Account Health

CPSC eFiling for Amazon Sellers: 2026 Compliance Guide

Since July 8, 2026, every regulated consumer product entering the US needs its certificate data filed electronically at entry. Customs is not rejecting entries yet, but the data now sits in a risk score, and Amazon checks the same certificates from the other side. Here is who files, what goes in, and how private-label sellers keep one clean chain from factory to listing.

DGDavid Gallo··17 min read·Last updated October 27, 2026
CPSC eFiling for Amazon sellers in 2026: certificate data flowing from a Children's Product Certificate or General Certificate of Conformity through the CPSC Product Registry and CBP's ACE system to an Amazon listing
TL;DR

CPSC eFiling requires the importer of record to file certificate data (CPC or GCC) electronically in CBP's ACE system at entry for regulated consumer products, mandatory since July 8, 2026, with no low-value exemption. For most FBA sellers that importer is you, not Amazon or your factory. File through your broker or the CPSC Product Registry, keep one importer name across certificate, registry and entry, and keep the same documents ready for Amazon; SellerForge, our product, stores them.

CPSC eFiling is the rule that, since July 8, 2026, requires the importer of a regulated consumer product to file its certificate data electronically with US Customs at entry. For most FBA private-label sellers, that importer is you. Not Amazon, not your factory, and not your freight forwarder, unless one of them is formally the importer of record.

Customs is not rejecting entries over missing data yet, so plenty of sellers have decided the rule can wait. I think that is the wrong read. The data now feeds a risk score at the border, and Amazon checks the same certificates from the other side, on its own schedule. I run SellerForge (our product, disclosed); it stores these documents but does not file anything with customs, and I will be clear below about who does.

This guide covers who must file, the seven data elements, broker versus Product Registry filing, what has changed since July, and how Amazon's own checks line up with the federal rule.

CPSC eFiling for Amazon sellers: certificate data moving from the CPC or GCC through the CPSC Product Registry and CBP ACE to an Amazon listing

What Is CPSC eFiling?

CPSC eFiling is the electronic submission of certificate of compliance data to US Customs and Border Protection at the time of entry, for imported consumer products subject to a Consumer Product Safety Commission rule, ban or standard. The data comes from your Children's Product Certificate (CPC) or General Certificate of Conformity (GCC). It became mandatory on July 8, 2026.

The rule did not invent new testing. Children's products always needed third-party testing and a CPC, and regulated general-use products always needed a GCC. What changed is where the certificate lives. Before July 8, importers had to be able to produce it on request; now its data must travel with the entry. The CPSC finalized the change in its updated certificate rule (16 CFR part 1110), approved on December 18, 2024 and published January 8, 2025, as summarized in Foley & Lardner's eFiling briefing. Imports through Foreign Trade Zones follow on January 8, 2027.

Why the CPSC cares: its own 2017 to 2018 certificate study found an entry was five times more likely to have a violation when no certificate was ever provided, and about three times more likely when the certificate arrived more than 24 hours late. eFiling moves the certificate from an afterthought to a screening input.

Who Is Responsible for CPSC eFiling on Amazon?

The importer is responsible for CPSC eFiling, and for most Amazon FBA private-label sellers the importer of record is the seller. Amazon does not act as importer of record for your inbound inventory, and your factory's test report does not file itself. A customs broker usually transmits the data, but the broker files what the importer supplies.

The CPSC's rulemaking defines importer broadly: the importer of record, a consignee, or a party with a financial interest that effectively caused the import, per the Federal Register certificate rule. That breadth is deliberate. It closes the gap where every party in a cross-border chain assumed someone else owned compliance.

Three common setups decide who that is in practice:

  • You are the importer of record on your own bond. This is the cleanest setup. You own the certificates, you control the Product Registry account, and your broker files on your behalf.
  • Your forwarder ships DDP on its own bond. The forwarder or its client entity is the importer of record, so the certificate data must name and match that entity. Ask in writing whose name appears on the entry, and get a copy of what was filed.
  • Your supplier ships direct to an FBA warehouse. Someone is still the importer of record on that entry. If neither you nor the supplier can name them, you have found the problem before customs does.
The DDP setup is where the first months have hurt. Chinese trade press reported in July that some consolidating forwarders stopped accepting children's products because shared bonds made the importer named on the certificate, the filing account and the entry stop matching, and that the forwarders still taking such cargo now ask sellers to bring their own importer of record and bond. Treat those reports as anecdotal, but plan for the direction.

