OFAC vs BIS / EAR: The standard of proof for control findings compared

A multinational with a subsidiary in a third market receives a notice: one of its trading partners has been added to the SDN List (OFAC's list of Specially Designated Nationals and blocked persons). The compliance team pulls the ownership register. The partner holds a forty-three percent stake in a joint venture the multinational relies on. Blocked? Not automatically – but the analysis does not stop there. BIS has separately flagged a related entity on its Entity List (the list of parties for whom a licence is required before items subject to the EAR may be exported, re-exported, or transferred). The two agencies have reached their conclusions through different tests, on different standards of proof, and with different consequences for a challenge or a delisting application. Which test governs – and how do they differ in practice?

The standard of proof for control findings under OFAC and BIS / EAR diverges in three decisive respects: the legal threshold applied, the agency's burden of production in any administrative challenge, and the quality of evidence the affected party must assemble to displace the finding. OFAC's ownership test is mechanical – 50 percent or more aggregate ownership by blocked persons triggers deemed-blocked status without further inquiry into actual control. BIS applies a broader end-use and control enquiry against the Entity List standard, which is explicitly risk-based and does not carry a fixed ownership floor. Where both regimes are engaged, the stricter prohibition governs conduct, but the two challenge routes run in parallel and require distinct evidentiary packages.

This analysis maps each point of divergence in the order a practitioner encounters it: the legal basis and who applies each test, the ownership threshold and how aggregation operates, the control concept and what evidence moves the dial, the evidentiary standard in a challenge, the cross-regime interaction, the risk flags that signal when a matter is genuinely contested, and finally what a business facing a finding under either regime should do first.

Legal basis and administering authority: two agencies, two statutory foundations

OFAC derives its designation and blocking authority primarily from the International Emergency Economic Powers Act (IEEPA), a power exercised through executive orders that establish individual sanctions programmes. BIS derives its Entity List authority from the Export Control Reform Act and administers it through the Export Administration Regulations (the EAR). The two statutory foundations are distinct: IEEPA deals with economic transactions broadly; the EAR deals with the export, re-export, and transfer of items. That distinction matters when a party seeks to challenge a finding, because the procedural routes, the standards applied on review, and the remedies available differ accordingly.

OFAC administers the SDN List and the set of comprehensive and territorial programmes. It reaches a designation decision internally, without prior notice to the target. BIS makes Entity List decisions through an interagency End-User Review Committee, a multi-agency body that includes representatives of several departments. In our experience, the multi-agency character of the BIS process creates a wider internal review path for a petition but also means that the evidentiary record generated before listing is more diffuse than OFAC's typically is. Who holds the evidence, and in what form, shapes what a challenge can achieve.

The cross-border implication is immediate. A non-US company subject to neither IEEPA nor the EAR by its own terms may still find that US-origin items in its supply chain, or technology released to its personnel, brings it within BIS jurisdiction through the foreign direct product rules (rules that extend EAR coverage to foreign-produced items that are the direct product of controlled US technology or software, as currently in force – verify before reliance). OFAC jurisdiction follows US persons, US dollar clearing, and US-origin property regardless of where the transaction occurs. The standard-of-proof question therefore arises in both directions: the agency must prove enough to list; the target must prove enough to delist.

The ownership threshold: where OFAC's test is mechanical and BIS's is not

OFAC's 50 percent rule (the rule treating any entity owned 50 percent or more in the aggregate by one or more blocked persons as itself blocked, whether or not separately listed) is the clearest bright line in US sanctions law. The calculation is aggregate and multi-layered: two blocked persons each holding twenty-six percent reach the threshold together; a blocked person holding a thirty-percent stake through two intermediate companies is counted in full against that floor. The rule operates automatically. OFAC does not need to show that the blocked owner exercises actual day-to-day control; ownership alone is sufficient.

BIS does not apply a fixed percentage threshold in the same mechanical way. The Entity List standard asks whether there are reasonable grounds to believe that the entity will engage, has engaged, or poses a significant risk of engaging in activities contrary to US national security or foreign policy interests. Control, where relevant, is assessed as part of a broader end-user and end-use evaluation. A minority holding may be treated as a red flag rather than a safe harbour if it is accompanied by other indicators – board seats, veto rights, supply relationships, or financing arrangements – that suggest the listed party can direct the entity's relevant conduct.

What does that difference mean for a challenge? An OFAC challenge to a deemed-blocked finding turns almost entirely on the ownership arithmetic: if the 50 percent aggregate figure is wrong, the blocking is wrong. The evidence required is structured and finite – corporate registers, shareholder agreements, beneficial-ownership declarations. A BIS challenge to an Entity List finding requires something more open-textured: a narrative account of the entity's actual relationships, its supply-chain practices, its governance, and why the reasonable-grounds conclusion overstates the risk. In our practice, the BIS evidentiary package is materially harder to structure because the standard being displaced is qualitative.

