What Is an ECCN Number, and Does It Mean You Need a License?
Exporting a product is not simply a matter of knowing what the product is. You also need to know how U.S. export-control regulations classify it.
That is the role of an Export Control Classification Number (ECCN).
An ECCN identifies the specific category of controlled items to which a product belongs under the U.S. Export Administration Regulations (EAR). But the classification itself does not determine whether the shipment needs a license.
The real export-control question comes next: does this classification, combined with the destination, end user, end use, and other applicable controls, allow the shipment to proceed?
For exporters dealing with advanced technology, computing equipment, AI hardware, semiconductors, encryption, or telecommunications products, getting that distinction right can determine whether a shipment moves smoothly or requires further regulatory action.
What an ECCN Is and How to Read One
An Export Control Classification Number (ECCN) is a five-character alphanumeric code identifying an item listed on the Commerce Control List (CCL), which forms part of the US Export Administration Regulations (EAR).
The ECCN identifies why an item is controlled, which is the starting point for determining whether an export license is required. The EAR is one part of the wider export control framework.
Classification is technical, not commercial
CCL entries describe items by measurable technical parameters, not commercial category: processing speed, encryption key length, operating frequency, and resolution are what place an item in an entry.
Two products sold as the same thing can carry different ECCNs, and a specification change can move one between them. A catalog description is never a classification.
Reading 5A002
Position | In 5A002 | What it means |
|---|---|---|
1st character (digit) | 5 | Category. One of ten. Here, Telecommunications and Information Security |
2nd character (letter) | A | Product group. One of five, A through E. Here, Systems, Equipment and Components |
3rd character (digit) | 0 | The reason-for-control grouping the entry sits within |
4th and 5th (digits) | 02 | The specific entry. Together, information security equipment meeting defined cryptographic thresholds |
The Ten Categories and Five Product Groups
Every ECCN opens with a category digit and a product group letter.
Categories (First Digit):
Nuclear Materials, Facilities and Equipment, and Miscellaneous Items
Materials, Chemicals, Microorganisms and Toxins
Materials Processing
Electronics
Computers
Telecommunications and Information Security
Sensors and Lasers
Navigation and Avionics
Marine
Aerospace and Propulsion
Product Groups (Second Letter):
A — Systems, Equipment and Components
B — Test, Inspection and Production Equipment
C — Materials
D — Software
E — Technology
Categories 3, 4, and 5 cover most controlled AI and computing hardware, where most commercial classification questions arise.
Does Every Product Have an ECCN?
No, Only items described by an entry on the Commerce Control List have one. Most commercially exported goods are not listed there, so they carry no ECCN at all. Those items receive the EAR99 designation instead, meaning they are subject to the EAR but not described on the CCL.
Assuming EAR99 without checking is the common failure
The assumption is usually right, which is what makes it dangerous. It most often goes wrong on electronics, encryption, and advanced materials.
ECCN, HTS, Schedule B and USML
Four codes are routinely confused. Each answers a different question for a different authority.
Code | Answers | Detail |
|---|---|---|
ECCN | Do I need an export license? | Five characters on the Commerce Control List. Administered by the Bureau of Industry and Security (BIS) under the EAR |
HTS code | What duty is payable on import? | Ten digits in the Harmonized Tariff Schedule. Published by the USITC, enforced by CBP. See the HTS classification used for import duty |
Schedule B | What is being reported on export? | Ten digits administered by the Census Bureau for export statistics, filed through AES |
USML category | Is this a defense article? | Administered by DDTC under ITAR and the US Munitions List, not by BIS |
Every product has an HTS code. Only some have an ECCN. The two systems are unrelated, and one cannot be derived from the other.
How to Find Your ECCN
Four routes, each with a different cost and a different weight on audit.
Ask the manufacturer or supplier.
This is the fastest route, and often accurate, since a manufacturer that has exported before has usually classified the item. Verify rather than adopt: responsibility does not transfer with the answer.
