Export Controls Aren't Just for Defense Contractors: When Ordinary Businesses Can Run Into BIS Rules

Export controls are often treated as a specialized issue for defense contractors, aerospace companies, and businesses dealing with obviously sensitive military technology. That assumption can be dangerous. The U.S. Department of Commerce's Bureau of Industry and Security, or BIS, administers the Export Administration Regulations, which apply not only to traditional defense-adjacent products but also to a much broader range of commercial goods, software, and technology. In some cases, even an item classified as EAR99 and not ordinarily viewed as sensitive can become restricted because of who is receiving it, how it will be used, where it is ultimately going, or what happens to it after the initial sale. Bureau of Industry and Security

For Midwest manufacturers, software companies, engineering businesses, electronics suppliers, logistics providers, and technology firms, that means export compliance can arise in ordinary commercial transactions. A company may never sell a weapon, work with the Department of Defense, or think of itself as part of a national-security industry and still encounter BIS licensing requirements. The practical question is not simply whether a product is "military." It is whether the item, software, technology, destination, end user, end use, or later reexport brings the transaction within the Export Administration Regulations.

The Product Does Not Have to Look Sensitive to Be Controlled

The EAR apply to commodities, software, and technology subject to U.S. jurisdiction, including many items that have both commercial and potential military or proliferation applications. BIS commonly refers to these as "dual-use" items, but businesses should not assume that only highly technical or obviously strategic products are relevant. Depending on the classification and circumstances, controlled items can include electronics, sensors, industrial equipment, software, telecommunications products, chemicals, manufacturing technology, and advanced computing equipment. Bureau of Industry and Security

The starting point is generally to determine whether the item or activity is subject to the EAR and, if so, how the item is classified. Some products fall within a specific Export Control Classification Number, or ECCN, on the Commerce Control List. Others may be designated EAR99, meaning they are subject to the EAR but are not specifically listed on the Commerce Control List.

EAR99 does not mean "unregulated."

BIS makes clear that end-user and end-use restrictions can apply even where an item is EAR99 and would not otherwise require a license based solely on its classification and destination. That is why a company cannot stop its analysis after deciding that the product itself looks ordinary. Bureau of Industry and Security

Who Is Receiving the Product Can Matter as Much as What the Product Is

One of the most important features of U.S. export controls is that restrictions can be triggered by the parties involved in the transaction.

BIS maintains several restricted-party lists, including the Entity List, Denied Persons List, Unverified List, and Military End-User List. The broader Consolidated Screening List combines trade-related screening lists maintained by the Departments of Commerce, State, and Treasury. A party's presence on one of these lists can create licensing requirements, restrictions, or outright prohibitions that would not otherwise apply to the product itself. Bureau of Industry and Security

Businesses should also understand that screening is not limited to the company receiving the shipment at the delivery address. BIS notes that restrictions may apply when a listed party participates in a transaction as the purchaser, consignee, applicant, or another relevant participant. Bureau of Industry and Security

Consider a U.S. manufacturer selling ordinary industrial equipment to a distributor in another country. The distributor itself may not appear restricted, but the equipment could ultimately be destined for a listed entity or prohibited end use. If the U.S. company knows, has reason to know, or encounters facts suggesting that the stated transaction does not reflect the actual recipient, ignoring those facts can create serious problems.

This is why end-user screening should not be treated as a box that is checked only against the name appearing on the invoice.

End Use Can Create a License Requirement Even When the Customer Is Not Listed

The identity of the recipient is only part of the analysis. How the product will actually be used can independently create a licensing requirement.

Part 744 of the EAR contains end-use controls addressing activities involving chemical and biological weapons, nuclear applications, missile technology, military-intelligence activities, advanced computing, supercomputers, and certain semiconductor-manufacturing activities, among others. BIS specifically explains that an item's end use may trigger a license requirement even where no license would otherwise be necessary because of the item's classification or destination. Bureau of Industry and Security

That means a transaction that appears commercially routine can become controlled once the customer's real purpose is understood.

A supplier of precision components may believe it is making an ordinary industrial sale, but the analysis changes if those components will support a restricted military or semiconductor-manufacturing end use. A software company may think it is merely licensing commercial technology, but the relevant customer or application may create additional restrictions. An engineering company may provide technical support rather than physical goods, yet the release of controlled technology can itself be an export under the EAR.

The lesson is that export compliance depends on the entire transaction, not simply the product description on the purchase order.

Exporting Technology Does Not Always Require Putting Something in a Box

Another common misconception is that an "export" requires a physical shipment across a border.

