Sanctions hub · Measures tracker · US tracker · China tracker · SDN 50% rule · Primary sources.
Direct answer
Before shipment, payment, service, re-export, in-country transfer or technology release, create one transaction record covering parties; ownership/control; item or activity; technical classification; jurisdictions; route; banks and payment; end user; end use; downstream recipients; authorisations; red flags; screening results; and execution conditions. Then record one of: release · release with controls · hold · escalate · prohibit or do not proceed — as determined by the relevant authorised reviewer. This page does not itself determine a legal outcome. The site’s Export Control and Trade Measures Tracker remains the changing-measures layer, not a screening database.
At a glance: the transaction-screening decision
OPERATING MAP This table replaces a generic “frame / plan / execute / review” strip. Each stage has a question and a fileable output.
| Stage | Question | Output |
|---|---|---|
| 1. Record | Do we have complete transaction facts? | Transaction record |
| 2. Map | Which legal regimes may attach? | Jurisdiction map |
| 3. Classify | What exactly is being exported, supplied, released or performed? | Classification evidence |
| 4. Screen | Which parties, owners, intermediaries and recipients require screening? | Screening record |
| 5. Test use | Is the end user / end use credible and permitted? | End-use review |
| 6. Hold | Is any fact unresolved, contradictory or legally sensitive? | Non-overridable hold |
| 7. Decide | What scoped legal / authorisation conclusion applies? | Written decision |
| 8. Execute | What controls must be carried into shipment, payment or access? | Execution conditions |
| 9. Re-screen | Have facts, lists, ownership, law or route changed? | Final release check |
| 10. Preserve | Can the company reconstruct the decision later? | Evidence file |
Three-layer screening model
Decision: which layer is still open? Hold trigger: treating Layer 1 as Layer 3.
- Sanctions / denied-party screening. Is a party a potential match to a relevant restricted-party list, or subject to applicable ownership/control restrictions?
- Export-control screening. Is the item, software, technology, service, destination, end user, end use or controlled act restricted or subject to authorisation?
- Transaction decision. Do the complete facts, applicable regimes, authorisations, conditions and execution controls permit the transaction to proceed?
Sequence: transaction record → jurisdiction → classification → parties → ownership/control → end use/end user → red flags → hold → scoped legal decision → execution controls → final re-screen → release → evidence retention.
Should this transaction be held?
DECISION TREE Fact-dependent triage. Leaves are workflow results, not legal determinations.
Gate 1 — Are mandatory transaction facts complete?
If no: HOLD. Incomplete party identity, missing end user, unknown installation site, unclear route, unknown bank/payer, missing ownership information, incomplete technical specs, or inconsistent documents.
Gate 2 — Is there a potential list match or unresolved alias?
If yes: HOLD → match-resolution workflow.
Gate 3 — Is ownership/control unresolved?
If yes: HOLD → regime-specific ownership/control review. Do not apply OFAC’s 50 Percent Rule as a global test. See SDN 50% rule for the US example.
Gate 4 — Is item/activity classification unresolved?
If yes: HOLD the controlled act → classification review. An HS code is not an export-control classification.
Gate 5 — Is end use/end user unclear or inconsistent?
If yes: HOLD → enhanced diligence / specialist review.
Gate 6 — Is route or payment commercially unusual or contradictory?
If yes: HOLD → diversion / red-flag review.
Gate 7 — Is there a licence, exception, authorisation, conflict-of-law or countermeasure question?
If yes: HOLD → jurisdiction-specific counsel.
Gate 8 — Have facts changed since approval?
If yes: REOPEN → re-screen / reassess.
Only after all required gates are resolved: FINAL RELEASE REVIEW. This tree does not determine whether a transaction is lawful, prohibited, licensed, exempt, authorised or outside scope.
