CBP Questions: Supply Chain Risks in 2026

Elijah Thorne, CEO of “Global Threads,” a mid-sized apparel importer out of Savannah, Georgia, just stared at the email from U.S. Customs and Border Protection (CBP). This wasn’t your standard inquiry. It was a damn detailed list of questions about a recent shipment of organic cotton t-shirts from Vietnam. The subject line alone, “Request for Information: Supply Chain Traceability,” was enough to make his stomach drop. For years, Global Threads ran on what Elijah thought was a solid, if old-school, supply chain. They sourced, they made, they imported, and the main goals were always cost and speed. Now, CBP wanted to know everything. Every step, every worker, every fiber. This was about proving their sourcing was ethical in a global market that’s watching like a hawk. The insane detail in these CBP questions felt designed to overwhelm, threatening to freeze their operations and torch their reputation. Elijah’s first move, after the frustration and panic subsided, was to call his head of logistics, Maria Rodriguez. “Maria, what is this? They want the cotton’s origin, the spinning mill, the dyeing process, even the factory’s energy sources. Do we even have this stuff?” Maria, who was usually impossible to rattle, admitted they had bits and pieces, but it was scattered everywhere. Their “system” was a mess of spreadsheets, endless email threads, and binders of physical docs. This kind of fragmented approach, which is terrifyingly common in mid-sized companies, had just become a ticking time bomb. The real challenge was figuring out what CBP *actually* wanted and how to present the data to satisfy their insane demands. I’ve been in the trenches with import compliance teams, and I’m seeing this exact fire drill happen more and more. The old days of just filing basic import declarations are over. Today, CBP demands total transparency. The core of CBP’s questions, which I recognized from dozens of similar cases I’ve handled, is Section 307 of the Tariff Act of 1930. That’s the one prohibiting imports made with forced labor. While Section 307 has been on the books forever, enforcement has gone into overdrive, especially this year in 2026. A 2024 report from the International Labour Organization (ILO) estimated 27.6 million people are still in forced labor around the world, and that number is what’s driving regulators to dig into supply chains. CBP’s questions are laser-focused on uncovering any link to forced labor, no matter how indirect. They want granular detail on every single tier of your supply chain, way beyond your direct supplier. You need to know the labor practices at the cotton farm, the textile mill, and the garment factory. For Global Threads, this meant they had to go back and really investigate their Vietnamese partners, something they hadn’t done past a basic supplier audit. So Maria and her team started the nightmare task of digging up documents. Purchase orders, bills of lading, factory audits, labor certs, they were all over the place, in different digital folders and departments. That first week was just a mad scramble. And they found holes: a missing certification from a fabric supplier from two years back, inconsistent energy reports from a dyeing facility, and some really vague subcontracting agreements that didn’t name the sub-tier suppliers. These things might have been innocent mistakes, but under a CBP microscope, they looked awful. “We thought we had a handle on this,” Maria told Elijah, “but these questions expose every weak link.” This is where companies get killed. They focus on their Tier 1 supplier and ignore everyone upstream. The reality is that one undocumented supplier can bring your whole operation down. Responding to these CBP questions effectively means you must demonstrate a proactive due diligence program. Reacting is a losing game. You have to prove you’re constantly monitoring for risks. I tell my clients to get on a platform that centralizes all their supply chain data, from the raw material source to the final box. Platforms like Sourcemap or TraceLink (which has different applications but is built on the same principle) give you that visibility. They let you map your entire network, flag risks automatically, and pull up documents in seconds, not weeks. For Global Threads, trying to build this map after the fact was a disaster. They were hounding every supplier for updated certs, labor contracts, even utility bills to prove what energy they used. The process burned weeks of time and money, all while CBP was waiting and their shipment was stuck. Elijah finally caved and decided they needed a specialist. He brought in a trade compliance consultant, Sarah Chen, whose entire firm deals with CBP audits. Sarah’s first move was to completely reframe their response. “CBP doesn’t just want a pile of documents,” Sarah told them flat out during their first meeting. “They want a story. They want to see that you’re committed to ethical sourcing and that your internal processes prove it. Every single document has to support that narrative.” So they didn’t just dump the files on CBP. They drafted a detailed cover letter that laid out Global Threads’ due diligence policies, their supplier vetting process, and their plan to prevent forced labor. The story, Sarah kept saying, had to be airtight. One of CBP’s questions was about the exact location and operational details of the spinning mill. Global Threads had only ever listed the corporate HQ. But CBP wanted the physical factory address, employee headcount, and even specifics on their waste management. That level of detail shows you everything about CBP’s new focus: they’re deep into environmental and social governance (ESG) factors now, way beyond just tariffs. A lot of companies are still unprepared for this expanded scope. In 2026, the expectation is that a company knows its suppliers’ environmental and social footprint as well as it knows their production numbers. Sarah had Global Threads create a visual map of the entire supply chain for that one t-shirt. It was a diagram showing every stage, from the cotton farm in India (which supplied the Vietnamese mill) all the way to the final packaging plant. Every node on that map was hyperlinked to the right documentation, farm certifications, mill audits, factory labor records. This visual, paired with a clean data index, made their complicated supply chain easy for an auditor to understand and showed a level of organization that CBP loves. It’s all about making the CBP officer’s job easier. A messy response is like blood in the water for an auditor.

Pulling all this together was a massive project for Global Threads. Maria’s team worked insane overtime, collaborating with their overseas suppliers to get the exact data points CBP wanted. They quickly learned that even their compliant suppliers weren’t set up to provide this kind of documentation easily. That’s another lesson right there: you have to bake these compliance requirements into your supplier contracts from day one and run your own regular, unannounced audits. Trusting your suppliers is great, but it’s worthless without verification. After almost two months, Global Threads sent in their response. The package was over 300 pages, including the supply chain map and the cover letter detailing their new, much tougher due diligence program. Waiting for CBP’s reply was hell. But finally, an email came through. The response was satisfactory. The hold was lifted. Elijah could breathe again. The whole ordeal was expensive and exhausting, but it was a necessary wake-up-call. It made Global Threads completely rethink how they manage their supply chain and compliance. The goal here wasn’t just freeing one shipment. It was about forging a supply chain that was actually resilient and transparent. They put new rules in place for onboarding suppliers, demanding deep documentation on labor, environmental impact, and sub-tier relationships. They also invested in a supply chain visibility platform to keep all this data in one place, ready for the next time they get CBP questions. Elijah finally got it: compliance isn’t just a cost center. It’s a competitive weapon that proves you’re trustworthy to customers and regulators.