# Export Administration Regulations (EAR) Compliance Trade, Export Controls & Sanctions ###### Export Administration Regulations (15 CFR Parts 730–774) ## 3,163 Entities on the Entity List. 10 CCL Categories. Do You Know Which of Your Products Require an Export License? EAR compliance requires ECCN classification of every item you export, restricted party screening against every transaction, and continuous monitoring as BIS updates the Entity List, Commerce Control List, and country group designations. The 50 Percent Affiliates Rule now extends restrictions to unlisted subsidiaries. Penalties reach $300,000 per civil violation. Certivo automates export control classification evidence from supplier documentation to audit-ready compliance packages. 3,163+ Entities on the BIS Entity List (as of Sept 2025) $300K+ Maximum civil penalty per EAR violation 10 Commerce Control List categories requiring ECCN classification ## Regulation Overview **Jurisdiction** United States (extraterritorial reach to U.S.-origin items, foreign direct products, and reexports globally) **Regulatory Body** Bureau of Industry and Security (BIS), U.S. Department of Commerce **Regulation Number** 15 CFR Parts 730–774 **Effective Date** Continuously updated; current framework under Export Control Reform Act of 2018 (ECRA) **Official Source** [https://www.bis.gov/regulations/ear](https://www.bis.gov/regulations/ear) **Key Threshold** All items subject to U.S. jurisdiction—including foreign-produced items incorporating controlled U.S.-origin content # What are the Export Administration Regulations? The Export Administration Regulations are the U.S. government's primary framework for controlling exports, reexports, and in-country transfers of dual-use items—commercial goods, software, and technology with both civilian and potential military or national security applications. For supply chain teams, the core obligation is classifying every item against the Commerce Control List and screening all transaction parties against BIS restricted party lists. Every item subject to EAR jurisdiction must be classified using Export Control Classification Numbers (ECCNs). Items not specifically listed are designated EAR99. The ECCN classification, combined with the Commerce Country Chart and restricted party screening, determines whether an export license is required. BIS now updates the Entity List monthly, and the 50 Percent Affiliates Rule extends restrictions to subsidiaries of listed entities. EAR compliance requires product-level classification data, end-user screening, and end-use verification across every export transaction. When BIS updates the Entity List, revises ECCNs, or changes country group designations, your entire product portfolio requires reassessment. ## Key Components / Sub-Frameworks **Obligation** Classification determines license requirements by destination **Commerce Control List (CCL)** 10 categories of controlled items with ECCNs **Obligation** License required for exports to listed entities; presumption of denial for many **Entity List** Entities posing national security or foreign policy concerns **Obligation** Determines whether ECCN + destination requires a license **Commerce Country Chart** Reasons for Control mapped to destinations **Obligation** Same restrictions apply as parent entity, effective September 2025 **50 Percent Affiliates Rule** Subsidiaries ≥50% owned by listed entities **Obligation** Extends EAR jurisdiction to certain foreign-produced items **Foreign Direct Product Rule (FDPR)** Foreign-made items produced with U.S. technology **Obligation** Items with controlled U.S. content above threshold are subject to EAR **De Minimis Rule** U.S.-origin content threshold in foreign-made items ## BIS Levied a Record $252 Million Penalty in February 2026—Is Your ECCN Classification Current? BIS assessed the largest civil penalty in its history against a semiconductor equipment manufacturer for unlicensed exports to an Entity List designee. The 50 Percent Affiliates Rule is in effect. Entity List additions continue monthly. Congress increased BIS's enforcement budget by 23% for FY2026 with bipartisan support for semiconductor-related enforcement. ## Key Compliance Requirements # Who Must Comply - U.S. companies exporting items subject to EAR jurisdiction - Foreign companies reexporting U.S.-origin items or foreign direct products - Distributors and resellers handling EAR-controlled goods, software, or technology - Non-U.S. entities incorporating controlled U.S.-origin content above de minimis thresholds - Companies transacting with entities on the Entity List, Unverified List, or Military End User List - Any entity facilitating exports, reexports, or in-country transfers of EAR-subject items # Key Thresholds #### ECCN classification All items subject to EAR must be classified; ECCN + destination determines license requirement #### Entity List match License required for any transaction involving listed entity; presumption of denial for most #### 50% ownership Affiliates Rule extends restrictions to entities ≥50% owned by listed parties #### De minimis (25% / 10%) U.S.