DEV Community

Alex Kane
Alex Kane

Posted on

n8n for LogisticsTech & Supply Chain SaaS: 5 Automations for CBP ISF, FMCSA ELD §395.22, FDA FSMA FSVP, TSA and C-TPAT

If you build software for freight brokers, customs brokers, 3PL operators, last-mile delivery companies, cold chain operators, or hazmat shippers — you operate in one of the most compliance-dense regulatory environments in US commerce. A missed CBP ISF filing window triggers a $5,000-per-day fine with no grace period. An FMCSA ELD device failure starts an 8-day compliance clock before every mile your carrier customers drive becomes a §391.15 disqualification risk. An FDA FSVP lapse puts your importer customers on DWPE — automatic detention on every future shipment from the supplier in question.

Cloud iPaaS tools like Zapier and Make were not designed for this environment. Routing FMCSA ELD driver HOS records through a cloud iPaaS creates a disqualification exposure outside your carrier's authorized ELD system boundary. Routing CBP entry data through a third-party cloud platform introduces a supply chain security risk that C-TPAT Tier 2 and Tier 3 partners cannot accept. Routing FDA FSVP supplier verification records outside your controlled infrastructure disrupts the audit trail FSMA §1.510 requires.

Self-hosted n8n keeps all of that data inside your platform's boundary. Here are 5 production-ready n8n workflows for LogisticsTech and Supply Chain SaaS vendors — covering the 7 customer tiers, 12 compliance deadline types, 8 incident types, and the API health monitors your CSM and regulatory teams need.

The Regulatory Stack LogisticsTech SaaS Vendors Navigate

  • CBP 19 CFR §149 — ISF 10+2 rule: importers must file 24 hours before vessel loading. $5,000/day penalty, no grace period. CBP_ISF_LATE_FILING is the fastest compliance clock in logistics.
  • DOT FMCSA 49 CFR §395 — ELD mandate: electronic logging devices must record Hours of Service data. §395.22 specifies that ELD data stays within an FMCSA-registered ELD system. Routing HOS data through a cloud iPaaS creates §391.15 disqualification exposure for drivers outside the carrier's control.
  • FDA FSMA 21 CFR §1.908 — FSVP: importers must verify foreign suppliers annually. DWPE (Detention Without Physical Examination) is automatic when verification lapses. FDA PREDICT scoring is the risk engine.
  • TSA 49 CFR §1544/§1548 — Certified Cargo Screening Program and Indirect Air Carrier security programs. Air cargo screening authority is revoked if annual security program renewal lapses.
  • C-TPAT — CBP Customs-Trade Partnership Against Terrorism: Tier 2 and Tier 3 partners must maintain a current security profile and notify CBP within 72 hours of a security incident.
  • DOT 49 CFR §171.15 — Hazmat incident reporting: telephonic NRC notification within 1 hour, written report within 30 days.
  • ITAR 22 CFR §127 — Dual-use export controls: $1.3M/violation civil penalty, voluntary disclosure within 24 hours reduces criminal exposure.

5 n8n Workflows for LogisticsTech & Supply Chain SaaS Vendors

1. Tier-Segmented Customer Onboarding Drip

7 customer tiers, each with distinct regulatory language in the Day 0 email. ENTERPRISE_SUPPLY_CHAIN_PLATFORM customers with the FMCSA_CARRIER_ELD flag get an immediate briefing on FMCSA §395.22 data residency. CUSTOMS_BROKERAGE_SAAS customers get CBP ACE + C-TPAT context. HAZMAT_COMPLIANCE_SAAS customers get the DOT §171.15 1-hour NRC telephonic requirement upfront.

Compliance flags tracked: CBP_ISF_FILER / FMCSA_CARRIER_ELD / FDA_FSVP_IMPORTER / TSA_INDIRECT_AIR_CARRIER / C_TPAT_CERTIFIED / ITAR_DUAL_USE_EXPORTER / SOC2_REQUIRED

Workflow: Google Sheets (new_signups) → Code (tier + flag classification) → Gmail Day0 (tier-specific) → Wait 3d → Gmail Day3 integration tips → Wait 4d → Gmail Day7 first compliance workflow → Sheets (onboarding_log marked complete)

