classification

ECCN – Complete Guide: Understanding, Using, and Mastering the Export Control Classification Number

In the world of technology exports, one acronym appears regularly: ECCN. Behind these four letters lies the Export Control Classification Number, a code that determines whether a product, software, or technology is subject to specific controls and export licenses.

Born from U.S. regulations, the ECCN has now become a universal language of export compliance. Even European or Asian companies often need to know it, whether to work with U.S. partners, be part of an international supply chain, or simply secure their trade flows.​

This article aims to give you a comprehensive overview of ECCN:

  • What it is and why it matters
  • What its origin and scope are
  • How to determine it
  • How it differs from other codes such as the HS Code or the USML
  • What consequences it has for your exporting business

The goal is to give you a clear and structured view of the role of ECCN in export compliance.

  • What is an ECCN
  • Origin and regulatory framework of ECCN
  • Why is ECCN so important?

What is an ECCN?

An ECCN (Export Control Classification Number) is a classification code used to identify goods, software, and technologies subject to the Export Administration Regulations (EAR), administered by the Bureau of Industry and Security (BIS) in the United States.​

In practice, the ECCN helps answer a simple question:
👉 Can my product be exported freely, or do I need to obtain an export license?​

The ECCN is not just an administrative code: it reflects the degree of technological and strategic sensitivity of a product.​

Types of items covered

  • Physical items: electronic components, telecommunication equipment, sensors, space systems, drones, etc.
  • Software: encryption programs, cybersecurity applications, navigation systems.
  • Technology: technical know-how, documentation, design data.​

👉 In other words, ECCN covers the full spectrum of exportable technologies.​

Origin and regulatory framework of ECCN

U.S. foundation​

Historically, ECCN is a U.S.-specific tool embedded in the EAR. Its initial objective was to protect national security by controlling the spread of sensitive technologies (nuclear, cryptography, space, etc.).​

International use​

Even though ECCN remains a U.S. instrument, it is now used far beyond U.S. borders:​

  • European companies use it in their trade with the United States.
  • Multinationals require their subsidiaries to classify their products with an ECCN.
  • International contracts often require the ECCN of the product to be communicated.​

Thus, ECCN has become a common language of export compliance, whether you are based in Paris, Tokyo, or Bangalore.​

Why is ECCN so important?

Identifying required licenses​

Knowing the ECCN makes it possible to determine whether a product requires a license to be exported to a given country.​

Avoiding sanctions and delays​

A classification error can have serious consequences:​

  • High financial penalties.
  • Goods blocked in customs.
  • Loss of trust from business partners.

Structuring internal compliance

Determining the ECCN is part of a broader Internal Compliance Program (ICP) for export controls.

ECCN vs other classification systems​

ECCN vs HS Code​

  • HS Code: customs and tariff classification.
  • ECCN: export and security classification.

A single product can have both an HS Code and an ECCN, but they are used for very different purposes.​

ECCN vs USML​

  • ECCN: so‑called “dual‑use” items (civil/military).
  • USML (United States Munitions List): strictly controlled military equipment under ITAR.

👉 This distinction is essential for aerospace and defense companies.​

ECCN vs European classification​

In Europe, Regulation (EU) 2021/821 on dual‑use items does not use ECCN but a common EU control list. However, in practice, many European companies still use ECCN in order to communicate effectively with U.S. partners.​

How to determine your ECCN? (general overview)​

Determining the ECCN is based on a structured method:​

1. Collect technical information​

Gather performance data, intended uses, and integrated components.​

2. Identify the product category​

Place the product in the correct “technology family” (software, electronics, space, etc.).​

3. Check control criteria​

Compare product performance with the thresholds in the regulations (encryption strength, resolution, power, accuracy, etc.).​

4. Confirm whether an ECCN exists​

  • If the product matches an entry → a specific ECCN applies.
  • If not → generic classification as “EAR99” on the U.S. side, or “not listed” in Europe.​

5. Document the process

Record the criteria used, the sources consulted, and keep an auditable trail.

👉 For a detailed step‑by‑step guide, see the article “How to determine my ECCN code”.​

Concrete application examples

Example 1 – Cybersecurity software​

A European publisher sells an encryption solution.​

  • From a U.S. perspective, this software falls under an ECCN related to encryption.
  • Even in Europe, the partner will often require that this code be communicated.​

Example 2 – High‑resolution camera​

An imaging sensor exported to Asia.

