A Swiss-headquartered technology group exports an encryption module to a distributor in a third market. The product carries a US ECCN (Export Control Classification Number under the US Commerce Control List) assigned years ago by the original US licensor. The group's EU subsidiary assumes that number is sufficient for its own export filings. Its Swiss parent assumes the same classification governs the SECO dual-use controls. Both assumptions are wrong. And in a dual enforcement environment – where the European Commission, member-state export-control authorities, and Switzerland's State Secretariat for Economic Affairs can each act independently – being wrong on classification is the starting point for a very expensive conversation.
EU export-control classification and Swiss SECO classification are governed by distinct legal instruments and assessed by different authorities, even though both regimes draw on the Wassenaar Arrangement, the Nuclear Suppliers Group, and other multilateral control lists. As of April 2026, the EU regime is based on the EU Dual-Use Regulation, administered by the relevant competent authority in each member state; the SECO regime is based on Swiss dual-use ordinances, administered by the State Secretariat for Economic Affairs in Bern. A US-origin ECCN does not automatically map to either regime's classification, and a product classified as controlled under one regime may be uncontrolled – or controlled differently – under the other. The divergences that matter most are not at the headline list level but in the technical parameters, the catch-all and end-use controls, and the licensing exception logic.
This analysis maps the key divergences between the EU and SECO classification regimes, explains what businesses operating across both jurisdictions regularly miss, and sets out the practical steps a compliance team should take when its products sit at the intersection of two different export-control authorities.
What governs classification under each regime?
The EU Dual-Use Regulation provides the legal basis for export-control classification across all twenty-seven member states, adopting a single Annex I control list derived from the multilateral export-control regimes. Competent authorities sit at the member-state level – the German BAFA, the French SBDU, the Dutch Customs and Tax Administration, and their equivalents – but the classification criteria are set at the EU level. There is no separate national list in any member state; a product controlled in Germany is controlled in France and the Netherlands on exactly the same basis.
The Swiss SECO regime operates through a separate set of domestic ordinances that incorporate the multilateral control-list commitments Switzerland has undertaken as a participating state in the Wassenaar Arrangement, the Australia Group, the Missile Technology Control Regime, and the Nuclear Suppliers Group. Switzerland is not an EU member and is not bound by the EU Dual-Use Regulation. SECO maintains its own control list, administers licensing centrally from Bern, and makes classification determinations independently of any EU competent authority.
A US ECCN sits outside both regimes. It is a classification under the US Export Administration Regulations, administered by BIS, and it reflects US policy judgments about a product's technical characteristics and end-use risk. That classification can be a useful starting reference – multilateral list entries are broadly harmonised at the category level – but it does not constitute a classification under the EU Annex I or the Swiss Dual-Use Ordinance. In our experience, relying on a US ECCN as a proxy for an EU or Swiss classification is the single most common source of miscalculation in multi-jurisdiction export programmes.
How does the classification test differ in practice?
Under the EU regime, classification begins by matching the product against the technical parameters in the Annex I control list, which is structured into ten categories (across materials, electronics, computers, telecommunications, sensors, lasers, navigation, marine, and aerospace) and further divided by product type and technology and software sub-entries. The test is parameter-based: if the item meets the specified technical threshold, it is controlled. If it does not meet any specific entry, the catch-all provisions – which extend controls to certain items where the exporter has knowledge or grounds to suspect proliferation-sensitive end use – still require an assessment.
The SECO classification process follows the same category structure, drawing from the same multilateral source lists. In practice, for most dual-use goods, the Swiss list and the EU list will produce the same headline result at the category-entry level. Where they diverge is in implementation detail: the way technical thresholds are translated into domestic law, the timing of list updates (Switzerland incorporates multilateral updates through its own legislative process, which does not run in lockstep with EU adoption cycles), and the application of catch-all controls, which under the Swiss regime include specific provisions that may extend controls differently than the EU general catch-all.
What businesses most frequently miss is the de-control threshold timing gap. When a multilateral regime agrees to de-list a technology or raise a parameter threshold – reducing controls – the EU and Switzerland each incorporate that change through separate legislative processes on separate timetables. A product that has been de-controlled under the EU regime may remain controlled under SECO for a period. The reverse can also occur. A compliance programme that treats both regimes as always in sync will miss transactions that require a Swiss licence even when no EU licence is needed, and vice versa.
Where do catch-all and end-use controls create divergent obligations?
The EU catch-all controls are among the most significant divergence points. Under the EU Dual-Use Regulation, an exporter is required to apply for a licence even for non-listed items where it knows or has grounds to suspect that the goods are or may be intended for weapons of mass destruction-related programmes or certain military end uses in arms-embargoed destinations. The EU regime also contains a catch-all that can be triggered by national competent authority notification, requiring licensing for specific items to specific destinations based on intelligence that would not be public.
