Trust and compliance
Trust and compliance for Mexican merch
A single index of the regulatory frameworks, certifications, and contractual paperwork that an in-house legal, compliance, or procurement group reviews before approving a corporate merchandise supplier in Mexico: LFPDPPP privacy notice, master agreements with penalty clauses, a reciprocal NDA, CFDI 4.0 invoicing with Carta Porte 3.0 when shipments cross a border, an ISO 9001 production process, and the IMMEX and USMCA/T-MEC paperwork for maquila work or re-export.
Why this index exists
When a company with operations in Mexico buys corporate merchandise for the first time, the purchase order normally passes through four filters before payment is released. The compliance team reviews the privacy notice; the legal team asks for master agreements, the NDA, and penalty clauses; finance requests the supplier's tax paperwork — SAT registration, RFC, a positive 32D opinion, CFDI 4.0 stamped by an authorized certification provider, and Carta Porte 3.0 if the shipment crosses a border; and procurement validates the operational capacity where the IMMEX registry matters for maquila, USMCA/T-MEC origin rules matter if the chain crosses into the U.S. or Canada, and an ISO 9001 certification matters when the corporate client works with auditable quality manuals.
Corp-Merch.MX is a supplier established in Mexico City with operational coverage across Monterrey, Guadalajara, Queretaro, Tijuana, and Puebla. We work with financial services, pharmaceuticals, automotive, consumer goods, retail, technology, and with public-sector bodies that handle federal and state procurement. Each client has a different compliance organization, so instead of sending a generic pack by email, we keep this public index so each team can review the documents that matter to them. Once your team wants the formal document — a signed Word file, a letterhead PDF, a plain CFDI copy, the original NDA, or the master agreement with your letterhead on our counter-signature — you request it through the contact section and we deliver it within five business days.
Compliance documents and frameworks
Eighteen cards; each one opens the framework summary, the deliverables we sign, and the response timelines we commit to.
Privacy notice — LFPDPPP
Full text under the Federal Law on Protection of Personal Data Held by Private Parties. Primary and secondary purposes, transfers, and ARCO rights.
ARCO rights
Access, rectification, cancellation, and opposition. Procedure, 20 business-day response deadline, identification requirements, and a ready-to-use template.
CFDI 4.0 — electronic invoicing
Stamped by an authorized certification provider. Carta Porte 3.0, payment, and foreign-trade complements. Required tax data and common mistakes.
Carta Porte 3.0
Bill of lading for road, air, and maritime transport. Operator, carrier, unit, trailer, and origin and arrival location data.
Advanced e-signature and 32D opinion
Confirmation of the SAT advanced electronic signature and a positive opinion of tax-compliance status to file with your accounts-payable team.
IMMEX program
Importer registry, IMMEX authorization, and rules for return of goods, losses, and waste. Application to temporary import operations.
USMCA / T-MEC — origin rules
Certificate of origin, product-specific rules, regional content value, and qualifying criteria for merchandise crossing the border into the U.S. or Canada.
ISO 9001 — quality management
Certified production process, quality control, non-conformities, corrective actions, and documented internal and external audits.
Quality policy
Customer commitment, satisfaction, process-based approach, and continuous improvement. Quality manual summary and quarterly quality committee.
Master agreements and purchase orders
Master agreement with penalty clauses, performance guarantee, terms, payment conditions, and the procedure for issuing purchase orders.
NDA — reciprocal confidentiality
Bilateral confidentiality agreement. Confidential information, exceptions, term, termination, jurisdiction, and concurrent signatures for two legal representatives.
Penalty and performance clauses
Penalty for breach of delivery, quality, confidentiality, or schedule. Performance bond, advance-payment guarantee, and cargo insurance.
Supplier code of ethics
Expected conduct of our staff on the production floor, during delivery, and when interacting with your team. Anonymous reporting channel and quarterly ethics committee.
Anti-corruption and anti-bribery policy
Aligned with the General Law on Administrative Liabilities and, for cross-border work, with the principles of the U.S. Foreign Corrupt Practices Act. Gifts policy and annual cap.
Third-party and SBC audits
Social audits, environmental audits, safety and quality audits. Sedex, Ecovadis, Buy&Give, and audit providers recognized by the corporate client.
Cargo and liability insurance
Active cargo, professional liability, errors and omissions, environmental damage, and third-party damage policies. Insured value per shipment.
Traceable supply chain
Traceability of raw materials, production batches, screen-printing and embroidery batches, and origin point of each critical input.
Cookies policy and technical data
First-party, session, and analytics cookies. Technical data collected on this site, retention, and visitor rights under LFPDPPP.
