Calder & Vance International Sanctions & Compliance Counsel

Export Controls & Dual-Use · BIS / EAR

BIS / EAR vs EU: Military end-use rules: what businesses miss

A precision-engineering company exports components to a distributor in a third country. The parts carry no military classification. The buyer's end-use certificate says "industrial manufacturing." Six months later, a due-diligence review surfaces a contract between that distributor and a national military programme. The exporter now faces a question it thought it had already answered: did the shipment require a licence it never obtained?

Military end-use rules under the US Export Administration Regulations (EAR) and the EU dual-use regime both capture items not listed on their respective control lists when a military end-use is known or suspected. The triggers, the "knowledge" standard, the scope of goods caught, and the enforcement consequences differ materially across the two regimes. Understanding those divergences before the transaction is the only way to manage the risk.

This analysis sets out the governing authorities and tests in each regime, maps the points of divergence that practitioners encounter most often, and identifies the risk flags that business teams routinely miss.

What are military end-use rules and why do they matter to exporters of unlisted items?

Military end-use rules extend export-licence requirements beyond the items explicitly listed on a control list to cover any export where the exporter knows, or has reason to know, that the item will be used in a military application. The significance for exporters of commercially standard goods – machine tools, industrial chemicals, electronic components, logistics software – is direct: even an item with no Export Control Classification Number (ECCN) assigned to it, or an item classified EAR99, can require a licence if the military end-use trigger fires.

Under the EAR, the rules maintained by the Bureau of Industry and Security (BIS) apply to a defined set of destination countries. They cover items that will be used in the development, production, operation, installation, maintenance, repair, overhaul, or refurbishing of military items. The instrument also covers items destined for a military end-user in a covered country, a concept separate from end-use. Both provisions operate as licence requirements that are not lifted by any general licence or licence exception without an affirmative determination that the exception applies.

In our cross-border practice, the most common error is assuming that an EAR99 classification ends the analysis. It does not. The military end-use rules sit on top of the classification system. A clean ECCN or EAR99 status tells you what the item is; it does not tell you whether the destination and the end-use trigger a separate licence requirement.

How does the EU dual-use regime treat military end-use?

The EU dual-use regime – currently governed by the relevant Council Regulation on controls of exports, brokering, technical assistance, transit, and transfer of dual-use items – contains a general catch-all obligation that requires exporters to seek authorisation when they know that items not listed in the EU Control List are intended for military end-use in a country subject to an EU arms embargo. The trigger is actual knowledge, not constructive knowledge, in the base provision; however, competent national authorities can require that the exporter notify them when there are grounds for suspicion, shifting the effective standard.

Two further instruments sit alongside that base provision. First, EU Member States retain the power to impose national controls on non-listed items when military end-use is at issue and an arms embargo is in force. Second, the "catch-all" under the EU rules applies to items intended for military use in a destination covered by an EU embargo, which means the scope tracks the EU's embargo posture – not a fixed country list. As the embargo posture changes, the catch-all reach changes with it.

The practical consequence is that the EU catch-all is narrower in geographic scope than the BIS military end-use rules in one dimension: it is tied to embargo destinations. BIS covers a broader defined country list that does not map directly onto the EU arms embargo list. The same shipment can therefore require a BIS licence because the destination is on the BIS country list, even if the EU catch-all does not fire because the EU does not maintain an arms embargo on that country.

Where do the regimes diverge on military end-use rules?

The most significant divergences are in the knowledge standard, the country trigger, the scope of items caught, the concept of the military end-user (separate from end-use), and the mechanism for pre-clearance. Each divergence creates a gap that cross-border exporters can fall into without any deliberate error.

Knowledge standard. Under the EAR, a licence is required when the exporter "knows" of the military end-use. BIS guidance interprets "knows" to include not only actual knowledge but also awareness of a high probability – a standard closer to wilful blindness. The EU base obligation uses actual knowledge, but the notification pathway available to national authorities effectively imposes a duty to make enquiries when suspicion exists. Neither standard is passive; both require the exporter to investigate red flags rather than ignore them.

