Export Administration Regulations (EAR) Compliance

Trade, Export Controls & Sanctions

Export Administration Regulations (15 CFR Parts 730–774)

3,163 Entities on the Entity List. 10 CCL Categories. Do You Know Which of Your Products Require an Export License?

EAR compliance requires ECCN classification of every item you export, restricted party screening against every transaction, and continuous monitoring as BIS updates the Entity List, Commerce Control List, and country group designations. The 50 Percent Affiliates Rule now extends restrictions to unlisted subsidiaries. Penalties reach $300,000 per civil violation.

Certivo automates export control classification evidence from supplier documentation to audit-ready compliance packages.

3,163+

Entities on the BIS Entity List (as of Sept 2025)

$300K+

Maximum civil penalty per EAR violation

10

Commerce Control List categories requiring ECCN classification

Regulation Overview

Jurisdiction
United States (extraterritorial reach to U.S.-origin items, foreign direct products, and reexports globally)
Regulatory Body
Bureau of Industry and Security (BIS), U.S. Department of Commerce
Regulation Number
15 CFR Parts 730–774
Effective Date
Continuously updated; current framework under Export Control Reform Act of 2018 (ECRA)
Official Source
https://www.bis.gov/regulations/ear
Key Threshold
All items subject to U.S. jurisdiction—including foreign-produced items incorporating controlled U.S.-origin content

What are the Export Administration Regulations?

The Export Administration Regulations are the U.S. government's primary framework for controlling exports, reexports, and in-country transfers of dual-use items—commercial goods, software, and technology with both civilian and potential military or national security applications. For supply chain teams, the core obligation is classifying every item against the Commerce Control List and screening all transaction parties against BIS restricted party lists.

Every item subject to EAR jurisdiction must be classified using Export Control Classification Numbers (ECCNs). Items not specifically listed are designated EAR99. The ECCN classification, combined with the Commerce Country Chart and restricted party screening, determines whether an export license is required. BIS now updates the Entity List monthly, and the 50 Percent Affiliates Rule extends restrictions to subsidiaries of listed entities.

EAR compliance requires product-level classification data, end-user screening, and end-use verification across every export transaction. When BIS updates the Entity List, revises ECCNs, or changes country group designations, your entire product portfolio requires reassessment.

Key Components / Sub-Frameworks

Obligation
Classification determines license requirements by destination
Commerce Control List (CCL)
10 categories of controlled items with ECCNs
Obligation
License required for exports to listed entities; presumption of denial for many
Entity List
Entities posing national security or foreign policy concerns
Obligation
Determines whether ECCN + destination requires a license
Commerce Country Chart
Reasons for Control mapped to destinations
Obligation
Same restrictions apply as parent entity, effective September 2025
50 Percent Affiliates Rule
Subsidiaries ≥50% owned by listed entities
Obligation
Extends EAR jurisdiction to certain foreign-produced items
Foreign Direct Product Rule (FDPR)
Foreign-made items produced with U.S. technology
Obligation
Items with controlled U.S. content above threshold are subject to EAR
De Minimis Rule
U.S.-origin content threshold in foreign-made items

BIS Levied a Record $252 Million Penalty in February 2026—Is Your ECCN Classification Current?

BIS assessed the largest civil penalty in its history against a semiconductor equipment manufacturer for unlicensed exports to an Entity List designee. The 50 Percent Affiliates Rule is in effect. Entity List additions continue monthly. Congress increased BIS's enforcement budget by 23% for FY2026 with bipartisan support for semiconductor-related enforcement.

Key Compliance Requirements

Who Must Comply

• U.S. companies exporting items subject to EAR jurisdiction
• Foreign companies reexporting U.S.-origin items or foreign direct products
• Distributors and resellers handling EAR-controlled goods, software, or technology
• Non-U.S. entities incorporating controlled U.S.-origin content above de minimis thresholds
• Companies transacting with entities on the Entity List, Unverified List, or Military End User List
• Any entity facilitating exports, reexports, or in-country transfers of EAR-subject items

Key Thresholds

ECCN classification

All items subject to EAR must be classified; ECCN + destination determines license requirement

Entity List match

License required for any transaction involving listed entity; presumption of denial for most

50% ownership

Affiliates Rule extends restrictions to entities ≥50% owned by listed parties

De minimis (25% / 10%)

U.S.-origin controlled content threshold triggering EAR jurisdiction over foreign-made items

