Business case and benefits
- Customs director
- A · Accountable
- Operations manager
- R · Responsible
- Solutions architect
- C · Consulted
- Technical PM
- C · Consulted
- Engineers
- I · Informed
- Customs compliance
- C · Consulted
- Security
- I · Informed
Every commercial invoice, packing list, bill of lading and certificate of origin read and cross-checked before the goods arrive, with declarations drafted and commodity codes suggested. A customs specialist confirms every code and submits every declaration.
At a glance
An illustrative scenario. The numbers are typical examples, not a client case study. The cloud services and UK rules were checked on 9 November 2026.
Every consignment brings a bundle of documents: a commercial invoice, a packing list, a bill of lading or air waybill, often a certificate of origin or a supplier's statement on origin, and for food, plants and animal products, health certificates. They come from hundreds of shippers, in their own layouts and languages, as PDFs, scans and photos attached to emails. A customs specialist reads them all, works out what the goods are, finds the right commodity code, and keys the declaration into the customs software that submits to HMRC's Customs Declaration Service (CDS).
Most of that time goes on reading and re-keying, not on judgement. Problems are found late. The invoice says 400 cartons and the packing list says 380. The gross weight on the bill of lading doesn't match. The Incoterm means freight and insurance must be added to reach the customs value, and nobody has the figure. A description like "parts" can't be classified at all. Each of these becomes a chase to the shipper, often when the goods are already at the port.
Mistakes are expensive, and the forwarder can carry them. If it acts as an indirect representative, it is jointly and severally liable with the importer for the duty and import VAT. A wrong commodity code can mean underpaid duty, a missed licence or SPS check, or goods held at the border. From January 2027, the commodity code also decides whether goods fall under the UK carbon border adjustment mechanism (CBAM).
Agree these, and measure the baseline, before anything is built. Example targets are typical, not promises.
From the last document arriving to a draft the specialist can submit.
ExampleFrom hours to under 30 minutes
Share of document mismatches raised with the shipper before the goods reach the border.
ExampleMost of them, measured against today
How often specialists accept the top suggested commodity code. Very low means it isn't helping; near 100% can mean people have stopped checking.
ExampleStable, and reviewed weekly
Declarations that later need amending or a voluntary disclosure.
ExampleFalling, measured against last year
Consignments held because of missing or inconsistent documents.
ExampleDown by half
Time moved from re-keying to checking and judgement.
ExampleDown by half
Cross-sector rules are on the UK regulation map.
CDS is now the only route for UK customs declarations; the legacy CHIEF system has closed. The declaration stays the forwarder's legal act. As an indirect representative, the forwarder shares liability for duty and import VAT, so the AI drafts and a named specialist submits through the existing customs software. The AI never talks to CDS directly.
The AI suggests commodity codes from the current tariff and the forwarder's own confirmed history, and shows its reasoning. The specialist confirms. For high-value or disputed products, the design prompts the client to apply for an Advance Tariff Ruling (or a Binding Tariff Information decision for Northern Ireland), generally valid for three years, and records the ruling against the product.
Animal products, plants and some food need pre-notification in IPAFFS and health certificates, with checks based on risk category. The AI flags lines whose commodity codes suggest SPS controls and checks a certificate is present. It never decides a risk category, and the rules are held as configuration, because they are changing.
Goods moved from Great Britain to Northern Ireland may move under the UK Internal Market Scheme if they are not at risk of entering the EU. The AI flags NI-bound consignments and the information the route needs. Whether goods qualify as not at risk is the specialist's decision, with evidence kept.
CBAM applies to imports of specified aluminium, cement, fertiliser, hydrogen, and iron and steel goods, identified by commodity code. The importer is liable, with a £50,000 registration threshold. The AI flags CBAM lines and the embedded-emissions data the client will need from its supplier.
The voluntary standard, published with BSI, sets expectations for intermediaries, and HMRC has consulted on making registration mandatory. A logged, reviewable process for every declaration, with named people making each decision, is the kind of evidence it asks for.
Shipping documents carry names, addresses and contact details, plus clients' commercially sensitive prices. That means a light DPIA, collecting only what's needed, a clear retention period aligned with customs record-keeping, UK processing where possible, and a contract that stops providers training their models on your data.
Showing AWSAzuresovereign / on-prem services. Switch with the toggle; every diagram and table on this page follows it.
