INTERNATIONAL TRADE LAW
Commerce Control List (CCL): What It Is

The Commerce Control List (CCL) is the master catalog of dual-use items that the U.S. controls for export, maintained by the Bureau of Industry and Security (BIS). If your product is described on the CCL, it carries an Export Control Classification Number (ECCN) and may need a license depending on where it is going and who will receive it. If it is subject to the Export Administration Regulations but not described anywhere on the list, it is EAR99. Knowing which side of that line you are on is the foundation of export compliance.
What the CCL controls
The CCL covers dual-use items — goods, software, and technology with both commercial and military or proliferation applications. It does not cover defense articles built for the military; those sit on the U.S. Munitions List under the State Department’s ITAR. The CCL is the Commerce Department’s side of the export-control system, and it lives in Supplement No. 1 to Part 774 of the EAR.
The point of the list is to let the government control sensitive exports — encryption, advanced electronics, certain materials and sensors — without choking off ordinary trade. Most commercial products are not on it.
How the CCL is structured
The list is organized into ten categories and, within each, five product groups. Together those two coordinates form the first two characters of every ECCN.
| Categories (0–9) | Product groups (A–E) |
|---|---|
| 0 — Nuclear materials, facilities, equipment | A — Equipment, assemblies, components |
| 1 — Materials, chemicals, microorganisms, toxins | B — Test, inspection, production equipment |
| 2 — Materials processing | C — Materials |
| 3 — Electronics | D — Software |
| 4 — Computers | E — Technology |
| 5 — Telecommunications (Part 1) and Information Security (Part 2) | |
| 6 — Sensors and lasers | |
| 7 — Navigation and avionics | |
| 8 — Marine | |
| 9 — Aerospace and propulsion |
So an ECCN like 5A002 reads as Category 5 (information security), product group A (equipment). Each entry lists the technical thresholds that put an item under control and the Reasons for Control — national security, anti-terrorism, missile technology, and so on — that drive the licensing analysis.
From the CCL to a license decision
Being on the CCL does not automatically mean you need a license. The list gives you the ECCN and its reasons for control; you then read those reasons against the destination using the Commerce Country Chart (Supplement No. 1 to Part 738). Where a control reason for your item intersects an “X” for the destination country, a license is presumptively required unless a license exception applies. For the full walk-through, see our ECCN classification checklist.
Layered on top of all of this are the EAR’s end-use and end-user controls, which can require a license even for an uncontrolled or EAR99 item if a prohibited party or purpose is involved. The CCL answers “what is it”; the country chart and Part 744 answer “can it go there, to them, for that.”
How to tell whether your product is on the CCL
- Pin down the technical specifications. Capability and performance parameters decide classification, not the product’s name or marketing.
- Narrow to a category and product group. Use the specs to land on one of the ten categories and one of the five groups.
- Read the candidate entries. Check the item against the thresholds in the relevant ECCN entries in Part 774. The BIS CCL search tool helps locate entries by keyword and number.
- If nothing fits, it is EAR99. That means it is still subject to the EAR but not listed — license-free for most destinations, but never exempt from end-user and sanctions screening.
When the entries are technical and the call is close, request a formal classification (a CCATS) from BIS rather than guess.
Why classification against the CCL matters
A wrong read of the CCL is the root of most export violations: ship a listed item with no license and you have a strict-liability problem regardless of intent. Penalties are set by statute — criminal violations under the Export Control Reform Act can reach up to 20 years in prison and $1 million per violation, and the maximum civil penalty, adjusted annually for inflation, exceeded $370,000 per violation or twice the transaction value as of early 2025. The list is also revised frequently as technology and policy change, so a classification done two years ago is not automatically still correct.
Frequently asked questions
Who maintains the Commerce Control List? The Bureau of Industry and Security (BIS), part of the U.S. Department of Commerce. It is published in Supplement No. 1 to Part 774 of the Export Administration Regulations.
What is the difference between the CCL and the Munitions List? The CCL controls dual-use items (commercial items with possible military or proliferation uses). The U.S. Munitions List, administered by the State Department under ITAR, controls items built specifically for defense.
If my item is not on the CCL, am I free to export it? Not necessarily. An item subject to the EAR but not listed is EAR99 — usually license-free, but still blocked if the destination, end user, or end use is prohibited.
How do I find my item’s ECCN on the list? Match the item’s technical specs to a category and product group, then read the candidate ECCN entries in Part 774. When unsure, get a CCATS ruling from BIS.
Need to know whether your product sits on the Commerce Control List? Reidel Law Firm delivers a flat-fee Import/Export Compliance Memo that settles classification, licensing, and screening — with direct attorney access. Get a flat-fee compliance memo →


