An Export Control Classification Number (ECCN) is the five-character code the U.S. Export Administration Regulations (EAR) use to identify whether an item — hardware, software, or technical data — is subject to specific export controls, and if so, under what conditions it can be exported, re-exported, or released to a foreign national. For a research office or PI evaluating a piece of lab equipment before it’s purchased, shipped abroad, or handed to an international collaborator, the ECCN is the practical unit of analysis: it is what determines whether a license is required, not the general fact that “export control applies to research.” This guide walks through the actual determination process — self-classification against the Commerce Control List, and when to request a formal Commodity Classification from the Bureau of Industry and Security (BIS) — rather than re-explaining EAR and ITAR at a policy level. For that broader context, see CASRAI’s guide to export control (EAR/ITAR) and international research collaboration and the dictionary entry on the ECCN determination process.
Why ECCN Determination Is a Distinct Step From “Is This Fundamental Research?”
A common and consequential mistake in university procurement is treating the fundamental research exclusion as if it clears an item of export control review. It does not. The fundamental research exclusion, where it applies, concerns the results of research intended for publication — not the physical item, software, or technical data used to produce those results. A controlled piece of equipment, or software licensed under EAR restrictions, remains controlled regardless of whether the research using it is unrestricted fundamental research. That is why classification has to happen at the item level, before the equipment is ordered, shipped, or made accessible to a foreign national researcher in the lab (a “deemed export” under the EAR) — not after a compliance question is raised retroactively.
This matters concretely for two recurring university scenarios:
- International shipping or field deployment — sending equipment abroad for a collaboration, conference demonstration, or field site requires knowing whether an export license is needed before the shipment leaves the country, and which countries or end-users trigger that requirement.
- Deemed exports inside the lab — releasing controlled technology or source code to a foreign national graduate student, postdoc, or visiting researcher can itself constitute a regulated “export” to that person’s country of nationality, even though nothing physically crosses a border.
Both scenarios turn on the same underlying question: what is this item’s ECCN, and what does that ECCN’s entry on the Commerce Control List say about licensing requirements for the destination country or end user? See CASRAI’s guides on the embargoed countries list for export control and restricted party screening for the destination/end-user side of that analysis.
Step 1: Check Whether the Manufacturer Already Assigned an ECCN
Before doing any classification work, check the vendor’s documentation. Manufacturers of scientific and lab instrumentation frequently publish the ECCN for a given model on the specification sheet, quote, or a dedicated export-compliance page, particularly for instruments with electronics, lasers, cryogenics, sensors, or high-performance computing components that are more likely to fall under a specific CCL entry rather than the EAR99 catch-all. A manufacturer-supplied ECCN is a starting point, not a substitute for institutional review — it reflects the manufacturer’s own classification of the base product, not necessarily the configuration, accessories, or bundled software your lab is procuring, and it does not account for items later modified, integrated into a larger system, or exported with associated technical data.
Step 2: Understand How the Commerce Control List Is Organized
If no manufacturer classification exists, the next step is working through the Commerce Control List (CCL) itself — Supplement No. 1 to Part 774 of the EAR, searchable via BIS’s Interactive Commerce Control List tool. The CCL is organized into ten numbered categories (0 through 9), covering everything from nuclear materials and equipment (Category 0) through aerospace and propulsion (Category 9), with categories in between covering materials processing, electronics, computers, telecommunications and information security, sensors and lasers, navigation and avionics, marine, and more.
Within each category, entries are further grouped into five product groups:
- A — Systems, equipment, and components
- B — Test, inspection, and production equipment
- C — Materials
- D — Software
- E — Technology
A full ECCN combines a category number, a product-group letter, and a three-digit sequence (for example, 3A001 or 5D002) — the category and group tell you where the entry sits on the list; the three digits identify the specific entry and, in general terms, the reason(s) the item is controlled (national security, missile technology, nuclear nonproliferation, chemical/biological weapons, regional stability, crime control, anti-terrorism, and related categories BIS defines within each list entry). Each CCL entry then lists the specific Reasons for Control that apply and a corresponding Country Chart reference showing which destinations require a license for that ECCN and control reason.