Under the EAR, certain releases of technology to foreign nationals can be treated as exports. BIS also identifies electronic transmission of non-public data abroad as an example of an export, and a release of controlled technology or source code from one foreign country to a national of another country may constitute a reexport. Bureau of Industry and Security

That can matter to businesses with international engineering teams, offshore developers, foreign subsidiaries, cloud-based technical repositories, shared design systems, and multinational research projects.

A U.S. company may never ship a physical product, but it could still create an export-control issue by providing access to controlled source code, technical drawings, manufacturing know-how, specifications, or other restricted technology.

The analysis can therefore intersect with ordinary employment and IT decisions. Who has access to technical files? Where are servers located? Can a foreign affiliate download engineering documentation? Are contractors in another country being given source code or manufacturing instructions? Those questions may have export-control implications even when the business does not view the activity as an "export."

Reexports Can Keep U.S. Rules Attached to a Product After It Leaves the Country

Export-control responsibility can also continue after a U.S.-origin item has already been exported.

A reexport generally involves the shipment or transmission of an item subject to the EAR from one foreign country to another foreign country. BIS emphasizes that U.S.-origin items subject to the EAR generally remain subject to those rules when they are later reexported or transferred abroad. Certain foreign-made items can also become subject to the EAR because they contain controlled U.S.-origin content or because they are produced using specified U.S. technology or software under the foreign direct product rules. Bureau of Industry and Security

This matters when U.S. companies sell through foreign distributors or integrate their technology into a global supply chain.

A Chicago manufacturer may sell equipment to a customer in Singapore with no apparent licensing issue. If that customer later plans to move the equipment to another country, however, the reexport may require a separate analysis. A foreign manufacturer incorporating U.S. components into its own product may also need to determine whether the finished foreign-made product remains subject to U.S. controls.

Businesses therefore need to understand not only where an item is going first, but whether they know or expect it to move again.

China-Related Controls Are a Good Example of How Quickly the Rules Can Change

Semiconductor and advanced-computing controls involving China illustrate why companies cannot rely indefinitely on an export analysis performed years earlier.

On January 13, 2026, BIS revised its licensing policy for certain semiconductor exports to China. Under the new policy, license applications involving the Nvidia H200, AMD MI325X, and similar chips are reviewed on a case-by-case basis when specified security conditions are satisfied. Among other things, applicants must demonstrate that the exports will not reduce global semiconductor production capacity available to U.S. customers, that the Chinese purchaser has appropriate export-compliance procedures including customer screening, and that the products have undergone qualifying independent testing in the United States. Bureau of Industry and Security

That policy change did not eliminate export controls on advanced semiconductors. It changed how certain license applications are reviewed under specified conditions.

For businesses outside the semiconductor industry, the larger point is the pace at which export-control rules can evolve. A transaction that was permissible under one policy may be treated differently after a regulatory change. A particular technology can also become more sensitive as national-security priorities change.

Companies working with advanced computing, electronics, semiconductor equipment, artificial intelligence infrastructure, telecommunications, or other strategically important technologies should therefore avoid relying on static assumptions about what was permissible the last time they completed a similar transaction.

The $252 Million Applied Materials Case Shows the Stakes

BIS enforcement activity also demonstrates that export-control failures can result in substantial financial consequences.

On February 12, 2026, BIS announced that Applied Materials Inc. and Applied Materials Korea had agreed to pay approximately $252 million to resolve allegations involving illegal exports of U.S. semiconductor-manufacturing equipment to China. BIS described the settlement as the second-highest penalty the agency had ever imposed. Bureau of Industry and Security

The importance of that case extends beyond semiconductor manufacturers. It illustrates how seriously BIS treats transactions involving restricted technology, reexports, and foreign affiliates. A company's international structure does not necessarily place activity outside the reach of U.S. export rules merely because the shipment originates from another country or passes through a foreign subsidiary.

BIS can impose both administrative and criminal penalties for EAR violations. The agency also has the authority to deny export privileges, which can effectively prevent a person or company from participating in transactions subject to the EAR. Bureau of Industry and Security

For most businesses, the goal is not to become experts in every export-control regulation. It is to build enough compliance discipline to identify transactions that require additional review before the product, software, or technology moves.

"Know Your Customer" Means More Than Running a Name Through a Database

Restricted-party screening is essential, but BIS guidance makes clear that compliance does not end with list screening.

