Toolkit · Business

The Export Control and Sanctions Screening Toolkit

50 U.S.C. § 1705

Type
Toolkit
Jurisdiction
National
Date
2025-10-25
Topic
Business

This toolkit collects the working documents a company needs to run export, sanctions, and customs compliance without a dedicated department. It includes a classification table schema, a screening log, an end-use certificate, a destination control statement, a red flag register, and a license condition tracker. The personnel half provides a deemed export determination form, an access-grant workflow, and an international travel policy. The response half provides a blocked payment escalation script, a first-day incident sequence, a voluntary self-disclosure outline, a prior disclosure structure for customs, and an acquisition diligence request list. Contract clause language and a retention schedule close the set. Each document is annotated with the failure it prevents. Templates are drafting starting points for counsel and are not a substitute for advice on a specific transaction.

The Export Control and Sanctions Screening Toolkit

Business > International Trade and Sanctions | Published 25 October 2025 - Updated 28 August 2026 | UpLaw - uplaw.us

What Is In This Toolkit

Sixteen working documents. Use them with the checklist for sequence and the comprehensive guide for the underlying rules. The narrative introduction is how export controls and sanctions actually work.

⚠ Two standing warnings. Sanctions programs change without notice, so any list, general license, or country conclusion must be checked against current text. And if funds or property are involved in a hit, reporting deadlines under 31 C.F.R. Part 501 begin immediately.

Tool 1 — Classification Table

The single most useful artifact in a trade compliance program. One row per product, software module, and technology set.

Field Entry
Item name and internal part number
Type hardware / software / technology
Regime ITAR / EAR / not subject
ECCN or USML category
Reasons for control NS, MT, NP, CB, RS, CC, AT, EI, etc.
Basis for determination self-classified / agency ruling / manufacturer statement
Technical rationale (2–3 sentences)
Encryption functionality present? yes / no — describe
Preparer and date
Engineering change trigger linked ECO numbers
Review date

Scoping questions are worked at 15 C.F.R. Part 732 and 15 C.F.R. Part 734; the Munitions List is at 22 C.F.R. Part 121 with definitions at 22 C.F.R. Part 120.

Tool 2 — Screening Log

Date Party Role Lists screened List versions Result Ownership checked Reviewer Disposition
customer / end user / consignee / forwarder / bank / vendor / applicant SDN, Entity, DPL, UVL, debarred clear / hit / possible match yes/no, method proceed / hold / escalated

Rules of use. Screen at onboarding, quote, order, shipment, payment, and on a recurring cycle. Apply the fifty percent aggregate ownership rule to every material counterparty. On a hit, stop and escalate the same day, and say nothing to the counterparty that could tip off an investigation.

Tool 3 — End-Use Certificate

END USE AND END USER STATEMENT

Purchaser: ____ Address: ____ Order/Quote reference: ____

  1. Items: [description, part numbers, quantities]
  2. End user (name, address, country, business): ____
  3. Ultimate destination (country and site): ____
  4. Specific end use (describe the actual application): ____
  5. Purchaser certifies the items will not be used, directly or indirectly, in connection with nuclear, missile, chemical, or biological weapons applications, or any other end use prohibited by 15 C.F.R. Part 744.
  6. Purchaser certifies the items will not be reexported, transshipped, or transferred to any other party, destination, or end use without prior written consent of Seller and any required U.S. Government authorization.
  7. Purchaser certifies that neither it, nor its owners of fifty percent or more in the aggregate, nor the end user, is a designated, denied, debarred, or blocked party.
  8. Purchaser agrees to notify Seller immediately of any change in the information above.
  9. Purchaser agrees to provide, on request, documentation confirming receipt, installation, and use.

Signature: ____ Name and title: ____ Date: ____

Tool 4 — Destination Control Statement

Place on invoices, packing lists, and air waybills for controlled shipments.

"These items are controlled by the U.S. Government and authorized for export only to the country of ultimate destination for use by the ultimate consignee or end user herein identified. They may not be resold, transferred, or otherwise disposed of, to any other country or to any person other than the authorized ultimate consignee or end user, either in their original form or after being incorporated into other items, without first obtaining approval from the U.S. Government or as otherwise authorized by U.S. law and regulations."

