Let's be straight with you: if you import commercial goods into Canada and you haven't fully sorted out your CARM compliance, you are running real financial risk right now, not at some vague point in the future. CARM — the CBSA Assessment and Revenue Management system — is no longer a "coming soon" project. It has been fully live since CARM Release 3 landed in October 2024, and as of May 20, 2025, every commercial importer has been required to post their own financial security to keep using Release Prior to Payment. If your business brings in even a handful of containers a year from China, Vietnam, or anywhere else, this guide is for you.
CARM replaced a patchwork of paper-based, broker-managed customs accounting with a single online system: the CARM Client Portal (CCP). Instead of your customs broker quietly handling duty and tax calculations behind the scenes on their own bond, you — the importer of record — now carry the legal and financial responsibility directly. That is the single biggest shift Canadian businesses need to understand, and it is the one most SME importers still get wrong in 2026.
This guide walks through what CARM actually is, how to register on the CCP, what Release Prior to Payment (RPP) means for your bottom line, how to calculate and post the right financial security, and how to build a compliance routine that keeps your goods moving instead of stuck at the Port of Vancouver or Halifax waiting on a hold. We'll also cover real scenarios from Canadian importers of different sizes, how CARM connects to product compliance and certification timing, and what changes if you're a non-resident importer or working through a third-party logistics arrangement.
CARM (CBSA Assessment and Revenue Management) is the Canada Border Services Agency's digital system for the accounting and collection of duties and taxes on imported commercial goods. It centres on the CARM Client Portal, where importers of record must register their business, manage their import/export (RM) accounts, post financial security, and submit or review customs accounting declarations. Since October 2024, CARM handles all commercial import accounting in Canada — there is no parallel legacy system left to fall back on.
CARM didn't arrive overnight, and understanding the rollout helps explain why so many Canadian importers are still catching up. CBSA staged the project across three releases, each adding a layer of obligation onto importers who, for decades, had let their customs broker carry most of the compliance weight.
Release 1 (May 2021) was largely internal — CBSA moved its own systems onto the new platform without requiring importer action. Release 2, originally slated for 2022 and repeatedly delayed, finally landed in October 2024 as what CBSA rebranded "Release 3." This was the big one: it opened the CARM Client Portal to all commercial importers, introduced the new CBSA Commercial Accounting Declaration (CAD) replacing the old B3 and B2 forms, and — critically — required every importer to post their own Release Prior to Payment financial security rather than riding on their broker's bond.
| Milestone | Date | What Changed for Importers |
|---|---|---|
| CARM Release 1 | May 2021 | Internal CBSA systems migration; no importer action required |
| CARM Release 3 (Full Launch) | October 2024 | CCP mandatory for all commercial importers; new CAD accounting document; RPP self-security introduced |
| RPP Own-Security Mandatory | May 20, 2025 | Importers must post their own bond or cash deposit to keep using Release Prior to Payment |
| First Annual Security Review | By January 15, 2026 | Any increased security amount from CBSA's review must be topped up or RPP privileges are suspended |
| Next Annual Review Cycle | Review October 20, 2026 → top-up due January 15, 2027 | Ongoing annual cycle; businesses need a recurring compliance calendar entry |
If your business registered late or assumed your broker's bond still covered you after May 2025, you may already be operating with a compliance gap. This is worth checking today, not after your next shipment gets flagged at the border.
⚠️ Warning: "My broker has a bond" no longer protects you. Before Release 3, brokers often posted security on behalf of clients. As of May 20, 2025, that workaround is gone for RPP purposes — every importer of record needs their own financial security tied to their own RM account. If you haven't confirmed this directly with CBSA or your broker, do it this week.
Registering for the CARM Client Portal isn't difficult, but it does require some paperwork gathering before you sit down to do it, and it is not something you want to be doing for the first time while a shipment sits at the port. Here's the practical sequence Canadian businesses need to follow.