BIS's "Know Your Customer" guidance instructs exporters to pay attention to abnormal circumstances that may indicate a transaction is headed toward an inappropriate end use, end user, or destination. Examples include a customer refusing to explain the intended end use, ordering products that do not fit its apparent business, declining routine installation or training, requesting equipment that is inconsistent with the stated destination, or providing vague delivery information. Bureau of Industry and Security

When no red flags are present, businesses may generally rely on information supplied by customers unless another EAR requirement calls for additional inquiry. When red flags do appear, however, BIS expects the company to investigate rather than simply ignore the inconsistency. Bureau of Industry and Security

This is particularly important in transactions involving intermediaries.

A distributor that cannot identify the ultimate customer, a purchaser asking for shipment through an unusual third country, or a customer whose business does not make sense for the requested technology may require additional diligence. The presence of an intermediary is not itself suspicious, but unexplained layers between the seller and the actual end user should not be treated as irrelevant.

For businesses that sell internationally on a regular basis, screening should become part of the commercial process rather than an emergency step taken after the goods are ready to ship.

Contracts Can Help, but They Do Not Replace Due Diligence

Export-control provisions in international contracts can be valuable. A distributor or customer can be required to comply with U.S. export laws, avoid prohibited end users and destinations, refrain from unauthorized reexports, provide end-use information, and notify the seller before transferring products into additional markets.

Those provisions can help establish expectations and give the U.S. company contractual remedies if the foreign partner violates them.

They do not, however, eliminate the exporter's own responsibilities.

A company should not assume that inserting a sentence stating "customer will comply with all export laws" resolves obvious concerns about the transaction. If the seller knows facts suggesting that a product is being diverted to a restricted destination or end use, contractual language will not make those facts disappear.

The strongest approach combines appropriate contract terms with screening, classification, recordkeeping, and escalation procedures for questionable transactions.

Small and Middle-Market Businesses Need Practical Systems, Not Defense-Industry Bureaucracy

Export compliance does not need to become an enormous administrative operation for every company that occasionally sells internationally.

The appropriate process should reflect the company's products, markets, customers, and risk exposure.

A Midwest manufacturer making routine exports may need a system for product classification, destination review, customer screening, and documenting end use. A software company may need additional controls over access to technology and source code. A business operating through foreign distributors may need stronger procedures for identifying ultimate customers and proposed reexports. A company selling advanced electronics may require a more intensive licensing and screening process.

BIS itself recommends incorporating Know Your Customer and red-flag procedures into export compliance programs and provides a Consolidated Screening List to help businesses identify parties that may be subject to restrictions. Bureau of Industry and Security

The key is to build export review into the transaction early enough that the answer can affect whether and how the sale proceeds.

Discovering a licensing problem while negotiating a contract is manageable. Discovering it after the product has shipped is a very different situation.

What Businesses Should Review Before the Next International Sale

Companies that export goods, software, or technology should begin by determining whether their products and activities are subject to the EAR and whether any relevant items have an ECCN or are classified as EAR99. They should then evaluate the destination, the parties involved, the ultimate end user, and the intended end use rather than relying solely on the immediate purchaser's name and address.

Restricted-party screening should occur before the transaction is completed, and businesses should have a process for dealing with red flags instead of allowing sales personnel to resolve suspicious facts informally. Companies operating through distributors should understand who ultimately receives the product and whether later reexports are expected.

Technology access deserves separate attention. Engineering files, source code, design information, production know-how, and other controlled technology may raise issues even where no physical shipment occurs. Businesses with foreign subsidiaries, international employees, and offshore contractors should therefore consider export controls when deciding who can access technical information.

Finally, export-control policies should be revisited as regulations change. The rapid evolution of semiconductor and China-related controls demonstrates that a classification or licensing conclusion made in the past may not remain correct indefinitely.

The Bottom Line

Export controls are not reserved for companies manufacturing weapons or classified technology. The EAR can affect ordinary commercial products, software, technical information, foreign distributors, international employees, cloud-based technology access, and transactions involving customers that may appear routine at first glance.

For U.S. businesses, the most important shift is to stop thinking about export compliance solely in terms of what is being shipped. The destination, end user, ultimate recipient, end use, and potential reexport can be just as important as the product itself. BIS rules can also follow U.S.-origin items abroad and, in certain circumstances, reach foreign-made products with sufficient connections to U.S. technology or content. Bureau of Industry and Security

The practical goal is not to create unnecessary obstacles to international sales. It is to identify the transactions that deserve closer review before they become enforcement problems. A straightforward sale to a legitimate customer may require little additional work, while another transaction involving the same product could create significant risk because of who ultimately receives it or how it will be used.

