OEA, CTPAT, and IVA/IEPS Certification: Three Programs, Three Different Problems

Which certification should we get first, OEA or CTPAT? It is one of the most common questions a company running a Mexican import or export operation asks, and it usually carries a hidden assumption: that these are rungs on a single ladder, and the job is to figure out which rung to climb first. They are not. OEA, CTPAT, and the IVA/IEPS certification are three separate programs, run by two different governments, that solve three different problems. One protects your cash flow. One earns you faster treatment at Mexican customs. One earns you faster treatment at the United States border. Choosing among them by name, or worse, assuming one substitutes for another, is how operations end up certified for something they did not need while still exposed on the thing they did.

This is the explainer that sorts the three apart before you spend a peso or a month pursuing any of them.

Three programs, three problems

Before the detail, the shape of it.

IVA/IEPS CertificationOEA (Operador Económico Autorizado)CTPATProblem it solvesIVA cash outflow on temporary importsSlow, inspection-heavy treatment at Mexican customsSlow, inspection-heavy treatment at the US borderAuthoritySAT (Mexico)SAT via AGACE (Mexico)CBP (United States)BasisLey del IVA Art. 28-A; Ley del IEPS Art. 15-A; RGCE Título 7RGCE Título 7; WCO SAFE FrameworkUS CBP program, launched 2001What you getCredit of the IVA/IEPS otherwise payable on temporary importsFewer inspections, priority lanes, longer permanence windows, mutual recognitionReduced exams, front-of-line and FAST processing, mutual recognitionWho needs it firstIMMEX manufacturers exposed to the IVA trapEstablished importers and exporters seeking facilitationCompanies with US-bound cargo wanting predictable border treatment

Two of the three, IVA/IEPS and OEA, are actually two modalities of the same Mexican framework: the Esquema de Certificación de Empresas (Companies Certification Scheme) administered by the SAT. The third, CTPAT, is a United States program run by CBP. The reason they feel like one ladder is that Mexico's OEA and the US CTPAT are formally linked by a Mutual Recognition Arrangement. The reason they are not one ladder is that each was built for a distinct problem, and a company can need one acutely while having no use for another.

IVA/IEPS certification: the cash-flow instrument

For most IMMEX manufacturers, this is the one that matters first, and it has nothing to do with security or border speed. It is about tax.

Since the 2014 reform to the Ley del IVA, goods imported temporarily under IMMEX are subject to the Impuesto al Valor Agregado (IVA, value-added tax) and, where applicable, the Impuesto Especial sobre Producción y Servicios (IEPS) at the moment of temporary entry, unless the company holds this certification or posts a bond for the amount. The certification, whose formal name is the Registro en el Esquema de Certificación de Empresas en la modalidad IVA e IEPS, resolves that by granting a credit equal to the IVA and IEPS that the temporary import would otherwise require, neutralizing the cash outflow. Its legal basis sits in Article 28-A of the Ley del IVA, Article 15-A of the Ley del IEPS, and Title 7 of the Reglas Generales de Comercio Exterior (RGCE, the General Rules of Foreign Trade).

The certification comes in three rubros (levels): A, AA, and AAA. The higher levels require a stronger compliance track record and, in exchange, grant longer validity and additional facilities. Qualifying at any level rests on a clean tax and customs standing, which is why the certification is best understood as a status a company earns and maintains, not a form it files once.

The trap in one sentence. A company can hold an IMMEX authorization and still owe IVA on every temporary entry. IMMEX defers the duty; it does nothing for the IVA. Only the IVA/IEPS certification (or a posted bond) does that. The two are granted by different authorities under different laws, and holding the first tells you nothing about whether you hold the second.

For a high-volume operation, the gap between paying IVA at entry and recovering it later through the monthly mechanics is not a rounding error. It is working capital frozen on every shipment. The certification is what keeps that capital in the business.

OEA: the trusted-operator status

The Operador Económico Autorizado (OEA, Authorized Economic Operator) modality answers a different question: how does a company that has proven it operates cleanly get treated better by Mexican customs?

OEA is Mexico's implementation of the Authorized Economic Operator concept from the World Customs Organization's SAFE Framework of Standards, administered by the SAT through the Administración General de Auditoría de Comercio Exterior (AGACE). It was formerly known as NEEC. A company that earns it is recognized as a low-risk, trusted operator, and that recognition translates into concrete facilitation: fewer physical inspections, access to express or priority lanes, longer permanence windows for temporary imports, and simplified procedures across a range of operations.

