A trading company buys commercial off-the-shelf components in bulk and ships them to customers across four continents. Its compliance officer assumes that because no item appears on a manufacturer's data sheet as "controlled", the shipment moves freely. Then a foreign-policy controls review flags the destination. The shipment is held. Was the EAR99 assumption ever correct?
An item is EAR99 (the residual classification under the Export Administration Regulations, indicating an item subject to the EAR but not listed on the Commerce Control List) only after a structured determination confirms it holds no Export Control Classification Number. That determination is not a default or an assumption. It is the last step of a classification sequence, and skipping the earlier steps exposes the exporter to liability even where the item itself is genuinely low-controlled. As of April 2026, BIS continues to enforce against exporters who treat EAR99 as self-evident.
This guide walks through the EAR99 determination step by step, identifies the regime interactions that most commonly create risk for cross-border businesses, and explains when external counsel adds material value to the process.
Step 1: Confirm the item is subject to the EAR at all
Before asking whether an item is EAR99, confirm it falls within the scope of the EAR in the first place. The EAR, administered by the Bureau of Industry and Security (BIS) within the US Department of Commerce, covers items in US commerce – goods, software, and technology, including items of foreign origin that have passed through the United States or contain more than a de minimis proportion of US-controlled content.
Items subject to the exclusive jurisdiction of another US regime – the International Traffic in Arms Regulations, the Department of Energy controls, or the Nuclear Regulatory Commission controls – sit outside the EAR. If your item is a defence article listed on the United States Munitions List, the EAR classification question does not arise. In our cross-border practice, we regularly encounter manufacturers who conflate these regimes, submitting EAR classification requests for items that require a different statutory pathway entirely.
The jurisdiction question is resolved before the CCL review begins. Skipping it produces a classification analysis on the wrong legal basis – an error that can take months to correct under enforcement scrutiny.
Step 2: Search the Commerce Control List systematically
Once jurisdiction is confirmed, the exporter searches the Commerce Control List (CCL) – the schedule of controlled items published by BIS, structured into ten categories and five product groups – to establish whether the item carries an Export Control Classification Number (ECCN, a five-character alphanumeric identifier assigning an item to a CCL entry and the applicable control reasons).
The search is not a single lookup. It involves three parallel checks: reviewing the item's technical parameters against the CCL entry definitions; checking whether a catch-all or "end-use" note in the relevant category sweeps the item in; and checking whether a related software or technology that enables the item is itself controlled, which can affect how the item is classified in combination. Have you searched the category that covers your item's primary function, or only the category you assumed applied?
The CCL is structured by Commerce Category (0 through 9) and Product Group (A through E). A chemical that also has a sensing function may appear in Category 1 and again by reference in Category 2. A systematic search addresses both. In our experience, single-category searches are the most common source of classification errors in commodity-trading compliance programmes.
BIS publishes guidance on the CCL structure and maintains an online reference. No external guidance, however, substitutes for reading the applicable entry text and the associated definitions against the item's actual technical specifications.
Step 3: Apply the technical parameters honestly
Identifying the candidate CCL entry is not the same as completing the classification. Every ECCN entry sets out technical thresholds – performance parameters, materials, process specifications – and the item must be assessed against each parameter individually. If any single parameter places the item within a controlled entry, the item carries that ECCN. It is not EAR99.
This is the step that most often requires engineering or technical input. A compliance team working from a commercial data sheet that omits certain performance figures will reach an incomplete conclusion. In a recent matter, a manufacturer of industrial sensors had classified an entire product line as EAR99 based on typical-performance figures in its catalogue. When a customer requested documentation for a specific export, the actual measured performance of the unit in question exceeded a CCL threshold. The classification had to be revised, the export re-screened, and a review of prior shipments conducted.
The honest application of technical parameters means using the actual specifications of the specific item being exported – not design targets, not typical values, not the lowest-performing variant in a range. BIS enforcement takes the view that a exporter who selects a favourable specification to support a preferred classification has made a wilful error.
