How to verify vessel insurance certificates under BIS / EAR

A freight forwarder finalises charter terms for a controlled-technology shipment. The vessel clears initial name screening. Then, three days before loading, the compliance team discovers that the insurer's certificate references a policy underwritten by an entity whose parent appears on the BIS Entity List. The shipment halts. The deal may collapse. This is not a hypothetical: it is the pattern we see repeatedly in cross-border transactions involving controlled goods.

Vessel insurance and certificate verification under the BIS / EAR (the Export Administration Regulations administered by the Bureau of Industry and Security) is a distinct diligence obligation that sits alongside, but does not replace, OFAC screening. The EAR governs the export, re-export, and in-country transfer of items subject to US export controls. Insurance relationships can embed a prohibited party or a sanctioned jurisdiction at any point in the chain – insurer, reinsurer, P&I club, certificate issuer – and each link must be checked before a controlled shipment proceeds.

This guide walks through the verification process step by step, organised as a decision tree so that a compliance officer or trade-finance team can route their analysis correctly depending on what they find at each stage.

Which legal framework governs vessel insurance under the EAR?

The EAR, administered by BIS, governs the export and re-export of items classified on the Commerce Control List (CCL, the master schedule of controlled goods, software, and technology organised into ten categories and five product groups), as well as items designated EAR99 (subject to the EAR but not on the CCL and therefore generally freely exportable, unless a prohibited-party or prohibited-destination issue arises). Insurance is not an "item" in the CCL sense. It becomes a compliance concern under the EAR through a different mechanism: the facilitation prohibition and the prohibited-party restrictions.

Under the EAR, a US person – and in certain extraterritorial cases a non-US person – may not facilitate a transaction that, if conducted directly by that person, would be prohibited. Arranging insurance cover for a shipment destined for a denied party, an entity on the BIS Entity List, or a destination subject to a licence requirement without the required licence is facilitation. In our cross-border practice, we consistently find that trade teams focus on the cargo classification and the buyer's name, but leave the insurance chain unexamined until a problem surfaces late.

The EAR interacts with OFAC sanctions in this context. A vessel carrying controlled goods may trigger both regimes simultaneously: the OFAC overlay addresses whether the carrier, the insurer, or the destination is sanctioned; the EAR addresses whether the item requires a licence and whether any party in the transaction – including the insurer – is a prohibited party. Where two regimes both apply, the stricter prohibition governs. Always run both analyses in parallel, not sequentially.

BIS also maintains Foreign Direct Product (FDP) rules, which can bring foreign-produced goods within US jurisdiction where they are the direct product of controlled US technology or software. If the vessel's cargo has been produced outside the United States using controlled US technology, FDP analysis is a mandatory preliminary step before any export-control certificate verification can be considered complete.

Does the cargo require a licence? Branch one: classification first

Before verifying any insurance document, establish whether the cargo itself requires an export licence under the EAR – because that classification determines the stringency of every subsequent check. Items on the CCL carry an ECCN (Export Control Classification Number), which specifies the reasons for control and the licence requirements by destination. EAR99 items carry lighter requirements, but prohibited-party and prohibited-destination restrictions still apply.

If the cargo has no ECCN and is EAR99, the insurance verification task is narrower: confirm that no party in the insurance chain – insurer, reinsurer, certificate issuer, P&I club – appears on the Entity List or the Denied Persons List, and that the voyage does not transit a comprehensively restricted destination. EAR99 status is not a free pass; it is the floor of the obligation, not the ceiling.

If the cargo carries an ECCN and a licence is required for the destination, the insurance verification task expands considerably. You must confirm that the insurance arrangement does not itself constitute a prohibited transaction or an act of facilitation, and you must preserve documentation showing that the licensed transaction – including its logistics and cover arrangements – was conducted within the terms of the licence. BIS licence conditions can extend to end-use monitoring, which may include the logistics chain.

A practical tip here: obtain the full ECCN determination in writing, with the commodity-jurisdiction review if there is any doubt between the EAR and the International Traffic in Arms Regulations (ITAR, administered by the US State Department). Maritime shipments of dual-use goods sometimes sit at the boundary, and misclassification in either direction can be costly. Once classification is confirmed, document it and link it explicitly to the insurance file.

