A trading company in Singapore closes a purchase order with a distributor in a third market. The goods are dual-use items that carry a classification under the Export Control Classification Number (ECCN – the US Commerce Control List code that determines which licence requirements attach to a controlled item). The distributor's principal is listed on the Entity List (BIS's register of parties subject to enhanced licence requirements or outright denial). The shipment is blocked at the US re-export stage. Penalties follow. Could the exporter have seen this coming?
Counterparty due diligence under BIS / EAR legal support means systematically checking every party in a supply chain – buyers, distributors, freight forwarders, end-users, and financing parties – against US export-control lists and end-use red flags before a transaction proceeds. The Export Administration Regulations (EAR – administered by the Bureau of Industry and Security, BIS) impose obligations not only on US exporters but on any party that re-exports, transfers, or causes a controlled item to move. A missed hit on the Entity List or a failure to identify a prohibited end-use can attract civil penalties or criminal liability under the Export Control Reform Act.
This page covers how counterparty due diligence works under the BIS / EAR regime, where it diverges from OFAC, OFSI, and EU screening, what the key risk flags look like, and how Calder & Vance structures the analysis for cross-border clients.
What does the BIS / EAR regime require in counterparty screening?
BIS administers the EAR under authority derived from the Export Control Reform Act. The regime applies to items on the Commerce Control List (CCL – the list of controlled goods, software, and technology classified by ECCN) as well as to certain items subject to the EAR99 designation (goods not specifically listed but still subject to the EAR's general prohibitions). Any exporter, re-exporter, or transferor of controlled items must screen all transaction parties against the relevant lists and satisfy itself that no prohibited end-use or end-user is involved.
The primary lists an exporter must check are the Entity List, the Denied Persons List, the Unverified List, and the Military End-User list (MEU list – a BIS register of parties in specific countries to whom exports of certain items are restricted absent a licence). These are distinct instruments with distinct legal consequences. Being on the Unverified List, for instance, means BIS has been unable to verify the party's bona fides through a pre-licence or post-shipment check; that status alone precludes reliance on certain licence exceptions. In our practice, confusing these lists – or running a screen that covers only one of them – is one of the most frequent compliance gaps we encounter in manufacturing and technology-sector clients.
The position above covers the standard obligations. Your specific facts – the ECCN of the item, the destination country, the role each party plays, and any red flags in the transaction documents – will materially change the analysis. For a structured screening review, contact Calder & Vance at info@caldervance.com.
How does the BIS end-use analysis differ from an OFAC ownership test?
The BIS / EAR counterparty analysis is not the same as an OFAC sanctions screen, and running only one of them leaves material exposure uncovered. OFAC's primary counterparty question is status-based: is this party a Specially Designated National (SDN – a person whose assets are blocked and with whom US persons are generally prohibited from transacting) or does the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) capture an unlisted entity? Under OFAC the analysis is largely binary once ownership is mapped.
Under BIS the analysis is multidimensional. A party may not appear on any BIS list and yet trigger a licence requirement or a denial because of its intended end-use – for instance, the development of weapons of mass destruction or certain military applications in a country of concern. BIS's red flag guidance instructs exporters to resolve any inconsistency or implausibility in a transaction before proceeding; proceeding with knowledge or reason to know of a prohibited end-use is itself an EAR violation. This end-use and end-user discipline is fundamentally different from the OFAC list-match model. A business that treats its BIS check as a simple list screen – rather than an end-use and transactional-context review – is operating with a compliance gap even if every name comes back clean.
OFSI in the UK and the EU Council regulations both apply an ownership and control test (the UK and EU formulation for capturing non-listed entities through a listed person's influence), which is closer to the OFAC model than to the BIS end-use framework. Where a transaction touches all three regimes, separate analysis tracks are required. We regularly advise clients who discover mid-transaction that their OFAC and EU screens were complete but their BIS end-use analysis was absent entirely.
What are the red flags that trigger enhanced counterparty review?
BIS has articulated a set of circumstances – commonly called red flags – that require an exporter to pause and investigate before proceeding with a transaction. These are fact-pattern signals, not list matches, and they require judgment rather than database queries. That qualitative element is precisely where exporters without specialist counsel tend to under-invest.
