20-Point Buyer's Checklist for Trade Compliance Software (2026)

What should I check before signing a trade compliance software contract?

Before signing a trade compliance software contract, run the 20-point checklist covering classification architecture, tariff stack coverage, audit-readiness, FTA logic, valuation safeguards, policy monitoring, API economics, ERP integration, broker workflow, customer references, pricing transparency, implementation timeline, support SLAs, data export rights, contract exit terms, security and SOC 2 compliance, training, accuracy benchmarks, reasonable care positioning, and Section 122/232/301 stack handling. Missing any point creates exposure in operations or procurement.

Why 20 points and not 6 or 10?

Trade compliance software touches legal architecture (H290535, 19 U.S.C. 1641, 1484), operational workflows (CBP entry filing, audit response), financial systems (ERP, finance reporting), and regulatory recordkeeping (19 CFR 163.4). Six-question vendor checklists miss the gaps that produce 12-36 month tooling regret. The 20-point version covers all four domains.

---

A trade compliance software procurement decision binds the importer to operational tooling for 12-36 months minimum, and the records produced or not produced during that period determine penalty tier in any 1592 enforcement action over the following 5 years. This is a high-stakes decision with low signal in most vendor demos. The 20-point checklist is the field guide that turns a marketing-heavy sales conversation into a structured procurement evaluation. Take the GingerControl compliance audit quiz to build the self-assessment baseline that determines which points matter most for your situation.

Last updated: May 2026

---

The 20-Point Checklist

A. Classification Architecture (Points 1-4)

1. Does the platform pass the CBP HQ H290535 test? Does it output 10-digit HTSUS codes for specific goods without explicit licensed-broker workflow? If yes, both vendor and customer carry 19 U.S.C. 1641 exposure.

2. Does the platform apply GRI 1-6 logic explicitly? Walk through the sequence on a sample product. Watch for "AI considers GRI" hand-waving vs explicit step-by-step demonstration.

3. Are CROSS rulings consulted as decision input or output decoration? Decision input means the AI reads rulings during classification. Output decoration means it cites rulings after the fact. The difference matters for reasonable care.

4. Does the platform handle GRI 3(b) essential character analysis? Composite products triggering GRI 3(b) require analysis of component value ratio, volume ratio, consumer purchase intent, sales channel, and material function. Watch for a specific demo.

B. Tariff Stack Coverage (Points 5-7)

5. Does the platform cover the full 2026 U.S. tariff stack? Base MFN + Section 232 + Section 301 + Section 122 + Chapter 99 + MPF + HMF + AD/CVD. Missing any layer produces wrong landed cost.

6. Is the platform date-sensitive on tariff rates? A 2025 entry needs 2025 rates; a 2026 entry needs 2026 rates. Platforms applying current rates to historical entries produce wrong calculations.

7. Does the platform handle the Section 122 USMCA exemption correctly? USMCA-qualifying goods are exempt from the 10% Section 122 reciprocal; non-qualifying USMCA shipments are not. Test on a sample USMCA entry.

C. Audit-Readiness (Points 8-10)

8. Does the platform produce contemporaneous reasoning documentation? GRI analysis written at the moment of classification, with timestamp, surviving in durable storage for 19 CFR 163.4 5-year retention.

9. Does the platform maintain a Selection History or equivalent audit trail? Per-decision record of HTS candidate chosen, country selected, configuration applied, tariff stack calculated, with timestamp.

10. Can the platform produce a CF 28 audit response in minutes, not weeks? Run a hypothetical CF 28 on an entry from 18 months ago. Verify the platform can produce the supporting documentation without forensic reconstruction.

D. FTA and Valuation (Points 11-12)

11. Does the platform quantify FTA savings per shipment? USMCA, KORUS, CAFTA-DR, Israel FTA, etc. The FTA Compare Drawer should show MFN scenario vs FTA-preference scenario with exact dollar delta per shipment.

12. Does the platform cross-reference declared values against USITC AUV? The Valuation Sanity Check catches undervaluation risk pre-entry. Most platforms do not offer this; it is a meaningful differentiator.

E. Policy Monitoring (Points 13-14)

13. Are policy alerts personalized to your HTS catalog? Generic newsletters miss 90% of changes that affect your products. Personalized cross-reference (Compliance Radar) is the only structural fix.

14. Does the platform trigger reclassification when policy changes affect your codes? Pending Tariff Badges or equivalent reclassification queue should surface affected products automatically.

F. Integration and Pricing (Points 15-17)

15. Does the API pricing model fit your volume profile? Subscription + tiered API works at scale. Per-call breaks above 10K monthly calls. Per-order breaks for non-DDP merchants. Enterprise license breaks below $500M annual import value.

16. What ERP integrations exist natively? SAP, Oracle, NetSuite, Microsoft Dynamics. Native integration matters; webhook-only requires custom development.

17. What are the total first-year costs including implementation, content fees, API overage, training, and premium support? Headline subscription often understates total cost by 2-5x.

G. Contract and Support (Points 18-20)

18. What are the data export terms and contract exit clauses? 60-90 day notice typical; missing the notice window auto-renews. Verify data export format and post-termination access.

19. What are the support SLAs and customer success structure? Standard support response time, premium tier availability, dedicated CSM if applicable. SMB accounts often get deprioritized; verify the customer's exact size profile is supported.

20. What is the platform's SOC 2 / security posture and how is broker liability handled? SOC 2 Type II is the baseline. For broker users, 19 CFR Part 111 procedural compliance and licensed broker workflow integration matters.

