QCS IAC Compliance

TSA · 49 CFR Part 1548 · IACSSP Change 10

IAC compliance software that publishes its prices — and its receipts.

STA tracking, IACMS bulk exports, e-signed notification letters, Change 10 e-training, and one-click TSA audit packs. From $49/month, on this page, no demo call between you and the number.

No setup fees · No per-user charges · Cancel anytime

You didn't become a freight forwarder to babysit spreadsheets.

Every IAC Security Coordinator knows these days. They're why compliance software exists — and why it shouldn't cost a quote-call to find out what it costs.

The IACMS re-typing day

Keying the same personnel data into IACMS field by field, person by person, then doing it again after every hire and separation.

→ Form 419F data entered once, exported for bulk upload with per-person readiness checks.

The expiry you find out about late

An STA or TWIC quietly lapses and someone's been performing security functions they no longer qualify for.

→ Nightly evaluator emails the person and you before it happens — with a dead-man's switch so silence is never mistaken for "all clear."

The unannounced inspection

TSA is in the lobby and your training records are in three binders, two inboxes, and a shared drive.

→ One click builds the full audit pack: roster, credentials, certificates, signed letters with evidence.

The letter-chasing week

Printing §1.6.2 notification letters, mailing them to every Authorized Rep, and chasing signatures for weeks.

→ E-sign links by email; one bulk action covers every rep who needs a current letter. Most sign the same day.

The training spreadsheet

Tracking who's due for recurrent training, in which month, under §9.1.B's window rules — by hand.

→ The date engine schedules recurrence automatically; trainees get a link, you get the certificate.

The 30-day clocks nobody watches

Disassociation after separation, new letters after a rep's name change, annual IACSSP renewal — all with hard deadlines.

→ Every regulatory clock is encoded and alerted on. Deadlines chase you, not the reverse.
IAC Security Coordinator reviewing compliance documents

The whole IACSSP program, one system.

Built section-by-section against Change 10 — not adapted from generic HR software.

§1.6.4 · STAs & equivalents

Credential registry

Employees and Authorized Reps with STA, CHRC, TWIC, SIDA, CDL-H, and FAST tracking, expiry pills, and 5-year STA auto-expiry. Retention-safe: records tombstone, never vanish.

Form 419F · IACMS

IACMS bulk export

Encrypted STA application data exports tab-delimited for IACMS bulk upload, with per-person completeness checks before you submit.

§1.6.2 · Notification

E-signed letters

Send notification-of-security-functions letters by email, collect legally-evidenced e-signatures (timestamp, IP, document hash), file the PDF automatically.

§9.1–9.2 · Training

Change 10 e-training

Built-in LMS with randomized quizzes, instant certificates, and automatic recurrent scheduling under the §9.1.B window rules. Trainees need a phone, not an account.

Inspection-ready

One-click audit pack

Roster, credential status, §9.2 training records, certificates, signed letters, and retained STA documents — zipped with a manifest in under a minute.

49 CFR 1520 · SSI

Security to match the data

AES-256 encryption at rest for PII and documents, tamper-evident hash-chained audit log, role-based access, optional two-factor authentication, per-organization isolation.

Pricing you can read without booking a call.

Priced by tracked personnel — nothing else. Every plan includes every feature, unlimited admins, unlimited letters, training, exports, and audit packs.

Starter

For small IACs and new certificate holders

$49/mo

billed annually ($490/yr) · $59 month-to-month

  • Up to 25 tracked personnel
  • All features, no exceptions
  • Unlimited admin users
  • Email support
Start free trial

Unlimited

For multi-branch operations

$199/mo

billed annually ($1,990/yr) · $239 month-to-month

  • Unlimited tracked personnel
  • Dedicated onboarding & data import
  • Phone support
  • Custom retention exports
Start free trial

Every plan: 30-day free trial · no setup fees · no per-user, per-letter, or per-export charges · AES-256 encryption of SSI data · nightly backups · cancel anytime, export everything.

Why we publish prices. The established compliance platforms in this industry — including Veroot — don't list prices publicly; you request a demo, talk to sales, and get a quote. We think an IAC Security Coordinator comparing tools deserves the number up front. It's on this page, it's the same for everyone, and the trial doesn't require a meeting.

Questions IAC operators actually ask.

What does the software cover for a TSA Indirect Air Carrier?

Everything the IACSSP makes you track: employee and Authorized Representative registries, STA and equivalent credentials (CHRC, TWIC, SIDA, CDL-H, FAST) with expiry flags, §1.6.2 notification letters with legally-evidenced e-signatures, §9.1 initial and recurrent security training with certificates, Form 419F STA data with IACMS tab-delimited bulk export, and a one-click audit pack for TSA inspections.

How is this different from Veroot?

The workflow coverage is comparable — registries, IACMS exports, e-signed letters, training, audit evidence. The differences: our prices are published on this page (no demo call, no quote process), plans start at $49/month, and every plan includes unlimited letters, training, exports, and audit packs.

Is my data safe? IACMS information is SSI.

Yes. SSN, passport, and alien-registration numbers are encrypted at rest with AES-256-GCM, uploaded STA documents are stored as encrypted blobs, every record change lands in a tamper-evident hash-chained audit log, and each customer’s data is isolated per organization. Access is role-based with optional two-factor authentication (TOTP).

Does it handle IACSSP Change 10 training?

Yes. The built-in LMS delivers initial and recurrent security training with randomized quizzes, automatic certificates, and the §9.1.B date engine — completion inside the eligibility window keeps your due month sticky; early or late completion resets it, exactly as the program requires. Trainees take courses from an emailed link on any phone — no accounts to manage.

How does the IACMS export work?

Personnel STA data (Form 419F field map) exports as a tab-delimited file formatted for IACMS bulk upload. The export screen shows per-person readiness — missing DOB, address history, ID verification — before you upload, so rejected batches don’t surprise you.

What happens when TSA shows up for an inspection?

One click builds a ZIP with your personnel roster, credential status, §9.2 training records with certificates, and signed notification letters with full e-signature evidence (signer, timestamp, IP, document hash). Customers run it in under a minute.

Are there setup fees or per-user charges?

No setup fees, no per-admin charges, no per-letter or per-export metering. Plans are priced by tracked personnel only, and you can cancel anytime.

E-signing a TSA notification letter on a smartphone

Your next TSA inspection can take one click.

Start a 30-day free trial — we'll provision your workspace and import your roster the same day.

Start your free trial