Is the insurer or any underwriting party a prohibited party? Branch two: the party-screening decision

BIS maintains two principal restricted-party lists that affect the insurance verification: the Entity List and the Denied Persons List. A US person may not export, re-export, or transfer items subject to the EAR to a party on either list without a specific licence from BIS. That prohibition extends to arranging or facilitating the transaction – which, in the maritime context, includes procuring or paying for insurance on a controlled shipment where the insurer, lead underwriter, reinsurer, or P&I club is a listed entity.

The screening task is therefore not limited to the vessel operator and the cargo buyer. It must cover: the hull insurer, the P&I club, any named reinsurer on the slip, the certificate-issuing entity if different from the lead insurer, and any correspondent insurer where the policy is a fronting arrangement. Each of these is a "party to the transaction" for EAR purposes.

Run each party through the Consolidated Screening List, which aggregates BIS, OFAC, and DDTC lists. Do not treat a clean result on the Consolidated Screening List as the end of the inquiry. OFAC's 50 percent rule (the rule treating entities owned 50 percent or more in the aggregate by blocked persons as themselves blocked) operates independently of the BIS Entity List, and an insurer that is not itself listed may be owned or controlled by a blocked person. Ownership-chain mapping is a mandatory step in any shipment involving a non-household-name insurer.

What happens if screening returns a hit? Stop. Do not proceed to bind cover, pay premium, or allow loading. A hit requires legal review before any further step. In our experience, the instinct to "check whether it is a real match" by continuing to transact while the review is pending is itself a source of exposure. A provisional booking or a premium payment made after a potential hit is identified and before it is resolved may be a separate violation.

Is the voyage route or flag state a concern? Branch three: destination and transit analysis

The EAR's extraterritorial reach means that the destination of the cargo, not merely the port of loading, determines the licence requirement. A voyage from a neutral port to a controlled destination remains subject to the EAR if the cargo is subject to the EAR. The flag state of the vessel is a separate data point: it does not itself create an EAR licence requirement, but it is a diligence indicator for the ownership and control analysis.

Examine the bill of lading, the charterparty, and any transhipment or transit documentation. A shipment routed through a transhipment hub can obscure the true final destination. BIS treats transit through a third country as not changing the item's controlled status: origin and end-use analysis follows the item, not the route. A cargo that is EAR-controlled at the point of export remains controlled through transhipment to its final destination.

Within the maritime insurance context, this creates a specific verification task. The insurance certificate should cover the full voyage, including any transhipment legs. Certificates that cover only the first leg – to a transhipment hub – and require separate cover for onward carriage are a risk flag. The gap between legs is an opportunity for the cargo to move under a cover arrangement that has not been checked. Ask explicitly for the full voyage policy, and verify each segment.

AIS (Automatic Identification System) data provides a useful cross-check. Unexplained AIS gaps, transponder switches, or sudden port calls in off-route locations are recognised diversion indicators. We regularly advise clients to integrate AIS monitoring with their insurance-verification workflow, particularly for higher-risk routes. If the voyage record and the charterparty route diverge, that divergence should be resolved before cover is confirmed. For a more detailed treatment of AIS anomaly indicators in the EU context, see our AIS anomaly indicators service page.

How does the verification process differ for a re-export?

Re-exports – the shipment of EAR-controlled items from one foreign country to another – are within the EAR's scope. This is one of the EAR's most operationally significant extraterritorial features. A non-US company re-exporting US-origin controlled goods, or goods produced outside the United States that fall within the FDP rules, must comply with the EAR exactly as if it were a US exporter. The insurance verification obligation applies equally.

The practical consequence for re-exporters is that the party-screening and destination analysis described above must be conducted by the non-US entity, not delegated to the US supplier on the assumption that the original export clearance covers the onward movement. It does not. Each re-export is a separate transaction for EAR purposes, and each requires its own licence analysis, party screening, and, where applicable, insurance-chain verification.

