TSA · 49 CFR Part 1548 · IACSSP Change 10
IAC compliance software that publishes its prices — and its receipts.
STA tracking, IACMS bulk exports, e-signed notification letters, Change 10 e-training, and one-click TSA audit packs. From $49/month, on this page, no demo call between you and the number.
No setup fees · No per-user charges · Cancel anytime
You didn't become a freight forwarder to babysit spreadsheets.
Every IAC Security Coordinator knows these days. They're why compliance software exists — and why it shouldn't cost a quote-call to find out what it costs.
The IACMS re-typing day
Keying the same personnel data into IACMS field by field, person by person, then doing it again after every hire and separation.
→ Form 419F data entered once, exported for bulk upload with per-person readiness checks.The expiry you find out about late
An STA or TWIC quietly lapses and someone's been performing security functions they no longer qualify for.
→ Nightly evaluator emails the person and you before it happens — with a dead-man's switch so silence is never mistaken for "all clear."The unannounced inspection
TSA is in the lobby and your training records are in three binders, two inboxes, and a shared drive.
→ One click builds the full audit pack: roster, credentials, certificates, signed letters with evidence.The letter-chasing week
Printing §1.6.2 notification letters, mailing them to every Authorized Rep, and chasing signatures for weeks.
→ E-sign links by email; one bulk action covers every rep who needs a current letter. Most sign the same day.The training spreadsheet
Tracking who's due for recurrent training, in which month, under §9.1.B's window rules — by hand.
→ The date engine schedules recurrence automatically; trainees get a link, you get the certificate.The 30-day clocks nobody watches
Disassociation after separation, new letters after a rep's name change, annual IACSSP renewal — all with hard deadlines.
→ Every regulatory clock is encoded and alerted on. Deadlines chase you, not the reverse.
The whole IACSSP program, one system.
Built section-by-section against Change 10 — not adapted from generic HR software.
Credential registry
Employees and Authorized Reps with STA, CHRC, TWIC, SIDA, CDL-H, and FAST tracking, expiry pills, and 5-year STA auto-expiry. Retention-safe: records tombstone, never vanish.
IACMS bulk export
Encrypted STA application data exports tab-delimited for IACMS bulk upload, with per-person completeness checks before you submit.
E-signed letters
Send notification-of-security-functions letters by email, collect legally-evidenced e-signatures (timestamp, IP, document hash), file the PDF automatically.
Change 10 e-training
Built-in LMS with randomized quizzes, instant certificates, and automatic recurrent scheduling under the §9.1.B window rules. Trainees need a phone, not an account.
One-click audit pack
Roster, credential status, §9.2 training records, certificates, signed letters, and retained STA documents — zipped with a manifest in under a minute.
Security to match the data
AES-256 encryption at rest for PII and documents, tamper-evident hash-chained audit log, role-based access, optional two-factor authentication, per-organization isolation.
Pricing you can read without booking a call.
Priced by tracked personnel — nothing else. Every plan includes every feature, unlimited admins, unlimited letters, training, exports, and audit packs.
Starter
For small IACs and new certificate holders
$49/mo
billed annually ($490/yr) · $59 month-to-month
- Up to 25 tracked personnel
- All features, no exceptions
- Unlimited admin users
- Email support
Growth
For established forwarders with agent networks
$99/mo
billed annually ($990/yr) · $119 month-to-month
- Up to 150 tracked personnel
- Employee & agent self-service portals
- Bulk letter campaigns
- Priority email support
Unlimited
For multi-branch operations
$199/mo
billed annually ($1,990/yr) · $239 month-to-month
- Unlimited tracked personnel
- Dedicated onboarding & data import
- Phone support
- Custom retention exports
Every plan: 30-day free trial · no setup fees · no per-user, per-letter, or per-export charges · AES-256 encryption of SSI data · nightly backups · cancel anytime, export everything.
Why we publish prices. The established compliance platforms in this industry — including Veroot — don't list prices publicly; you request a demo, talk to sales, and get a quote. We think an IAC Security Coordinator comparing tools deserves the number up front. It's on this page, it's the same for everyone, and the trial doesn't require a meeting.
Questions IAC operators actually ask.
What does the software cover for a TSA Indirect Air Carrier?
Everything the IACSSP makes you track: employee and Authorized Representative registries, STA and equivalent credentials (CHRC, TWIC, SIDA, CDL-H, FAST) with expiry flags, §1.6.2 notification letters with legally-evidenced e-signatures, §9.1 initial and recurrent security training with certificates, Form 419F STA data with IACMS tab-delimited bulk export, and a one-click audit pack for TSA inspections.
How is this different from Veroot?
The workflow coverage is comparable — registries, IACMS exports, e-signed letters, training, audit evidence. The differences: our prices are published on this page (no demo call, no quote process), plans start at $49/month, and every plan includes unlimited letters, training, exports, and audit packs.
Is my data safe? IACMS information is SSI.
Yes. SSN, passport, and alien-registration numbers are encrypted at rest with AES-256-GCM, uploaded STA documents are stored as encrypted blobs, every record change lands in a tamper-evident hash-chained audit log, and each customer’s data is isolated per organization. Access is role-based with optional two-factor authentication (TOTP).
Does it handle IACSSP Change 10 training?
Yes. The built-in LMS delivers initial and recurrent security training with randomized quizzes, automatic certificates, and the §9.1.B date engine — completion inside the eligibility window keeps your due month sticky; early or late completion resets it, exactly as the program requires. Trainees take courses from an emailed link on any phone — no accounts to manage.
How does the IACMS export work?
Personnel STA data (Form 419F field map) exports as a tab-delimited file formatted for IACMS bulk upload. The export screen shows per-person readiness — missing DOB, address history, ID verification — before you upload, so rejected batches don’t surprise you.
What happens when TSA shows up for an inspection?
One click builds a ZIP with your personnel roster, credential status, §9.2 training records with certificates, and signed notification letters with full e-signature evidence (signer, timestamp, IP, document hash). Customers run it in under a minute.
Are there setup fees or per-user charges?
No setup fees, no per-admin charges, no per-letter or per-export metering. Plans are priced by tracked personnel only, and you can cancel anytime.

Your next TSA inspection can take one click.
Start a 30-day free trial — we'll provision your workspace and import your roster the same day.
Start your free trial
