Export Statements

SAP ECCN MATRIX

• Symptom: You need to know the ECCN for a product version built or distributed by SAP
• Reason and Prerequisites:
  • A reason why you are looking for an ECCN is that a distribution of the software into further countries inside your company is needed.
  • A significant point in determining whether an export license is needed is finding out whether the item you intend to export has a specific EU or U.S. Export Control Classification Number (ECCN) according to the global laws and regulations. An ECCN categorizes items based on the nature of the product, i.e. type of commodity, software, or technology and its respective technical specifications and is used to identify items for export control purposes. This information is important for all users; especially companies that intend to re-export the software.
• This matrix shows an overview of the SAP Product Portfolio with the corresponding Export Control Classification Number (ECCN) for EU and US regulations.
• SAP provides this information as a general guideline to its customers and partners.
• SAP recommends that you obtain your own legal advice regarding any planned exports. All export classification information provided on this page (Export Classification Control Numbers [ECCN], License Exceptions, Import information) is subject to change without notice
• SAP makes no representation as to the accuracy or reliability of the classification information provided in this matrix.
• If you have further questions, please contact sap_lcr_export_classification@sap.com

This is the number designation assigned by the United States Department of Commerce, Bureau of Industry and Security in the Commerce Control List (CCL). This designation indicates the level of control for a particular product or technology. In the U.S., products typically fall under one of three ECCNs:

• 5D002 – Information Security – Software (Data confidentiality encryption greater than 56-bits in key space)
• 5D992 – Information Security – Software ("Mass Market" software, data confidentiality encryption less than or equal to 56-bits in key space, software with limited cryptographic functionality)
• EAR99 – A category encompassing U.S. origin items not elsewhere specified on the Commerce Control List (software without any cryptographic functionality)

For an introduction into Commerce Department Export Controls, please visit the Bureau of Industry and Security (BIS) site

This is the code number assigned by BIS to products that it has classified against the CCL. If BIS has classified a product for SAP, SAP will provide the CCATS. In most cases, SAP self-classifies products and no CCATS is needed.

The Bureau of Industry and Security (BIS) of the U.S. Department of Commerce maintains the this list within the Export Administration Regulations (EAR), which includes items (i.e., commodities, software and technology) subject to the export licensing authority of BIS. The CCL is contained in Supplement No. 1 to Part 774 of the EAR. Supplement No. 2 to Part 774 contains the General Technology and Software Notes relevant to entries contained in the CCL.

Read this document for more information

Compliance not only involves controlled goods and technologies, it also involves instructions on shipping to certain countries, companies, organizations and/or individuals. A number of U.S. Government agencies publish lists of parties where export privileges have been revoked or denied. The presence of one or more of such parties would be considered a "red flag" or would trigger a license requirement. Shipment is prohibited to entities listed on any United States Denied Party/Person list. See the U.S. Government’s CONSOLIDATED SCREENING LIST for the lists to check.

Due to U.S. embargoes, shipment to designated countries is prohibited. Refer to U.S. Government sites for Embargo information

The U.S. export authority granted for a given ECCN. In many cases, the product will be eligible for export pursuant to authority granted under a License Exception. In some cases, the most appropriate export authority is symbol "NLR" (or "No License Required"). In other cases, neither a license exception nor NLR authority are available and a validated license is required. The license authority typical of SAP products is:

• ENC Unrestricted [License Exception ENC (Unrestricted)] – The U.S. government regulations for License Exception ENC differentiate between unrestricted and restricted eligibility for use of the license exception. An "Unrestricted" in this column indicates that the software may be exported to government and non-government end-users in all destinations except for embargoed countries without a validated license.
• ENC Restricted [License Exception ENC (Restricted)] – The software may be exported but typically requires a license.
• NLR – No license/license exception is required in connection with the export of these products.

The Wassenaar Arrangement on Export Controls for Conventional Arms and Dual-Use Goods and Technologies is one of four multilateral export control regimes in which the United States participates. The Arrangement's purpose is to prevent the accumulation of dual-use goods and technologies (i.e. those having civil and military uses) so that they do not contribute to the development or enhancement of military capabilities that undermine the goals of the Arrangement and are not diverted to support such capabilities. Products that use encryption are considered to be dual-use goods.