Export Control Studio
PlansAccount
Account
Menu

ECCN reference · Category 5: Telecommunications and information security

ECCN 5D992

"Information Security" "software," not controlled by 5D002, as follows

Software. Reasons for control: RS (Regional stability), AT (Anti-terrorism).

Does 5D992 need a license to your country?

Enter the full classification (for example 5D992.c) and a destination. The check reads the Country Chart, the end-use and embargo rules, and shows the rule and source behind the answer.

License requirement check

Item classification and destination. No account needed.

An ECCN (such as 5A992.c) is an exact match and works best. Word search matches the official CCL wording and a reviewed list of everyday names as you write them; it does not guess what you mean or fix spelling. Don’t know the ECCN? Use Find the ECCN.

License requirements

Each control below comes from the entry’s License Requirements table. Where it names a Country Chart column, the countries with an X in that column need a license for the items the control covers, unless a License Exception applies.

  • RS (Regional stability): RS applies to "software" controlled by 5D992.z.1. To or within any destination worldwide. See § 742.6(a)(6)(iii)(A) of the EAR.
  • RS (Regional stability): RS applies to "software" controlled by 5D992.z.2. To or within the United Arab Emirates or destinations specified in Country Groups D:1, D:4, and D:5 of supplement no. 1 to part 740 of the EAR, excluding any destination also specified in Country Groups A:5 or A:6. See § 742.6(a)(6)(iii)(B) of the EAR.
  • AT (Anti-terrorism): AT applies to entire entry. No Country Chart country has an X in column AT1; the destinations this control targets are under “Not decided by the Country Chart” below.

Not decided by the Country Chart: Covered Donetsk region of Ukraine (DNR), Covered Luhansk region of Ukraine (LNR), Crimea region of Ukraine, Cuba, Iran, Korea, North, Syria. These destinations are under embargoes or other special controls in 15 CFR Part 746, which require a license for most items whatever the chart shows. Russia and Belarus also have broad Part 746 controls in addition to the chart.

A blank on the Country Chart is not permission to ship. End-use and end-user rules (15 CFR Part 744), embargoes and sanctions (Part 746), and the parties to the transaction still apply. Use the check above for your item and country.

List-based License Exceptions

As the entry lists them. Each exception has its own conditions in 15 CFR Part 740, and § 740.2 bars or limits most of them for Russia, Belarus, Country Group D:5 and embargoed destinations, so an entry’s “Yes” does not mean it is available everywhere.

  • TSR: N/A
  • NAC/ACA: Yes, for 5D992.z.
  • AIA: Yes for 5D992.z.1
  • ACM: Yes for 5D992.z
  • Note:
  • See § 740.2(a)(9)(ii) of the EAR for license exception restrictions for ECCN 5D992.z.

Items in 5D992

The controls often apply to some paragraphs only, so check the full paragraph, for example 5D992.c.

Show all 3 paragraphs
  • 5D992.c "Software" classified as mass market encryption software in accordance with § 740.17(b) of the EAR.
  • 5D992.z.1 Other software that is described in 5D992 and that also meet or exceed the performance parameters in 3D001 for 3A090.a or 4D001 for 4A090.a; or
  • 5D992.z.2 Other software that is described in 5D992 and that also meet or exceed the performance parameters in 3D001 for 3A090.b or 4D001 for 4A090.b.

Source

Commerce Control List, 15 CFR Part 774, Supplement No. 1 (official text on eCFR), as of August 21, 2026, 1:45AM EDT. Commerce Country Chart, Supplement No. 1 to Part 738, as of August 21, 2026, 1:45AM EDT.

This page is a preliminary reference, not legal advice, a classification ruling or permission to ship. Confirm the classification against the full official text.