A technology exporter ships advanced equipment to a distributor in a third market. The shipment clears one customs authority without incident. Two weeks later, a second jurisdiction opens an investigation: the item is on its control list, no licence was obtained, and the exporter did not know a second determination was required. The compliance cost of that oversight – legal fees, halted shipments, reputational exposure – far exceeds what a pre-shipment classification review would have cost.
Export-licence determinations across regimes require a business to ask the same core question – does this item, to this destination, for this end-use, require a licence? – under each applicable legal regime simultaneously. As of May 2026, the United States EAR (administered by BIS), the UK Export Control Order (administered by ECJU), and the EU dual-use rules each operate independent classification systems with their own control lists, licence exceptions, and procedural deadlines. A determination that satisfies one authority does not satisfy another.
This guide walks the cross-border determination process step by step: from item classification through destination and end-use checks to licence application, cross-regime divergence, and the risk flags that most frequently trigger enforcement attention.
Step 1: Classify the item under each applicable control list
Classification is the foundation of every export-licence determination, and it must be repeated independently for each regime in play. Under the US EAR, each item is assigned an ECCN (Export Control Classification Number – the alphanumeric code on the Commerce Control List that governs whether and to which destinations a licence is required). Under the UK regime, the control list mirrors a similar structure but is maintained separately by ECJU. The EU dual-use list, set out in the relevant Council Regulation, uses its own numbering system and is periodically updated.
The three lists are broadly harmonised through the Wassenaar Arrangement and other multilateral export-control regimes, but they are not identical. An item that falls below the control threshold in one list may sit above it in another. Dual-use items – goods and technology with both civilian and military potential – demand the closest scrutiny, because the same product can carry different classification outcomes across jurisdictions.
In our cross-border practice, misclassification at this stage is the single most common source of downstream problems. A classification that relies only on the manufacturer's datasheet, without consulting the applicable control list or seeking a formal classification ruling, will not withstand regulatory scrutiny. For businesses exporting US-origin technology that is subsequently re-exported or transferred, the deemed-export and technology-transfer framework under the BIS/EAR adds a further layer of analysis before classification can be treated as complete.
Step 2: Apply the destination and end-use checks
Once classification is complete under each regime, the next step is to overlay the destination and end-use controls that may trigger a licence requirement or an outright prohibition. These tests operate at two levels: the country-level controls embedded in each regime's own list of destinations and arms-embargo targets, and the transaction-specific checks that look through the stated use to the actual end-use.
Under the EAR, country groupings determine which licence exceptions apply and which require a case-by-case OFAC or BIS licence. Under ECJU, the Open General Export Licences provide a degree of self-certification for low-risk destinations, but require registration and careful record-keeping. The EU regime similarly provides for Community General Export Authorisations, but individual member states administer their own licences for items outside those authorisations.
The end-use check is distinct from destination. A shipment to a low-risk country can still require a licence – or be prohibited entirely – if the declared end-use is military, nuclear, chemical, or biological, or if there are red flags suggesting diversion to a restricted programme. Under all three regimes, a business that proceeds despite red flags faces the risk of a "knowledge" finding – a legal standard under which proceeding in the face of warning signs is treated as the equivalent of knowledge of the prohibited use. Have you documented your due diligence on the end-user, or relied solely on the stated declaration?
Step 3: Identify applicable exceptions and open authorisations
Before filing a licence application, a business should identify whether any licence exception or general authorisation removes the requirement entirely. Each regime provides a menu of such exceptions, but the conditions attached to them are precise, and a business that relies on an inapplicable exception is in the same position as one that exported without a licence.
Under the EAR, named licence exceptions (such as those for technology, software, civil end-users, or intra-company transfers) carry their own eligibility conditions, dollar thresholds, and geographic limitations. Relying on an exception requires verifying every condition. Under ECJU, Open General Export Licences are numerous but regime-specific; each OGEL has its own list of eligible goods and permitted destinations. The EU's Community General Export Authorisations are similarly structured. Where an exception appears to be available, the compliance team should document the analysis in writing – not assume the exception applies.
Where no exception is available, the business must choose between applying for a licence and not proceeding with the transaction. That choice should be made before contracting, not after. We regularly advise clients at the pre-contract stage to carry out a full exceptions analysis before committing to timelines that assume a licence will be granted.
The position above covers the standard case. Your facts – the item, the destination, the end-user, the stated use, and the regimes triggered – change the analysis materially. For an assessment of your export-licence requirements under a specific cross-border footprint, contact Calder & Vance at info@caldervance.com.
Step 4: Apply the cross-regime comparison – where do US, UK, and EU determinations diverge?
The three major export-control regimes share a common architecture – classify, check the destination, check the end-use, identify exceptions, apply for a licence if needed – but they diverge in ways that create material compliance gaps for cross-border businesses.
First, the extraterritorial reach of the EAR. The US regime applies to US-origin items, US-origin technology, and items incorporating US content above the applicable de minimis threshold, wherever those items are located. A non-US company re-exporting an item that contains US-controlled content must comply with the EAR even if it has no US presence. The UK and EU regimes are primarily territorial – they apply to goods exported from the UK or EU respectively – though both include provisions that extend to technology transfers and brokering activity.
Second, the treatment of intangible transfers. US controls extend to the release of controlled technology to foreign nationals in the United States (the "deemed export" rule) and to transfers of controlled source code and technology by electronic means. The UK Export Control Order and the EU rules also cover intangible transfers, but the scope and conditions differ. A business managing a globally distributed engineering team must carry out separate analyses for each applicable regime.
