Catch-all can require a licence — or a stop — for items that are not on the dual-use list.
The Export Control Law and implementing rules require exporters to apply for a licence or halt the export when they know or should know that an otherwise uncontrolled item will be used in a prohibited programme, or when the authorities notify them of a risk. Red flags include military end users, WMD-related procurement, evasive routing, and specs that only make sense for a controlled purpose. Catch-all is fact-specific and notice-driven; there is no wiki safe harbour. Foreign catch-all (US, EU) can stack. Keep a dated ‘should have known’ file, not only a list-screening tick.
4 questions before you choose the route.
This page identifies the right question and evidence. It does not determine the legal outcome on a reader’s facts.
Did list screening come back ‘not listed’?
Then start catch-all; do not close the file.
GateWhat do you actually know about user and use?
Documents, site, ownership, open source.
KnowledgeHas an authority notified you?
A letter beats a gut feel and creates a hard duty.
NoticeWould a reasonable exporter ask more questions?
The ‘should know’ test.
Red flagsWorking rule: Map the regulated role before marketing or launch in China.
The signal ledger.
These facts move the question beyond a label and into a product, money-flow and control analysis.
Bring a compact evidence docket—not a pitch deck.
Give a compliance team or counsel the operating facts that reveal the perimeter.
Questions people ask before they build.
Short answers for orientation. The right result can change with the service model and current rules.
If we did not know, are we safe?
The test includes should-know and official notice. A thin KYC file is how ‘we did not know’ fails.
Does catch-all mean every civil export needs a licence?
No. It means unlisted plus red-flag user/use needs a decision, sometimes a licence application, sometimes a no-export.
Primary authorities
Reviewed sources support orientation, not a fact-specific assessment.