{
  "name": "LogisticsTech Tier-Segmented Onboarding Drip",
  "nodes": [
    {
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "cronExpression",
              "expression": "0 8 * * *"
            }
          ]
        }
      },
      "name": "Schedule Trigger",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "id": "n1"
    },
    {
      "parameters": {
        "operation": "getAll",
        "sheetId": {
          "__rl": true,
          "value": "YOUR_SHEET_ID",
          "mode": "id"
        },
        "range": "new_signups!A:L",
        "options": {
          "returnAllMatches": true
        }
      },
      "name": "Get New Signups",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        450,
        300
      ],
      "id": "n2"
    },
    {
      "parameters": {
        "jsCode": "const tiers = {\n  'ENTERPRISE_SUPPLY_CHAIN_PLATFORM': {\n    subject: 'Welcome \u2014 FMCSA ELD \u00a7395.22 Data Residency Briefing Included',\n    body: 'Your FMCSA_CARRIER_ELD flag means driver HOS records route through our platform. We run self-hosted n8n so that data stays within your authorized ELD system boundary. Routing HOS records through a cloud iPaaS creates FMCSA \u00a7391.15 disqualification exposure outside your control. Book your enterprise onboarding: [LINK]'\n  },\n  'FREIGHT_BROKERAGE_SAAS': {\n    subject: 'Welcome \u2014 CBP ISF 10+2 Automation Setup',\n    body: 'Your ISF filing window is 24 hours before vessel loading (19 CFR \u00a7149.3). Miss it and the fine is $5,000 per day with no grace period. Let us show you the automated ISF clock workflow: [LINK]'\n  },\n  'CUSTOMS_BROKERAGE_SAAS': {\n    subject: 'Welcome \u2014 CBP ACE Entry + C-TPAT Automation',\n    body: 'Your C-TPAT security profile, CBP \u00a7141 entry workflows, and FDA FSVP supplier verification automations are ready. Here is your setup guide: [LINK]'\n  },\n  'LAST_MILE_DELIVERY_SAAS': {\n    subject: 'Welcome \u2014 Last-Mile Ops Automation',\n    body: 'Route optimization alerts, carrier API monitors, and customer notification drips are all included. Your quick-start guide: [LINK]'\n  },\n  'COLD_CHAIN_LOGISTICS_SAAS': {\n    subject: 'Welcome \u2014 FDA FSMA FSVP + Cold Chain Compliance',\n    body: 'Your FDA FSVP supplier verification schedule and cold chain temperature deviation alert workflows are pre-configured. Guide: [LINK]'\n  },\n  'HAZMAT_COMPLIANCE_SAAS': {\n    subject: 'Welcome \u2014 DOT Hazmat Compliance Automation (49 CFR \u00a7171-180)',\n    body: 'Your DOT \u00a7171.15 1-hour telephonic NRC reporting pipeline, annual training reminders, and incident notification workflows are ready. Setup guide: [LINK]'\n  },\n  'LOGISTICS_STARTUP': {\n    subject: 'Welcome \u2014 Quick Start Guide',\n    body: 'Your automation stack is live. Connect your first data source and run your first workflow in 15 minutes: [LINK]'\n  }\n};\nconst result = [];\nfor (const item of $input.all()) {\n  const tier = item.json.customer_tier || 'LOGISTICS_STARTUP';\n  const flags = (item.json.compliance_flags || '').split(',');\n  const t = tiers[tier] || tiers['LOGISTICS_STARTUP'];\n  result.push({ json: { ...item.json, email_subject: t.subject, email_body: t.body, has_eld: flags.includes('FMCSA_CARRIER_ELD'), has_isf: flags.includes('CBP_ISF_FILER'), day0_sent: false } });\n}\nreturn result;"
      },
      "name": "Classify Tier + Flags",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        650,
        300
      ],
      "id": "n3"
    },
    {
      "parameters": {
        "fromEmail": "onboarding@yourplatform.com",
        "toEmail": "={{ $json.email }}",
        "subject": "={{ $json.email_subject }}",
        "message": "={{ $json.email_body }}"
      },
      "name": "Gmail Day0 Welcome",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 2,
      "position": [
        850,
        300
      ],
      "id": "n4"
    },
    {
      "parameters": {
        "unit": "days",
        "amount": 3
      },
      "name": "Wait 3 Days",
      "type": "n8n-nodes-base.wait",
      "typeVersion": 1,
      "position": [
        1050,
        300
      ],
      "id": "n5"
    },
    {
      "parameters": {
        "fromEmail": "onboarding@yourplatform.com",
        "toEmail": "={{ $json.email }}",
        "subject": "Day 3: Top integrations for {{ $json.customer_tier }} customers",
        "message": "Here are the 3 integrations our {{ $json.customer_tier }} customers activate in their first 72 hours. [INTEGRATION GUIDE LINK]"
      },
      "name": "Gmail Day3 Integration Tips",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 2,
      "position": [
        1250,
        300
      ],
      "id": "n6"
    },
    {
      "parameters": {
        "unit": "days",
        "amount": 4
      },
      "name": "Wait 4 Days",
      "type": "n8n-nodes-base.wait",
      "typeVersion": 1,
      "position": [
        1450,
        300
      ],
      "id": "n7"
    },
    {
      "parameters": {
        "fromEmail": "onboarding@yourplatform.com",
        "toEmail": "={{ $json.email }}",
        "subject": "Day 7: Your first compliance workflow is live",
        "message": "Your {{ $json.customer_tier }} compliance automation is active. Here is how to configure your first regulatory deadline alert: [WORKFLOW GUIDE LINK]"
      },
      "name": "Gmail Day7 First Workflow",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 2,
      "position": [
        1650,
        300
      ],
      "id": "n8"
    },
    {
      "parameters": {
        "operation": "appendOrUpdate",
        "sheetId": {
          "__rl": true,
          "value": "YOUR_SHEET_ID",
          "mode": "id"
        },
        "range": "onboarding_log!A:D",
        "columns": {
          "mappingMode": "defineBelow",
          "value": {
            "customer_id": "={{ $json.customer_id }}",
            "onboarding_complete": true,
            "completed_at": "={{ $now.toISO() }}"
          }
        }
      },
      "name": "Sheets Mark Complete",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        1850,
        300
      ],
      "id": "n9"
    }
  ],
  "connections": {
    "Schedule Trigger": {
      "main": [
        [
          {
            "node": "Get New Signups",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Get New Signups": {
      "main": [
        [
          {
            "node": "Classify Tier + Flags",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Tier + Flags": {
      "main": [
        [
          {
            "node": "Gmail Day0 Welcome",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Gmail Day0 Welcome": {
      "main": [
        [
          {
            "node": "Wait 3 Days",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Wait 3 Days": {
      "main": [
        [
          {
            "node": "Gmail Day3 Integration Tips",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Gmail Day3 Integration Tips": {
      "main": [
        [
          {
            "node": "Wait 4 Days",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Wait 4 Days": {
      "main": [
        [
          {
            "node": "Gmail Day7 First Workflow",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Gmail Day7 First Workflow": {
      "main": [
        [
          {
            "node": "Sheets Mark Complete",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  },
  "active": false,
  "settings": {},
  "id": "wf1"
}
Enter fullscreen mode Exit fullscreen mode

What this workflow does:

  • Reads new signups from your Google Sheet, classifies by customer_tier and compliance_flags
  • Day 0 email is tier-specific — FMCSA_CARRIER_ELD customers get ELD §395.22 data residency briefing; CUSTOMS_BROKERAGE gets C-TPAT context
  • Day 3 email sends integration-specific tips for the customer tier
  • Day 7 email introduces the customer's first compliance workflow guide
  • Marks completion in Sheets so the sequence does not re-trigger

2. CBP/FMCSA/FDA/TSA/C-TPAT Compliance Deadline Tracker

12 deadline types covering the full CBP/FMCSA/FDA/TSA/C-TPAT/DOT/ITAR regulatory stack. The fastest clock is CBP_ISF_24H_PRE_VESSEL_LOADING — 24 hours before vessel loading with no grace period. FMCSA_ELD_RECORDS_6_MONTHS and FDA_FSVP_ANNUAL_SUPPLIER_VERIFICATION drive OVERDUE/CRITICAL/URGENT classification.

12 deadline types: CBP_ISF_24H_PRE_VESSEL_LOADING / FMCSA_ELD_RECORDS_6_MONTHS / FDA_FSVP_ANNUAL_SUPPLIER_VERIFICATION / C_TPAT_ANNUAL_ASSESSMENT / TSA_INDIRECT_AIR_CARRIER_SECURITY_PROGRAM / CBP_ENTRY_LIQUIDATION_4_YEARS / DOT_HAZMAT_TRAINING_ANNUAL / FMCSA_DRUG_ALCOHOL_TESTING_ANNUAL / FDA_FOREIGN_SUPPLIER_AUDIT / C_TPAT_SECURITY_PROFILE_UPDATE / ITAR_EXPORT_LICENSE_RENEWAL / SOC2_TYPE2_RENEWAL

Workflow: Schedule (daily 7AM weekdays) → Google Sheets (compliance_deadlines) → Code (OVERDUE/IMMEDIATE/CRITICAL/URGENT/WARNING/NOTICE classification by deadline_type) → IF (has urgent) → Slack #regulatory-ops + Gmail owner