What risks attach to an EAR99 item that is correctly classified?
Correctly classifying an item as EAR99 does not mean the export requires no further analysis. Several independent controls can prohibit or restrict an EAR99 export regardless of classification.
First, end-use and end-user controls apply across all EAR items, including EAR99. BIS maintains the Entity List (a list of persons and organisations subject to specific licence requirements imposed by BIS on national-security and foreign-policy grounds), the Denied Persons List, and the Unverified List. A transaction with any listed party requires a licence – or, in the case of a Denied Persons List entry, is flatly prohibited – regardless of whether the item itself is EAR99. Screening against these lists is not optional.
Second, foreign-policy controls can impose licence requirements on EAR99 items for certain destinations. BIS administers controls that target specific country destinations for reasons unrelated to the intrinsic properties of the exported item. An EAR99 widget moving to a destination subject to comprehensive or targeted controls requires analysis of whether a general or specific licence applies.
Third, proliferation end-use controls – sometimes called red-flag controls – impose an obligation on the exporter to refrain from proceeding where the exporter knows or has reason to know that an item will be used in a prohibited programme. This is a knowledge-based obligation that applies to EAR99 items as readily as to higher-controlled items. It is not discharged by the EAR99 classification alone.
The position above covers the standard case. Your facts – the counterparty, the destination, the stated end use, any red flags in the transaction structure – change the analysis materially.
For an assessment of your EAR99 exposure or a review of your classification programme, contact Calder & Vance at info@caldervance.com.
How does the EAR interact with UK, EU, and other export-control regimes?
The EAR does not operate in isolation. A cross-border business exporting from multiple jurisdictions must apply each regime's classification rules independently. An item that is EAR99 under US rules may carry a controlled classification under the EU dual-use regime, the UK Export Control Order, or a national implementation of the Wassenaar Arrangement in another jurisdiction.
The EU dual-use rules, administered by member state competent authorities under a directly applicable Council regulation, use a classification structure that broadly parallels the CCL but diverges on specific technical parameters and on the list of countries subject to enhanced restrictions. An item may be EAR99 in the United States and simultaneously require an EU export authorisation for the same destination. The two analyses must run in parallel. The stricter prohibition governs – a principle that applies across all multi-regime export-control work.
The UK Export Control Order, administered by the Export Control Joint Unit (ECJU), similarly maintains a UK Strategic Export Control List that was aligned with the EU list at the point of separation but has since diverged incrementally. ECJU's licensing process for goods requiring an individual export licence follows a different procedure and timeline from BIS's commodity classification review, and the two should not be conflated.
For businesses in Canada, Australia, Singapore, and Japan, each jurisdiction's export-control regime imposes its own classification obligations. Canadian export controls administered by Global Affairs Canada, Australian export controls administered by the Department of Foreign Affairs and Trade, and Singapore's Strategic Goods Control Act each use reference lists that overlap with – but are not identical to – the CCL. EAR99 status in the United States does not confer unrestricted-export status in any of these jurisdictions.
Secondary-sanctions risk adds a further layer. Even where an item is EAR99 and no national export-control licence is required, a transaction routed through a US correspondent bank, settled in US dollars, or involving a US-person intermediary may trigger OFAC's jurisdiction. OFAC's financial-sanctions programmes cover conduct that reaches a US nexus, irrespective of the physical export-control classification of the goods involved. We regularly advise cross-border trading businesses on exactly this intersection.
If a transaction has already been flagged – whether by a screening system, a bank compliance team, or a BIS inquiry – an early review can preserve options that narrow with time. Contact us at info@caldervance.com.
Step 4: Document the determination and maintain the record
A completed EAR99 determination is only as useful as its documentation. BIS expects exporters to maintain records sufficient to demonstrate how a classification conclusion was reached – the CCL entries consulted, the technical parameters compared, the specifications relied upon, and the person responsible for the determination.
