A UK-based technology distributor receives an order for commercial off-the-shelf software. The buyer is a legitimate-looking trading company. Screening returns no direct hits. But a compliance officer raises a question: does the product carry a US Export Control Classification Number, or does it sit in the residual category known as EAR99 (items subject to the US Export Administration Regulations that are not controlled under any specific classification)? And separately – does its UK financial sanctions position under OFSI (the Office of Financial Sanctions Implementation, the UK authority responsible for implementing and enforcing financial sanctions) change the calculus?
As of April 2026, EAR99 determinations and OFSI financial-sanctions obligations are distinct legal exercises that nonetheless intersect for any UK business handling US-origin goods or technology. An EAR99 classification confirms that an item is not controlled under any specific Export Control Classification Number on the US Commerce Control List. OFSI compliance, by contrast, requires screening against financial-sanctions lists and confirming that no funds or economic resources are made available to a designated person – regardless of whether the underlying goods are EAR99 or not.
This guide sets out the classification procedure step by step, explains how the two regimes interact, flags the most common errors, and clarifies when specialist counsel should be involved.
Step 1: Understand what EAR99 means – and what it does not
EAR99 is a residual category, not a positive clearance. It applies to any item that is subject to the US Export Administration Regulations but does not appear on the Commerce Control List under a specific ECCN (Export Control Classification Number, the alphanumeric identifier that describes the type of control and the reason for it). The absence of a specific ECCN means the item carries the lightest export-control burden under the EAR – but it does not mean the item is free from all US export requirements.
Three key points follow from this. First, EAR99 items can still be subject to licence requirements if the transaction involves a sanctioned destination, a denied party, or a prohibited end-use. Second, the EAR classification says nothing about whether UK financial sanctions apply to the parties. Third, EAR99 status can change: a commercial product that is EAR99 today may be added to the Commerce Control List following a regulatory review. Verify the current position before any high-value or repeated transaction.
In our experience, businesses make the error of treating EAR99 as a blanket green light. It is more accurate to treat it as the starting point of a two-track analysis – one track for US export controls, one track for UK (and potentially EU) financial and trade sanctions. Both tracks must be completed before a transaction can proceed.
Step 2: Carry out the ECCN classification exercise
Before a business can rely on EAR99 status, it must confirm that the item in question does not fall under any specific ECCN on the Commerce Control List. This is an affirmative classification exercise, not a default assumption. Skipping it is the single most common compliance gap we encounter.
The classification process has a defined sequence. First, identify whether the item is subject to the EAR at all. Most commercial goods of US origin or containing more than a de minimis proportion of US-controlled content are subject to the EAR. Second, review each category and product group on the Commerce Control List to determine whether the item's technical parameters – its function, performance thresholds, materials, and software characteristics – correspond to any ECCN. Third, if no ECCN applies, the item is EAR99.
This review should be documented. A written classification record, signed by the responsible person, creates the audit trail that regulators on both sides of the Atlantic expect. Where technical expertise is needed – for example, for items with encryption functions, sensing capabilities, or advanced materials – involve a technical specialist in the review. An undocumented EAR99 assumption is worth very little in an enforcement context.
Related guidance on the deemed-export dimension of this analysis – particularly for technology transfers to foreign nationals on UK soil – is available from Calder & Vance at our BIS/EAR deemed-export technology service page.
Step 3: Run the OFSI financial-sanctions screen independently
Once EAR99 status is confirmed, the OFSI analysis begins separately. OFSI administers UK financial sanctions under the Sanctions and Anti-Money Laundering Act 2018 ("SAMLA") and the relevant thematic sanctions regulations made under it. Financial sanctions prohibit making funds or economic resources available, directly or indirectly, to a designated person or entity. This prohibition applies to the supply of goods, the provision of services, and the processing of payments.
The screening process under OFSI has its own logic. Screen the counterparty, its beneficial owners, and any intermediary against the UK Consolidated List. Apply the ownership and control test (the UK rule that treats a non-listed entity as caught if a designated person owns or controls it). Consider whether the goods or services constitute an economic resource within the meaning of the applicable sanctions regulations.
What does "economic resource" mean in this context? Under UK financial-sanctions law, an economic resource is any asset – tangible or intangible – that may be used to obtain funds, goods, or services. Even an EAR99 item can be an economic resource if a designated person could use it to generate value. That is a broader concept than many compliance teams initially expect.
OFSI's guidance confirms that the prohibition on making economic resources available covers indirect dealings. A distributor that sells through a non-listed intermediary who then on-sells to a designated person can still be in breach. The chain of supply matters, not just the first transaction.
Step 4: Apply the ownership and control test to counterparties
The ownership and control test is where OFSI and OFAC diverge in a way that materially affects cross-border transaction analysis. Under OFAC's approach, a non-listed entity is treated as blocked if designated persons own it 50 percent or more in aggregate, directly or indirectly. The test is mechanical and ownership-focused.
Under OFSI and the equivalent EU position, the test has two limbs: ownership and control. A non-listed entity can be caught even where designated-person ownership falls below any fixed threshold, if a designated person exercises control over the entity's decisions, management, or resources. Control can be formal – through governance rights or board composition – or factual. This is a more contextual and potentially wider test than the OFAC approach.