{
  "name": "LogisticsTech CBP/FMCSA/FDA/TSA/C-TPAT Compliance Deadline Tracker",
  "nodes": [
    {
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "cronExpression",
              "expression": "0 7 * * 1-5"
            }
          ]
        }
      },
      "name": "Daily 7AM Weekdays",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "id": "n1"
    },
    {
      "parameters": {
        "operation": "getAll",
        "sheetId": {
          "__rl": true,
          "value": "YOUR_SHEET_ID",
          "mode": "id"
        },
        "range": "compliance_deadlines!A:H",
        "options": {
          "returnAllMatches": true
        }
      },
      "name": "Get Deadlines Sheet",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        450,
        300
      ],
      "id": "n2"
    },
    {
      "parameters": {
        "jsCode": "const today = new Date();\nconst deadlineTypes = {\n  'CBP_ISF_24H_PRE_VESSEL_LOADING': { urgency: 'IMMEDIATE', clock: '24h before vessel loading (19 CFR \u00a7149.3) \u2014 $5,000/day, no grace period' },\n  'FMCSA_ELD_RECORDS_6_MONTHS': { urgency: 'CRITICAL', clock: '6 months retention (49 CFR \u00a7395.22(i))' },\n  'FDA_FSVP_ANNUAL_SUPPLIER_VERIFICATION': { urgency: 'URGENT', clock: 'Annual (21 CFR \u00a71.505) \u2014 DWPE automatic detention if lapsed' },\n  'C_TPAT_ANNUAL_ASSESSMENT': { urgency: 'URGENT', clock: 'Annual C-TPAT security profile update \u2014 status suspended if missed' },\n  'TSA_INDIRECT_AIR_CARRIER_SECURITY_PROGRAM': { urgency: 'CRITICAL', clock: 'Annual renewal (49 CFR \u00a71548.5) \u2014 cargo screening authority revoked' },\n  'CBP_ENTRY_LIQUIDATION_4_YEARS': { urgency: 'WARNING', clock: '4-year statute (19 USC \u00a71514) \u2014 protest rights expire' },\n  'DOT_HAZMAT_TRAINING_ANNUAL': { urgency: 'URGENT', clock: 'Annual recurrent (49 CFR \u00a7172.704(c)(2)) \u2014 operational shutdown if lapsed' },\n  'FMCSA_DRUG_ALCOHOL_TESTING_ANNUAL': { urgency: 'URGENT', clock: 'Annual FMCSA \u00a7382.305 random rate \u2014 DOT audit finding if rate unmet' },\n  'FDA_FOREIGN_SUPPLIER_AUDIT': { urgency: 'WARNING', clock: '1-3 year FSMA FSVP audit cycle (21 CFR \u00a71.506) \u2014 DWPE if overdue' },\n  'C_TPAT_SECURITY_PROFILE_UPDATE': { urgency: 'WARNING', clock: 'Annual update required \u2014 Tier 2/3 status review triggered' },\n  'ITAR_EXPORT_LICENSE_RENEWAL': { urgency: 'CRITICAL', clock': '4-year DSP-5 (22 CFR \u00a7123.12) \u2014 $1.3M/violation civil penalty if expired' },\n  'SOC2_TYPE2_RENEWAL': { urgency: 'NOTICE', clock: 'Annual audit cycle' }\n};\nconst alerts = [];\nfor (const item of $input.all()) {\n  const due = new Date(item.json.due_date);\n  const daysLeft = Math.ceil((due - today) / 86400000);\n  const dtype = item.json.deadline_type;\n  const meta = deadlineTypes[dtype] || { urgency: 'NOTICE', clock: 'Standard deadline' };\n  let severity = 'NOTICE';\n  if (daysLeft < 0) severity = 'OVERDUE';\n  else if (daysLeft <= 1) severity = 'IMMEDIATE';\n  else if (daysLeft <= 7) severity = 'CRITICAL';\n  else if (daysLeft <= 21) severity = 'URGENT';\n  else if (daysLeft <= 45) severity = 'WARNING';\n  if (['OVERDUE','IMMEDIATE','CRITICAL','URGENT'].includes(severity)) {\n    alerts.push({ json: { ...item.json, days_left: daysLeft, severity, clock_note: meta.clock } });\n  }\n}\nreturn alerts.length > 0 ? alerts : [{ json: { no_urgent_deadlines: true } }];"
      },
      "name": "Classify Deadlines",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        650,
        300
      ],
      "id": "n3"
    },
    {
      "parameters": {
        "conditions": {
          "options": {
            "leftValue": "={{ $json.no_urgent_deadlines }}",
            "operation": "notEqual",
            "rightValue": true
          }
        }
      },
      "name": "Has Urgent Items",
      "type": "n8n-nodes-base.if",
      "typeVersion": 2,
      "position": [
        850,
        300
      ],
      "id": "n4"
    },
    {
      "parameters": {
        "authentication": "oAuth2",
        "resource": "message",
        "operation": "post",
        "channel": "#regulatory-ops",
        "text": ":rotating_light: *{{ $json.severity }}* \u2014 {{ $json.deadline_type }}\nOwner: {{ $json.owner_email }}\nDue: {{ $json.due_date }} ({{ $json.days_left }} days)\nClock: {{ $json.clock_note }}\nCustomer: {{ $json.customer_name }}"
      },
      "name": "Slack Regulatory Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        1050,
        200
      ],
      "id": "n5"
    },
    {
      "parameters": {
        "fromEmail": "compliance@yourplatform.com",
        "toEmail": "={{ $json.owner_email }}",
        "subject": "={{ $json.severity }}: {{ $json.deadline_type }} due in {{ $json.days_left }} days",
        "message": "Compliance deadline alert for {{ $json.customer_name }}:\n\nDeadline: {{ $json.deadline_type }}\nDue date: {{ $json.due_date }}\nDays remaining: {{ $json.days_left }}\nRegulatory clock: {{ $json.clock_note }}\n\nAction required immediately."
      },
      "name": "Gmail Owner Alert",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 2,
      "position": [
        1050,
        400
      ],
      "id": "n6"
    }
  ],
  "connections": {
    "Daily 7AM Weekdays": {
      "main": [
        [
          {
            "node": "Get Deadlines Sheet",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Get Deadlines Sheet": {
      "main": [
        [
          {
            "node": "Classify Deadlines",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Deadlines": {
      "main": [
        [
          {
            "node": "Has Urgent Items",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Has Urgent Items": {
      "main": [
        [
          {
            "node": "Slack Regulatory Alert",
            "type": "main",
            "index": 0
          },
          {
            "node": "Gmail Owner Alert",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  },
  "active": false,
  "settings": {},
  "id": "wf2"
}
Enter fullscreen mode Exit fullscreen mode

What this workflow does:

  • Checks your compliance_deadlines sheet every weekday morning at 7AM
  • Classifies each deadline as OVERDUE / IMMEDIATE / CRITICAL / URGENT / WARNING / NOTICE based on days remaining
  • CBP_ISF_24H_PRE_VESSEL_LOADING: IMMEDIATE = same-day $5K/day exposure
  • ITAR_EXPORT_LICENSE_RENEWAL: CRITICAL at ≤7 days = $1.3M/violation civil penalty exposure
  • Fires Slack #regulatory-ops alert + owner email for OVERDUE/IMMEDIATE/CRITICAL/URGENT items only

3. LogisticsTech API Health Monitor (CBP/FMCSA/FDA/TSA/C-TPAT)

5-endpoint health monitor checking your CBP ACE portal integration, FMCSA DataQs ELD API, FDA PREDICT import risk API, TSA air cargo screening API, and C-TPAT portal API every 5 minutes. DOWN or DEGRADED status on the CBP ACE endpoint during a filing window is an immediate ISF late-filing exposure event.