Switzerland applies catch-all controls through its domestic ordinances, but the precise scope of the SECO catch-all – including the conditions triggering an obligation to apply for a licence and the list of destinations where heightened scrutiny applies – is set by Swiss domestic law, not by the EU regulation. There are categories of transaction where an EU-based exporter faces a catch-all licensing obligation and a SECO filing by the same group's Swiss subsidiary does not, or where SECO's catch-all would apply to an item that the EU competent authority has assessed as outside its catch-all scope for that destination.
End-use controls add a further layer. The EU regime requires exporters to obtain end-use certificates and to conduct end-use assessments for certain categories of goods. SECO has its own end-use undertaking requirements, which apply independently. A group operating both an EU subsidiary and a Swiss subsidiary in the same transaction chain must ensure that end-use documentation satisfies both sets of requirements. In practice, this means two parallel documentary processes, each assessed against a different standard by a different authority. Businesses that consolidate this into a single document – typically drafted to the requirements of only one regime – create a gap that enforcement reviews surface quickly.
Do EU general export authorisations work across the Swiss border?
EU General Export Authorisations – the standing authorisations under the EU Dual-Use Regulation that permit defined categories of exports to listed destinations without a specific licence application – do not apply to exports from Switzerland. They are instruments of EU law, available only to EU-based exporters, and only for exports from EU territory. A Swiss-based exporter exporting the same item under the same transaction cannot rely on any EU General Export Authorisation.
This creates a practical asymmetry for groups that have both EU and Swiss operations. The EU subsidiary may be able to use a General Export Authorisation for a particular shipment to a particular destination. The Swiss subsidiary, making an identical shipment from Switzerland, must either hold a Swiss-specific general authorisation issued by SECO (where SECO has issued one covering that item and destination) or apply for a specific Swiss licence. The existence of the EU General Export Authorisation does not accelerate or simplify the SECO process.
SECO does issue its own general authorisations for certain categories of goods and destinations. The overlap with EU General Export Authorisations is partial, not complete. In our experience, compliance teams managing both operations frequently assume that if the EU operation has a usable general authorisation, the Swiss operation does too. That assumption requires positive verification, not inference, before each shipment category is cleared.
What risk flags arise in cross-border ECCN classification?
The risk profile of getting classification wrong across the EU and SECO regimes is not symmetric. The EU regime includes significant civil and criminal penalties at the member-state level, with enforcement intensity varying across member states but increasing year-on-year across major export economies. SECO enforcement operates through Swiss criminal law, and penalties can include fines and, in serious cases, custodial sentences for individuals responsible for the export. Both regimes can also result in licence refusals and denial of future export privileges.
The risk flags a cross-border classification programme should monitor are:
- Relying on a US ECCN as a proxy for EU or Swiss classification without conducting an independent assessment against each regime's list.
- Treating the EU and Swiss lists as permanently synchronised when they are separately updated.
- Using a single end-use certificate drafted to one regime's standard for transactions that require compliance with both.
- Assuming that EU General Export Authorisations cover Swiss operations or vice versa.
- Classifying on the basis of a product's intended use rather than its actual technical parameters – both regimes assess the item as designed and capable, not as intended to be used.
- Failing to reassess classification when a product is modified, upgraded, or re-released under a new technical specification.
- Treating software and technology differently from hardware without verifying that each regime's control list treats them the same way at the relevant parameter.
A classification error that goes undetected until an enforcement review is materially harder to manage than one caught in a pre-export compliance check. Both the EU competent authorities and SECO take a dim view of repeated classification errors, even where individual transactions did not result in controlled items reaching a sensitive end user.
The position above covers the structural analysis. Your classification facts – the specific technical parameters of the product, the transaction structure, the destination, and the end use – change the result. For a classification review under the EU regime, the Swiss SECO regime, or both, contact Calder & Vance at info@caldervance.com.
How does a SECO classification interact with extraterritorial US export-control rules?
US export-control rules under the EAR impose obligations beyond US borders through the foreign direct product rule and the de minimis threshold – the rules that determine when a non-US product incorporating US-origin technology or produced on US-controlled equipment is itself subject to the EAR. A product that qualifies as an EAR99 item (the residual category of the EAR covering items not listed on the Commerce Control List) or carries a low-restriction ECCN may nonetheless be subject to additional end-use and end-user controls under EAR rules that apply regardless of where it is manufactured or re-exported.