Step 3: Self-Classify by Matching the Item Against CCL Technical Parameters
Self-classification means comparing your item’s actual technical specifications — not its marketing description — against the “Items” paragraphs of candidate CCL entries. This requires reading the entry’s specific performance thresholds (processing speed, frequency range, sensitivity, precision, wavelength, encryption key length, and similar parameters depending on the technology) and determining whether your equipment meets or exceeds them. Software and technology require the same paragraph-by-paragraph comparison under product groups D and E, including checking the “related controls,” “related definitions,” and any applicable License Exceptions or Notes that narrow or exclude an entry.
Self-classification is appropriate when the technical comparison is reasonably clear-cut and the institution’s export control office (or a qualified compliance reviewer) can document the analysis — which CCL entry was reviewed, which technical parameters were compared, and why the item does or does not meet the entry’s thresholds. That documentation is what an institution would need to produce if the classification is later questioned, so treat self-classification as a recorded determination, not an informal judgment call.
Step 4: Request a Commodity Classification (CCATS) From BIS When the Analysis Is Ambiguous
When self-classification is genuinely unclear — a novel or highly technical item, borderline performance specifications relative to a CCL threshold, or a determination with high compliance stakes — an institution can request an official classification directly from BIS. This is a Commodity Classification Automated Tracking System (CCATS) determination, submitted electronically through BIS’s SNAP-R (Simplified Network Application Process – Redesign) portal at snapr.bis.gov, under 15 CFR 748.3 of the EAR. The practical steps:
- Register a SNAP-R company account. Most institutions route this through the export control or research compliance office rather than an individual PI or lab, both to maintain a consistent institutional classification history and because SNAP-R submissions are made on behalf of an organization.
- Assemble technical documentation. BIS expects enough detail to make the determination itself: specification sheets, technical drawings or schematics, a plain-language description of function and intended use, and — for software or technical data — source code characteristics, encryption details, or algorithm descriptions where relevant.
- Submit the classification request (CCATS request) through SNAP-R, identifying the item and, where the submitter has a view, the CCL entry believed most applicable.
- Wait for BIS’s determination. Processing time varies with item complexity and current BIS workload; institutions should expect this to take weeks rather than days and should not assume an ECCN before the CCATS response, or make procurement/shipping commitments contingent on a to-be-determined classification.
- Retain the CCATS response as the institution’s official classification record for that specific item/configuration going forward — it applies to the item as submitted, not automatically to later hardware or firmware revisions.
A CCATS determination from BIS is authoritative for the item as classified; it is the right path when the compliance stakes of getting it wrong (an unlicensed export of a controlled item) outweigh the time cost of waiting for BIS’s response.
EAR99: What It Means When Nothing on the CCL Matches
If an item does not meet the parameters of any CCL entry, it falls under EAR99 — the default classification for items subject to the EAR but not listed on the CCL. Most commercial off-the-shelf lab consumables, general-purpose computers below relevant performance thresholds, and standard low-tech equipment fall here. EAR99 is not a blanket exemption from all controls: EAR99 items can still require a license depending on the destination (comprehensively sanctioned/embargoed countries), the end user (a party on a restricted or denied-persons list), or the end use (e.g., support for a prohibited weapons program). EAR99 means “no CCL-specific license requirement,” not “no export control obligations at all” — screening the destination and end user still applies. See CASRAI’s guide on restricted party screening.
Equipment Types Where Research Offices Commonly See CCL Entries (Not EAR99)
The following are illustrative categories where a research office should not assume EAR99 without checking — actual classification always depends on the specific model’s technical parameters, not the general category:
- High-performance computing clusters and certain GPUs — computing performance thresholds fall under Category 4 (computers) and, for advanced AI-relevant chips, have been an area of active regulatory change; see CASRAI’s guide on export control reform and research security.
- Cryptography and information-security software — encryption functionality falls under Category 5, Part 2, and has its own self-classification and reporting pathway (740.17) distinct from a standard CCATS request; see the dictionary entry on software export controls.
- Lasers, certain sensors, and imaging equipment (including some thermal/night-vision components) — commonly reviewed under Categories 6 (sensors and lasers) or 7 (navigation and avionics) depending on function.
- Precision navigation and positioning equipment (certain GNSS/GPS receivers) — reviewed under Category 7 where performance (e.g., resistance to jamming, accuracy under acceleration) exceeds civilian thresholds.
- Materials-processing and semiconductor fabrication-adjacent equipment — reviewed under Categories 2 and 3.
Standard laboratory glassware, general chemistry consumables, most off-the-shelf desktop/laptop computers, and generic office or lab furnishings are typically EAR99 — but the determination should still be documented, not assumed, especially where a piece of equipment bundles a controlled software or firmware component with an otherwise uncontrolled instrument.
