About Export Compliance

A download package’s export compliance settings are defined on its Add Download Package or Edit Download Package page. These settings play a role in determining whether or not a collection of files can be delivered to a given End-User Portal user. Download packages that are not restricted to the United States and Canada must have valid ECCN, ENC, and CCATS values to be properly delivered to users in countries outside of the United States and Canada.

•

Export Compliance Requirement

•

Export Compliance Evaluation

•

Export Compliance Codes: ECCN, ENC, and CCATS

Export Compliance Requirement

Deliveries of software outside the United States are subject to the Export Administration Regulations, which are administered by the Department of Commerce Bureau of Industry and Security. In addition to embargoed or terrorist countries, to which no products may be sold or delivered, a number of United States government agencies maintain lists of individuals and entities to which software sales and delivery are barred. Revenera is prohibited from delivering to parties appearing on these lists, whether we are delivering from or to the United States or from or to another country.

Export Compliance Evaluation

FlexNet Operations distinguishes and acts on the different BIS-approved processes, depending on the product classification of a particular software product.

FlexNet Operations checks the following data elements for any individual who initiates a download using the service:

•

User name on denial list

•

User email address domain—check for country of origin/government

•

User profile address—check for country of origin/government

•

Account Name on denial list

•

IP address lookup

•

Domain from DNS lookup for IP address (only used if the user profile address check fails)

If any of these checks fail, access is denied—the export is not allowed. When a compliance check fails, FlexNet Operations automatically generates and sends an email message to an internal email alias and, optionally, also forwards it directly to a customer-designated email address. Contact Revenera, if necessary, to follow up for information relevant to the denial.

Export Compliance Codes: ECCN, ENC, and CCATS

The chart, below, displays the valid ECCN, ENC, and CCATS code combinations to comply with the Bureau of Industry and Security's (BIS) export rules. In the chart, "######" indicates that any six digits following D, G, or Z are valid. All characters are upper-case. The Z###### CCATS numbers may also have -P appended to them to indicate that the temporary classification has expired and the final CCATS number is pending.

You can restrict downloads to the US and Canada by setting Restrict to US/CANADA (NLR) to Yes.

Use “TSR+” for 5D001 products with a TSR license exception, except for those products with "software" controlled by 5D001.a and specially designed for items controlled by 5A001.b.5.

Valid code combinations based on BIS compliance taxonomy

Encrypted?	ECCN	ENC	CCATS	Export Rules
Encryption	5D002	Unrestricted (RETAIL)	D###### G###### SELF Z######-P	Broad export. No embargoed countries or “terrorist-supporting states.”
			Z######	Limited export. No countries outside U.S., Canada, and EU+8 (EU+8 referred to in BIS regulations as “Supplement 3 Countries”).
		Restricted (NON_RETAIL)	D###### G###### Z######-P	Limited export. No foreign governments outside the EU+8 (EU+8 referred to in BIS regulations as “Supplement 3 Countries”). No embargoed countries or “terrorist-supporting states.” Special click-through must be accepted by end user.
			Z######	Limited export. No countries outside U.S., Canada, and EU+8 (EU+8 referred to in BIS regulations as “Supplement 3 Countries”).
		TSU	---	Broad export. No embargoed countries or “terrorist-supporting states.” Available for “publicly available” encryption source code.
		TMP_BETA	---	Broad export. No embargoed countries or “terrorist-supporting states.” Available for beta testing only. Certain terms must be agreed to by beta tester.
		UNKNOWN	---	Limited export. No countries outside U.S. and Canada.
		740.17(a)(1)	---	Provided only for informational purposes. It is the producer's responsibility to ensure that Export Rules are complied with
		740.17(a)(2)	---
		740.17(b)(2)	---
	5D992	740.17(b)(1)	---	Provided only for informational purposes. It is the producer's responsibility to ensure that Export Rules are complied with
		740.17(b)(3)	---
		---	--- D###### G###### SELF Z######-P Z######	Broad export. No embargoed countries or “terrorist-supporting states.” CCATS=SELF available only for encryption that does not exceed 56 bits, or encryption that is limited to password protection or authentication.
No Encryption	EAR99	---	--- SELF	Broad export. No embargoed countries.
	3E201	---	---	No license required. Nuclear Nonproliferation.
	3D002	---	---	Limited export. No countries outside U.S. and Canada.
		TSR	---	Limited export. Group B countries only. Special click-through must be accepted by end user (written assurance).
	3D991	---	---	Broad export. No embargoed countries or “terrorist-supporting states.”
	3E991	---	---
	4D993	---	---
	4D994	---	---
	4E992	---	---
	4E993	---	---
	5D001	---	---	Limited export. No countries outside U.S. and Canada.
		TSR	---	Limited export. Subset of Group B countries only. Special click-through must be accepted by end user (written assurance).
		TSR+	---	Limited export. Group B countries only. Special click-through must be accepted by end user (written assurance).
	5D991	---	---	Broad export. No embargoed countries or “terrorist-supporting states.”
	5E991	---	---
	5E992	---	---
Unknown	NO_EXPORT	UNKNOWN	---	No export. U.S. only.
	UNKNOWN	UNKNOWN	---	No export. U.S. only.

See Also

Creating a Download Package

About Download Packages