandise that the client sends to the Customs Agent for its correct classification).
II. Compliance with regulations and non-tariff restrictions. [Interaction with your clients and the different government departments for the compliance of regulations and non-tariff restrictions (RRNA)].

III. Value declaration (The verification and confirmation of the information provided by the client will serve as support for the use of the valuation methods established in the Law).
IV. Payment of contributions (the exchange of information generated for the payment of contributions must be clear and precise with the client).

6.2 Control in facilities.
The Customs Agent must have documented procedures in which the control of the official badges requested for personnel entering the fiscal facilities is contemplated, such as: customs agent, assistant, etc.
Likewise, one of the customs obligations is the evaluation and certification of the figure of the customs agent, so you must have a documented procedure to comply with what is established in the Law.
Response: Explanatory Notes:
Attach the documented procedure that describes the control of the official badges for personnel entering the fiscal facilities, ensure you include the following points:
I. Procedure for requesting badges with the Associations or Confederations.
II. Badge use policies.
III. Infractions related to the improper use of badges.
IV. Fines applicable to infractions related to the improper use of badges.
An updated list of the badges requested, as well as those that have been cancelled, must be available.

Describe the process that the customs agent must follow to apply the evaluations and keep their certifications of activities such as:
I. The supervision of previous and derived acts of customs dispatch.
II. Preparation of the customs declaration.
III. The set of acts and formalities related to the entry of goods into the national territory and their exit from it.
The Customs Agent must have the corresponding evidence that supports the evaluations and certifications of the aforementioned topics.

Security of cargo vehicles, containers, trailers and/or semi-trailers.
Depending on the case, security must be maintained in the means of transport, tractors, containers, trailers and semi-trailers (including cargo vehicles such as pickup trucks, vans, or vans, among others), to protect them from the introduction of unauthorized persons and/or materials. For this reason, it is necessary to have documented procedures to identify, review, seal and maintain their integrity. Likewise, the inspection process of said means of transport, containers, trailers and semi-trailers used as Instruments of International Traffic, must include an agricultural inspection procedure to look for visible pests and serious structural deficiencies. Pest contamination is defined as visible forms of animals, insects or other invertebrates (living or dead, at any stage of the life cycle, including eggs, etc.), or any organic material of animal origin (including blood, bones, hair, meat, secretions, excretions, etc.); plants or vegetable products (including fruits, seeds, leaves, twigs, roots, bark, etc.); or other organic material, including fungi, soil or water; when such products are not the declared cargo within the Instruments of International Traffic. In the event of using high-security seals, it is necessary to have procedures to seal correctly and maintain integrity from the moment they leave your facilities. A high-security seal must be applied to all containers and trailers for foreign trade shipments, which must comply with or exceed the ISO 17712 Standard for high-security seals. For this reason, with the objective of maintaining the security of the supply chain, the Customs Agent must inspect all cargo vehicles systematically upon entry and exit of their facilities (domestic and international traffic), in addition to keeping a record.

7.1 Use of seals and/or padlocks in containers and trailers.
The Customs Agent must have, if applicable, a documented procedure, where the means of transport, containers, trailers and/or semi-trailers and high-security seals used in the international logistics chain are identified, indicating how their integrity is maintained. For this reason, as one of the security mechanisms, the Customs Agent, if applicable, must use padlocks or high-security seals that comply with or exceed the ISO 17712 Standard in all containers and loaded trailers that are subject to foreign trade and maintain their integrity until their dispatch. For this, the Customs Agent must have documented procedures to correctly place the high-security seals and verify their integrity.

The procedures must include the steps to follow if a seal is found to be altered, manipulated, or if there is an incorrect seal number in the documentation, the communication protocols with business partners involved in the supply chain, and the investigation of the security incident. These must be reported to security personnel, business partners who may be part of the affected supply chain, the security specialist, or the Authorized Economic Operator Program contact.

Likewise, in said procedure, the Customs Broker must include matters related to the administration of high-security seals, which must include the control, assignment, safeguarding, handling of discrepancies, and destruction of seals and locks (the latter is mandatory whenever seals are broken at their facilities). Regarding the supplier of the seals and/or locks, it must be demonstrated how these comply with ISO Standard 17712. The Customs Broker or a security supervisor must perform periodic and documented audits of the high-security seals and/or locks. These reviews must include the verification of the inventory of stored seals and/or locks and the reconciliation with inventory records and shipping documents. Also, the Customs Broker must periodically verify the seal numbers used in means of transport and International Traffic Instruments to corroborate that the information is correct.

In the event of having a yard for storing cargo vehicles at the Customs Broker's facilities, empty containers must be secured with a lock and/or indicative seal, or in a secure area that is guarded and monitored by alarm systems and closed-circuit television and video surveillance.

When it is necessary to store (overnight) any loaded container, trailer, and/or semi-trailer, it must be in a secure area and monitored by alarm systems and closed-circuit television and video surveillance to prevent access and manipulation, and must be closed with a high-security lock.

Response: Explanatory Notes:
Indicate whether the Customs Broker has its own or third-party transport units, containers, and/or trailers.
Attach the documented procedure for the placement and review of seals and/or locks on vehicles, means of transport, containers, train cars, trailers, and/or semi-trailers. This must include, among other aspects according to its operation:
I. Verify that the seal or lock is intact and determine if there is evidence of improper manipulation.
Use the VVTT inspection method:
a) V - View the seal and lock mechanisms of the container (View). b) V - Verify the seal number (Verify). c) T - Pull on the seal to ensure it is correctly placed (Tug). d) T - Twist and turn the seal to ensure it is secure (Twist and Turn).

II. Review and compare the documentation containing the number of the original seal or lock and, if applicable, any additional ones carried during the transport of the goods. In the event of using a replacement seal and/or lock, the number must be registered within the Customs Broker's control. If altered seals and/or locks are identified, they must be kept to help conduct the investigation of said incident or discrepancy and, as appropriate, report the compromised seals and/or locks to the foreign authority.
III. Review that the closing devices, hinges, and pins are attached to the trailer or container and welded or riveted. Also, protective plates can be placed on the door hinges and/or a seal/adhesive tape placed on at least each side. Likewise, the correct functioning of handles, latches, and all other locking or closing mechanisms of the cargo vehicles must be verified to detect manipulations and any inconsistencies before placing any sealing device.
IV. Indicate how they assign and replace high-security locks, in the event that, during the journey, it is inspected by another authority. If a seal and/or lock is broken in transit, the cargo must be examined, the number of the replacement seal and/or lock must be registered, and the driver must immediately notify business associates when this happens, indicating who broke it and providing the new seal number.

In its case, attach the documented procedure for the control and handling of seals and/or locks. This must include, among other aspects according to its operation:
I. Inventory of locks and/or seals.
II. Who has access and how locks and/or seals are safeguarded. The management of seals and/or locks must be restricted only to authorized personnel; stored in a safe place, have an inventory, control of their distribution and tracking (record of seals used, as well as the receipt of new seals and/or locks).
III. Describe how the Customs Broker participates in audits of high-security seals and/or locks, the reviews they perform, the records they generate, and the actions they take in case of identifying discrepancies. Also, how dependents verify seal numbers used in means of transport and International Traffic Instruments to corroborate that the information is correct (this process can also be included within the internal audits referred to in sub-standard 1.3 of this document).
IV. How discrepancies in seal and/or lock numbers are addressed.
V. Record of seals and/or locks used at the time of customs recognition.
For the case of lost or stolen seals and/or locks, describe the procedure followed by the Customs Broker.
Indicate who the supplier(s) are and how they prove that the specifications of the seals and/or locks comply with ISO Standard 17712 (attach certificate of conformity, issued by the certifying company responsible for verifying compliance with the corresponding ISO).

In the case of having a yard for storing cargo vehicles at the Customs Broker's facilities, describe how they ensure the integrity of the means of transport is cared for.
All written procedures must be disseminated and maintained at the operational level so that they are easily accessible to employees responsible for executing the tasks described above, reviewed at least once a year, and updated as necessary.

7.2 Inspection of means of transport, containers, trailers, and semi-trailers.
In the event of having a yard for storing means of transport, the Customs Broker must have established procedures to verify the physical integrity of the structure of the means of transport, container, trailers, and/or semi-trailers used as International Traffic Instruments, even the reliability of the door lock mechanisms, with the purpose of identifying natural or hidden compartments. Inspections of means of transport or cargo vehicles, containers, and trailers (land cargo) must be systematic and have records of these inspections, in an access-controlled area and carried out in a place monitored by alarm systems and closed-circuit television and video surveillance, said system must cover the inspection process in its entirety. The documented procedure for its inspection must include, by way of example and not limitation, the following review points:

Means of Transport | Trailers, Train Cars, Semi-trailers, and Containers --- | ---
I. Bumper; | I. Exterior and interior doors;
II. Tires and rims (tractor and trailer); | II. Side walls (left and right);
III. Floor (tractor); | III. Interior and exterior roofs;
IV. Fuel tanks; | IV. Front wall;
V. Cab interior (bedroom and tool compartment); | V. Internal floor;
VI. Air tanks; | VI. Refrigeration system, if applicable.
VII. Chassis; |
VIII. Fifth wheel area; |
IX. Drive axles; |
X. Exhaust pipe; and |
XI. Engine. |

Likewise, before loading the means of transport, containers, train cars, trailers, and semi-trailers used as International Traffic Instruments, they must undergo agricultural and security inspections to guarantee that their structures have not been modified to hide smuggling or have been contaminated with visible agricultural pests, keep a record, and be backed by a documented procedure. If visible pest contamination is found during the inspection or transport of goods subject to foreign trade, it must be cleaned (washed, vacuumed, etc.) to eliminate said contamination.

Response: Explanatory Notes:
Attach the documented procedure to carry out the security and agricultural inspection of means of transport, containers, trailers, and semi-trailers. This must include, among other aspects according to its operation:
I. Those responsible for carrying out the inspection.
II. Definition of the place(s) where the inspection is carried out and indicate how the monitoring is performed by alarm systems and closed-circuit television and video surveillance.
III. The review points for means of transport, trailers, semi-trailers, and containers both for security and those for quality and agricultural inspections with the purpose of searching for visible pests.
Attach the established format for the inspection of means of transport or cargo vehicles, containers, train cars, trailers, and/or semi-trailers.
Likewise, the security and agricultural inspection format must include the following information:
I. Date of inspection;
II. Time of inspection;
III. Vehicle license plates (tractor and trailer);
IV. Container/trailer number;
V. Specific areas of the cargo vehicles that were inspected; and
VI. Name of the employee performing the inspection and of the supervisor.

The security and agricultural inspection formats may be signed by the supervisor to corroborate their information and be part of the import and export documentation.
The documentation must be kept for one year for an investigation in the event of any security incident, as well as to demonstrate continuous compliance with these inspection requirements.
Indicate whether the repair or maintenance of transport units, containers, or trailers is performed at the same facilities or is carried out with an external provider.

Personnel Security.
Documented procedures must be available for the registration and evaluation of persons wishing to obtain employment with the Customs Broker and to establish methods to perform periodic verifications of current employees. There must also be continuous training programs for administrative and operational staff, dissemination of the Customs Broker's security policies, as well as the consequences and actions to be taken in case of any breach or security incident.

8.1 Employment Background Verification.
The Customs Broker must have documented procedures to investigate and verify the information stated in the curriculum, criminal records (if local legislation and company policies allow), and applications of candidates with potential for employment, in accordance with local legislation, either on their own or through an external company. Likewise, for positions that require it due to their sensitivity and affect the security of shipments subject to foreign trade, in accordance with their previously conducted risk analysis, they must consider requesting stricter requirements for their hiring and during their employment when hired, which must be carried out periodically at least once a year. Regarding personnel already working in the company, periodic investigations must be carried out based on the activities and/or sensitivity of the employee's position. All information regarding personnel must be kept in personal files, which must have restricted access.

Response: Explanatory Notes:
Describe the documented procedure for personnel hiring and ensure you include the following:
I. Requirements and documentation required.
II. Tests and exams requested.
III. Indicate the areas and/or critical positions identified as risky, according to your analysis.
IV. Indicate what the additional requirements are for specific areas and/or jobs, such as criminal records (if legislation and company policies allow), non-criminal record letter, socioeconomic studies, clinical studies, toxicological (drug use) studies, etc. In its case, indicate the positions or work areas where they are required and with what frequency they are carried out.
V. Indicate if prior to hiring, the candidate must sign a confidentiality agreement or a similar document.
VI. In the event of hiring through a staffing agency, indicate if this has documented procedures for personnel hiring and how it ensures they comply with the same. Briefly explain what they consist of.
The procedures for personnel hiring and contractors may include:
I. Thorough investigations of the work and personal backgrounds of new employees.
II. Confidentiality and liability clauses in employee contracts.
III. Specific requirements for critical positions.
IV. In its case, the periodic update of the socioeconomic and physical/medical study of employees who work in critical and/or sensitive areas.
V. Hiring process and requirements requested for temporary employees and contractors.
The Customs Broker may consider the results of background verifications of candidates, as allowed by current legislation, to make hiring decisions. Background verifications are not limited to identity and criminal record verification. In higher-risk areas, deeper investigations may be justified.

8.2 Personnel Termination Procedure.
There must be documented procedures for personnel termination, which must include the delivery of identification, and any other item that has been provided to perform their functions (keys, uniforms, badges and/or credentials, computer equipment, passwords, tools, etc.). Likewise, this procedure must include the termination in those information and access systems, among others that may exist.

Response: Explanatory Notes:
Describe the procedure for personnel termination and ensure you include the following:
I. Who is responsible for carrying out and following up on this procedure.
II. How the delivery of identification, uniforms, keys, and other equipment is performed and confirmed.
III. Indicate the control, record, and/or format, in which the delivery of material is identified and secured, and termination in information systems (if applicable, attach).
IV. Indicate the type of records of personnel who ended their labor relationship with the Customs Broker, so that when it was for security reasons, their service providers and/or business associates are prevented.

8.3 Personnel Administration.
The Customs Broker must maintain an updated system, control, or database of active employees. Likewise, they must perform and keep updated the records of affiliation to social security institutions and other legal labor records. In the event that the Customs Broker has personnel hired by its business partners and works within the facilities, it must ensure that they comply with the requirements established for the rest of its employees.

Response: Explanatory Notes:
Indicate if the Customs Broker has an updated system, control, or database, both of personnel hired directly, as well as that hired through a service provider company, and ensure it includes, by way of example and not limitation, the following points:
I. Full name.
II. Updated photograph at least every five years.
III. Personal data (age, name, date of birth, phone number, address, CURP, social security number, blood type, allergies, etc.).
IV. Affiliation.
V. Work background.
VI. Diseases.
VII. Medical exams.
VIII. Training.
IX. Psychometric tests.
X. Toxicological tests.
XI. Results of periodic evaluations.
XII. Observations.
This personnel must be hired in accordance with the current labor laws and regulations.

Information and Documentation Security.
There must be prevention measures to maintain the confidentiality and integrity of information and documentation related to foreign trade operations, including those used for the exchange of information with other members of the supply chain. Likewise, there must be comprehensive documented policies and/or procedures to protect Information Technology systems, including measures against misuse, as well as identifying and prioritizing actions to reduce cybersecurity risk. They could also address how a member shares information about cybersecurity threats with the government and other business partners.

9.1 Classification and Handling of Documents.
There must be procedures to classify documents according to their sensitivity and/or importance. Sensitive and important documentation must be stored in a secure area that only allows access to authorized personnel. The useful life of the documentation must be identified and procedures for its destruction established in accordance with the corresponding legislation. The Customs Broker must conduct regular reviews to verify access to information and ensure that it is not used improperly. Some of the sensitive information referred to in the previous paragraph and depending on the case may be:
I. Integration of documentation prior to customs clearance.
II. Export/import declaration.
III. Packing list.
IV. The bill of lading (air waybill, bill of lading, and bill of lading) as applicable.
V. Copy of the documents that prove compliance with non-tariff restrictions and regulations on imports that have been issued in accordance with the corresponding laws.
VI. The document on the basis of which the provenance and origin of the goods are determined for the application of tariff preferences.
VII. The document in which the guarantee granted by deposit made in the guarantee customs account referred to in Article 84-A of the Law is recorded, when the declared value is lower than the estimated price established by the SE.
VIII. The weight or volume certificate issued by the certifying company authorized by the Secretariat through rules, regarding the clearance of bulk goods at maritime traffic customs, in the cases established by the Regulation.
IX. The information that allows the identification, analysis, and control indicated by the Secretariat through rules.
X. Manifestation of the value of the goods.
XI. Calculation sheet for the determination of contributions, proceeds, and/or accessories.
XII. Responsive letter (technical and MSDS safety data sheet for materials, if applicable).
XIII. Insurance policy for the goods that were cleared.
XIV. The Customs Broker must conduct regular reviews to verify access to information and ensure that it is not used improperly.

Answer: Explanatory Notes:
Attach the documented procedure for the registration, control, and storage of printed documentation (classification and filing of documents), which must include:
I. Control register for delivery, loan, and other documents.
II. Restricted access to the archive area.
III. Storage and classification policies.
IV. An updated security plan describing the measures in place regarding the protection of documents against unauthorized access, as well as against deliberate destruction or loss of said documents.
V. In the case of electronic or digital information, it must adhere to the security criteria of sub-standard 9.2 Information Technology Security.

9.2 Information Technology Security.
To protect Information Technology systems against common cybersecurity threats, the Customs Broker must have sufficient protection to preserve the confidentiality, integrity, availability, and auditability of the information generated from foreign trade operations carried out with authorities, their clients, and other actors. Likewise, it must promote security in the Information Technology infrastructure (software and hardware) against malware (viruses, spyware, worms, trojans, etc.), baiting, phishing, and internal/external intrusions (firewalls) in the companies' computer systems. Similarly, companies must ensure that their security software is active and receives periodic updates.

In the case of automated systems and computer equipment, individual accounts requiring periodic password changes must be used. In order to protect the confidentiality, integrity, and availability of information, the Customs Broker must have established information technology policies, procedures, and standards that must be communicated through a training program for all employees who handle computer equipment and systems, which includes topics to prevent attacks through social engineering and all those threats to which they are exposed (malware, baiting, phishing, etc.). Customs brokers that allow their employees to connect remotely to a network must use secure technologies, such as virtual private networks (VPN), to allow employees to access the company intranet securely when they are outside the office, as well as procedures designed to prevent unauthorized remote access by users.

For the above, there must be written procedures and infrastructure to protect the Customs Broker against losses, theft, leakage, hacking, and/or information kidnapping. This includes the procedure for the recovery (or replacement) of Information Technology systems and/or data, as well as a system or software established to identify the abuse of Information Technology Systems and detect inappropriate access and/or improper manipulation or alteration of commercial and business data, as well as a written procedure for the application of appropriate disciplinary measures to all offenders.

Sensitive information must be protected through these computer security policies, in addition to having backup copies. Access to Information Technology Systems must be protected against infiltration through the use of secure passwords, which include phrases or other forms of authentication. Users of said Information Technology systems must safeguard and not share their access keys or passwords. All Information Technology infrastructure must be physically protected against unauthorized access.

If a data leak or other unexpected event occurs resulting in the loss of data and/or equipment, the procedures must include the recovery or replacement of Information Technology systems and/or data.

Answer: Explanatory Notes:
Attach the procedure for the recovery or replacement of Information Technology systems and/or data, which includes how it backs up and guarantees the security of its information, in addition to protecting it from possible losses. Make sure to include the following points:
I. Indicate the frequency with which information backups are carried out.
II. Who has access to them and who authorizes the recovery of the information.
III. Indicate what type of tests are performed and how often, to verify the security of the network, systems, and infrastructure.
IV. Mention if, to carry out this type of tests or vulnerability scans, it is done through software, a third party, or provider, and if so, indicate the name or corporate name.
V. In case vulnerabilities are found, describe the corrective actions that must be implemented.
VI. Indicate if you share information about cybersecurity threats with your business partners who participate within your supply chain (for example: communications, bulletins, emails, etc.).

VII. Systems must be protected with passwords and must be modified frequently; therefore, indicate the procedure for changing them.
VIII. Indicate if there are information security policies for their protection.
IX. There must be a system or software to detect and identify the abuse, intrusion, or access of unauthorized persons to your systems and/or Information Technology data (any system used by the company), as well as the abuse of the policies and procedures established by the company, including unauthorized access to internal systems, external websites, and the manipulation or alteration of commercial data by employees or contractors.
X. All offenders must be subject to the application of disciplinary measures; therefore, indicate the corrective policies and/or sanctions in case of detection of any violation of Information Technology security systems and policies.

Information Technology and cybersecurity policies and procedures must be reviewed annually and updated due to an attack or according to situations that may put the Customs Broker's systems at risk.
Describe the security measures used to allow employees to connect remotely to a network (VPN), to allow employees to access the company intranet remotely when they are outside the office.

In case of allowing employees to use personal devices to perform company work, such devices must comply with the company's cybersecurity policies and procedures, security updates must be periodic, and there must be a method to access the company network securely.

XI. Indicate if business partners have access to the Customs Broker's computer systems. If so, indicate what programs they use and how they ensure access control to them.
XII. Indicate if the computer equipment has a backup power supply system that allows business continuity.

Procedures regarding the backup of the Customs Broker's information must also include at least the following:
I. How and for how long data is stored (data should be backed up once a week or as appropriate).
II. Business continuity plan in case of incident and how to recover the information.
III. Frequency and location of backup copies and archived information.
IV. If backup copies are stored in sites alternative to the facilities where the data processing center is located.
V. Tests of the validity of data recovery from backup copies.

Procedures regarding the protection of the Customs Broker's information must also include:
I. An updated and documented policy for the protection of the Customs Broker's computer systems against unauthorized access and deliberate destruction or loss of information. All sensitive and confidential data must be stored in an encrypted or encoded format.
II. Detail if you operate with multiple systems (branches/sites) and how such systems are controlled.
III. Who is responsible for the protection of the Customs Broker's computer system (responsibility should not be limited to one person but to several so that each can control the actions of the rest).
IV. Each user's access must be assigned through individual accounts and restricted according to the job description or assigned tasks. For this reason, describe how access authorizations and access levels to computer systems are granted (access to sensitive information must be limited to authorized personnel to make modifications and use the information). Authorized access must be monitored by the area responsible for granting it, to verify or, if necessary, report that access to confidential systems is based on job requirements.
V. Indicate the elements or format that passwords must have for access to Information Technology systems and equipment, methods of authentication, and who provides those passwords.