Applicable regulatory framework in Mexico
We operate under the Mexican regulatory framework currently in force. The privacy notice is drafted under the Federal Law on Protection of Personal Data Held by Private Parties, its Regulation, and the INAI Guidelines. Electronic invoicing is issued under the CFDI 4.0 scheme of the Tax Administration Service, with Carta Porte 3.0 when there is a physical transfer of goods, the payment complement for partial payments, and the foreign-trade complement for export or import activity. When an operation runs under maquila or temporary manufacturing, we observe the IMMEX Program Guidelines issued by the Ministry of Economy, together with the SAT customs regulation for return of goods, losses, and waste.
When the supply chain crosses into the United States or Canada, the origin rule is assessed under the United States-Mexico-Canada Agreement (USMCA / T-MEC) and the certificate of origin signed by the producer or the exporter. Tariff classification follows the Tariff of the General Import and Export Duties; tariff fractions for corporate merch typically fall under chapters 39, 42, 49, 50, 61, 62, and 71. Production process quality is maintained under ISO 9001 with quarterly internal audits and annual external audits by an EMA-accredited certification body.
The contractual framework rests on the Code of Commerce, the Federal Civil Code, and, for work with public-sector bodies, the Law on Acquisitions, Leases, and Services of the Public Sector. Penalty clauses are calculated under article 1840 of the Federal Civil Code and adjusted annually for inflation as published by Banco de Mexico. Jurisdiction is Mexico City unless otherwise agreed, and master agreements carry a twelve-month term with automatic renewal for equal periods unless either party notifies otherwise with sixty days' notice.
How we work with your team day to day
After the master agreement is signed and the NDA is stamped, every new engagement is issued through a purchase order or a commitment letter with a consecutive number. Client onboarding completes within three business days and requires the name, RFC, fiscal address, delivery address, accounts-payable contact, and the person authorized to sign off on the merchandise. The purchase order is confirmed with the authorized signature and the agreed advance — typically 50% advance and 50% on delivery, with payment options of 15, 30, or 45 days for clients with an active line. Production schedules require a five-business-day minimum for in-house work and a fifteen-business-day minimum when inputs are temporarily imported.
CFDI 4.0 is stamped against a delivery receipt from SAT, against a remittance note signed by your warehouse, or against the sign-off of the receiving officer. When there is physical transfer of goods, we stamp Carta Porte 3.0 with the carrier, unit, and operator data. The supply chain is documented with the production order, the supplier purchase order, the input receipt date, the production date, the quality control date, and the delivery date. Any non-conformity is reported within 48 business hours with a documented corrective action and, where applicable, replacement at no cost.
For public-sector clients we additionally deliver the complementary documentation the Law on Acquisitions requires: a no-conflict-of-interest affidavit, a positive tax-compliance opinion 32D, a positive opinion on social security, a positive opinion on INFONAVIT obligations, a non-debarment affidavit, and an integrity declaration. These documents are delivered with every formal bid process or with the annual renewal of the master agreement.
Frequently asked questions — trust and compliance
Do you comply with the Federal Law on Protection of Personal Data?
Yes. We operate under LFPDPPP, its Regulation, and the INAI Guidelines. We maintain a public privacy notice on this site, the mechanisms for ARCO rights requests, and confidentiality clauses with every supplier with access to personal data.
Can you issue CFDI 4.0 with the Carta Porte 3.0 complement?
Yes. We stamp CFDI 4.0 through an authorized certification provider and, when there is a physical transfer of goods, we add the Carta Porte 3.0 complement with the carrier, unit, trailer, and origin and arrival location data.
Are you ISO 9001 certified?
Yes. The production process runs under a quality management system certified to ISO 9001 by an EMA-accredited certification body. The external audit is performed annually and internal audits quarterly. A current certificate copy is delivered with every formal bid.
Do you sign a confidentiality agreement?
Yes. We sign a reciprocal NDA with two legal representatives, one from your company and one from Corp-Merch.MX. The typical term is five years from the last commercial interaction. The NDA template is tailored to the specific scope of the project.
Do you hold an IMMEX authorization?
Yes. We hold an IMMEX Program authorization issued by the Ministry of Economy. The authorization applies to temporary import operations for manufacturing, transformation, repair, or maquila processes. The IMMEX program number is included in each CFDI 4.0 when a temporary operation applies.
Request the full documentation
If your team needs any of these documents as a letterhead PDF, a signed Word file, or a plain CFDI copy, get in touch. We deliver a formal bid with VAT broken out and, if the shipment crosses a border, Carta Porte 3.0 stamped by an authorized certification provider. For public-sector clients we additionally deliver the complementary documentation the Law on Acquisitions requires.
Corp-Merch.MX is an independent corporate merch provider established in Mexico. We are not a representative, authorized distributor, or commercial partner of any brand or public body named on this site. The regulatory frameworks listed here belong to the Mexican regulatory domain and are interpreted under current local legislation. The information published does not constitute legal, tax, or compliance advice; each company is responsible for validating the applicability of the frameworks to its operation.