Record-keeping under the EAR extends to all export-related documents: commercial invoices, packing lists, air waybills, electronic export information filings, and the underlying classification workpapers. The applicable record-keeping obligation runs for a defined period from the date of export, and verifying the current period requirement before implementing a retention programme is advisable, as it has been subject to regulatory update. BIS enforcement actions frequently turn on the absence of contemporaneous documentation rather than on the underlying classification itself.
Where a classification is non-obvious – where a technical assessment was required, where multiple CCL categories were considered, or where a product specification changed since the last review – a written classification opinion adds a layer of defence. It demonstrates that the exporter applied good-faith diligence, which is a relevant factor in BIS's enforcement calculus when assessing whether to treat an apparent violation as egregious.
Classification records should be revisited when the product changes, when the CCL is updated, when the destination changes, or when the end-use shifts. An EAR99 determination made for a product in its original configuration does not automatically apply to a later version with enhanced performance. Triggering a reclassification review on these events is a basic element of an effective export-compliance programme.
Step 5: When to seek a commodity classification request from BIS
A commodity classification request (CCATS) is a formal request to BIS to confirm the ECCN – or EAR99 status – of a specific item. It is available where an exporter cannot resolve the classification question internally, where a significant commercial relationship depends on the classification, or where a customer or financial institution requires written BIS confirmation.
A CCATS does not replace the exporter's obligation to conduct its own analysis. BIS processes the request and issues a written classification determination. That determination is binding on BIS in respect of the specific item described in the request. It provides the clearest available defence against a later classification dispute, but it binds BIS only to the stated facts – if the item's configuration changes, the CCATS no longer applies to the changed version.
CCATS timelines are not guaranteed, and processing times vary with BIS workload and the technical complexity of the item. Businesses that rely on a pending CCATS as authorisation to export are misinformed: the request does not authorise a shipment; it clarifies the classification. Until BIS issues the determination, the exporter must act on its best current assessment and document the basis for that assessment.
In our practice, we assist clients in preparing CCATS submissions that accurately describe the item's technical parameters, identify the candidate CCL entries, and present the classification analysis in the form BIS's technical reviewers expect. A well-prepared submission typically reduces the back-and-forth that extends processing timelines.
Common risk flags and when to involve counsel
Several patterns in day-to-day export operations signal that an EAR99 assumption deserves scrutiny before a shipment moves. Recognising them early is cheaper than addressing them after the fact.
- Inherited classifications: a product has been classified as EAR99 for years, but the engineering team has updated its performance parameters without triggering a compliance review. The original classification is stale.
- Catalogue-based determinations: the classification rests on marketing materials rather than engineering specifications. Performance figures in catalogues are frequently rounded or stated as typical values, not design-limit values.
- Multi-use items: an item with a civilian primary function is also capable of a controlled military or proliferation use. CCL catch-all provisions and end-use controls apply regardless of the exporter's intent.
- Unusual routing or payment structures: a transaction that routes through an unexpected intermediary country or uses a payment route inconsistent with the stated commercial relationship is a red flag under proliferation end-use controls, even for EAR99 items.
- Customer requests for classification documentation: a customer's request for a formal classification letter may indicate that the customer's own government requires it, which suggests the destination regime treats the item differently.
- Post-acquisition integration: an acquired business's product line has never been classified against the CCL. Inherited EAR99 assumptions are common and often incorrect.
Involve counsel when the classification is technically borderline, when the transaction involves a sensitive destination or end user, when a CCATS submission is being prepared, when a BIS inquiry or audit has been received, or when the business is implementing a classification programme for the first time. A voluntary self-disclosure (VSD – a self-initiated report to BIS of an apparent violation, which is a mitigating factor in penalty assessments) is also a decision that warrants legal advice before it is made.
Related practices
- Deemed export and technology controls under BIS / EAR – licensing, technology classification, and release-to-foreign-national analysis
- EAR99 determinations – advanced topics – de minimis rules, foreign-made direct-product rules, and software classification
- EAR99 determinations under Canadian export controls – how GAC classification interacts with BIS / EAR determinations