Export Control Classification Number (ECCN)

An Export Control Classification Number (ECCN) is an alphanumeric code assigned to commercial and dual-use items that are subject to export controls under the U.S. Export Administration Regulations (EAR). The ECCN identifies the specific technical characteristics of a product and determines what level of export authorization is required to ship it to different countries. Items with an ECCN may require an export license, qualify for a license exception, or be freely exportable depending on the destination, end user, and intended end use. The Bureau of Industry and Security (BIS) within the U.S. Department of Commerce administers the ECCN system and the broader export control framework.

Structure of the ECCN

ECCNs follow a five-character format. The first digit (0 through 9) identifies the category. Category 0 covers nuclear materials, facilities, and equipment. Category 1 covers special materials and related equipment. Category 2 covers materials processing. Category 3 covers electronics. Category 4 covers computers. Category 5 covers telecommunications and information security (including encryption). Categories 6 through 9 cover sensors, navigation, marine, aerospace, and propulsion systems.

The second character is a letter indicating the product group: A (equipment, assemblies, components), B (test, inspection, production equipment), C (materials), D (software), or E (technology). The final three digits specify the particular control reason and technical parameters.

For example, ECCN 5A002 refers to information security systems and equipment (Category 5, Product Group A, control entry 002). This is one of the most commonly encountered ECCNs because it covers encryption technology, which is present in a wide range of commercial electronics, software, and communications equipment.

ECCN vs. EAR99

Not every product has an ECCN. Items that are subject to the EAR but are not specifically identified on the Commerce Control List (CCL) are designated EAR99. Most commercial consumer goods fall into this category: clothing, kitchenware, basic tools, toys, furniture, and food products. EAR99 items generally do not require an export license and can be shipped to most destinations without restriction. However, even EAR99 items cannot be exported to embargoed countries or to denied parties listed on government screening lists.

The classification decision flow starts with determining whether the item is subject to the EAR (most items of U.S. origin are). Next, the exporter checks whether the item falls under a specific ECCN on the Commerce Control List. If it does, the exporter cross-references the ECCN against the Country Chart in Part 738 of the EAR to determine whether a license is required for the specific destination. If the item does not match any ECCN, it defaults to EAR99.

Self-Classification vs. BIS Classification

Exporters are responsible for classifying their own products. This self-classification requires understanding the product’s technical specifications and comparing them against the parameters listed in the CCL. For straightforward products, self-classification is manageable. A seller exporting cotton t-shirts can confidently determine that their product is EAR99 without professional assistance.

For products with technical characteristics that approach or overlap with controlled parameters (encryption capabilities, high-performance computing specifications, certain chemical compositions, advanced sensor resolutions), self-classification becomes more complex. In these cases, the exporter can submit a classification request to BIS using the SNAP-R system. BIS reviews the product specifications and issues an official classification determination, typically within 30 to 45 days. While not mandatory, a BIS classification provides legal certainty and protection against future enforcement actions.

Common ECCN Pitfalls

Encryption is the most widespread classification challenge for commercial exporters. Modern electronics, including smartphones, laptops, routers, IoT devices, and software applications, contain encryption functionality. Products implementing encryption above certain strength thresholds fall under ECCN 5A002 or 5D002 (for software). However, most mass-market encryption products qualify for License Exception ENC, which allows export to most destinations after filing an annual self-classification report with BIS.

Sellers on Amazon who export their products internationally through Amazon Global Selling or direct shipment should determine whether their products have an ECCN, even if the products seem like ordinary consumer goods. A wireless security camera with encryption, a software-defined radio device, or a high-accuracy GPS module could each carry ECCN-controlled features that require license exception filings or restrict exports to certain destinations. Investing an hour in self-classification prevents potential violations that carry penalties up to $300,000 per transaction.