Self-classify against the Commerce Control List.
The CCL sits at Supplement No. 1 to Part 774 of the EAR. It requires technical understanding of the item and familiarity with how entries are written, costs nothing, and leaves responsibility entirely with the classifier.
Request a formal ruling from BIS.
Requests go through the SNAP-R portal, which requires a Company Identification Number, and produce a Commodity Classification Automated Tracking System (CCATS) determination. It takes time and covers a limited number of items, but it produces an official government determination that materially reduces audit exposure.
Engage a party that classifies within its scope.
This applies where the item is dual-use, involves encryption or advanced electronics, or the exporter has no in-house export control function. It costs the most, and after a CCATS it carries the most weight on audit.
Write down the reasoning, not just the code
A correct classification with no documented technical rationale is difficult to defend on audit, and specifications change often enough that the reasoning is what makes a later review possible.
Having an ECCN Does Not Mean You Need a License
Finding an ECCN answers what the item is, not whether it can ship. Every CCL entry lists one or more reasons for control, and licensing depends on whether those reasons apply to the destination in question.
Three steps convert the code into an answer
Read the reasons for control
Each entry states why the item is controlled, using codes such as NS for National Security, AT for Anti-Terrorism, RS for Regional Stability, MT for Missile Technology, NP for Nuclear Nonproliferation, and CB for Chemical and Biological Weapons. Entries commonly list several.
Cross-reference the Commerce Country Chart
The Chart, in Supplement No. 1 to Part 738 of the EAR, maps destinations to reasons for control. Where the row for the destination and the column for the reason intersect with a marker, a license is required for that reason. Where they do not, that reason requires no license.
Check whether a License Exception applies
Even where the Chart indicates a license is required, a License Exception may permit the shipment without one. Exceptions are conditional authorizations written into the regulations, and the conditions attach to the item, the destination, the end user, and sometimes to notification requirements. An exception is not a lighter obligation. It is a different one, and using one incorrectly is itself a violation.
Above all of this sit end-use and end-user controls. An item requiring no license by classification and destination can still be prohibited because of who is receiving it or what it will be used for. That is the subject of end-user and restricted party screening.
Who Performs and Documents the Classification
The exporter is responsible for the classification regardless of who produced it. A manufacturer's ECCN, a consultant's opinion, and a software tool's suggestion are all inputs. BIS assesses the party named as the exporter on the declaration, and no supplied determination transfers that responsibility.
Controls travel with the goods
US-origin controlled items remain subject to the EAR after they arrive, so moving them onward is a re-export requiring its own analysis against the same three steps. Foreign-made items can also be caught where they contain more than a threshold proportion of US-controlled content.
Where IOR Service comes in
As the registered Exporter of Record (EOR), IOR Service classifies the item against the Commerce Control List, records the technical rationale, applies the reasons for control against the destination, screens the parties, and files the export declaration under our registration. The classification and its reasoning are retained in the shipment record.
Classified, Documented, Declared.
The ECCN identifies the item under U.S. export controls; the destination, end user, end use, and applicable exceptions determine whether it can ship. Classification starts the analysis; documentation makes it defensible.
Tell us the item, origin, and destination. We’ll classify it, document the rationale, screen the parties, and manage the export declaration as EOR.
Direct Line
Available on request
Shared after initial assessment.BACKED BY GCE LOGISTICS
25+ Years of International Trade & Compliance Leadership
Backed by decades of experience in global trade, IOR Service delivers the compliance frameworks, regulatory oversight, and market-entry expertise required for successful international operations. From highly regulated industries to complex cross-border projects, we help organizations move forward with certainty.Frequently Asked Questions
No. EAR99 is a designation rather than a classification number. It applies to items that are subject to the Export Administration Regulations but are not described by any entry on the Commerce Control List, which means an EAR99 item has no ECCN at all. See what the EAR99 designation means in practice
No. Only items listed on the Commerce Control List have one. Most commercial goods do not and are designated EAR99 instead. This is the opposite of tariff codes, where every product has an HTS classification. Assuming a product is EAR99 without checking the CCL is a common and occasionally expensive mistake, particularly for electronics, encryption, and advanced materials.
