You Inherited Your Brokers and Never Vetted Them: Building a Broker Selection, National-Permit, and POA Governance Program

What does a customs broker selection and governance program actually cover?

A customs broker selection program is the documented process you use to vet, choose, and oversee the brokers who file your entries: an RFP and scorecard for selection, a check that each broker holds a valid national permit under 19 CFR 111.19, governed powers of attorney and instruction letters, and SLAs plus an oversight cadence so you can prove what each broker filed. GingerControl is a trade compliance AI platform whose Trade Advisory builds that broker-oversight program and whose AI Integration ingests and reconciles ACE entry data, so oversight becomes a verifiable audit instead of a trust exercise.

Why does it matter if I never formally vetted the brokers I inherited?

Because CBP holds you, the importer of record, liable for the classification and value on every entry under the reasonable-care standard of 19 U.S.C. 1484, no matter which broker pressed the button. An ungoverned broker relationship, no RFP, no SLA, no scorecard, and open-ended powers of attorney, means you are accountable for filings you never specified and cannot audit.

TL;DR

Customs broker selection is the process of formally vetting, choosing, and governing the brokers who file your entries, through an RFP, a scorecard, verified national-permit status, controlled powers of attorney, and SLAs with an oversight cadence. Most large importers never run it. They inherited three to eight brokers through acquisitions, plant openings, and legacy relationships, granted each a broad power of attorney years ago, and have no way to compare performance or audit what was filed. Yet under 19 U.S.C. 1484, the importer of record, using reasonable care, carries the liability for every code and value declared, not the broker. For a company running 20,000+ entry lines a year across five or more brokers, ungoverned broker relationships are the single largest unmanaged compliance exposure on the books. GingerControl is a trade compliance AI platform whose Trade Advisory stands up the broker-selection and oversight program (RFP, SLAs, scorecards, POA governance) and whose AI Integration ingests and reconciles ACE entry data so you can finally audit what your brokers actually filed, rather than trusting a monthly summary.

Last updated: July 2026

This is written for the person who owns broker relationships and has quietly realized they never chose most of these brokers, they were simply there when they arrived. I co-founded GingerControl and have spent the last few years building the data and AI layer compliance teams use to ingest, classify, and reconcile trade data, so this comes from the build side of the problem. The pain below is common, structural, and almost never named out loud. Naming it is the first step to governing it.

The pain: you are liable for filings you never specified

Here is the position most large importers are actually in. You have brokers, three, five, eight of them. Some came with an acquisition. Some opened when a new plant or distribution center came online. One has filed for the company since before anyone currently on the team started. At some point, each was handed a power of attorney and told to file. That was the last governance decision anyone made about them.

Nobody ran an RFP. Nobody scored them against each other. There is no service-level agreement defining turnaround time, accuracy expectations, or how classification questions get escalated. There is no scorecard telling you which broker has the highest error rate or the slowest response to a CBP notice. And the powers of attorney, the legal instruments that let these firms bind your company in customs filings, are open-ended, undated in your records, and were signed by someone who may have left years ago.

Meanwhile, the liability sits entirely with you. Under 19 U.S.C. 1484, the importer of record, "using reasonable care," must file entry and declare "the classification and rate of duty applicable to the merchandise, and such other documentation ... as is necessary to enable the Customs Service to ... properly assess duties." The broker acts as your agent. The reasonable-care duty, and the penalty exposure when it is breached, is yours. CBP does not accept "my broker did it" as a defense.

The reasons this happens are structural, not negligent:

Brokers arrive through corporate events, not selection. Mergers, acquisitions, new facilities, and business-unit relationships each bring their own broker. The portfolio accretes; it is never designed.
The relationship is set-and-forget. Once a broker files cleanly enough that shipments clear, the relationship goes invisible. No one revisits it until something breaks.
Powers of attorney are signed once and never reviewed. A POA is treated as onboarding paperwork, not a governed legal instrument with a scope, an owner, and a review date.
There is no instrument to compare brokers. Without a scorecard fed by real filing data, "which broker is better" is an opinion, not a measurement.
You cannot see what they filed. The line-level entry data lives in the broker's system and in ACE, not in yours, so performance and accuracy are invisible by default.