---

How to Score the Checklist

Tally pass/partial/fail across the 20 points:

Score	Interpretation
18-20 / 20	Strong fit; proceed to contract with standard due diligence
15-17 / 20	Acceptable fit; identify which points are non-negotiable for your situation
10-14 / 20	Significant gaps; reconsider or negotiate specific contractual remediation
Below 10	Reject; the gaps will produce 12-36 months of regret

The points are not equally weighted. For most importers, Points 1, 2, 5, 8, 10, 11, 13 are non-negotiable. Failure on any of these moves the score to "reject" regardless of how well other points score.

---

How GingerControl Scores

Point	GingerControl Score
1. H290535 compliance	Pass (Researcher architecture)
2. Explicit GRI 1-6 logic	Pass (iterative GRI Researcher)
3. CROSS rulings as decision input	Pass (read during classification)
4. GRI 3(b) essential character	Pass (multi-factor analysis)
5. Full 2026 tariff stack	Pass (base + 232 + 301 + 122 + 99 + MPF + HMF)
6. Date-sensitive rates	Pass
7. Section 122 USMCA exemption	Pass
8. Contemporaneous reasoning	Pass (HTS Researcher + Selection History)
9. Selection History audit trail	Pass (Product Sandbox)
10. CF 28 response in minutes	Pass (Selection History query)
11. FTA Compare per shipment	Pass (Product Sandbox FTA Compare Drawer)
12. USITC AUV cross-reference	Pass (Product Sandbox Valuation Sanity Check; only major platform with this)
13. Personalized policy alerts	Pass (Compliance Radar; first product in category)
14. Reclassification triggers	Pass (Pending Tariff Badges via Compliance Radar Alert tab)
15. API pricing fit	Subscription + request-based tiers
16. ERP integrations	SAP, Oracle, NetSuite, REST + webhook
17. Total first-year costs	Transparent tiers; $5K-$250K depending on volume
18. Data export and contract exit	Standard MSA, durable record retention
19. Support SLAs	Standard + premium tiers
20. Security / SOC 2 / broker liability	SOC 2 Type II; Researcher architecture supports broker workflow

GingerControl is AI global trade compliance infrastructure that helps importers, exporters, and customs brokers classify products, engineer optimal tariff positions, calculate duties, and track policy changes. The platform is engineered explicitly to score 20/20 on this checklist.

---

Frequently Asked Questions

Why is this checklist 20 points instead of 6 or 10?

Trade compliance software touches legal architecture, operational workflows, financial systems, and regulatory recordkeeping. Six-question checklists miss gaps that produce multi-year regret. The 20-point version covers all four domains with point-by-point evaluation criteria.

Which points are non-negotiable for most importers?

Points 1 (H290535), 2 (GRI), 5 (full tariff stack), 8 (contemporaneous documentation), 10 (CF 28 response), 11 (FTA Compare), 13 (personalized alerts). Failure on any of these means the platform cannot support a defensible compliance program.

What is CBP Ruling HQ H290535?

A September 2022 CBP ruling holding that providing 10-digit HTSUS classifications for specific goods intended for importation constitutes "customs business" under 19 U.S.C. 1641. Platforms that output these codes without licensed-broker workflow create legal exposure.

What is the USITC AUV check?

A cross-reference between declared value and USITC Dataweb Average Unit Value benchmarks for the same HTS line. Catches undervaluation risk pre-entry. Almost no platform offers this; GingerControl's Product Sandbox has it as the Valuation Sanity Check.

How long does a thorough vendor evaluation take?

Running the 20-point checklist across 3-5 candidate vendors typically takes 4-8 weeks. Compressed evaluations (under 2 weeks) miss the technical demonstration points and produce buyer's remorse.

Who should be in the evaluation team?

A licensed customs broker or trade compliance lead (for technical evaluation), procurement or finance (for cost), operations or IT (for integration), and legal or compliance counsel (for H290535, 1641, 1484 review). Single-functional evaluations produce mismatched decisions.

What if a vendor refuses to answer specific points?

That is itself useful information. Vendors confident in their architecture answer technical questions directly. Vendors that deflect to marketing material or accuracy claims have something to hide on those points.

Can I send this checklist to vendors before the demo?

Yes, and you should. Tell the vendor you will be asking all 20 points and want live demonstrations rather than slide-deck explanations on the technical points. Vendors that prepare in advance are easier to evaluate than vendors who improvise.

---

Run the Checklist Before You Sign

Before any trade compliance software contract signature, run the 20-point checklist against the candidate vendor and against your current platform if you're considering a switch. Take the GingerControl compliance audit quiz to build the self-assessment baseline that tells you which of the 20 points matter most for your specific volume profile and risk posture.

---

Related Articles

• Trade Compliance Software 2026: A Buyer's Guide to 10 Vendors
• 12 Questions to Ask Trade Compliance Vendors in a Demo (2026)
• AI Trade Compliance: The Reasonable Care Test Most Platforms Fail
• How to Switch Trade Compliance Software in 2026 (Migration Playbook)

---

References

[REF 1] CBP Ruling HQ H290535 Source: CBP Ruling HQ H290535

[REF 2] 19 U.S.C. 1484, Entry of Merchandise (Reasonable Care) Source: Cornell LII

[REF 3] 19 U.S.C. 1641, Customs brokers Source: Cornell LII

[REF 4] 19 CFR 163.4, Record Retention Source: eCFR 163.4

[REF 5] U.S. International Trade Commission, Dataweb Trade Statistics Source: USITC Dataweb