Which rules reach your products
In the United States, export controls are split among several agencies. The Commerce Department's Bureau of Industry and Security administers the Export Administration Regulations, which cover most commercial and dual-use items; the State Department regulates defense articles and services; and the Treasury Department's Office of Foreign Assets Control administers sanctions. Technology and software can be controlled as well as physical goods, and sharing controlled technical data with a foreign national inside the United States can count as an export. Getting the classification right is often the foundation, because the classification drives whether a license is needed for a given destination and end use. Rules in this area change frequently, especially for advanced semiconductors and sanctioned countries.
What a working program contains
A useful program is usually built around the company's actual flow of orders, not a generic manual. It typically assigns responsibility for classification, screens customers and other parties against government restricted lists, looks for red flags about end use or diversion, and keeps the records the regulations require. Training for sales, engineering, and shipping staff matters, because those are the people who see the warning signs first. Periodic audits test whether the controls work in practice. Gather your product list, any existing classifications, shipping records, and examples of how orders are approved today before we review the program.
When a violation may have happened
Civil penalties under export and sanctions rules can apply even without intent, which is why discovering a problem calls for a careful response rather than silence. Agencies offer voluntary self-disclosure processes, and whether and how to use them is a significant decision that depends on the facts. Pause further shipments of the same item to the same destination while the facts are reviewed, and preserve the related emails and records. The first questions are what was shipped, where it went, and how it was classified, followed by whether an internal review should be conducted under privilege. From there we help decide whether a disclosure, corrective changes, or both make sense for your situation.