  • Depending on resolution and performance, the camera will be classified under a specific ECCN.
  • The U.S. customer uses this code to validate the export.​

Example 3 – Standard mechanical part​

A supplier of generic aeronautical parts.

  • Non‑sensitive product → no specific ECCN (classified as EAR99).
  • A documented analysis serves as evidence of due diligence in case of an audit.​

Common mistakes to avoid​

  • Confusing ECCN and customs code.
  • Copying a competitor’s ECCN without verification.
  • Ignoring the impact of integrated components.
  • Failing to document the classification process.
  • Forgetting that ECCNs evolve as regulations are updated.

When to seek external support?

  • Simple cases: the company can classify products internally.
  • Complex cases: cryptography, space, dual‑use items → consult an external expert.
  • Official tool: in the United States, it is possible to request a CCATS (Commodity Classification) from BIS.​

👉 In Europe, national authorities can also be contacted for guidance.​

Practical consequences of ECCN classification​

  • Contracts: many agreements require the ECCN to be specified.
  • Customs: even though it is not strictly a customs data item, some authorities may request it.
  • Partners: integrators, customers, and subcontractors systematically ask for the ECCN.
  • Brand image: clear classification reinforces the company’s credibility.

ECCN and export compliance strategy

ECCN is a risk management tool within a broader compliance policy:

  • Identifying sensitive goods and technologies.
  • Controlling flows of data and equipment.
  • Training internal teams.
  • Communicating effectively with authorities.

In summary​

ECCN is far more than a simple regulatory code. It has become a universal language of export compliance, used in the United States, Europe, and worldwide.​

For companies, determining the ECCN of their products is:

  • A guarantee of legal security.
  • A contractual requirement.
  • A lever for credibility with partners.

👉 Remember three key points:

  1. ECCN is essential to determine whether an export license is required.
  2. Its determination relies on a rigorous and well‑documented method.
  3. Its use goes far beyond U.S. borders and directly concerns European companies.​

💡 Do you want to secure your exports and clarify the ECCN classification of your products?
At Borie Conseils Exports, we support companies in identifying, documenting, and securing their export compliance, taking into account U.S., European, and local regulations. Contact us to find out more.

FAQ – All about ECCN​

What is an ECCN?​

An ECCN (Export Control Classification Number) is a classification code used to determine whether a product, software, or technology is subject to specific export controls. It is defined in U.S. regulations (EAR), but is now used internationally as a reference for export compliance.​

What is the difference between ECCN and customs code (HS Code)?​

  • The HS Code is used to calculate customs duties and manage tax formalities.
  • The ECCN is used to identify export license obligations related to security and the control of sensitive technologies.

👉 A product will often need both an HS Code and an ECCN.​

How do I know if my product is “EAR99”?​

A product is classified as EAR99 when it does not correspond to any specific ECCN entry. This means it is not listed as sensitive, but it may still be subject to certain restrictions (for example, in case of an embargo or prohibited destination). The analysis must be documented to justify this choice.​

Does ECCN also apply to Europe?​

Yes, indirectly. The European Union applies its own regulation (Regulation (EU) 2021/821 on dual‑use items), but many European companies use ECCN:​

  • To work with U.S. partners.
  • To meet contractual requirements.
  • To ensure consistency within international supply chains.

What should I do if I do not know my product’s ECCN?​

You have several options:

  1. Follow an internal classification process (technical analysis + comparison with official lists).
  2. Request an official decision (CCATS from BIS in the United States).
  3. Consult an export compliance expert to secure the analysis and avoid costly mistakes.​
blog1

Understanding the Difference Between “Classified” and “Classifié/Controled” in Export Control

In the field of export control, terminology plays a crucial role in ensuring compliance with regulations. One common area of confusion arises between the English term “classified” and its French counterpart “classifié.” While they may appear similar, their meanings and implications differ significantly.

What Does “Classified” Mean?