VI. Indicate the name of the firewall and anti-virus used (include information related to licensing), evidencing that this security software is active and receives periodic updates.
For the above, cybersecurity policies and procedures should include measures to prevent the use of counterfeit products or those with incorrect licenses (software and hardware).

All computer equipment, electronic media (hard drives, cell phones, etc.), and Information Technology hardware containing confidential information related to the import and export process must be accounted for through periodic inventories and have such evidence. When these technological equipment must be disposed of, there must be a documented procedure that includes how they must be formatted, disinfected, or destroyed properly to avoid information leakage.

VII. In case of staff turnover, access to computer equipment, telecommunications, and networks must be eliminated at the time of the employee's separation; this includes email accounts, system access accounts, software, programs, etc.
VIII. Measures planned to handle security incidents when the system is compromised.

Security training and awareness.
There must be a documented awareness program on threats established, designed, and updated by the Security Committee to recognize and create awareness about threats from terrorists and smugglers at each point of the supply chain. The training program must be comprehensive and cover all security requirements of the Authorized Economic Operator Program.

Administrative and operational employees must know the procedures established by the Customs Broker to consider a risk situation and know how to report it. Specific training must be provided to employees who, due to their functions, are in direct contact with goods and/or means of transport, as well as to employees who are in critical and/or sensitive areas determined under their risk analysis (security areas, shipments and receipts, if applicable, as well as those who receive and open mail and packages, among others).

10.1 Training and awareness on threats.
The Customs Broker must have a training and awareness program on supply chain security policies, directed to all its employees (operational and administrative), and additionally make informational material available regarding the procedures established by the Customs Broker to consider a situation that threatens its security and know how to report it.

These training programs must encourage active employee participation in security controls and mechanisms. The Customs Broker must ensure that all its employees know, understand, and apply supply chain security policies, as well as keep records of all training efforts provided and the list of those who participated in them.

Likewise, and with the purpose of maintaining the integrity of operations and processes related to the customs clearance of goods, personnel must receive specific training according to their functions. The topics that must include are the following: maintain cargo integrity, conduct container, trailer, and/or semi-trailer reviews for agricultural and security purposes (if applicable), receive and review mail and packages, prevent operations with proceeds of illicit origin (money laundering, terrorist financing, etc.), how to recognize and how to report internal conspiracies, protection of access controls, as well as training regarding smuggling, cargo theft, placement of seals, control of high-security seals (VVTT inspection method), prevention of visible contamination by pests, use of official badges, etc. These topics must be established as part of new employee onboarding and periodically maintain update programs. Update training must be carried out periodically, after a security incident, and when there are changes in the Customs Broker's procedures.

In addition to security training programs, a program on awareness of alcohol and drug consumption must be included. Also, disseminate and train personnel on the Customs Broker's cybersecurity policies, procedures, and standards (theft, leakage, hacking, and/or information kidnapping), including access to computer equipment and systems via passwords or phrases. Personnel who operate and administer security technology systems must receive training related to their operation and maintenance, including self-training through operational manuals and other methods.

These topics must be established as part of new employee onboarding and periodically maintain update programs.

Training programs must encourage active employee participation in security controls and mechanisms, as well as keep records of all training efforts provided by the Customs Broker and the list of those who participated in them (videos, photographs, minutes, attendance lists, intranet or other system, didactic material, PowerPoint presentations, brochures, etc.). Training records must include the date of the training, the names of the attendees, the topics taught, in addition to having measures to verify that the training provided met all training objectives.

Answer: Explanatory Notes:
Must have a training program on security and prevention of security incidents in the supply chain for all employees working for the Customs Broker (administrative, operational, direct or indirect).
Briefly explain what the training program consists of and make sure to include the following:
I. Brief description of the topics taught in the program.
II. When they are taught (Onboarding, specific periods, due to audits, security incidents, etc.).
III. Frequency of training, as well as updates and reinforcement.
IV. Indicate how participation in supply chain security training is documented (videos, photographs, minutes, attendance lists, intranet or other system, didactic material, PowerPoint presentations, brochures, etc.). Training records must include the date, the names of the attendees, the topics taught, in addition to having measures to verify that the training provided met all the objectives of the same.
V. Explain how employee participation in security matters is encouraged.

Training to perform reviews of cargo vehicles, containers, trailers, and/or semi-trailers for agricultural and security purposes must include the following topics:

I. Signs of hidden compartments;
II. Smuggling hidden in natural compartments;
III. Signs of pest contamination; and
IV. Procedures to follow if something is found during a transport medium inspection or if a security incident occurs during transit.

Training on agricultural reviews must cover pest prevention measures, regulatory requirements applicable to wooden packaging materials, in accordance with the International Standard for Phytosanitary Measures No. 15 called Regulation for Wood Packaging Used in International Trade, which emanate from the Food and Agriculture Organization of the United Nations and the identification of infested wood.

Handling and investigation of incidents.
There must be documented procedures to report and investigate security incidents in the supply chain and the actions to be taken to prevent their recurrence, as well as to notify security personnel, business partners who may be part of the affected supply chain, security specialist or Authorized Economic Operator Program contact, and other competent authorities. Reporting and investigation procedures must include updated contact information or directory listing the names and phone numbers of personnel requiring notification. The investigation and analysis of incidents must be documented (physical and/or electronic file), as well as corrective actions to prevent them from happening again, which must be implemented as soon as possible.

In the case where the Customs Broker identifies that any foreign trade shipment is involved in a situation that puts the supply chain security at risk, due to suspicion of a business partner or person, it must inform the competent authority, business partners who may be part of the affected supply chain, security specialist or Authorized Economic Operator Program contact, as well as the competent authority, and if possible, before the border crossing, exit, or customs clearance (import and export). Procedures must include the steps to follow if it is discovered that a seal is altered, manipulated, or there is an incorrect seal number in the documentation, the communication protocols to business partners involved in the supply chain, and the investigation of the incident. All the aforementioned procedures must be reviewed periodically or at least once a year to ensure that contact information and action protocols are correct.

11.1 Reporting of anomalies and/or suspicious activities.
In case of detection of anomalies and/or suspicious activities related to supply chain security and in accordance with its logistical processes (related to access control, delivery, receipt, and storage of goods, security inspections of cargo vehicles and transport operators, etc.), these must be reported to security personnel, business partners who may be part of the affected supply chain, security specialist or Authorized Economic Operator Program contact, and other competent authorities, keeping a record of said anomalies and/or unusual activities.

Answer: Explanatory Notes:
Describe the procedure to denounce or report anomalies and/or suspicious activities, as well as the mechanisms to anonymously report problems related to security. Make sure to include the following:
I. Who is responsible for reporting security incidents.
II. Detail how it determines and identifies with which authority to communicate in different scenarios or presumption of suspicious activities.
III. Mention if it keeps a record of the report of these activities and/or suspicions and briefly describe what it consists of.

11.2 Investigation and analysis.
There must be written procedures to denounce or report anomalies and/or suspicious activities, the analysis and investigation of security incidents in the supply chain to determine their cause, in addition to corrective actions to prevent them from happening again, which must be implemented as soon as possible. The information derived from this investigation must be documented and available at all times for authorities that require it.

This information and documentation generated to carry out the foreign trade operation of the affected goods must be included in a file for the purpose of identifying each of the processes through which that operation went until the point where the incidence was detected and that allows recognizing the vulnerability of the chain.

Answer: Explanatory Notes:
Describe the documented procedure to initiate an investigation in case of a security incident, and make sure to include the following:
I. Person responsible for carrying out the investigation.
II. Documentation that integrates the investigation file of the foreign trade operation.

The documents to be included in the file derived from the investigation, in an enumerative but not limiting manner, may be:
I. General information of the shipment, purchase order.
II. Transport request; confirmation of transport medium; identification of the transport operator (access records, exit records, records of security inspections, etc.).
III. Container Inspection Formats; exit order; delivery records.
IV. Videos from alarm systems and closed-circuit television and video surveillance.
V. Documentation generated for the carrier (packing list, bill of lading, instruction sheet).
VI. Documentation generated for business partners (description of goods, proformas, invoices, etc.).
VII. Documentation generated by business partners (customs declarations, manifests, tracking and inspection reports, videos if applicable, etc.).

E5.
Land Auto Carrier Profile
Acknowledgment of Receipt
First Time: Renewal:
Addition:
Modification:
The data you provide will replace the data you provided when you requested your authorization.

General Information.
The objective of this Profile is to ensure that the land auto carrier implements security practices and processes that ensure their supply chain, mitigating the risk of contamination of their vehicles with illicit products, as well as loss, theft, and/or any other factor that could compromise the security of the supply chain.

Land auto carriers interested in obtaining the authorization referred to in Rule 7.1.5. must have documented and verifiable processes.
Likewise, the transport company interested in the aforementioned authorization must integrate the criteria required in this document into the business model or design it has established, seeking during the implementation of security standards the application of an analysis culture that supports decision-making consistent with the company's values, mission, vision, codes of ethics, and conduct.

As an example of the points or topics requested of interested parties during the completion of this document, which require analysis to identify risks affecting the supply chain and help detect their treatment, are the following: origin and destination points, routes, facilities, volume of operations, yard security, previous security incidents, interaction with business partners, among others.

Filling Instructions:
I. You must fill out a Land Auto Transport Profile of the main facility, as well as each of the main facilities where vehicles are used and safeguarded for the transfer of foreign trade merchandise. In the case of yards and/or branches that are also under the same RFC, a Profile must be developed for each of them, strictly following what is established in sub-standard 7.3. of this document. This information must match what was stated in your application for Certified Business Partner.

II. Detail how the company complies with or exceeds what is established in each of the sections as indicated.

III. The format of this document is divided into two sections, as detailed below:

Standard.
Description of the standard
1.1 Sub-standard.
Description of the sub-standard
Response. Explanatory Notes.
Describe and/or attach... a) Points to highlight...

IV. Indicate how you comply with what is established in each of the sub-standards; therefore, you must attach the procedures in Spanish. These procedures must be characterized by describing or defining the objective the document pursues, the start and end of the process, measurement indicators, requirements, documents or formats to be used, responsible parties, among others.

V. In cases where only an explanation of the procedure is required, it must be detailed and placed in the Response field.
The field regarding Explanatory Notes is a guide regarding the points that must be included in the Response of each sub-standard, indicating in an indicative manner those points that should not be excluded from your response.

VI. Once this Land Auto Carrier Profile is completed, it must be attached to the Application for registration in the Certified Business Partner registry referred to in the first paragraph of Rule 7.1.5., fraction I, subsection b).

VII. For the purpose of verifying what was stated in the previous paragraph, the SAT through AGACE may conduct an inspection of the facility indicated here, with the exclusive purpose of verifying what is stated in this document.

VIII. Any incomplete Land Auto Carrier Profile will not be processed.

IX. Any questions regarding the Application for Certified Business Partner and the Land Auto Carrier Profile should be directed to the contacts appearing on the SAT Portal.

X. In the event of being authorized as a Certified Business Partner, this format must be kept updated and notice must be given when the circumstances under which the registration was granted have varied and, as a result, changes or modifications are required in the information provided in this Land Auto Carrier Profile to the authority in accordance with what is established in Rule 7.2.1., fourth paragraph, fractions I, II, and VII.

XI. When, as a result of the inspection visit, non-compliance related to minimum security standards results, the applicant may remedy them before the issuance of the resolution established in Rule 7.1.6., for which they will have a maximum period of three months counted from the notification of the indicated non-compliances.

Facility Data.
A Land Auto Transport Profile must be filled out for the main facility, as well as each of the main facilities where vehicles are used and safeguarded for the transfer of foreign trade merchandise. And in the case of yards and/or branches that are also under the same RFC, a Profile must be developed for each of them, as well as strictly following what is established in sub-standard 7.3. of this document. This information must match what was stated in your application for Certified Business Partner.

Facility Information. Land Auto Carrier Profile Number:
from:
RFC Key: Name and/or Business Name:
Name and/or Denomination of the
Facility
Type of Facility:
Street: Exterior Number and/or Letter Interior Number and/or Letter Neighborhood: Postal Code: Municipality/Delegation: Federal Entity:
Facility Age (years of operation):
Predominant Activity (Transfer / Long
Distance):
Service Type (General/Specialized
Cargo):
Average number of monthly shipments (EXP):
(Long distance and/or crossing)
Average number of monthly shipments (IMP):
(Long distance and/or crossing)
Total number of employees at this facility: Facility Surface Area (m2 ):
Total number of yards and/or branches (owned and/or subleased) that are enabled and used for the storage of transport means:

Certifications in security programs: (Indicate if this facility has a certification from any of the following programs) CTPAT: Yes No Level: Pre-Applicant: Applicant: Certified: Certified/ Validated:
CTPAT Account number
(Eight digits):
Date of last visit at this facility:
Authorized Economic Operator from other countries (AEO) Yes No Program: Registration:
Other Supply Chain Security Programs
Yes No Program: Registration:
Certifications: (Indicate if you have certifications that you consider impact your supply chain process, for example: ISO 9000; Reliable Logistics Processes, among others) Name: Category: Validity:
Name: Category: Validity:
Name: Category: Validity:

Supply Chain Security Planning.
The transport company must develop documented policies and procedures to carry out risk management that allows the identification, analysis, evaluation, and treatment of risks and weaknesses in its supply chain and facilities, with the objective that the company's senior management implements strategies that help mitigate and dissuade such risks and thereby contribute elements that strengthen supply chain security. Likewise, to build a solid supply chain security program, the company must have a Security Committee that incorporates representatives from all relevant departments, forming a multifunctional team that identifies areas for opportunity and proposes continuous improvement actions throughout the company's supply chain and facilities. Similarly, the company must have designated points of contact for the Authorized Economic Operator Program. This personnel must be involved, know the requirements of the Authorized Economic Operator Program, belong to the company, and prove their relationship with it, as well as respond to their supply chain security specialist (this is assigned once the company already has the Authorized Economic Operator Program). If, as a result of the risk analysis, new security measures arise to be incorporated into the company, these must be included in the company's existing procedures and, if necessary, new procedures must be developed, which creates a more sustainable structure and emphasizes that supply chain security is everyone's responsibility.

1.1 Risk Analysis.
The transport company must establish measures to identify, analyze, and mitigate security risks throughout the supply chain, including its facilities. Therefore, it must develop a written procedure in which risks are determined based on its organizational model (e.g., volume, units, yards, routes, potential threats, etc.), which allows it to implement and maintain appropriate security measures. In accordance with the above, the company must also have a written process based on its risk analysis to select new business partners and monitor those with whom it is already working. This procedure must be carried out at least once a year, so that it allows identifying other risks or threats in the operation that may arise as a result of an incident or that originate from changes in the company's initial conditions, as well as to identify whether policies, procedures, and other control and security mechanisms are being complied with. It is important to note that the company's Security Committee must participate in the preparation and updating of the risk analysis and the maintenance of the Authorized Economic Operator Program. Response: Explanatory Notes:
Attach the risk matrix and the documented procedure you use to identify risks in your daily operations throughout the supply chain and its facilities (yards and/or branches, offices, boarding houses, mechanical workshops, etc.) must include at minimum the following points:
I. Periodicity with which this
procedure is carried out.
II. What aspects and/or areas of the transport
company are incorporated into the risk analysis.
III. Service Type:
a) Long distance. b) Internal and international transit. c) Transfer. d) Consolidated.
IV. Methodology or techniques used to perform the
risk analysis.
V. Responsible parties for reviewing and/or updating the risk
analysis of the company.

Likewise, the documented procedure for identifying risks in the supply chain and its facilities must contemplate the process of risk appreciation and management, and include the following aspects:
I. Establishment of a context (cultural, political,
legal, economic, geographic, social, etc.).
II. Identification of risks in its supply chain
and its facilities.
III. Risk analysis (causes, consequences,
probabilities, and existing controls to determine the risk level as high, medium and low).
IV. Risk evaluation (decision-making to
determine the risks to be treated and priority for implementing the treatment).
V. Risk treatment (application of alternatives
to change the probability of risks occurring).
VI. Risk monitoring and review (monitoring of
the results of the risk analysis and verification of the effectiveness of its treatment).
It is suggested to use risk evaluation techniques in accordance with the current international standard ISO 31000, and specifically ISO 31010, where according to your business model you must implement.

1.2 Security Policies.
Companies must have a manual of policies oriented towards preventing, ensuring, and recognizing threats to the security of the supply chain and company facilities, such as drug trafficking, arms trafficking, human smuggling, prohibited merchandise, and acts of terrorism. To promote a security culture, companies must demonstrate their commitment to supply chain security and the Authorized Economic Operator Program through a statement highlighting the importance of protecting the flow of national and international commerce from criminal activities, established through the security policy. Senior officials or executives of the company who must endorse and sign the security policy may include the company president, the executive director, the general manager, the security director, or personnel with equivalent rank with decision-making authority.

Response: Explanatory Notes:
State the security policy oriented towards preventing, ensuring, and recognizing threats in the supply chain and company facilities focused on guaranteeing the integrity of its resources (units, operators, facilities, yards and/or branches, etc.) as well as to ensure the transfer of goods, property of third parties or own, and indicate who is responsible for its review and signature and dissemination to employees, as well as the periodicity with which its update is carried out. This policy must be communicated to employees through a program and/or dissemination campaign. The security policy must be signed by a senior official of the company and be displayed in various areas of the company, including the company website, posters in key areas of the company (reception, shipments, receipts, warehouse, etc.), and as part of initial and reinforcement training.

1.3 Internal Audits in the Supply Chain.
In addition to routine monitoring in control and security, it is necessary to schedule and carry out audits, at least once a year, that allow evaluating all processes regarding supply chain security in a more critical and profound way, as well as guaranteeing that employees follow the company's security procedures. Audits must be carried out by the company's Security Committee and a documented procedure must be established, as well as a program or calendar for their execution. Although it is necessary that audits are focused on supply chain security and based on the evaluation, review, and execution of minimum security standards, their focus must be adjusted to the size of the organization, risk level, business model, and variations between facilities. Audits can be general or focus on specific areas or processes according to their work program. The objective of an internal audit focused on the Authorized Economic Operator Program is to verify and guarantee that employees follow the company's security procedures. The review process does not have to be complex; however, the formats and records used for the application of these reviews must evidence that the application and execution of the evaluated processes were validated, in addition to the follow-up and closure of preventive, corrective, and improvement actions identified. The senior management of the organization must review the results of the audits and undertake the required corrective or preventive actions. The audit process must guarantee that the necessary information is collected to allow management to make this evaluation. The review must be documented, in addition to the fact that the company's Security Committee must provide and register periodic updates on the progress or results of any audit, exercise, or validation.

Response: Explanatory Notes:
Describe the documented procedure to carry out an internal audit, focused on security in the supply chain, ensure you include the following points:
I. Indicate how the company carries out the
scheduling or calendarization to perform an internal audit, in terms of security, in the supply chain.
II. Indicate who participates in them, and the records
that are made of them, as well as the periodicity with which they are carried out.
III. Indicate how the Company Management
verifies the results of security audits, how it carries out and/or implements preventive, corrective, and improvement actions in addition to the follow-up and closure of the same.
IV. The formats used during internal audits
must be properly filled out, and through them, evidence that procedures and security measures are being put into practice.

1.4 Contingency and/or Emergency Plans.
There must be a documented contingency and/or emergency plan. This plan must address crisis management, security recovery plans, and business resumption, to ensure business continuity in the event of a situation that affects the normal development of activities and operations of the transport company. A crisis or contingency may include the interruption of the transmission and exchange of commercial data due to a cyberattack, a fire, the kidnapping of a transport driver by armed individuals, a customs closure, a bomb threat, the detection of suspicious packages, a power outage, theft and/or damage to merchandise, threats or extortion, blockages or road closures, and when the operator identifies that they are being observed or followed during the transfer of merchandise, among others. Such plans must be communicated to personnel through periodic training, as well as carrying out tests, practical exercises, and annual simulations of the contingency and emergency plans to verify their effectiveness, from which a properly filled out and signed record must be maintained (for example: result reports, minutes or reports, which must be backed up by video recordings, photographs, etc., demonstrating their execution). The contingency and/or emergency plan must be updated as necessary, based on changes in operations and the organization's risk level.

Response: Explanatory Notes:
Attach the documented contingency and/or emergency procedure or plan, to ensure the continuity of the business in the event of an emergency or security situation, that affects the normal development of the company's foreign trade activities. This procedure must include, by way of example but not limitation, the following:
I. What situations it contemplates by describing the action plan and steps to be followed in case of
crisis, as well as the tasks that personnel have assigned during the handling of such contingencies.
II. What mechanisms it uses to disseminate and
ensure that these plans are effective.
III. Contemplate the scheduling and execution of
tests, practical exercises, and annual simulations and how they are documented (for example:
result reports, minutes or reports, which must be accompanied by video recordings, photographs, etc., demonstrating their execution).
In the case of transport companies of Hazardous Materials and Waste, an emergency sheet must be attached indicating the actions to be taken for cases of incident or accident (leaks, spills, explosions, fires, etc.).

Physical Security.
The transport company must have established mechanisms to prevent, detect, or dissuade the entry of unauthorized personnel into its administrative offices, yards (branches) and/or boarding houses where it safeguards information and transport means (tractors), containers, trailers, or semi-trailers respectively. All sensitive areas of the company must have physical barriers, control elements, and dissuasion against unauthorized access.