Country trigger. The BIS military end-use rules apply to a fixed country list that BIS maintains and updates. The EU catch-all fires when the destination is subject to an EU arms embargo. These lists are not co-extensive. A destination may appear on the BIS country list but not be subject to an EU arms embargo, and vice versa. An exporter operating from both the United States and an EU Member State – or shipping through both jurisdictions – faces two separate geographic analyses.

Military end-user as a separate concept. The EAR separately prohibits exports, re-exports, and transfers to designated military end-users in covered countries, independent of whether the specific item will itself be used in a military application. This is a distinct concept from end-use: the customer's status triggers the requirement, not the item's destination use. The EU regime does not have an equivalent stand-alone military end-user prohibition; the EU catch-all is use-based, not user-based. This divergence is critical for distributors that sell to a broad customer base. A distributor with a military entity in its customer list may trigger the EAR prohibition on the exporter's side even for items the military entity will use in a non-military capacity.

Pre-clearance and prior consultation. BIS does not operate a formal prior-consultation mechanism specifically for military end-use determinations in the same way that some EU competent authorities do. Several EU Member States allow or require exporters to notify the competent authority when there is a suspicion of military end-use, and the competent authority then makes a determination. This mechanism can, in practice, provide a degree of regulatory clearance that the BIS system does not replicate. Exporters who have used EU notification mechanisms and received no objection sometimes mistakenly treat that as covering the EAR position. It does not.

In our experience, the user-versus-use divergence is the one that produces the most operational difficulty. Compliance programmes designed around end-use questionnaires do not capture military end-user risk automatically. The two controls require separate screening logic.

Which regime is stricter on military end-use rules?

Neither regime is universally stricter; they are stricter in different dimensions, and the answer depends on the specific transaction. The BIS military end-use rules are broader in country coverage and introduce the separate military end-user prohibition, which the EU does not replicate. The EU regime, in certain Member States, operates with a notification mechanism that can impose positive due-diligence obligations more explicitly than BIS guidance does in the base case. Where a Member State imposes additional national controls on non-listed items, the effective EU position can be more demanding than the base EU regulation suggests.

For a business exporting from the United States, the BIS regime governs. For a business exporting from an EU Member State, the EU regime and any applicable national layer govern. For a business with operations or shipments in both jurisdictions – a common fact pattern for European subsidiaries of US groups, and for US businesses using EU freight hubs – both regimes apply concurrently, and the stricter prohibition on any given transaction governs. There is no harmonisation between the BIS and EU military end-use rules; compliance with one does not confer compliance with the other.

The United Kingdom's position adds a third layer for businesses with UK nexus. Following the UK's departure from the EU, the UK maintains its own dual-use and military end-use controls under the Export Control Order and ECJU guidance. The UK rules are modelled on the pre-departure EU position but have since diverged in detail. A transaction routed through a UK entity requires a separate UK analysis.

What risk flags do businesses most commonly miss?

Red-flag analysis is the practical centrepiece of military end-use compliance. Both BIS and EU competent authorities assess whether the exporter recognised and responded to warning indicators. Enforcement decisions in both jurisdictions consistently identify the same categories of overlooked risk.

The first category is destination routing. A shipment routed through a third country en route to the ultimate destination must be assessed against both the intermediate and the final destination. Re-export or in-country transfer may itself require authorisation. A licence for the initial export to the transit hub does not automatically cover onward movement to the ultimate end-user.

The second category is post-sale intelligence. Information received after an export is completed – a news report, a customer communication, a partner's due-diligence finding – can trigger a reporting or notification obligation. Treating the export as closed once the goods leave the warehouse is a common error. Both the EAR and several EU national implementations contemplate that post-export knowledge of a military end-use may require the exporter to act.