5 endpoints monitored:

  • cbp_ace_portal_api — CBP ISF 10+2 submission (19 CFR §149.3): down during filing window = $5K/day exposure
  • fmcsa_dataqs_api — FMCSA DataQs ELD records (§395.22): down = driver HOS inaccessible, disqualification exposure
  • fda_predict_api — FDA PREDICT import risk scoring (21 CFR §1.908): down = FSVP verification blocked
  • tsa_cargo_api — TSA air cargo screening (49 CFR §1548): down = cargo hold and carrier penalty
  • c_tpat_portal_api — C-TPAT security profile sync: down = security profile update blocked, Tier status review triggered 
{
  "name": "LogisticsTech API Health Monitor (CBP/FMCSA/FDA/TSA/C-TPAT)",
  "nodes": [
    {
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "cronExpression",
              "expression": "*/5 * * * *"
            }
          ]
        }
      },
      "name": "Every 5 Minutes",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        500
      ],
      "id": "n1"
    },
    {
      "parameters": {
        "url": "https://your-platform.com/api/health/cbp-ace",
        "method": "GET",
        "options": {
          "timeout": 10000
        }
      },
      "name": "CBP ACE Portal API",
      "type": "n8n-nodes-base.httpRequest",
      "typeVersion": 4,
      "position": [
        450,
        200
      ],
      "id": "n2"
    },
    {
      "parameters": {
        "url": "https://your-platform.com/api/health/fmcsa-dataqs",
        "method": "GET",
        "options": {
          "timeout": 10000
        }
      },
      "name": "FMCSA DataQs ELD API",
      "type": "n8n-nodes-base.httpRequest",
      "typeVersion": 4,
      "position": [
        450,
        350
      ],
      "id": "n3"
    },
    {
      "parameters": {
        "url": "https://your-platform.com/api/health/fda-predict",
        "method": "GET",
        "options": {
          "timeout": 10000
        }
      },
      "name": "FDA PREDICT Import Risk API",
      "type": "n8n-nodes-base.httpRequest",
      "typeVersion": 4,
      "position": [
        450,
        500
      ],
      "id": "n4"
    },
    {
      "parameters": {
        "url": "https://your-platform.com/api/health/tsa-cargo",
        "method": "GET",
        "options": {
          "timeout": 10000
        }
      },
      "name": "TSA Air Cargo Screening API",
      "type": "n8n-nodes-base.httpRequest",
      "typeVersion": 4,
      "position": [
        450,
        650
      ],
      "id": "n5"
    },
    {
      "parameters": {
        "url": "https://your-platform.com/api/health/c-tpat-portal",
        "method": "GET",
        "options": {
          "timeout": 10000
        }
      },
      "name": "C-TPAT Portal API",
      "type": "n8n-nodes-base.httpRequest",
      "typeVersion": 4,
      "position": [
        450,
        800
      ],
      "id": "n6"
    },
    {
      "parameters": {
        "mode": "multiplex"
      },
      "name": "Merge All Results",
      "type": "n8n-nodes-base.merge",
      "typeVersion": 3,
      "position": [
        700,
        500
      ],
      "id": "n7"
    },
    {
      "parameters": {
        "jsCode": "const endpointMeta = {\n  'CBP ACE Portal API': { reg: 'CBP ISF 10+2 (19 CFR \u00a7149.3)', impact: '$5,000/day ISF late filing if ACE down during filing window' },\n  'FMCSA DataQs ELD API': { reg: 'FMCSA \u00a7395.22 ELD', impact: 'Driver HOS records inaccessible \u2014 FMCSA \u00a7391.15 disqualification exposure' },\n  'FDA PREDICT Import Risk API': { reg: 'FDA FSMA FSVP (21 CFR \u00a71.908)', impact: 'Import risk scoring unavailable \u2014 DWPE automatic detention risk' },\n  'TSA Air Cargo Screening API': { reg: 'TSA IAC (49 CFR \u00a71548)', impact: 'Air cargo screening halted \u2014 cargo hold and carrier penalty' },\n  'C-TPAT Portal API': { reg: 'C-TPAT CBP Partnership', impact: 'Security profile sync fails \u2014 C-TPAT status review triggered' }\n};\nconst alerts = [];\nfor (const item of $input.all()) {\n  const nodeName = item.pairedItem?.node || 'Unknown';\n  const statusCode = item.json?.statusCode || 0;\n  const responseTime = item.json?.headers?.['x-response-time'] || 0;\n  const meta = endpointMeta[nodeName] || { reg: 'Unknown', impact: 'Service unavailable' };\n  let status = 'HEALTHY';\n  if (statusCode !== 200) status = 'DOWN';\n  else if (responseTime > 3000) status = 'DEGRADED';\n  if (status !== 'HEALTHY') {\n    alerts.push({ json: { endpoint: nodeName, status, status_code: statusCode, response_time_ms: responseTime, regulation: meta.reg, compliance_impact: meta.impact, detected_at: new Date().toISOString() } });\n  }\n}\nreturn alerts.length > 0 ? alerts : [{ json: { all_healthy: true, checked_at: new Date().toISOString() } }];"
      },
      "name": "Classify Health",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        900,
        500
      ],
      "id": "n8"
    },
    {
      "parameters": {
        "conditions": {
          "options": {
            "leftValue": "={{ $json.all_healthy }}",
            "operation": "notEqual",
            "rightValue": true
          }
        }
      },
      "name": "Has Alerts",
      "type": "n8n-nodes-base.if",
      "typeVersion": 2,
      "position": [
        1100,
        500
      ],
      "id": "n9"
    },
    {
      "parameters": {
        "authentication": "oAuth2",
        "resource": "message",
        "operation": "post",
        "channel": "#platform-ops",
        "text": ":red_circle: *{{ $json.status }}* \u2014 {{ $json.endpoint }}\nRegulation: {{ $json.regulation }}\nCompliance impact: {{ $json.compliance_impact }}\nStatus code: {{ $json.status_code }}\nDetected: {{ $json.detected_at }}"
      },
      "name": "Slack Platform Ops Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        1300,
        400
      ],
      "id": "n10"
    },
    {
      "parameters": {
        "operation": "append",
        "sheetId": {
          "__rl": true,
          "value": "YOUR_SHEET_ID",
          "mode": "id"
        },
        "range": "incident_log!A:F",
        "columns": {
          "mappingMode": "defineBelow",
          "value": {
            "endpoint": "={{ $json.endpoint }}",
            "status": "={{ $json.status }}",
            "regulation": "={{ $json.regulation }}",
            "compliance_impact": "={{ $json.compliance_impact }}",
            "detected_at": "={{ $json.detected_at }}"
          }
        }
      },
      "name": "Sheets Incident Log",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        1300,
        600
      ],
      "id": "n11"
    }
  ],
  "connections": {
    "Every 5 Minutes": {
      "main": [
        [
          {
            "node": "CBP ACE Portal API",
            "type": "main",
            "index": 0
          },
          {
            "node": "FMCSA DataQs ELD API",
            "type": "main",
            "index": 0
          },
          {
            "node": "FDA PREDICT Import Risk API",
            "type": "main",
            "index": 0
          },
          {
            "node": "TSA Air Cargo Screening API",
            "type": "main",
            "index": 0
          },
          {
            "node": "C-TPAT Portal API",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "CBP ACE Portal API": {
      "main": [
        [
          {
            "node": "Merge All Results",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "FMCSA DataQs ELD API": {
      "main": [
        [
          {
            "node": "Merge All Results",
            "type": "main",
            "index": 1
          }
        ]
      ]
    },
    "FDA PREDICT Import Risk API": {
      "main": [
        [
          {
            "node": "Merge All Results",
            "type": "main",
            "index": 2
          }
        ]
      ]
    },
    "TSA Air Cargo Screening API": {
      "main": [
        [
          {
            "node": "Merge All Results",
            "type": "main",
            "index": 3
          }
        ]
      ]
    },
    "C-TPAT Portal API": {
      "main": [
        [
          {
            "node": "Merge All Results",
            "type": "main",
            "index": 4
          }
        ]
      ]
    },
    "Merge All Results": {
      "main": [
        [
          {
            "node": "Classify Health",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Health": {
      "main": [
        [
          {
            "node": "Has Alerts",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Has Alerts": {
      "main": [
        [
          {
            "node": "Slack Platform Ops Alert",
            "type": "main",
            "index": 0
          },
          {
            "node": "Sheets Incident Log",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  },
  "active": false,
  "settings": {},
  "id": "wf3"
}
Enter fullscreen mode Exit fullscreen mode