2.1 Facilities.
Facilities must be constructed with materials that can resist unauthorized access. Periodic documented inspections must be carried out to maintain the integrity of the structures, and in the event that an irregularity has been detected, the corresponding repair must be carried out as soon as possible by the personnel designated for these tasks. Likewise, territorial limits, as well as various accesses, internal routes, and the location of buildings must be fully identified. Response: Explanatory Notes:
Indicate the predominant materials with which the facilities are constructed (for example, metal structure and sheet metal walls, brick walls, wood, among others and indicate how the review and maintenance of the integrity of the structures is carried out. Indicate the personnel or area responsible for carrying out the tasks of inspection, maintenance, and repair of damage to the facilities. Explain how you carry out the review and maintenance of the integrity of the structures. Attach a general distribution or architectural plan, where limits, access routes, the location of offices, parking lots, critical areas, boundaries, yards and /or boarding houses can be identified.

2.2 Accesses at Gates and Booths.
The entrance or exit doors of vehicles and/or personnel accessing the yards and/or boarding houses of cargo vehicles and administrative offices must be attended and/or supervised either by own personnel or by security personnel. The number of access doors must be kept to the minimum necessary. Access to sensitive areas must be restricted according to the job description or assigned tasks. Response: Explanatory Notes:
Indicate how many doors and/or accesses exist in the facilities, as well as the operating hours of each one, and indicate how they are monitored (In case of having assigned personnel, indicate the quantity).
Detail if there are doors and/or accesses blocked, or permanently closed.
Describe how you ensure that access to sensitive areas is restricted according to the job description or assigned tasks (include the type of records and controls you use).

2.3 Perimeter Walls.
Perimeter walls and/or peripheral barriers must be installed to secure the company's perimeters, in accordance with a risk analysis. The areas of the yards and/or parking lots must be delimited for cargo vehicles (tractors), trailers and/or semi-trailers and/or containers as appropriate. These must be inspected regularly and maintain a record of the review in order to ensure their integrity and identify damage, which must be repaired as soon as possible by the personnel designated for these tasks. In the case of providing cargo storage services, this zone must be clearly delimited, identified and monitored according to the required service (national or international, as well as high-value and dangerous) to prevent unauthorized entry. Response: Explanatory Notes:
Describe the type of fence, peripheral barrier and/or walls that the company has, make sure to include the following points:
I. Indicate the characteristics of the same
(material, dimensions, etc.).
II. In case of not having walls, justify
in detail the reason.
III. Frequency with which the integrity
of the perimeter walls is verified, and the records that are carried out in order to ensure their integrity and identify damage, which must be repaired as soon as possible.
IV. Indicate the personnel or area responsible for
performing inspection and repair tasks damage.
V. Indicate how your yards are divided (describe
briefly, how they separate tractors, containers, trailers and/or semi-trailers domestic and/or international cargo, empty, in repair and/or maintenance; vehicles cargo; workshops; offices; among others).

The procedure for the inspection of the walls perimeter could include:
I. Responsible personnel to carry out the
process.
II. How and how often the inspections of the fences, perimeter walls
and/or peripheral and buildings.
III. How the inspection record is kept.
IV. Who is responsible for verifying that
repairs and/or modifications comply with the technical specifications and security requirements necessary.
2.4 Parking.
Access to the parking lots of the facilities must be controlled and monitored by security personnel or designated for this task. Private vehicles (of employees, visitors, suppliers and contractors, among others) must be prohibited from parking within the areas for handling and storage of means of transport, containers, trailers and semi-trailers, as well as in adjacent areas. Response: Explanatory Notes:
Describe the procedure for the control and monitoring of parking, make sure to include the following points:
I. Those responsible for controlling and monitoring the
access to parking lots.
II. Identification of parking lots
(specify if employee parking, visitors, is separated from means of transport, containers, trailers semi-trailers and cargo handling).
III. How entry and exit control is carried out
vehicles to the facilities. Indicate the records that are made for the control of the parking and the existing control mechanisms (for example: badges, cards readers, badges, etc.), how they are assigned and the responsible area for doing so.
IV. Policies or mechanisms to not allow the
entry of private vehicles to the areas of storage of means of transport and in its case cargo handling.

2.5 Control of keys and lock devices.
According to the risk analysis, windows, doors and inner and outer fences must be secured with locking devices. The transport company must have documented procedures for the handling, safeguarding, assignment and control of the keys of the facilities, of the inner areas that have been considered as critical and of the cargo vehicles, designating those responsible for the administration, control and registration of these. Likewise, a record must be kept and establish signed responsibility letters from the people who based on their functions have keys or authorized access. Response: Explanatory Notes:
Indicate if all doors, windows, entries inner and outer have closure mechanisms or security.
Attach the documented procedure(s) for the control, safeguarding, assignment and handling of the keys of the means of transport and of the facilities, offices and inner areas.
Ensure that these procedures include the following points:
I. Those responsible for administering and controlling the
security of the keys.
II. Format and/or control record for the loan
of keys.
III. Treatment of loss or non-return of
keys.
IV. Indicate if there are areas in which access
with electronic devices and/or some other access mechanism.
In case of using key locks that are placed in containers, trailers and/or semi-trailers within the facilities describe in detail the criteria for the handling, control and safeguarding of the keys of said locks.

2.6 Lighting.
Lighting inside and outside the facilities must allow clear identification of people, material and/or equipment that is there, including the following areas: entrances, exits, parking or storage areas for tractors, trailers, rolling stock, perimeter walls and/or peripheral, inner fences, loading, unloading, handling and storage of cargo (in case of providing this service). An emergency and/or backup system must be available in sensitive areas. Response: Explanatory Notes:
Describe the procedure for the operation and maintenance of the lighting system. Make sure to include the following points:
I. Indicate which areas are illuminated and
which have a backup system (Indicate if you have an auxiliary power plant or any other mechanism to supply electricity in case of any contingency).
II. How do you ensure that the system of
lighting is appropriate in each of the areas of the company, in such a way that it allows a clear identification of personnel, material and/or equipment it covers.
III. Person responsible for the control and maintenance of the
lighting systems.
IV. Maintenance and review program (in case
of coinciding with another process, indicate it).
The procedure may include:
I. How the lighting system is controlled.
II. Operating hours.
III. Identification of areas with lighting
permanent.
2.7 Communication devices.
The transport company must have devices and/or communication systems in order to have immediate contact with the personnel of security and/or with emergency and security authorities when required. Additionally, a backup communication system must be available and verify its good functioning periodically.

Response: Explanatory Notes:
Describe the procedure that personnel must perform to contact security personnel or in case, with the corresponding authority in case of any incident.
Indicate if operational and administrative personnel have or dispose of devices (landline phones, mobile phones, alert and/or emergency buttons), to communicate with the security personnel and/or whoever corresponds (these must be accessible to users, to be able to have a quick reaction). Indicate what communication devices the personnel of security in the transport company (landline phones, cellulars, radios, alarm system, etc.). Describe the procedure for the control and maintenance of communication devices, make sure to include the following points:
I. Policies for the assignment of devices of
mobile communication.
II. Maintenance or replacement program of
fixed and mobile communication devices.
III. Indicate if you have communication devices
backup when the permanent system fails, and if so, detail briefly.
IV. Indicate if the operators/drivers of the company
use phones, radios, cell phones, civil band
(CB), or any other means for their communication internal and the assignment policies of the same.
The procedure may include:
I. Responsible for the good functioning and
maintenance of communication devices.
II. Verification and maintenance record of the
apparatus.
III. Method of assignment of devices of
communication.

2.8 Alarm systems and closed circuit television and video surveillance.
Alarm systems and closed circuit television and video surveillance and security technologies, must be used to monitor, notify or deter unauthorized access and prohibited activities in the facilities and other areas considered sensitive, notify the corresponding area, in addition to being used as a tool of proof in investigations derived from any incident. These systems and security technologies must be placed according to a prior risk analysis, in such a way that they remain watched and monitored areas that imply the access of personnel, visitors, suppliers cargo, loading and unloading and cargo and passenger vehicles and other areas considered sensitive, also, the areas where vehicles and containers are usually located (parking lots, storage where they stay overnight) and in case where they store the goods (if you provide this service). Such systems must allow clear identification of the area or environment being monitored, be permanently recording and maintain a backup of the recordings for at least one month, considering that, in the case that your logistics processes exceed this period, the period of maintenance of these backups, in order to have the necessary elements to disclaim the corresponding responsibilities in case of a security incident. Alarm systems and closed circuit television and video surveillance and security technologies, must have a documented procedure of operation that includes supervision of the good condition of the equipment and verification of the correct position of the cameras, indicating the frequency with which the backup of the recordings must be performed, as well as those responsible for their operation. Such a system and all the infrastructure of security technology must have restricted access. Response: Explanatory Notes:
Mention the documented procedure in which indicates the functioning of the external alarm system or sensors, and if so, describe the following points:
I. Indicate if doors and windows have sensors
of alarm or motion sensors.
II. Procedure to follow in case of activating a
alarm.
Describe the documented procedure for the operation of alarm systems and closed circuit television and video surveillance and technologies of security, (this must be reviewed and updated annually and according to the risk analysis or the circumstances), make sure to include the following points:
I. Indicate the number of cameras of the systems of
alarm and closed circuit television and video surveillance installed, technical characteristics and their location (detail if it covers the entry points and exit of the facilities, to cover the movement of vehicles and individuals, as well as the place of storage of vehicles).
II. Indicate the location of the alarm systems and closed circuit television and video surveillance
and security technologies, where the monitors are located, who reviews them, as well as the operating hours, and if there are remote monitoring stations. All the security technology infrastructure must be physically protected against unauthorized access.
III. Perform periodic and random reviews of the
recordings. Indicate how they are reviewed
(random, every week, special events, restricted areas, etc.), who is the personnel designated and if management is involved in the reviews. The results of the reviews must be documented to include actions corrective for audit purposes.
IV. Indicate for how long these are kept
recordings (must be at least one month).
V. The alarm systems and closed circuit television and video surveillance and security technologies must have a source of
alternative energy that allows these to continue functioning in case of an unexpected loss of direct energy. For this reason, indicate if the alarm systems and closed circuit television and video surveillance and security technologies are backed up by an electrical power plant or any other mechanism to supply electricity energy, that guarantees its functioning. These systems should have a function of alarm/notification, indicating a condition of failure in the functioning and/or recording, indicate if your systems have such a function.

VI. Indicate if in addition to the systems of
alarm and closed circuit television and video surveillance, uses any other type of technology to strengthen the security measures with which it already has.
VII. Describe the procedure that has been
implemented to test and inspect regularly the alarm systems and closed circuit television and video surveillance and security technologies and ensure their good functioning. The results of the inspections and the functional tests are documented, as well as the actions corrective necessary (these must be implemented as soon as possible). Additionally, that the documented results of these inspections are kept for a time sufficient for audit purposes.
VIII. Indicate if the alarm provider and alarm systems and closed circuit television and video surveillance, has access to the cameras
of security, if it is in charge of performing the monitoring of the same, in what way the accesses are controlled and who is responsible for said monitoring.
3. Physical access controls.
Physical access controls are mechanisms or procedures that prevent and prevent unauthorized entry to the facilities (administrative offices, yards and/or parking lots of the means of transport, cargo warehouse (in case of providing this service), as well as maintaining control of entry to the operators/drivers, administrative personnel and/or visitors and protect the company's assets. Access controls must include the identification of all employees, visitors and suppliers at all entry points. Likewise, they must be maintain records and permanently evaluate the mechanisms or documented procedures for entry to the facilities, being the basis for starting to integrate security as one of the primary functions within any company.
3.1 Security personnel.
The transport company must have security and surveillance personnel. This personnel plays an important role in the physical protection of the facilities, of the yards and/or parking lots where the cargo vehicles (tractors), trailers and containers are stored, as well as for controlling the access of all people to the property. Security personnel must have a documented procedure to carry out their functions, and have full knowledge of the mechanisms and procedures in emergency situations, detection of unauthorized persons, or any incident in the facilities. Management must verify periodically the compliance of procedures policies and functions through internal audits in order to verify their correct execution.

Response: Explanatory Notes:
Describe the documented procedure for the operation of security personnel, and make sure to include the following points:
I. Indicate the number of security personnel that
works in the company.
II. Indicate the positions and/or functions of the personnel, and
operating hours.
III. In case of hiring an external service,
specify number of personnel employed, operating details, records, reports, etc.
IV. In case of having armed personnel;
describe the procedure for the control and safeguarding of weapons.
3.2 Identification of employees, visitors and suppliers.
There must be an identification system for employees, visitors and suppliers for the purpose of access to the facilities. Employees should only have access to those areas they need to perform their functions. Visitors and suppliers must present an official identification with a photograph upon their arrival and a record must be kept. All visitors and suppliers must receive a temporary identification and be accompanied by company personnel during their stay in the facilities and ensure that the visitor/supplier always wears the provisional identification provided in a visible place. This procedure must be documented. The management or security personnel of the company must properly control the delivery and return of identification badges for employees, visitors and suppliers and ensure that they always wear the identification provided in a visible place. This procedure must be documented, as well as the procedures for the delivery, return and change of access devices (for example, keys, proximity cards, etc.). Access to the sensitive areas must be restricted according to the job description or assigned tasks. Response: Explanatory Notes:
Attach the documented procedure for the control of identifications.
Describe the procedure for the identification of the employees, and make sure to include the following points:
I. Identification mechanisms (photo ID,
uniform, etc.).
II. Indicate if employees use uniforms, how
they are assigned (by position, area, functions, etc.) and withdrawn (if applicable).

III. Indicate how contracted personnel is identified
by a business partner, who works within the facilities (contractors, sub-contractors, etc.).
The procedure must also describe how the company delivers, changes and withdraws employee identifications and access controls and make sure to include the responsible areas for authorizing and administering.
Indicate how you ensure that access to the areas sensitive is restricted according to the job description or assigned tasks (include the type of records and controls you use).
Describe the procedure for the access control of visitors and suppliers, make sure to include the following points:
I. Indicate what records are kept (Formats
personal for each visit, logbooks).
II. The record of visitors and suppliers must
include the following:
a) Date of the visit; b) Visitor's name; c) Identification number with photo (official documents such as: driver's license, passport, INE, etc.); d) Time of entry and exit. e) In the case of vehicular access, the format must include the data of the vehicle private or cargo (model, plate, trailer number, etc.).
III. Indicate who is the person responsible for
accompanying the visitor and/or supplier, and if there are restricted areas for their entry.

3.3 Procedure for identification and removal of unauthorized persons or vehicles.
The company must have documented procedures that specify how to identify, confront or report unauthorized or identified persons and/or vehicles.
Response: Explanatory Notes:
Attach the documented procedure to identify, confront or report persons and/or vehicles not authorized or identified.
The procedure must include:
I. Responsible personnel.
II. Designate a person or area responsible for
being informed of incidents.
III. Instructions for confronting and addressing the personnel
unidentified.
IV. Indicate in what cases it should be reported to the
corresponding authorities.
V. How the record of the
incidents and the measures adopted in each case.
3.4 Courier and package deliveries.
Courier and packages intended for company personnel must be examined upon arrival and before being distributed to the corresponding area. Likewise, the transport company must have a documented procedure for the receipt and review of courier and packages, which must be communicated to the responsible personnel through training. The training must be documented. Response: Explanatory Notes:
Describe the procedure for the receipt and review of courier and packages and make sure to include the following:
I. Personnel in charge of carrying out the
procedure.
II. Indicate how the personnel or
provider of the courier and package service is identified (indicate if it requires additional procedure to supplier access).

III. Indicate how packages are reviewed and/or what mechanism is used, as well as the records kept and, where applicable, the incidents detected.

IV. Indicate what action is taken in the case of detecting a suspicious package.

V. Indicate how the inspection record is kept and, where applicable, the incidents detected.

Commercial Partners.

The transport company must have written and verifiable procedures for the selection and hiring of new commercial partners and monitoring of partners already working with them, such as: manufacturing companies, manufacturers or assemblers, parts and/or spare parts suppliers, mechanical suppliers, high-security seal suppliers, Information Technology systems suppliers, installation and maintenance of alarm systems, closed-circuit television and video surveillance systems, or any other service, and according to their risk analysis, require them to comply with security measures to strengthen the international supply chain.

The risk analysis carried out by the transport company regarding its commercial partners (clients and suppliers) must include risks related to the identification of activities related to money laundering and terrorism financing. Additionally, the transport company must foster a documented social compliance policy and program that, at a minimum, addresses how among its employees and commercial partners they could guarantee that goods, inputs, or merchandise from Mexico for the manufacture of products or merchandise do not come from extraction, production, or manufacturing, totally or partially, with prohibited forms of labor, that is, forced or compulsory, including forced or compulsory child labor, under Article 23.6 of the T-MEC and the Agreement that establishes the merchandise whose importation is subject to regulation by the Secretariat of Labor and Social Welfare, published in the Official Gazette of the Federation (DOF) on February 17, 2023.

4.1 Selection Criteria.

There must be documented procedures for the selection, follow-up, or renewal of commercial relationships with business associates or suppliers, which include interviews, reference verification, evaluation methods, and use of provided information. The procedure for the selection of commercial partners must include, indicators to detect clients or suppliers that may not be legitimate or with unlocated addresses, in addition to investigations, reviews, or evaluations of said partners for the identification and control of activities related to money laundering and terrorism financing. If the investigation and/or evaluation of any commercial partner leads to substantial doubts about the veracity of their operations or services, the company must avoid hiring them and, where applicable, notify its security specialist or Authorized Economic Operator Program contact and the corresponding authority about its suspicions.

Response: Explanatory Notes:
Attach the documented procedure for the selection and hiring of new commercial partners and monitoring of partners already working with them (this includes any type of provider that has a commercial relationship with your company; it is in the following sub-standard where it is requested to differentiate those at risk in your supply chain) and ensure it includes the following points:

I. What information is required from your commercial partner.

II. What aspects are reviewed and investigated.

III. The indicators to identify clients or suppliers that may not be legitimate or with unlocated addresses. This point refers to indicating all those alerts to determine that a commercial partner is not reliable and thus, conduct a deeper investigation and evaluate whether to work with them.

IV. Indicate if you maintain a file for each of your commercial partners, as well as the information it must contain.

V. Indicate how the services of your commercial partner are evaluated and what points you review.

The file must include at least the following:

I. Company data (name, tax ID key (RFC), activity, etc.).

II. Legal representative data.

III. Proof of address.

IV. Commercial references (where applicable).

V. Contracts, agreements, and/or confidentiality agreements.

VI. Security policies.

VII. Where applicable, certificate or certification number in the security programs to which it belongs.

4.2 Security Requirements.

The transport company must have a documented procedure in which, according to its risk analysis, it requests additional security requirements from those commercial partners that intervene in its supply chain such as, Sub-contracted Transporters, Customs Brokers, Private Security, warehouses, pensions, companies that provide the service of Repair of Transport Means, Service Providers for Loading and Unloading of merchandise, cleaning service providers, private security, hiring of personnel, high-security seal suppliers, collection and recycling, as well as those resulting from the analysis carried out.

The requirements must be based on the Land Auto Transporter Profile established by the AGACE, or in case it exists, the specific Profile for each actor in the supply chain that corresponds to them.

The company must request from its commercial partners the documentation that accredits and proves that they comply with the minimum security standards established in this Land Auto Transporter Profile, either through a written declaration issued by the legal representative of the partner, agreements or contractual clauses backed by documentation that supports compliance with the requirements established in the Authorized Economic Operator Program.

Likewise, the transport company must take into account and know the specific requirements of the Authorized Economic Operator Program that will be applicable to each of its commercial partners, based on their activity within the supply chain.

In the case of the company's commercial partners that provide their services within the facilities, they must be obliged to comply with these supply chain security requirements, for example, companies that provide gardening, cleaning, cafeteria services, etc.

I. A register of commercial partners that must comply with security requirements, and mention what type of providers these are (transporters, warehouses, custodian services, security company, transport means repair services, loading and unloading service, customs brokers, etc.).

II. Indicate how documentation (agreements, accords, contractual clauses, and/or addenda) ensures that your commercial partners comply with security requirements.

III. Indicate if there are agreements, accords, contractual clauses, and/or addenda regarding the implementation of security measures with your service providers inside your company, such as: security guards, cleaning and maintenance services, etc.

IV. Indicate if you have commercial partners to whom it is required to belong to a supply chain security program, either by certification by a foreign authority or the private sector (For example: CTPAT or any other World Customs Organization Authorized Economic Operator Program) as well as the information and documentation requested of them.

4.3 Commercial Partner Reviews.

The company, through the Security Committee, must carry out periodic security evaluations (as well as derived from risk situations), of the processes and installations of business associates based on a risk analysis, to guarantee that they have minimum security standards required by the company based on the Authorized Economic Operator Program, keep records of them, which allow verifying that the processes and security measures are being executed, as well as the corresponding follow-up.

When inconsistencies are found, the transport company must communicate this to its commercial partner and provide a justified period to attend to the observations or areas of opportunity identified, or otherwise, implement the necessary measures to sanction them.

Carrying out security evaluations of commercial partners is important to guarantee that there is a solid security program that functions correctly, which is why, in addition to a documented procedure, there must be a program or calendar for the execution of such security reviews or evaluations, prioritizing partners that are more critical according to their risk analysis. If a member is not evaluated and the company does not know if the processes and installations of its commercial partners function correctly, it puts its supply chain at risk.

Response: Explanatory Notes:
Describe the procedure to carry out security evaluations for the verification of security requirements of your commercial partners, ensure you include the following points:

I. Periodicity with which visits to the commercial partner are made (these must be at least once a year and derived from risk situations).

II. Record or report of the verification and, where applicable, the corresponding follow-up.

III. Program or calendar for the execution of security reviews.

IV. The verification formats must be duly filled out, placing the date, name, and position of those participating in the review, signatures, etc.

V. Indicate what action measures are taken when commercial partners do not comply with the established security requirements.

In case of having commercial partners with CTPAT certification or another supply chain security certification program, indicate the periodicity with which their status is reviewed, how you register it, and the actions you take in case it is detected that it is suspended and/or cancelled, according to what is established in your procedure.

The procedure must include:

I. Periodicity of visits.

II. Points of review in security matters.

III. Preparation of reports.

IV. Feedback and agreements with the commercial partner.

V. Follow-up to agreements.

VI. Measures in case of detection of non-compliance with requirements.

VII. Record of evaluations.

VIII. Area or person responsible for carrying out this procedure.

Process Security.

