Authority-to-capability crosswalk

The authority records

EAR

United States, including specified extraterritorial, reexport, transfer, foreign-direct-product, and U.S.-person applications established in the regulations · In force; amended continuously through Federal Register rules. The EAR govern specified exports, reexports, transfers, releases of technology and source code, and related activities involving items subject to U.S. Commerce Department jurisdiction. They include the Commerce Control List, general prohibitions, license requirements, exceptions, end-use and end-user controls, recordkeeping, and enforcement provisions.

ITAR

United States defense articles, defense services, technical data, brokering, registration, licensing, and related conduct within the regulation's scope · In force; amended through Federal Register rules. The ITAR implement U.S. controls on defense articles, defense services, technical data, brokering, registration, temporary and permanent exports, reexports, retransfers, approvals, exemptions, and records. The U.S. Munitions List is in Part 121.

OFAC sanctions programs

U.S. persons, U.S.-nexus transactions, property and interests in property, and other persons or conduct covered by the applicable program authority · Active corpus; program regulations, executive orders, statutes, lists, licenses, FAQs, and guidance change independently. OFAC administers multiple economic and trade sanctions programs with distinct prohibitions, permissions, general licenses, definitions, reporting rules, and designation records. Applicability cannot be determined from the presence or absence of a name on the SDN List alone.

OFAC Compliance Framework

Organizations subject to U.S. sanctions requirements or choosing to structure a sanctions compliance program around OFAC guidance · Published guidance. The framework describes management commitment, risk assessment, internal controls, testing and auditing, and training as essential components of a risk-based sanctions compliance program and identifies common root causes of apparent violations.

EU Dual-Use Regulation

European Union exporters and other persons and activities within the regulation, with implementation and licensing administered by Member States · In force; consolidated version dated November 15, 2025 available through EUR-Lex. The regulation governs specified exports, brokering, technical assistance, transit, and transfers of dual-use items, including listed items, certain catch-all controls, cyber-surveillance provisions, authorizations, records, and compliance-program considerations.

EU sanctions regimes

Persons and conduct within the scope of each applicable EU restrictive-measures act, as implemented and enforced by Member States and EU institutions · Active and changing by regime. EU restrictive measures can include asset freezes, making-funds-or-resources-available prohibitions, trade and service restrictions, transport measures, sectoral rules, and licensing derogations. Each regime has its own legal acts, annexes, amendments, and competent-authority process.

SAMLA 2018

United Kingdom sanctions framework, with regulations made under the Act defining particular prohibitions, obligations, exceptions, licensing, and enforcement · In force as amended. SAMLA provides a legal framework for UK sanctions regulations after EU withdrawal, including purposes, types of sanctions, designation powers, exceptions, licensing, reporting, information, enforcement, review, and related provisions.

UK Export Control Order

United Kingdom exports, transfers, technical assistance, trade controls, and related conduct within the Order's scope, read with other applicable UK and assimilated law · In force as amended. The Order establishes controls, offenses, licenses, recordkeeping, enforcement, and schedules relevant to specified military and dual-use exports, transfers, technical assistance, and trade activities.

Wassenaar Control Lists

Participating states implement agreed controls through their own national or regional legal systems · Active arrangement with periodically updated control lists. The arrangement maintains commonly agreed dual-use and munitions control lists that participating states use as a basis for national export-control implementation and information exchange.

Harmonized System or HS

Contracting parties implement the six-digit HS structure and extend it in national or regional customs schedules · In force; major nomenclature editions are revised periodically. The HS provides a common six-digit nomenclature for classifying traded goods. National and regional systems extend that structure for tariff, statistical, restriction, and administrative purposes.

Union Customs Code or UCC

Customs territory of the European Union, supplemented by delegated, implementing, transitional, and Member State measures · In force as amended. The UCC establishes core EU customs rules for status, representation, decisions, valuation, origin, guarantees, declarations, procedures, customs debt, controls, records, and electronic exchange, with substantial detail in related acts and systems.

The operating-domain lens

Jurisdiction, nexus, and scope

The threshold analysis that determines which export-control, sanctions, customs, and related trade-control regimes may apply to an item, technology, service, party, transaction, or activity. Scope can turn on item origin, content, direct-product rules, location, citizenship, conduct, ownership, facilitation, or another legally relevant connection. The crosswalk links 6 capabilities and 6 authority records.

Tariff and customs classification

The assignment and maintenance of Harmonized System and national tariff codes used for customs declarations, duty treatment, trade statistics, admissibility, and related border requirements. This is distinct from export-control classification such as ECCN or USML analysis. The crosswalk links 6 capabilities and 2 authority records.

Export-control classification

The determination and controlled maintenance of classifications under export-control lists, including the U.S. Commerce Control List, U.S. Munitions List, EU dual-use list, UK strategic export control lists, and nationally implemented multilateral controls. The crosswalk links 5 capabilities and 5 authority records.

Restricted-party and ownership screening

The review of customers, counterparties, intermediaries, beneficial owners, vessels, addresses, and other relevant parties against applicable sanctions, export-control, and government restriction data, including ownership or control rules that may extend restrictions beyond the named list entry. The crosswalk links 5 capabilities and 5 authority records.

End-use, end-user, diversion, and transshipment risk

The evaluation of the stated and reasonably foreseeable end use, ultimate consignee, route, intermediaries, transshipment points, procurement behavior, and other indicators that a transaction may support a prohibited activity or be diverted from its declared destination or use. The crosswalk links 6 capabilities and 5 authority records.

Licensing, exceptions, and authorizations

The determination, application, use, condition management, decrementing, reporting, and closure of licenses, license exceptions, exemptions, general licenses, agreements, permits, and other authorizations under applicable trade-control regimes. The crosswalk links 6 capabilities and 4 authority records.

Customs origin, valuation, declarations, and duty programs

The operational controls used to determine customs value and origin, assess preferential treatment, calculate duties and taxes, prepare and submit declarations, connect with brokers or authorities, reconcile records, and administer special procedures or duty programs. The crosswalk links 6 capabilities and 2 authority records.

Transaction controls, overrides, records, and audit

The governance layer that embeds trade-control decisions in business transactions, applies holds and releases, routes exceptions, records human judgment, preserves source and rule versions, monitors overrides, and produces defensible evidence for management and authorities. The crosswalk links 6 capabilities and 5 authority records.

How to use the crosswalk

Determine applicability with qualified owners, identify affected records and workflows, map each expectation to an accountable decision and retained evidence, then use capability and organization pages to frame a technology evaluation. A mapping is editorial navigation—not a conformity or legal conclusion.

Methodology

1. Define the market boundary, exclusions, operating models, and capability taxonomy before classifying organizations.
2. Require an approved official source for organization inclusion and each documented capability.
3. Keep authority sources, provider claims, independent observations, editorial synthesis, and unknowns in separate evidence states.
4. Use one primary operating model per organization while retaining adjacent scope in the narrative record.
5. Preserve source URLs, review dates, material changes, limitations, and correction history.

Limitations

• The maintained population is substantial but not claimed to be a complete global market.
• Official public documentation may omit available capabilities or lag product and service changes.
• Documented positioning does not measure product depth, configured availability, independent performance, implementation effort, customer outcome, or commercial terms.
• Authority mappings are editorial research aids and do not establish buyer-specific applicability or product conformity.
• No organization may purchase inclusion, classification, finding, or correction outcome.

Reproducibility and updates

The report is reproduced from the provider registry, normalized facts and evidence, authority and domain records, and the publication taxonomy. A material change requires a dated source and editorial explanation. Historical values remain available through the change ledger rather than disappearing when the current record changes.