This article is provided for informational purposes only and does not constitute legal advice.

Selling products, software, equipment, or technology internationally and unsure whether BIS export-control rules apply? TEIL Firms can help you evaluate product classification, end-user and end-use risks, restricted-party screening, reexports, international contract provisions, and licensing considerations before the transaction moves forward. Click the button below to get legal support with your export-control and international trade compliance.

Get Trade Support
Export Controls, Agreement, Air Transportation, Branding, Business, Business News, Business Operations, Compliance, Contract Law, Customs, Disclosure Controls, Due Diligence, Entreprenuership, Foreign Policy, Foreign Trade, Illinois, International Business, International Law, International Trade, Labeling, Legal Strategy, Manufacturing, Market, Mergers & Acquisition, North America, Opinion Pieces, Op-Ed, Outsourcing, Politics, Supply Chain Management, Tariffs, Trade Compliance, Transaction, U.S. PoliticsTEIL Firms, LLCExport controls, BIS export controls, Bureau of Industry and Security, Export Administration Regulations, EAR, EAR compliance, U.S. export controls, export control compliance, export compliance, export regulations, international trade compliance, international business law, international compliance, global compliance, cross-border compliance, trade law, trade compliance, export law, international export law, technology exports, controlled technology, controlled goods, dual-use items, dual-use technology, EAR99, Export Control Classification Number, ECCN, Commerce Control List, CCL, export classification, product classification, export licensing, BIS licensing, export license requirements, license exceptions, deemed exports, technology transfers, source code exports, software exports, technical data exports, engineering data exports, technical drawings, foreign national access, cloud access controls, international engineering teams, offshore developers, foreign contractors, multinational research, cross-border technology transfer, U.S. technology abroad, reexports, reexport controls, foreign reexports, U.S.-origin goods, U.S.-origin technology, foreign direct product rules, FDP rules, de minimis rules, foreign-made products, U.S. content rules, end-user screening, end-use screening, end-user controls, end-use controls, restricted-party screening, denied parties, restricted parties, Entity List, Denied Persons List, Unverified List, Military End User List, Military End-User List, Consolidated Screening List, sanctions screening, export screening, Know Your Customer, KYC export controls, export red flags, transaction screening, ultimate consignee, ultimate end user, purchaser screening, consignee screening, distributor screening, reseller screening, intermediary risk, diversion risk, prohibited end users, prohibited end uses, military end use, military end user, military intelligence end use, nuclear end use, missile technology, chemical weapons controls, biological weapons controls, advanced computing controls, semiconductor controls, semiconductor export controls, semiconductor manufacturing equipment, semiconductor equipment exports, AI chip exports, advanced semiconductor controls, China export controls, China-related export controls, exports to China, technology exports to China, semiconductor exports to China, advanced computing exports to China, BIS China policy, China licensing policy, H200 export controls, Nvidia H200, AMD MI325X, AI accelerator exports, January 2026 BIS policy, semiconductor licensing policy 2026, Applied Materials, Applied Materials enforcement, Applied Materials China, $252 million BIS penalty, BIS enforcement 2026, export enforcement, export control penalties, civil penalties, criminal export violations, denial of export privileges, export enforcement actions, BIS penalties, export compliance investigations, export violations, compliance failures, ordinary business export controls, export controls for manufacturers, export controls for software companies, export controls for engineering companies, export controls for electronics companies, export controls for technology companies, export controls for logistics companies, export controls for industrial businesses, export controls for small businesses, export controls for mid-sized businesses, SME export compliance, small business export compliance, middle-market export compliance, defense contractor export controls, non-defense export controls, export controls beyond defense, commercial export controls, ordinary commercial goods, commercial technology exports, industrial equipment exports, electronics exports, machinery exports, software licensing abroad, engineering exports, international sales, international shipments, international customers, foreign distributors, overseas distributors, international suppliers, cross-border sales, export contracts, international contracts, supplier contracts, distributor agreements, export compliance clauses, sanctions clauses, reexport restrictions, end-use certifications, end-user certifications, compliance certifications, audit rights, recordkeeping, export records, export documentation, customer due diligence, export due diligence, distributor due diligence, end-user due diligence, compliance procedures, export compliance program, BIS export compliance program, export compliance management, trade compliance program, screening procedures, red flag procedures, compliance escalation, transaction review, licensing review, export controls policy, corporate export policy, export compliance training, employee export compliance, engineering compliance, IT access controls, controlled technical information, restricted