Tool 5 — Red Flag Register

Date Raised by Transaction Flag observed Inquiry made Response received Resolution Approver

Why this exists. Under 15 C.F.R. Part 744, knowledge includes awareness of a high probability, inferable from conscious disregard. An unresolved flag is evidence of reason to know. A register showing that flags were raised, investigated, and resolved is the strongest available answer.

Standing flags to train on: reluctance to give end-use information; end use inconsistent with the product or the customer's business; routing through unrelated countries; refusal of installation or training; unusual payment terms or third-country payment; forwarder named as end user; requests to misdescribe goods; packaging inconsistent with the stated destination.

Tool 6 — License and Exception Condition Tracker

Field Entry
Authorization type license exception / individual license / general license / specific license / ITAR agreement
Citation e.g. 15 C.F.R. Part 740 exception; license number
Items covered
Parties named
Destinations authorized
Value or quantity limit
Expiration date
Return date (temporary exports)
Reporting obligations and due dates
Recordkeeping obligations
Distributed to (shipping, sales, finance)
Owner and review date

⚠ A license held only by legal is a violation in waiting. Conditions must reach the people who ship, invoice, and grant access.

Tool 7 — Deemed Export Determination Form

Complete before access is granted.

Person: ____ Role: ____ Start date: ____ Requested access: repositories, systems, physical areas, projects 1. Does the requested access include controlled technology or source code? yes / no — identify by classification table entry. 2. Is the person a U.S. citizen, lawful permanent resident, or protected individual? yes / no 3. If no, most recent country of citizenship or permanent residency: ____ 4. Would release to that country require a license under the applicable regime? yes / no — basis: 5. Options selected: license application / role restructured to uncontrolled work with technical segregation / exemption relied on (identify) 6. Technical segregation implemented by: ____ (system, ACL, date) 7. Determination made by: ____ Date: ____ Review trigger: role or project change

The inquiry must be limited to what export law requires and applied identically to every candidate; the discrimination boundary is discussed in hiring and background checks.

Tool 8 — International Travel Policy

  1. Clean devices only. Travelers use loaner laptops and phones containing no controlled technology and no access to controlled repositories.
  2. No remote access to controlled systems while abroad without prior written approval.
  3. Notify [OWNER] at least two weeks before travel to any destination on the restricted list.
  4. Carry no samples, prototypes, or hardware without a documented authorization; temporary export exceptions carry conditions, including return deadlines.
  5. Do not discuss controlled technical details at conferences, in meetings, or with prospective partners. Presentations must be cleared in advance.
  6. Report any request for technical information received while traveling, on return.
  7. Report any device seizure, inspection, or loss immediately.

Tool 9 — Blocked or Rejected Payment Escalation Script

For finance and accounts receivable. Print it and tape it to the wall.

IF A BANK REJECTS, HOLDS, OR RETURNS A PAYMENT, OR IF A PAYMENT ARRIVES FROM AN UNEXPECTED PARTY OR JURISDICTION:

  1. Do not return the funds. Do not instruct the customer to resend from a different bank. Both can be violations.
  2. Segregate the funds and mark the account entry "HOLD — COMPLIANCE."
  3. Notify [NAME] the same business day. Legal deadlines under 31 C.F.R. Part 501 begin immediately.
  4. Record: date, amount, originating bank and country, remitter name, intermediary banks, invoice reference, and the exact reason the bank gave.
  5. Do not tell the customer why beyond "our bank has flagged this payment and we are reviewing it."
  6. Preserve everything — the wire advice, the bank correspondence, and the customer's emails.
  7. Expect a lookback. The relationship, not just the payment, will need review.

Tool 10 — First-Day Incident Sequence

HOUR 0–2 ☐ Stop the conduct: halt shipments, freeze accounts, suspend access. Do not complete pending orders. ☐ Notify counsel with trade experience. No agency or counterparty contact until then. ☐ Identify any reporting clock already running.

HOUR 2–8 ☐ Issue a litigation hold covering shipping, classification, screening, license, access, and counterparty records; mechanics in issuing a litigation hold and preserving ESI. ☐ Suspend automatic deletion including chat and messaging. ☐ Instruct employees in writing: preserve everything, discuss with counsel only.