Step 1: Decide who runs the account. Before you touch the portal, decide internally who will be the Business Account Manager (BAM). Whoever registers the business account is automatically assigned this role, and they'll control who else in your organization gets delegated access. For most SMEs, this should be an owner, controller, or ops manager — someone who isn't going to leave the company next quarter.
Step 2: Gather your business information. You'll need your nine-digit Business Number (BN) from CRA, your associated RM import/export program account, and your legal entity name and address exactly as it appears with both CRA and CBSA. Mismatches here are one of the most common causes of registration delays — a numbered company name that doesn't precisely match your CRA registration will bounce.
Step 3: Complete the business account registration. Log into the CCP, provide business contact details, and designate at least one person CBSA can contact regarding program enrollment. You'll answer some financial questions tied to your RM account and set a preferred language for correspondence.
Step 4: Set up individual user profiles. Every person who needs portal access — you, your bookkeeper, your customs broker's team, your logistics coordinator — needs their own sign-in credential and profile. Don't share logins. CBSA's delegation-of-authority structure is built around individual accountability, and shared credentials create both a security risk and an audit headache.
Step 5: Delegate authority to your customs broker. This step trips up more Canadian SMEs than any other. Even if your broker has handled your customs accounting for fifteen years, they cannot act on your behalf in the CCP until you explicitly grant them delegated authority inside the portal. Skipping this step means your broker literally cannot see your account, submit declarations, or help you resolve an issue.
Step 6: Post your financial security (covered in detail below). Registration alone doesn't give you RPP privileges — you need security in place before goods can be released prior to payment.
💡 Pro Tip: Register your business account and delegate broker access well before you place your next order, not when a container is already on the water. Portal registration itself is usually quick, but resolving a legal-name mismatch with CRA can take days, and that's time you don't want to lose when your goods are already at Vancouver or Montreal.
Not sure where to start? Book a free 30-minute consultation with Epic Sourcing's Canadian team → Book a call
RPP is the program that lets your goods clear the border and get released to you before CBSA has actually collected the duties and taxes owed. Without it, you'd need to pay duties and taxes at the exact moment of import — which, for most Canadian businesses running regular container shipments, would be a logistical and cash-flow nightmare. RPP is what makes modern just-in-time importing possible in Canada.
Historically, licensed customs brokers extended their own RPP privileges to their client base, effectively lending their bond capacity across dozens or hundreds of importers. CARM ended that shared-risk model. Since May 20, 2025, every commercial importer who wants RPP access must qualify and post security under their own name, tied to their own RM account. This is a fundamental shift in who carries the financial exposure — and it's now you, not your broker.
If you don't have your own RPP security in place, your options narrow considerably: you can pay duties and taxes at time of release (which most SMEs find impractical for regular volume), or you can risk delays while CBSA processes payment before releasing your goods. Neither is a good position for a growing eCommerce brand or retailer trying to keep inventory flowing into the holiday season, especially when a single missed release window can mean empty shelves during your highest-revenue weeks of the year.
📌 Note: RPP security is posted per RM import/export program account, not per shipment or per supplier. If your business operates multiple RM accounts — common for companies with several divisions or that import under more than one legal structure — each account needs its own security calculation and posting.
This is the part that catches most Canadian importers off guard, because the number isn't arbitrary — CBSA calculates it based on your actual import activity, and it can be a meaningfully large figure for a growing business.
The calculation is based on the highest single month of duties and taxes your business incurred over the trailing 12 months. From that peak-month figure, CBSA determines your required security level: a surety bond must cover at least 50% of that peak month, while a cash deposit must cover 100% of it. The bond floor set by CBSA is $5,000 CAD per RM account, with a maximum of $10 million CAD, though many surety providers set their own higher minimum premium thresholds — often around $25,000 CAD — separate from CBSA's own floor.