01Channels
02Intake
03Intelligence
04Orchestration
05Systems of record
06People
| Layer | AWS | Azure | Sovereign / on-prem |
|---|---|---|---|
| Intake: email, portals, filesOne consignment reference on every document, from the moment it arrives. | Amazon SES, API Gateway, S3 | Logic Apps connectors, API Management, Blob Storage | Your mail server, Kong, Ceph or IONOS S3 Object Storage |
| Reading trade documentsTest on real scans: stamped certificates, multi-page invoices in other languages, handwritten packing lists. | Amazon Textract, Bedrock Data Automation | Azure Content Understanding (includes Document Intelligence) | Open-source parsing (e.g. Docling) plus an open-weight vision model |
| Reasoning and draftingAWS and Azure both offer a choice of models, including Claude. On-prem and sovereign options run open-weight models. | Amazon Bedrock | Microsoft Foundry | Open-weight models served with vLLM on your own GPUs, or IONOS AI Model Hub |
| Tariff knowledge (retrieval)Indexed from the UK Trade Tariff (HMRC publishes an API), the explanatory notes, and your own confirmed codes and rulings. Refresh it on a schedule and stamp each suggestion with the tariff version. | Bedrock Knowledge Bases | Foundry IQ, built on Azure AI Search | OpenSearch, or PostgreSQL with pgvector |
| Agent runtimeThe original Bedrock Agents closed to new customers on 30 July 2026; new builds use AgentCore. | Amazon Bedrock AgentCore | Foundry Agent Service | An open-source agent framework (e.g. LangGraph) on Kubernetes |
| WorkflowOne workflow per consignment, which waits for missing documents rather than guessing. | AWS Step Functions | Logic Apps or Durable Functions | Temporal, or n8n |
| Middleware and events | Amazon EventBridge, SQS | Event Grid, Service Bus | Apache Kafka or RabbitMQ |
| Link to the freight and customs softwareDrafts are written through the customs software's own API or import, so its CDS link and validation stay in charge. | API Gateway, plus your existing integration platform | API Management, plus your existing integration platform | Kong or your existing API gateway, plus your existing integration platform |
| Human reviewSpecialists review where they already work, with the source document beside each field. | In the specialists' existing customs software and work queue | In the specialists' existing customs software and work queue | In the specialists' existing customs software and work queue |
| Guardrails | Bedrock Guardrails | Foundry guardrails (Azure AI Content Safety) | Open-source guardrails (e.g. NeMo Guardrails, Llama Guard) |
| Identity, keys, data protectionClient pricing is commercially sensitive. Keep each client's data separate. | IAM Identity Center, KMS, Macie | Entra ID, Key Vault, Purview | Keycloak or your existing Active Directory; OpenBao or HashiCorp Vault; an HSM |
| Monitoring and auditLog every suggestion, the tariff version used, and the specialist's decision and reason. | CloudWatch, CloudTrail | Azure Monitor, Log Analytics | Prometheus, Grafana, OpenTelemetry |
| UK data residencyIONOS AI Model Hub runs in German data centres: EU, not UK, residency. | eu-west-2 (London) | UK South / UK West | Your own UK data centre, or a UK or EU provider |
On a phone, the table shows the platform you pick. Sovereign / on-prem means open, portable components you can run in your own data centre or with a UK or European provider; IONOS is shown as one example, and others exist. What sovereign cloud means →
Many organisations keep core systems and sensitive data on their own servers. This is how the same design works across both.
Stays on-prem
The freight management system, the customs declaration software and the client product master stay where they are, whether on your own servers or hosted by your suppliers. Nothing in this design moves them.
Uses cloud AI
Document reading, the tariff index and the two agents can run in AWS or Azure UK regions, or on your own GPUs with open-weight models if clients' contracts keep their data in your estate.
How they connect
A private link (AWS Direct Connect or Azure ExpressRoute), or a site-to-site VPN for a smaller operation, and the API layer. Only the documents and fields the AI needs are sent, and drafts come back as events onto your queue.
If the link drops
Documents keep arriving and queue safely on your side. Specialists work consignments by hand as they did before, starting with the ones closest to arrival, and the backlog is read when the link returns.
What each agent may do through its tools, what it may not, and where a person signs off. The limits are enforced by the platform, not the prompt.
Document check agent
Where a person signs offOperations decides how each mismatch is resolved and sends every message to a shipper. The agent's permissions are enforced by the platform's identity and policy controls, not by instructions in a prompt.
Classification assistant
Where a person signs offA customs specialist confirms every commodity code and submits every declaration through the existing customs software. Preference claims, reliefs and Northern Ireland decisions need the specialist's explicit sign-off, and new or disputed codes go to customs compliance.
The customs declaration software stays the only route to CDS. It is already recognised by HMRC, handles the submission, and returns HMRC's responses. The AI writes drafts into it through its API or import format, never around it.
