CARM went live for importers in October 2024. Since then, CBSA has been pushing hard toward a fully electronic trade environment — and if you're still running your import operation on emailed PDFs and paper invoices stuffed in a filing cabinet, you're already behind. Not dangerously behind, but the gap is widening.
This isn't about going paperless for the sake of it. It's about what happens when CBSA audits you and you can't produce a clean document trail. Or when your broker calls asking for a commercial invoice at 4 PM on a Friday and nobody can find it. Digital documentation solves real problems. But only if you do it right.
One more reason to get organized right now: CBSA updated its trade compliance verification priorities in mid-2026 to specifically target goods subject to retaliatory tariffs. If you've been importing U.S.-origin goods and claiming surtax remission, your documentation is going to get scrutinized. More on that below.
What "Digital Documentation" Actually Means in a Canadian Customs Context
People use this term loosely. Let's be specific.
Digital customs documentation means your import records — commercial invoices, packing lists, certificates of origin, permits, B3 entries, CARM release documents — exist in electronic form, are stored somewhere retrievable, and can be produced on demand. That's the minimum.
Done properly, it also means those documents are linked to specific transactions, version-controlled so you know which invoice was actually used at time of entry, and retained for the full six years CBSA requires under the Customs Act.
Done poorly, it means you have a Dropbox folder called "Imports 2024" with 600 files named "invoice_final_FINAL_v3.pdf." That's not a system. That's a liability.
What CBSA Actually Requires You to Keep
Section 40 of the Customs Act requires importers to keep records for six years from the end of the calendar year in which the goods were accounted for. CBSA's D17-1-21 memorandum (Records Keeping Requirements) is the governing document here — read it if you haven't.
The records you need to retain include:
- Commercial invoices (the one used at time of entry, not a corrected version sent later)
- Packing lists
- Bills of lading or airway bills
- Certificates of origin (especially for CUSMA/USMCA or CETA claims)
- Permits and import licences (SRT, textile, steel, dairy — whatever applies)
- Any rulings or advance rulings you relied on
- Your B3 entries and any K84 or B2 corrections
- Evidence of payment of duties and taxes
- Surtax remission documentation, if you've applied for or relied on remission orders under the retaliatory tariff framework — this is new and CBSA is actively looking at it
CBSA accepts electronic records. They've said so explicitly in D17-1-21. But the records have to be complete, legible, and accessible. "My old laptop had them" is not accessible.
One thing brokers see constantly: importers who keep the B3 but not the supporting invoice. CBSA comes in for a trade compliance verification, asks to see the invoice that supported a tariff classification, and the importer can't find it. That's when a verification turns into a penalty conversation.
The Retaliatory Tariff Documentation Problem
This is worth its own section because it's the issue causing the most headaches right now, in June 2026.
Canada's retaliatory surtaxes on U.S. goods have been in place since 2025. CBSA has extended surtax remission for certain goods — but the remission orders are narrow, the eligibility criteria are specific, and CBSA's updated guidance has been deliberately tightening the scope of who qualifies.
If you've been importing U.S.-origin goods and claiming remission, you need documentation showing exactly why you qualify. That means keeping the remission order you relied on, your eligibility analysis, and any supporting evidence — country of origin documentation, production records, whatever backs up your claim.
CBSA's updated 2026 verification priorities specifically call out goods subject to retaliatory tariffs. That's not a coincidence. They're going to look. If your remission claim falls apart under scrutiny, you're paying the surtax retroactively, plus interest. On a high-volume importer, that number gets uncomfortable fast.
Talk to your broker about this now, not after you get a verification letter.
The CARM Factor
CARM — the CBSA Assessment and Revenue Management system — changed the document flow in a few meaningful ways. Your Release Prior to Payment (RPP) privilege now lives in the CARM Client Portal. Your account statement, your transaction history, your security bond — all of it is in CARM.
What CARM didn't do is create a document management system for importers. It manages your account with CBSA. It doesn't store your commercial invoices or your certificates of origin. That's still your job.
Where CARM matters for paperless workflows: the portal gives you a digital record of your transactions, your corrections, and your payment history. If you're not logging into the CARM Client Portal regularly and downloading your statements, you're missing a free source of audit-ready documentation. Do it monthly. It takes ten minutes.
