End-use / end-user controls tracking
end-use-controls-trackingDomain: trade-sanctionsType: processDescription
End-use and end-user controls are the tier of export-control law that operates above and beyond the destination-country sanctions list. The premise is that even a transaction with a non-sanctioned counterparty in a non-sanctioned country becomes prohibited if the goods, software, or technology are destined for a prohibited end use (military, nuclear, missile, biological, chemical, or cyber-intrusion applications, with the specific scoping varying by regime) or for a prohibited end user (a Specially Designated National, an Entity List party, or a person known or reasonably suspected to be acting on behalf of one). Country-level screening is necessary but not sufficient. End-use screening is the layer that catches the otherwise-legal export that the regime intended to prohibit on the basis of where it actually goes rather than where it nominally goes. The rules sit in three parallel regimes that an export-active operator usually has to satisfy together. Under the US Export Administration Regulations the controls live in 15 CFR Part 744 and the supplemental Entity List, with the deemed-export rules at 15 CFR 734.13 reaching foreign-national-engineer access to controlled technology inside the US, and the Foreign Direct Product Rule at 15 CFR 734.9 reaching items produced abroad using US-origin tools. The EU Dual-Use Regulation 2021/821 carries equivalent end-use catch-alls in Article 4: weapons-of-mass-destruction concern (Article 4(1)(a) to (c)) and the newer cyber-surveillance catch-all (Article 4(1)(d)) that was the headline change in the 2021 recast. The UK Export Control Order 2008 expresses the same logic through Article 4 and Schedule 4, plus the UK-specific Security and Human Rights List that reaches items beyond the multilateral baseline. The operational decomposition is four steps. The intake form captures end-use and end-user information at the order-intake stage, in enough detail to support the screening (purpose of acquisition, ultimate end user, geographic location of end use, whether the item will be re-exported or incorporated into a downstream product). The screening evaluates the answers against the catch-all categories and against the relevant restricted-party lists at the time of the transaction; the timestamp matters because Entity List additions take effect on publication. The red-flag review catches the cases where the answers themselves are facially compliant but the surrounding context raises concern (a freight forwarder in a third country, an end user with no apparent legitimate use for the item, a route that is consistent with diversion). And the licensing or refusal decision documents the resolution, including the reasoning behind any decision to proceed without a license. The knowledge standard is the part that trips operators up. The rules attach not only to actual knowledge of a prohibited end use but also to reason-to-know, which the agencies construe broadly: BIS guidance treats a red flag that was not investigated as equivalent to knowledge of the underlying concern, and OFAC's enforcement framework operates on the same principle for sanctions-list circumvention. The documentation of what was asked, who answered, and what red flags were assessed therefore matters as much as the answer itself; "is-informed" letters from BIS to specific exporters are an extreme example of the same logic, but the same evidentiary burden applies whenever an export decision is reviewed after the fact. The cheapest operational pattern is to run the end-use screening as a documented checklist alongside the SDN screening, with the checklist captured per transaction rather than per customer; the per-customer model is faster but does not capture the changes in end use that frequently occur between orders.
Applicability
Applies when: markets include US, EU, or UK.
Required by (3 regulations)
- US EAR
15 CFR §744 + §734.13 — deemed-export rules for foreign-national engineer access; FDPR (§734.9) end-use evaluation for advanced-computing exports.
15 CFR §744 + §734.13
- EU Dual-Use
Regulation (EU) 2021/821, Article 4 catch-all triggers — non-Annex licensing required where end-use signals WMD, military, or human-rights concern (Article 4(1)(d) cyber-surveillance catch-all).
Regulation (EU) 2021/821, Article 4 catch-all triggers
- UK Export Control
Export Control Order 2008 Article 4 + Schedule 4 — UK Security and Human Rights List captures items beyond the multilateral baseline; cyber-tools end-use evaluation.
Export Control Order 2008 Article 4 + Schedule 4
Fulfilled by (1)
- In-house build · high effort
Magist does not accept payment from vendors. Methodology.
Evidence formats
- end-use certifications
- red-flag log
- is-informed letters