Many manufacturers publish their ECCNs, often on an export or trade compliance page as a product classification lookup, and some list them on the datasheet or the commercial invoice. If nothing is published, ask the supplier's export compliance team. You may generally use a manufacturer's ECCN in good faith, but under the Export Administration Regulations (EAR) the exporter is responsible for the classification it ships under, so check it against the entry before you rely on it.
When you export someone else's product (a server, a router, a sensor, a software package), the manufacturer is usually the fastest way to its ECCN. Many publish classifications for their whole catalogue. Treat a published ECCN as a starting point.
Where do manufacturers publish ECCNs?
- Many large technology and electronics manufacturers have an export or trade compliance page with a product classification lookup. You enter a model or part number and see its ECCN, and often its CCATS number if BIS has classified the item.
- Some list the ECCN on datasheets and product pages, alongside the technical specifications.
- Invoices, packing lists and order confirmations from larger suppliers often carry the ECCN.
- Authorised distributors often hold classification data for the lines they carry.
- If nothing is published, ask the supplier's compliance team (what to ask for is listed below).
Searches such as "APC ECCN" or "IBM ECCN", or a model number followed by "ECCN", are looking for exactly this. Where the manufacturer has a published lookup, that is the place to start. Search it by model or part number.
What does a manufacturer's ECCN cover?
A manufacturer's ECCN describes the product as the manufacturer sells it. It does not automatically cover:
- modified items, with added functions, different firmware or changed encryption
- integrated items, such as a component built into your own system, where the system is classified as a whole (the component may or may not keep its own ECCN when exported separately)
- different variants, meaning the same model name with different specifications, for example a higher-performance version that crosses a threshold
- software and technology that come with the product, since manuals, source code and development know-how have their own classifications in product groups D and E
Can you rely on a manufacturer's ECCN?
In practice, exporters routinely use manufacturers' classifications, and doing so in good faith is reasonable. That is particularly true where the manufacturer holds a BIS classification ruling (CCATS) for the item. Good practice is to:
- Check the classification against the entry. Open the ECCN on the Commerce Control List and confirm the item meets the paragraph. How to look up an ECCN shows how.
- Record the source (the page, document or email) and the date.
- Watch for the red flags below.
Red flags in published ECCNs
- "EAR99" for a clearly technical product with networking, encryption or high performance.
- An entry with no paragraph where the entry has several.
- An ECCN from a different category than the product's function suggests.
- A classification older than a major rule change affecting the product.
- An ECCN that does not match the item's function.
Any of these is a reason to check the entry yourself.
When you must classify it yourself
- The manufacturer does not publish or provide an ECCN.
- You modified the product or integrated it into another.
- The published ECCN appears inconsistent with the entry's parameters.
- You export related software or technology.
- The product is your own.
Classifying from scratch follows the steps in how to find the ECCN for your product: ITAR first, then the category and product group, then the entry and the paragraph the item meets.
When sources disagree
If the manufacturer says 5A992.c and your own reading suggests 5A002, do not choose the more convenient answer. Ask the manufacturer how it reached its classification. For encryption items, ask whether the Cryptography Note applies and what filing was made. If the conflict remains, you can request a formal classification from BIS; see self-classification vs. a BIS classification request.
What to ask a supplier for
- The ECCN with its paragraph, for example 5A992.c (5A992 alone is not enough). ECCN number structure explains why the paragraph counts.
- The basis for it: self-classification, or a CCATS number.
- For encryption items, whether a classification request, a self-classification report or a § 740.17 filing covers the product.
- Whether the classification covers all variants and firmware versions you buy.
- The HTS code, separately, if you also need it for customs. It is a different classification.
- Whether the item is subject to the ITAR in any configuration.
Keeping supplier classifications current
Supplier classifications change when products change and when the regulation changes. The advanced computing rules, for example, moved many servers and accelerators into new entries. Build a simple routine: refresh supplier ECCNs at least annually, when a new model or firmware ships, and whenever BIS publishes a rule affecting the category. Keep the dated source with each record.
Checking a supplier's ECCN with ECCN.help
ECCN.help's Quick Search opens any entry by code, free and without limit, so you can compare the paragraph with the product's specifications. To classify the item yourself, or to confirm a supplier's answer with your own reasoning on file, the ECCN.help Classification Workflow walks through the regulation step by step. It is rule-based, without AI, and records every answer that decided the result. See also common ECCN classification mistakes.
ECCN.help provides research and assistance, not legal advice.