- ClassificationCategorySupply Chain SecurityDomainSupply Chain SecurityFramework FamilyOther
- Regulatory ContextTypeStandardLegal InstrumentStandardSectorCross-SectorIndustryCross-Industry
- Region / PublisherRegionGlobalRegion DetailGlobal (UNECE, Geneva)PublisherUnited Nations Centre for Trade Facilitation and Electronic Business (UN/CEFACT), a subsidiary body of the United Nations Economic Commission for Europe (UNECE)
- VersioningVersionProgramme of Work 2025-2026Effective Date1996Issue DateJanuary 19, 2017 (consolidated mandate ECE/TRADE/C/CEFACT/2017/15); original mandate 1996
- AdoptionAdoption ModelVoluntaryImplementation ComplexityMedium
- Official ReferenceOpen Link in New TabSource
License included / downloadable: Yes
UN/CEFACT recommendations and standards are approved by the Plenary and made freely available to users under paragraph 23 of the 2017 mandate; the directories, libraries, schemas and code lists are published on the UNECE site and in open-source repositories, and the Plenary reports are on documents.un.org.
Framework text is licensed by its publisher and is included only where stated above.
- UN/CEFACT is the UNECE subsidiary body that develops trade facilitation recommendations and e-business standards used in global trade.
- Its standards include UN/EDIFACT, the Core Component Library, the XML Schema Library, reference data models such as Buy-Ship-Pay, and UN/LOCODE.
- The original mandate was approved in 1996, and the consolidated mandate in force is ECE/TRADE/C/CEFACT/2017/15.
- Standards are approved by the Plenary under the Open Development Process and made freely available.
- They are voluntary but become binding in practice when a customs administration, bank, or trading partner requires them.
Overview
UN/CEFACT, the United Nations Centre for Trade Facilitation and Electronic Business, is the subsidiary intergovernmental body of the United Nations Economic Commission for Europe (UNECE). It develops the UNECE trade facilitation recommendations and the UN/CEFACT e-business standards used across international supply chains. Those standards include UN/EDIFACT, the Core Component Library, the XML Schema Library, the reference data models such as Buy-Ship-Pay, UN/LOCODE and the JSON-LD web vocabulary. Importers, exporters, carriers, forwarders, banks, customs authorities and software providers use them.
The body's original mandate, TRADE/R.650, was approved in September and December 1996; the consolidated mandate in force, ECE/TRADE/C/CEFACT/2017/15, was approved in April 2017. The 2017 mandate (paragraph 8) places UN/CEFACT under the overall guidance of the UNECE Executive Committee with a global mandate: any United Nations Member State can participate on the basis of equality (paragraph 17), Heads of Delegation nominate experts who take part as independent volunteer experts in their own right (paragraph 18), and UNECE recommendations and UN/CEFACT standards are approved by the Plenary under the Open Development Process and made freely available to users (paragraph 23). The structure is a Plenary that meets at least once a year, a Bureau of a Chair and at least four Vice Chairs who supervise the Programme Development Areas, and Regional Rapporteurs (paragraphs 11 to 14, 35 and 44).
The 30th Plenary (July 11 and 12, 2024, report ECE/TRADE/C/CEFACT/2024/2) received the Core Component Library versions 23B and 24A, the UN/EDIFACT Directory versions D.23A and D.24A and the UN/LOCODE releases 2023-1 and 2023-2, and approved the Programme of Work 2025-2026 (Decision 24-12; EXCOM decision ECE/EX/2024/L.13). The libraries are released twice a year (Core Component Library 24A, UN/EDIFACT D.24A, UN/LOCODE 2024-1). The 31st Plenary (July 3 and 4, 2025, report ECE/TRADE/C/CEFACT/2025/2) approved ECE Recommendation No. 49, Transparency at Scale: Fostering Sustainable Value Chains (Decision 25-04), and noted the joint UNECE and WCO work to map the Buy-Ship-Pay Reference Data Model to the WCO Data Model (paragraph 93).
Why does it matter?
UN/CEFACT instruments are voluntary recommendations and standards of a United Nations body, but they become binding in practice when a customs administration, a port community system, a bank or a trading partner requires them, and many national single windows and e-invoicing schemes are built on them. For a supply chain, compliance or IT team the practical questions are which release of which library a partner expects, when the twice-yearly directories change, and how the recommendations on traceability and transparency, now including Recommendation No. 49, reach contracts and reporting. The Plenary reports record what was approved and when, so the obligations can be dated.
Key benefits include:
- One free, global source
Paragraph 23 of the 2017 mandate requires the Plenary to approve recommendations and standards under the Open Development Process and to make them freely available; paragraph 25 adds publication in English, French and Russian.
- Dated releases
The 2024 Plenary report lists the Core Component Library 23B and 24A, UN/EDIFACT D.23A and D.24A and UN/LOCODE 2023-1 and 2023-2 (paragraph 57), so every implementation can name its version.
- Public and private participation
Member States nominate Heads of Delegation; experts serve in their own right (paragraph 18); 1,618 experts were registered in 2024 (2024 report, paragraph 50).