-origin controlled content threshold triggering EAR jurisdiction over foreign-made items ## Core Obligations 1. `Item Classification` `Classify all items against the CCL using ECCNs; maintain classification records` `DEADLINE` `Before any export, reexport, or transfer` 2. `Restricted Party Screening` `Screen all transaction parties against Entity List, Unverified List, MEU List, Denied Persons List` `DEADLINE` `Every transaction` 3. `License Application` `Apply for BIS export license where required by ECCN, destination, end use, or end user` `DEADLINE` `Before shipment or transfer` 4. `Record Keeping` `Maintain export records for 5 years` `DEADLINE` `Ongoing` 5. `Red Flag Monitoring` `Identify and investigate suspicious transaction indicators per BIS guidance` `DEADLINE` `Every transaction` ## EAR-Specific Pain Points ###### The Classification Quagmire Your company exports 5,000 SKUs across 40 countries. Each item requires ECCN classification against a 600-page Commerce Control List spanning 10 categories and 5 product groups. Engineering provides technical specs in inconsistent formats. Your trade compliance team manually maps each item. A single misclassification can trigger $300,000+ in penalties—and the problem is often systemic across entire product lines. ###### The Entity List Moving Target BIS adds and revises entities monthly. The Entity List now exceeds 3,163 entries. The 50 Percent Affiliates Rule means you must screen not just named entities but their subsidiaries. Your customer passed screening last quarter—but their parent company was added to the Entity List last week. Without continuous screening, you transact blind. ###### The Supplier Classification Gap Your product incorporates components from 30 suppliers across 8 countries. Each component may carry its own ECCN. The de minimis rule requires calculating U.S.-origin controlled content in foreign-made items. Without supplier-level ECCN data, you cannot determine whether your finished product is subject to EAR jurisdiction—or whether a license is required for reexport. ###### The Audit Evidence Scramble BIS conducts end-use checks and compliance audits globally. An auditor requests your classification methodology, screening records, license determinations, and transaction documentation across 24 months of exports. Your evidence is spread across ERP records, email chains, and spreadsheets maintained by three different teams. Compiling the audit file takes weeks—and gaps in documentation create presumptions of non-compliance. Certivo In Action ## Certivo in Action—EAR Workflow ### GET EVIDENCE IN Collect ECCN Classifications and Export Control Data from Every Supplier—Without the Chasing CORA launches targeted campaigns to collect supplier ECCN classifications, country of origin data, U.S.-content declarations, and technology control documentation. Automated follow-up in suppliers' native languages. - Launch EAR classification campaigns to hundreds of suppliers with one click - CORA-powered outreach requesting ECCNs, origin data, and controlled content declarations - Accept any format: PDFs, Excel, supplier self-declarations, ERP exports - Track response rates and escalate non-responders automatically ### MAKE SENSE OF IT Know Instantly Which Products Require Export Licenses—and Which Transactions Are Flagged CORA parses supplier ECCN declarations, validates classifications against the Commerce Control List, cross-references the Commerce Country Chart, and screens transaction parties against restricted party lists automatically. - CORA extracts ECCNs, product descriptions, technical parameters, and origin data - Automatic validation against the CCL, Commerce Country Chart, and de minimis thresholds - Real-time restricted party screening against Entity List, Unverified List, MEU List, and Denied Persons List - Threshold calculations for U.S.-origin controlled content in foreign-produced items ### PROVE COMPLIANCE OUT Respond to Auditors, Customers, and BIS in Hours, Not Weeks Generate audit-ready classification records, screening documentation, and license determination evidence instantly from validated supplier data. - One-click export compliance packages with ECCN classifications and license determinations - Pre-formatted audit evidence with complete screening records and transaction documentation - Customer-specific EAR compliance packages with full traceability - Complete audit trail for every classification, screening, and license decision ## Features Tabs ### Supplier Data Collection Certivo's automated campaigns achieve 95% response rates vs. 20-30% with manual outreach. - Targeted campaigns by product line, supplier tier, or export destination - Multi-language outreach in suppliers' native languages - Intelligent follow-up sequences adapting to supplier behavior - Format-agnostic: PDFs, Excel, ERP exports, self-declarations, freeform responses ### ECCN Extraction & Validation Every supplier declaration parsed for ECCN, technical parameters, and origin data automatically—no manual data entry. - Deep extraction of ECCNs, product descriptions, technical specifications, and reasons for control - Parses supplier classification statements, product data sheets, and proprietary formats - Multi-language document processing for global supplier networks - Anomaly detection for misclassified, outdated, or inconsistent ECCN designations ### Restricted Party Screening Always screened against current restricted party lists—not your last quarterly batch. - Continuous sync with Entity List, Unverified List, MEU List, Denied Persons List, and OFAC SDN - 50 Percent Affiliates Rule screening for subsidiary ownership structures - Proactive alerts when Entity List additions affect your customer or supplier base - Historical screening records with timestamp and match-detail audit trail ### License Determination Generate classification and license determination packages in hours instead of weeks. - One-click license determination records with ECCN, Country Chart, and end-use analysis - De minimis calculation templates for foreign-produced items with U.S.