90-Day Implementation Roadmap to Prepare Your Organization for AEO Certification
Most businesses that fail at AEO certification do not fail because of the application. They fail because of what happened — or did not happen — in the weeks before the application was filed. Compliance gaps discovered during CBIC’s review. Security documentation that does not match the actual facility. SOPs that exist on paper but not in practice. SCN history that should have been assessed months earlier. Business partners without AEO-LO status, discovered too late. These are not documentation problems. They are preparation problems — and they are entirely avoidable with the right 90-day implementation plan. This roadmap gives you a structured, week-by-week framework to get your organisation genuinely ready for AEO certification — not just paperwork-ready, but operationally ready — before a single form is submitted to CBIC. Important note: This roadmap is designed for AEO-T1 and AEO-T2 applicants. AEO-T3 applicants are generally expected to hold AEO-T2 status for at least two years with a strong compliance track record before seeking T3 accreditation. The 90-day framework applies to T3 preparation after that threshold is met. MSME applicants will find several stages significantly faster due to relaxed documentation requirements. Before You Begin: Understanding What AEO Actually Requires AEO certification is not an audit of your paperwork. It is an assessment of your organisation across five dimensions — and your preparation must address all five: Dimension What CBIC Assesses Relevant Tier Customs Compliance Trade history, SCN record, GST/IEC compliance, duty payment record T1, T2, T3 Financial Solvency Net worth, current assets, financial stability, solvency certificate T1, T2, T3 Physical Security Access control, CCTV, cargo handling, restricted areas, visitor management T2, T3 (site inspection) Trade Partner Security Business partner vetting, supplier/buyer risk assessment T2, T3 Procedural Documentation SOPs, process maps, site layouts, security plans, staff training records T2, T3 For AEO-T2 and T3 applicants, Annexure B — the Security Questionnaire — must be submitted along with Annexure A (the primary application form). T3 applicants are also generally required to provide additional compliance, security, and business partner documentation, including Annexure F relating to business partner compliance. Phase 1: Assessment & Diagnosis (Days 1–30) The first 30 days are entirely internal. No forms. No portal. No applications. Just an honest, structured assessment of where your organisation actually stands against AEO requirements – and where the gaps are. This phase is the most important of the three. Businesses that skip it and go straight to filing are the ones that get CBIC deficiency notices within 30 days of submission. Week 1: Eligibility Verification Start with a binary question: are you currently eligible to apply? For all applicants, verify: Valid IEC (Import Export Code) — must be active and in good standing Valid GST registration — with all returns filed and no outstanding dues Customs activity record — minimum 25 customs documents in the last financial year (or 10 for MSME applicants — at least 5 per half-year) Business existence — minimum 3 financial years of operations (2 years for MSME applicants) Positive net worth and net current assets in the previous financial year SCN Review — Do This Carefully: Pull your complete Show Cause Notice history for the last 3 years from CBIC’s records. Serious SCNs involving fraud, misdeclaration, suppression of facts, or willful misstatement may negatively impact AEO eligibility. Applicants should maintain a clean compliance record with no serious customs or GST violations involving fraud, smuggling, willful misstatement, or suppression of facts. If you have active SCNs, assess their status with legal counsel before proceeding. MSME Status Check: MSME applicants benefit from relaxed eligibility — a minimum of 10 customs clearance documents in one year (vs higher thresholds for non-MSMEs), a lower documentary burden, and simplified compliance norms. For AEO-T1 MSME applications with complete electronic documentation, CBIC aims to process them within 15 days of submission. Confirm your MSME certificate is active and current. Week 2: Trade Compliance Audit Compile and review your customs compliance record systematically: Bills of Entry & Shipping Bills — pull the last 2–3 years from ICEGATE. Look for any inconsistencies, mismatch in declared values, or classification disputes Duty Payment History — verify no outstanding duty demands or undisputed arrears Advance Authorisations / EPCG — if applicable, check export obligation fulfillment status and DGFT compliance GST Returns—confirm all GSTR-1, GSTR-3B filed on time with no significant reconciliation gaps IEC Profile on DGFT portal — verify all details are current, address matches, authorised signatory is correct Document everything you find. Issues resolved internally now are far easier to manage than deficiencies raised later by CBIC during review. Week 3: Financial Solvency Assessment AEO requires demonstration of financial solvency. Prepare: Last 2–3 years of audited financial statements Solvency certificate from your bank (typically required for T2 applications) Net worth assessment—applicants are generally expected to demonstrate positive financial standing Current ratio assessment—current assets vs current liabilities If your financials show weakness in any area, consult your CA on whether this needs to be addressed before applying or whether it can be adequately explained in your application. Week 4: Security Infrastructure Gap Analysis For AEO-T1, this is a self-declaration exercise. For AEO-T2 and T3, these controls are commonly verified during on-site validation by CBIC officers for T2/T3 applicants. A strong security management system covering physical security, IT security, cargo security, transport conveyance security, and HR security is required. Walk through your facility and document the current status against each category: Security Area What to Check Physical Security Perimeter security, access control, entry/exit logs, security personnel CCTV Coverage Coverage of entry/exit points, cargo areas, storage, loading/unloading Cargo Security Cargo sealing procedures, tamper-evident packaging, cargo counting records Visitor Management Visitor register, ID verification, escort procedures, restricted areas signage IT Security System access controls, password policies, data backup, authorised user lists HR Security Background verification for new hires, employee ID system, exit procedures Transport Security Vehicle access logs, driver verification, vehicle security checks Phase 2: Remediation & Documentation (Days 31–60) Phase 2 is where you close the gaps identified in Phase 1 — and build the