How the control concept diverges: OFAC's ownership floor against BIS's risk inference

The divergence deepens when the ownership structure sits below the OFAC threshold. Below 50 percent, OFAC's automatic rule does not apply. OFAC can still designate an entity if it concludes that a blocked person controls it – but that finding requires a separate affirmative determination, not the automatic operation of the rule. Control in that context turns on practical and economic reality: the capacity to compel or direct the entity's decisions, not merely the ability in theory to influence them. UK case law has developed a similar distinction – actual control versus a hypothetical ability to exert it – and EU court authority holds that control must be proved by objective and sufficiently weighty evidence. The conceptual alignment across these regimes is notable, though the procedural paths to challenge differ significantly.

BIS's control inference is different in character. Where an entity is included on the Entity List partly because of its relationship to a listed party, BIS is making a risk-based prediction, not a legal determination of control. That prediction can be based on a minority stake, a contractual relationship, a technology-transfer arrangement, or a pattern of procurement behaviour. The standard – reasonable grounds to believe – is explicitly probabilistic. It does not require proof that the listed party directs the entity's acts; it requires only that the agency could reasonably infer that the risk is real.

The practical consequence is that displacing an OFAC control finding requires evidence that negates a positive legal conclusion. Displacing a BIS Entity List finding requires evidence that the risk inference was unreasonable – a higher-order task in some respects, because the agency can rely on a mosaic of circumstantial indicators rather than a single demonstrable fact. Have you assessed which agency's finding is the operative constraint on your transaction? That question drives the entire strategy for a challenge.

Evidentiary standards in a challenge: what each agency requires to move

An OFAC reconsideration of a deemed-blocked finding – where the party contests ownership – is primarily a documentary exercise. The evidentiary standard that the party must meet is effectively: produce records that, on their face, establish that aggregate blocked-person ownership is below 50 percent and that no other blocking criterion applies. Notarised corporate registers, audited shareholder registers, and declarations from the ultimate beneficial owner are the core instruments. Where intermediate holding companies sit in the chain, documents tracing each layer are required. OFAC's standard for accepting the evidence is not formally stated in its public guidance, but the practice standard – based on our experience in reconsideration matters – is that the documents must be current, source-authenticated, and internally consistent. Gaps in the chain are treated as adverse.

An OFAC delisting petition in a full designation case (not merely a deemed-blocked correction) requires the petitioner to meet a higher threshold: to demonstrate that the circumstances that gave rise to the designation no longer exist or never existed. OFAC has broad discretion in how it weighs the evidence. There is no formal standard of proof in the administrative-law sense. The agency's Enforcement Guidelines set out how it weighs factors in civil-penalty cases; its licensing and reconsideration procedures are less formally articulated. In our experience, a well-documented petition that sequentially addresses each stated basis for designation, with primary-source evidence for each factual point, performs materially better than a narrative submission that asks OFAC to draw inferences from general background.

BIS Entity List removal petitions are reviewed by the End-User Review Committee against the same interagency standard used for initial listing. The petitioner must show either that the reasonable grounds for the original listing no longer exist, or that they did not exist at the time of listing. The interagency process means that one agency's satisfaction with the evidence is not sufficient; all participating agencies must concur in the removal. In practice, a petition must address end-use undertakings, supply-chain controls, governance changes, and – where relevant – the nature of any past relationship with a listed party. The burden of persuasion sits entirely with the petitioner; the Committee does not publish a detailed reasoned decision of the kind that the EU General Court is required to produce.

That absence of a reasoned decision is a significant divergence from the EU position. An EU General Court judgment annulling a listing must identify the evidentiary deficiencies that made the original decision unsound. That reasoning can be used – and in our cross-border practice regularly is – to frame the parallel OFAC or BIS petition, because it identifies specific factual gaps. The converse is also useful: an OFAC reconsideration outcome that accepts the ownership evidence can support an EU or UK challenge where the ownership facts are shared.

Cross-regime interaction: when OFAC and BIS findings overlap

An entity may appear on both the SDN List and the Entity List simultaneously. The two listings are legally independent and must be challenged separately. There is no mechanism by which a successful OFAC delisting automatically removes the Entity List restriction, or vice versa. This means that a business whose counterparty achieves OFAC delisting may still require a BIS licence before re-engaging, because the Entity List inclusion survives. The reverse is equally common: an Entity List removal does not lift an OFAC block.

The interaction is further complicated where the business itself is a non-US entity. A non-US company is generally not subject to OFAC prohibitions as a primary matter – the prohibitions attach to US persons and to transactions within US jurisdiction. But if that company's supply chain includes US-origin items, US technology, or US dollar clearing, both regimes may be engaged simultaneously, and the standard-of-proof analysis runs in parallel tracks. Where two regimes both apply, the stricter prohibition governs the conduct of a person subject to both; the two challenge routes do not merge.