What Data Does CPSC eFiling Require?

CPSC eFiling requires seven certificate data elements for each regulated product: a product identifier, every cited safety rule, the date of manufacture, the place of manufacture, the date of the most recent compliance test, the testing laboratory, and the point of contact who keeps the test records. Each certificate covers exactly one product version.

Data elementWhat to enterWhere sellers trip up
Product identifierGTIN, UPC, model number, SKU, serial or registered number (at least one)Using an internal SKU on the certificate and a different identifier on the listing
Cited safety rulesEvery CPSC rule the product is certified to (for example the toy standard, lead and phthalate limits)Citing only the headline standard and missing lead-in-paint or phthalate rules
Date of manufactureAt least month and year of the production runReusing one certificate across production runs months apart
Place of manufactureFactory name, full address and contactNaming the trading company instead of the factory
Date of last testWhen the product was most recently testedTest dates older than the materials or factory now in use
Testing laboratoryLab name, address and contact; CPSC-accepted labs use a four-digit IDChildren's products tested at a lab that is not CPSC-accepted
Records contactName, address and contact of whoever keeps the test recordsA contact who no longer works there or does not respond
A product is a separate certificate whenever its design, materials, component sources, manufacturing process or factory differ. That one rule catches most private-label catalogs: three colorways made from different dye lots at two factories can mean several certificates, not one. The CPSC's own General Certificate of Conformity guidance walks the certificate contents for non-children's products.

Product Registry or Broker Filing: Which Should You Use?

Sellers who import the same products repeatedly should use the CPSC Product Registry: enter each certificate once, then your broker cites it by reference on every entry. Sellers with a handful of SKUs or one-off shipments can have the broker send the full data set with each entry. Both routes end in CBP's ACE system.

Full message set (broker sends everything)Reference message set (Product Registry)
How it worksAll seven data elements sent with every entryCertificate stored once; entry cites certifier ID, product ID and version
Best forA few SKUs, irregular shipmentsRepeat imports, larger catalogs, multiple brokers
Who controls the dataMostly your broker's templatesYou, in your own registry account
Error riskRetyped every time; drift between entriesOne source of truth; versioned when the product changes
Setup effortLow upfront, ongoing per entryAccount, permissions and upload (web form, CSV or API)

Two practical notes. First, permissions must be set in both the Product Registry and ACE, or your broker cannot see what you uploaded. Second, the registry versions certificates, so a new production run or material change should become a new version, not an edit that silently overwrites last quarter's data.

Before launch, the CPSC's voluntary stage could take up to 2,000 importers, yet only about 500 business accounts had been created, per Covington's tracking. If you have not set up a registry account yet, you are not late relative to the field. You are late relative to the rule.

What Has Changed Since July 8, 2026?

Three things changed after July 8. Customs confirmed it will accept entries with missing CPSC data rather than reject them, the CPSC refreshed its list of roughly 600 flagged tariff codes with required and may-be-needed flags, and international mail shipments began folding into the same eFiling process from October 22, 2026.

The acceptance point is the one sellers misread. CBP's CSMS bulletin 69382435 of July 29, 2026 says ACE can accept entries with no CPSC message set or with missing data, and that CBP will not generate a reject. The same bulletin says the CPSC may still take enforcement action on any entry that lacks required eFiling data. Accepted is not cleared. Missing data shifts the shipment toward review, holds and exams.
The tariff-code list matters for planning. In early October 2026 the CPSC reissued its list of about 600 HTS codes, now flagged CP2 (certificate data required) or CP1 (may be needed, depending on the product), per Eurofins' summary of the update. The list is a screening tool, not a safe harbor: if a CPSC rule covers your product, you must file even when its code is not flagged. If a CP1 product is truly not regulated, the importer files a disclaim instead.
  • Disclaim A covers products outside CPSC certificate requirements, such as items under another agency's jurisdiction or component parts.
  • Disclaim B covers products under formal enforcement discretion, such as certain plain-surface adult apparel fabrics and consumer-to-consumer gifts.
  • Neither disclaim covers a regulated product whose certificate you simply do not have.

Penalties stay serious even while entry rejection is off the table. Civil penalties for Consumer Product Safety Act violations reach $120,000 per violation and $17.15 million for a related series after inflation adjustment, figures cited in an August 2026 Senate bill summary that proposes removing the cap altogether.