What this workflow does:

  • Pings all 5 endpoints in parallel every 5 minutes via HTTP Request nodes
  • Code node classifies each as HEALTHY / DEGRADED (response_time > 3s) / DOWN (non-200)
  • Annotates each alert with the specific regulation and compliance impact
  • Fires Slack #platform-ops alert immediately for any non-HEALTHY endpoint
  • Logs all incidents to Sheets for SLA reporting

4. Supply Chain Regulatory Incident Pipeline

8-type incident classification with regulatory clocks pre-loaded. CBP_ISF_LATE_FILING triggers immediately (CRITICAL, $5,000/day, no grace period). DOT_HAZMAT_INCIDENT has the hardest clock: 1-hour telephonic NRC notification at 1-800-424-8802, with written §171.16 report due in 30 days. ITAR_UNAUTHORIZED_EXPORT: voluntary disclosure to DDTC within 24 hours reduces criminal exposure.

8 incident types:

  • CBP_ISF_LATE_FILING — IMMEDIATE, $5,000/day (19 CFR §149.3)
  • FMCSA_ELD_DEVICE_MALFUNCTION — 8-day paper log window then §395.34 violation
  • FDA_FSMA_FSVP_IMPORT_REFUSAL — IMMEDIATE DWPE, automatic detention all future shipments from supplier
  • TSA_SECURITY_BREACH_AIR_CARGO — IMMEDIATE, notify TSA within 1 hour (§1544.305)
  • C_TPAT_SECURITY_INCIDENT — 72h CBP C-TPAT partner notification required
  • DOT_HAZMAT_INCIDENT — IMMEDIATE, 1h telephonic NRC (§171.15), written 30d §171.16
  • ITAR_UNAUTHORIZED_EXPORT — 24h voluntary disclosure to DDTC (22 CFR §127.12)
  • GENERAL_SUPPLY_CHAIN_DISRUPTION — SLA-based, no regulatory clock 
{
  "name": "LogisticsTech Supply Chain Regulatory Incident Pipeline",
  "nodes": [
    {
      "parameters": {
        "path": "logistics-incident",
        "responseMode": "responseNode",
        "options": {}
      },
      "name": "Webhook Incident Trigger",
      "type": "n8n-nodes-base.webhook",
      "typeVersion": 2,
      "position": [
        250,
        500
      ],
      "id": "n1"
    },
    {
      "parameters": {
        "jsCode": "const incidentClocks = {\n  'CBP_ISF_LATE_FILING': { severity: 'CRITICAL', clock: 'IMMEDIATE \u2014 $5,000/day 19 CFR \u00a7149.3, no grace period', action: 'File ISF immediately via CBP ACE. Document late reason for penalty mitigation petition.' },\n  'FMCSA_ELD_DEVICE_MALFUNCTION': { severity: 'HIGH', clock: '8-day paper log window then \u00a7395.34 violation', action: 'Switch to paper logs. Notify safety officer. ELD repair must begin within 8 days.' },\n  'FDA_FSMA_FSVP_IMPORT_REFUSAL': { severity: 'CRITICAL', clock: 'IMMEDIATE DWPE \u2014 automatic detention on all future shipments from this supplier', action: 'Initiate DWPE removal petition. Document supplier corrective action.' },\n  'TSA_SECURITY_BREACH_AIR_CARGO': { severity: 'CRITICAL', clock: 'IMMEDIATE TSA \u00a71544.305 \u2014 notify TSA within 1 hour', action: 'Notify TSA TSC immediately. Secure cargo. Document chain of custody.' },\n  'C_TPAT_SECURITY_INCIDENT': { severity: 'HIGH', clock: '72h CBP C-TPAT partner notification required', action: 'Notify CBP via C-TPAT portal within 72h. Update security profile. Initiate corrective action plan.' },\n  'DOT_HAZMAT_INCIDENT': { severity: 'CRITICAL', clock: 'IMMEDIATE 1h telephonic NRC (49 CFR \u00a7171.15) + written within 30 days', action: 'Call NRC immediately: 1-800-424-8802. Document incident details for \u00a7171.16 written report.' },\n  'ITAR_UNAUTHORIZED_EXPORT': { severity: 'CRITICAL', clock: '24h voluntary disclosure to DDTC (22 CFR \u00a7127.12) reduces penalty', action: 'Notify legal immediately. Prepare DDTC voluntary disclosure. Preserve all export records.' },\n  'GENERAL_SUPPLY_CHAIN_DISRUPTION': { severity: 'MEDIUM', clock: 'No regulatory clock \u2014 SLA-based', action: 'Notify account manager. Activate contingency routing if applicable.' }\n};\nconst incident = $input.first().json;\nconst itype = incident.incident_type || 'GENERAL_SUPPLY_CHAIN_DISRUPTION';\nconst meta = incidentClocks[itype] || incidentClocks['GENERAL_SUPPLY_CHAIN_DISRUPTION'];\nreturn [{ json: { ...incident, incident_type: itype, severity: meta.severity, regulatory_clock: meta.clock, required_action: meta.action, received_at: new Date().toISOString() } }];"
      },
      "name": "Classify Incident",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        450,
        500
      ],
      "id": "n2"
    },
    {
      "parameters": {
        "rules": {
          "values": [
            {
              "conditions": {
                "options": {
                  "leftValue": "={{ $json.incident_type }}",
                  "operation": "equals",
                  "rightValue": "CBP_ISF_LATE_FILING"
                }
              }
            },
            {
              "conditions": {
                "options": {
                  "leftValue": "={{ $json.incident_type }}",
                  "operation": "equals",
                  "rightValue": "FMCSA_ELD_DEVICE_MALFUNCTION"
                }
              }
            },
            {
              "conditions": {
                "options": {
                  "leftValue": "={{ $json.incident_type }}",
                  "operation": "equals",
                  "rightValue": "FDA_FSMA_FSVP_IMPORT_REFUSAL"
                }
              }
            },
            {
              "conditions": {
                "options": {
                  "leftValue": "={{ $json.incident_type }}",
                  "operation": "equals",
                  "rightValue": "TSA_SECURITY_BREACH_AIR_CARGO"
                }
              }
            },
            {
              "conditions": {
                "options": {
                  "leftValue": "={{ $json.incident_type }}",
                  "operation": "equals",
                  "rightValue": "C_TPAT_SECURITY_INCIDENT"
                }
              }
            },
            {
              "conditions": {
                "options": {
                  "leftValue": "={{ $json.incident_type }}",
                  "operation": "equals",