DAY 1–5 ☐ Scope the population: items, parties, destinations, period, values. ☐ Determine whether conduct was knowing, and whether red flags were raised and ignored. ☐ Quantify violations — penalties under 50 U.S.C. § 1705 are per violation. ☐ Identify parallel exposure, including customs under 19 U.S.C. § 1592 and contractor debarment risk. ☐ Decide whether to file an initial disclosure notification while the review continues.

Tool 11 — Voluntary Self-Disclosure Outline

1. Cover statement. Who is disclosing, under which regime, the date conduct was discovered, and whether an initial notification was previously filed. 2. The parties. Company, affiliates involved, and the counterparties. 3. The items. Description, classification, and the basis for classification, cross-referenced to Tool 1. 4. The conduct. What happened, when, how many transactions, to which destinations and end users, with values. 5. Transaction schedule. One row per transaction: date, item, ECCN or USML category, destination, end user, value, authorization relied on (if any), and the reason it was insufficient. 6. How it was discovered. Audit, employee report, bank notice, diligence — and the date. 7. Root cause. The control that was missing or failed. Be specific; "human error" is not a root cause. 8. Knowledge assessment. Who knew what, and when; whether any red flags were raised internally. 9. Remediation. Controls implemented, training delivered, personnel actions, and dates — with evidence attached. 10. Mitigating factors. Prompt cessation, cooperation, absence of harm, first-time conduct, program in place. 11. Certification and contact.

Why disclose. Mitigation for timely, complete voluntary disclosure is substantial across all three regimes. Enforcement exposure without it includes denial of export privileges under 15 C.F.R. Part 764 and debarment under 22 C.F.R. Part 127, alongside criminal referral where conduct was willful — a posture described in white collar and financial crime.

Tool 12 — Customs Prior Disclosure Structure

1. Statement that this is a prior disclosure and that no investigation has been commenced to the discloser's knowledge. 2. Import identification: importer of record number, ports, entry numbers, and date range. 3. The error: classification, valuation, origin, marking, or preference claim. 4. The correct treatment, with the legal basis — entry obligations run through 19 U.S.C. § 1484, invoice content through 19 U.S.C. § 1481. 5. Loss of revenue calculation, entry by entry, with a tender of unpaid duties and interest. 6. Culpability position: negligence, gross negligence, or fraud, with the facts supporting the assessment under 19 U.S.C. § 1592. 7. Root cause and remediation. 8. Forward-looking correction: revised classification, valuation methodology, or origin determination, and how it is now controlled.

Tool 13 — Distributor and Reseller Audit

☐ Compare twelve months of order volume against the distributor's plausible local market. ☐ Request end-user documentation for a sample of orders. ☐ Verify the destinations of record against shipping documents. ☐ Confirm the distributor has passed reexport restrictions into its downstream contracts. ☐ Screen the distributor's significant customers where contractually permitted. ☐ Review any refusal of installation, training, or service by end users. ☐ Document the audit, the findings, and any corrective action. ☐ Where anomalies are unexplained, suspend shipments under the contractual suspension right pending resolution.

Tool 14 — Trade Clauses for Cross-Border Contracts

Compliance representation. Each party represents that it, and each person owning fifty percent or more of it in the aggregate, is not a designated, denied, debarred, or blocked party, and covenants to give immediate notice of any change.

End use and destination. Buyer represents the end use and end user stated in the End Use Certificate, and will not resell, transfer, reexport, or otherwise dispose of the items to any other party, destination, or end use without Seller's prior written consent and any required U.S. Government authorization.

Prohibited end uses. Buyer will not use the items for any purpose prohibited by 15 C.F.R. Part 744 or by applicable sanctions programs.

Flow-down. Buyer will include this Article in every downstream agreement.

Audit. Seller may request documentation of end use, end user, and destination, and may audit Buyer's records relating to the items on reasonable notice, not more than [twice] per year.

License contingency. Seller's obligations are conditioned on receipt of all required authorizations. Delivery dates extend by the period required to obtain them, and Seller may terminate without liability if an authorization is not obtained within [90] days or is denied or revoked.

Suspension. Seller may suspend performance immediately and without liability if any party becomes designated, if Seller reasonably believes performance would violate applicable law, or pending resolution of a compliance inquiry.