Required transaction-screening record
This annotated structure is the page’s main practical asset and the counsel-intake object. Missing or inconsistent mandatory fields require a hold.
| Record group | Minimum fields |
|---|---|
| Transaction | Transaction ID, business owner, purpose, contract, requested release date |
| Buyer / seller | Legal name, registration number, aliases, address, jurisdiction |
| Other parties | Shipper, consignee, importer, broker, bank, carrier, agent, distributor, service provider |
| Ownership | Direct owners, indirect owners, percentages where relevant, controllers, parents, source/date |
| Item | Goods, software, technology, service, technical assistance |
| Classification | HS code if relevant, export-control classification/evidence, authority, version/date |
| Route | Origin, destination, transit countries, ports, physical or remote access route |
| Payment | Payer, payee, banks, currency, payment chain, financing |
| End user | Legal entity, site, activity, downstream users |
| End use | Stated use, installation, integration, project, expected volume |
| Authorisations | Licence, exception, general licence, permit, condition, legal review |
| Screening | Source/list, date/time, version, search terms, reviewer, result |
| Red flags | Routing, payment, documentation, ownership, item, customer capability |
| Decision | Hold / escalate / release with controls / release |
| Conditions | Logistics, access, payment, contract, destination, reporting conditions |
| Re-screening | Trigger, next event, final release timestamp |
| Evidence | Documents retained, source references, reasoning, reviewer |
Which regimes may require analysis?
Core rule: do not search a list first and decide jurisdiction later. Do not treat US-person, EU-person, origin, content, location, routing, currency or re-export concepts as interchangeable. Conflicting legal demands must be escalated, not resolved editorially.
Required output for each possible stack: regime → factual nexus → source → reviewer → open question.
US signals (not conclusions)
- US-origin item, software or technology; US-controlled content
- US-person activity; US financial or payment nexus
- Re-export or in-country transfer; destination / end-use / end-user restrictions
- OFAC sanctions nexus
EU signals
- EU person or entity involvement; EU-origin controlled item or technology
- EU export or brokering activity; relevant Member State implementation
- Sanctions restrictions; dual-use controls
PRC signals
- PRC exporter, entity or person; controlled PRC-origin item or technology
- Dual-use export; technology export; data / state-secret interface
- Sanctions or countermeasure implications; other PRC restrictions
Other signals
- UN measures; destination-country controls; transit-country requirements; bank or commercial controls
- Issue: US export, re-export and transfer controls, including classification and end-use / end-user themes
- Supports: Why an unlisted party or ordinary-looking item may still require a hold of the controlled act
- Use on this page: Classification and end-use modules; route detail to the export-control guide and US tracker
- Limitation: Transaction-specific EAR analysis remains required. This page is not an ECCN manual.
- Issue: Whether a party or owned entity may be treated as blocked despite a clean direct-name search
- Supports: Why ownership analysis can be required after a clean name result
- Use on this page: Ownership module — US example only
- Limitation: Do not apply as a universal EU or PRC rule. Confirm current OFAC text. See the SDN 50% page.
- Issue: EU dual-use export, brokering and related control framework
- Supports: Separate EU item / activity / brokering analysis
- Use on this page: Jurisdiction-attachment and classification modules
- Limitation: Member State implementation and authorisations still matter. Does not decide US or PRC treatment.
- Issue: Mainland PRC dual-use export-control authority
- Supports: Why a separate PRC review is required even if US/EU screening looks clean
- Use on this page: Jurisdiction and classification modules
- Limitation: Does not determine US or EU treatment. Confirm current official text and control lists at transaction time.
Classification evidence
An HS code does not establish export-control classification. Software, technology access, technical assistance and services may need their own analysis.
Classification record — required fields
Item/activity description; technical specifications; manufacturer; model/version; functionality; software/technology components; customs code where relevant; export-control classification; classification source; applicable control list/entry; technical reasoning; version/date; responsible reviewer; assumptions; unresolved questions.
| Classification | Purpose | Does not decide |
|---|---|---|
| HS / customs classification | Tariff / customs treatment | Export-control classification |
| Export-control classification | Control status under the applicable regime | Sanctions party status |
| End-use / end-user analysis | Use / user restrictions | General item classification |
| Sanctions screening | Party / ownership restrictions | Item classification |
Route detailed classification work to the export-control hub and current tracker.
Who should be screened?