                  "rightValue": "DOT_HAZMAT_INCIDENT"
                }
              }
            },
            {
              "conditions": {
                "options": {
                  "leftValue": "={{ $json.incident_type }}",
                  "operation": "equals",
                  "rightValue": "ITAR_UNAUTHORIZED_EXPORT"
                }
              }
            }
          ]
        }
      },
      "name": "Route by Incident Type",
      "type": "n8n-nodes-base.switch",
      "typeVersion": 3,
      "position": [
        650,
        500
      ],
      "id": "n3"
    },
    {
      "parameters": {
        "authentication": "oAuth2",
        "resource": "message",
        "operation": "post",
        "channel": "#compliance-critical",
        "text": ":rotating_light: *CBP ISF LATE FILING* \u2014 {{ $json.customer_name }}\nClock: {{ $json.regulatory_clock }}\nAction: {{ $json.required_action }}\nDetected: {{ $json.received_at }}"
      },
      "name": "Slack ISF Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        900,
        100
      ],
      "id": "n4"
    },
    {
      "parameters": {
        "authentication": "oAuth2",
        "resource": "message",
        "operation": "post",
        "channel": "#safety-ops",
        "text": ":warning: *FMCSA ELD MALFUNCTION* \u2014 {{ $json.customer_name }}\nClock: {{ $json.regulatory_clock }}\nAction: {{ $json.required_action }}"
      },
      "name": "Slack ELD Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        900,
        250
      ],
      "id": "n5"
    },
    {
      "parameters": {
        "authentication": "oAuth2",
        "resource": "message",
        "operation": "post",
        "channel": "#compliance-critical",
        "text": ":rotating_light: *FDA FSVP IMPORT REFUSAL (DWPE)* \u2014 {{ $json.customer_name }}\nClock: {{ $json.regulatory_clock }}\nAction: {{ $json.required_action }}"
      },
      "name": "Slack FDA Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        900,
        400
      ],
      "id": "n6"
    },
    {
      "parameters": {
        "authentication": "oAuth2",
        "resource": "message",
        "operation": "post",
        "channel": "#security-ops",
        "text": ":rotating_light: *TSA SECURITY BREACH \u2014 AIR CARGO* \u2014 {{ $json.customer_name }}\nClock: {{ $json.regulatory_clock }}\nAction: {{ $json.required_action }}"
      },
      "name": "Slack TSA Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        900,
        550
      ],
      "id": "n7"
    },
    {
      "parameters": {
        "authentication": "oAuth2",
        "resource": "message",
        "operation": "post",
        "channel": "#compliance-ops",
        "text": ":warning: *C-TPAT SECURITY INCIDENT* \u2014 {{ $json.customer_name }}\nClock: {{ $json.regulatory_clock }}\nAction: {{ $json.required_action }}"
      },
      "name": "Slack CTPAT Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        900,
        700
      ],
      "id": "n8"
    },
    {
      "parameters": {
        "authentication": "oAuth2",
        "resource": "message",
        "operation": "post",
        "channel": "#compliance-critical",
        "text": ":rotating_light: *DOT HAZMAT INCIDENT \u2014 CALL NRC NOW* \u2014 {{ $json.customer_name }}\nNRC: 1-800-424-8802\nClock: {{ $json.regulatory_clock }}\nAction: {{ $json.required_action }}"
      },
      "name": "Slack Hazmat Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        900,
        850
      ],
      "id": "n9"
    },
    {
      "parameters": {
        "authentication": "oAuth2",
        "resource": "message",
        "operation": "post",
        "channel": "#legal-compliance",
        "text": ":rotating_light: *ITAR UNAUTHORIZED EXPORT* \u2014 {{ $json.customer_name }}\nClock: {{ $json.regulatory_clock }}\nAction: {{ $json.required_action }}"
      },
      "name": "Slack ITAR Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        900,
        1000
      ],
      "id": "n10"
    },
    {
      "parameters": {
        "operation": "append",
        "sheetId": {
          "__rl": true,
          "value": "YOUR_SHEET_ID",
          "mode": "id"
        },
        "range": "incident_log!A:G",
        "columns": {
          "mappingMode": "defineBelow",
          "value": {
            "incident_type": "={{ $json.incident_type }}",
            "severity": "={{ $json.severity }}",
            "customer_name": "={{ $json.customer_name }}",
            "regulatory_clock": "={{ $json.regulatory_clock }}",
            "required_action": "={{ $json.required_action }}",
            "received_at": "={{ $json.received_at }}"
          }
        }
      },
      "name": "Sheets Incident Log",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        1100,
        500
      ],
      "id": "n11"
    }
  ],
  "connections": {
    "Webhook Incident Trigger": {
      "main": [
        [
          {
            "node": "Classify Incident",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Incident": {
      "main": [
        [
          {
            "node": "Route by Incident Type",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Route by Incident Type": {
      "main": [
        [
          {
            "node": "Slack ISF Alert",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Slack ELD Alert",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Slack FDA Alert",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Slack TSA Alert",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Slack CTPAT Alert",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Slack Hazmat Alert",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Slack ITAR Alert",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Slack ISF Alert": {
      "main": [
        [
          {
            "node": "Sheets Incident Log",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  },
  "active": false,
  "settings": {},
  "id": "wf4"
}
Enter fullscreen mode Exit fullscreen mode