Control measures must be established to guarantee the integrity and security of processes related to transport means (in any of their modalities), handling, storage of foreign trade merchandise (where applicable), manufacturing companies, manufacturers or assemblers, parts and/or spare parts suppliers, mechanical suppliers, or any other service along the supply chain.

Likewise, there must be established procedures to prevent, detect, or dissuade undeclared materials or unauthorized personnel from having access to transport means and containers. These control measures and procedures must be documented with the intention and objective of maintaining at all times the integrity of the transport means and the import and export shipment from the point of origin to its final destination.

5.1 Process Mapping.

There must be a process map, which describes step by step the operational flow for the transfer of foreign trade merchandise, along the supply chain that includes, in an illustrative but not exhaustive manner, and regarding the service requested by the contractor, the following: assignment of the transport means, container, trailer, inside and outside of yards according to availability, entry to the facilities of the manufacturer, supplier, or seller that describes the loading and unloading of merchandise, the transfer with authorized routes and rest points. If within your supply chain any part of the transport is subcontracted, it is indispensable that it be considered within your risk analysis and process mapping, since, the more direct and indirect suppliers, the greater the risk involved.

Likewise, the land transporter must have written procedures for the designation of operators/drivers, previously designed routes, collection of cargo and delivery of foreign trade merchandise to the final destination; handling of documentation specific to the shipment during loading and/or unloading maneuvers or in advance; communication during the route of the shipment between intermediate or final points, its relationship with other actors in the supply chain such as logistics operators, Customs Brokers among others, and contracting clients.

Response: Explanatory Notes:
Attach the documented procedure where you describe in detail the process mapping or operational flow of your general transport service and the type of service you provide, which includes the designation of operators/drivers, vehicles/units, previously designed routes, cargo collection and delivery, handling of documentation, communication during the operation with other actors in the supply chain handling, storage of foreign trade merchandise (where applicable), manufacturing companies, manufacturers or assemblers, parts and/or spare parts suppliers, mechanical suppliers, or any other service including your contracting clients. In order to have well identified each of the steps involved in the transportation of the merchandise until delivery at the final destination.

The process mapping must include, the names (tax ID key (RFC) and corporate name) of the companies that provide you with services in your logistical process.
This mapping must include, at least the following aspects:

I. Service request.

II. Assignment of Unit and container or Trailer.

III. Assignment of Operator.

IV. Confirmation of service.

V. Instructions to the Transporter.

VI. Cargo collection.

a) Identification before the company.

b) Instructions Letters for delivery.

VII. Consolidation of merchandise/Seal of the container (if applicable).

VIII. Storage during waiting for shipping instructions or dispatch order.

IX. Transfer of merchandise to port, border, exit customs:

a) Indicate the points and areas of rest or custody of the cargo vehicles during the transfer of merchandise subject to foreign trade (import and export).

b) Indicate the estimated times that said vehicles remain in the rest or custody areas (company yards, exit customs, customs broker agency facilities, warehouses, transfer yards or transport, among others).

X. Constant communication means with the transport company and the contracting company (during the transfer and at the end of the service).

XI. Transfer to de-consolidation point (if applicable).

XII. Waiting storage.

XIII. De-consolidation.

XIV. Transfer to final destination.

XV. Information flow associated with the shipment.
Administrative management process (General process of sending documentary information, and billing).

For the purposes of the administrative management and billing process, the transport company must have a documented procedure to receive and register the service request that the user will require, which must contain, at least the service request, which includes, in an illustrative but not exhaustive manner, at least the following information:

I. Origin (Collection).

II. Destination.

III. Cargo specifications (domestic, international, dangerous, high value, etc.).

IV. Delivery time and date.

V. Cost per freight.

VI. Insurance:

a) Designation of unit and operator.

b) Preparation and delivery of documentation:

Instructions to coordinate with other service providers that intervene in customs clearance and border crossing (customs brokers, DOT, consolidators/de-consolidators, among others).
Documentation that is required to present at customs.
Personal protective equipment, or any special request from the customs broker or customs agency.

VII. Guideline for loading and unloading of merchandise at customs and/or with the client.

5.2 Delivery and Receipt of Cargo.

The transport company must inform the operators/drivers of the transport that carry out the delivery or receipt of foreign trade cargo of the criteria and conditions that their clients (manufacturers, suppliers, etc.) demand for the handling of their cargo, as well as comply with the security guidelines that the company has to enter their facilities at the time of collection and/or delivery of foreign trade cargo. The transport company must give its clients, previously before these deliver the shipment and maneuvers of loading and unloading are carried out in the vehicles designated for such effects, the information regarding the operators/drivers so that they can be fully identified upon arrival at their facilities. The transport company must have an updated database with detailed information of its operators/drivers.

The operator/driver must know the documents that will be delivered to them, which cover the ownership of the cargo to be transported, such as the dispatch order or transfer, as well as the instruction sheet that will precisely establish the contact data of the person to whom they must direct themselves in case of any incident, inspection by another authority, or modification of the original conditions of the shipment, routes marked by the client among others.

Likewise, with the documentation that was delivered to them, they must corroborate at the time of loading and unloading of the merchandise the number of packages and the assigned locks described in them.

Furthermore, the transport company must issue for each shipment, a duly documented bill of lading (carta porte), which must contain, in addition to fiscal requirements, the applicable provisions contained in the Federal Auto Transport and Auxiliary Services Regulations.

Prior to the loading of the merchandise, the operator must inspect the vehicle to guarantee that the transport means is free of visible pest contamination.

Additionally, training must be provided to transport operators to review import and/or export documentation in order to identify or recognize suspicious cargo shipments, such as:

I. Originating or destined to unusual places;

II. Different routes;

III. Cash payments;

IV. Observe unusual sending and/or receiving practices;

V. Lack of information.

Response: Explanatory Notes:
Attach the documented procedure in which you indicate step by step how the delivery and receipt of the cargo is carried out, including: how you assign the operator and the transport means, how the arrival time at the companies' facilities is established for the collection and delivery of the cargo, and how you guarantee that the transport means is free of visible pest contamination, in case of identifying any type of visible pest, contamination, trash, insects, grass, herbs, or weeds, how it is reported and what actions you take regarding it.

5.3 Cargo Tracking Procedure.
The carrier company is responsible for monitoring the integrity of the means of transport, as well as the cargo, from the moment of loading until its delivery at the destination established. Therefore, it must have documented procedures that establish the use of technology for the tracking and supervision of activities related to the movement of the means of transport carrying foreign trade cargo for land transfers. A device capable of tracking the position of the vehicles in which the cargo is transported via GPS/Satellite Link must be available during the entire duration of the transfer, with continuous geographic coverage throughout the route. Said device must have the following characteristics:
I. Ensure that the device cannot be removed from the unit to which it was fixed without this being detected and authorized.
II. Recognize a Geofence (deviation limit).
III. Know the position of the vehicle at all times.
IV. The device must have a Unique Identification Number (serial number).
V. When an alert is detected, the device must be able to automatically change the transmission of the vehicle's position so that it is reported every fifteen minutes, as long as the condition that triggered the alert remains.
VI. The device must be autonomous in its operation; that is, it does not require energy from the vehicle during its journey.
The device must have an alert scheme, at least for the following cases:
I. Device outside Geofence.
II. Device exceeds idle time.
III. Vehicle exceeds time of stay in the country.
IV. Unauthorized removal of the device.
Likewise, the carrier company should have a coupling device, sensor connector, or equivalent technology from the tractor to the trailer to guarantee that the latter is also monitored and tracked, preventing said device from being removed and having alerts that indicate the place, date, and time of hooking and unhooking. Similarly, the company must establish documented procedures to ensure at all times the location of the carrier's vehicle in transit. These procedures must be carried out under a risk analysis that includes, by way of example and not limitation, the identification of predetermined routes, estimated delivery times, as well as intermediate points, as well as overnight and/or rest (yards, pensions, exit customs, customs broker's facilities or customs agency, freight agents, authorized meal stops, fuel loading, routine mechanical inspections, among others), which must be recorded and incorporated into the tracking process. Similarly, measures and actions to be taken in the event of identifying any delay in the route due to weather conditions, traffic, mechanical incident, route changes, or inspection by any authority or any security incident must be included. There must be trained and authorized personnel to carry out the permanent monitoring and/or traceability of shipments that transport foreign trade cargo. The monitoring, tracking, supervision, and registration data of all vehicles in transit carrying foreign trade cargo (whether they cross into the United States of America and/or to any other country) must be preserved for one year when the authority and/or the carrier must carry out an evaluation due to a security incident and/or for audit purposes. If they have contracted the services of a subcontracted provider for the cargo transport service, the company must have access to its carrier's GPS monitoring system, so that it can track the movement of its shipments.

If, as a result of monitoring and tracking, a real (or actual) threat to the security of a shipment or means of transport is identified, the company must alert (as soon as possible) the business partners in the supply chain that may be affected and, where appropriate, the authority as applicable. If the driver makes stops during their journey, they must register them and carry out inspections of the means of transport, containers, trailers, and semi-trailers used as Instruments of International Traffic, as well as of the closing devices, seals, and/or padlocks to verify their integrity and identify signs of manipulation before resuming the journey. Similarly, the driver must be able to recognize, act, and report when threats arise during the transport of the units, such as: attempted theft, kidnapping, among others. With the aim of guaranteeing that tracking and monitoring procedures are followed, in addition to supervising the correct completion of related records, management must involve itself in the surveillance and monitoring of cargo vehicles on the route, so it must participate in the periodic performance of documented random reviews of the tracking and control procedures. These random reviews must include the verification of the tracking records carried out by the responsible area against GPS records or route histories, to verify delivery time indicators, intermediate points, overnight, and/or rest. Response: Explanatory Notes:
Describe how you carry out the review of predetermined routes based on your risk analysis, individually or collectively with your clients, and how it is documented.
Likewise, the monitoring of shipments must be documented, and this record must contain the following information:
I. Operator Name.
II. Origin and destination of the service.
III. Client.
IV. Type of cargo.
V. Records of the unit's location.
VI. Driver's hours of service log, which is a daily record containing the necessary data to know the effective driving time and determine rest in accordance with the Regulation for Federal Highways Traffic.
Attach the documented procedure to monitor the vehicles or means of transport that transport foreign trade cargo.

The procedure must include, by way of example and not limitation, the following:
I. The area and person(s) responsible in the carrier company for tracking and monitoring shipments.
II. Indicate who the people authorized to monitor and/or track foreign trade operations are and how they have been instructed and trained to perform this task.
III. Indicate by what means and/or systems they perform the monitoring of shipments.
IV. Have GPS whose external hardware is hidden and can resist attempts to remove it, indicate the type of system implemented in the units used and, in case of a third-party or subcontracted service, describe the consultation tools available to monitor the cargo.
V. In the case of geofences, within their parameters, minimum tolerances allowed for the predetermined transit route must exist or be established.
VI. Frequency to review the status of shipments and according to your risk analysis.
VII. Indicate the means of communication that exist with the transport unit operator (indicate if there is more than one way to communicate: Cell phone, tracking system, global positioning systems (GPS), fixed supervision points, etc.).
VIII. Indicate the frequency with which clients are informed of the location of their shipments, or if they share any tracking system.

IX. Have systems or procedures with instructions to respond to significant route deviations and in case of any delay (stops, changes or route deviations, mechanical failures, accidents, etc.) for arrival at the loading area, transfer points (exchange of boxes and semi-trailers) or final destination. Likewise, drivers must notify (to their supervisor and where appropriate to the sender or consignee of the cargo) any significant delay in the route due to weather, traffic, accidents, mechanical failures, route change, when the operator identifies that they are being observed or followed during the transport of the cargo, unit custody, etc. And on its part, the company must independently verify the cause of said delay.
X. The procedure must also include that, in case of identifying a real or actual threat to the security of a shipment or means of transport; how the company informs the business partners of its supply chain that may be affected and, where appropriate, the authority as applicable, about this type of incidents or presumptions.
5.4 Processing of Information and Cargo Documentation.
Carrier companies must have written procedures to ensure that both the electronic and/or documentary information sent by their clients from their service request, during the movement and transfer of the cargo, as well as the information received by business associates is legible, complete, accurate, reported in time, and protected against changes, losses, or the introduction of erroneous information. Similarly, forms and documentation related to import and/or export should be secured to prevent unauthorized use. Response: Explanatory Notes:
Attach the documented procedure for the processing of cargo documentation.
Briefly explain what it consists of.
I. Detail how you receive and transmit relevant information and documentation for the transfer of foreign trade cargo with your business partners (Indicate if you use a specific control computer system and briefly explain its function). Likewise, detail how you guarantee that the information provided is legible, complete, accurate, reported in time, and protected against changes, losses, or the introduction of erroneous information.
II. The electronic information of shipments and cargo in general must include the seal and/or padlock number with which the cargo was secured.
6. Customs Management.
The carrier company must have documented procedures, in which internal and operational policies are established, as well as the necessary controls for the due compliance of customs obligations.
6.1 Customs Obligations.
For the case of carrier companies that enter fiscal or supervised premises to transfer foreign trade cargo, they must have a documented procedure for obtaining the CAAT registration, in accordance with what is established in articles 1 and 20 of the Law and rule 2.4.5. Carrier companies that have registration in the registry of carrier companies for cargo in transit, in accordance with rule 4.6.11., must have a documented procedure with the objective of complying with what is established in rule 4.6.18. Regarding internal transits of foreign trade cargo referred to in articles 127 of the Law and rule 4.6.11., the carrier company must have a documented procedure that guarantees the notice to customs authorities caused by late arrival, indicating the causes that originated the delay, the place where the means of transport is located, the transit petition number, and the state in which the official padlocks are, if applicable (article 188 of the Regulation). For the purposes of what is stipulated in article 128 of the Law and rule 4.6.17., the carrier company, where applicable, must have a documented procedure that guarantees that the internal transit of the goods must be carried out within the maximum time limits established in Annex 15. For cases of destruction of goods provided for in article 94 of the Law and 141 of the Regulation, the carrier company must have a documented procedure by which it guarantees the delivery of notices in a clear, precise, and exact manner to the customs of destination. Response: Explanatory Notes:
Indicate if you have the CAAT and, if so, indicate your registration number.
Attach the procedure that describes the steps to follow to obtain the CAAT (this procedure must include the steps to follow to obtain the radiofrequency identification device number (transponder), in addition to including, who and how the information related to your vehicle fleet and transport operators is updated.

Indicate if you have the Registry to carry out the transit of Goods, if affirmative, attach the following procedures:
I. Documented procedure to comply with rule 4.6.18, which must include, by way of example and not limitation, the following:
a) Notices to the authority, of changes in the information provided for obtaining the registration. b) Integrate and maintain updated an automated daily register of service users. c) Integration of a file for each service user.
II. Attach the documented procedure that guarantees the notice to customs authorities caused by late arrival in accordance with article 188 of the Regulation.
III. Attach the documented procedure referred to in article 128 of the Law in relation to rule 4.6.17, and where appropriate, describe how you guarantee compliance with the transfer time limits referred to in Annex 15.
7. Security of Cargo Vehicles, Containers, Trailers, and/or Semi-Trailers.
The security of means of transport, tractors, containers, trailers, and semi-trailers (including cargo vehicles, pickup truck type, van, or van, among others) must be maintained to protect them from the introduction of unauthorized persons and/or materials. For this reason, it is necessary to have documented procedures to inspect, seal, and maintain their integrity. Similarly, the process of inspecting said means of transport, containers, train cars, trailers, and semi-trailers used as Instruments of International Traffic, must include a procedure for agricultural inspections to look for visible pests and serious structural deficiencies. Pest contamination is defined as visible forms of animals, insects, or other invertebrates (living or dead, at any stage of the life cycle, including eggs, etc.), or any organic material of animal origin (including blood, bones, hair, meat, secretions, excretions, etc.); plants or vegetable products (including fruits, seeds, leaves, twigs, roots, bark, etc.); or other organic material, including fungi, dirt, or water; when such products are not the declared cargo within the Instruments of International Traffic. In case of using high-security seals, it is necessary to have procedures to correctly seal and maintain the integrity of containers and trailers from the loading point. A high-security seal must be applied to all containers and trailers for foreign trade shipments, which must meet or exceed Standard ISO 17712 for high-security seals. With the aim of maintaining supply chain security, the carrier company must inspect all cargo vehicles systematically upon entry and exit of its facilities (domestic and international traffic), in addition to keeping a record.

7.1 Use of Seals and/or Padlocks in Containers and Trailers.
The use and placement of seals or padlocks on means of transport (containers, trailers, and semi-trailers) is considered a critical and necessary process to maintain the integrity of shipments that transport foreign trade cargo. Therefore, the carrier company must document procedures that include the control, custody, assignment, handling of discrepancies, replacement, and destruction of padlocks and seals that meet or exceed Standard ISO 17712. The carrier company must have a documented procedure where the means of transport are identified and, where applicable, the containers, train cars, and/or semi-trailers used in its international logistics chain, and indicate how their integrity is maintained. For this reason, as one of the security mechanisms, the carrier company must use High Security padlocks or seals that meet or exceed Standard ISO 17712 in all loaded containers and trailers that are subject to foreign trade and maintain their integrity until delivery at the final destination. For this, the carrier company must have documented procedures to place and verify the correct application of seals, their inspection at intermediate points, final destination, and their replacement when they are opened by any authority. In case of such an inspection, drivers must notify and register any anomaly or unusual structural modification found in the means of transport derived from said review. The procedures must include the steps to follow if it is discovered that a seal is altered, manipulated, or there is an incorrect seal number in the documentation, the communication protocols to business partners involved in the supply chain, and the investigation of the security incident; these must be notified to security personnel, business partners that may be part of the affected supply chain, security specialist, or Authorized Economic Operator Program contact. The carrier company must verify and evidence that during loading points, as well as in reviews by any authority or due to changes in the original conditions of the shipment, high-security seals or padlocks that meet or exceed Standard ISO 17712 are correctly applied and placed; for the case of consolidated cargo collection and delivery operations that do not use consolidation centers to sort or consolidate the cargo before arriving at the destination, the carrier company must, at each stop and before arriving at the destination, place high-security seals on the trailer, semi-trailer, or container. The company's management or a security supervisor must carry out periodic and documented audits of high-security seals and/or padlocks; these reviews must include the verification of the inventory of stored seals and/or padlocks and the cross-check with inventory records and shipping documents. Likewise, the company must have documented procedures that clearly describe how high-security seals will be controlled by the carrier during route transit, and that include, by way of example and not limitation, the
following:
I. Verify the correct placement of seals or padlocks according to the VVTT inspection method to evidence and discard improper manipulations:
a) V - View the seal and lock mechanisms of the container. b) V - Verify the seal number. c) T - Pull the seal to ensure it is correctly placed. d) T - Twist and turn the seal to ensure.
II. Review and cross-check the documentation containing the number of the original seal or padlock and the additional ones carried during the transport of the cargo.
III. If the company uses cable seals, they must be placed on the two vertical bars of the container.

IV. Review that closing devices, hinges, and pins are attached to the trailer or container, and welded or riveted.
V. Consider the type of reports and records that will be made if the seal is removed, even by official authorities or due to an incident during the transport of the cargo, contemplating the installation of a second seal as a replacement and its proper notification to the owner of the cargo.
VI. If the company uses cable seals, they must be placed on the two vertical bars of the container.
VII. Review that closing devices, hinges, and pins are attached to the trailer or container, and welded or riveted.
VIII. Consider the type of reports and records that will be made if the seal is removed, even by official authorities or due to an incident during the transport of the cargo, contemplating the installation of a second seal as a replacement and its proper notification to the owner of the cargo.
Response: Explanatory Notes:
Describe the documented procedure for the review of seals and/or padlocks in vehicles, means of transport, containers, trailers, and/or semi-trailers. This must include, among other aspects according to your operation:
I. Verify that the seal or padlock is intact and determine if there is evidence of improper manipulation.
II. Use the VVTT inspection method.
III. Review and cross-check the documentation containing the number of the original seal or padlock and, where applicable, the additional ones carried in the transport of the cargo. In case of using the replacement seal and/or padlock, said number must be registered within the carrier company's control. If altered seals and/or padlocks are identified, they must be kept to help carry out the investigation of said incident or discrepancy and, as applicable, report the compromised seals and/or padlocks to the foreign authority.
IV. Review that closing devices, hinges, and pins are attached to the trailer or container, and welded or riveted. Also, protective plates can be placed on the door hinges and/or a seal/adhesive tape can be placed on at least each side. Also,

must verify the correct functioning of handles, locks, and all other locking or closing mechanisms of cargo vehicles to detect manipulations and any inconsistencies before placing any sealing device.

V. Indicate how they assign and replace high-security padlocks, in the event that, during the trip, they are inspected by another authority. If a seal and/or padlock is broken in transit, the cargo must be examined, the number of the replacement seal and/or padlock must be registered, and the driver (as well as the transport company) must immediately notify business associates when this happens, indicate who broke it, and provide the new seal number.

Attach the documented procedure for the control and handling of seals and/or padlocks. This must include, among other aspects according to their operation:

I. What type of seals and/or padlocks they use in their operations (foreign trade, transit, storage, etc.).

III. Describe how the company's management or security supervisor participate in audits of high-security seals and/or padlocks, the reviews they perform, the records they generate, and the actions they take in case of identifying discrepancies. Also, how supervisors in the shipping area and/or warehouse managers verify the numbers of seals used in transport means and International Traffic Instruments to corroborate that the information is correct (this process can also be included within the internal audits referred to in sub-standard 1.3 of this document).

IV. How discrepancies in seal and/or padlock numbers are addressed.

V. Indicate who the supplier(s) are and how it is verified that the specifications of the seals and/or padlocks comply with ISO 17712 Standard (attach certificate issued by the certifying company responsible for verifying compliance with the corresponding ISO).

All written procedures must be disseminated and maintained at the operational level so that they are easily accessible to employees responsible for carrying out the tasks described above, reviewed at least once a year, and updated as necessary.