Where ECCN Determination Fits in the Procurement and Shipping Workflow
ECCN determination works best as a gate built into procurement and shipping processes, not a step performed only when a problem is flagged:
- At procurement — for equipment likely to carry a CCL entry (see the categories above), request the vendor’s ECCN as part of the quote/purchase-order process, and route the classification to the export control office before the purchase order is issued, consistent with the broader procurement controls described in 2 CFR 200 procurement standards for federally funded purchases.
- Before international shipment — confirm the ECCN, then check that ECCN’s Country Chart entry against the actual destination country, and screen the receiving institution/individual against restricted-party lists.
- Before granting lab access to a foreign national — treat release of controlled technology, software, or technical data to a foreign national colleague as a deemed export requiring the same ECCN-and-destination-country analysis, using the foreign national’s country of most recent citizenship or permanent residency as the relevant “destination.”
- On disposal, transfer, or loan — used or surplus equipment being donated, loaned, or transferred to another institution (including abroad) carries the same ECCN obligations as a new purchase; classification does not expire when equipment changes hands.
See CASRAI’s guides on the four pillars of export control compliance and ITAR US Munitions List (USML) for how ECCN/EAR classification relates to the parallel ITAR/USML pathway that applies to defense articles rather than dual-use items.
Common Mistakes in Practice
- Assuming “fundamental research” clears the item. The exclusion applies to research results intended for publication, not to the controlled status of equipment, software, or technical data used to generate those results.
- Classifying the marketing description instead of the technical specification. CCL entries turn on specific measurable parameters; a product’s category name (e.g., “spectrometer”) is not sufficient to classify it.
- Treating a manufacturer-supplied ECCN as final without confirming it matches the exact configuration, firmware, and bundled software actually being purchased.
- Skipping the destination/end-user check on EAR99 items, on the assumption that EAR99 means no obligations apply.
- Not re-classifying after a significant hardware or firmware upgrade that could move an item across a CCL performance threshold.
Frequently Asked Questions
Who is responsible for determining an item’s ECCN — the PI or the export control office?
Practice varies by institution, but the classification determination itself should be made or reviewed by the institution’s export control office (or an equivalently qualified compliance function), not left solely to an individual PI or lab manager, because it needs to be documented consistently and defensible under institutional review. PIs and lab staff are typically the ones who can best supply the technical specifications the classification depends on.
Does self-classification require submitting anything to BIS?
No. Self-classification is an internal institutional determination against the published CCL text and does not require BIS submission — SNAP-R/CCATS is only for requesting an official classification from BIS when the institution wants (or needs) BIS’s own determination rather than relying on its internal analysis.
One notable exception: certain encryption items self-classified under EAR §740.17(b)(1) may instead require a self-classification report to BIS (not a CCATS request) — a different, encryption-specific reporting pathway from the general classification-request process described above.
How long does a BIS commodity classification (CCATS) request take?
Processing time depends on item complexity and BIS’s current workload; institutions should plan for the request to take weeks, not days, and should build that lead time into procurement and shipping timelines rather than requesting classification as a last step before a shipment deadline.
Does ECCN classification apply to used, donated, or loaned equipment, not just new purchases?
Yes. Export control obligations attach to the item itself, not to the transaction type — a piece of equipment being donated, loaned, or transferred to another institution (including internationally) is subject to the same ECCN determination and licensing analysis as a new export.
If an item is EAR99, is any further review needed before shipping it abroad?
Yes, in some cases. EAR99 removes the CCL-specific license requirement, but a license can still be required based on the destination country (comprehensive sanctions/embargo), the end user (restricted or denied party), or a prohibited end use. Destination and end-user screening should still occur.
Related CASRAI Resources
- ECCN Determination Process (dictionary entry)
- 15 CFR Part 734 (EAR — Scope and Definitions)
- 22 CFR Part 120 (ITAR — Purpose and Definitions)
- ITAR and EAR (dictionary entry)
- Software Export Controls
- Export Control (EAR/ITAR) and International Research Collaboration
- The Four Pillars of Export Control Compliance
- ITAR US Munitions List (USML)
- Embargoed Countries List for Export Control
- Restricted Party Screening
- Export Control Reform and Research Security
- 2 CFR 200 Procurement Standards
- Research Integrity & Compliance (pillar)