Electronic Data Interchange: The Backbone of Paperless Importing
If you're moving any meaningful volume — say, more than 50 shipments a month — you should be talking to your broker about EDI. Electronic Data Interchange is how your commercial data (invoice details, HS codes, values, quantities) gets transmitted to your broker and then to CBSA without anyone retyping anything.
A food importer we worked with was manually emailing invoices to their broker for every single shipment. Their broker was rekeying the data into the entry system. Every single time. They had a 2-3% data entry error rate, which sounds small until you realize that's one wrong tariff classification or one transposed value every 30-50 entries. Some of those errors triggered penalties. The fix was an EDI connection between their ERP and the broker's system. Setup took about six weeks. The error rate dropped to near zero.
EDI isn't magic. It requires your data to be clean on the sending end. Garbage in, garbage out. But if your invoices are structured consistently, EDI is the single highest-ROI step most mid-size importers can take.
Certificates of Origin: The Document That Causes the Most Grief
Honestly, this is where I see the most chaos in importer document management.
Under CUSMA, you don't need a specific form — you can use a certification of origin on any document, as long as it contains the nine required data elements set out in the agreement. Under CETA, you use a statement on origin or a REX (Registered Exporter) declaration. Under CPTPP, similar rules apply.
The problem isn't getting the certificate. It's keeping it. CBSA can audit your FTA claims years after the fact. If you claimed CUSMA tariff treatment on 200 entries and you can't produce the certifications for 40 of them, you're looking at back-duties plus interest on those 40 shipments. Depending on the goods, that adds up fast.
There's an added wrinkle right now. With retaliatory tariffs on U.S. goods and surtax remission in play, country of origin documentation has become even more critical. An importer claiming goods are not U.S.-origin — to avoid the surtax — needs solid documentation to back that up. A certificate of origin that doesn't hold up under scrutiny is worse than not claiming the exemption at all, because now you've got a potential misrepresentation issue on top of the duty liability.
A practical system: when your supplier sends a certification of origin, it gets saved immediately to a folder structure that mirrors your entry numbers. Not your supplier's reference number. Your B3 entry number. That way, when CBSA asks for the document supporting entry 123456789, you can find it in thirty seconds.
If you're using a TMS or ERP with customs functionality, attach the certificate directly to the transaction record. That's the cleanest approach.
Building a Document Retention System That Actually Works
You don't need expensive software to do this well. You need a structure and you need discipline.
Here's a folder structure that works for smaller importers:
- Year (e.g., 2025)
- Month (e.g., 2025-03)
- Entry Number (e.g., B3-123456789)
- Inside each entry folder: invoice, packing list, BOL, certificate of origin, permit (if applicable), B3 copy from broker, remission documentation (if applicable)
Every document gets named with the entry number as a prefix. "B3-123456789_invoice.pdf" not "invoice_march.pdf." When you have 3,000 entries over six years, that naming convention is the difference between a two-minute document retrieval and a two-hour search.
For larger operations, you want a document management system (DMS) with search functionality, user permissions, and an audit log showing who accessed what and when. SharePoint works. So does a purpose-built trade compliance platform. The tool matters less than the process.
What Happens During a CBSA Audit
CBSA's trade compliance verification process starts with a letter. You get 30 days to respond with documentation. The verifier will typically ask for a sample of entries — often 25 to 50 — and the supporting documents for each.
If your documents are organized, you respond in a week and the verification goes smoothly. If they're not, you spend three weeks hunting down invoices, calling suppliers for re-issued documents (which CBSA may not accept as originals), and hoping you can reconstruct what actually happened two years ago.
I've seen a kitchen goods importer spend $18,000 in staff time and broker fees responding to a verification that should have taken a few days — purely because their document storage was a mess. The duties assessed were less than $4,000. The administrative cost of being disorganized was four times the actual liability.
With CBSA's 2026 verification priorities now explicitly targeting retaliatory tariff goods, the stakes are higher for importers in affected categories. Steel, aluminum, consumer goods, agricultural products — if you've been importing from the U.S. and claiming any kind of tariff relief, assume you're on the list of potential verification targets and get your documents in order accordingly.
Digital documentation doesn't just make your life easier. It changes the economics of an audit entirely.
Integrating with Your Broker's System
Your customs broker is the other half of this equation. Ask them directly: what document formats do you accept? Do you have a client portal where I can upload documents and retrieve entry records? Can you send me electronic copies of every B3 you file on my behalf?