The most consequential red flags in practice include the following situations. A buyer declines to provide information about end-use or end-users. The stated application for a controlled item is inconsistent with the buyer's known business. Payment terms, shipping routes, or freight-forwarding arrangements are inconsistent with the commercial context. A request is made to omit the ECCN or export-licence information from shipping documents. The destination country is one where that category of controlled item is frequently diverted. None of these flags, alone, necessarily establishes a violation. But any one of them shifts the analysis: the exporter must investigate, document its assessment, and determine whether a licence is required.
What happens when a red flag is identified but the exporter proceeds anyway? BIS may treat that as wilful blindness, which is treated similarly to actual knowledge for penalty purposes. That is not a minor procedural concern: it is the difference between a strict-liability civil penalty and a knowing violation with a materially higher penalty base. If a transaction has already been flagged internally or by a freight forwarder, the time to involve counsel is before the shipment moves, not after. Contact Calder & Vance at info@caldervance.com for a rapid review.
How does the review process work in practice?
A properly structured counterparty due diligence review under the EAR proceeds in four sequential steps. Each step has a defined output that feeds the next.
- Item classification and list-trigger mapping. Before screening any party, the exporter must confirm the ECCN for each item in the transaction. The ECCN determines which country groups and end-uses trigger a licence requirement. Without a confirmed classification, a list-clean counterparty can still produce a violation if the item is mis-classified at EAR99 when it should carry a controlled ECCN. We assess the item description, the manufacturer's technical data, and the applicable CCL entries to confirm or challenge the working classification.
- List screening across all transaction parties. Every party with a role in the transaction is screened against the Entity List, the Denied Persons List, the Unverified List, the MEU list, and the OFAC SDN list (because the same shipment may trigger both BIS and OFAC exposure). Screening logic must handle transliteration variants, alternate names, and affiliated entities. Partial name matches require manual adjudication.
- End-use and end-user analysis. The stated end-use is tested against the controlled-item categories that attract BIS's heightened licence requirements. Documentary evidence – purchase orders, end-user statements, technical specifications – is reviewed for consistency. Red flags are logged and assessed. Where the end-use cannot be confirmed with confidence, we advise on whether to seek a licence, a voluntary clarification from BIS, or a pre-licence check (a formal BIS verification mechanism for uncertain end-user situations).
- Documentation and determination. The review is recorded in a diligence file that can be presented to BIS in the event of an inquiry. The file sets out what was checked, what was found, how red flags were resolved, and the legal basis for proceeding or declining. Where a licence is required, we assess the applicable licence exception and, if no exception fits, prepare the licence application. Where a voluntary self-disclosure is advisable, we advise on scope and timing.
This process applies equally whether the exporter is US-based or non-US and is re-exporting or transferring items subject to the EAR. Extraterritoriality is a structurally important feature of BIS jurisdiction that many non-US exporters underestimate.
What is the extraterritorial reach of BIS / EAR jurisdiction?
The EAR has extraterritorial effect: it applies to the re-export and in-country transfer of US-origin items and of items incorporating US-controlled technology beyond a defined threshold, regardless of where the re-exporter is located. A German distributor re-exporting a product that contains US-origin components above the relevant de minimis threshold (BIS's rule for determining when foreign-produced items are subject to the EAR by reason of US content) is subject to the EAR and must conduct counterparty due diligence to the same standard as a US exporter.
This reach is broader than many non-US businesses appreciate. In our experience, the gap is most acute in three sectors: semiconductor supply chains, where US-origin technology is pervasive; aerospace and defence, where dual-use components move through multiple jurisdictions; and software, where US-developed encryption or other controlled technology is embedded in products that are then distributed globally. A non-US company that has never exported from the United States may still face EAR obligations if its product line incorporates qualifying US technology.
The interaction with EU dual-use controls is also relevant. The EU Regulation on dual-use items imposes parallel licensing obligations on EU-based exporters. Where a transaction involves a controlled item under both the EAR and the EU dual-use rules, the stricter restriction governs for each regime's jurisdictional reach. We advise on both simultaneously so that the diligence file addresses the full regulatory perimeter rather than only one of the two applicable regimes.
Common compliance gaps and how to identify them before a transaction
The most frequent compliance failures in BIS / EAR counterparty diligence are structural rather than isolated. They recur across industries and transaction types because they reflect gaps in the screening programme design, not just individual oversights.