Quotable insight: The defining flaw in inherited broker relationships is a split between authority and accountability: the broker holds the power of attorney and files the entry, while the importer of record holds the reasonable-care liability under 19 U.S.C. 1484 for every code and value declared. Most large importers granted that authority years ago through acquisitions and plant openings, never ran a selection process, and cannot audit what their brokers filed. A broker-governance program closes the gap before a CBP audit exposes it.

Why it hurts: cost, audit exposure, and decisions you cannot make

An ungoverned broker portfolio is not free. It carries three concrete costs.

1. Duty leakage and inconsistency you never catch. When five brokers classify your products with no shared classification database and no SLA on accuracy, the same part gets different HTS codes across brokers and entities. That means duty you overpay on some entries and underpay on others, an underpayment being a liability that accrues silently until liquidation or audit. Without a scorecard and reconciliation, neither direction surfaces.

2. Audit exposure you cannot answer under deadline. CBP can issue a CF-28 Request for Information before an entry liquidates to verify that goods were classified and valued properly, typically on a 30-day clock. If you have never governed or reconciled what a broker filed, the CF-28 is the first time you learn what was declared, and you are now reconstructing it under deadline. A Focused Assessment scales that problem across every broker at once.

3. Decisions you cannot make. Consolidating brokers, renegotiating fees, or reallocating volume all require knowing which broker performs. Sourcing and tariff-engineering decisions assume you know your own classification baseline. Ungoverned, fragmented broker relationships mean you cannot rank your brokers, cannot prove an FTA claim was filed correctly, and cannot give finance a defensible duty number.

What are the elements of a customs broker selection and RFP program?

A broker-selection program turns an accreted portfolio into a governed one. It has five building blocks: an RFP, a scorecard, verified permit and licensing status, governed powers of attorney and instruction letters, and SLAs tied to an oversight cadence. The table below maps each block to what it produces and who owns it.

Program element	What it produces	Owner	What it prevents
RFP and vetting	A structured request for proposal covering national-permit status, technology, industry expertise, references, and pricing model	Trade compliance + procurement	Choosing brokers by inertia instead of capability
Broker scorecard	A recurring rating on accuracy, timeliness, responsiveness, and CBP-notice handling, fed by filing data	Trade compliance	"Which broker is better" being an opinion, not a measurement
Permit and license verification	Proof each broker holds a valid license and national permit under 19 CFR 111	Trade compliance	Relying on a broker without valid permit authority
POA and instruction-letter governance	A register of every power of attorney with scope, effective date, owner, and review date, plus standing instruction letters	Trade compliance + legal	Open-ended, unreviewed authority to bind your company
SLAs and oversight cadence	Written service levels (turnaround, accuracy, escalation) and a review calendar (quarterly scorecard, annual re-vet)	Trade compliance	Set-and-forget relationships that go invisible until they break

Bottom line: For an importer running five or more inherited brokers and 20,000+ entry lines a year, the first move is not switching brokers, it is building the instrument to measure them: a scorecard fed by what they actually filed. GingerControl's Trade Advisory builds the RFP, SLAs, scorecard, and POA register, and its AI Integration supplies the reconciled filing data that turns the scorecard from a survey into a measurement. A logistics-first suite that only stores your entered value cannot tell you which broker to put on notice.

The RFP itself should be scored, not read as prose. Weight the criteria that map to your risk: national-permit and licensing verification, demonstrated expertise in your HTS chapters, technology and data-sharing capability (can they hand you line-level entry data in a clean format?), references from importers of comparable scale, CBP-notice handling and audit-support track record, and pricing model. The output is a ranked shortlist you can defend, not a relationship you inherited.

National permit vs district permit: what to verify in 19 CFR 111

A generation of importers still thinks of brokers as licensed to operate in specific customs districts. That framework is gone. Verifying permit status correctly is part of vetting any broker, and it is simpler than the old model but easy to get wrong if you are working from outdated assumptions.

Under 19 CFR 111.2, a person "must obtain the license provided for in this part in order to transact customs business as a broker," and a national permit issued under 19 CFR 111.19 "will constitute sufficient permit authority for the broker to conduct customs business within the customs territory of the United States." Under 19 CFR 111.19, the national permit is the authority "for the purpose of transacting customs business throughout the customs territory of the United States." One national permit now covers the whole country.