In English, classified information refers to data, technologies, or goods that are protected by governments due to national security concerns. Governments categorize classified information into different security levels, such as:

  • Confidential
  • Secret
  • Top Secret

These classifications indicate the potential risk if the information is disclosed without authorization.

Example:

Military protocols, advanced defense research, and intelligence reports are typically classified to prevent access by unauthorized parties.

What Does “Classifié” Mean in French?

In contrast, the French term “classifié” is often used in the context of controlled goods, which may not be “classified” in the English sense but are subject to export restrictions due to their potential dual-use applications (civilian or military).

Controlled goods require export licenses to ensure that they do not end up in unauthorized hands. These goods are not necessarily protected by secrecy but are instead regulated due to their possible sensitive applications.

Example:

  • Cryptography software
  • Electronic components that could be repurposed for military use
  • Aerospace technologies with both commercial and defense applications

Key Takeaways:

  • Classified = National security protection through secrecy
  • Classifié / Controlled = Restricted international trade due to sensitive use potential

Why Is This Distinction Important?

Understanding the difference between classified information and controlled goods is crucial for professionals working in international trade, export compliance, and government regulations. Confusing these terms can lead to misinterpretations, compliance errors, and regulatory risks.

When dealing with international teams, ensuring clarity in terminology helps avoid compliance breaches and ensures smooth navigation of export control frameworks across different jurisdictions.

For expert guidance on export control regulations and compliance strategies, feel free to reach out!

11062b_8a48c2403ca74d589c9488440c5708ed~mv2[1]

Master US Export Control Compliance: ITAR, EAR, ECCN and CCL

Navigating the intricate landscape of US export control compliance can be daunting, especially with the myriad of acronyms such as ITAR, EAR, ECCN, and CCL. However, for businesses involved in exporting technology, components, or software, understanding these terms is not just beneficial—it’s essential to ensure compliance and avoid severe penalties.

Deciphering the Acronyms Behind US Export Control Compliance

ITAR (International Traffic in Arms Regulations)

These regulations oversee the export and import of defense-related articles and services listed on the United States Munitions List (USML). Administered by the Directorate of Defense Trade Controls (DDTC) under the U.S. Department of State, ITAR aims to control the dissemination of military technologies to safeguard national security.

EAR (Export Administration Regulations)

Managed by the Bureau of Industry and Security (BIS) within the U.S. Department of Commerce, the EAR governs the export of dual-use items—goods and technologies with both civilian and military applications. The EAR encompasses a broad spectrum of items, including certain software and technologies.

ECCN (Export Control Classification Number)

An ECCN is a five-character alphanumeric code used to identify items on the Commerce Control List (CCL) under the EAR. Each ECCN categorizes items based on their nature and technical parameters, determining the level of control and licensing requirements for export.

Read our complete guide to ECCN here.

CCL (Commerce Control List)

The CCL is a comprehensive list detailing specific items subject to export controls under the EAR. It is organized into categories and groups, each associated with corresponding ECCNs, outlining the licensing requirements based on the item’s characteristics and destination.

The Importance of Compliance

Failure to comply with these regulations can lead to significant consequences, including substantial fines, imprisonment, and denial of export privileges. Moreover, non-compliance can result in reputational damage and loss of business opportunities. Therefore, it is imperative for exporters to accurately determine the classification of their products, understand the applicable regulations, and secure the necessary licenses before proceeding with exports

Steps to Ensure Compliance

  1. Classify Your Items: Determine if your products fall under the USML (subject to ITAR) or the CCL (subject to EAR). Utilize the ECCN to identify specific controls applicable to your items.
  2. Assess Licensing Requirements: Based on the classification, evaluate whether an export license is required for your item’s destination, end-user, or end-use.
  3. Implement an Export Compliance Program: Establish internal policies and procedures to ensure adherence to export control regulations, including regular training for employees and audits of export activities.
  4. Consult Regulatory Authorities: When in doubt, seek guidance from the relevant authorities or consult with legal experts specializing in export controls to navigate complex regulatory requirements.

In conclusion, while the acronyms and regulations surrounding U.S. export controls may seem complex, understanding and complying with them is crucial for businesses engaged in international trade. Proactive compliance not only mitigates legal risks but also fosters trust and reliability in global markets.

For expert guidance on export control regulations and compliance strategies, feel free to reach out!