The first and most common gap is relying on an OFAC or UN sanctions screen as a substitute for BIS list screening. The lists are separate instruments maintained by different agencies. An SDN screen does not cover the Entity List. A company whose compliance programme runs only OFAC checks may be unaware that a counterparty or its principal appears on the Entity List or the Denied Persons List with potentially more severe restrictions attached.
The second gap is static counterparty records. BIS updates its lists on a rolling basis, sometimes adding parties between a due-diligence review and the actual shipment date. A screen run at the time of contract negotiation that is not refreshed at the point of export can miss a listing that was added in the intervening weeks. We advise clients to implement a dated re-screen at the point of shipping and to maintain that re-screen record in the transaction file.
The third gap is incomplete coverage of the supply chain. Screening the direct buyer is necessary but not sufficient. Freight forwarders, banking intermediaries, and sub-distributors named in transaction documents must be screened. A controlled item routed through an Entity List freight forwarder – even to a clean end-buyer – can produce a violation because BIS's prohibitions attach to the act of facilitating an unlicensed transaction, not only to the end-recipient.
In a recent matter, a technology manufacturer with a well-resourced compliance team discovered that its logistics provider had added a carrier subsidiary that appeared on the Unverified List. The carrier had been used for three shipments before the discrepancy was identified. We assisted the manufacturer in scoping the apparent violation, advising on a voluntary self-disclosure strategy, and redesigning the supplier-screening workflow to capture logistics partners as first-class screening subjects. The matter was resolved without civil penalty, though outcomes in any matter depend on specific facts and cannot be guaranteed.
When should a business involve BIS / EAR compliance counsel?
The answer, in our view, is earlier than most businesses instinctively do. Counsel adds the most value at the point when a transaction is being structured – when classification decisions are being made, counterparty lists are being assembled, and shipping routes are being confirmed – rather than after a potential violation has crystallised.
There are, however, specific triggers that require immediate involvement. A counterparty that appears on the Entity List, the Denied Persons List, or the Unverified List demands legal review before any further steps. A transaction that involves a country subject to comprehensive export-control restrictions, or a buyer in a sector flagged in BIS guidance, should not proceed on internal review alone. A freight forwarder or intermediary that requests route changes at short notice, or declines to provide end-user documentation, is a red-flag situation that warrants an external assessment.
A myth we regularly encounter is that specialist export-control counsel is only necessary when an item is on the CCL. That is incorrect. Even EAR99 items can require a licence for certain destinations, end-users, or end-uses. The end-use analysis applies regardless of ECCN classification. A business selling what it believes to be low-controlled items may still be exposed if those items move to a prohibited end-user or support a prohibited programme. The label EAR99 provides less protection than many exporters assume.
Related practices
- Compliance audit and testing – independent review of your export-control screening programme and gap analysis
- Counterparty due diligence under EU sanctions – parallel EU dual-use and sanctions screening for cross-border transactions
- Counterparty due diligence under OFAC – US financial-sanctions screening, ownership analysis, and SDN list assessment
How Calder & Vance approaches BIS / EAR counterparty due diligence
Our team advises exporters, manufacturers, distributors, and financial institutions on export-control counterparty diligence across the major regimes. For BIS / EAR matters specifically, we classify the controlled items, screen all transaction parties across the full set of BIS and OFAC lists, conduct the end-use and end-user analysis, and prepare a diligence file that meets the standard BIS expects to see in an enforcement or inquiry context.
Where a licence is required, we assess whether a licence exception applies and, if not, prepare and submit the licence application to BIS and manage the agency's queries. Where a voluntary self-disclosure is advisable – because a prior shipment may have violated the EAR – we scope the apparent violation, advise on the disclosure strategy, and prepare the submission. We also design end-use controls, including end-user certificate programmes and contractual compliance obligations, for clients building a scalable export-compliance programme.
Cross-regime coverage is available in a single engagement. Where the same transaction also engages OFAC, OFSI, EU dual-use, or the UN Consolidated List, we structure the diligence to address each regime without requiring the client to instruct separate counsel for each. For matters requiring advice under a jurisdiction where local counsel is needed, we coordinate with local counsel in the relevant jurisdiction while managing the overall analysis.
To discuss counterparty due diligence under the BIS / EAR regime, or to stress-test your existing export-control screening programme, contact Calder & Vance at info@caldervance.com.