Identify all relevant roles first; then apply the appropriate regime-specific screening rule. Do not imply every role is screened identically under every regime. A clean entity-name search is not approval.
| Role | Why relevant | Minimum identifiers |
|---|---|---|
| Buyer | Contracting party | Legal name, registration, address |
| Seller | Transaction source | Identity and ownership |
| Consignee | Shipment recipient | Identity / site |
| End user | Actual user | Identity / site / business |
| Importer | Regulatory / customs role | Identity / jurisdiction |
| Distributor | Diversion / intermediary risk | Identity / business |
| Agent / broker | Transaction facilitator | Identity / ownership |
| Bank | Payment nexus | Bank name / jurisdiction |
| Carrier / logistics | Shipment route | Identity |
| Beneficial owners | Ownership / control analysis | Entity chart / source |
| Parent companies | Indirect ownership / control | Ownership data |
| Technical recipients | Technology / software access | Individual / entity / site |
| Downstream recipients | Diversion / end-user restrictions | Identity / use |
Ownership / control escalation
Required facts: direct and indirect shareholders; percentages where relevant; ownership chain; aggregation where required by the applicable regime; control and management rights; voting arrangements; parent/subsidiary relationships; source reliability; data date; recent ownership changes.
| Question | US / OFAC | EU | PRC | Action |
|---|---|---|---|---|
| Does indirect ownership matter? | Apply current OFAC rule where relevant | Determine applicable EU / Member State rule | Determine applicable PRC rule | Separate legal analysis |
| Does aggregation matter? | Apply current OFAC standard where relevant | Do not assume OFAC test | Do not assume OFAC test | Escalate |
| Can control matter separately? | Determine under relevant US authority | May require separate EU analysis | May require separate PRC analysis | Document |
| Is a clean name result enough? | No | No | No | Ownership review where relevant |
This page does not summarise every EU or PRC ownership/control test.
Potential match → hold → resolve → decide
- Capture alert. Name searched, alias, source/list, timestamp, result, search logic. Automatic release is disabled.
- Identity resolution. Compare reliable identifiers: legal name, aliases, address, jurisdiction, registration number, date of formation, website, industry, and individual identifiers where lawfully available.
- Ownership/control analysis where relevant: entity chart, beneficial ownership, indirect ownership, control information, source/date.
- Transaction-context review. Item, route, end user, end use, payment, intermediaries, applicable regime.
- Scoped legal / authorisation decision recorded as: false positive / non-match; match requiring continued hold; authorisation required; release permitted subject to conditions; transaction prohibited / should not proceed; facts insufficient; specialist counsel required.
- Execution controls carried into logistics, contract, payment, technology access, shipment documents, downstream instructions and final release.
End user, end use and diversion
An unlisted party can still create an export-control or diversion problem. A licence or hold may be required without an exact list match.
| Red-flag category | Questions | Evidence | Action |
|---|---|---|---|
| Customer capability | Does business / facility match stated use? | Company profile, site evidence | Verify / escalate |
| Product fit | Is the item suitable for the stated use? | Specs / use explanation | Technical review |
| End-use vagueness | Is the purpose specific and credible? | End-use statement, project info | Hold if unresolved |
| Downstream user | Is the ultimate user known? | Recipient chain | Identify / screen |
| Routing | Is the route commercially coherent? | Logistics documents | Investigate |
| Payment | Are payer, bank and currency consistent? | Invoice / payment documents | Reconcile |
| Quantity | Is order volume credible? | Historical / project evidence | Investigate |
| Technical access | Who receives software or technology? | User / access list | Screen / classify |
| Installation site | Is the location known and consistent? | Site details | Verify |
| Customer resistance | Refusal to provide information? | Correspondence | Hold / escalate |
| Contradictory documents | Do documents conflict? | Document comparison | Hold |
| Changed destination | Did shipment or end user change? | Revised instructions | Reopen decision |
Supply-chain traceability issues: UFLPA audit · origin / customs risk · China+1 hub. Technology or personal-data release: also open the overseas data / SCC path.
When should the transaction be re-screened?