Most established brokers have client portals now. If yours doesn't, that's worth a conversation. You should be able to log in and pull any entry filed in the last seven years. If you can't, you're dependent on your broker's retention practices — and if you ever change brokers, you may lose access to your own records.
Get your records. Keep your own copies. Don't assume your broker's system is your backup.
Common Mistakes to Avoid
- Keeping only the final invoice, not the one used at entry. If your supplier revised the invoice after you filed, CBSA wants the version that was actually declared. Keep both, clearly labeled.
- Storing documents by supplier name instead of entry number. You'll thank yourself during an audit when CBSA asks about a specific B3, not about everything you ever bought from a specific vendor.
- Not retaining permits and licences. If you imported controlled goods — steel, textiles, dairy, certain chemicals — you need the permit on file, not just the entry.
- Assuming your broker keeps everything. They keep what they need for their purposes. That may not be everything you need for yours.
- Deleting records after five years because someone said that's the rule. It's six years from the end of the calendar year. On a shipment imported in January 2020, you need records until December 31, 2026. Don't purge early.
- Not documenting your surtax remission eligibility analysis. If you claimed remission under one of the retaliatory tariff orders, write down why you believed you qualified — at the time you made the claim. Reconstructing that reasoning two years later, after a verification letter arrives, is a lot harder.
The Practical Roadmap: Where to Start
If you're starting from scratch, don't try to fix everything at once. Here's a reasonable sequence:
- Audit what you have. Spend a day figuring out where your current import documents actually live. Email? Shared drive? Your broker's portal? A combination of all three with no system?
- Set up a folder structure. Even a basic one. Get the last 12 months of entries organized before you worry about the years before that.
- Talk to your broker. Get electronic copies of all entries they've filed for you. Most will provide this at no charge.
- Log into CARM. Download your transaction history. Set a monthly reminder to do it again.
- Create a document checklist for new shipments. Every entry should trigger a checklist: invoice received and filed? BOL filed? Certificate of origin filed (if FTA claimed)? Permit filed (if applicable)? Remission documentation filed (if surtax relief claimed)?
- Evaluate EDI or portal integration once the basics are in place. Don't automate a broken process.
Frequently Asked Questions
Does CBSA accept electronic records, or do I need paper originals?
CBSA accepts electronic records under D17-1-21. You don't need paper originals as long as the electronic copies are complete, legible, and accessible. That said, if you're claiming a preferential tariff rate under a free trade agreement, make sure your electronic certificate of origin is an actual copy of what the supplier provided — not a summary or a retyped version.
My supplier sent a revised invoice after I filed the entry. Which one do I keep?
Keep both. Label them clearly — "invoice_as_declared.pdf" and "invoice_revised_post_entry.pdf." If the revision changes the value or description of goods, you may need to file a B2 amendment. Talk to your broker. Don't just quietly swap invoices and hope nobody notices.
How long do I actually need to keep customs records?
Six years from the end of the calendar year in which the goods were accounted for. That's the rule under the Customs Act. For a shipment accounted for in March 2020, you need records until December 31, 2026. Some importers keep seven years to give themselves a buffer. That's fine.
What if I change customs brokers? Do I lose access to my records?
Potentially, yes — if you were relying on your old broker's portal as your only record source. This is exactly why you should keep your own copies of every B3 and supporting document. When you transition brokers, request a full export of your entry history before you close the relationship. Most brokers will provide this. Some charge a fee. It's worth paying.
We import under CUSMA. How long do I need to keep the certifications of origin?
Same rule — six years. And CBSA can audit FTA claims retroactively. If you claimed CUSMA treatment and can't produce the certification, CBSA can deny the claim and assess the MFN duty rate plus interest. On high-duty goods, that's a painful correction. Keep the certifications filed by entry number, not by supplier.
We've been claiming surtax remission on U.S. goods. What documentation do we need?
This is the question I'm getting most often right now. You need the specific remission order you're relying on, documentation showing your goods meet the eligibility criteria, and your country of origin support. CBSA's 2026 guidance has narrowed the scope of remission eligibility, so if you haven't reviewed your claims against the updated guidance, do that before CBSA does it for you. The surtax rates are significant enough that a retroactive denial hurts.
Is there a specific software CBSA recommends for document retention?
No. CBSA doesn't endorse specific software. The requirement is that records be complete, legible, and accessible — not that they be stored in any particular system. A well-organized shared drive works. So does a purpose-built trade compliance platform. What doesn't work is a mix of email attachments, personal hard drives, and memory.