XFACTOR COMMANDCENTER · The platform

Zero to certified.
Certified to untouchable.

Every certification program demands the same things: a program you actually run, people who actually know it, and proof an officer can actually hold. CommandCenter runs all three — through six department cockpits, one calendar, one evidence room, and one gate after another that never lets you skip the work.

Request Onboarding See family pricing

The Journey Road

Twelve stages. Each one unlocks the next.

  1. 01Foundation
  2. 02Assessment
  3. 03Due Diligence
  4. 04Training
  5. 05Monthly Audits
  6. 06Security Committee
  7. 07Security Profile
  8. 08Evidence
  9. 09Master Risk Report
  10. 10Executive Approval
  11. 11Portal Submission
  12. 12Audit Readiness

Progressive unlock is the honesty mechanism: a stage opens when the one before it is genuinely complete — not when someone clicks “done.”

The flagship · Annual Internal Assessment

Most tools check whether your paperwork exists. This measures two things at once.

What your people actually know

Morpheus runs a spoken or typed interview with each department member, built on 48 real-world scenario questions grounded verbatim in the official security criteria. It scores the reasoning, not the clicked answer — a member can score above their chosen option when their explanation shows real understanding. The answer key never reaches the browser.

How deeply the program is built in

Every requirement is graded 0–5 on how well it survives without any one person — five sequential evidence gates, per department and per facility. Requirements that collapse if one specific person leaves get named. That’s key-person risk, on the record.

Then the diagnostic grid plots each department on knowledge vs documentation. High knowledge, weak paper? The system prescribes “Document it.” Strong paper, low knowledge? “Train it.” Prescriptions flow straight into your corrective-action plan — checked against 1,231 live official requirements, tailored to your programs and entity type.

Two doors in: start from zero and build to certified — or import your current certified program and begin in defense mode, protecting the status you already hold.

Inside the command center

Every line below is live in the platform today.

Home Command Dashboard

Where your entire certification program stands — one screen.

  • Live progress toward C-TPAT and PIP certification across every department, in one view
  • The Journey Road: a 12-stage visual path showing exactly where you are and what unlocks next
  • Later stages open only as earlier ones are genuinely complete — the platform never lets you skip the work
  • Honest color-banded compliance percentages, so weak areas are never disguised

Command Calendar

Your entire compliance year — every task, deadline, and follow-up.

  • 1,810 real, pre-loaded compliance tasks across 6 departments and 12 months — word-for-word from the founder’s published planners
  • Month-by-month view, filterable to a single department or the executive view
  • Other modules file real calendar items automatically: committee actions, regulatory follow-ups, commitments scheduled up to 3 years out
  • Per-department to-do pages with overdue counts and deadline countdowns

Department Dashboards

A command cockpit for each of your six departments.

  • Executive, HR, IT, Operations, Procurement, Shipping/Receiving — each with its own home
  • Readiness gauge, year-over-year trend, and corrective-action clock per department
  • Everything each department owes, owns, and has earned: requirements, deadlines, training progress, evidence, best practices
  • Privacy by design: executives see system-level signals, never another department’s private to-do list

Foundation — Company Setup

Everything the whole program builds on, captured once.

  • Programs and entity type: C-TPAT (all 12 entity types), PIP, AEO, Bill S-211 — requirements tailor themselves to you
  • Facilities with blueprints on file; umbrella business units rolled up from real per-site numbers, never averaged away
  • Partner certification status tracking: official listings imported, alerts on any change, a coverage gauge
  • Team invites by email — department heads land straight in their own view
  • White-label: your logo and color lead the documents you hand customers and auditors

Due Diligence

Procedures and forms, kept current against the regulators themselves.

  • Procedures library per department + forms library, with an approve-and-finalize workflow
  • Regulatory watch: CBP, CBSA, EU AEO, and S-211 sources monitored with genuine change detection — plain-language alerts, follow-ups filed to your calendar
  • Regulatory reference library: the official question sets, portal manuals, and alerts, with full provenance

Specialized Training

Department-specific, with real testing — not a video everyone clicks through.

  • 21 live Level-1 modules mapped to departments, each taught through that department’s own lens
  • A four-level mastery ladder — higher levels unlock only when the level below is genuinely complete
  • Scenario-based comprehension tests, server-graded, with an 80% pass gate
  • Completions automatically become evidence records in your year-over-year file

Monthly Audits

A self-audit rhythm that catches drift before an officer does.

  • Monthly audit cycles per department with findings capture
  • Drift vs last month: what got worse, what got better
  • Recurring weaknesses surfaced across months; executive review of every submission

Security Committee

A real governance rhythm — all of it producing evidence.

  • Monthly agenda builder and meeting records; decisions on the record
  • Executive Shield tabletop exercises: a 12-month scenario program with structured after-action debriefs built to the federal exercise-evaluation standard
  • Incident-response lane with open incidents visibly flagged
  • Quarterly executive review: agenda generated from your actual audit submissions, with a print export

Security Profile

Answer the government’s questionnaire once — in your own voice.

  • Guided response composer per requirement, organized by department and program
  • Answer once, publish many: one answer satisfies the equivalent question across every program you’re enrolled in
  • Drafts assembled only from your company’s approved language — never invented, every draft traced to its sources
  • The official portal sub-questions (January 2024 sets, 279 questions) mirrored one-to-one

Evidence Room

Every proof, versioned, review-dated, audit-ready.

  • Department evidence folders and a proof-coverage view showing which requirements are bare
  • Version discipline: every review recorded as “updated to version X” or “reviewed — no change needed” — exactly what an officer asks to see
  • Portal-ready file naming applied automatically; traceability from gap → action → evidence → report

Master Risk Report & Recommendations

The whole program compiled — and a decision paper trail that stands up.

  • The Master Risk Report compiled across all departments, facilities, and programs
  • With XFACTOR VERIFIED: every supplier’s completed 5-Step assessment lands here automatically
  • Tiered recommendations; each department answers yes/no with reasons and committed timelines up to 3 years out
  • Executive-summary print export, white-labeled with your logo; an append-only audit trail of every approval

Portal Submission

Assemble, verify, and hand off the official package.

  • Package assembly from your approved responses and evidence, with submission history
  • Portal-ready view: answers projected into each program’s official structure with per-response copy buttons — the government portal becomes a paste job, not a rewrite
  • A readiness gate keeps submission locked until the assessment, sign-offs, and evidence checks are genuinely green

And the day the officer walks in

Audit readiness lives here too.

Mock officer visits per department, a prep playbook, and a post-visit response engine that turns the officer’s actual findings report into corrective actions and drafted responses in your own approved language. That module is XFACTOR VALIDATED — already live inside your CommandCenter, standalone in August.

See XFACTOR VALIDATED

Morpheus, on every page

A guide who knows your program’s live state — text or voice, never disturbing your work. Answers grounded in your company’s actual data, not generic chat. He runs the guided interviews, guides the tabletop exercises, and carries inter-department messages in the same panel.

Seven languages. One submission.

Your team works in English, French, Spanish, Hindi, Chinese, Arabic, or Punjabi. The official English requirement always stays primary, and your submission text is never altered — a one-click Reading Lens bridges any response into your own language.

One step provisions the whole thing.

Your company, your sites, all six departments, your owner account — then the invitations go out to your department heads. Strict tenant isolation means your data is provably invisible to every other client.

Request Onboarding