-origin content - Customer-specific compliance packages with full classification traceability - Response tracking for BIS license applications and determinations ### Audit Documentation Pre-validated records ensure your compliance documentation is always current. - 5-year record retention with automatic archiving per EAR requirements - Classification methodology documentation with engineering justification - Transaction-level screening and license evidence packages - End-use check readiness with pre-assembled site visit documentation ## Related Regulations ITAR ITAR controls defense articles; EAR controls dual-use and commercial items; jurisdiction determination is critical Combined Value Unified supplier data collection supports both EAR and ITAR classification workflows OFAC Sanctions OFAC embargoes complement EAR end-user and destination restrictions Combined Value Consolidated screening against BIS and OFAC lists from one platform EU Dual-Use Regulation EU Regulation 2021/821 controls dual-use exports from EU; overlapping product scope Combined Value Multi-jurisdiction classification validation from one supplier submission Conflict Minerals (3TG) Mineral sourcing overlaps with export control due diligence in conflict-affected regions Combined Value Unified supply chain due diligence across export controls and ethical sourcing UFLPA UFLPA forced labour restrictions intersect with China-focused EAR controls Combined Value Combined screening for Entity List, UFLPA Entity List, and OFAC SDN Wassenaar Arrangement Multilateral export control regime informing CCL content Combined Value International alignment tracking supports multi-jurisdiction compliance ## Key Statistics 3,163+ Entity List entries screened with real-time sync 99.2% ECCN and classification data extraction accuracy 95% Supplier response rate with CORA-powered campaigns ## Frequently Asked Questions **What items are subject to the Export Administration Regulations?** The EAR applies to all items subject to U.S. Department of Commerce jurisdiction—including commodities, software, and technology with commercial and dual-use applications. This covers U.S.-origin items wherever located, foreign-produced items incorporating controlled U.S. content above de minimis thresholds, and certain foreign direct products of U.S. technology. Items are classified using ECCNs on the Commerce Control List or designated EAR99. **What are the penalties for EAR violations?** Civil penalties exceed $300,000 per violation or twice the transaction value, whichever is greater. Criminal penalties include up to $1 million per violation and 20 years imprisonment. BIS assessed a record $252 million civil penalty in February 2026 for unlicensed semiconductor equipment exports to an Entity List designee. Penalties are strict liability—no knowledge requirement. Market access and export privileges can also be revoked. **How does the 50 Percent Affiliates Rule affect EAR compliance?** Effective September 29, 2025, the BIS Affiliates Rule extends Entity List, Unverified List, and MEU List restrictions to any entity 50% or more owned—directly or indirectly—by a listed party, even if the subsidiary is not explicitly named. This significantly expands supplier and customer due diligence requirements. CORA screens ownership structures and flags affiliated entities automatically, ensuring your restricted party screening captures both named entities and their subsidiaries. **How does Certivo automate ECCN classification and restricted party screening?** Certivo collects supplier ECCN declarations and technical documentation, extracts classification data, validates against the Commerce Control List, and screens all transaction parties against BIS and OFAC restricted party lists in real time. CORA parses supplier documents regardless of format, detects misclassifications through anomaly detection, and generates audit-ready compliance evidence. One supplier submission feeds classification validation, screening, and license determination workflows. **How does EAR compliance relate to ITAR and OFAC sanctions?** The EAR covers dual-use and commercial items under Commerce jurisdiction. ITAR covers defense articles under State Department jurisdiction. OFAC administers sanctions programs restricting transactions with embargoed countries and designated parties. Many companies must comply with all three. Certivo validates supplier evidence and screens transactions across EAR, ITAR classification boundaries, and OFAC sanctions lists simultaneously—eliminating duplicate screening workflows.