Core Obligations

1. Item Classification Classify all items against the CCL using ECCNs; maintain classification records
DEADLINE
Before any export, reexport, or transfer
2. Restricted Party Screening Screen all transaction parties against Entity List, Unverified List, MEU List, Denied Persons List
DEADLINE
Every transaction
3. License Application Apply for BIS export license where required by ECCN, destination, end use, or end user
DEADLINE
Before shipment or transfer
4. Record Keeping Maintain export records for 5 years
DEADLINE
Ongoing
5. Red Flag Monitoring Identify and investigate suspicious transaction indicators per BIS guidance
DEADLINE
Every transaction

EAR-Specific Pain Points

The Classification Quagmire

Your company exports 5,000 SKUs across 40 countries. Each item requires ECCN classification against a 600-page Commerce Control List spanning 10 categories and 5 product groups. Engineering provides technical specs in inconsistent formats. Your trade compliance team manually maps each item. A single misclassification can trigger $300,000+ in penalties—and the problem is often systemic across entire product lines.

The Entity List Moving Target

BIS adds and revises entities monthly. The Entity List now exceeds 3,163 entries. The 50 Percent Affiliates Rule means you must screen not just named entities but their subsidiaries. Your customer passed screening last quarter—but their parent company was added to the Entity List last week. Without continuous screening, you transact blind.

The Supplier Classification Gap

Your product incorporates components from 30 suppliers across 8 countries. Each component may carry its own ECCN. The de minimis rule requires calculating U.S.-origin controlled content in foreign-made items. Without supplier-level ECCN data, you cannot determine whether your finished product is subject to EAR jurisdiction—or whether a license is required for reexport.

The Audit Evidence Scramble

BIS conducts end-use checks and compliance audits globally. An auditor requests your classification methodology, screening records, license determinations, and transaction documentation across 24 months of exports. Your evidence is spread across ERP records, email chains, and spreadsheets maintained by three different teams. Compiling the audit file takes weeks—and gaps in documentation create presumptions of non-compliance.

Certivo In Action

Certivo in Action—EAR Workflow

GET EVIDENCE IN

Collect ECCN Classifications and Export Control Data from Every Supplier—Without the Chasing CORA launches targeted campaigns to collect supplier ECCN classifications, country of origin data, U.S.-content declarations, and technology control documentation. Automated follow-up in suppliers' native languages.

• Launch EAR classification campaigns to hundreds of suppliers with one click
• CORA-powered outreach requesting ECCNs, origin data, and controlled content declarations
• Accept any format: PDFs, Excel, supplier self-declarations, ERP exports
• Track response rates and escalate non-responders automatically

MAKE SENSE OF IT

Know Instantly Which Products Require Export Licenses—and Which Transactions Are Flagged CORA parses supplier ECCN declarations, validates classifications against the Commerce Control List, cross-references the Commerce Country Chart, and screens transaction parties against restricted party lists automatically.

• CORA extracts ECCNs, product descriptions, technical parameters, and origin data
• Automatic validation against the CCL, Commerce Country Chart, and de minimis thresholds
• Real-time restricted party screening against Entity List, Unverified List, MEU List, and Denied Persons List
• Threshold calculations for U.S.-origin controlled content in foreign-produced items

PROVE COMPLIANCE OUT

Respond to Auditors, Customers, and BIS in Hours, Not Weeks Generate audit-ready classification records, screening documentation, and license determination evidence instantly from validated supplier data.

• One-click export compliance packages with ECCN classifications and license determinations
• Pre-formatted audit evidence with complete screening records and transaction documentation
• Customer-specific EAR compliance packages with full traceability
• Complete audit trail for every classification, screening, and license decision

Features Tabs

Supplier Data Collection

Certivo's automated campaigns achieve 95% response rates vs. 20-30% with manual outreach.

• Targeted campaigns by product line, supplier tier, or export destination
• Multi-language outreach in suppliers' native languages
• Intelligent follow-up sequences adapting to supplier behavior
• Format-agnostic: PDFs, Excel, ERP exports, self-declarations, freeform responses

ECCN Extraction & Validation

Every supplier declaration parsed for ECCN, technical parameters, and origin data automatically—no manual data entry.

• Deep extraction of ECCNs, product descriptions, technical specifications, and reasons for control
• Parses supplier classification statements, product data sheets, and proprietary formats
• Multi-language document processing for global supplier networks
• Anomaly detection for misclassified, outdated, or inconsistent ECCN designations

Restricted Party Screening

Always screened against current restricted party lists—not your last quarterly batch.