What Does Amazon Check, and How Does It Connect to eFiling?

Amazon checks the same certificates from the listing side. For products designed for children 12 and under, it requires a Children's Product Certificate plus test reports from a CPSC-accepted laboratory, and it can request them for any ASIN at any time. Missing documents usually surface as a listing removal and a request under Account Health, not as a customs problem.

Amazon's checks run on separate rails from customs, which is exactly why one clean document chain matters:

  • Document requests. Amazon asks for the CPC and test reports through Account Health (Product Compliance Requests), and compliance consultants report it rejects certificates with any required section missing. Their guidance is to put the ASIN on the CPC as the product identifier.
  • Direct verification for some categories. Toys (since September 2025), clothing storage units (since March 2026) and children's jewelry (from September 2026) go through Amazon-approved testing providers who send results to Amazon directly.
  • Lab standards. Amazon accepts compliance reports only from labs that meet its requirements and keeps a list of suspended labs, so a cheap test from the wrong lab fails twice: at Amazon and as a CPC citation.
The overlap is the opportunity. The CPC that clears customs, the certificate in your Product Registry account and the document Amazon asks for should be the same file, with the same identifiers, dates and lab. When they are not, you are one inconsistency away from both a customs exam and a listing removal. Compliance removals can feed the policy side of your Account Health Rating; our Account Health Rating defense guide covers how those violations are weighed.

The cheapest compliance work is done once, before the shipment leaves the factory. Every fix after that happens under a deadline, either at the port or in Seller Central.

The Three-Name Match: How to Keep One Clean Chain

The Three-Name Match is a simple rule: the importer named on the certificate, the account that holds it in the CPSC Product Registry, and the importer of record on the customs entry must be the same legal entity, and the product identifier must match the ASIN listing. When all three names agree, eFiling, broker filing and Amazon document requests all draw from one file.

Most of the early friction traces to a mismatch in one of those three places. Run this before every first shipment of a new product, and again whenever a factory, material or forwarder changes:

  1. 1Map every SKU to its tariff code and check it against the CPSC's CP1 and CP2 list; decide for each one whether a CPC, a GCC or a disclaim applies.
  2. 2Confirm who is importer of record for each shipping lane, in writing from your forwarder, and fix any lane where the answer is not you or your own entity.
  3. 3Issue one certificate per product version, naming that importer, the real factory, the production month, every cited rule and a CPSC-accepted lab for children's products.
  4. 4Put the ASIN and the barcode on the certificate so the same file serves customs and Amazon.
  5. 5Load the certificate into your Product Registry account and grant your broker access, or send the broker the full data set if you file per entry.
  6. 6Ask the broker for the filing confirmation on the first entry and compare it field by field with the certificate.
  7. 7File the certificate, test reports and filing confirmation together where you can find them in minutes, because Amazon's request will not wait for you to email the factory.

Across the 57 accounts I managed at Worldfront, the compliance cases that cost the most were never the ones with failed tests. They were the ones where the test was fine and nobody could produce the right version of the document in time. A children's product that sat suppressed for three weeks over a certificate showing the wrong factory lost more money than a retest would have cost.

Where SellerForge Fits (and Where It Doesn't)

SellerForge, our product, is AI-native account intelligence for Amazon sellers and agencies, from $49/mo. It does not file anything with customs or the CPSC, is not a customs broker and does not test products. Where it helps is the Amazon half of the chain. The Document Vault stores compliance certificates, test reports and customs paperwork in organized, searchable categories (1 GB on Core at $49, 10 GB on Growth at $99), and it links directly to the POA Builder submission workflow, so a compliance removal can be answered with the right file the same day.
When an appeal or a compliance case stalls, Escalation Plans generates a step-by-step escalation roadmap with ready-to-copy messages, and the POA Builder drafts the three-section Plan of Action Amazon expects; both are on every plan from Core. If a removal escalates further, our Plan of Action templates show the structure reviewers accept.

Where it does not fit, plainly: your customs broker and the CPSC Product Registry are where eFiling happens, and an accredited lab is where testing happens. For complex classification questions or a CPSC enforcement letter, a trade-compliance attorney or consultant is the right call, not software. SellerForge keeps the Amazon side ready; it does not make an untested product compliant.

If you are comparing tools for the wider job of keeping an account healthy, our roundup of the best Amazon account health software covers who wins at what, including where human services beat software.