The third category is distributor and reseller contracts. End-use certificates obtained from a distributor cover the distributor's stated intentions. They do not bind the distributor's downstream customers. A compliance programme that collects certificates only at the point of first sale has a structural gap when the distributor resells to military entities.

The fourth category is dual-use within the supply chain. Components incorporated into a finished product exported by a third party may carry military end-use risk that attaches to the component supplier, not only the finished-goods exporter. Where a component is destined for a product the component supplier knows will be sold into a military programme, the military end-use analysis attaches at the component level.

Have you mapped your supply chain all the way to the distributor's customers? And have you built post-export monitoring into your compliance programme, or does your process treat the transaction as closed once the commercial documentation is filed?

If a transaction has already been flagged or a filing has been questioned, an early review can preserve options that narrow with time. To discuss a potential exposure under the EAR or the EU dual-use regime, contact Calder & Vance at info@caldervance.com.

How does the analysis interact with OFAC sanctions and the broader US secondary-sanctions regime?

Military end-use controls under the EAR are administered by BIS; they are not sanctions in the technical sense. But they interact directly with OFAC's sanctions programmes in several ways that matter operationally.

First, a military end-user or end-use destination that triggers the EAR provision may also be subject to OFAC sanctions. The two controls run in parallel. An exporter who clears the military end-use analysis but misses a sanctions screen on the end-user faces a separate OFAC exposure. Compliance programmes that separate EAR and OFAC screening into different teams with different databases regularly miss exactly this overlap.

Second, OFAC's secondary-sanctions regime – which applies to non-US persons who facilitate transactions with certain designated persons or programmes – can capture a foreign exporter whose shipment ultimately benefits a sanctioned military programme, even if that foreign exporter has no US-origin goods in the shipment and no direct BIS exposure. Secondary-sanctions risk is assessed on the basis of the transaction's connection to sanctioned persons, not on the basis of the goods' origin. A European company exporting items not subject to the EAR can still face secondary-sanctions consequences if the ultimate beneficiary is in a sanctioned programme.

Third, the interaction between BIS Entity List designations and military end-use controls is frequently misread. An entity on the Entity List requires a BIS licence for most items. But the military end-use rules apply to unlisted items sold to military end-users or for military end-use in covered countries regardless of whether the specific buyer is on the Entity List. A clean Entity List screen does not exhaust the BIS military-end-use analysis.

We regularly advise clients whose compliance programmes treat OFAC and BIS as sequential rather than concurrent checks. The cleaner model is to run both analyses on the same transaction record simultaneously, flagging any hit under either regime before sign-off.

The position above covers the structural case. Your specific facts – the item, the buyer, the route, the regime in play – change the analysis materially. To discuss your exposure under the EAR, the EU regime, or both concurrently, contact Calder & Vance at info@caldervance.com.

What should a cross-border business do about military end-use rules?

A cross-border business with potential military end-use exposure needs a compliance architecture that addresses each regime's distinct requirements, rather than a single unified process that approximates both.

The starting point is classification and country analysis. For each product line, the business should confirm its EAR classification (ECCN or EAR99) and its EU control list position, then map those classifications against the BIS military end-use country list and the EU arms embargo list. This produces a transaction-type matrix: which products going to which destinations trigger which regimes' military end-use analysis.

The second step is screening logic. The military end-user prohibition under the EAR requires a screen of the buyer's identity against BIS's published military end-user list, separate from the end-use questionnaire. The EU catch-all requires an assessment of the buyer's actual intended use. These are different data points requiring different compliance controls. A screening programme that runs only an entity-list check and collects only a standard end-use certificate covers neither adequately.

The third step is contractual downstream controls. Export contracts with distributors and resellers should include flow-down clauses that require the distributor to notify the exporter of any resale into a military application and to obtain the exporter's written authorisation before such a resale. These clauses are not a complete defence – the exporter remains responsible for its own licensing analysis – but they form part of the evidence base that regulators assess when reviewing whether an exporter exercised reasonable care.