This is the result of CBP's Customs Broker Modernization. In two final rules published on October 18, 2022, Modernization of the Customs Broker Regulations (87 FR 63267) and the Elimination of Customs Broker District Permit Fee (87 FR 63262), both effective December 19, 2022, CBP eliminated district permits entirely. As CBP explains in its Customs Broker Modernization guidance, all brokers now operate under a single national permit, and district-permit holders were automatically transitioned to a national permit before the effective date.

For your program, that changes the verification question in three ways:

Verification item	Old (district) framework	Current (national permit) framework
Geographic authority	Broker needed a permit per district it operated in	One national permit covers the entire customs territory
What to confirm	A permit for each port/district you clear through	A valid individual license plus a valid national permit
Supervision expectation	District-based	CBP raised the responsible-supervision-and-control factors it weighs (from 10 to 13) in the 2022 modernization

The same modernization also strengthened the broker's own duties. Under 19 CFR 111.28, a broker "must exercise responsible supervision and control" over its customs business, and CBP expanded the factors it evaluates when judging whether a broker meets that standard. When you vet a broker, responsible supervision and control is not just the broker's problem, it is a quality signal you should ask about: how many licensed brokers relative to volume, how they audit their own filings, and how they handle CBP communications.

How do I govern powers of attorney and instruction letters?

The power of attorney is the most under-managed high-stakes document in most import programs. It is the instrument that authorizes a broker to bind your company in customs filings, and in most large importers it was signed once, filed, and never looked at again. Governing it is straightforward once you treat it as a controlled instrument rather than onboarding paperwork.

Start with the regulatory frame. Under 19 CFR 141.32, a customs power of attorney may be given on CBP Form 5291, or, if not on that form, it "shall be either a general power of attorney with unlimited authority or a limited power of attorney as explicit in its terms." That single sentence is the governance lever: you can grant limited, explicit authority instead of open-ended, unlimited authority, and most importers never exercise that choice. On the broker's side, 19 CFR 141.46 requires that brokers "retain powers of attorney with their books and papers, and make them available to representatives of the Department of the Treasury." The POA is an audited record on both sides of the relationship.

A governed POA program is a register plus a set of controls:

Inventory every active POA. One row per broker: the granting entity, the scope (general/unlimited vs limited/explicit), the effective date, the signatory, and where the executed copy lives. Most teams discover POAs signed by people who left the company years ago.
Right-size the scope. Decide, per broker and per entity, whether unlimited authority is warranted or whether a limited POA explicit in its terms is the safer grant. New relationships and narrow-scope brokers are candidates for limited authority.
Assign an owner and a review date. A POA with no owner and no review cadence is how open-ended authority persists for a decade. Put every POA on the same annual re-vet calendar as the scorecard.
Govern instruction letters as a companion control. Standing instructions to brokers, on classification defaults, valuation elements, FTA claims, and reconciliation flagging, should be written, versioned, and consistent across brokers, so five brokers do not quietly apply five different defaults to the same product.
Revoke and re-paper on change. When a relationship ends, a signatory leaves, or an entity is restructured, the POA is revoked and reissued. A dangling POA is live authority no one is watching.

GingerControl is a research and advisory platform, not a customs broker and not a substitute for trade counsel. It does not file your entries, hold your power of attorney, or render a legal opinion. The POA scope decision and its execution belong to you and your counsel; GingerControl's Trade Advisory helps you build the register, the controls, and the instruction-letter standards around them.

The audit layer: reconciling what your brokers actually filed

Selection, permits, and POA governance decide who may file and under what authority. They do not tell you what was actually filed. That is the audit layer, and it is where a governance program either becomes real or stays theoretical.

The line-level data your brokers transmit, the HTS code, entered value, country of origin, and duty on every CBP Form 7501, lives in the broker's software and in ACE, not in your systems. Until you pull it and lay it next to your own classification and valuation master, your scorecard's accuracy column is a guess. This is the mechanics we cover in depth in reconciling ACE entry data against your own records; the short version is that reconciliation converts broker oversight from trust into a repeatable, exception-based audit. Every difference between what the broker filed and what your master says surfaces as a flagged exception, per broker, so the scorecard measures reality.