Here's what that looks like in practice for three different sizes of Canadian importer:
| Business Profile | Peak Month Duties & Taxes | Surety Bond Required (50%) | Cash Deposit Required (100%) |
|---|---|---|---|
| Small eCommerce brand, occasional containers | $8,000 CAD | $5,000 CAD (CBSA floor) | $8,000 CAD |
| Growing SME, monthly container volume | $40,000 CAD | $20,000 CAD | $40,000 CAD |
| Established retailer, multiple SKUs and suppliers | $180,000 CAD | $90,000 CAD | $180,000 CAD |
Notice the gap between the bond and cash options widens as your volume grows — this is exactly why most Canadian importers beyond the smallest scale choose a surety bond rather than tying up double the cash. We'll break down that decision in the next section.
Not sure where to start? Book a free 30-minute consultation with Epic Sourcing's Canadian team → Book a call
Once you know your required security amount, you have two practical paths: a surety bond through an approved provider, or a cash deposit directly with CBSA. Each has real trade-offs for a Canadian SME's balance sheet and operations.
A cash deposit is simple in concept — you give CBSA the full 100% amount, and it sits with them as security. The upside is there's no third-party approval process and no annual premium. The downside is significant: that cash is now completely illiquid. For a business posting $180,000 CAD in security, that's $180,000 that can't be used for inventory, marketing, payroll, or anything else until you formally exit the RPP program or your requirement drops.
A surety bond, by contrast, only requires you to post 50% of the calculated figure as coverage, and you pay an annual premium — typically a small percentage of the bond value — to a surety company rather than locking up the full amount. For any business beyond the very smallest importer, this dramatically improves working capital efficiency. The trade-off is an underwriting process: surety providers assess your business's credit and financial standing before issuing the bond, and approval isn't instant.
There's a middle consideration many first-time importers overlook: the surety bond premium itself is a genuine ongoing operating cost, not a one-time fee. Depending on your business's credit profile and the bond size, premiums typically run in the low single-digit percentage range of the bond value annually, renewed each year the bond stays active. For a $90,000 CAD bond, that might mean a premium in the range of a few thousand dollars a year — a real cost, but one that's almost always smaller than the opportunity cost of having twice that amount sitting idle as a cash deposit instead of funding inventory or growth.
| Factor | Surety Bond | Cash Deposit |
|---|---|---|
| Amount required | 50% of peak-month duties/taxes | 100% of peak-month duties/taxes |
| Impact on working capital | Low — annual premium only | High — full amount tied up |
| Approval process | Underwriting required (credit check) | None — direct deposit with CBSA |
| Typical lead time | Roughly 25 business days | Days, once funds are available |
| Best fit | Growing SMEs with regular import volume | Very low-volume or new importers |
💡 Pro Tip: Surety bond underwriting can take roughly 25 business days from application to issuance. If your business is approaching a busy import season — back-to-school, holiday inventory builds, or a new product launch — start the bond application process at least six weeks ahead. Waiting until you need RPP coverage urgently puts you at the mercy of rush processing, if it's even available.
The financial security requirement isn't just a compliance checkbox — it's a real cash-flow event for Canadian businesses, and it deserves honest treatment as one. If your peak-month duties and taxes have grown because your business is scaling (which is a good problem to have), your required security grows with it. That means your bond premium or your tied-up cash deposit needs to be built into your financial planning the same way you'd plan for a bigger inventory purchase or a new hire.
For eCommerce sellers and first-time importers specifically, this catches people off guard because duties and taxes on commercial imports can be substantial relative to landed cost — often 5% to 20% of goods value depending on your HS tariff classification, before GST/HST is added on top. A business that scaled from occasional pallet shipments to monthly full containers can see its peak-month duty and tax bill jump five or ten times in a single year, and its RPP security requirement scales right alongside it.
The smart move is to treat your CARM security requirement as a recurring line item you review quarterly, not an annual surprise. Track your monthly duties and taxes paid, watch for your peak month creeping upward, and talk to your surety provider or broker before CBSA's annual review notification lands, so you're not scrambling to top up security with only a few weeks' notice.
There's a silver lining here too: because RPP security is calculated on your actual peak month rather than a flat industry rate, businesses with more even, predictable import volume — spreading orders across the year rather than one massive annual container — can sometimes manage a lower required security than a business that does one huge peak-season push. This is one more reason Canadian sourcing agencies increasingly recommend more frequent, smaller replenishment orders over one giant annual buy, where your supply chain allows it.