7.2 Inspection of transport means, containers, trailers, and semi-trailers.

The transport company must have procedures to permanently carry out a review of the transport means (tractors), containers, trailers, and semi-trailers used as International Traffic Instruments, including the reliability of the door locking mechanisms, in order to identify natural or hidden compartments, using a checklist or format that includes the main points to be reviewed. This review must be carried out by operators/drivers or personnel designated by the company for this purpose. Likewise, the physical-mechanical conditions of the transport means must be periodically reviewed to verify their proper functioning.

Inspections of transport means or cargo vehicles, containers, and trailers must be systematic, and carried out at the entrance and exit of yards or storage sites and, where applicable, at the loading point of the goods (contracting company); and if the infrastructure allows, before arriving at the customs office for clearance using the VVTT inspection method. A record of these inspections must be kept in an area with controlled access and carried out in a place monitored by alarm systems, closed-circuit television, and video surveillance systems; this system must cover the entire inspection system.

The documented procedure for its inspection must include, by way of example and not limitation, the following review points:

Transport Means | Containers, Trailers, and Semi-trailers --- | ---
I. Bumper. | I. Exterior and interior doors.
II. Tires and rims (tractor and trailer). | II. Side walls (left and right).
III. Floor (tractor). | III. Internal and external roofs.
IV. Fuel tanks. | IV. Front wall.
V. Cab interior (bedroom, and tool compartment). | V. Internal floor.
VI. Air tanks. | VI. Refrigeration system, if applicable.
VII. Chassis. |
VIII. Fifth wheel area. |
IX. Drive axles. |
X. Exhaust pipe. |
XI. Engine. |

Likewise, before loading transport means, containers, train cars, trailers, and semi-trailers used as International Traffic Instruments, they must undergo agricultural and security inspections to guarantee that their structures have not been modified to hide contraband or have been contaminated with visible agricultural pests, keep a record, and be backed by a documented procedure. If visible pest contamination is found during the inspection or transport of goods subject to foreign trade, it must be cleaned (washed, vacuumed, etc.) to eliminate said contamination. The driver must ensure before crossing that the cab is clean and free of trash.

Response: Explanatory Notes:

Attach the documented procedure to carry out the security and agricultural inspection of transport means, containers, trailers, and semi-trailers. This must include, among other aspects according to their operation:

I. Those responsible for carrying out the inspection.

II. Definition of the place(s) where the inspection takes place and indicate how it is monitored by alarm systems, closed-circuit television, and video surveillance.

III. The review points for transport means, trailers, semi-trailers, and containers, both for security and for quality and agricultural inspections with the purpose of searching for visible pests.

IV. Instructions for the driver to ensure before crossing that the cab is clean and free of trash.

Attach the format used to perform the inspection that complies with the minimum requirements indicated in this sub-standard. If you use other types of cargo vehicles for the transport of goods (vans, pickups, 3.5 tons, tankers, etc.), your procedure and inspection format must include the process and review points. Likewise, the security and agricultural inspection format must include the following information:

I. Date of inspection;
II. Time of inspection;
III. License plates of the vehicle (tractor and trailer);
IV. Container/trailer number;
V. Specific areas of the cargo vehicles that were inspected; and
VI. Name of the employee who performs the inspection and the supervisor.

The security and agricultural inspection formats may be signed by the supervisor to corroborate their information and be part of the import and export documentation:

I. In the case of transport companies for hazardous materials and waste, each vehicle must have a daily visual review log of the auto-transport unit.

The documentation must be kept for one year for investigation in case of any security incident, as well as to demonstrate continuous compliance with these inspection requirements.

Additionally, and according to the risk analysis, the transport company should carry out periodic random reviews of cargo vehicles to verify that they have been carried out correctly, counteract internal conspiracies, and prevent security incidents. The reviews must be carried out randomly, without prior notice, so that they do not become predictable, in addition to being carried out in different places where the transport means could be susceptible to contamination (maneuvering yard, loading and unloading areas, after loading the unit, and on the route to the border of the United States of America).

Description of the place(s) where the inspection takes place and indicate if it is monitored by alarm systems, closed-circuit television, and video surveillance.

Likewise, describe the procedure carried out on transport means, cargo vehicles, trailers, semi-trailers, and/or containers used as International Traffic Instruments, to validate that they meet the physical-mechanical conditions for daily operation on roads and bridges under federal jurisdiction, in addition to validating that they have records of this type of maintenance for at least one year.

This procedure must additionally include the following:

I. Responsible personnel.
II. Places where inspections are carried out.
III. In case any physical-mechanical condition and/or anomaly is detected that affects the proper functioning of the units, how they are reported, and what measures must be taken.
IV. Indicate what type of record is kept.

In cases where, due to major structural modifications in transport means such as axles, springs, chassis modifications, and even cabin adaptations, among others, the owner and person responsible for the vehicle fleet must contemplate, in accordance with their risk analysis, a more exhaustive review of the vehicle in question to ensure its integrity, in this regard:

I. Indicate whether the repair or maintenance of transport units (tractors), containers, or trailers is carried out in the same facilities, or is carried out with an external provider.
II. Briefly describe how the delivery-receipt of vehicles that suffered a modification as mentioned in the previous paragraph is carried out.

7.3 Storage of vehicles, transport means, containers, trailers, and semi-trailers.

The transport company must maintain the integrity at all times of the transport means (tractors, containers, trailers, and/or semi-trailers, among others) by establishing controls within its facilities. If they are empty and must be stored in parking areas, they must be secured with a padlock and/or indicative seal, or, where applicable, in a secure area that is guarded and/or monitored.

When it is necessary to store or overnight any container, trailer, and/or semi-trailer with foreign trade goods, it must be in a secure area with perimeter barriers and monitored by alarm systems, closed-circuit television, and video surveillance, to prevent unauthorized access and manipulation of the unit and the merchandise, so it must be closed with a high-security padlock according to ISO 17712 Standard.

If during the trip on the authorized route to the final destination, it is considered necessary to move to a facility that is authorized as a storage yard for vehicles, transport means, containers, trailers, and semi-trailers, whether owned by the company or through a third party, the transport company must guarantee that these facilities meet the minimum criteria in terms of security based on this Ground Transport Operator Profile established by the AGACE, or in its case, by some other Authorized Economic Operator Program.

Response: Explanatory Notes:

Describe how you ensure the integrity of the transport means that transport foreign trade merchandise (boxes, containers, trailers, and/or semi-trailers).

Indicate the types of seals and/or padlocks used for boxes, containers, trailers, and/or semi-trailers.

Indicate how many facilities the company contemplates for the storage of vehicles, transport means, containers, trailers, and semi-trailers and add the following data for each of these:

I. Name or denomination of the facility.
II. Full address of the facility.
III. Surface area of the facility marked in m2.
IV. Indicate how many foreign trade shipments enter the facility (import/export).
V. Number of people working in this facility.
VI. When any facility has been visited by CTPAT, indicate the date on which the visit was carried out.
VII. Indicate in each of the facilities which one belongs to the company or is a service contracted through a third party.
VIII. Describe how you ensure that your commercial partner who provides the storage service complies with the minimum requirements in terms of security.

Personnel Security.

There must be documented procedures for the registration and evaluation of people who wish to obtain employment within the transport company and establish methods to carry out periodic verifications of current employees.

Likewise, there must be continuous training programs for administrative and operational personnel that disseminate the company's security policies, as well as the consequences and actions to be taken in case of any misconduct.

8.1 Verification of work history.

The transport company must have documented procedures to investigate and verify the information recorded in the curriculum, criminal records (if local legislation and company policies allow), and applications of candidates with potential for employment, in accordance with local legislation, either on their own or through an external company.

Likewise, for positions that, due to their sensitivity, require it and affect the security of shipments subject to foreign trade, in accordance with their previously carried out risk analysis, they must consider requesting stricter requirements for their hiring, which must be carried out periodically.

Regarding personnel who already work in the company, periodic investigations must be carried out based on the activities and/or sensitivity of the employee's position.

This procedure must contemplate the creation and updating of personnel files, which must have restricted access and contain the following information, by way of example and not limitation:

I. Job application.
II. Updated photograph (in electronic or printed format).
III. Copy of official identification.
IV. Copy of the current federal driver's license issued by the SICT according to the type of service to be provided.
V. Copy of updated proof of address.
VI. Copy of birth certificate.
VII. Registration with Social Security Institutions.
VIII. Recommendation letters.
IX. Evaluations (Toxicological Exam mandatory for operators/drivers) at least every six months.
X. Terms of hiring.
XI. Minimum mechanical knowledge exam.

Likewise, for sensitive positions identified in the previously carried out risk analysis and directly affecting the security of transport means, they must consider requesting stricter requirements for their hiring, which must be carried out periodically (e.g., Operators/drivers).

Response: Explanatory Notes:

Describe the documented procedure for personnel hiring and ensure you include the following:

I. Requirements and documentation required.
II. Tests and exams requested.

Indicate the areas and/or critical positions identified as risky, according to your analysis, and indicate the following:

I. Indicate what are the additional requirements for specific areas and/or jobs such as criminal records (if local legislation and company policies allow), non-criminal record letter, socioeconomic studies, clinical studies, toxicological (drug use), etc. Where applicable, indicate the jobs or work areas where they are required and with what frequency they are carried out.

II. Indicate if, prior to hiring, the candidate must sign a confidentiality agreement or a similar document.

The procedures for personnel hiring and contractors may include:

I. Exhaustive investigations of the work and personal backgrounds of new employees.
II. Confidentiality and responsibility clauses in employee contracts.
III. Specific requirements for critical positions.
IV. Where applicable, the periodic update of the socioeconomic and physical/medical study of employees who work in critical and/or sensitive areas.
V. Hiring process and requirements requested for temporary employees and contractors.
VI. Indicate the medical and toxicological exams carried out on operators/drivers.
VII. In case of hiring a service agency for personnel hiring, indicate if this has documented procedures for personnel hiring and how you ensure they comply with the same. Briefly explain what they consist of.
VIII. The company may consider the results of background verifications of candidates, as allowed by current legislation, to make hiring decisions.

Background verifications are not limited to identity and criminal record verification. In higher-risk areas, deeper investigations may be justified.

8.2 Personnel dismissal procedure.

There must be documented procedures for personnel dismissal, which include the delivery of identification, and any other item that has been provided to them to perform their functions (keys, uniforms, badges and/or credentials, computer equipment, passwords, tools, etc.). Likewise, this procedure must include the deactivation in those information and access systems, among others that may exist.

Response: Explanatory Notes:

Describe the procedure for personnel dismissal, and ensure you include the following:

I. Who is responsible for carrying out and following up on this procedure.
II. How the delivery of identification, uniforms, keys, and other equipment is carried out and confirmed.
III. Indicate the control, record, and/or format, in which the delivery of material is identified and ensured, and deactivation in information systems (where applicable, attach).
IV. Indicate the type of records of personnel who ended their labor relationship with the transport company, so that when it has been for security reasons, their service providers and/or business associates are warned.

8.3 Personnel administration.

The transport company must maintain an updated system, control, or database of active employees. Likewise, affiliation records with Social Security Institutions and other legal labor records must be carried out and kept updated.

In the case that the company has personnel hired by its commercial partners and working within the facilities, it must ensure that they comply with the requirements established for the rest of its employees.

Response: Explanatory Notes:

Indicate if the company has an updated system, control, or database, both for personnel hired directly, and that hired through a service provider company, and ensure it includes, by way of example and not limitation, the following points:

I. Full name.
II. Updated photograph at least every five years.
III. Personal data (age, name, date of birth, phone number, address, CURP, social security number, blood type, allergies, etc.).
IV. Family ties.
V. Work history.
VI. Diseases.
VII. Medical exams.
VIII. Training.
IX. Type of license and status thereof (they must have a record of transport licenses with the corresponding validity, in order to prevent their drivers from traveling with expired licenses).
X. Results of periodic evaluations.
XI. Observations.
XII. This personnel must be hired in accordance with the current labor laws and regulations.

Information and Documentation Security.

There must be prevention measures to maintain the confidentiality and integrity of information and documentation related to shipments that transport foreign trade merchandise, including those used for the exchange of information with other members of the supply chain. Likewise, there must be comprehensive documented policies and/or procedures to protect Information Technology systems, which include measures against misuse, in addition to identifying and prioritizing actions to reduce cybersecurity risk. They could also address how a member shares information about cybersecurity threats with the government and other commercial partners.

9.1 Classification and handling of documents.

There must be procedures to classify documents according to their sensitivity and/or importance, with special emphasis on that received from their contractors where information related to routes, materials, merchandise, and/or goods being transported, instruction letters, schedules, names of clients and/or contacts, among others, is described. Sensitive and important documentation must be stored in a secure area that only allows access to authorized personnel. Reviews must be conducted regularly to ensure that documents are not used improperly.

The useful life of documentation and/or files must be identified, and procedures established for their destruction.

I. The company must have updated and secured files for means of transport, containers, trailers, and semi-trailers, containing the following:
a) Proof of ownership or legal possession of the vehicle with invoice, proforma invoice, customs entry permit, lease contract, or document from the National Vehicle Registry. b) Circulation card.

II. Valid civil liability insurance policy for damages to third parties or guarantee fund.

III. Certificate of low pollutant emissions.

IV. In the case of the transport of hazardous materials and waste, the transport company must have an insurance policy for environmental damage.

The foregoing in accordance with what is stipulated in the Federal Autotransport and Auxiliary Services Regulations and the Regulations for the Land Transport of Hazardous Materials and Waste.

Response: Explanatory Notes:
Attach the documented procedure for the registration, control, and storage of printed documentation (classification and filing of documents), which must include:
I. Control register for delivery, loan, among others, of documentation.
II. Restricted access to the archive area.
III. Storage and classification policies.
IV. An updated security plan that describes the measures in force regarding the protection of documents against unauthorized access, as well as against deliberate destruction or loss thereof.
V. In the case of electronic or digital information, it must adhere to the security criteria of sub-standard 9.2 Information Technology Security.

In the case of automated systems and computer equipment, individual accounts that require periodic password changes must be used. In order to protect the confidentiality, integrity, and availability of information, the company must have policies, procedures, and information technology standards established, which must be communicated through a training program for all employees who handle computer equipment and systems, which includes topics to prevent attacks through social engineering and all those threats to which they are exposed (malware, baiting, phishing, etc.). Companies that allow employees to connect remotely to a network must employ secure technologies, such as virtual private networks (VPN), to allow employees to access the company intranet securely when they are outside the office, as well as procedures designed to prevent unauthorized remote user access.

For the above, there must be written procedures and infrastructure to protect the company against losses, theft, leakage, hacking, and/or ransomware of information, this includes the procedure for the recovery (or replacement) of Information Technology systems and/or data, as well as a system established to identify the abuse of Information Technology systems and detect inappropriate access and/or improper manipulation or alteration of commercial and business data, as well as a written procedure for the application of appropriate disciplinary measures to all offenders. Access to Information Technology systems must be protected against infiltration through the use of secure passwords, which include phrases or other forms of authentication. Users of said Information Technology systems must safeguard and not share their access keys or passwords. All Information Technology infrastructure must be physically protected against unauthorized access.

Response: Explanatory Notes:
Attach the procedure for the recovery or replacement of Information Technology systems and/or data, which includes how it backs up and guarantees the security of its information, in addition to protecting it from possible losses. Be sure to include the following points:
I. State the frequency with which backups are carried out.
II. Who has access to them, and who authorizes the recovery of information.
III. Indicate what type of tests are performed and how often, to verify the security of the network, systems, and infrastructure.
IV. Mention if, to carry out this type of tests or vulnerability scans, it is done through software, a third party or provider, and if so, indicate the name or corporate name.

V. In case vulnerabilities are found, describe the corrective actions that must be implemented.
VI. Indicate if you share information about cybersecurity threats with your business partners who participate within your supply chain (for example: communications, bulletins, emails, etc.).
VII. Systems must be protected with passwords and must be modified frequently, for the above, indicate the procedure to change them.
VIII. State if there are information security policies for their protection.
IX. Have a system or software to detect and identify the abuse, intrusion, or access of unauthorized persons to your systems and/or Information Technology data, as well as the abuse of the policies and procedures established by the company, including unauthorized access to internal systems, external websites, and the manipulation or alteration of commercial data by employees or contractors.
X. All offenders must be subject to the application of disciplinary measures, for the above, indicate the corrective policies and/or sanctions in case of detection of any violation of Information Technology security systems and policies.

Information Technology and cybersecurity policies and procedures must be reviewed annually and updated resulting from an attack or according to situations that may put the company's systems at risk.

Describe the security measures used to allow employees to connect remotely to a network (VPN), to allow employees to access the company intranet remotely when they are outside the office.
In case of allowing employees to use personal devices to perform the company's work, such devices must comply with the company's cybersecurity policies and procedures, security updates must be periodic, and have a method to access the company network securely. Indicate if the computer equipment has a backup power supply system that allows business continuity. The procedures regarding the backup of the transport company's information must also include:
I. How and for how long the data is stored.
II. Business continuity plan in case of incident and how to recover the information.
III. Frequency and location of backup copies and archived information.
IV. If backup copies are stored in sites alternative to the facilities where the data processing center is located.
V. Tests of the validity of data recovery from backup copies.
The procedures regarding the protection of the company's information must also include:
I. An updated and documented policy for the protection of the company's computer systems against unauthorized access and deliberate destruction or loss of information. All sensitive and confidential data must be stored in an encrypted or encoded format.

II. Detail if you operate with multiple systems (sites/locations) and how these systems are controlled.
III. Who is responsible for the protection of the company's computer system (responsibility should not be limited to one person but to several so that each can control the actions of the rest).
IV. Each user's access must be assigned through individual accounts and restricted according to the job description or assigned tasks. For the above, describe how access authorizations and access levels to computer systems are granted (access to sensitive information must be limited to authorized personnel to perform modifications and use of information). Authorized access must be monitored by the area responsible for granting it, to verify or in case report that access to confidential systems is based on job requirements.
V. Indicate the elements or format that passwords must have for access to Information Technology systems and computer equipment, frequency of changes, if there are other authentication methods, and who or what area provides those passwords.
VI. Indicate the name of the firewall and antivirus used (include licensing related), evidencing that this security software is active and receives periodic updates.
For the above, cybersecurity policies and procedures should include measures to prevent the use of counterfeit technological products or with incorrect licenses (software and hardware).

All computer equipment, electronic media (hard drives, cell phones, etc.) and Information Technology hardware that contain confidential information related to the import and export process, must be accounted for through periodic inventories and have such evidence. When these technological equipment must be discarded, there must be a documented procedure that includes how they must be formatted, disinfected, or destroyed appropriately to avoid information leakage.

VII. In case of staff turnover, access to computer equipment, telecommunications, and network must be eliminated at the moment of the employee's separation, this includes email accounts, system access accounts, software, programs, etc.
VIII. Elimination, maintenance, or updating of user details.
IX. Measures planned to deal with incidents when the system is compromised.

Security training and awareness.
It must have a documented awareness program on threats established, designed, and updated by the Security Committee to recognize and create awareness about threats from terrorists and smugglers at each point of the supply chain. The training program must be comprehensive and cover all security requirements of the Authorized Economic Operator Program. Administrative and operational employees must know the company's established procedures to consider a risk situation and know how to report it. Specific training must be provided to operators/drivers, as well as employees who are in critical and/or sensitive areas determined under their risk analysis. security areas; as well as those who receive and open mail and packages, among others).

10.1 Training and awareness on threats.
The transport company must have a training and awareness program on supply chain security policies directed at all its employees (operational and administrative) and, additionally, make informational material available regarding the procedures established in the company to consider a situation that threatens its security and know how to report it. The company must have an additional program for its operators/drivers that it uses for the transport of goods destined for foreign trade, which includes specific topics according to their functions that allow them to maintain the integrity of the means of transport and their cargo, handling of incidents, changing locks in case of inspection by other authorities, when the operator identifies that they are being watched or followed during the transport of goods, among others, that are implemented.

Likewise, specific training must be offered according to their functions to help employees maintain the integrity of trailers and tractors for agricultural and security purposes, receipt and review of mail and packages, prevention of operations with proceeds of illicit origin (money laundering, terrorism financing, etc.), how to recognize and how to report internal conspiracies and protect access controls, as well as training regarding smuggling, cargo theft, placement of high-security seals and locks (VVTT inspection method), prevention of visible contamination by pests, etc. These topics must be established as part of new employee onboarding and periodically maintain update programs. Update training must be carried out periodically, after a security incident and when there are changes in the transport company's procedures.

In addition to security training programs, an awareness program on alcohol and drug consumption must be included. Also, disseminate and train staff on the company's cybersecurity policies, procedures, and standards (theft, leakage, hacking, and/or ransomware of information), including access to computer equipment and systems via passwords or phrases. Personnel who operate and administer security technology systems must receive training related to their operation and maintenance, including self-training through operational manuals and other methods. These topics must be established as part of new employee onboarding and periodically maintain update programs. Update training must be carried out periodically, after a security incident and when there are changes in the company's procedures.

Training programs must encourage active employee participation in security controls and mechanisms, as well as maintain records of all training efforts provided by the company, and the list of those who participated in them (videos, photographs, minutes, attendance lists, intranet or other system, didactic material, PowerPoint presentations, brochures, etc.). Records must include the date of the training, the names of the attendees, the topics taught, in addition to having measures to verify that the training provided met all training objectives.

The foregoing, in accordance with the regulation established by SICT, which establishes that permit holders will have the obligation to provide their drivers with training and coaching to achieve that the provision of services is efficient, safe, and effective.

Response: Explanatory Notes:
Must have a training program on security and prevention in the supply chain for all employees (administrative and operational). Briefly explain what it consists of and be sure to include the following:
I. Brief description of the topics taught in the program.
II. When they are taught (onboarding, specific periods, etc.).
III. Frequency of training and, if applicable, updates.
IV. Indicate how participation in supply chain security training is documented (videos, photographs, minutes, attendance lists, intranet or other system, didactic material, PowerPoint presentations, brochures, etc.). Training records must include the date of the training, the names of the attendees, the topics taught, in addition to having measures to verify that the training provided met all objectives of the same.
V. Explain how employee participation in security matters is encouraged.