It helps to hold OEA and the IVA/IEPS certification side by side, because they are easy to conflate and they do opposite kinds of work. The IVA/IEPS certification is fiscal: it changes what you pay and when. OEA is operational: it changes how you are treated, how fast you move, how often you are stopped. One protects the balance sheet. The other protects the clock. A manufacturer bleeding working capital to the IVA trap does not fix that with OEA, and a company drowning in inspections does not solve it with the IVA/IEPS certification. Naming them together as "the SAT certifications" hides exactly the distinction that should drive the decision.

CTPAT: the US side of the same handshake

CTPAT (the Customs Trade Partnership Against Terrorism) is the United States counterpart, run by CBP. It launched in the aftermath of 2001 as a voluntary supply-chain security program, and it runs on the same trusted-operator logic as OEA: a company that meets CBP's minimum security criteria, and at higher tiers passes on-site validation, is recognized as low-risk and receives facilitation at the US border.

For importers, CTPAT is structured in tiers, from certified (meeting the minimum security criteria) through validated (criteria confirmed by an on-site review) and, at the top, partners who exceed the criteria and receive the highest level of benefits. Those benefits are the US-side mirror of OEA's: reduced examinations, front-of-line and FAST-lane treatment, and priority in resuming operations after a border disruption.

Here is where the two connect. Mexico's SAT and US CBP signed a Mutual Recognition Arrangement in 2014, under which each country recognizes the other's trusted-operator members. An OEA-certified Mexican company can be recognized on the US side, and a CTPAT member on the Mexican side, so a company operating across the border can build one coherent trusted-operator posture instead of two disconnected ones. This is the closest the three programs come to being a "ladder," and even here it is a handshake between two peers, not a hierarchy.

How they interlock, and where they do not

Put the wiring together. IVA/IEPS and OEA are two modalities of one Mexican framework, so a company can pursue them in sequence or hold both. OEA and CTPAT are two national programs linked by mutual recognition, so holding one strengthens standing for the other across the border. But IVA/IEPS and CTPAT touch at almost no point: one is a Mexican tax instrument, the other a US security program. A company can rationally hold the IVA/IEPS certification and never pursue CTPAT, or hold CTPAT and have no need for the IVA/IEPS certification, depending entirely on what its operation does.

Consider a manufacturer in the Bajío that imports components temporarily under IMMEX and ships finished goods to the United States. Its first exposure is fiscal, so the IVA/IEPS certification comes first. As volume grows and inspections start to slow it down, OEA converts its clean record into faster Mexican handling. Because its cargo crosses north, CTPAT then becomes worthwhile, and mutual recognition with its existing OEA status shortens that path. Three programs, adopted in the order the exposures actually appeared, not in a preset sequence.

One recent change raises the bar on the Mexican side. The customs reform published in the Diario Oficial de la Federación on November 19, 2025, in force January 1, 2026, tightened the eligibility conditions for the certified-company registry, including the OEA modality, adding requirements around the clean legal and compliance record of a company and its partners. The programs remain fully available. The threshold to enter and hold them is higher than it was.

The misconception that costs the most

The single most expensive misreading is the ladder: the belief that OEA, CTPAT, and the IVA/IEPS certification are ascending grades of the same thing, and that a serious company should eventually collect all three in order. Treated that way, a company sequences its effort by prestige instead of by need. It pursues OEA for the reputational shine while the IVA trap quietly drains its cash, or chases CTPAT before it has any US-bound volume that would benefit. Each certification is real work: months of documentation, process maturity, and audit readiness. Spending that effort on the wrong one first is not a small misallocation.

The companion error is substitution: assuming that holding one covers the ground of another. It does not. OEA does not credit your IVA. The IVA/IEPS certification does not speed you through inspection. CTPAT does neither on the Mexican side. Each does one job, and only that job.

Choosing: by function, not by acronym

The decision gets simple once you stop asking which certification is best and start asking which problem is costing you most right now.

If temporary imports under IMMEX are freezing your working capital through the IVA, the IVA/IEPS certification is the answer, and it is usually the first thing a manufacturer should secure. If your Mexican operation is mature and clean but slowed by inspections and scrutiny, OEA is what converts that track record into facilitation. If your cargo moves into the United States and you need predictable, faster border treatment, CTPAT is the instrument, and if you already hold OEA, mutual recognition makes it a shorter path.

Choose by function, not by acronym. The right sequence is not a fixed ladder every company climbs. It is the order of your own exposures, most costly first.

This is the judgment we apply for clients across more than 190,000 customs operations a year, at a firm that has held Mexican and United States customs authority since 1904 and operates three Patentes Nacionales alongside a US Corporate Customs Brokerage License. Certifications are not trophies to collect. They are instruments matched to specific exposures, and matched well, they pay for themselves.

TRADE. UNDER CONTROL.