It's also worth thinking about how CARM security requirements interact with other cash commitments your business already carries — supplier deposits, freight forwarding fees, warehousing costs, and marketing spend for a launch. A business that's simultaneously funding a 30% supplier deposit on a new production run, covering ocean freight from Vancouver's port terminals, and now also needing to post an increased RPP security amount can find three different obligations landing in the same financial quarter. Mapping these out on a single cash-flow calendar, rather than tracking each in isolation, gives you a much clearer picture of when your working capital is genuinely tight versus when it just feels that way because several deadlines happen to cluster together.
For businesses working with a sourcing partner on a formal freight forwarding arrangement, this is exactly the kind of planning conversation worth having proactively rather than reactively — flagging upcoming production runs, expected peak shipping months, and known CARM review dates all in the same conversation so nothing catches your finance team by surprise three weeks before a payment is due.
CARM isn't a one-time registration you complete and forget. CBSA reviews your financial security annually, and if your import volume has grown, they'll notify you in the CARM Client Portal — the notification type is labeled "RPP – Annual Review" — that your required security amount is increasing. You then have a defined window to top it up.
For the 2025–2026 cycle, CBSA's annual review deadline fell on January 15, 2026, meaning any business notified of an increase needed updated security in place by that date to retain RPP privileges. If your business missed that window, you may currently be operating without full RPP access, which is worth confirming directly in your CCP account today. The next cycle runs on a similar rhythm: CBSA's annual review typically occurs in October, with the resulting top-up deadline falling roughly three months later, in mid-January.
⚠️ Warning: Missing a security top-up deadline doesn't just mean a warning letter — it means CBSA can suspend your Release Prior to Payment privileges outright. That forces you back to paying duties and taxes before release, which can stall inbound shipments at Vancouver, Halifax, or Toronto exactly when your business can least afford the delay.
Build this into your compliance calendar the same way you'd track a GST/HST filing deadline or a CCPSA product testing renewal: mark the annual CBSA review window, set a reminder to check your CCP notifications monthly, and keep an open line with your surety provider so a top-up request doesn't sit in someone's inbox for three weeks before anyone notices.
Even well into 2026, we still see the same handful of mistakes tripping up Canadian importers — some brand new to sourcing, some who've been importing for a decade and assumed CARM was "someone else's problem."
The first and most common mistake is assuming a broker relationship automatically equals CARM compliance. Your broker can absolutely help you navigate the CCP, submit declarations, and manage your CAD filings, but they cannot register your business account for you, and they cannot post security on your behalf under the current framework. That responsibility sits with the importer of record — that's you.
The second mistake is a legal name or address mismatch between CRA and CBSA records. If your business has changed its legal name, moved addresses, or operates under a numbered company with a trade name, small discrepancies between what CRA has on file and what you enter in the CCP can stall your registration for days while you sort out the paperwork.
The third mistake is treating the RPP security calculation as a one-time number instead of a rolling requirement. Businesses that grow quickly — a strong holiday season, a new retail partnership, a viral product — often blow past their existing security threshold without realizing it, only to get flagged at the next annual review with a security shortfall they weren't expecting.
The fourth mistake, and one we see constantly with newer importers, is delaying broker delegation in the portal. Your customs broker cannot act for you until you've explicitly delegated authority to them inside the CCP — this isn't automatic just because you have a working relationship with their brokerage.
The fifth mistake is treating CARM as purely a finance or accounting task and leaving the actual business owner or founder completely out of the loop. On paper, delegating CARM entirely to a bookkeeper or junior ops hire sounds efficient, but when a security shortfall notice lands or a CAD discrepancy needs a decision, someone with actual authority over the company's finances needs to be looped in quickly — not three weeks later when the bookkeeper finally mentions it in a routine check-in.