No, and one cannot be derived from the other. The HTS code determines the duty payable when goods are imported into the US and is administered by CBP. The ECCN determines whether an export license is required and is administered by BIS. Every product has an HTS code; only some have an ECCN. Using an HTS code to assess export control status is a recognized compliance failure.
5A002 is a commonly cited example. The 5 places it in Category 5, Telecommunications and Information Security. The A places it in product group A, Systems, Equipment and Components. The final three characters identify the specific entry, which covers information security equipment meeting defined cryptographic thresholds. Related software for the same function would sit under 5D rather than 5A.
Not necessarily. The ECCN entry lists one or more reasons for control. Those reasons are cross-referenced against the Commerce Country Chart for the destination, and a license is required only where the reason and the destination intersect. Even then, a License Exception may permit the shipment without an individual license, subject to its conditions. End-use and end-user restrictions apply regardless of the outcome.
They can. US-origin items remain subject to the Export Administration Regulations after they leave the US, so moving them onward from one foreign country to another is a re-export requiring its own analysis. Foreign-made items can also be caught where they contain more than a threshold proportion of US-controlled content. The applicable threshold varies by destination and content type.
The exporter named on the declaration. A manufacturer's classification, a consultant's opinion, and a software suggestion are all inputs, and none of them transfers responsibility. This is why the determination should be documented with the technical rationale behind it. A correct classification with no recorded reasoning is difficult to defend on audit.
Latest Blogs
What is an ESMA certificate? UAE product certification explained
Many businesses preparing to sell in the UAE are told they need “ESMA approval”. They then go looking for an authority that no longer runs the scheme. The Emirates Authority for Standardization and Metrology (ESMA) was merged into the Ministry of Industry and Advanced Technology (MoIAT) in 2020. The certification it was known for still exists, and the market still calls it by the old name. Knowing where it sits now saves weeks of applying to the wrong place. An ESMA certificate, as the market calls it, is UAE product conformity approval. It shows that a regulated product meets the applicable UAE, GCC, or international standards before it is sold. Today, it is issued under two MoIAT schemes: the Emirates Conformity Assessment Scheme (ECAS) and the Emirates Quality Mark (EQM). The legal basis is Federal Law No. 28 of 2001. The schemes are federal, so the same rules apply in every emirate. Because approval comes before market entry, the scheme follows the same principle as pre-shipment conformity verification in other markets.
What is TDRA approval? UAE type approval for wireless and telecom devices
Your device may already carry CE marking, have passed its RED tests, and be sold across Europe, and still be stopped at a UAE port. Almost every device sold today has a wireless function. In the UAE, that function needs its own approval before the product can be imported, sold, or even switched on, and the application cannot start until a UAE-registered dealer is in place. TDRA approval, formally called type approval, is that authorization. It is issued by the Telecommunications and Digital Government Regulatory Authority (TDRA) and confirms that a device meets UAE technical standards and will not interfere with national networks. It applies to radio and telecommunications terminal equipment (RTTE), meaning any equipment that connects directly to a public telecommunications network or contains an intentional radio transmitter. TDRA was known as the Telecommunications Regulatory Authority (TRA) until it was renamed in 2021. It is a federal regulator, so one approval covers every emirate.
EAR99: What the Designation Means, and When it Still Needs a License
EAR99 tells you what an item is not. Under the US Export Administration Regulations (EAR), it marks goods that fall under the regulations but are not listed on the Commerce Control List (CCL). What it does not tell you is where the item may go, who may receive it, or what it may be used for. Most shipments clear all three without a license. Some do not.