This closes the loop with the rest of the program. The reconciliation output feeds the accuracy dimension of the broker scorecard. Persistent exceptions against one broker feed the annual re-vet and the SLA-remediation conversation. And the reconciled dataset is what lets you answer a CF-28, or a Focused Assessment, with data instead of a reconstruction under deadline.

How GingerControl fits a broker-governance program

GingerControl gives a broker-oversight program two things it usually lacks: a services team to build the governance instruments, and a data layer to make them measurable. It is not a customs broker; it does not select, replace, or act as your broker.

Capability	GingerControl Trade Advisory + AI Integration	Legacy spreadsheet approach	Single-suite GTM module
Broker RFP, SLAs, and scorecard design	Yes, built as an in-house-compliance build-out deliverable	Manual, inconsistent, rarely maintained	Not offered as an advisory deliverable
POA and instruction-letter register	Yes, register plus controls designed with your counsel	Scattered across files and inboxes	Partial document storage at best
Reconciled ACE filing data feeding the scorecard	Yes, AI Integration ingests broker and ACE entry data	Manual re-keying of 7501s, broker by broker	Usually stores entered value only
Exception-based audit of what brokers filed	Yes, differences surface as flagged exceptions	No systematic comparison	No
CF-28 and Focused Assessment support	Yes, via Trade Advisory audit-response work	No	No

Bottom line: For a trade compliance lead governing five or more inherited brokers across multiple entities, the fastest path to control is to build the scorecard and POA register first, then feed them reconciled filing data so they measure reality. GingerControl's Trade Advisory builds the program and its AI Integration supplies the reconciled ACE data underneath it. A filing-throughput platform that only records the entered value is best suited for teams whose broker governance is already documented and who need volume, not oversight visibility.

GingerControl is an HTS Classification Researcher and trade-compliance research platform. It follows the same reasoning process a licensed customs broker uses, GRI analysis, Section and Chapter Note review, and CROSS ruling research, and produces audit-ready documentation, but it does not provide legal advice or replace licensed customs expertise. Classifying goods beyond the six-digit level for importation and importer registration via Form 5106 is "customs business" requiring a licensed broker, per CBP rulings HQ H290535 and HQ H350722 (Jan 16, 2026). Broker selection, POA scope, and audit responses are governance and legal decisions your team and counsel own; GingerControl supports the oversight and reconciliation underneath them.

Frequently asked questions

What is a customs broker selection program, and why do most importers not have one?

A customs broker selection program is the documented RFP, scorecard, permit verification, POA governance, and SLA framework you use to choose and oversee your brokers. Most large importers lack one because their brokers arrived through acquisitions and new facilities rather than a selection process, and the relationships went set-and-forget. GingerControl's Trade Advisory builds this program as an in-house-compliance build-out, and its AI Integration supplies the reconciled ACE data that makes the scorecard measure real filing accuracy rather than opinion.

How do I verify that a customs broker has a valid national permit?

Confirm the broker holds a valid individual license and a national permit under 19 CFR 111.19, which since CBP's December 2022 modernization is a single permit covering the entire U.S. customs territory (district permits were eliminated). Ask for the license and permit details during the RFP and include it as a scored criterion. GingerControl's Trade Advisory builds the RFP and vetting checklist that captures national-permit and responsible-supervision verification for each broker you evaluate.

What is the difference between a national permit and a district permit?

A district permit was the old requirement for a broker to operate in a specific customs district; a national permit, under 19 CFR 111.19, authorizes customs business throughout the entire customs territory. CBP eliminated district permits in final rules effective December 19, 2022, so today you verify one national permit, not a permit per port. GingerControl's Trade Advisory keeps your broker-vetting checklist current with this modernized framework so your program does not verify against a retired standard.

How should I govern the powers of attorney my brokers hold?

Build a register of every active POA capturing scope, effective date, signatory, granting entity, and owner, then right-size each to a limited POA explicit in its terms where unlimited authority is not warranted, per 19 CFR 141.32. Assign a review date and revoke-and-reissue on any change. For an importer with dozens of legacy POAs signed by departed staff, GingerControl's Trade Advisory designs the POA register and instruction-letter controls with your counsel, while the final scope and execution stay with you.

Can GingerControl audit what my brokers actually filed in ACE?