The sixth mistake is not accounting for CARM in supplier and purchase order planning. If you're about to place a significantly larger order than usual — say, doubling your typical container size to capture better unit pricing — that order can push your peak-month duties and taxes well past your current RPP security level. Running that math before you place the order, not after the shipment is already at the port, avoids an unpleasant surprise.
📌 Note: If you're unsure whether your business's CARM setup is fully compliant right now — registration, delegation, and current security level — it's worth a direct check with your broker or a customs compliance specialist rather than assuming everything carried over correctly from the old system.
Abstract rules are easier to apply when you can see how they play out for businesses that look like yours. Here are three composite scenarios based on common patterns we see across Canadian importers, illustrating how CARM plays out differently depending on business size and import pattern.
Scenario one: the seasonal eCommerce brand. A Vancouver-based home goods brand imports three to four times a year from a factory in Guangdong, timing shipments around spring refresh and holiday season. Their peak month — typically November, ahead of the holiday rush — generates roughly $35,000 CAD in duties and taxes on a single large container. Because their volume is concentrated rather than spread evenly, their RPP security requirement is calculated off that one big month, even though most months they import nothing at all. A surety bond covering 50% of that figure, around $17,500 CAD, is the more sensible option here rather than tying up $35,000 CAD in cash for a business that only actively imports a few times a year.
Scenario two: the steady-volume SME. A Toronto kitchenware retailer imports smaller, more frequent shipments from both China and Vietnam roughly every six weeks, deliberately smoothing out their cash flow and reducing single-shipment risk. Their peak month sits around $22,000 CAD in duties and taxes — lower than the seasonal brand above despite similar annual import value, purely because their volume is distributed more evenly across the year rather than concentrated into one or two large pushes. This is a direct, practical illustration of why order cadence matters for CARM security planning, not just total annual spend.
Scenario three: the scaling multi-category retailer. A Calgary-based retailer selling across three distinct product categories — each with different HS tariff classifications and duty rates — sources from four different suppliers across China and Vietnam. Their peak month recently jumped to $210,000 CAD in duties and taxes after adding a new high-duty product category, triggering a CBSA annual review notice requiring a security increase well before their existing review date. This business had to move quickly to top up their surety bond mid-cycle, a scenario that's becoming more common as CBSA's review process catches rapid growth in near-real time through CCP account monitoring.
The common thread across all three: the businesses that handled their CARM obligations smoothly were the ones actively tracking their own peak-month duty and tax figures month over month, rather than waiting for CBSA's annual notification to find out where they stood.
CARM compliance doesn't exist in isolation from the rest of your Canadian import compliance obligations — and treating it as a completely separate workstream from product certification is a mistake we see often, particularly among first-time importers building out a new product line.
Your HS tariff classification, which drives your CARM duty calculation, is directly tied to how your product is described, what it's made of, and what regulatory category it falls under. A product that requires Health Canada approval, CCPSA compliance testing, a CSA mark, or ISED certification for wireless or electronic components often carries a more specific — and sometimes more heavily duty-rated — classification than a generic version of the same item. Get the product description wrong at the sourcing stage, and you risk not just a compliance gap with Health Canada or CCPSA, but a downstream CARM accounting error that either understates or overstates your actual duty exposure.
There's also a timing dimension worth planning around. If your product needs CSA or ISED certification testing before it can legally be sold in Canada, that testing timeline needs to run in parallel with your CARM account setup and RPP security planning — not sequentially, after the goods are already on the water. A business that only starts thinking about CARM security once a shipment reaches Vancouver, while simultaneously scrambling for CCPSA test reports, is stacking two time-sensitive compliance processes on top of each other at the worst possible moment.
The businesses that manage this well tend to build a single onboarding checklist for any new product line that covers HS classification, applicable Canadian regulatory requirements (CCPSA, Health Canada, CSA, ISED, or CFIA depending on category), and an updated CARM duty-and-tax estimate, all reviewed together before the first purchase order goes out. This is exactly the kind of cross-functional planning a sourcing agency like Epic is positioned to coordinate, since our verification and product development process already touches classification-relevant specifications long before a broker ever sees a shipment.