What this workflow does:

  • Accepts incident events via webhook (your platform posts to this endpoint)
  • Code node classifies incident_type and pre-loads the regulatory clock and required action
  • Switch node routes to the correct Slack channel per incident type
  • CBP ISF late filings go to #compliance-critical; DOT hazmat goes to #compliance-critical with NRC phone number in the alert
  • All incidents logged to Sheets incident_log for audit trail

5. Weekly LogisticsTech Platform KPI Dashboard

Monday morning KPI email to the CEO with BCC to CISO. Tracks active customers, MRR, active shipments, CBP ISF compliance percentage, FMCSA ELD violations in the past 7 days, FDA FSVP suppliers verified, C-TPAT active partners, and open compliance incidents. WoW comparisons via $getWorkflowStaticData.

KPIs tracked: active_customers / mrr_usd / active_shipments / cbp_isf_compliance_pct / fmcsa_eld_violations_7d / fda_fsvp_suppliers_verified / c_tpat_active_partners / open_incidents

{
  "name": "LogisticsTech Weekly Platform KPI Dashboard",
  "nodes": [
    {
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "cronExpression",
              "expression": "0 8 * * 1"
            }
          ]
        }
      },
      "name": "Monday 8AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        400
      ],
      "id": "n1"
    },
    {
      "parameters": {
        "operation": "getAll",
        "sheetId": {
          "__rl": true,
          "value": "YOUR_SHEET_ID",
          "mode": "id"
        },
        "range": "platform_metrics!A:L",
        "options": {
          "returnAllMatches": true
        }
      },
      "name": "Platform Metrics Sheet",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        450,
        300
      ],
      "id": "n2"
    },
    {
      "parameters": {
        "operation": "getAll",
        "sheetId": {
          "__rl": true,
          "value": "YOUR_SHEET_ID",
          "mode": "id"
        },
        "range": "compliance_events!A:G",
        "options": {
          "returnAllMatches": true
        }
      },
      "name": "Compliance Events Sheet",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        450,
        500
      ],
      "id": "n3"
    },
    {
      "parameters": {
        "mode": "append",
        "output": "single"
      },
      "name": "Merge Metrics",
      "type": "n8n-nodes-base.merge",
      "typeVersion": 3,
      "position": [
        650,
        400
      ],
      "id": "n4"
    },
    {
      "parameters": {
        "jsCode": "const prev = $getWorkflowStaticData('global');\nconst now = new Date().toISOString();\nconst rows = $input.all().map(i => i.json);\nconst metrics = rows.filter(r => r.metric_type === 'platform');\nconst compliance = rows.filter(r => r.metric_type === 'compliance');\nconst latestMetrics = metrics[metrics.length - 1] || {};\nconst prevMetrics = prev.last_metrics || {};\nconst pctChange = (curr, prev) => prev ? (((curr - prev) / prev) * 100).toFixed(1) + '%' : 'N/A';\nconst kpis = {\n  active_customers: latestMetrics.active_customers || 0,\n  mrr_usd: latestMetrics.mrr_usd || 0,\n  active_shipments: latestMetrics.active_shipments || 0,\n  cbp_isf_compliance_pct: latestMetrics.cbp_isf_compliance_pct || 0,\n  fmcsa_eld_violations: compliance.filter(e => e.event_type === 'FMCSA_ELD_VIOLATION').length,\n  fda_fsvp_suppliers_verified: latestMetrics.fda_fsvp_suppliers_verified || 0,\n  c_tpat_active_partners: latestMetrics.c_tpat_active_partners || 0,\n  open_incidents: compliance.filter(e => e.status === 'open').length,\n  mrr_wow: pctChange(latestMetrics.mrr_usd, prevMetrics.mrr_usd),\n  customers_wow: pctChange(latestMetrics.active_customers, prevMetrics.active_customers)\n};\nprev.last_metrics = latestMetrics;\n$setWorkflowStaticData('global', prev);\nconst html = `<h2>LogisticsTech Platform KPI \u2014 Week of ${new Date().toDateString()}</h2>\n<table border='1' cellpadding='6'>\n<tr><th>Metric</th><th>Value</th><th>WoW Change</th></tr>\n<tr><td>Active Customers</td><td>${kpis.active_customers}</td><td>${kpis.customers_wow}</td></tr>\n<tr><td>MRR (USD)</td><td>$${kpis.mrr_usd.toLocaleString()}</td><td>${kpis.mrr_wow}</td></tr>\n<tr><td>Active Shipments</td><td>${kpis.active_shipments}</td><td>-</td></tr>\n<tr><td>CBP ISF Compliance %</td><td>${kpis.cbp_isf_compliance_pct}%</td><td>-</td></tr>\n<tr><td>FMCSA ELD Violations (7d)</td><td>${kpis.fmcsa_eld_violations}</td><td>-</td></tr>\n<tr><td>FDA FSVP Suppliers Verified</td><td>${kpis.fda_fsvp_suppliers_verified}</td><td>-</td></tr>\n<tr><td>C-TPAT Active Partners</td><td>${kpis.c_tpat_active_partners}</td><td>-</td></tr>\n<tr><td>Open Compliance Incidents</td><td>${kpis.open_incidents}</td><td>-</td></tr>\n</table>`;\nreturn [{ json: { ...kpis, html_report: html, generated_at: now } }];"
      },
      "name": "Build KPI Report",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        850,
        400
      ],
      "id": "n5"
    },
    {
      "parameters": {
        "fromEmail": "reports@yourplatform.com",
        "toEmail": "ceo@yourplatform.com",
        "subject": "LogisticsTech Weekly KPI \u2014 {{ $json.active_customers }} customers, ${{ $json.mrr_usd.toLocaleString() }} MRR",
        "message": "={{ $json.html_report }}",
        "options": {
          "bcc": "ciso@yourplatform.com",
          "isHtml": true
        }
      },
      "name": "Gmail CEO Report",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 2,
      "position": [
        1050,
        300
      ],
      "id": "n6"
    },
    {
      "parameters": {
        "authentication": "oAuth2",
        "resource": "message",
        "operation": "post",
        "channel": "#executive",
        "text": "Weekly KPI: {{ $json.active_customers }} customers | ${{ $json.mrr_usd }} MRR ({{ $json.mrr_wow }} WoW) | ISF {{ $json.cbp_isf_compliance_pct }}% compliant | {{ $json.open_incidents }} open incidents"
      },
      "name": "Slack Executive Summary",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        1050,
        500
      ],
      "id": "n7"
    }
  ],
  "connections": {
    "Monday 8AM": {
      "main": [
        [
          {
            "node": "Platform Metrics Sheet",
            "type": "main",
            "index": 0
          },
          {
            "node": "Compliance Events Sheet",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Platform Metrics Sheet": {
      "main": [
        [
          {
            "node": "Merge Metrics",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Compliance Events Sheet": {
      "main": [
        [
          {
            "node": "Merge Metrics",
            "type": "main",
            "index": 1
          }
        ]
      ]
    },
    "Merge Metrics": {
      "main": [
        [
          {
            "node": "Build KPI Report",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Build KPI Report": {
      "main": [
        [
          {
            "node": "Gmail CEO Report",
            "type": "main",
            "index": 0
          },
          {
            "node": "Slack Executive Summary",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  },
  "active": false,
  "settings": {},
  "id": "wf5"
}
Enter fullscreen mode Exit fullscreen mode