CPSC eFiling Checklist for Amazon Sellers

Use this short checklist to get compliant for the next shipment. It assumes you sell at least one product covered by a CPSC rule; if every product you sell falls outside CPSC jurisdiction, your broker still needs the right disclaim on flagged codes.

  • Every regulated SKU has a current CPC or GCC naming your importer entity and the real factory.
  • Children's products cite a CPSC-accepted lab and every applicable rule, not just the headline standard.
  • Your forwarder has confirmed in writing who is importer of record on each lane.
  • Your Product Registry account exists, holds current certificate versions and grants your broker access.
  • The ASIN and barcode on each certificate match the live listing.
  • Certificates, test reports and filing confirmations are stored together and reachable in minutes.
  • Anyone shipping samples or small replenishments by international mail knows those parcels are in scope from October 22, 2026.
If customs paperwork is new territory, our tariff refund guide for Amazon sellers explains how importer-of-record status, brokers and ACE fit together, the same plumbing eFiling runs on. And if a compliance removal has already escalated to the account level, start with our account deactivation guide.
Want your compliance documents ready before Amazon asks? Start with SellerForge, load your certificates and test reports into the Document Vault, and keep the POA Builder one click away. Plans start at $49/mo.

About the author

David Gallo is the founder of SellerForge.ai. Before building SellerForge, he managed 57 Amazon seller accounts representing more than $350M in sales at Worldfront, where the compliance cases that hurt most were not failed tests but missing or mismatched documents.

Frequently Asked Questions

CPSC eFiling is the requirement to transmit certificate of compliance data electronically to US Customs at the time of entry for imported consumer products covered by a CPSC rule. The data comes from your Children's Product Certificate or General Certificate of Conformity and is filed in CBP's ACE system, either in full with each entry or by reference to a certificate stored in the CPSC Product Registry. It became mandatory on July 8, 2026.
The importer is responsible, and for most FBA private-label sellers the importer of record is the seller, not Amazon or the factory. The rule defines importer broadly enough to include the importer of record and parties with a financial interest that caused the import. A customs broker usually transmits the data, but the broker files what you give it, so the certificate content and its accuracy remain your obligation.
CPSC eFiling became mandatory on July 8, 2026, for most imported consumer products that require a certificate. Products imported through a Foreign Trade Zone follow on January 8, 2027. Industry guidance also points to October 22, 2026 as the date international mail shipments fold into the same process, which matters for sellers who ship samples or small replenishments by post.
Seven data elements are required: a product identifier (such as GTIN, UPC, model or SKU), every safety rule the product is certified to, the date of manufacture, the place of manufacture, the date of the most recent compliance testing, the testing laboratory, and a point of contact who keeps the test records. Each certificate covers one product, so different materials, factories or designs need separate certificates.
Yes. CPSC eFiling applies regardless of shipment size or value, so there is no low-value exemption for regulated products. A single carton of children's products needs certificate data just like a full container. The US de minimis exemption ended for all countries in August 2025, so small-parcel imports already go through formal entry, and the certificate data now rides on the same entry.
Right now, customs will usually still accept the entry. CBP's July 29, 2026 bulletin says ACE accepts entries with missing CPSC data without an automatic reject. That is not a pass: CPSC can still review, hold, examine or refuse the goods, and its own study found entries without certificates were five times more likely to be violative. Civil penalties for CPSA violations reach $120,000 per violation.
Yes. Amazon requires a Children's Product Certificate and test reports from a CPSC-accepted laboratory for products designed for children 12 and under, and it can request them for any ASIN at any time. Missing or incomplete documents can lead to listing removal. Toys, clothing storage units and, from September 2026, children's jewelry also go through Amazon's own verification with approved testing providers.
Use the Product Registry if you import the same products repeatedly. You enter each certificate once and your broker cites it by reference on every entry, which cuts typing errors and keeps certificate control with you. A full message set filed by your broker suits sellers with a few SKUs or one-off shipments, but it means sending all seven data elements again for every entry.
DG
David Gallo·Founder, SellerForge

Amazon seller with 12+ years managing private label brands across 57 accounts and $350M+ in sales managed.

Share this article

Get Amazon seller insights in your inbox

Practical strategies, SP-API updates, and AI tooling tips — no fluff.

No spam, ever. Unsubscribe anytime.

How exposed is your account?

The free SellerForge audit checks your account-health risks, unclaimed reimbursements, ad waste and listing scores — read-only, no credit card required.

Or start a 7-day free trial — no credit card required