Swiss and EU exporters frequently encounter this dynamic when re-exporting US-origin goods or goods incorporating US technology. Their SECO and EU classification analyses are correct and complete. And yet the transaction may still require a US re-export authorisation if the foreign direct product rule applies. Neither SECO nor any EU competent authority can authorise that re-export; only BIS can. This is not a gap in the SECO or EU classification process – it is a parallel obligation arising from a different regime's extraterritorial reach.
What it means in practice is that a multi-jurisdiction classification programme must run three parallel assessments for US-origin or US-technology-incorporating goods: the EU classification, the SECO classification, and the EAR re-export analysis. A business that runs only the first two has completed the EU and Swiss compliance exercise but has not completed the US one. The consequences of missing the US requirement fall on the exporter, not on the EU or Swiss authorities.
If a transaction has already been flagged by a competent authority or a licensing application has been refused, an early review of the classification basis can preserve options that narrow with time. Contact us at info@caldervance.com.
When does the strictest prohibition govern, and how should a business decide?
Where EU obligations, SECO obligations, and US EAR obligations all apply to the same transaction, the cardinal rule is that the strictest prohibition governs the export decision. If any one of the three regimes requires a licence and that licence has not been obtained, the transaction cannot proceed lawfully – regardless of whether the other two regimes would permit it. There is no regime-averaging, no netting of permissive positions.
This principle is operationally straightforward to state but practically demanding to implement. It requires a classification assessment under each applicable regime to be completed before any export decision, not in parallel with shipment preparation. It requires the licensing positions under each regime to be documented and retained. And it requires any competent authority enquiry or notification to be assessed promptly, because a notification under one regime that triggers a catch-all obligation does not automatically alert the other two regimes.
What a business operating across the EU and Switzerland should build is a classification decision record that covers: the product's technical parameters, the applicable EU Annex I entry (or the determination that none applies), the applicable SECO list entry (or the determination that none applies), the EAR classification for US-origin or US-technology-incorporating elements, the licensing status under each regime for the specific destination and end user, and the end-use documentation status. That record should be revisited whenever the product specification changes, the destination or end user changes, or a multilateral control regime updates its lists in a way that either the EU or SECO has adopted.
In a recent matter, a technology business with operations in both an EU member state and Switzerland had conducted a thorough EU dual-use classification for a new product line. The Swiss subsidiary assumed the EU analysis was sufficient for its own SECO filings. A SECO compliance review identified that a specific technical parameter in the product met a Swiss control-list threshold that had been updated through a Swiss domestic list adoption more recently than the EU had adopted the equivalent multilateral amendment. The Swiss subsidiary had been exporting without the required SECO authorisation. We conducted a classification review under both regimes, identified the divergence point, and supported a voluntary disclosure process and a corrective licensing application. The matter was resolved without criminal referral. The lesson – that list-adoption timing gaps between the EU and Switzerland can create real compliance failures even in well-managed programmes – applies to any business operating in both jurisdictions.
What a cross-border business should do on ECCN classification
The practical steps for a business that exports goods potentially controlled under both the EU Dual-Use Regulation and the SECO regime are not complicated to list, but they require disciplined execution.
- Conduct a classification assessment under each regime separately. Do not treat the EU classification as determinative for Switzerland, and do not treat a US ECCN as determinative for either. Each regime's list must be checked independently against the product's technical parameters.
- Check the list-update date for each regime. Confirm when each regime last incorporated the relevant multilateral amendments. If the EU and Swiss adoption dates differ, identify whether the gap creates a divergence for your product category.
- Map the catch-all exposure under both regimes. Identify whether the transaction's destination, end user, or end use brings either regime's catch-all into play, even if the product is not on the control list.
- Verify the licensing position separately for each jurisdiction. Confirm which general authorisations are available under each regime for the specific item and destination, and whether any specific licence is required.
- Produce separate end-use documentation for each regime's requirements. Do not use a single document drafted to one standard for both filings.
- Run the EAR re-export analysis if the goods are US-origin or incorporate US technology. The EU and SECO analyses do not address US extraterritorial obligations.
- Reassess on every product change and on every relevant list update. Classification is not a one-time exercise. It must be revisited when the product or the regulatory position changes.
Compliance counsel with experience in both the EU Dual-Use Regulation and the SECO regime can accelerate this process significantly – particularly where the product sits near a technical threshold or where the catch-all assessment requires a judgment call on end-use risk.
Related practices
- Deemed Export and Technology Controls under BIS/EAR – assessing and managing US deemed-export obligations for technology transfers
- ECCN Classification: OFAC vs BIS/EAR – comparative analysis of US sanctions and export-control classification interactions
- ECCN Classification: OFAC vs Canada – how Canadian export controls interact with US classification obligations