IMMEX & CIVA: What our Clients Monitor to Stay Audit-Ready

On September 17th, 2026 Prodensa led a working session on a single questions:

What should we monitor to be audit-ready for IMMEX and CIVA (VAT Certification) compliance in Mexico?

Gloria Domínguez, our Foreign Trade Consulting Project Manager, led the session. Here are the top five points we covered, and what your team can do with them this week.

What keeps the IMMEX and CIVA certification in compliance?

Read the Reglas Generales de Comercio Exterior (RGCE) 2026 as an operating checklist rather than a legal text, and the shape of the obligation becomes clear. To hold the Registro en el Esquema de Certificación de Empresas you must be current on your fiscal and customs obligations and have authorized the Servicio de Administración Tributaria (SAT) to publish your positive compliance opinion. Every address where you carry out program activities must be registered with SAT. Your digital seals must be valid, and you must not have fallen under Article 17-H Bis of the Código Fiscal de la Federación (CFF) at any point in the last twelve months. And you must stay off the taxpayer lists published under Articles 69, 69-B Bis of the CFE.

Rule 7.1.2 extends the same test to the companies around you. Your suppliers must not appear on the SAT lists published under Article 49 Bis, fraction X of the fourth paragraph of Article 69-B. Your foreign customers and suppliers must be linked to the customs regime that you are certified under, and both lists must be current with the corresponding notices filed on time. 

Prodensa tip: all of this is verifiable, today.

SAT maintains relevant information about the fiscal situation of taxpayers, which can change over time. Periodic monitoring can identify possible compliance risks.

Where is the risk most concentrated?

Prodensa's working session highlighted five areas:

• Returns: under Rule 7.1.2, Apartado A, goods imported temporarily under your IMMEX program must be returned over the trailing twelve months at the levels the rule sets, at 60% and 80% depending on the case. This is a monthly calculation.
• Sensitive merchandise: Rule 7.2.4, Apartado A, fraction VIII makes it a cause for loss of the program to import goods listed in Annex II of the IMMEX Decree without the corresponding authorization, or to import goods from that Annex that do not correspond to your productive process or your program modality.
• Virtual operations and suppliers: national supplier lists have to be current, virtual transfers have to be flagged as such, and the notices have to be filed on time.
• Annex 30 and the descargo reports: Rule 7.2.1, second paragraph, fraction IV requires bimonthly or monthly transmission. Rule 7.2.2, fraction II makes failure to transmit the initial inventory report, or those descargo reports, its own consequence.
• Unreturned goods: Rule 7.2.4, Apartado B, fraction VII: failing to return temporarily imported goods on the terms of Rule 7.1.2 is a cause in its own right.

These five points require a continual monthly monitoring, not annually, for their associated risk of possible cancelation.

What do we often find when we look?

These are the findings our team raises most often in preventive reviews:

• Incoterms declared inconsistently with the incrementables declared
• Link keys and valuation methods declared differently from one operation to the next with the same supplier
• Identical merchandise descriptions carrying different tariffs fractions and NICO codes
• Foreign customers and suppliers whose tax IDs appear under different names or different addresses
• Tariff fractions used in the productive process that are not authorized for it
• Manifestation of value missing, or the folio absent 

What's the best way to get ahead of an audit?

Preventive controls are crucial, and its important to understand your own limitations before choosing a tool. Most programs we review are running on spreadsheets that outgrew their purpose two years ago. 

Audit-preparation typically starts with changing spreadsheets for a proper database, to specialized foreign trade software, and increasingly to artificial intelligence applied to consistently checking across pedimentos. There is no one single right answer. There is only the honest question of what your team can maintain. 

Communication is the second most important way to get ahead of an audit, especially with your customs broker. The broker executes; someone inside your program has to define the fraction, NICO, incoterm and valuation logic that execute against, and then verify the result. 

Prodensa tip: a sophisticated system nobody updates is worse than a simple on somebody owns.

Where we see clean programs, we usually find a defined set of controls agreed with the broker and a person named against each one. Where we see findings, we usually find a role rather than a person.

Five things to implement today:

Any program can start with these five things:

1. Reconcile Annex 24 against Annex 30 for the last 24 months and quantify the gap before anyone else does
2. Stand up the monthly return calculation and confirm you meet the applicable minimum thresholds in Rule 7.1.2
3. Validate your RFC status, your digital seals, your presence on the published taxpayer lists, and every registered address against the monthly SNICE publications
4. Refresh your foreign customer and supplier lists with tax IDs and fiscal addresses, and file the outstanding notices
5. Verify your authorized Annex II fractions against what is actually being imported, and put the descargo transmission calendar on a named person

Observations, suspensions and cancellations rarely arrive without warning. They arrive after a period where the warnings existed and nobody was reading them.

Should a Big Four firm or a specialist operator monitor your IMMEX compliance?

The two organizations are not competing for the same work. A Big Four firm owns the positions you defend on paper. A specialist operator like Prodensa owns the program that produces the data those positions rely on. 

The transfer pricing study, the Safe Harbor position, the statutory audit and tax controversy at the litigation stage is where the Big Four firms are typically specialized.

Many mature firms utilize both a Big Four firm and a localized special operator like Prodensa. For example, Prodensa is accustomed to working with Big 4 firms with different hand-offs: 

• the Safe Harbor calculation which depends on operating data the tax firm does not produce
• the Transfer Pricing file which has to agree with the customs values you actually declared

Want the same review for your program?

If you are running an IMMEX program and you do not feel confident about your full compliance, it's worth a call to our Advisors to see how Prodensa can help.

Book an Advisory Session with our Team

We'll walk you through what you need to monitor.

Notice: The content of this blog is developed by Prodensa for informational and educational purposes regarding nearshoring, foreign trade, human capital, and manufacturing in Mexico. Although we strive to keep the information accurate and up to date, laws and regulations may change. This material is not a substitute for specialized professional advice. Prodensa is not responsible for decisions made based on this content without appropriate professional consultation.