Most companies operating between Canada and Mexico are not in trouble. They have legal counsel in both jurisdictions, operational teams on the ground, and a working understanding of the regulatory environment. Day-to-day, things function.

The problem is not in day-to-day.

Between 2024 and early 2026, Canada deployed and partially reversed one of the most extensive sets of trade measures it has imposed in decades: a 100 per cent surtax on Chinese electric vehicles that was partially eased within fifteen months through a quota-based arrangement allowing up to 49,000 vehicles at the 6.1 per cent MFN rate; retaliatory tariffs on U.S. goods approaching CA$30 billion, largely repealed by September 2025 under the Order Amending and Repealing Certain Orders Made Under the Customs Tariff; steel tariff-rate quotas tightened on two occasions following their introduction. In the same period, Canada’s enforcement institutions expanded their reach: a new CBSA Market Watch Unit conducting annual anti-dumping reviews, contempt proceedings initiated for the first time against an importer that declined to participate in a proceeding (documented in Expiry Review RR-2023-008), and the conclusion of Canada’s first anti-circumvention case.

None of these developments announced themselves in advance. Each one changed, quietly and without process, the conditions under which companies in the corridor were operating.

The question is not whether your lawyers knew. The question is whether your structure responded.

Where Governance Actually Breaks Down

In a binational operation, the gap rarely appears in legal compliance. It appears in the space between legal compliance and operational decision-making, across two jurisdictions that do not share the same regulatory logic, enforcement culture, or documentation standard.

A tariff threshold shifts in Canada. This is not theoretical. It is how most cross-border structures actually operate. A sourcing decision is made in Mexico. A rules-of-origin qualification that supported your supply chain structure is under review. A CBSA inquiry arrives requesting information about a supplier three tiers down. At each of these moments, the relevant question is not “are we compliant?” It is: who in this organisation has the authority, the information, and the mandate to connect what is happening in Canada to what needs to happen in Mexico, before the exposure becomes a cost?

In most structures, that function does not exist, even when parts of it are assumed to be covered internally. Legal counsel advises by jurisdiction. Operations executes by market. The board receives consolidated reports that do not surface corridor-level risk until it has already materialised.

The result is not non-compliance. It is ungoverned exposure, which is a different and more difficult problem, because it is invisible until it is not. In a board context, that distinction matters. Non-compliance can be corrected. Ungoverned exposure raises a different question entirely: whether control is actually being exercised over the operation.

This is also why the conventional solution — retaining legal counsel in Canada and legal counsel in Mexico — does not close the gap. Two firms coordinating across jurisdictions still produce two jurisdictional perspectives.

What is absent is not more legal advice. It is a single governance function with the authority, the cross-border mandate, and the accountability to act as one structure rather than two.

CUSMA Is Not the Safety Net Most Organisations Think It Is

The CUSMA joint review begins in July 2026. Under the agreement’s sunset clause, if the parties do not reach consensus on extension, the treaty enters annual review and terminates in 2036. Areas identified in Canada’s 2025 public consultation on the review include rules of origin for manufactured goods, forced labour import ban alignment between the three parties, and digital trade governance. Each of these directly determines whether the structure your operation is built on continues to qualify for the access it currently assumes.

CUSMA does not govern your company. It creates the conditions under which your company may operate. When those conditions shift, as they did repeatedly between 2024 and 2026, the organisations that hold their position are the ones whose governance structure was designed to absorb that kind of movement. The ones that do not are the ones that discover their exposure at the worst possible moment: a bank requesting evidence of control, a regulator asking who supervises compliance, a dispute that surfaces documentation gaps that no one knew existed.

The Diagnostic Question

Can your organisation, today, trace a regulatory change in Canada through its operational impact in Mexico and assign clear accountability for the response — with documentation that would withstand board-level scrutiny in both jurisdictions?

If the answer is not immediate, the governance layer is not functioning as a control mechanism. It is functioning as a record-keeping system. Those are not the same thing.

What a Structural Diagnostic Reveals

A proper structural diagnostic does not begin with advice. It begins with visibility.

In practice, that means forcing the organisation to answer questions it is not currently structured to answer: where decision rights actually sit across both jurisdictions, where accountability is assumed rather than documented, and whether fiduciary oversight over the Mexican operation can be evidenced at board level, not just described.

In most cases, that process surfaces two or three points of structural exposure that are not visible from within the operation because no single function has the vantage point to see them. Those are the points that matter — and they are the ones that the July 2026 review, or any significant regulatory shift, will reach first.

If This Raises More Questions Than It Answers

That is the right response.

The organisations that contact me are not in crisis. They are the ones that recognise, in reading something like this, that their current structure was not designed for the environment the corridor has become, or that the structure they are about to build deserves more than an operational plan.

If you are operating across both jurisdictions and cannot clearly demonstrate how control is exercised across the corridor, that is where the conversation begins.

Begin the Diagnostic Process