technology access, source code access, technical file access, global engineering teams, multinational workforce, foreign subsidiaries, foreign affiliates, offshore teams, global R&D, international research, export risk management, international legal risk, cross-border legal risk, regulatory risk, trade regulatory risk, global regulatory compliance, export compliance strategy, export control strategy, global trade strategy, international expansion compliance, global expansion compliance, market entry compliance, international market entry, international business compliance, global business compliance, export planning, export readiness, global trade risk, technology compliance, emerging technology law, technology law, international technology law, global technology regulation, cross-border technology law, export control counsel, export control attorney, international trade attorney, international business attorney, compliance attorney, trade compliance attorney, technology compliance attorney, legal counsel export controls, general counsel export controls, in-house counsel export controls, compliance officers, export compliance officers, trade compliance teams, legal teams, logistics teams, engineering teams, technology teams, procurement teams, sales teams, operations teams, business owners, CEOs, manufacturers, software companies, SaaS companies, engineering firms, industrial companies, electronics manufacturers, semiconductor companies, equipment manufacturers, technology startups, growing companies, international businesses, exporters, U.S. exporters, U.S. manufacturers, Midwest manufacturers, Midwest exporters, Midwest businesses, Midwest companies, Illinois manufacturers, Illinois exporters, Illinois businesses, Illinois companies, Chicago manufacturers, Chicago exporters, Chicago businesses, Chicago companies, Chicago technology companies, Illinois technology companies, Midwest technology companies, Chicago international business, Illinois international business, Midwest international business, Chicago business law, Illinois business law, Chicago international law, Illinois international law, Chicago technology law, Illinois technology law, Chicago export compliance, Illinois export compliance, Midwest export compliance, global legal news, Global News, international business news, international trade news, export control news, BIS news, trade compliance news, technology news, semiconductor news, China trade news, international legal news, regulatory news, 2026 export controls, 2026 BIS rules, 2026 China controls, 2026 semiconductor controls, 2026 trade compliance, U.S.-China technology controls, U.S.-China trade compliance, U.S.-China export controls, U.S.-China technology restrictions, U.S.-China semiconductor controls, China end-user screening, China military end users, China reexports, China technology transfers, advanced computing compliance, AI hardware exports, chip export controls, export controls and AI, international AI hardware, semiconductor supply chains, global semiconductor trade, manufacturing technology, technology transfer controls, industrial technology exports, machine tools, advanced manufacturing, cross-border manufacturing, international manufacturing, manufacturing compliance, supply chain compliance, supply chain risk, international supply chains, global supply chains, supplier risk, distributor risk, customer risk, beneficial ownership, beneficial ownership screening, foreign ownership, corporate ownership, intermediary screening, unusual shipping routes, third-country diversion, transshipment risk, diversion controls, export destination, final destination, ultimate destination, export country risk, country risk, export compliance red flags, unusual customer requests, customer refuses end-use information, inconsistent business purpose, suspicious routing, unusual consignee, unauthorized reexport, sanctions and export controls, OFAC and BIS, BIS and OFAC compliance, Commerce Department export controls, U.S. Department of Commerce, Commerce Department BIS, international regulatory enforcement, corporate compliance, business compliance, compliance risk management, legal risk management, export compliance checklist, export screening checklist, technology transfer review, international transaction review, product export review, customer export review, license determination, ECCN review, EAR99 review, end-use statement, end-user statement, export certifications, reexport certifications, foreign distributor controls, distributor compliance, exporter reasonable care, export transaction documentation, export recordkeeping, export audit, compliance audit, internal compliance program, risk-based export compliance, practical export compliance, export controls for ordinary businesses, export rules for ordinary businesses, export controls explained, BIS rules explained, export regulations explained, when BIS rules apply, when export licenses are required, who needs export compliance, export controls for non-defense businesses, global business regulation, global trade compliance, global commerce, international commerce, international commerce law, TEIL Firms, The Evans International Law Firms, TEIL international law, TEIL business law, TEIL global business, TEIL compliance, TEIL trade compliance, TEIL export controls, TEIL international trade, TEIL technology law, TEIL global expansion, TEIL international business law, TEIL international compliance, TEIL BIS compliance, TEIL export compliance, TEIL China compliance, TEIL semiconductor compliance, TEIL cross-border compliance, TEIL Firms export controls, TEIL Firms BIS rules, TEIL Firms trade compliance, TEIL Firms international business, TEIL Firms technology compliance, TEIL Firms global complianceComment