- Interoperability with customs
The WCO Data Model is built on UN/CEFACT standards, and the Buy-Ship-Pay Reference Data Model is being mapped to it for WCO Data Model version 4.3 (2025 report, paragraph 93).
- Traceability recommendations
Recommendation No. 49 on transparency at scale was approved on July 4, 2025 (Decision 25-04), with Recommendation No. 50 on digital transit corridors in development (Decision 25-06).
How does it work?
UN/CEFACT works through projects. A project proposal needs written support from three country Heads of Delegation and is launched by the Bureau under the Open Development Process (ECE/TRADE/C/CEFACT/2016/17), which the 2017 mandate names in paragraphs 23, 39(e) and 46; the Bureau appoints project leaders and monitors progress, and the Plenary approves the resulting UNECE recommendation or UN/CEFACT standard. Decisions are taken by consensus, with a vote only if consensus fails (paragraph 16). The Bureau is elected at least every three calendar years (paragraph 52) and is accountable for operational functions such as project control and maintenance of UN/EDIFACT and the other UN/CEFACT libraries (paragraph 39(h)).
The deliverables fall into families. The UNECE recommendations, numbered from Recommendation No. 1 onward, set policy and practice for trade facilitation; Recommendation No. 49 (2025) is the latest approved. The e-business standards are the UN/EDIFACT directories (D.23A and D.24A in the 2024 report), the Core Component Library and the XML Schema Library (23B and 24A), the reference data models including Buy-Ship-Pay and the Multimodal Transport Reference Data Model, the UN/LOCODE code list for trade and transport locations (releases 2023-1, 2023-2 and 2024-1), the JSON-LD web vocabulary and the schemas and OpenAPI specifications published as open source. The 2024 report also lists business requirements specifications on digital product conformity certificate exchange, the trade finance documentary credit process and product circularity data.
The Plenary approves the Programme of Work: the 2025-2026 Programme of Work was approved at the 30th session (Decision 24-12) and by the UNECE Executive Committee (ECE/EX/2024/L.13), and the Bureau is to present the 2027-2028 Programme of Work at the next session (Decision 25-11). Its focus areas are transparency and traceability along value chains and digital connectivity along transit corridors (Decision 25-08). A UNECE expert team on Environmental, Social and Governance Traceability of Sustainable Value Chains in the Circular Economy works beside the Bureau (its Programme of Work for 2026-2028 was adopted by Decision 25-13), and the UN/LOCODE Advisory Group maintains the location code list. UN/CEFACT's open-source repositories are moving from GitHub to a United Nations GitLab instance.
Key Elements
- UNECE recommendations
Policy and practice instruments for trade facilitation, numbered from Recommendation No. 1; Recommendation No. 49, Transparency at Scale, approved by Decision 25-04 of the 31st Plenary.
- UN/EDIFACT
The United Nations rules for electronic data interchange, maintained by the Bureau (mandate paragraph 39(h)) and released as directories, D.23A and D.24A in the 2024 report.
- Core Component Library and XML Schema Library
The semantic library and the schemas derived from it, versions 23B and 24A presented to the 30th Plenary (paragraph 57).
- Reference data models
The Buy-Ship-Pay Reference Data Model and the Multimodal Transport Reference Data Model, published with the context files, schemas and OpenAPI specifications (2024 report, paragraph 58).
- UN/LOCODE
The United Nations Code for Trade and Transport Locations, maintained by the UN/LOCODE Advisory Group with two releases a year (2023-1, 2023-2, 2024-1).
- Open Development Process and Plenary approval
Project proposals, public review and Plenary approval under ECE/TRADE/C/CEFACT/2016/17, with deliverables made freely available (mandate paragraphs 23 and 46).
What does it cover?
UN/CEFACT's mandate covers both commercial and government business processes that can foster growth in international trade (2017 mandate, paragraph 8), with a principal focus on facilitating national and international transactions through the simplification and harmonization of processes, procedures and information flows (paragraph 10). Its standards therefore reach any organization that exchanges trade, transport, regulatory or payment data. Participation is open to every United Nations Member State on the basis of equality (paragraph 17); the Plenary in July 2025 was attended by delegations of 27 Member States and the European Commission. This page covers the body and its families of instruments as a whole; each instrument carries its own release and scope.
What are its objectives?
The 2017 mandate (paragraph 10) states how UN/CEFACT pursues its focus.
Analyze and understand the key elements of international processes, procedures and transactions and work for the elimination of constraints (paragraph 10(a)).
Develop methods to facilitate processes, procedures and transactions, including the relevant use of information and communication technologies (paragraph 10(b)).
Promote both the use of these methods and associated best practices through government, industry and service associations (paragraph 10(c)).
Coordinate its work with the WTO, the WCO, the OECD, UNCITRAL and UNCTAD (paragraph 10(d)).
Secure coherence with ISO, IEC, ITU and selected non-governmental organizations under the ISO/IEC/ITU/UNECE Memorandum of Understanding on electronic business (paragraph 10(e)).