Not every business selling into Canada is a Canadian-incorporated entity, and CARM's requirements apply a little differently depending on your structure. Non-resident importers — foreign businesses that want to be the importer of record on their own Canadian-bound shipments rather than leaving that role to a Canadian distributor or customer — can register in the CARM Client Portal, but they face additional scrutiny around their RM account setup and financial security, since CBSA has less existing financial history to draw on for a foreign entity than for an established Canadian business.
For non-resident importers, this often means a more conservative initial security calculation, or a request for additional documentation to support the account. If your business is a US or overseas brand looking to become the importer of record for direct-to-Canada fulfillment rather than routing everything through a Canadian distributor, budget extra time for this setup — it typically takes longer than a standard Canadian business registration, and skipping straight to placing orders without this in place can leave shipments stuck at the border with no clear importer of record to release them to.
Third-party logistics providers and fulfillment partners add another layer worth clarifying early. If you're using a 3PL that also acts as your customs broker, confirm explicitly who is registered as the importer of record in the CCP — it should be your business, not the 3PL, unless you've made a deliberate and fully understood decision to structure it otherwise. Blurring this line is a common source of confusion when duties and taxes come due, or when a CBSA audit needs to identify exactly who is financially responsible for a given shipment.
💡 Pro Tip: If you're expanding into Canada from the US or another market and considering non-resident importer status versus working through a Canadian distributor, have this conversation with a customs broker and your sourcing partner together, early. The right structure affects not just your CARM setup, but your pricing, your GST/HST obligations, and how quickly you can actually get inventory moving once you're ready to launch.
CARM has actually made the relationship between importer and customs broker more important, not less — even though it shifted more direct responsibility onto you. A good broker still handles your day-to-day CAD accounting declarations, classification questions, and CBSA correspondence. What's changed is that you now need to be an active participant in your own compliance rather than a passive client who signs whatever the broker sends over.
When choosing or reviewing your broker relationship in 2026, ask directly: how do they handle CCP delegation for new clients, how quickly do they flag when your security level is approaching its annual review, and how do they communicate CAD accounting discrepancies before they become a CBSA inquiry. A broker who can answer these clearly, without hedging, is one who has genuinely adapted their practice to CARM rather than just tolerating it.
It's also worth understanding where a broker's expertise ends and where a full-service sourcing partner's begins. A customs broker manages your accounting and border-facing compliance. They typically don't manage your supplier relationships, your product compliance under CCPSA or Health Canada, or your quality assurance overseas. That's a different function entirely, and conflating the two is a common gap for first-time importers building their supply chain from scratch.
At Epic Sourcing, we sit on the supply side of this equation — helping Canadian businesses find, vet, and manage suppliers in China and Vietnam — but CARM compliance touches everything downstream of that relationship, so it's part of the conversation with nearly every client we onboard through The Epic Suite.
Here's where it connects directly to sourcing decisions: your HS tariff classification, which your broker uses for customs accounting, is determined largely by the product specifications and materials your supplier provides. Get the classification wrong at the sourcing stage — an ambiguous product description, missing material composition, unclear end-use — and you're not just risking a CBSA reclassification later; you're risking a miscalculated duty and tax base that throws off your entire RPP security calculation.
This is one reason our verification reports and Product Wizard process capture detailed material and construction data upfront, before goods ever ship. It's not just a quality control measure — it directly feeds accurate classification, which feeds accurate customs accounting, which feeds an accurate (and not needlessly inflated) security requirement under CARM.
For Canadian businesses running Hot Source or freight forwarding arrangements through Epic, we also coordinate directly with your customs broker on documentation timing, so your CAD filings and CCP account reflect shipments accurately and on schedule — reducing the chance of a discrepancy that draws unwanted CBSA attention.
Not sure where to start? Book a free 30-minute consultation with Epic Sourcing's Canadian team → Book a call
The businesses that handle CARM well in the long run treat it as an ongoing operational routine, not a one-time setup task. Here's a practical cadence that works for most Canadian SME importers.
