Customs evidence control
How should importers build a customs record-retention audit trail?
Build a retention matrix by record family, governing rule, triggering event, required period, owner, storage location, access, legal hold, and disposition. Under 19 CFR 163.4 the general rule is five years from entry or activity, but named exceptions and other controlling provisions matter. Tyllus can connect shipment evidence, source, review, and activity context; it does not determine the legal schedule, certify compliance, or replace approved archival controls and professional advice.
By Ayhan Karaca, Co-Founder · Updated: August 27, 2026
Is the US customs record-retention rule always five years?
No. The current text of 19 CFR 163.4 states a general five-year period from the date of entry or activity for listed records, but it enumerates exceptions. Specified drawback records are kept for three years from payment, certain packing lists for 60 calendar days after release or conditional release, and certain informal or section 321 records for two years. Another applicable provision can also control.
A defensible policy therefore maps the exact record family and trigger instead of applying one filename-based deletion date to everything. Confirm the current rule and the organization's obligations with customs counsel, the customs broker, and CBP as appropriate.
| Record context | Period stated in 19 CFR 163.4 | Operational control |
|---|---|---|
| General listed records | Five years from entry or activity | Record exact trigger, rule, owner, and disposition date |
| Specified drawback records | Three years from payment of drawback | Keep drawback event and supporting record family linked |
| Certain packing lists | 60 calendar days after release or conditional release | Do not apply this exception to unrelated invoice or entry evidence |
| Certain informal entries | Two years from entry | Preserve entry type and applicable subsection |
| Specified section 321 records | Two years from date of entry or activity | Distinguish qualifying records from the general population |
| Records governed elsewhere | Period in the controlling provision | Legal hold and other law may prevent scheduled disposition |
What evidence belongs in the audit trail?
Retention is more than keeping a PDF. Preserve what the record is, which entry and shipment it supports, who supplied it, when it was received, which version was reviewed, what decision used it, who had access, and whether a correction, hold, export, or disposition occurred. The evidence should remain understandable after the employee who handled the shipment has moved roles.
19 CFR 141.86 enumerates commercial-invoice information such as port, sale or shipment time and place, parties, a detailed merchandise description, quantities, values, currency, charges, rebates, country of origin, and assists when applicable. A stored file can still be operationally weak if the team cannot show which version supported the entry decision.
Read the retention-control process
Classify the record family and governing rule. Capture the shipment, entry, source, version and trigger. Restrict access and preserve integrity. Link human review and corrections. Apply approved legal holds and retention dates. Export or dispose under policy with evidence of the action.
Why does record control matter at enforcement scale?
CBP's 2024 Trade Sheet reports 417 audits that identified $576 million in lost revenue and collected $117.6 million. It also reports more than 100,000 entry-summary compliance reviews that recovered nearly $700 million. These are agency-wide enforcement and revenue results, not a missing-document cost, audit probability, or forecast for one importer.
The safe operational conclusion is limited: an importer should be able to retrieve the evidence behind a declared value, classification input, origin statement, charge, correction, and broker handoff for the applicable period. A national enforcement total cannot justify an invented ROI for document software.
- Keep regulation, record family, entry, shipment, and trigger date explicit.
- Preserve original source and reviewed version without silently overwriting history.
- Record who accepted, corrected, exported, placed on hold, or disposed of evidence.
- Test retrieval with authorized users and loss of the original operator in mind.
- Document gaps and remediation; do not manufacture a complete trail after the fact.
How Tyllus supports a shipment-level evidence trail
Tyllus can keep shipment documents, their operational source and review context, partner activity, milestones, costs, invoices, notes, and responsible actions connected to the shipment. That makes the current evidence easier to retrieve and gives authorized teammates context for review and handoff.
Tyllus does not determine which laws apply, calculate a legal disposition date, certify authenticity or sufficiency, guarantee availability for a statutory term, or replace a records-management archive, broker, lawyer, or CBP system. The organization must approve retention, legal-hold, backup, export, access, and deletion controls that satisfy its obligations.
How should you test retrieval before an audit or staff change?
Select samples across entry type, age, supplier, broker, document family, correction state, and access role. Ask a permitted user who did not handle the original shipment to locate the governing record, source, reviewed version, decision history, and related entry or shipment without private mailbox access. Record elapsed time, missing context, access failures, and false matches.
A successful retrieval test does not certify compliance. It reveals whether the operating record remains intelligible and whether the approved archive, access, and retention policy can supply the evidence a qualified reviewer requests.
Test one shipment's evidence trail end to end.
Map the record family, source, version, review, owner, access, retention rule, legal hold, and archive boundary. Tyllus can support the operating trail while your qualified advisers define the legal controls.