Re-screen when facts change and at the final controlled-act gate. This page does not prescribe one universal periodic cadence.
| Event | Required review |
|---|---|
| New customer / vendor / agent / distributor | Initial party / role screening |
| New beneficial owner | Ownership / control review |
| Name / address / entity change | Identity re-screen |
| New item / version | Classification review |
| New software / technology access | Technical-release review |
| New destination | Jurisdiction / end-use review |
| New route / transshipment point | Diversion review |
| New bank / payment structure | Payment / sanctions review |
| New end user | End-user screening |
| New end use | End-use review |
| New consignee / importer | Party / jurisdiction review |
| Material contract change | Re-open relevant controls |
| Legal / list change | Re-screen affected open transactions |
| Before shipment / payment / service / technology release | Final release screening |
| Incident or audit finding | Retrospective and forward review |
Final release checklist
Before shipment, payment, service, re-export, in-country transfer or technology release confirm:
- Transaction record is complete; relevant regimes identified; classification current
- Parties screened; aliases resolved; ownership/control conclusion documented
- End user known; end use documented; route/payment coherent; red flags resolved
- Licence / authorisation current where applicable; conditions incorporated
- No material facts changed; final re-screen complete; authorised reviewer recorded; evidence saved
RELEASE if all required controls and approvals are satisfied. RELEASE WITH CONDITIONS if lawful conditions must be operationalised. HOLD if any required fact or decision remains unresolved. ESCALATE if specialist legal review is required. Do not define “release” as a legal safe harbour. End-user statements and contractual controls support diligence; they do not transfer legal responsibility or cure known red flags.
Hold authority / RACI
Business teams may supply facts, but unresolved holds cannot be overridden commercially. Distinguish fact owner / screening owner / legal decision owner / execution owner.
| Function | Sales | Procurement | Logistics | Finance | IT | Trade compliance | Legal | Mgmt | Ext. counsel |
|---|---|---|---|---|---|---|---|---|---|
| Collect transaction facts | A/R | C | C | C | C | C | I | I | — |
| Run name screening | I | I | I | C | I | R | C | I | — |
| Collect ownership information | C | C | I | C | I | R | C | I | C |
| Technical classification | C | C | I | — | C | R | C | I | C |
| End-use diligence | C | C | C | I | C | R | C | I | C |
| Payment screening | I | I | I | R | — | C | C | I | C |
| Apply hold | I | I | C | C | C | R | A | I | C |
| Resolve false positive | C | C | I | C | I | R | A | I | C |
| Interpret applicable legal rule | — | — | — | — | — | C | R/A | I | C/R |
| Approve authorisation reliance | I | I | I | I | I | C | A | I | C |
| Release shipment / payment / access | I | I | R* | R* | R* | C | A | I | — |
| Retain records | C | C | C | C | C | R | A | I | C |
| Incident response | C | C | C | C | C | R | A | A | C/R |
R = responsible, A = accountable, C = consulted, I = informed. R* = execution owner for that channel only after legal/compliance clearance. This RACI is an operating model, not a statutory allocation of liability.
Minimum viable programme for smaller teams
This is an operating baseline, not a statutory safe harbour. BIS, OFAC and EU programme guidance may inform structure; they are not a universal harbour.
| Component | Minimum requirement |
|---|---|
| Scope | Written definition of transactions / activities subject to screening |
| Management ownership | Named accountable executive |
| Transaction owner | Business person responsible for complete facts |
| Screening owner | Trained reviewer with source access |
| Hold rule | Non-overridable until resolved |
| Legal escalation | Named internal / external reviewer |
| Source governance | Approved primary sources and version control |
| Classification process | Evidence-based item / activity classification |
| Ownership process | Regime-specific escalation |
| End-use process | Red-flag and downstream diligence |
| Final release | Re-screen + authorised release |
| Records | Complete decision file |
| Training / testing | Role-specific training; periodic QA / audit |
| Incident / change | Stop, preserve, escalate, investigate; update rules / sources / workflows |
Suspected breach or near miss
Stop affected activity → preserve records → contain shipment, access or payment → identify jurisdictions → identify transaction(s) affected → preserve privilege where appropriate → escalate to scoped counsel → determine reporting / disclosure / licence / remediation implications → correct the control weakness → re-screen related transactions.
This guide does not provide universal voluntary-disclosure advice and does not promise immunity or mitigation.
Evidence-preservation checklist
Could a reviewer reconstruct why the company released or held this transaction six months later? If no, the file is incomplete.
Retain: transaction inputs; contract/order; party identifiers; ownership sources; technical classification evidence; screening sources; list/source version; timestamps; match-resolution notes; end-use and end-user evidence; route/payment records; red-flag analysis; licence/authorisation; legal reasoning; internal approval; execution conditions; shipment/payment/access evidence; final re-screen result; change history; incident/corrective action.