The topics that must be included, by way of example and not limitation:
I. Access and security policies at the facilities.
II. Delivery-receipt of merchandise.
III. Confidentiality of cargo information.
IV. Transport instructions.
V. Accident and emergency reports.
VI. Instructions for placing locks and/or seals in case of inspection by other authorities.
VII. Installation and testing of security alarms and unit tracking, when applicable.
VIII. Identification of authorized formats and documents to be used.

Training to perform the review of cargo vehicles, containers, trailers, and/or semi-trailers for agricultural and security purposes must include the following topics:
I. Signs of hidden compartments;
II. Hidden smuggling in natural compartments;
III. Signs of pest contamination;

IV. Procedures to follow if something is found during an inspection of the means of transport or if a security incident occurs during transit;
V. Training on agricultural reviews must cover pest prevention measures, regulatory requirements applicable to wooden packaging materials, and the identification of infested wood. Operators and personnel who perform agricultural and security inspections of means of transport must be trained to inspect cargo vehicles for such purposes, for the above, describe how you comply with the provisions established by SEMARNAT and NOM-144 SEMARNAT-2017, in concordance with International Phytosanitary Measure No. 15 called.
Regulation of wooden packaging used in International Trade, which emanate from the United Nations Organization for Food and Agriculture and the identification of infested wood.

Handling and investigation of incidents.
There must be documented procedures to report and investigate incidents in the supply chain and the actions to be taken to prevent their recurrence, as well as to notify security personnel, business partners who may be part of the affected supply chain, security specialist or Authorized Economic Operator Program contact, and other competent authorities. Reporting and investigation procedures must include updated contact information or directory listing the names and phone numbers of personnel requiring notification. The investigation and analysis of incidents must be documented (physical and/or electronic file), as well as corrective actions to prevent them from happening again, which must be implemented as soon as possible.

In the case that the strategic fiscalized facility identifies that any of the foreign trade shipments is involved in a situation that puts the security of the supply chain at risk, due to the suspicion of a business partner or person, it must inform security personnel, business partners who may be part of the affected supply chain, security specialist or Authorized Economic Operator Program contact, as well as the competent authority, and, if possible, before the border crossing, exit, or customs dispatch (import and export). The procedures must include the steps to follow if it is discovered that a seal is altered, manipulated, or there is an incorrect seal number in the documentation, the communication protocols to the business partners involved in the supply chain, and the investigation of the incident. All the aforementioned procedures must be reviewed periodically or at least once a year to ensure that contact information and action protocols are correct.

11.1 Report of anomalies and/or suspicious activities.
In case of detection of anomalies and/or suspicious activities, related to the security of the supply chain and in accordance with your logistical processes (related to access control, delivery, receipt, and storage of merchandise, security inspections of cargo vehicles and transport operators, etc.), these must be notified to security personnel, business partners who may be part of the affected supply chain, security specialist or Authorized Economic Operator Program contact and/or other competent authorities, keeping a record of said anomalies and/or unusual activities.

Response: Explanatory Notes:
Describe the procedure to denounce or report anomalies and/or suspicious activities, as well as those that contain mechanisms to anonymously report problems related to security, be sure to include the following:
I. Who is responsible for reporting incidents.
II. Detail how you determine and identify with which authority to communicate in different scenarios or presumption of suspicious activities.
III. Mention if you keep a record of the report of these activities and/or suspicions and briefly describe what it consists of.

11.2 Investigation and analysis.
There must be written procedures to denounce or report anomalies and/or suspicious activities, as well as for the analysis and investigation of security incidents in the supply chain to determine their cause, in addition to corrective actions to prevent them from happening again, which must be implemented as soon as possible. The information derived from this investigation must be documented and available at all times for the authorities that require it.

This information and documentation generated to carry out foreign trade operations, must be included in a file for the purpose of allowing the identification of each of the processes that the means of transport went through, up to the point where the incidence was detected and that allows recognizing the vulnerability of the chain.

Response: Explanatory Notes:
Describe the documented procedure to initiate an investigation in the event of any security incident, and ensure you include the following:
I. Person responsible for conducting the investigation.
II. Documentation comprising the investigation file.
III. Information related to the driver(s)/operators, vehicles (tractors), containers, trailers and/or semi-trailers, cargo, and routes.
The documents to be included in the file derived from the investigation, in an illustrative but not exhaustive manner, may be:
I. General shipment information, Purchase Order.
II. Transport request; Confirmation of transport means; Identification of the transport operator (Access records, etc.).
III. Container Inspection Formats; Exit Order; delivery records.
IV. Videos from alarm systems, closed-circuit television, and video surveillance.
V. Documentation generated for the carrier (Packing list, Bill of Lading, instruction sheet).
VI. Documentation generated for commercial partners (Description of goods, Proformas, invoices, etc.).
VII. Documentation generated by the commercial partner (Customs declarations, Manifests, Tracking and inspection reports, videos if applicable, etc.).
VIII. Unit tracking and monitoring report (GPS tracking).

E6.
Courier and Package Profile
Receipt Acknowledgment
First Time: Renewal:
Addition:
Modification:
The data you provide will replace the data you provided when you requested your authorization.

General Information
The objective of this Profile is to ensure that courier and package companies have security practices and processes implemented in their facilities, focused on strengthening the supply chain and mitigating the risk of contamination of shipments with illicit products. Courier and package companies interested in obtaining the authorization referred to in Rule 7.1.5. must demonstrate that they have documented and verifiable processes; likewise, they must integrate the criteria required in this document according to the business model or design they have established, seeking during the implementation of security standards the application of a risk analysis culture supported by decision-making consistent with the values, mission, vision, codes of ethics, and conduct of the company itself. When the courier and package company holds an authorization for a Fiscalized Facility or Strategic Fiscalized Facility; in addition to complying with this document, it must accredit the requirements and guidelines established for the control, surveillance, access routes, infrastructure, equipment, and security of foreign trade goods established by ANAM, and may prove its compliance with that which coincides with what is established in this Profile.

Filling Instructions:
I. A Courier and Package Profile must be filled out for each of the main facilities where foreign trade cargo is consolidated and, where applicable, for related facilities such as warehouses, distribution centers, etc. The number of Profiles submitted must match the facilities declared in your application for registration as a Certified Commercial Partner under the courier and package category and with the addresses registered with the RFC (Taxpayer Registry Code).
II. In each sub-standard, the courier and package company must detail how it complies with or exceeds what is established in each of the sections as indicated.
III. The format of this document is divided into two sections, as detailed below:

Standard.
Description of the standard
1.1 Sub-standard.
Description of the sub-standard
Response: Explanatory Notes:
Describe and/or attach... a) Key points...
IV. Indicate how you comply with what is established in each of the sub-standards; therefore, you must attach the procedures in Spanish that are required, as applicable, or provide a detailed explanation of what is requested in the Response field.
The section regarding Explanatory Notes is intended to be used as a guide regarding the points that must be included in the Response or in the attached procedures, as applicable, for each sub-standard, indicating in an indicative manner those points that must not be excluded from your response.
V. Once this Courier and Package Profile has been completed, it must be attached to the Registration Application in the Enterprise Certification Scheme, Certified Commercial Partner modality, as referred to in Rule 7.1.5., first paragraph, fraction VI, subsection e).
For the purpose of verifying what is stated in the previous paragraph, the SAT (Tax Administration Service) through the AGACE (General Coordination of Customs Operations) may conduct an inspection of the facility, with the exclusive purpose of verifying what is stated in this document.
VI. Any incomplete Courier and Package Profile will not be processed.
VII. Any questions regarding the Registration Application and the Courier and Package Profile should be directed to the contacts appearing on the SAT Portal.
VIII. In the event of being authorized as a Certified Commercial Partner, this format must be kept up to date, and notice must be given when the circumstances under which the registration was granted have changed and, as a result, changes or modifications are required in the information provided in this Courier and Package Profile to the authority, in accordance with what is established in Rule 7.2.1., fourth paragraph, fractions I, II, and VII.
IX. When non-compliance related to minimum security standards results from the inspection visit, the applicant may remedy them before the issuance of the resolution established in Rule 7.1.6., for which they will have a maximum period of three months counted from the notification of the indicated non-compliances.

Installation Data
A Courier and Package Profile must be filled out for each of the cargo consolidation facilities that handle foreign trade goods, and, where applicable, for related facilities such as warehouses, distribution centers, consolidation points, etc.

Installation Information Profile Number of Courier and Package Profiles:
of
RFC Key Name and/or Corporate Name
Name and/or Denomination of the Installation
Type of Installation
Street Number and/or Exterior Letter Interior Number and/or Letter Neighborhood Postal Code Municipality/Delegation Federal Entity Age of the installation (years of operation):
Activity performed in the installation:
Preponderant products handled in the courier and package company's installation:
(As applicable)
Average number of monthly shipments (EXP): (By maritime, air, land, rail, etc. transport means) Average number of monthly shipments (IMP): (By maritime, air, land, rail, etc. transport means) Total number of employees at this installation: Installation surface area (m2):
Certifications in security programs: (Indicate if this installation has a certification from any of the following programs) CTPAT Yes No Level: Pre-Applicant: Applicant: Certified: Certified/Validated:
CTPAT Account number (8 digits): Date of last visit at this installation:
Authorized Economic Operator from other countries (OEA) Yes No Program: Registration:
Other Supply Chain Security Programs
Yes No Program: Registration:
Certifications: (Indicate if you have certifications that you consider impact your supply chain process, for example: ISO 9000; Reliable Logistics Processes, among others) Name: Category: Validity:
Name: Category: Validity:
Name: Category: Validity:
Name: Category: Validity:

Supply Chain Security Planning.
The courier and package company must develop documented policies and procedures to carry out an analysis that allows the identification of risks and weaknesses in its supply chain, with the objective that the company's senior management implements strategies that help mitigate risk in the organization's operations. Likewise, to build a solid supply chain security program, the company must have a Security Committee that incorporates representatives from all relevant departments, forming a multifunctional team that identifies areas for opportunity and proposes continuous improvement actions throughout the company's supply chain and facilities. Similarly, the company must have designated points of contact for the Authorized Economic Operator Program, which must be involved and aware of the Authorized Economic Operator requirements, belong to the company, and accredit its relationship with it, as well as respond to its supply chain security specialist (this is assigned once the company already has the Authorized Economic Operator Program). If, as a result of the risk analysis, new security measures arise to be incorporated into the company, these must be included in the company's existing procedures and, where applicable, new procedures must be developed, which creates a more sustainable structure and emphasizes that supply chain security is everyone's responsibility.

1.1 Risk Analysis.
The courier and package company must establish measures to identify, analyze, and mitigate security risks that could result in alterations to foreign trade cargo during its handling, guarding, custody, and transport in its supply chain and facilities, under the guideline of a documented procedure. This analysis must be based on the company's organizational model (e.g., facility locations, type of cargo, volume and country of origin, customers, suppliers, routes, information leakage, personnel hiring, classification and handling of documents, Information Technology, potential threats, etc.), so as to allow it to implement and maintain appropriate security measures. In accordance with the above, the company must also have a written process based on its risk analysis to select new commercial partners and monitor those with whom it is already working. This procedure must be updated at least once a year, so as to allow the permanent identification of new threats or risks considered in the operation, resulting from any security incident or originating from changes in initial conditions, as well as to identify whether the policies, procedures, control mechanisms, and security are being complied with. It is important to note that the company's Security Committee must participate in the preparation and updating of the risk analysis, as well as in the maintenance of the Authorized Economic Operator Program. Response: Explanatory Notes:
Indicate which information sources are used to qualify risks during the analysis phase.
Attach the risk matrix, as well as the documented procedure to identify risks in the supply chain and the company's facilities, ensure you include the following points:

I. Indicate the frequency with which you review and/or update the risk analysis.
II. Indicate which aspects and/or areas of the company are incorporated into the risk analysis.
III. Describe the methodology or techniques used to perform the risk analysis.
IV. Mention who are the responsible parties for reviewing and updating the risk analysis.
Likewise, the documented procedure to identify risks in the supply chain and its facilities must contemplate the risk assessment and management process, and include the following aspects:
I. The context (cultural, political, legal, economic, geographic, social, etc.) of the installation.
II. Identify risks in your supply chains and facilities.
III. Risk analysis (causes, consequences, probabilities, and existing controls to determine the level of risk as high, medium, and low).
IV. Risk evaluation (decision-making to determine risks to be treated and priority for implementing treatment).
V. Risk treatment (application of alternatives to change the probability of risks occurring).
VI. Risk monitoring and review (monitoring the results of the risk analysis and verifying the effectiveness of its treatment).
It is suggested to use Administration, management, and risk evaluation techniques in accordance with international standards ISO 31000, ISO 31010, and ISO 28000, which, according to your business model, you should implement.

1.2 Security Policies.
The courier and package company must have a policy oriented towards preventing, securing, and recognizing threats to the security of the supply chain and company facilities, such as drug trafficking, money laundering, arms trafficking, human smuggling, prohibited goods, acts of terrorism. To promote a security culture, companies must demonstrate their commitment to supply chain security and the Authorized Economic Operator Program through a statement highlighting the importance of protecting the flow of national and international commerce from criminal activities, established through the security policy. The senior officials or executives of the company who must endorse and sign the security policy may be the company president, executive director, general manager, security director, or personnel with a homologous position with decision-making authority. Response: Explanatory Notes:
Enumerate the security policy oriented towards preventing, securing, and recognizing threats in the supply chain and company facilities, indicate who is responsible for its review, signature, and dissemination to employees, as well as the frequency with which it is updated. This policy must be communicated to employees through a dissemination program and/or campaign. The security policy must be signed by a senior official of the company and be displayed in various areas of the company, including the company website, posters in key areas of the company (reception, shipments, receipts, warehouse, etc.), and as part of the company's initial and reinforcement training.

1.3 Internal Audits in the Supply Chain.
In addition to routine monitoring in control and security, it is necessary to schedule and conduct audits at least once a year, under the guidelines of a documented procedure that allows evaluating all supply chain security processes and its facilities in a more critical and deep manner, as well as guaranteeing that employees follow the company's security procedures. Audits must be carried out by the company's Security Committee, establishing a documented procedure, as well as a program or calendar for their execution. Although it is necessary that audits are focused on supply chain security and based on the evaluation, review, and execution of minimum security standards, their focus must be adjusted to the size of the organization, level of risk, business model, and variations between facilities. Audits can be general or focus on specific areas or processes according to their work program. The objective of an internal audit focused on the Authorized Economic Operator Program is to verify and guarantee that employees follow the company's security procedures. The review process does not have to be complex; however, the formats and records used for the application of these reviews must evidence that the application and execution of the evaluated processes were validated, in addition to the corresponding follow-up of identified observations. Senior management must review the audit results, analyze the causes, and undertake required corrective or preventive actions. The review process must guarantee that the necessary information is collected to allow management to perform this evaluation. The review must be documented, in addition to the fact that the courier and package company's points of contact must provide and register periodic updates on the progress or results of any audit, exercise, or validation. Response: Explanatory Notes:
Describe the documented procedure to carry out an internal audit, focused on supply chain security, ensure you include the following points:
I. Indicate how the courier and package company carries out the scheduling or calendarization to conduct an internal audit, in terms of supply chain security.
II. Indicate who participates in them, the records generated, and the frequency with which they are carried out.
III. Indicate how the company's management verifies the results of supply chain security audits and how it carries out/implements preventive, corrective, and improvement actions, as well as their follow-up and closure.
IV. The formats used during internal audits must be properly filled out, and through them, evidence that security procedures and measures are being put into practice.

1.4 Contingency and/or Emergency Plans Related to Supply Chain Security.
There must be a documented contingency and/or emergency plan; this plan must address crisis management, security recovery plans, and business resumption to ensure business continuity in the event of an impact on the normal development of the company's foreign trade activities and operations in its supply chain (during the transport, handling, storage, and custody of foreign trade cargo according to its logistics process). A crisis or contingency may include the interruption of commercial data movement due to a cyberattack, a fire, the kidnapping of a transport driver by armed individuals, customs closure, a bomb threat, the detection of suspicious packages, power outage, theft and/or damage to cargo, threats or extortion, blockades or road closures, among others. The courier and package company must communicate these plans to personnel through periodic training, as well as conduct tests, practical exercises, and annual drills of the contingency and emergency plans to verify their effectiveness, from which a properly filled-out and signed record must be maintained (for example: result reports, minutes, or reports, which must be backed by video recordings, photographs, etc., demonstrating their execution). The contingency and/or emergency plan must be updated as necessary, based on changes in operations and the organization's risk level. Response: Explanatory Notes:
Attach the documented contingency and/or emergency procedure or plan, to ensure business continuity in the event of an emergency or security situation that affects the normal development of the courier and package company's foreign trade activities. This procedure must include, in an illustrative but not exhaustive manner, the following:
I. What situations it contemplates, describing the action plan and steps to be followed in case of crisis, as well as the tasks assigned to personnel during the handling of such contingencies.
II. What mechanisms it uses to guarantee that the business continuity plan is effective.
III. Contemplate the scheduling and execution of annual drills and how they are documented (for example: result reports, minutes, or reports, which must be accompanied by video recordings, photographs, etc., demonstrating their execution).

Physical Security.
The courier and package company must have established mechanisms and documented processes to prevent, detect, or deter the entry of unauthorized personnel into the facilities. All sensitive areas of the company must have physical barriers, control elements, and deterrents against unauthorized access.

2.1 Facilities.
Facilities must be constructed with materials that can resist unauthorized access. Periodic documented inspections must be carried out to maintain the integrity of the structures, and in the event that an irregularity is detected, the corresponding repair must be carried out as soon as possible by the personnel designated for these tasks. Likewise, territorial boundaries, as well as various accesses, internal routes, and the location of buildings, must be fully identified. Response: Explanatory Notes:
Indicate the predominant materials with which the installation is constructed (for example, metal structure and sheet metal walls, brick walls, wood, among others), and indicate how the review and maintenance of structural integrity is carried out. Indicate the personnel or area responsible for carrying out inspection, maintenance, and repair tasks for facility damages. Attach a general distribution or architectural plan, where the installation boundaries, access routes, emergency exits, location of buildings, critical areas, parking lots, and adjacent properties can be identified.

2.2 Access at Doors and Booths.
Entry or exit doors for personnel and/or vehicles must be attended, controlled, watched, and/or supervised. The number of access doors must be kept to the minimum necessary. Access to sensitive areas must be restricted according to the job description or assigned tasks. Response: Explanatory Notes:
Indicate how many doors and/or accesses exist in the facilities, as well as the operating hours of each, and indicate how they are monitored (in case of having assigned security personnel, indicate the quantity). Detail if there are blocked or permanently closed doors and/or accesses and their location. Describe how you ensure that access to sensitive areas is restricted according to the job description or assigned tasks (include the type of records and controls you use).

2.3 Perimeter Walls.
Perimeter walls and/or peripheral barriers must be installed to secure the perimeters of the courier and package company's facilities, based on a risk analysis. Fences, interior barriers, or a mechanism to identify and segregate international cargo, as well as high-value and dangerous cargo, must be used. These must be inspected regularly and maintain a record of the review to ensure their integrity and identify damage, which must be repaired as soon as possible by the personnel designated for these tasks. The storage areas, high-value, dangerous, and/or restricted-access areas must be clearly identified and monitored to prevent unauthorized entry. Response: Explanatory Notes:
Describe the type of peripheral barrier and/or walls that the installation has, ensuring you include the following points:
I. Describe which areas are segregated.
II. Point out their characteristics (material, dimensions, etc.).
III. In case of not having walls, justify the reason in detail.
IV. Frequency with which the integrity of the perimeter walls is verified, and the records that are kept to ensure their integrity and identify damage, which must be repaired as soon as possible.
Indicate the personnel or area responsible for carrying out inspection and damage repair tasks.
Describe how the cargo destined for foreign countries, dangerous material, and high-value cargo is segregated; ensure you include the following points:
I. Indicate how national merchandise and foreign trade merchandise are separated, and if it is additionally identified (for example: different packaging; labels; packing, among others).
II. Identify and point out restricted-access areas (dangerous goods, high value, confidential, etc.).

The procedure for the inspection of perimeter walls could include:
I. Responsible personnel to carry out the review.
II. How and how often the inspections of fences, perimeter walls and/or peripheral walls and buildings are carried out.
III. How the inspection record is kept.
IV. Who is responsible for verifying that repairs and/or modifications meet the technical specifications and necessary security requirements.
2.4 Parking Lots.
Access to the facilities' parking lots must be controlled and monitored by security personnel or personnel designated for this task. Private vehicles (of employees, visitors, suppliers, and contractors, among others) must be prohibited from parking within the merchandise handling and storage areas, as well as in adjacent areas. Response: Explanatory Notes:
Describe the procedure for the control and monitoring of parking lots, ensuring you include the following points:
I. Those responsible for controlling and monitoring access to the parking lots.
II. Identification of the parking lots (specify if the visitor parking is separated from the merchandise storage and handling areas).
III. How the entry and exit of vehicles to the facilities is controlled, indicate the records made for parking control, the existing control mechanisms (for example: ticket machines, card readers, badges, etc.), how they are assigned, and the responsible area for doing so.
IV. Policies or mechanisms to prevent the entry of private vehicles into the merchandise storage and handling areas.

2.5 Key and Lock Device Control.
Windows, doors, and interior and exterior fences, according to their risk analysis, must be secured with locking devices. The company must have a documented procedure for the handling and control of keys and/or locking devices for interior areas considered critical. Likewise, they must keep a record and establish control through signed responsibility letters from persons who have keys or authorized access according to their level of responsibility and tasks within their work area. Response: Explanatory Notes:
Indicate if all doors, windows, interior and exterior entrances have closing or security mechanisms.
Attach the documented procedures for the handling and control of keys and/or locking devices, ensuring they include the following points:
I. Those responsible for administering and controlling key security.
II. Format and/or control record for key lending.
III. Treatment of loss or non-return of keys.
IV. Point out if there are areas where access is with electronic devices and/or some other access mechanism.
2.6 Lighting.
Lighting inside and outside the facilities must allow for clear identification of people, material, and/or equipment located there, including the following areas: entrances and exits, handling, loading, unloading, and storage areas for merchandise, perimeter walls and/or peripheral walls, interior fences, and parking areas, and must have an emergency and/or backup system in sensitive areas. Response: Explanatory Notes:
Describe the procedure for the operation and maintenance of the lighting system, ensuring you include the following points:
I. Point out which areas are illuminated and which have a backup system (indicate if you have an auxiliary power plant or some other mechanism to supply electrical energy in case of any contingency).