• Continuous sync with Entity List, Unverified List, MEU List, Denied Persons List, and OFAC SDN
• 50 Percent Affiliates Rule screening for subsidiary ownership structures
• Proactive alerts when Entity List additions affect your customer or supplier base
• Historical screening records with timestamp and match-detail audit trail

License Determination

Generate classification and license determination packages in hours instead of weeks.

• One-click license determination records with ECCN, Country Chart, and end-use analysis
• De minimis calculation templates for foreign-produced items with U.S.-origin content
• Customer-specific compliance packages with full classification traceability
• Response tracking for BIS license applications and determinations

Audit Documentation

Pre-validated records ensure your compliance documentation is always current.

• 5-year record retention with automatic archiving per EAR requirements
• Classification methodology documentation with engineering justification
• Transaction-level screening and license evidence packages
• End-use check readiness with pre-assembled site visit documentation

Related Regulations

ITAR

ITAR controls defense articles; EAR controls dual-use and commercial items; jurisdiction determination is critical

Combined Value

Unified supplier data collection supports both EAR and ITAR classification workflows

OFAC Sanctions

OFAC embargoes complement EAR end-user and destination restrictions

Combined Value

Consolidated screening against BIS and OFAC lists from one platform

EU Dual-Use Regulation

EU Regulation 2021/821 controls dual-use exports from EU; overlapping product scope

Combined Value

Multi-jurisdiction classification validation from one supplier submission

Conflict Minerals (3TG)

Mineral sourcing overlaps with export control due diligence in conflict-affected regions

Combined Value

Unified supply chain due diligence across export controls and ethical sourcing

UFLPA

UFLPA forced labour restrictions intersect with China-focused EAR controls

Combined Value

Combined screening for Entity List, UFLPA Entity List, and OFAC SDN

Wassenaar Arrangement

Multilateral export control regime informing CCL content

Combined Value

International alignment tracking supports multi-jurisdiction compliance

Key Statistics

3,163+

Entity List entries screened with real-time sync

99.2%

ECCN and classification data extraction accuracy

95%

Supplier response rate with CORA-powered campaigns

Frequently Asked Questions

What items are subject to the Export Administration Regulations? The EAR applies to all items subject to U.S. Department of Commerce jurisdiction—including commodities, software, and technology with commercial and dual-use applications. This covers U.S.-origin items wherever located, foreign-produced items incorporating controlled U.S. content above de minimis thresholds, and certain foreign direct products of U.S. technology. Items are classified using ECCNs on the Commerce Control List or designated EAR99.

What are the penalties for EAR violations? Civil penalties exceed $300,000 per violation or twice the transaction value, whichever is greater. Criminal penalties include up to $1 million per violation and 20 years imprisonment. BIS assessed a record $252 million civil penalty in February 2026 for unlicensed semiconductor equipment exports to an Entity List designee. Penalties are strict liability—no knowledge requirement. Market access and export privileges can also be revoked.

How does the 50 Percent Affiliates Rule affect EAR compliance? Effective September 29, 2025, the BIS Affiliates Rule extends Entity List, Unverified List, and MEU List restrictions to any entity 50% or more owned—directly or indirectly—by a listed party, even if the subsidiary is not explicitly named. This significantly expands supplier and customer due diligence requirements. CORA screens ownership structures and flags affiliated entities automatically, ensuring your restricted party screening captures both named entities and their subsidiaries.

How does Certivo automate ECCN classification and restricted party screening? Certivo collects supplier ECCN declarations and technical documentation, extracts classification data, validates against the Commerce Control List, and screens all transaction parties against BIS and OFAC restricted party lists in real time. CORA parses supplier documents regardless of format, detects misclassifications through anomaly detection, and generates audit-ready compliance evidence. One supplier submission feeds classification validation, screening, and license determination workflows.

How does EAR compliance relate to ITAR and OFAC sanctions? The EAR covers dual-use and commercial items under Commerce jurisdiction. ITAR covers defense articles under State Department jurisdiction. OFAC administers sanctions programs restricting transactions with embargoed countries and designated parties. Many companies must comply with all three. Certivo validates supplier evidence and screens transactions across EAR, ITAR classification boundaries, and OFAC sanctions lists simultaneously—eliminating duplicate screening workflows.