Does your re-export involve an intermediate party who will arrange local insurance in the destination country? If so, that local insurer must also be screened. In our experience, this is the step most commonly missed by re-exporters outside the United States who assume that local insurance is outside US jurisdiction. Where the underlying goods remain subject to the EAR, the facilitation prohibition can reach the insurance arrangement regardless of where it is placed.

For a comparison of how the OFAC regime treats vessel insurance in the same re-export context, see our companion guide on vessel insurance verification under OFAC. The two analyses overlap but are not identical: OFAC's list-based and programme-based restrictions operate differently from the EAR's prohibited-party and facilitation framework, and a transaction may be clear under one regime while presenting issues under the other.

What does a compliant insurance certificate file look like?

A complete, defensible insurance-verification file for a BIS / EAR-controlled shipment contains several distinct elements, each serving a specific evidential function if the transaction is later reviewed.

First, the classification record: a written ECCN determination, ideally supported by the manufacturer's classification, and a licence-requirement analysis for the destination. If a licence was required and obtained, a copy of the licence and any conditions attached to it belongs in this file.

Second, the party-screening record: a dated screenshot or export from the Consolidated Screening List for each insurance-chain party identified in the coverage documents. The record should show the date of the check, the name and identifier searched, and the result. Where an ownership-chain check was run, document the methodology and the sources used.

Third, the voyage documentation: the bill of lading, the charterparty (or relevant portions), and any transhipment or on-carriage documentation. If AIS data was reviewed, attach the relevant extract with a note of what was checked and what was found.

Fourth, the insurance documents themselves: the certificate of insurance, the policy slip or policy wording (particularly any reinsurance or fronting references), the P&I club entry, and any endorsements that affect the scope or parties to the cover. Where the certificate covers multiple legs, each leg should be identified and the full-voyage cover confirmed.

Fifth, any escalation record: if a potential hit was identified at any stage, document what was found, when, what was done, and by whom. A clean final determination supported by a well-documented review process is materially more defensible than a clean determination with no audit trail.

Record-keeping requirements under the EAR are demanding: records must be kept for five years from the date of the transaction. That period runs from the later of the export or the last activity in the transaction, so a multi-leg voyage may extend the clock. Build the five-year retention requirement into your document-management workflow from the outset, not as an afterthought.

What makes the position materially worse – and when to involve counsel?

Several actions taken after a potential compliance issue is identified can, and routinely do, make the legal position significantly worse. Proceeding with a transaction – including binding insurance cover, making a premium payment, or allowing cargo to load – after a potential hit has been identified but before it has been resolved is the most common. It converts a potential issue into a probable one and eliminates the ambiguity that might otherwise support a favourable enforcement outcome.

Correcting or re-issuing documentation to remove a problematic party from the visible chain is not a solution; it is a separate and serious exposure. The EAR's facilitation prohibition addresses the substance of the arrangement, not only its paperwork. Any action designed to alter the paper record after a concern has been identified should be discussed with counsel before it is taken.

A common misunderstanding – and one worth addressing directly – is the belief that contractual representations from the seller or the shipowner transfer the buyer's compliance risk. They do not. Sanctions and export-control liability is not purely contractual. A representation that a vessel, its insurer, or its operator is not subject to sanctions does not give the buyer a defence if the representation is wrong. The buyer's own compliance programme must conduct its own verification. The seller's reps are a risk-allocation mechanism between the parties; they are not a substitute for independent diligence.

Voluntary self-disclosure (VSD, a self-initiated report of a potential violation to BIS before the agency becomes aware of it) is a recognised mitigating factor in BIS's enforcement process. If an insurance-verification review uncovers a potential violation, the question of whether and how to file a VSD requires a careful legal assessment. The disclosure, its timing, its scope, and its framing all affect the outcome. This is a decision that should be made with experienced export-control counsel. Early involvement – before the disclosure is filed, or before any further transactional steps are taken – preserves the most options.

For a treatment of how the UN sanctions regime addresses vessel insurance in the same compliance context – including where UN-implementing measures interact with BIS restrictions for particular cargo categories – see our guide on vessel insurance verification under UN sanctions. The UN and BIS frameworks operate through different legal mechanisms but regularly affect the same voyage.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.