Each consignment is a workflow keyed on one reference. Documents arrive in any order, by email, portal or carrier message, and each becomes an event. The workflow waits until the bundle is complete or a deadline passes, then raises what's missing. It never fills a gap with a guess.
Every document is stored once, with a fingerprint. If a shipper sends the same invoice three times, it is recognised and not processed three times. Every draft carries the consignment reference and a version number, so a retry updates the draft rather than creating a second declaration.
Electronic bills of lading and carrier messages arrive as structured data, so they skip document reading. Since the Electronic Trade Documents Act 2023, a qualifying electronic bill of lading has the same legal standing as paper, so expect more of them over time.
The AI can be switched off without stopping the business. If it's paused, documents go straight to specialists' queues, and they key declarations exactly as they did before.
Map today's process, measure the baseline, collect last quarter's real document bundles, and agree how drafts reach the customs software.
Gate · must be true to passBaseline agreed, customs software integration route confirmed, DPIA started, and customs compliance involved.
Imports for a handful of clients and one mode (for example, road freight from the EU), in shadow mode: the AI checks and suggests, specialists work as normal, and the two are compared.
Gate · must be true to passExtraction accuracy and code acceptance within agreed limits on real documents, and compliance sign-off.
Drafts go live for the pilot clients, with monitoring, support, the weekly sample review and a rollback plan.
Gate · must be true to passMonitoring, support model, rollback plan and specialist training in place.
Add modes, exports and clients one at a time, then reuse the pattern for SPS pre-notifications and CBAM reporting.
Gate · must be true to passEach new flow passes the same pilot gate.
| Activity | Customs director | Operations manager | Solutions architectI can fill this | Technical PMI can fill this | EngineersI can fill this | Customs compliance | SecurityI can fill this |
|---|---|---|---|---|---|---|---|
| Business case and benefits | Accountable | Responsible | Consulted | Consulted | Informed | Consulted | Informed |
| Target architecture | Informed | Consulted | Accountable and Responsible | Consulted | Consulted | Consulted | Consulted |
| Integration with the customs software | Informed | Consulted | Accountable | Responsible | Responsible | Consulted | Consulted |
| Classification rules and review sample | Accountable | Informed | Consulted | Informed | Informed | Responsible | Informed |
| Accuracy testing on real documents | Informed | Responsible | Accountable | Consulted | Responsible | Responsible | Informed |
| Go-live decision | Accountable | Responsible | Consulted | Responsible | Informed | Consulted | Consulted |
| Run, monitor and improve | Informed | Accountable | Consulted | Consulted | Responsible | Consulted | Consulted |
R ResponsibleA AccountableC ConsultedI Informed· not involved
Option A
If there's no architect on the programme, I'd own the design end to end: the document pipeline, the tariff index, the agents' permissions, and the integration with your freight and customs software. I'd run the gates and report to your programme board.
Option B
If your partner or your own team already has an architect, I'd take on the document AI, the classification assistant and the customs-software integration under their lead, and give them a second senior opinion on the rest.
Goes wrong
The demo used clean, typed invoices. Real bundles are scans, photos and invoices in other languages.
How the design avoids it
Pilot on last quarter's real bundles, every mode and every client in scope, not a curated sample.
Goes wrong
Suggested codes get accepted without thought, and duty is underpaid for months.
How the design avoids it
Reasons and alternatives shown with every suggestion, a weekly compliance sample, and acceptance rates watched for signs of rubber-stamping.
Goes wrong
Two documents disagree and the AI quietly picks one.
How the design avoids it
Mismatches are always raised to a person with both values shown. The AI never reconciles them on its own.
Goes wrong
The tariff index goes stale and suggests codes or measures that have changed.
How the design avoids it
A scheduled refresh from the official tariff, a version stamp on every suggestion, and an alert if the refresh fails.
Goes wrong
Someone wires the AI straight to CDS to save a step.
How the design avoids it
The customs software stays the only route to HMRC, and the agents' credentials can't submit anything.
Changes already announced or under way that affect this design. More in the UK horizon scan.
Flag CBAM commodity codes now, and help clients ask their suppliers for embedded-emissions data before the first goods land.
Hold SPS rules as configuration, not code, so the change is a rule update rather than a rebuild.
Keep the audit trail of who decided what on every declaration, so it can support registration and compliance checks.
Keep the extracted data in a clean, structured model of your own, so it can feed whatever submission route comes next.
Good answers are specific. Vague answers to any of these are worth following up.
Whether you need someone to lead the design or to support the architect you already have, let's talk it through.