Our staff
The security standards that our staff follow
Security is the job of every person at Allied, not of one department (Broker MSC 1.2). Each employee follows these standards and takes part in our CTPAT security training.
Our CTPAT status: not approved yet
Allied CHB Inc. has applied to CTPAT. U.S. Customs and Border Protection (CBP) has not approved our application yet, so we are not CTPAT certified or validated. We do not use the CTPAT logo, because CBP licenses it only to validated companies.
While CBP reviews our application, we apply the CTPAT Minimum Security Criteria for customs brokers to our own work. This section gives our standards for our staff, our clients and our business partners. We will update this page when CBP decides.
Education and training
Security training
| Lesson | Topic |
|---|---|
| 8.1 | CTPAT at Allied: the program and your part |
| 8.2 | Cybersecurity and email fraud |
| 8.3 | POA and importer identity checks |
| 8.4 | Fake and stolen-identity importers |
| 8.5 | Suspicious documents and shipments |
| 8.6 | Signs of money laundering |
| 8.7 | Accurate data and CBP Form 5106 |
| 8.8 | Physical security and visitors |
| 8.9 | Incident reporting |
| 8.10 | Code of conduct and client data |
| 8.11 | Agriculture and wood packaging |
| 8.12 | New rules of 2026 |
| 8.13 | Knowledge check |
A new employee completes lessons 8.1, 8.2, 8.3, 8.9 and 8.10 before work with client data. We keep training records with the date, the attendees and the topic of each session (Broker MSC 12.1). Staff open the lessons in the Allied Academy.
Business partners
Client identity and due diligence
No entry without an approved POA
Each POA passes the portal checks before an approver accepts it.
No shortcuts
Do not accept a photo of an ID by email in place of the portal check. If a client asks you to skip a check, say no and tell the licensed customs broker (LCB).
Risk-based checks
Staff apply risk-based identity and document checks. The warning signs are in the Academy, not on this public page.
Escalate
When a concern is open, staff take protective action and refer the file to the licensed customs broker.
Cybersecurity
Cybersecurity rules
Multi-factor sign-in
Every company account uses multi-factor authentication.
Managed, encrypted computers
Company computers are centrally managed, with disk encryption and automatic security updates.
Company systems only
Client data stays in company systems. Never use a personal email account or personal storage for client data.
Phishing
Look at the full sender address and the link before you click. Report a suspicious email at once.
Payment changes
Confirm each change of bank details by a second, known channel before any payment.
Backups
Company email and files have regular backups.
Access ends on the last day
When an employee leaves, we remove all access and recover company devices.
Cyber incidents
We report a cyber incident that affects customs business to CBP, as CBP guidance for brokers requires.
Procedural security
Accurate data and document review
Review each document
Look for values, descriptions, origins or parties that do not agree with each other or with the client's business (Broker MSC 7.10).
Keep importer data current
Update the CBP Form 5106 record when the client's address, name or ownership changes.
Do not guess
Do not quote a rule from memory. Read the rule or ask the LCB.
Physical and personnel security
Office access and personnel security
Controlled entry
Entry to our office is controlled and monitored.
Visitors
Each visitor signs in, shows identification and stays with an employee.
Background checks
We check the background of each new employee before hire, as the law allows.
Code of conduct
Each employee signs our code of conduct, which includes the protection of client data.
Incident reporting
Report a concern at once
Report a security concern at once to the CTPAT point of contact or the LCB. Do not wait for a training session. You can also report without your name through our anonymous form. Our CTPAT point of contact decides with the LCB which reports go to CBP.
Questions
Common questions
Who is the CTPAT point of contact at Allied?
A company officer is our CTPAT point of contact, with an alternate. Staff find both names in lesson 8.1 of the Allied Academy. Outside parties can write to compliance@alliedchb.com.
What happens at a training session?
The trainer goes through one lesson and its examples. Each attendee signs the roster and answers a short knowledge check. The session ends with an open forum on security and IT improvements.
Can I report a concern without my name?
Yes. Use the anonymous form. It asks for no sign-in and no name.
Questions about CTPAT or supply chain security?
CTPAT and security mailbox: compliance@alliedchb.com
Last reviewed November 12, 2026. This page explains customs rules in general terms. It is not legal advice. Duty rates and CBP procedures change often, and we confirm the figures for your shipment in writing before you commit.