II. How do you ensure that the lighting system is appropriate in each of the company's areas so that it allows clear identification of the personnel, material, and/or equipment located there.
The procedure may include:
I. How the lighting system is controlled.
II. Operating hours.
III. Identification of areas with permanent lighting.
2.7 Communication Devices.
The courier and package company must have communication devices and/or systems to contact security personnel and/or emergency and security authorities as required immediately. Additionally, it must have a backup system and verify its proper functioning periodically. Response: Explanatory Notes:
Describe the procedure that personnel must perform to contact the company's security personnel or, in their case, the corresponding authority in case of any security incident.
Indicate if operational and administrative personnel have or have access to devices (landline phones, mobile phones, alert and/or emergency buttons, etc.) to communicate with security personnel and/or the corresponding person (these must be accessible to users to be able to react promptly). Indicate what type of communication devices the company's security personnel uses (landline phones, cell phones, radios, alarm system, etc.). Describe the procedure for the control and maintenance of communication devices, ensuring you include the following points:
I. Policies for the assignment of mobile communication devices.
II. Maintenance or replacement program for fixed and mobile communication devices.

III. Indicate if you have backup communication devices, when the permanent system fails and, in its case, detail briefly.
The procedure may include:
I. Responsible for the proper functioning and maintenance of communication devices.
II. Verification and maintenance record of the devices.
III. Method of assignment of communication devices.
2.8 Alarm Systems and Closed-Circuit Television and Video Surveillance Systems.
Alarm systems, closed-circuit television, and video surveillance systems, and security technologies, must be used to monitor, notify, or deter unauthorized access and prohibited activities in the facilities and other considered sensitive areas, notify the corresponding area, and also be used as a tool of evidence in investigations derived from any security incident. These security systems and technologies must be placed according to a prior risk analysis so that areas involving the handling, loading, unloading, and storage of merchandise, security inspections of cargo vehicles, as well as the access of personnel, visitors, suppliers, passenger and cargo vehicles, and other considered sensitive areas are permanently and uninterruptedly monitored, supervised, and supervised in accordance with what is established for this effect by the ANAM and simultaneous operation with the customs or area in question. The foregoing is applicable in cases where courier and package companies are located within a supervised facility and/or outside of it. Such systems must allow clear identification of the area or environment being monitored and maintain a backup of the recordings for at least one month, considering that, in the case where their logistics processes exceed this period, the period for maintaining these backups must be increased, in order to have the necessary elements to assign corresponding responsibilities in case of a security incident. The courier and package company must have a documented operation procedure. In the case of alarm systems, closed-circuit television, and video surveillance systems, and security technologies, they must include supervision of the good condition of the equipment, verification of the correct position of the cameras, indicate the frequency with which the backup of the recordings must be performed for at least sixty days in accordance with rule 2.3.8., for those that have supervised facility and strategic supervised facility authorizations, for other cases the recording period must be at least thirty days, as well as those responsible for their operation. Such systems and all security technology infrastructure must have restricted access. Response: Explanatory Notes:
Mention the documented procedure in which the functioning of the external alarm system or sensors is indicated, and in its case, describe the following points:
I. Indicate if doors and windows have alarm sensors, as well as the areas where motion sensors are available.

II. Procedure to follow in case an alarm is activated.
III. Indicate the personnel or area responsible for maintenance, how failures are reported, and the records they use.
Describe the documented procedure for the operation of alarm systems, closed-circuit television, and video surveillance systems, and security technologies, (this must be reviewed and updated annually and according to the risk analysis or circumstances), ensure you include the following points:
I. Indicate the number of security cameras of the alarm and closed-circuit television and video surveillance systems installed, and their location by area (detail if it covers the loading and unloading zones, including the entry and exit points of the facilities, to cover the movement of vehicles and individuals, and where the inspection mentioned in sub-standard 7.2 is carried out). Attach a layout or map of the distribution of security cameras.
II. Point out the location of the alarm systems, closed-circuit television, and video surveillance systems, and security technologies, where the monitors are located, who reviews them, as well as the operating hours, and in its case, if there are remote monitoring stations. All security technology infrastructure must be physically protected against unauthorized access.
III. Periodic and random reviews of the recordings must be carried out. Indicate how they review them (random, every week, special events, restricted areas, etc.), who is the designated personnel, and how management is involved in the reviews. The results of the reviews must be documented to include corrective actions for audit purposes.
IV. Indicate for how long these recordings are kept (it must be at least one month).

V. The alarm systems, closed-circuit television, and video surveillance systems, and security technologies must have an alternative energy source that allows them to continue functioning in case of an unexpected loss of direct energy. Therefore, indicate if the closed-circuit television and video surveillance system and security technologies are backed up by an electrical power plant or some other mechanism to supply electrical energy, which guarantees their functioning. These systems should have an alarm/notification function, which indicates a failure condition in the functioning and/or recording, point out if your systems have this function.
VI. Indicate if, in addition to the alarm systems, closed-circuit television, and video surveillance systems, you use some other type of technology to strengthen the security measures you already have.
VII. Describe the procedure that has been implemented to regularly test and inspect the alarm systems, closed-circuit television, and video surveillance systems, and security technologies and ensure their proper functioning. The results of the inspections and the functional tests must be documented, as well as the necessary corrective actions (these must be implemented as soon as possible). Additionally, that the documented results of these inspections are kept for a sufficient time for audit purposes.
VIII. Indicate if the provider of the alarm systems, closed-circuit television, and video surveillance systems, has access to the security cameras, if they are in charge of monitoring them, how access is controlled, and who is responsible for said monitoring.

Physical Access Controls.
Physical access controls are mechanisms or procedures that prevent and prevent unauthorized entry to the facilities, maintain control of the entry of employees and visitors, and protect the company's assets.
Access controls must include the identification of all employees, visitors, and suppliers at all entry points. Likewise, records must be kept and the documented mechanisms or procedures for entry to the facilities must be permanently evaluated, being the basis for beginning to integrate security as one of the primary functions within any company.
3.1 Security Personnel.
The courier and package company must have security and surveillance personnel. This personnel plays an important role in the physical protection of the facilities and merchandise during its transport, handling, and storage within the company, as well as for controlling the access and exit of all people to the property. Security personnel must have a documented procedure to carry out their functions and have full knowledge of the mechanisms and procedures in emergency situations, detection of unauthorized persons, or any incident in the facility. Management must periodically verify compliance with procedures, policies, and functions through internal audits with the objective of verifying their correct execution. Response: Explanatory Notes:
Describe the documented procedure for the operation of security personnel and ensure you include the following points:
I. Indicate the number of security personnel working in the company.
II. Point out the positions and/or functions of the personnel and operating hours.
III. In case of hiring an external service, provide the general data of the company (RFC key, corporate name, address), and specify the number of employed personnel, operational details, records, and reports they use to perform their functions.
IV. In case of having armed personnel, describe the procedure for the control and storage of weapons.

3.2 Employee Identification.
The management or security personnel of the company must properly control the delivery and return of badges, ID cards, and/or employee, visitor, and supplier identification credentials. Procedures for the delivery, return, and change of access devices (for example, keys, badges, and/or proximity cards, etc.) must be documented. Access to sensitive areas must be restricted according to the job description or assigned tasks. Response: Explanatory Notes:
Describe the procedure for employee identification and ensure you include the following points:
I. Identification mechanisms (badge and/or photo ID, biometrics, proximity cards, etc.).
II. Indicate if employees use uniforms, how they are assigned (by position, area, functions, etc.) and withdrawn (if applicable).
III. Indicate how personnel contracted by a business partner, who works within the facilities (contractors, subcontractors, in-house services, personnel from merchandise handling companies, etc.) is identified.
The procedure must also describe how the company delivers, changes, and withdraws employee identification and access controls and ensure you include the responsible areas for authorizing and administering them. Indicate how you ensure that access to sensitive areas is restricted according to the job description or assigned tasks (include the type of records and controls you use). Attach the documented procedure for the control of identifications.
3.3 Visitor and Supplier Identification.
To have access to the facilities, visitors and suppliers must present official identification with a photograph for documentation purposes upon arrival and a record must be kept. All visitors and suppliers must receive a temporary identification, be accompanied by company personnel during their stay in the facilities, and ensure that the visitor/supplier always wears the provisional identification provided in a visible place. This procedure must be documented.

Response: Explanatory Notes:
Describe the procedure for the access control of visitors and suppliers, ensure you include the following points:
I. Point out what records are kept (personal forms for each visit, logbooks, among others).
II. The record of visitors and suppliers must include the following:
a) Date of the visit. b) Name of the visitor. c) Identification number with photo (official documents such as: driver's license, passport, INE, etc.). d) Entry and exit time. e) In the case of vehicle access, the format must include the data of the private or cargo vehicle (model, plate, trailer number, etc.).
III. Point out who is the person responsible for accompanying the visitor and/or supplier and if there are restricted areas for their entry.
3.4 Procedure for Identification and Removal of Unauthorized Persons or Vehicles.
The courier and package company must have documented procedures that specify how to identify, confront, or report unauthorized or identified persons and/or vehicles, said procedure must be communicated to responsible personnel through training. The training must be documented. Response: Explanatory Notes:
Attach the documented procedure to identify, confront, or report unauthorized or identified persons and/or vehicles.
The procedure must include:
I. Responsible personnel.
II. Designate a person or area responsible for being informed of security incidents.

III. Instructions for confronting and addressing unidentified personnel.
IV. Point out in which cases the corresponding authorities must be reported.
V. How the record of security incidents and the measures adopted in each case is carried out.
3.5 Courier and Package Deliveries.
Courier and package deliveries destined for company personnel must be examined upon arrival and departure, before being distributed to the corresponding areas and destinations. Likewise, the company must have a documented procedure for the receipt and review of courier and package deliveries, which must be communicated to responsible personnel through training. The training must be documented. Response: Explanatory Notes:
Describe the procedure for the receipt and review of courier and package deliveries and ensure you include the following:
I. Personnel in charge of carrying out the procedure.
II. Indicate how the personnel or provider of the courier and package delivery service is identified (point out if an additional procedure to the supplier access procedure is required).
III. Point out how the review of the courier and/or packages is carried out, what mechanism you use, the records that are kept, and in its case, the detected incidents.
IV. Describe the characteristics or elements to determine what courier and/or package is suspicious.
V. Point out what action you take in case of detecting suspicious courier and/or packages.

Commercial Partners.
The courier and package company must have written and verifiable procedures for the selection and hiring of new commercial partners and monitoring of existing partners, such as: carriers, service providers such as cleaning, security, staffing, installation and maintenance of alarm systems, closed-circuit television and video surveillance, IT system and Technology providers, high-security seal suppliers, freight handling, unloading, storage and maneuvering service providers, contractors, airlines, among others., and according to their risk analysis, require them to comply with security measures to strengthen the international supply chain. The risk analysis carried out by the courier and package company regarding its commercial partners (clients and suppliers) must include risks related to the identification of activities associated with money laundering and terrorism financing. Additionally, the courier and package company must foster a documented social compliance policy and program that, at a minimum, addresses how its employees and commercial partners could ensure that national and imported goods, inputs or merchandise entering Mexico for the manufacture of products or merchandise do not originate from extraction, production or manufacturing using prohibited forms of work, that is, forced or compulsory labor including child forced or compulsory labor under Article 23.6 of the USMCA and the Agreement establishing the goods whose importation is subject to regulation by the Ministry of Labor and Social Welfare, published in the Official Gazette on February 17, 2023.

4.1 Selection Criteria.
There must be documented procedures for the selection, follow-up or renewal of business relationships with business associates or suppliers, which include interviews, reference checks, evaluation methods and use of provided information. The information derived from the investigation and/or evaluation of business associates and/or suppliers must be documented and integrated into a file (physical or electronic). The procedure for the selection of commercial partners must include indicators to detect customers or suppliers who may not be legitimate or with unlocated addresses. If the investigation and/or evaluation of any commercial partner leads to substantial doubts about the truthfulness of their operations or services, the company must avoid hiring them and, if applicable, notify its security specialist or Authorized Economic Operator Program contact and the corresponding authority about its suspicions.

Response: Explanatory Notes:
Attach the information collected for the selection and hiring of new commercial partners and monitoring of partners already working with you, this includes any type of commercial relationship they have with your company and ensure you include the following points:
I. What information is required from your commercial partner.
II. What aspects are reviewed and investigated.
III. Indicators to identify customers or suppliers who may not be legitimate (payments above standard rate, in cash; having little knowledge of the merchandise to be shipped; being evasive; minimal contact information (cell phone, contact points, emails, etc.); recently created companies or businesses without commercial history, etc.) or with unlocated addresses. This point refers to indicating all those alerts to determine that a commercial partner is not reliable and thus conduct a deeper investigation and evaluate whether to work with them.
IV. Indicate if you maintain a physical or electronic file for each of your commercial partners, as well as the information it must contain.
V. Indicate how you evaluate your commercial partner's services and what points you review.
The file must include at least the following:
I. Company data (name, tax ID key, activity, etc.).
II. Legal representative data.
III. Proof of address.
IV. Commercial references (if applicable).
V. Contracts, agreements and/or confidentiality agreements, security policies.
VI. If applicable, certificate or certification number in security programs to which they belong.

4.2 Security Requirements.
The courier and package company must have a documented procedure in which, according to its risk analysis, it requests additional security requirements from those commercial partners involved in its supply chain, such as: the services it provides as courier and package, as well as service providers such as cleaning, security, staffing, installation and maintenance of alarm systems, closed-circuit television and video surveillance, IT system and Technology providers, high-security seal suppliers, freight handling, unloading, storage and maneuvering service providers, contractors, airlines, among others. The requirements must be based on the Courier and Package Profile established by AGACE, or if it exists, the specific Profile for each actor in the supply chain that corresponds to them. The courier and package company must request from its commercial partners documentation that certifies and proves that they meet the minimum security standards established in this Courier and Package Profile, either through a written statement issued by the legal representative of the partner, agreements or contractual clauses, backed up with documentation supporting compliance with the requirements established in another Authorized Economic Operator Program. Similarly, the company must take into account and know the specific requirements of the Authorized Economic Operator Program that will be applicable to each of its commercial partners, based on their activity within the supply chain. In the case of commercial partners of the company that provide their services inside the facilities, they must be obliged to comply with these supply chain security requirements.

Response: Explanatory Notes:
Describe the procedure that indicates how you carry out the identification of commercial partners that require compliance with minimum standards in terms of security. Ensure you include the following points:
I. A register of commercial partners that must comply with security requirements, and mention what type of providers these are (carriers, warehouses, security companies, customs brokers, companies authorized to provide freight, unloading and merchandise handling services, etc.).
II. Indicate in what documentary form (agreements, accords, contractual clauses and/or addenda) you ensure that your commercial partners comply with security requirements.
III. Indicate if there are agreements, accords, contractual clauses, and/or addenda regarding the implementation of security measures with your service providers inside your company, such as customs brokers, private security guards, cleaning services, gardening, cafeteria, maintenance, Information Technology providers, etc.
IV. Indicate if you have commercial partners who are required to belong to a supply chain security program, either certified by a foreign authority or the private sector (for example: CTPAT, or any other World Customs Organization Authorized Economic Operator Program), as well as the information and documentation requested from them.

4.3 Commercial Partner Reviews.
The courier and package company, through the Security Committee, must carry out periodic evaluations and those derived from risk situations, of the processes and installations of business associates based on a risk analysis, to guarantee that they have minimum security standards required by the company based on the Authorized Economic Operator Program, keep records of them, which allow verifying that processes and security measures are being executed, as well as the corresponding follow-up. When inconsistencies are found, the company must communicate this to its partner or supplier and provide a justified period to address identified observations or areas of opportunity; otherwise, take necessary measures to sanction them. Carrying out security evaluations of commercial partners is important to guarantee that there is a solid security program and that it functions correctly, which is why, in addition to a documented procedure, there must be a program or calendar for the execution of said reviews or security evaluations, prioritizing partners that are more critical according to their risk analysis. If a member is not evaluated and the company does not know if the processes and installations of its commercial partners function correctly, it puts its supply chain at risk.

Response: Explanatory Notes:
Describe the procedure to carry out evaluations to verify requirements (processes and installations) of your commercial partners, ensure you include the following points:
I. Frequency with which you visit the commercial partner (this must be at least once a year and derived from risk situations).
II. Program or calendar for the execution of security reviews.
III. Record or report of the verification and, if applicable, the corresponding follow-up.
IV. The verification formats must be properly filled out, placing the date, name and position of those participating in the review, signatures, etc.
V. Indicate what action measures are taken when commercial partners do not comply with the established security requirements.
VI. In case of having commercial partners with CTPAT certification or another supply chain security certification program, indicate the frequency with which their status is reviewed, how you record it and the actions you take in case it is detected that it is suspended and/or cancelled as established in your procedure.

The procedure must include:
I. Visit frequency;
II. Review points in terms of security;
III. Report preparation;
IV. Feedback and agreements with the commercial partner;
V. Follow-up to agreements;
VI. Measures in case of detection of non-compliance with requirements;
VII. Evaluation records.
Area or person responsible for carrying out this procedure.

Process Security.
Control measures must be established to guarantee the integrity and security of the merchandise and processes related to transport (in any of its modalities), handling, customs clearance, storage and/or distribution of cargo throughout the supply chain. These control measures and procedures must be documented and ensure maintaining the integrity of your import and export shipments from the point of receipt until delivery.

5.1 Process Mapping.
The courier and package company must have a map that shows step by step the logistical process of the flow of foreign trade merchandise and the required documentation through its international supply chain.
The company must take into account and include within its mapping all parties involved in its supply chain, containing those that handle import and export documentation, such as customs brokers, others that may not directly handle the cargo but may have operational control such as carriers, freight, unloading, storage and merchandise maneuvering service providers and airlines. If any part of the transport is subcontracted within your supply chain, it is essential that it be considered within your risk analysis and process mapping, since the more direct and indirect suppliers, the greater the risk involved.

Response: Explanatory Notes:
Attach the document where you illustrate and describe the process mapping through which your import and export merchandise passes, from the point of origin to the destination, with the aim of having clearly identified each of the steps involving the reception, storage, handling, custody and delivery of courier and package cargo.

The process mapping must include, the names (tax ID key and corporate name) of the companies that provide services in your logistics chain. This mapping must contain at least the following aspects:
I. Collection, delivery and/or reception of foreign trade merchandise at the (the) distribution center(s) and/or collection points.
II. Security in the transfer of merchandise to a fiscalized or supervised facility:
a) Indicate the rest or holding points and areas for cargo vehicles during the transfer of foreign trade merchandise (import and export), as well as the documentation generated when cargo enters and leaves the facilities b) Indicate the estimated times that said vehicles remain in rest (reposo) or holding areas (company yards, exit customs, customs broker agency facilities, warehouses, transfer yards or transport, among others).
III. Security in storage and/or distribution in a fiscalized or supervised facility.
IV. Process security during customs clearance.
V. Security in international transport (air, land, sea or multimodal).
VI. Security in de-customs and/or de-consolidation in the destination country.
VII. Delivery to final destination.

5.2 Warehouses and Distribution Centers.
When the courier and package company has external warehouses and/or distribution centers registered under the same tax ID, they must be subject, according to their characteristics, to what is established in this document, with the object of maintaining integrity in its supply chain. Similarly, indicate if you have commercial partners providing some warehouse, distribution center or other service inside your facilities, which must at all times comply with the minimum security standards established by the company itself.

Response: Explanatory Notes:
According to your process mapping, if foreign trade merchandise is transferred or moved to another alternate warehouse and/or distribution center different from the one operated by the courier and package company, you must indicate if they are registered under your Tax ID providing their general data (Name and address) and briefly explaining what activity is carried out in that or those installations (Cross Dock, temporary warehouse, etc.). Likewise, indicate if these belong to the company or is a service contracted through a third party and are part of a shareholder group. In this case, according to the supplier selection criteria mentioned in the section on Commercial Partners of this document, indicate how you ensure compliance with minimum security requirements (warehouses managed by a third party are not obligated to present a Courier and Package Profile).

Installations that have a concession or authorization of Fiscalized Facility or Strategic Fiscalized Facility; registered under your Tax ID must fill out for each authorized installation, the Profile of the corresponding modality and item.

5.3 Cargo Delivery and Reception.
The courier and package company must guarantee the supervision of the identification of operators of own or subcontracted transport means, who carry out the collection, delivery or reception of foreign trade merchandise inside or outside your facilities, warehouses and/or distribution centers. Likewise, it must designate a person responsible for supervising the loading or unloading of the shipment, even according to instructions received from clients for its handling and transfer. On the other hand, it must supervise, inspect and verify through mechanisms, tools or non-intrusive technology available, the integrity of the transport means and of the foreign trade merchandise entering or leaving the courier and package company, checking the information described in the exchange lists received previously according to the traffic or transport modality in question. Similarly, it must guarantee that the driver transporting foreign trade merchandise, during delivery or reception, has the required documentary information before submitting to customs clearance formalities and authorizing its exit. The cargo preparation areas and the immediate surrounding areas must be inspected regularly to guarantee that these areas remain free of visible contamination by pests. During the loading and unloading process of merchandise, the company's security area (supervisor or security guard) must be present to validate that the process is being carried out correctly, mitigate the risk of shipment contamination (prohibited, illicit merchandise or pests) and register said review (incident reports, records, reports, etc.). As evidence that the high-security seal and/or lock was placed correctly, digital photographs must be taken at the time of loading the vehicles. To the extent possible, these images should be sent electronically to the destination or delivery contact point of the merchandise for verification purposes. Also, the personnel responsible for the shipping and/or receiving area must review the information included in import and/or export documents to identify or recognize suspicious cargo shipments. Likewise, specific training must be provided on identifying common errors in export shipment documentation, with the aim of preventing these from resulting in security incidents or suspicious merchandise. In case of having own cargo transport, it must provide training to transport operators to review import and/or export documentation in order to identify or recognize suspicious cargo shipments, such as:
I. Originating or destined to unusual places;
II. Different routes;
III. Cash payments;
IV. Observing unusual sending and/or receiving practices;
V. Lack of information.