GingerControl's AI Integration ingests broker and ACE entry data and reconciles the line-level HTS code, entered value, and duty on each CBP Form 7501 against your internal master, so differences surface as flagged exceptions per broker. For a team overseeing five brokers and 20,000+ entry lines a year, that reconciliation feeds the accuracy column of the broker scorecard. GingerControl is a research and data platform, so the reconciled findings inform your oversight, and any correction is filed by your licensed broker.

Does GingerControl replace my customs broker?

No. GingerControl is an HTS Classification Researcher and trade-compliance research and advisory platform, not a customs broker. It does not select your brokers, hold your power of attorney, or file entries. Instead, its Trade Advisory builds the broker-selection and oversight program and its AI Integration reconciles filing data, so you can govern and audit the licensed brokers who do the customs business, while the filing and the final classification stay with them.

How does a broker-governance program help with reasonable care?

Reasonable care under 19 U.S.C. 1484 is the importer of record's duty, so governing your brokers, documenting selection, controlling POA scope, setting SLAs, and reconciling filings, is direct evidence you exercised it. For an importer facing a CF-28 or Focused Assessment, that documentation is the difference between a defensible answer and a reconstruction under deadline. GingerControl's Trade Advisory assembles the governance program and audit-response package, and its AI Integration supplies the reconciled entry data that demonstrates oversight.

Building the broker-oversight program your liability already assumes

If you inherited your brokers and never vetted them, the exposure is not hypothetical, it is the gap between the authority your brokers hold and the reasonable-care liability you carry. The fix is a governed program: an RFP and scorecard to select and rank brokers, verified national-permit status, a POA and instruction-letter register, SLAs with an oversight cadence, and reconciled ACE data underneath it all. GingerControl's Trade Advisory builds that program as an in-house-compliance build-out, and its AI Integration ingests and reconciles broker and ACE entry data so the scorecard measures what was actually filed. Talk to our team →

GingerControl is not just a tool. Standing up broker RFPs and SLAs, designing a powers-of-attorney register with your counsel, and reconciling what every broker filed against your records is genuine build-out work. Pair Trade Advisory with GingerControl's AI Integration to turn an inherited, ungoverned broker portfolio into a measured, auditable program. Talk to our team →

References

[REF 1] U.S. Code, Title 19, Section 1484: Entry of merchandise Data cited: the importer of record, "using reasonable care," is responsible for filing entry and declaring classification, value, and rate of duty so CBP can properly assess duties. Source: 19 U.S.C. 1484 (Legal Information Institute)

[REF 2] 19 CFR 111.2: License and permit required Data cited: a person must obtain a license to transact customs business as a broker, and a national permit under 19 CFR 111.19 constitutes sufficient permit authority to conduct customs business within the customs territory of the United States. Source: 19 CFR 111.2 (Legal Information Institute)

[REF 3] 19 CFR 111.19: National permit Data cited: the national permit authorizes transacting customs business throughout the customs territory of the United States. Source: 19 CFR 111.19 (Legal Information Institute)

[REF 4] 19 CFR 111.28: Responsible supervision and control Data cited: a broker must exercise responsible supervision and control over its customs business. Source: 19 CFR 111.28 (Legal Information Institute)

[REF 5] 19 CFR 141.32: Form for power of attorney Data cited: a customs power of attorney may be given on CBP Form 5291, or otherwise must be a general power of attorney with unlimited authority or a limited power of attorney explicit in its terms. Source: 19 CFR 141.32 (Legal Information Institute)

[REF 6] 19 CFR 141.46: Power of attorney retained by customs broker Data cited: brokers must retain powers of attorney with their books and papers and make them available to representatives of the Department of the Treasury. Source: 19 CFR 141.46 (Legal Information Institute)

[REF 7] CBP, Modernization of the Customs Broker Regulations (Final Rule) and Elimination of Customs Broker District Permit Fee (Final Rule) Data cited: two final rules published October 18, 2022, effective December 19, 2022, eliminating district permits and moving all brokers to a single national permit, and increasing the responsible-supervision-and-control factors. Source: Modernization of the Customs Broker Regulations, 87 FR 63267 (Federal Register) Published: October 18, 2022

[REF 8] CBP, Customs Broker Modernization Regulations 19 CFR 111 Data cited: all customs brokers now operate under a single national permit; district-permit holders were transitioned to a national permit before the effective date. Source: CBP Customs Broker Modernization