Framework in Context
UN/CEFACT supplies the data semantics that other trade and customs instruments reuse: the WCO Data Model is built on UN/CEFACT standards and the two bodies are mapping the Buy-Ship-Pay Reference Data Model to it (2025 report, paragraph 93), and the mandate ties UN/CEFACT to ISO, IEC and ITU through the Memorandum of Understanding on electronic business (paragraph 10(e)). In a governance program the standards sit on the supply chain and trade compliance side rather than in information security: they define what exchanged documents and codes mean, not how systems are protected. Traceability and transparency work, including Recommendation No. 49, is where UN/CEFACT now meets sustainability reporting.
Common Framework Mappings
Organizations map the UN/CEFACT recommendations and e-business standards to the frameworks below so that one data model, one set of partner requirements and one evidence trail serve customs, trade finance and supply chain security programs.
Mapped frameworks include:
C-TPAT (Customs-Trade Partnership Against Terrorism)
GS1 System of Standards
ISO 28000
NIST SP 800-161 Rev.1
OASIS Universal Business Language (UBL)
WCO Data Model
How SmartSuite Supports UN/CEFACT standards
SmartSuite provides the system for managing controls, evidence, mappings, assessments, and reporting.
Use Compliance Management to hold each UN/CEFACT instrument a partner or authority requires as an obligation with its release (for example Core Component Library 24A or UN/EDIFACT D.24A), owner, implementation status and test evidence, and Third Party Risk Management to track what each trading partner, customs connection or service provider expects and has proven in interoperability testing.
UN/CEFACT Instrument Register
Record every recommendation, directory, library, reference data model and code list in use with its release, the Plenary decision or report that published it and the systems that implement it.
Trading Partner Requirements
Capture per partner or authority which messages, versions and code lists are required, the go-live date and the contact, and link each to the obligation it creates.
Release Change Control
Track the twice-yearly UN/EDIFACT, Core Component Library and UN/LOCODE releases, assess impact on live interfaces and route approved changes through testing and release evidence.
Interoperability Test Evidence
Store test results and partner confirmations for each message implementation and release, so a question from a customs authority or bank is answered from the record.
Traceability and Transparency Obligations
Hold the Recommendation No. 49 practices and any digital product passport or due diligence data requests as obligations with owners, data sources and evidence.
Plenary and Program Tracking
Log the annual Plenary decisions, the Programme of Work focus areas and open projects that affect your instruments, and schedule the reviews they trigger.
Related frameworks

ISO 28000:2022 specifies requirements for a security management system, including supply chain aspects, for any type or size of organization. ISO published it on March 15, 2022.
Frequently Asked Questions For UN/CEFACT Supply Chain Standards
UN/CEFACT, the United Nations Centre for Trade Facilitation and Electronic Business, is a subsidiary intergovernmental body of the United Nations Economic Commission for Europe, placed under the overall guidance of the UNECE Executive Committee in April 2013 (2017 mandate, paragraph 8). Its original mandate, TRADE/R.650, was approved in September and December 1996. A Plenary of Member State delegations is the highest authority, an elected Bureau of a Chair and at least four Vice Chairs acts between sessions, and experts nominated by Heads of Delegation do the project work in their own right (paragraphs 13, 14, 18 and 35).
The UNECE trade facilitation recommendations (Recommendation No. 1 onward, with Recommendation No. 49 approved in July 2025) and the e-business standards: the UN/EDIFACT directories (D.23A and D.24A in the 2024 Plenary report), the Core Component Library and XML Schema Library (versions 23B and 24A), the reference data models including Buy-Ship-Pay and the Multimodal Transport Reference Data Model, the UN/LOCODE location code list (releases 2023-1, 2023-2 and 2024-1) and the JSON-LD web vocabulary, together with business requirements specifications and white papers (2024 report, paragraphs 55 to 58).
No. They are recommendations and standards of a United Nations body, approved by the Plenary and made freely available (2017 mandate, paragraph 23). They become binding when a customs authority, port community system, bank or trading partner requires a particular message, library release or code list, or when national law adopts them. The practical obligation is therefore defined by the partner's or authority's requirement, which names the instrument and its version.
Through the Open Development Process (ECE/TRADE/C/CEFACT/2016/17). A project proposal needs written expressions of support from three country Heads of Delegation; the Bureau launches it, appoints project leaders and monitors progress (2017 mandate, paragraphs 39(e) and 46); the Plenary then approves the deliverable, by consensus where possible (paragraph 16). The 31st Plenary used this route to approve Recommendation No. 49 by consensus on July 4, 2025 (Decision 25-04).
The 30th Plenary (July 11 and 12, 2024) approved the Programme of Work 2025-2026 (Decision 24-12), took note of the new library and directory releases (Decision 24-08) and endorsed the UN/LOCODE Advisory Group report (Decision 24-10). The 31st Plenary (July 3 and 4, 2025) approved Recommendation No. 49 on transparency at scale (Decision 25-04), welcomed the digital connectivity workstream including Recommendation No. 50 (Decision 25-06), and asked the Bureau to present the Programme of Work 2027-2028 at its next session (Decision 25-11).

Put this framework to work in SmartSuite
Manage controls, risks, evidence, and audits in one platform designed for modern governance, risk, and compliance.


