ECCN 5D992
RSATInformation Security software, not controlled by 5D002, as follows .
What This ECCN Covers
ECCN 5D992 covers "information security" software not controlled by 5D002 — chiefly mass-market encryption software classified out of 5D002 under the mass-market provisions. Like its hardware counterpart 5A992, it is controlled only for Regional Stability and Anti-Terrorism, so it reaches a limited set of destinations.
Who needs to check this?
Publishers of mass-market encryption software (apps, operating-system features, consumer security tools) that have completed mass-market classification.
Compliance tip
Confirm the software actually qualifies as mass-market and retain the self-classification report or CCATS and any §740.17 registration. RS and AT controls still require a license to a small list of destinations; verify the §734.7 "published" exclusion for any publicly available code before assuming it is outside the EAR.
Items Covered
- c."Software" classified as mass market encryption software in accordance with § 740.17(b) of the EAR.
- z.1 Other software that is described in 5D992 and that also meet or exceed the performance parameters in 3D001 for 3A090.a or 4D001 for 4A090.a; or
- z.2 Other software that is described in 5D992 and that also meet or exceed the performance parameters in 3D001 for 3A090.b or 4D001 for 4A090.b.
3 items reserved by BIS (not shown)
Control Reasons
Items controlled for regional stability reasons.
Items controlled for anti-terrorism reasons. Most items on the CCL have AT controls.
Disclaimer
This information is for reference only. For official classifications, consult BIS or a qualified export control professional.