ISF filing explained: the 10+2 elements, the 24-hour clock, and who actually does the work

Three weeks before your container sails, your forwarder sends a spreadsheet with ten rows and a date. That spreadsheet is the Importer Security Filing — ISF, or "10+2" — and the date has teeth: the first eight rows are due no later than 24 hours before your cargo is loaded on the vessel at the foreign port (19 CFR Part 149, eCFR, current as of October 2026). Miss the window and the container can be held from loading, which converts a paperwork problem into a five-week replenishment problem.

The good news: most of the ten elements come from your supplier, the mechanics are simple once you've seen them, and somebody almost always files for you. Here's exactly what the filing contains, who gives you each datum, when it's due, and where merchants actually get burned.

What ISF actually is

ISF is security data, not a tax document. Since 2009, US-bound ocean cargo requires an electronic security filing with Customs and Border Protection before the goods are loaded abroad, so CBP can risk-screen the shipment in advance. The regime lives in 19 CFR Part 149 (current as of October 29, 2026).

The "10+2" breaks down as ten importer-side data elements plus two carrier-side ones. The two — the vessel stow plan and container status messages — are filed by the ocean carrier under 19 CFR 4.7. You will never supply them and shouldn't worry about them; "10" is your whole job.

Two neighboring topics are covered elsewhere and worth one sentence each here: a bond is required for the filing — your agent's continuous bond may serve, which the customs bond guide explains — and the mechanics of choosing a professional filer are in the customs broker guide. This article owns the elements and the process.

The 10 elements, translated into operator terms

The regulation lists ten data points. Here they are with the practical question — who actually hands you this? — answered for a typical small-importer shipment:

One structural rule trips people up: the manufacturer, country of origin, and HTSUS number must be line-item linked — each product line on the filing carries its matching trio, so a two-SKU shipment made in two factories is genuinely two sets of manufacturer/origin/HTS data.

Look at the "who gives it to you" column and notice the pattern: roughly seven of the ten elements originate with your supplier or forwarder. ISF is less a paperwork skill than a supply-chain communication task. The filings that fail are the ones where the merchant assumed the factory address equals the seller address, or forwarded a stale origin and HTS pair to save an email.

The 24-hour clock, and why it lands on your supplier's discipline

Two deadlines, both from 19 CFR Part 149 (as of October 2026):

• Elements 1–8: no later than 24 hours before the cargo is laden aboard the vessel at the foreign port.
• Elements 9–10 (stuffing location, consolidator): as early as possible, and no later than 24 hours before arrival in a US port.

Read the first one carefully: the clock runs against loading at the foreign port, which is typically days after your container leaves the factory. A container stuffed at a factory five days inland, then trucked to port and held for the vessel, gives you a few days of margin — but only if the data existed before the container was stuffed. The filings that slip are the ones where the manufacturer's legal name and address, the per-line origin, or the 6-digit HTS weren't available when the factory called the trucker.

This is the unglamorous reason your PO records matter. A PO that captures the manufacturer's actual name and address, country of origin per line, and a verified HTS — the same fields you'd keep anyway for lead-time tracking and measuring real supplier performance — makes ISF a ten-minute copy-paste. A PO that just says "Supplier Co., China" makes it a Friday-afternoon scramble, and scrambles are how late filings happen. If your lead-time or PO records don't hold these fields, add them once and they're done.

Who actually files — and who's still responsible

The regulation defines the filer as the ISF Importer — the owner, purchaser, or consignee of the goods — or an authorized agent acting on their behalf (19 CFR Part 149, as of October 2026). In practice, first-time importers almost always have their freight forwarder or customs broker file as agent, supplying the ten elements. A bond is required for the filing; when an agent files under its own continuous bond, that can satisfy the requirement — how customs bonds work covers the options.

The part that surprises people: agency doesn't transfer responsibility. When your forwarder files, you are still the party accountable for the data's accuracy and timeliness, because the ISF Importer obligation sits with the owner/purchaser/consignee. A forwarder that transmits your wrong origin country has a typo problem; you have a violation. That's the strongest argument for treating the ten elements as your data, verified at the source, rather than the filer's problem.

When ISF is late or wrong

Two consequences, one official and one worse:

• Official: liquidated damages can be assessed up to $5,000 per violation, subject to CBP mitigation (J.M. Rodgers ISF page, updated February 27, 2026; mitigation amounts vary by circumstances — as of October 2026, don't plan around a specific reduced number).
• Practical: CBP can refuse to allow loading or hold the cargo until the filing is corrected. For a restock, that's the expensive one — the delay lands exactly on your replenishment date, and for a seasonal SKU it can land on the selling window.

Accuracy counts as much as timing. A filing on time but wrong — mismatched manufacturer data, an origin that doesn't match the goods — is its own violation category.

Pre-booking checklist: the ten-minute version

Before you confirm a booking on your first (or fifth) ocean shipment, get these into one place:

• Legal seller name and address (from the PO)
• Your buyer-of-record legal name and importer of record number (EIN or CBP-assigned)
• Consignee number(s) for the ship-to party
• Manufacturer's actual name and address, per product line — ask explicitly; don't assume it's the seller
• Country of origin, per line
• HTS classification, 6-digit minimum, per line — verified, not just copied from the proforma
• Container stuffing location (factory address, or the forwarder's CFS for consolidated cargo)
• Consolidator name, if LCL
• Named filer: forwarder or broker, confirmed in writing
• Bond in place — yours or the agent's
• The loading date on the calendar, with a 24-hour deadline marked before it

Email the supplier the data request when you place the PO, not when the forwarder asks. The full document sequence this checklist sits inside — proforma through delivery order — is laid out in the import documents checklist.

Common questions

What does "ISF 10+2" mean? Ten data elements from the importer side — seller, buyer, importer of record number, consignee number(s), manufacturer, ship-to party, country of origin, HTSUS number, container stuffing location, and consolidator — plus two carrier-filed elements (vessel stow plan and container status messages, 19 CFR 4.7). You supply the ten; the ocean carrier handles the two.

When must ISF be filed? Elements 1–8 no later than 24 hours before the cargo is laden aboard the vessel at the foreign port; stuffing location and consolidator as early as possible and no later than 24 hours before arrival in a US port (19 CFR Part 149, as of October 2026). In practice, the data must exist before the container leaves the factory.

Who files ISF — me or my forwarder? Either. The ISF Importer is the owner, purchaser, or consignee, or an authorized agent — most small importers have their forwarder or broker file. A bond is required, and the agent's continuous bond may serve. Even when an agent files, the importer of record remains responsible for accuracy and timeliness.

What's the penalty for late or inaccurate ISF? Liquidated damages up to $5,000 per violation, subject to CBP mitigation (J.M. Rodgers, updated Feb 27, 2026) — plus the practical penalty: cargo can be held from loading, which breaks your replenishment date. Corrections after the deadline don't undo the violation.

Why does ISF care who manufactured the goods? It's security screening: CBP traces the supply chain before goods reach a US port. The manufacturer, country of origin, and HTSUS number must be line-item linked on the filing, and the manufacturer is frequently a different entity from the seller you pay — which is why you have to ask for it explicitly.

Next step

Send the data request with your next PO — the manufacturer's legal name and address, per-line origin, and HTS are the three fields suppliers most often leave blank — and file the answers with the PO record so they're reusable. Then check the shipment's broader paperwork sequence against the import documents checklist so the ISF date, the bill of lading, and your entry filing land in the right order. Clean data lowers exam risk too — and when CBP does pull a container, customs exam fees explains what the hold costs.