Monthly, review your CCP account for any new notifications — particularly RPP annual review flags — and glance at your duties and taxes paid that month against your prior peak. Quarterly, sit down with whoever manages your finances and your broker to confirm your current security level still comfortably covers your trailing 12-month peak, especially if you've had a strong sales quarter or added new product lines with different tariff classifications. Annually, treat the CBSA review window (typically October, with a January top-up deadline) as a hard calendar item, the same way you'd treat a corporate tax filing deadline.
Beyond the calendar mechanics, keep your delegation of authority current. If your bookkeeper or ops manager leaves the company, update their CCP access immediately — don't leave a departed employee with active delegated authority on your account. And if your business restructures, adds an RM account, or changes its legal name, update CRA and CBSA records in parallel, not sequentially, to avoid the mismatch issues that stall so many registrations.
Finally, don't treat your customs broker and your sourcing partner as separate conversations happening in silos. The most resilient Canadian importers we work with loop both into the same planning conversation — before placing a new order, before a peak season ramp-up, before adding a new supplier — so that classification, documentation, and financial security all stay in sync rather than becoming three separate fire drills.
One practical habit worth adopting: keep a single shared document or tracker — even a simple spreadsheet — that lists your current RM account(s), your active security amount and type, your surety provider's contact information, your broker's CCP delegation status, and the date of your next expected annual review. This sounds basic, but in businesses with any staff turnover, it's often the single biggest time-saver when someone new needs to step in and understand the company's CARM position quickly, without digging through old emails or waiting on a former employee to explain how things were set up.
It's also worth revisiting your CARM setup any time your business itself changes materially — a new financing round, a change in ownership structure, a shift from sole proprietorship to incorporation, or entry into a new product category with a meaningfully different duty profile. Any of these can affect your RM account details, your financial standing for surety underwriting purposes, or your peak-month duty calculation, and catching the implications early is far easier than untangling them after a shipment is already held at the border.
If your business doesn't register and maintain an active CCP account, you lose access to Release Prior to Payment and the ability to manage your customs accounting directly. In practice, this means your goods can't clear the border on the streamlined RPP basis, and you'd need to arrange payment of duties and taxes before release on every shipment — a serious operational bottleneck for any business importing regularly. Your customs broker also cannot act on your behalf in the portal without your account being registered and delegation granted, so unregistered businesses risk being unable to get help resolving accounting issues or classification questions through their existing broker relationship. For any Canadian business importing commercial goods with any regularity — even a handful of shipments a year — registration is not optional at this point; CARM Release 3 has been the only system for commercial customs accounting in Canada since October 2024, with no legacy fallback available.
No — since May 20, 2025, RPP financial security must be posted by the importer of record under their own RM account, not by the customs broker on a shared basis. Brokers previously extended their own bond capacity across many clients, but CARM ended that shared-risk arrangement specifically to align financial accountability with the business that is legally responsible for the duties and taxes owed. Your broker can absolutely guide you through the surety bond application process, recommend providers, and help you calculate your required amount based on your import history, but the bond or cash deposit itself must be registered against your business's own RM account in the CARM Client Portal. This is one of the most misunderstood aspects of CARM among longtime Canadian importers who assumed their existing broker relationship would carry over unchanged.
CBSA calculates your required security based on the single highest month of duties and taxes your business incurred over the trailing 12 months. From that peak-month figure, a surety bond needs to cover at least 50% of the amount, while a cash deposit needs to cover the full 100%. There's a CBSA-set floor of $5,000 CAD per RM account and a ceiling of $10 million CAD, though individual surety providers may set their own higher minimum premiums, often starting around $25,000 CAD in bond value. CBSA reviews this figure annually and will notify you in the CCP if your peak month has grown enough to require additional security, giving you until the following January to top it up. Because the calculation is based on your actual peak month rather than an average, businesses with volatile or highly seasonal import patterns often see higher security requirements than businesses with steadier, more evenly distributed order volume across the year.