Why does this matter for EAR99 determinations? Because a UK business supplying EAR99 goods must consider both tests in a cross-border deal. A transaction may clear the OFAC ownership threshold but still fall within OFSI's control test – or vice versa. In a recent matter, a manufacturing business in a regulated sector identified that a counterparty's parent held a stake below the OFAC threshold but exercised effective board control under the relevant shareholders' agreement. The OFSI analysis required a fuller review of governance documents before the transaction could proceed. We assisted with the legal analysis and structured the approach to the documentation exercise.
For cross-border transactions that also involve Singapore-regime considerations, Calder & Vance has produced a companion guide: EAR99 determinations under the Singapore regime.
Step 5: Assess end-use risk and secondary sanctions exposure
EAR99 classification does not insulate a UK exporter from end-use risk. Under the EAR, a licence may be required even for EAR99 items if the exporter knows or has reason to know that the goods will be used in a prohibited programme or by a prohibited party. The red-flag standard under BIS guidance requires exporters to address suspicious indicators before proceeding.
Secondary-sanctions risk is a separate and often underweighted concern. Where a UK business has significant US-dollar exposure, US-person involvement in a transaction, or uses US financial infrastructure, OFAC's secondary-sanctions architecture may apply alongside OFSI obligations. Secondary sanctions are not a direct legal prohibition on the UK entity – they operate by threatening the loss of access to the US financial system. In our cross-border practice, we regularly advise businesses where both OFSI and OFAC considerations are live simultaneously, and the two analyses must be run in parallel rather than sequentially.
The question of which regime's stricter prohibition governs is not always straightforward. As a general principle, where two regimes both apply to a transaction, the stricter prohibition takes precedence for the party subject to that regime. A UK business that is simultaneously subject to UK financial sanctions and exposed to OFAC secondary-sanctions risk should map both sets of obligations before committing to any transaction structure.
Step 6: Document, escalate, and maintain records
Good documentation is not a formality. It is the evidence base that determines whether a potential breach is treated as a minor administrative error or a serious compliance failure. OFSI's enforcement approach takes into account the quality of a business's compliance programme and its record-keeping when assessing responses to apparent violations.
Each EAR99 determination should be recorded in a classification file that captures: the item's technical description, the review of Commerce Control List categories, the conclusion and reasoning, the name of the person responsible, and the date. Each OFSI screen should capture: the list version consulted, the counterparties screened, the outcome, and any escalation steps taken.
Records should be retained for a period consistent with the applicable regulatory requirement. Under UK financial-sanctions obligations, businesses are generally expected to maintain records for a significant period following each transaction. Verify the applicable retention period under the relevant thematic regulations and OFSI guidance before relying on any fixed figure, as requirements vary by instrument and are subject to amendment.
Escalation triggers should be defined in advance. If a screen returns a potential match, if a counterparty declines to provide ownership information, or if a transaction structure changes materially after initial screening, the compliance process should restart. Stale screens on active transactions are a recurring source of exposure.
Risk flags and when to involve counsel
Several patterns consistently generate elevated risk in EAR99 and OFSI compliance work. A business that recognises any of the following in a live transaction should treat it as a trigger for specialist legal review.
- The counterparty is unwilling to provide beneficial-ownership information or produces documentation that is inconsistent across requests.
- The goods are EAR99 but have a dual-use characteristic – for example, they can be used in telecommunications, sensing, or materials processing at parameters approaching controlled thresholds.
- The transaction involves an intermediate party in a jurisdiction known for transshipment risk.
- A shareholder of the buyer appears on a non-UK sanctions list – for example, the UN Consolidated List or an EU list – but not on the UK Consolidated List. Divergent designations across regimes are increasingly common and require regime-by-regime analysis.
- The transaction involves payment through a third-country financial institution, raising the question of whether that institution is itself subject to OFSI obligations or exposed to OFAC correspondent-banking risk.
- The counterparty operates in a sector that is subject to thematic sanctions measures – defence, energy, or financial services – regardless of whether it is individually designated.
Is EAR99 status enough on its own to proceed? In straightforward commercial transactions with screened counterparties and no red flags, it often is. But in complex cross-border deals – particularly those with US-dollar flows, US-person participation, or counterparties in jurisdictions subject to thematic measures – EAR99 classification is only the beginning of the analysis.
- Deemed-export and technology transfer under BIS/EAR – classification, deemed-export licensing, and technology-transfer controls for US-origin items
- EAR99 determinations under OFSI: advanced issues – extended analysis of complex scenarios including dual-use re-classification and thematic-sanctions interaction
- EAR99 determinations under the Singapore regime – how Singapore's applicable country regime applies to EAR99 items in trans-shipment and re-export contexts
A common misconception: "if it's EAR99, the deal can proceed"
Many businesses assume that an EAR99 finding settles the compliance question. It does not. EAR99 addresses only one of several control layers that can apply to a transaction. Financial sanctions, trade sanctions, end-use controls, and sector-specific measures each operate independently of export-control classification.
We regularly advise businesses that have received an incorrect internal steer on this point. The two analyses – EAR99 classification and OFSI financial-sanctions screening – are legally separate. A business that conflates them risks either blocking legitimate transactions unnecessarily or proceeding with a transaction that carries real sanctions exposure. Neither outcome is acceptable, and neither reflects sound compliance practice.
The position above covers the standard case. Your facts – the counterparty, the goods, the route, the regime in play – change the analysis. To discuss a specific transaction or to review your classification and screening process, contact Calder & Vance at info@caldervance.com.