Compliance frameworks, security audits, and quality certifications this company maintains.
Descartes maintains SOC 2 Type II attestation across its Global Logistics Network, TMS, and customs compliance cloud platforms, providing logistics service providers, importers, and carriers assurance that Descartes' security, availability, and confidentiality controls for processing sensitive trade and freight data are continuously effective.
Descartes holds ISO 27001 certification for its information security management system covering the development and operation of the Descartes Global Logistics Network, CustomsInfo, and MacroPoint platforms, demonstrating systematic security controls for protecting sensitive logistics and trade data processed on behalf of 85,000+ connected organisations.
Regulatory
US CBP ACE Certification
CertifiedDescartes CustomsInfo is a certified US Customs and Border Protection Automated Commercial Environment (ACE) filer, enabling direct electronic submission of import and export customs filings, ISF 10+2 importer security filings, and AES Electronic Export Information to CBP on behalf of importers and exporters.
Descartes complies with EU General Data Protection Regulation requirements across its European logistics network operations and CustomsInfo EU customs filing services, implementing data processing agreements, data residency controls, and privacy by design for the personal data of EU-based logistics professionals and trade contacts processed through Descartes GLN.
As a Canadian company headquartered in Waterloo, Ontario, Descartes complies with the Personal Information Protection and Electronic Documents Act governing the collection and processing of personal data from Canadian logistics service provider customers and employees across its cloud platforms and professional services operations.
Descartes is a Customs-Trade Partnership Against Terrorism (C-TPAT) technology partner, enabling US importers who use Descartes CustomsInfo to manage their C-TPAT supply chain security programme requirements, minimum security criteria documentation, and CBP status validation through the Descartes platform.
Regulatory
AEO Programme Support
CompliantDescartes CustomsInfo supports EU Authorised Economic Operator (AEO) programme compliance for European importers and exporters, providing automated customs filing, duty calculation, and trade data management capabilities aligned with AEO certification requirements across EU member state customs authorities.
Descartes' billing and payment processing systems comply with PCI DSS standards, protecting credit card and payment data from logistics service provider customers subscribing to Descartes GLN, TMS, and CustomsInfo cloud platforms across North America and Europe.
Descartes holds ISO 9001:2015 quality management system certification covering its software development and professional services delivery processes, ensuring consistent quality standards for Descartes TMS and Route Planner implementations delivered by its global professional services team.
Environmental
Net Zero Commitment
In ProgressDescartes has committed to reducing its corporate carbon footprint through data centre energy efficiency improvements, remote work policies reducing employee commute emissions, and procurement of renewable energy for its Canadian and US cloud infrastructure, aligning with Waterloo Region's broader sustainability goals.