In a recent matter, a logistics group with operations across multiple jurisdictions found that a key supplier had received both an OFAC designation and an Entity List placement arising from overlapping government-owned enterprise concerns. We structured separate evidence packages for each agency, sequenced the filings so that the more documentary OFAC reconsideration was completed first, and used the agency's acceptance of the ownership evidence to reinforce the BIS petition's account of the supplier's actual governance. The Entity List petition remained pending at the time the OFAC matter concluded; the two processes did not align. This is typical: timelines are long, uncertain, and driven by agency workload and interagency dynamics that the petitioner cannot control.

Risk flags: when is a control finding genuinely contestable?

Not every control finding is contestable on the evidence. The first task for counsel is to assess whether the agency's conclusion is factually wrong, legally wrong, or both – and to distinguish those cases from situations where the finding is legally defensible even if the client disagrees with the underlying risk assessment.

For OFAC deemed-blocked findings, the finding is typically contestable where the ownership arithmetic is wrong, where the registry data OFAC relied on is out of date or mis-attributed, or where an intermediate holding company that appears to link the blocked person to the target was dissolved or restructured before the blocking date. These are document-driven disputes. They resolve on records.

For BIS Entity List findings, the genuine contestability is harder to assess. Risk flags that indicate a petition is likely to have traction include: the listed party's relationship to the entity ended before the listing date; the entity's procurement activity is documented as unrelated to the controlled items that triggered the listing; the entity has implemented verifiable end-use controls and a third-party compliance audit; and the entity's governance changes have been publicly registered, not merely asserted. Risk flags that suggest a petition faces a steeper path include: the entity is still commercially active with a listed party; the control relationship relied on by BIS is contractual (and therefore capable of termination but also of re-establishment); and the entity cannot produce primary-source documentation for its claimed change of circumstances.

A risk flag common to both regimes: delay. OFAC blocked-property reports are due within 10 business days of blocking. If a party subject to the 50 percent rule has been treated as unblocked, and transactions have continued, the question of unreported blocked-property exposure arises immediately alongside the ownership-correction question. A petition that discloses the ownership change without addressing the transaction history is incomplete. Is your compliance team tracking this dimension, or only the listing status itself?

When do the divergent standards require separate counsel strategies?

The divergence between OFAC and BIS on the standard of proof for control findings is not merely academic. It requires, in a dual-listing scenario, a deliberate choice about sequencing, evidentiary emphasis, and resource allocation.

Where OFAC's finding is ownership-based and the ownership record is clearly correctable, prioritise the OFAC reconsideration. A successful outcome there stops the blocking, allows blocked property to be unblocked, and removes the compliance burden from US-person counterparties who have suspended dealing. The BIS petition can then proceed on a tighter timeline with the OFAC outcome as corroborating background.

Where OFAC's finding rests on an affirmative control determination rather than the automatic rule, or where BIS's finding is the more commercially disruptive, the strategic logic may reverse. An affirmative control determination requires a stronger evidentiary package and more time; the BIS petition, if the end-use case is cleaner, may resolve faster and restore more of the commercial relationship in the near term.

The myth that a delisting is automatic once the facts change is a persistent one – and a dangerous one. Neither OFAC nor BIS is required to update a listing simply because circumstances have shifted. The petitioner must affirmatively demonstrate the change, document it to the agency's satisfaction, and navigate an internal review that can extend over a considerable period. We regularly advise clients that the evidence-gathering phase of a petition – before the submission is made – is where the outcome is determined. A submission built on incomplete records invites denial; a denial lengthens the timeline significantly.

A secondary keyword worth stating directly: the difference between OFAC and BIS / EAR on the standard of proof for control findings is not a difference of degree but of kind. OFAC's ownership test is a legal rule with a numerical trigger; BIS's Entity List standard is an administrative risk assessment with no fixed threshold. Challenging the former requires documents; challenging the latter requires narrative, governance evidence, and end-use undertakings. Both require expert preparation.

For a cross-border business operating under both regimes, the standard of proof for control findings is the question that determines whether a challenge is worthwhile, how it should be structured, and which filing should come first. We act for multinationals, financial institutions, and exporters on sanctions and export-control matters across the major regimes, and in our experience the businesses that manage dual-listing exposure most effectively are those that map the two evidentiary standards before they file anything.

Related practices

• Evidencing absence of control – OFAC service – building ownership and control evidence packages for OFAC reconsideration submissions.
• OFAC vs EU: standard of proof for control findings – comparative analysis of the US and EU evidentiary standards in designation challenges.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.