Evidence grades used on this page
| Grade | Source | Use |
|---|---|---|
| A1 | Statute / regulation / binding instrument | Legal rule |
| A2 | Official sanctions / control list | Current designation / control data |
| A3 | Official regulator guidance / FAQs | Agency interpretation |
| B1 | Official licence / filing / screening portal | Operational use |
| B2 | Official compliance-programme guidance | Programme design — not a safe harbour |
| C1 | Reputable practitioner analysis | Ambiguity / explanation only |
| C2 | Screening vendor data | Operational aid only |
| D | Unsourced web summary | Do not rely on for legal conclusions |
Common mistakes
| Mistake | Why it fails | Operational consequence | Corrective action |
|---|---|---|---|
| Name-only sanctions screening | Ownership, aliases and control can attach | False clear | Role matrix + ownership review |
| Clean list search as legal clearance | Layer 1 ≠ Layer 3 | Unauthorised release | Final-release gate |
| Screen only the buyer | End users, banks, owners and intermediaries matter | Blind spots | Party-scope table |
| Export OFAC 50% globally | Not an EU or PRC rule | Wrong legal test | Regime-specific analysis |
| HS code as export-control class | Different legal purpose | Missed licence | Classification evidence card |
| Ignore software / tech / assistance | Controlled act may be remote | Unlicensed release | Classify the act and recipients |
| Generic end-user statement | Plausibility not tested | Diversion risk | Red-flag matrix |
| Ignore odd routing or payment | Classic diversion indicators | Hold missed | Gate 6 |
| Onboard once, never re-screen | Facts and lists change | Stale clearance | Event matrix + final gate |
| Commercial override of open holds | Breaks control design | Indefensible file | RACI; hold rule |
| Clear “false positive” without notes | No reconstructable identity work | Audit failure | Match ladder Step 2 |
| Licence conditions as a memo only | Conditions must execute | Breach of authorisation | Carry into systems |
| No re-screen at the controlled act | Last-mile fact change | Wrong release | T7 final re-screen |
| No source / version / timestamp | Cannot prove what was searched | Weak defence | Evidence checklist |
| Vendor software as decision-maker | C2 is not a legal conclusion | Outsourced liability myth | Authorised reviewer records the decision |
Action checklist — counsel intake pack
Send this package so counsel can check conflicts, identify regimes and see whether a hold is already required.
- Transaction purpose and requested release date
- Buyer, seller, consignee, importer, end user, downstream users
- Intermediaries, banks, carriers
- Ownership chart, aliases, registration numbers, addresses
- Item / specification; software, technology or service elements
- HS code if relevant; export-control classification evidence
- Origin, destination, transit route
- Payment structure
- End use and installation site; customer business profile
- Licences / authorisations; current screening results
- Red flags; previous similar transactions
- Internal owner and deadline
FAQs
Selected official sources
- US Export Administration Regulations
- OFAC sanctions programmes
- OFAC 50 Percent Rule FAQs (confirm current page)
- EU Dual-Use Regulation 2021/821
- PRC Regulations on Export Control of Dual-Use Items
- CLP primary-source library
For a live transaction, counsel must still resolve the source-pack questions, including the precise EU Member State, applicable ownership/control rules, authorisation gates, incident routes and the PRC countermeasure, technology-export, state-secret and data interfaces.
Find trade-controls counsel
Use one factual record. Listings are a starting point, not a multi-jurisdictional opinion.
General information for planning and counsel engagement — not legal advice and not a hold-or-release determination. Confirm current primary sources at transaction time. Last reviewed: 16 August 2026 · China Legal Portal Editorial
Attribution
Reviewed by Helen Yao, Beijing Yingke (Zhuhai) Law Firm. Advises Chinese companies on export-control and trade-sanctions compliance programmes (ECP), licence applications, entity-list themes and supply-chain de-risking across PRC, US and EU regimes. View directory profile →
Review tier: Reviewed by — accuracy review of drafts for orientation only. Content remains general information — not legal advice for a specific matter, and no attorney–client relationship is created by reading these pages.
Last reviewed: August 2026 · Related: Primary sources · Outbound decision hub.






