Export Control Classification Number (ECCN)

An Export Control Classification Number is the classification assigned to dual-use items under the Export Administration Regulations, determining which countries, end uses, and end users require a Commerce Department export license before the item may be exported.

What is an Export Control Classification Number (ECCN)?

The Bureau of Industry and Security (BIS) at the Department of Commerce administers the Export Administration Regulations (EAR, 15 C.F.R. Parts 730-774), which control the export and re-export of dual-use goods, software, and technology. The Commerce Control List (CCL) organizes all controlled items into categories using ECCN codes.

An ECCN has five characters:

• First character (letter): The control list category (A=Munitions list control, B=Test equipment, C=Chemicals, D=Software, E=Technology; the broader categories are 0=Nuclear, 1=Materials, 2=Materials processing, 3=Electronics, 4=Computers, 5=Telecom/IT, 6=Sensors, 7=Navigation, 8=Aerospace, 9=Propulsion).
• Second character (number): The category group (A=Systems, equipment, components; B=Test, inspection, production; C=Material; D=Software; E=Technology).
• Third through fifth characters: The specific item number.

Example: ECCN 5E002 covers technology for the development, production, or use of information security items controlled under 5A002 and 5D002.

Items not on the CCL receive the designation EAR99, meaning they are subject to EAR but generally do not require a license except to embargoed destinations or sanctioned end users.

For federal contractors, ECCN classification matters because:

• Export of controlled technology or items to foreign nationals (including foreign employees in the U.S.) may require a deemed export license.
• Contracts with foreign governments or defense firms may involve technology transfer that requires BIS or DDTC license.
• Re-export of U.S.-origin technology incorporated into systems shipped to third countries requires authorization.

Why ECCNs matter for government contractors

Defense, cybersecurity, and advanced technology contractors regularly work with dual-use technology that carries ECCN classifications. Failure to obtain required export licenses - including for technology sharing with foreign national employees - is a federal crime with significant civil and criminal penalties. Proactive ECCN classification and export compliance programs are essential.

Example

A cybersecurity firm develops an encryption tool for use in federal information security programs. The tool falls under ECCN 5D002 (information security software). The firm exports a beta version to an allied government partner's security team located abroad. Because the software is ECCN-controlled, the firm must analyze whether a BIS license is required based on the destination country and end user. For most allied nations, License Exception ENC applies to encryption software, but the firm must confirm the specific conditions and maintain records of the exception application.

Frequently Asked Questions

What is the difference between an ECCN and ITAR classification?

ECCNs apply to dual-use items controlled by the Commerce Department under EAR. ITAR classifications (U.S. Munitions List categories) apply to defense articles and services controlled by the State Department under the International Traffic in Arms Regulations. Items primarily designed for military or intelligence applications typically fall under ITAR. Dual-use items (commercial products with potential military applications) typically fall under EAR with an ECCN. An item cannot be simultaneously subject to both; the jurisdictional determination is the starting point.

What is a "deemed export"?

A deemed export occurs when controlled technology is transferred to a foreign national within the United States. Because the technology is considered "exported" to the person's home country, a deemed export license may be required before sharing the technology with the foreign national employee or visitor, even on U.S. soil. This is a common compliance challenge for technology companies and federal contractors with diverse workforces.

Do federal contractors need export licenses for work performed on U.S. government contracts?

U.S. government contracts often involve authorization for the contractor to receive and work with controlled technology under the contract without separate export licenses. However, this authorization does not automatically extend to foreign nationals working on the contract, sub-licensing to foreign subcontractors, or using the technology beyond the contract scope. Contractors should analyze each export control question independently.

How does a company determine its product's ECCN?

Companies perform a self-classification using the CCL structure and BIS guidance, or submit a Classification Request to BIS for an official determination. BIS also offers pre-classification review services. Accurate ECCN classification is the foundation of an export compliance program; errors at this step cascade into licensing failures.