Indemnity. Buyer indemnifies Seller against losses arising from any misrepresentation of identity, ownership, end use, end user, or destination.

Records. Each party will retain records relating to the transaction for not less than five years and will provide them on request. This Article survives termination.

Drafting mechanics generally are in contracts.

Tool 15 — Acquisition Diligence Request List

☐ Classification table with preparer and dates, for all products, software, and technology. ☐ Two years of screening logs with list versions. ☐ All licenses, exceptions relied upon, and ITAR agreements, with conditions and compliance evidence. ☐ All end-user certificates and destination control statements for five years. ☐ Complete list of jurisdictions sold into, directly and through distributors, for five years. ☐ Roster of foreign nationals with access to controlled technology and the determination for each. ☐ All voluntary or prior disclosures ever filed, and their outcomes. ☐ All blocked, rejected, or returned payments. ☐ Any agency correspondence, subpoenas, or inquiries. ☐ Customs entry summaries, ruling letters, and any penalty notices. ☐ Ownership analysis of the target and its material counterparties against the fifty percent rule. ☐ Trade compliance program documents, training records, and audit reports.

Transaction context is in buying and selling a business.

Tool 16 — Retention Schedule

Record Minimum retention
Classification determinations and technical rationale 5 years after the item is discontinued
Screening logs and list versions 5 years
End-use certificates and destination statements 5 years after the transaction
Licenses, exceptions relied on, and condition compliance evidence 5 years after expiration
Shipping documents and export filings 5 years
Deemed export determinations 5 years after access ends
Customs entry records and supporting documentation Per the applicable customs retention period
Red flag register and resolutions 5 years
Training records and audit reports 5 years
Disclosure files Permanently

Tool 17 — Authority Quick Card

Print and keep with the classification table.

Question Where the answer lives
What is the EAR framework? 15 C.F.R. Part 730
Steps to determine applicability 15 C.F.R. Part 732
Is my item subject to the EAR? 15 C.F.R. Part 734
General prohibitions 15 C.F.R. Part 736
Country chart 15 C.F.R. Part 738
License exceptions 15 C.F.R. Part 740
End-use and end-user controls 15 C.F.R. Part 744
Embargoes and special controls 15 C.F.R. Part 746
License applications 15 C.F.R. Part 748
Enforcement and penalties 15 C.F.R. Part 764
ITAR definitions and registration 22 C.F.R. Part 120
United States Munitions List 22 C.F.R. Part 121
ITAR licensing 22 C.F.R. Part 123
Proscribed destinations and exemptions 22 C.F.R. Part 126
ITAR violations and penalties 22 C.F.R. Part 127
Arms export authority 22 U.S.C. § 2778; § 2780
Sanctions authority 50 U.S.C. § 1701; § 1702
Sanctions penalties 50 U.S.C. § 1705
OFAC procedures and reporting 31 C.F.R. Part 501
Comprehensive program examples 31 C.F.R. Part 515; Part 560
List-based program examples 31 C.F.R. Part 589; Part 590
Import entry and reasonable care 19 U.S.C. § 1484
Invoice requirements 19 U.S.C. § 1481
Import penalties 19 U.S.C. § 1592
Seizure and forfeiture 19 U.S.C. § 1595a

Tool 18 — One-Page Employee Card

[COMPANY] TRADE COMPLIANCE — WHAT EVERY EMPLOYEE NEEDS TO KNOW

  1. We check every customer, vendor, and partner against government lists before we deal with them. If you are about to work with someone new, ask [NAME] first.
  2. Nothing ships until it has been classified. If a product, feature, or software module is new, tell [NAME].
  3. We ask every foreign customer what the product is for, in writing. Never skip it because the customer seems familiar.
  4. Sharing technical files, screens, or explanations with someone outside the U.S. — or with a foreign national inside the U.S. — can require a government license. Ask before you share, before you grant access, and before you travel.
  5. Never describe goods inaccurately on any document, no matter who asks or why.
  6. If a payment is rejected, held, or arrives from somewhere unexpected, tell [NAME] the same day. There is a legal deadline.
  7. If something feels wrong, say so in writing. Nobody is ever disciplined for asking. People are disciplined for staying quiet.

Questions: [NAME], [EMAIL], [PHONE].

Related Documents