For most Canadian SMEs beyond the very smallest import volumes, a surety bond is the more capital-efficient choice because it only requires 50% coverage plus an annual premium, rather than tying up 100% of the calculated amount as cash sitting with CBSA. A cash deposit can make sense for a very new importer with minimal volume, where the CBSA floor of $5,000 CAD is a manageable amount to set aside, or for a business that strongly prefers to avoid any underwriting or credit-check process. The trade-off with a surety bond is the approval timeline — underwriting can take roughly 25 business days — so it needs to be arranged well ahead of a peak shipping season rather than at the last minute. Talk through your specific cash-flow situation with your broker or a financial advisor before deciding, since the right answer depends on your growth trajectory, available working capital, and how predictable your import volume is month to month.
The Commercial Accounting Declaration replaced the legacy B3 Canada Customs Coding Form and the B2 adjustment form as the single document used to account for duties and taxes on commercial imports under CARM. Unlike the old paper-based or EDI-only B3 process, the CAD lives inside the CARM Client Portal and can be adjusted directly by the importer or their delegated broker without a separate formal amendment process for many types of corrections. This gives Canadian importers more direct visibility into their own accounting data — you can see exactly what's been declared against your RM account rather than relying entirely on your broker's internal records. It also means errors are, in some ways, easier to catch and correct quickly, provided someone on your team or your broker's team is actually reviewing CAD entries rather than assuming they're automatically correct.
CARM's registration, RPP, and financial security requirements apply uniformly regardless of your sourcing country — the system doesn't distinguish between goods arriving from China, Vietnam, or anywhere else in terms of portal registration or security posting. What does differ is your duty rate, which depends on the product's HS tariff classification and whether preferential treatment applies. Goods sourced from Vietnam may qualify for reduced tariffs under the Comprehensive and Progressive Agreement for Trans-Pacific Partnership (CPTPP), provided the goods meet the relevant rules of origin, which can lower your effective peak-month duty figure and, in turn, your required RPP security. Goods from China generally don't benefit from a preferential trade agreement with Canada in the same way, so businesses sourcing there should expect standard Most Favoured Nation tariff rates to apply unless a specific exemption or remission applies to their product category.
If you've missed a top-up deadline and suspect your RPP privileges may be suspended or at risk, check your CARM Client Portal account directly for any notifications first — CBSA typically flags account status changes there before they show up as a shipment-level problem. Contact your surety provider or broker immediately to understand how quickly a top-up can be processed, since a lapse in RPP access can mean your next shipment is held until duties and taxes are paid up front rather than released on the standard RPP basis. It's also worth having a direct conversation with CBSA or your broker about whether a temporary security increase or an expedited surety amendment is possible, since providers sometimes have faster options for existing clients needing a top-up versus a brand-new bond application. Going forward, set a recurring calendar reminder tied to CBSA's annual review window (October review, January deadline) so this doesn't repeat next cycle.
Yes — CARM's accounting framework also governs how duty drawback and refund claims are processed when goods are returned, re-exported, or otherwise qualify for a refund of duties and taxes already paid. Under the CAD system, adjustment requests for overpayments or drawback claims are submitted and tracked through the CARM Client Portal rather than through a separate paper-based process, which in practice gives Canadian importers better visibility into the status of a pending claim than the old B2 adjustment process offered. If your business handles a meaningful volume of returns — common for eCommerce brands with generous return policies — it's worth having your broker walk you through how drawback claims flow through your specific CCP account, since claim eligibility and required documentation can vary depending on whether goods are being re-exported, destroyed, or returned to a domestic distribution point. Keeping clean records of the original CAD declaration tied to any returned shipment makes a subsequent drawback claim significantly faster to process.
Whether you're setting up your CARM account for the first time or trying to untangle a security shortfall before your next shipment, Epic Sourcing's Canadian team is here to help.
Book a Free Consultation | View Our Services
Epic Sourcing Canada · Vancouver, BC · hello@epicsourcing.ca · 1 (800) 672-9816