Third, the licensing procedure itself. BIS licence applications go to the Department of Commerce and may involve referral to other agencies, with statutory processing windows that vary by item and destination. ECJU processes Standard Individual Export Licences with published processing targets. EU licences are granted at member-state level, meaning the processing time and information requirements differ across the EU's twenty-seven member states. A business filing simultaneously under two or three regimes faces concurrent timelines and different document requirements.
Fourth, the consequences of divergence. Where the US imposes a stricter control than the UK or EU – for example, through foreign-direct product rules that extend US jurisdiction to certain semiconductor-related items – the US rule governs for any person subject to it, regardless of what the UK or EU regime permits. Conversely, where the EU or UK imposes a stricter control through an arms embargo or a thematic sanctions regulation, that control may apply even to items the EAR does not restrict. The rule in cross-regime practice is simple: the stricter prohibition governs, and a licence under one regime does not authorise the transaction under another.
For EU-specific determination steps and licensing procedures, see also our guide to export-licence determinations under the EU dual-use regime.
Step 5: Prepare and submit the licence application
Where no exception applies, the licence application is the operative step. A well-prepared application materially reduces the risk of a return without action, a request for additional information, or a refusal. Each of the three regimes has its own form, its own mandatory supporting documents, and its own processing culture.
Under the EAR, a BIS licence application requires an item description tied to the ECCN, end-use and end-user information, a transaction summary, and in many cases a formal end-use certificate from the foreign end-user. Applications for items in sensitive categories – advanced semiconductors, certain cryptographic items, items with military applications – require particularly detailed end-user documentation and may trigger an interagency review.
Under the UK regime, an ECJU Standard Individual Export Licence application requires a description of the goods, the relevant entry on the UK control list, the destination and end-user details, and confirmation of compliance with any applicable open licence conditions already checked. ECJU publishes guidance on what supporting material is expected for specific item categories.
Under the EU regime, the application is made to the competent authority of the member state from which the export will take place. Documentation requirements mirror the BIS and ECJU requirements in substance, but the forms, the reviewing body, and the supplementary requirements (including, in some member states, an in-country translation) differ by jurisdiction. A business that manufactures in one member state but ships from another should confirm which authority has jurisdiction over the application before filing.
In all three regimes, incomplete applications are the most common cause of delay. Confirm before submission that every field is complete, that all supporting documents are attached, and that any end-use certificate has been signed by an authorised signatory of the actual end-user – not a distributor or intermediary.
What are the most common risk flags in export-licence determinations?
Several recurring patterns generate the highest enforcement risk in export-licence determinations, and they appear consistently across regimes.
The first is self-classification without verification. A business that assigns its own ECCN or UK/EU control list entry without consulting the applicable list, relevant guidance, or a specialist adviser is carrying unquantified classification risk. Errors discovered during an enforcement investigation cannot easily be corrected retroactively.
The second is reliance on outdated classifications. Control lists are amended periodically. A classification carried out two years ago may not reflect the current list. We advise clients to build a periodic review of existing classifications into their compliance calendar, particularly for items in categories subject to active multilateral negotiation (dual-use electronics, advanced materials, cryptographic items).
The third is incomplete ownership and control analysis on the end-user. A transaction to a permitted destination may still be prohibited if the end-user is under the 50 percent or more ownership of a designated entity, or if red flags suggest the declared end-user is acting as a front for a restricted programme. Under each regime, a business that proceeds in the face of such red flags bears the risk of a knowledge finding.
The fourth is failure to screen for denied parties and entity-list entries. The US maintains the Entity List and the Denied Persons List in addition to OFAC's SDN List (OFAC's list of Specially Designated Nationals and blocked persons); the UK and EU maintain their own consolidated lists. An item otherwise licensable under the EAR requires a licence for any transaction involving an entity-listed party, regardless of the item's classification. Screening must cover all applicable lists, not just the most familiar one.
The fifth is a documentation gap. All three regimes require that records of the determination, the exceptions analysis, the application, and the end-user documentation be retained for a defined period. A business that cannot produce its compliance record during an audit or investigation faces a presumption of non-compliance that is difficult to rebut. If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time – contact Calder & Vance at info@caldervance.com.
When to involve export-control counsel
Export-control counsel adds most value at the earliest stage of a transaction – before classification decisions are locked in, before a contract is signed, and before a licence application is drafted. Early involvement allows the analysis to shape the deal structure, the contractual protections, and the documentation strategy.
There are, however, several situations that make early involvement not merely valuable but essential. The first is a multi-regime transaction: where a single item triggers EAR, UK, and EU controls simultaneously, the co-ordination of three parallel determinations and three potential licence applications is a specialist task. The second is a transaction involving US-origin technology in a non-US supply chain, where the deemed-export and de minimis analyses require BIS-specific expertise. The third is any transaction where the end-user documentation is incomplete or where red flags have been identified but not resolved.
A common myth is that export-control counsel is only needed once a problem has already occurred. In practice, the cost of counsel at the determination stage is a fraction of the cost of managing an enforcement inquiry, a voluntary self-disclosure, or a licence refusal that requires reconsideration. The question is not whether to involve counsel, but when. The answer, consistently, is earlier than most businesses instinct suggests.
We have acted for exporters across manufacturing, technology, aerospace components, and advanced materials, handling determination reviews, licence applications, and enforcement responses across EAR, ECJU, and EU controls. Our process combines item classification, counterparty screening, and cross-regime comparison in a single integrated review.
Related practices
- Deemed export and technology transfer – BIS/EAR – US regime analysis for intangible transfers and foreign-national access to controlled technology
- Export-licence determination guide 3 – extended cross-border export-control analysis for complex supply chains
- EU export-licence determination guide – step-by-step analysis of EU dual-use licence requirements and procedures