Response: Explanatory Notes:
Attach the documented procedure for cargo delivery and reception, including the following:
I. Inspection method at the access point to the courier and package company.
II. Designation of personnel responsible for receiving the driver and the merchandise upon arrival.
III. Coordination of the areas of the courier and package company who receive the exchange lists from transporters prior to their arrival and with the customs offices where customs clearance formalities are fulfilled.
IV. Record of the introduction to the courier and package company of merchandise with complete and consolidated cargo.
V. Release deadlines.
VI. Prior requests.
VII. Services offered by the courier and package company for the movement of merchandise prior to its customs clearance.
VIII. How it guarantees that the transport means is free of visible pest contamination, in case any type of visible pest, contamination, trash, insects, grass, weeds or brush is identified, how it is reported and what actions are taken regarding it.
Attach the documented procedure to detect and report discrepancies in the delivery or reception of transport means that transports merchandise and ensure it includes the following points:
I. Persons responsible for carrying out the review.
II. Documents to check.
III. Areas to which the information is reported.

5.4 Merchandise Tracking Procedure.
The courier and package company is responsible for monitoring and supervising the integrity of foreign trade merchandise throughout the supply chain, so it must have documented procedures in which the use of technology for tracking and supervision of activities (during collection; arrival at its cargo consolidation centers, storage, custody and release of merchandise, object of foreign trade), with the aim of guaranteeing compliance with customs clearance formalities, guaranteeing at all times having the following information: bill of lading number and information, packing list, waybill or other transport documents, as applicable, name and address of consignee or sender, description, value and origin of the merchandise, physical location in the installation, among others in accordance with applicable regulations. For the purposes of tracking units via land, the company must include in the aforementioned procedure, the identification of predetermined routes, estimated times for collection and delivery at warehouses and/or distribution centers or collection points, if applicable, intermediate points. Likewise, describe the measures in case of identification of delays on the route due to weather conditions, traffic, route changes, authority inspection or incidents related to security. The supervision data and record of all maneuvers in the courier and package company, as well as route histories must be preserved for one year when the authority and/or transporter must carry out an evaluation due to a security incident.

Response: Explanatory Notes:
Attach the documented procedure to monitor internal transfers in the courier and package company of complete and/or consolidated foreign trade merchandise.
This procedure must include, among other aspects according to your operation:
I. Have GPS whose external hardware is hidden and can resist attempts to remove it, indicate the type of system implemented in the units you use and, if applicable, the consultation tools you have available to monitor the merchandise.
II. Identify predetermined routes, estimated delivery times, between intermediate points and maneuvers in courier and package companies according to the transport in question.
Once the time between assigned points has been determined, they must have a tracking process (route audit) and the corresponding records.

There must be systems or procedures with instructions in case of delays in the route; likewise, drivers must notify their supervisor of any significant delay in the route due to weather, traffic, accidents, mechanical failures, route changes, etc. And for its part, the company must independently verify the cause of said delay.

III. Detail if you have a means to communicate with the carrier during transport and if you have more than one form of communication.

IV. When the tracking is carried out by a third party, indicate who is responsible, and how it is verified that it is being carried out correctly, in accordance with the procedures established by the company.

V. In case of having own freight transport, GPS or equivalent technology must be used to guarantee that the trailer is also monitored and tracked. Describe how you carry out this tracking.

VI. GPS records or route histories must be safeguarded for cases of security incidents and audits.

5.5 Report of discrepancies in the cargo.

There must be documented procedures to detect and report missing, excess, prohibited merchandise, or any other discrepancy in the delivery or receipt of the goods collected prior to fulfilling the customs clearance formalities, in order to have information that contributes to the corresponding investigations by authorized consignees and, where applicable, by competent authorities. Likewise, you must describe the measures and actions to be taken in case of identifying the transport and handling of illicit, undeclared, and prohibited merchandise or those that, due to their nature, put the safety of users at risk, possibly during the following processes: reception, delivery, warehouse for prior inspections, consolidations, de-consolidations, transport medium yards, and where applicable, according to the services offered.

Response: Explanatory Notes:
Attach the documented procedure to detect and report discrepancies in the delivery or receipt of the merchandise and ensure it includes the following points:
I. Those responsible for carrying out the review.
II. Documents to be checked.
III. Areas to which the information is reported.
This procedure must be applied to consolidated merchandise located in the warehouse.

5.6 Processing of information and documentation of the cargo.

The courier and package company must have documented procedures to ensure that the electronic and/or documentary information used during the movement, storage, custody, handling, and clearance of the cargo, as well as the information received from business associates, is legible, complete, accurate, reported in real-time, and protected against changes, loss, or introduction of erroneous information.

In the same way, there must be documented procedures to corroborate that the information received from business associates is reported accurately and timely. Likewise, forms and documentation related to import and/or export should be safeguarded to prevent unauthorized use.

Response: Explanatory Notes:
Describe the procedure for processing cargo documentation, ensure you include the following points:
I. Detail how you transmit relevant information and documentation regarding the transport and handling of cargo, as well as all those involved in the supply chain of the courier and package company, indicate if you use a specific computer control system and briefly explain its function. Likewise, detail how you validate that the provided information is legible, complete, accurate, reported in real-time, and protected against changes, loss, or introduction of erroneous information.

II. The electronic information of shipments and cargo in general must include the seal and/or lock number with which the cargo was secured.

III. Indicate how business associates transmit information to the courier and package company and ensure its accuracy, for example: the use of the institutional application "Consulta Remota de Pedimentos" to corroborate the payment of contributions and/or compensatory fees for exit authorization.

5.7 Inventory management, control of packaging, container, and packing material.

The courier and package company must have documented procedures for inventory control and cargo storage; these must involve periodic reviews and audits to verify their correct management. Likewise, it must have a documented procedure for the control of packaging, container, and packing material of the merchandise, which also includes the procedure for control, dissemination, and prevention of visible pest contamination, in the case of using wooden packing materials (such as pallets, boxes, crates, cages, reels, dunnage, chocks, supports, or platforms) to stack, move, and protect the cargo throughout its entire supply chain.

Response: Explanatory Notes:
Attach the documented procedure for inventory management. This must include, among other aspects according to your operation:
I. The frequency with which you carry out stock verification (periodic inventory). Indicate if there is a scheduled calendar documented to carry them out.

II. Indicate what is done in case of excesses and shortages in inventories.

III. Indicate the treatment given to the control and handling of packaging, container, and packing material, and, where applicable, of shrinkage, waste, or excess material, which also includes the procedure for control, dissemination, and prevention of visible pest contamination, in the case of using wooden packing materials (such as pallets, boxes, crates, cages, reels, dunnage, chocks, supports, or platforms) to stack, move, and protect the cargo.

IV. This point is also focused on reducing the risk of introduction or dissemination of quarantine pests of importance to the country through packaging (imports); therefore, describe how you comply with the provisions established by SEMARNAT and NOM-144-SEMARNAT-2017, in accordance with International Standard for Phytosanitary Measures No. 15, known as "Regulation for Wood Packaging Material used in International Trade," which emanate from the Food and Agriculture Organization of the United Nations.

V. Indicate how the fumigation process is to kill, inactivate, sterilize, desiccate, or eliminate pests. What actions do you take in case quarantine of packing materials is required?

VI. Indicate the area responsible for carrying out this process, as well as the documentation or certificates obtained.
The applicant's procedures may include:
I. Warehouse only accessible to authorized personnel.

II. Frequency of stock control.

III. Control of incoming merchandise, transfers to other warehouses, permanent and temporary withdrawals.

IV. Actions taken if irregularities, discrepancies, losses, or thefts are identified.

V. Treatment of deterioration or destruction of merchandise.

VI. Separation of various types of merchandise, for example: high value or hazardous.

Customs Management.

The courier and package company must have documented procedures in which internal and operational policies are established, as well as the necessary controls for the due compliance of customs obligations.

Likewise, it must have specialized personnel and documented procedures that establish the verification of the information and documentation generated by the customs broker or, where applicable, ensure the processes carried out by the customs representative.

6.1 Customs Clearance Management.

The courier and package company must have a documented procedure in which the criteria for the selection of a customs broker or, where applicable, a customs representative are established, who, in accordance with national legislation, are authorized to promote on behalf of others the clearance of merchandise.

Response: Explanatory Notes:
Describe the selection and evaluation procedure for the customs broker or customs representative and ensure it includes the following points:
I. Selection criteria.

II. Evaluation methods and periodicity.

III. Describe the indicators with which you evaluate the service of customs brokers.

Indicate the full name and patent and/or authorization number of the customs broker or customs representative authorized to promote your foreign trade operations.

6.2 Customs Obligations.

The courier and package company must have a documented procedure for the compliance of customs obligations arising from the foreign trade operations carried out. This must include at least the following: the communication process with customs authorities when they are aware of the transport and custody of values greater than that determined by the authority in accordance with Article 9 of the Law. The transmission of cargo manifests through the SEA (Digital Window) and the established deadlines, in accordance with Article 38 of the Law Regulation and Rule 1.9.15.; notices in cases of destruction, loss, and decomposition of merchandise; the clearance process through the legal representative of the courier and package company whenever they do not exceed the determined amounts, the established exceptions, and the determination of payment of the global rate that corresponds. For cases where the electronic pre-validation of data service is provided, establish how you comply with the obligations foreseen in Rule 1.8.2; the notices that must be sent to the authorities regarding explosive merchandise and firearms; the update of data in the CAAT registry and its periodicity. The return processes of merchandise when it is in deposit before customs; regarding the use of the generic RFC in case of global operations and the use of RFC for individual operations.

In addition to the above, the courier and package company, in case of having authorization as a Strategic Fiscalized Premises, Fiscal Deposit, elaboration, transformation, or repair in a Fiscalized Premises, must have a documented procedure for the compliance of customs obligations arising from the foreign trade operations they handle. This must include at least the following: a) the annual guarantee that must be paid to the fiscal interest in accordance with the average value of the merchandise they handle; b) The identification of the physical space for the customs inspection carried out by customs authorities; c) the physical space designated for handling, storage, and custody services regarding merchandise that has become property of the federal treasury; d) the free storage and custody of merchandise in accordance with regulations; e) process of transfer of merchandise between warehouses; f) process to prove payment on the revenues for being a fiscalized premises; g) regarding the authorization for merchandise to be subject to elaboration, transformation, or repair, where applicable.

On the other hand, it must include in the procedure, the communication process with consignees in case of destruction or loss of merchandise; guarantee the exchange of information through a simultaneous system containing the data indicated in Rule 2.3.8 and establish protocols related to the treatment, communication, storage, and custody of foreign trade merchandise under the internal transit regime.

Response: Explanatory Notes:
Attach the procedure to comply with your customs obligations.

6.3 Customs Verification.

The courier and package company, in order to guarantee the compliance of the information of the operations for the customs clearance of foreign trade merchandise, as well as to verify the truthfulness of the information declared to the competent authorities, must have documented procedures to verify that the customs declarations it receives for its release processing from the company match what appears registered in SAAI Web and, where applicable, report to the customs authority any discrepancy in said information. The company, likewise, must have a procedure for archiving the corresponding release records.

Response: Explanatory Notes:
Attach the established procedure to verify the information registered in SAAI Web, and cross-check that the contributions and/or compensatory fees had been paid prior to the release of the shipments to submit to the customs clearance formalities.

Security of freight vehicles, containers, trailers, and/or semi-trailers.

The courier and package company must maintain the security of the transport means, tractors, containers, trailers, and semi-trailers (including freight vehicles, pick-up truck type, van type, or van, among others), to protect them from the introduction of unauthorized persons and/or materials. For this reason, it is necessary to have documented procedures to inspect, seal, and maintain their integrity. Likewise, the inspection process of said transport means, tractors, containers, trailers, and semi-trailers (including freight vehicles, pick-up truck type, van type, or van, among others), used as Instruments of International Traffic, must include a procedure for agricultural inspections to look for visible pests and serious structural deficiencies. Pest contamination is defined as visible forms of animals, insects, or other invertebrates (alive or dead, at any stage of the life cycle, including eggs, etc.), or any organic material of animal origin (including blood, bones, hair, meat, secretions, excretions, etc.); plants or plant products (including fruits, seeds, leaves, twigs, roots, bark, etc.); or other organic material, including fungi, soil, or water; when such products are not the declared cargo within the Instruments of International Traffic.

In case of using high-security seals, it is necessary to have procedures to correctly seal and maintain the integrity of containers and trailers from the moment they leave your facilities. A high-security seal must be applied to all containers and trailers for foreign trade shipments, which must comply with or exceed Standard ISO 17712 for high-security seals.

With the objective of maintaining supply chain security, the courier and package company must inspect all freight vehicles systematically upon entry and exit of its facilities (domestic and international traffic), in addition to keeping a record.

7.1 Use of seals and/or locks.

The courier and package company, where applicable, must identify the transport means of its own or subcontracted freight that transport foreign trade merchandise that may be: maritime, air, national land, cross-border, rail, and/or multimodal, which are subject to the placement of seals and/or locks that comply with or exceed Standard ISO 17712 in order to guarantee at all times the integrity of the cargo.

For this reason, as one of the security mechanisms, the fiscalized premises, where applicable, must use high-security locks or seals that comply with or exceed Standard ISO 17712 in all containers and trailers loaded for foreign trade and maintain their integrity until delivery at the final destination. For this, the premises must have documented procedures to place and verify the correct application of seals, their inspection at intermediate points, final destination, and their replacement when opened by any authority. In case of such an inspection, drivers must notify and record any anomaly or unusual structural modification found in the transport medium resulting from said review. The procedures must include the steps to follow if it is discovered that a seal is altered, manipulated, or there is an incorrect seal number in the documentation, the communication protocols to the commercial partners involved in the supply chain, and the investigation of the security incident; these must be notified to security personnel, commercial partners who may be part of the affected supply chain, security specialist, or Authorized Economic Operator Program contact.

Likewise, it is necessary to have a documented procedure for their administration which includes control, assignment, safeguarding, handling of discrepancies, and destruction of seals and locks (the latter is mandatory whenever seals are broken in your facilities). Regarding the provider of the seals and/or locks, it must be demonstrated how these comply with Standard ISO 17712. The company's management or a security supervisor must carry out periodic and documented audits of the high-security seals and/or locks; these reviews must include the verification of the inventory of stored seals and/or locks and the cross-check with inventory records and shipping documents. Likewise, the supervisors of the shipping area and/or warehouse managers must periodically verify the seal numbers used in the transport means and Instruments of International Traffic to corroborate that the information is correct.

For this case, the courier and package company must have a documented procedure in which, in accordance with its risk analysis, it supervises the placement of seals and/or locks on the transport means that transport foreign trade merchandise in accordance with its logistics process and in those traffics that require it due to their high probability of occurrence and impact of the identified risk. In it, it must evidence controls that allow accrediting that it supervises the portability of seals and/or locks resulting from entries or exits of the strategic fiscalized premises in the transport means. In all cases, it must use the VVTT inspection method to mitigate improper manipulations as follows:

I. V - View the seal and lock mechanisms of the container.
II. V - Verify the seal number.
III. T - Pull the seal to ensure it is correctly placed.
IV. T - Twist and turn the seal to ensure.

Response: Explanatory Notes:
List, according to your risk analysis and logistics process, the transport means that are subject to the placement of high-security seals and/or locks.
Attach the documented procedure for the placement and review of seals and/or locks on the transport means that transport foreign trade merchandise. This must include, among other aspects according to your operation:
I. Verify that the seal or lock is intact and determine if there is evidence of improper manipulation.

II. In case of using high-security locks, bottle type, use the VVTT inspection method.
a) V - View the seal and lock mechanisms of the container (View). b) V - Verify the seal number (Verify). c) T - Pull the seal to ensure it is correctly placed (Tug). d) T - Twist and turn the seal to ensure it has closed (Twist and Turn).

III. Review and cross-check the documentation containing the number of the original seal or lock and, where applicable, of the additional ones for purposes of entries or exits of the courier and package company.

IV. Review that the closing devices, hinges, and pins are attached to the trailer or container and welded or riveted. Also, they can place protective plates on the door hinges and/or place a seal/adhesive tape on at least each side. Also, the correct functioning of handles, latches, and all other locking or closing mechanisms of the freight vehicles must be verified to detect manipulations and any inconsistency before placing any sealing device.

V. Indicate how you assign and replace high-security locks, in the case of maneuvers such as prior inspection, replacement, among others.

Where applicable, attach the documented procedure for the control and handling of seals and/or locks; this must include, among other aspects according to your operation:
I. What type of seals and/or locks you use in your operations (foreign trade, transit, storage, etc.).

II. Who has access and how the locks and/or seals are safeguarded. The management of seals and/or locks must be restricted only to authorized personnel; stored in a secure place, have an inventory, control of their distribution and tracking (record of seals used, as well as of the receipt of new seals and/or locks).

III. Describe how the company's management or the security supervisor participate in the audits of high-security seals and/or locks, the reviews they carry out, the records they generate, and the actions they take in case of identifying discrepancies. Also, how the supervisors of the shipping area and/or warehouse managers verify the seal numbers used in the transport means and Instruments of International Traffic to corroborate that the information is correct (this process can also be included within the internal audits referred to in sub-standard 1.3 of this document).

IV. How discrepancies in seal and/or lock numbers are addressed.

V. Indicate who the supplier(s) is/are and how it proves that the specifications of the seals and/or locks comply with Standard ISO 17712 (attach certificate issued by the certifying company responsible for verifying compliance with the corresponding ISO).

7.2 Inspection of transport means, containers, trailers, and semi-trailers.
There must be established procedures to verify the physical integrity of the structure of the transport means, containers, train cars, trailers, and/or semi-trailers used as Instruments of International Traffic, which enter or leave the courier and package company, according to their nature, including the reliability of the door locking mechanisms, with the aim of identifying natural or hidden compartments.

The inspections of the transport means must be systematic and carried out upon entry and exit from the company, and where applicable, at the point of loading of the goods, using the VVTT inspection method. A record of these inspections must be kept in an area with controlled access and carried out in a place monitored by closed-circuit television and video surveillance systems, said system must cover the entire inspection process.

The documented procedure for its inspection must include, by way of example and not limitation, the following review points:

Transport Means Trailers, Train Cars, Semi-trailers, and Containers
I. Bumper.
II. Tires and rims (tractor and trailer).
III. Floor (tractor).
IV. Fuel tanks.
V. Interior of the cabin (bedroom and tool compartment).
VI. Air tanks.
VII. Chassis.
VIII. Fifth wheel area.
IX. Drive shafts.
X. Exhaust pipe.
XI. Engine.
I. Exterior and interior doors.
II. Side walls (left and right).
III. Internal and external roofs.
IV. Front wall.
V. Internal Floor.
VI. Where applicable, the refrigeration system.

For transport means with a trailer or integrated cargo compartment, the points indicated in the trailers section must be added to the transport means points.

Likewise, before loading the transport means, containers, train cars, trailers, and semi-trailers used as Instruments of International Traffic, they must undergo agricultural and security inspections to guarantee that their structures have not been modified to hide contraband or have been contaminated with visible agricultural pests, keeping a record and being backed by a documented procedure. If visible contamination by pests is found during the inspection or transport of goods subject to foreign trade, it must be cleaned (washed, vacuumed, etc.) to eliminate said contamination.

Response: Explanatory Notes:
Attach the documented procedure to carry out the security and agricultural inspection of the transport means according to their nature and logistical process to be handled at the entries and exits of the courier and package company. This must include, among other aspects according to its operation:
I. Those responsible for carrying out the inspection.
II. Definition of the place(s) where the inspection takes place and indicate how the monitoring is carried out by alarm systems and closed-circuit television and video surveillance.
III. The security review points for transport means, trailers, semi-trailers, containers, rail transport, and/or multimodal transport, both security and quality and agricultural inspections with the purpose of searching for visible pests.
IV. Instructions for the driver to ensure that before crossing, the cabin is clean and free of trash.

Attach the established format for the inspection of transport means or cargo vehicles, containers, trailers, and/or semi-trailers. If you use other types of cargo vehicles for the transport of your goods (vans, pickups, 3.5 tons, tankers, etc.), your procedure and inspection format must include the process and review points.

Likewise, the security and agricultural inspection format must include the following information:
I. Date of inspection;
II. Time of inspection;
III. License plates of the vehicle (tractor and trailer);
IV. Container/trailer number;
V. Specific areas of the cargo vehicles that were inspected; and,
VI. Name and signature of the employee who performs the inspection and the supervisor.

Additionally, and according to the risk analysis, the courier and package company should carry out periodic random reviews of cargo vehicles, after the transport personnel has carried out security inspections to verify that they have been carried out correctly, counteract internal conspiracies, and prevent security incidents. The reviews must be carried out randomly, without prior notice, so that they do not become predictable, in addition to being carried out in different places where the transport means may be susceptible to contamination.

7.3 Storage of vehicles, transport means, containers, train cars, trailers, and semi-trailers.
When the transport means, containers, trailers, and/or semi-trailers that will be destined to transport foreign trade goods are empty and must be stored in the parking areas, they must be secured with a lock and/or indicative seal or, where applicable, in a safe area that is guarded and/or monitored.

When it is necessary to store or overnight any loaded container, trailer, and/or semi-trailer, it must be in a safe area that has physical barriers and is monitored by alarm systems and closed-circuit television and video surveillance systems to prevent unauthorized access and manipulation of the merchandise, so it must be closed with a high-security lock according to ISO 17712 Standard. When the cargo is stored overnight or for a prolonged period, measures must be taken to secure the cargo against unauthorized access.