The fourth step is post-export monitoring. A documented process for reviewing post-sale intelligence, acting on red flags, and notifying competent authorities where required is a meaningful mitigation factor in enforcement proceedings in both the US and EU jurisdictions. In our experience, businesses with a documented monitoring process consistently achieve better outcomes in enforcement reviews than those treating the transaction as complete at the point of shipment.

Where a specific transaction carries military end-use risk and the business is uncertain whether a licence is required, the correct course is to seek legal advice before shipping, not to proceed and file a voluntary self-disclosure (a post-violation notification to the regulator) after the fact. A VSD is available as a mitigation tool, and BIS enforcement guidelines treat a well-prepared VSD as a significant mitigating factor. But it does not reverse a completed unlicensed export; it manages the penalty consequence. Prevention is the first preference.

Related practices

A practical scenario: when a clean classification is not enough

In a recent matter, a mechanical-components manufacturer based in an EU Member State supplied precision parts to a regional distributor in a country on the BIS military end-use country list. The components were EAR99. The EU control list did not capture them. The manufacturer's compliance team had run an entity-list check and collected a standard end-use certificate stating "industrial maintenance." No military end-use analysis was performed because the items carried no classification requiring one.

Post-shipment due diligence in connection with a separate transaction surfaced a published contract between the distributor and a state defence procurement body. The manufacturer had not known of that contract at the time of export. The question was whether the post-shipment knowledge created a reporting obligation and whether the original export had been unlicensed.

We assessed the EAR position: the military end-use analysis attached at the point of export because the distributor's customer base, had it been investigated, would have revealed the procurement contract. The manufacturer's failure to investigate the red flags present in the distributor's profile – operating in a covered country, with a customer base not disclosed in the end-use certificate – was assessed as a knowledge standard issue. We advised on a voluntary self-disclosure and assisted in preparing the submission, including the remediation steps the manufacturer had taken. The matter proceeded without escalation to a referral for criminal review. The lesson is not that EAR99 items are safe; it is that the military end-use analysis is independent of classification.

Frequently asked questions

Where do the regimes diverge on military end-use rules?
The BIS / EAR and EU regimes diverge on four main points. First, country trigger: BIS applies to a fixed country list, while the EU catch-all fires only when a destination is subject to an EU arms embargo. Second, the military end-user concept: BIS prohibits exports to designated military end-users as a status-based trigger, regardless of intended use; the EU has no direct equivalent. Third, the knowledge standard differs in its articulation, with BIS guidance treating awareness of a high probability as sufficient. Fourth, pre-clearance mechanisms vary significantly across EU Member States, with no direct BIS counterpart. These divergences mean the same transaction may require a licence under one regime but not the other, and vice versa.
Which regime is stricter on military end-use rules?
Neither is universally stricter. BIS covers a broader country list and adds the military end-user prohibition as a status-based control, which the EU does not replicate. The EU regime, in certain Member States, imposes explicit notification obligations that effectively create a positive due-diligence duty beyond what BIS guidance requires in the base case. For businesses with operations in both jurisdictions, both regimes apply concurrently. The stricter prohibition on any given transaction governs, and compliance with one does not satisfy the other. The UK regime, administered by ECJU, adds a third concurrent layer for businesses with UK nexus.
What should a cross-border business do about military end-use rules?
A cross-border business should build a regime-specific compliance architecture rather than a single approximation of both. The key steps are: confirm product classifications and map them to each regime's geographic triggers; run separate screening for military end-users (EAR) and end-use assessment (EU); include flow-down clauses in distributor contracts; and implement post-export monitoring for intelligence that might reveal military end-use after shipment. Where a transaction carries genuine military end-use risk and the licensing position is uncertain, seek advice before shipping. Contact Calder & Vance at info@caldervance.com to discuss your position.

Talk to Caldervance

For a scoped view of your exposure, contact info@caldervance.com.

Discuss your matter

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.