What this workflow does:

  • Runs every Monday at 8AM, pulling from platform_metrics and compliance_events sheets
  • Merges both data sources, calculates WoW percentage changes using $getWorkflowStaticData
  • Generates an HTML table with all KPIs and compliance indicators
  • Emails the CEO with CISO on BCC, and posts a one-liner to #executive Slack channel

Why LogisticsTech SaaS Vendors Self-Host n8n

Regulation Cloud iPaaS Risk Self-Hosted n8n Advantage
FMCSA §395.22 ELD Driver HOS records route through external cloud system — creates §391.15 disqualification exposure outside carrier control n8n self-hosted inside carrier's FMCSA-registered ELD system boundary — HOS data never leaves authorized perimeter
CBP 19 CFR §149 ISF ISF filing data in cloud iPaaS = supply chain security data in third-party hands — C-TPAT Tier 2/3 partners flag this in security assessments n8n self-hosted — CBP ACE filing data stays within your customs broker's controlled infrastructure
FDA FSMA FSVP 21 CFR §1.908 FSVP supplier verification records in cloud = audit trail disruption — FSMA §1.510 requires importers to maintain records accessible for FDA inspection n8n on-prem — FSVP audit trail stays in your Postgres, accessible directly for FDA inspection
TSA 49 CFR §1548 Air cargo screening data in cloud iPaaS = unauthorized third-party access to security-sensitive information n8n self-hosted — TSA screening workflows inside your Certified Cargo Screening Facility perimeter
DOT 49 CFR §171.15 Hazmat Hazmat incident data in cloud = potential disclosure of incident details before NRC notification n8n self-hosted — incident pipeline runs inside your boundary, NRC notification triggered without data leaving perimeter

n8n vs. Zapier / Make / Workato for LogisticsTech Compliance

Capability n8n (self-hosted) Zapier / Make Workato
FMCSA ELD data residency ELD data stays in authorized boundary HOS data transits cloud — §391.15 exposure Cloud only — same exposure
CBP ISF filing automation Direct ACE integration inside perimeter ACE data in cloud — C-TPAT security finding Cloud only
FDA FSVP audit trail On-prem Postgres — FDA inspection-ready Cloud audit trail — §1.510 access disruption Cloud only
DOT hazmat incident speed Webhook to NRC alert in <1 min Cloud latency under load Same latency risk
Multi-regulation clock tracking 12 deadline types in one workflow One Zap per clock — no shared state One recipe per clock
Cost at scale Fixed server cost, unlimited executions Per-task pricing — costs spike with shipment volume Enterprise licensing — $$$

Frequently Asked Questions

Q: Our customers' FMCSA drivers are asking whether our platform keeps their HOS data in an FMCSA-registered ELD. How does self-hosted n8n help?

A: FMCSA §395.22(i) requires that ELD records be accessible on the ELD or via a portal maintained by the registered ELD provider. Routing HOS data through a cloud iPaaS means the records pass through a system that is NOT the registered ELD — creating §391.15 disqualification exposure for drivers outside the carrier's control. Self-hosted n8n keeps all HOS-adjacent automation inside your ELD system boundary.

Q: Our freight brokerage customers keep asking why their ISF automation workflow needs to run on-premise. Can we explain the CBP risk?

A: CBP ISF 10+2 (19 CFR §149.3) requires the filing to reach CBP ACE 24 hours before vessel loading. Missing the window costs $5,000 per day with no grace period. When ISF automation runs in a cloud iPaaS, any cloud outage or latency spike during the filing window creates a direct $5K/day exposure. Self-hosted n8n gives you deterministic control over the filing clock.

Q: One of our C-TPAT Tier 3 customers flagged our cloud iPaaS usage as a supply chain security concern. What is the architecture response?

A: C-TPAT Tier 2 and Tier 3 partners undergo CBP security validation that includes reviewing how supply chain data flows through their technology stack. A cloud iPaaS routing customs entry data or C-TPAT security profile information is a finding. Self-hosted n8n inside your C-TPAT partner's network perimeter eliminates the external data flow from the security profile review.

Q: Our cold chain customers handle FDA FSMA FSVP supplier verification. What is the documentation risk with cloud automation?

A: FDA FSMA §1.510 requires importers to maintain FSVP records and make them available for FDA inspection within 24 hours. When FSVP supplier verification data flows through a cloud iPaaS, the audit trail is split across the importer's systems and a third-party cloud — disrupting the single continuous record FDA expects. Self-hosted n8n keeps the entire FSVP workflow and its audit trail in one Postgres instance.

Q: Our hazmat compliance customers need DOT §171.15 telephonic NRC notification within 1 hour of an incident. Can n8n reliably hit that clock?

A: Yes. The incident pipeline webhook triggers immediately on event receipt, classifies the incident type, and fires the Slack alert with the NRC phone number (1-800-424-8802) and the regulatory clock within seconds. Cloud iPaaS tools introduce latency under load and outage risk during precisely the high-pressure moments when incident notifications must fire. Self-hosted n8n inside your platform boundary has no external dependency for that critical notification path.

Get These Workflows

All 5 workflows — plus 9 more for freight, customs, cold chain, and hazmat operations — are available as import-ready JSON at stripeai.gumroad.com.

The complete LogisticsTech & Supply Chain SaaS automation bundle includes:

  • Tier-segmented onboarding drip (7 tiers, 7 compliance flags)
  • Full 12-type CBP/FMCSA/FDA/TSA/C-TPAT/DOT/ITAR deadline tracker
  • 5-endpoint API health monitor with regulation-specific compliance impact annotations
  • 8-type regulatory incident pipeline with pre-loaded NRC/TSA/CBP/DDTC notification flows
  • Weekly KPI dashboard (CBP ISF compliance %, FMCSA ELD violations, FDA FSVP status, C-TPAT partners)

Drop the JSON into n8n, connect your Sheets and Slack, and your first compliance deadline alert fires within 10 minutes.

Top comments (0)