ECCN
Not legal advice. Tariffkit is a free research tool. It quotes HTS rate text and ECCN control text as published by the official sources linked here. It does not classify an item, does not apply rulings, and does not calculate duty. Verify the cited release with those sources and with counsel before you rely on it.
5D002
5D002 “Software” as follows (see List of Items Controlled).
- Category
- Category 5—Telecommunications and “Information Security”
- Part
- Part 2—“Information Security”
- Product group
- D. “Software”
Reason for Control
- NS
- RS
- AT
- EI
Official text
License Requirements
Reason for Control:
NS, RS, AT, EI
Control(s) Country Chart (see Supp. No. 1 to part 738)
- NS applies to entire entry NS Column 1.
- RS applies to “software” controlled by 5D002.z.1.a, z.2.a, z.3.a, z.4.a, z.5.a, z.6.a, z.7.a, z.8.a, and z.9.a To or within any destination worldwide. See § 742.6(a)(6)(iii)(A) of the EAR.
- RS applies to “software” controlled by 5D002.z.1.b, z.2.b, z.3.b, z.4.b, z.5.b, z.6.b, z.7.b, z.8.b, and z.9.b To or within the United Arab Emirates or destinations specified in Country Groups D:1, D:4, and D:5 of supplement no. 1 to part 740 of the EAR, excluding any destination also specified in Country Groups A:5 or A:6. See § 742.6(a)(6)(iii)(B) of the EAR.
- AT applies to entire entry AT Column 1.
- EI applies to “software” in 5D002.a.1, a.3, .b, c.1 and c.3, for commodities or “software” controlled for EI reasons in ECCN 5A002, 5A004 or 5D002 Refer to § 742.15 of the EAR. Note: Encryption software is controlled because of its functional capacity, and not because of any informational value of such software; such software is not accorded the same treatment under the EAR as other “software'; and for export licensing purposes, encryption software is treated under the EAR in the same manner as a commodity included in ECCN 5A002.
License Requirements
Note:
See § 744.17 of the EAR for additional license requirements for microprocessors having a processing speed of 5 GFLOPS or more and an arithmetic logic unit with an access width of 32 bit or more, including those incorporating “information security” functionality, and associated “software” and “technology” for the “production” or “development” of such microprocessors.
List Based License Exceptions (See Part 740 for a Description of All License Exceptions)
TSR: N/A
ENC: Yes for certain EI controlled software. See § 740.17 of the EAR for eligibility.
NAC/ACA: Yes, for 5D002.z.
AIA: Yes for 5D002.z.1.a, z.2.a, z.3.a, z.4.a, z.5.a, z.6.a, z.7.a, z.8.a, and z.9.a
ACM: Yes for 5D002.z
Note:
See § 740.2(a)(9)(ii) of the EAR for license exception restrictions for ECCN 5D002.z.
List of Items Controlled
Related Controls: (1) After classification or self-classification in accordance with § 740.17(b) of the EAR, mass market encryption software that meets eligibility requirements is released from “EI” and “NS” controls. This software is designated as 5D992.c. (2) See also ECCNs 3D001 as it applies to “software” for commodities controlled by 3A001.z and 3A090, and 4D001 as it applies to “software” for commodities controlled by 4A003.z, 4A004.z, and 4A005.z.
Related Definitions: 5D002.a controls “software” designed or modified to use “cryptography” employing digital or analog techniques to ensure “information security.”
Items:
a. “Software” “specially designed” or modified for the “development,” “production” or “use” of any of the following:
a.1. Equipment specified by 5A002 or “software” specified by 5D002.c.1;
a.2. Equipment specified by 5A003 or “software” specified by 5D002.c.2; or
a.3. Equipment or “software”, as follows:
a.3.a. Equipment specified by 5A004.a or “software” specified by 5D002.c.3.a;
a.3.b. Equipment specified by 5A004.b or “software” specified by 5D002.c.3.b;
b. “Software” having the characteristics of a 'cryptographic activation token' specified by 5A002.b;
c. “Software” having the characteristics of, or performing or simulating the functions of, any of the following:
c.1. Equipment specified by 5A002.a, .c, .d or .e;
Note:
5D002.c.1 does not apply to “software” limited to the tasks of “OAM” implementing only published or commercial cryptographic standards.
c.2. Equipment specified by 5A003; or
c.3. Equipment, as follows:
c.3.a. Equipment specified by 5A004.a;
c.3.b. Equipment specified by 5A004.b.
Note:
5D002.c.3.b does not apply to “intrusion software”.
d. [Reserved]
N.B.:
See 5D002.b for items formerly specified in 5D002.d.
e. through y. [Reserved]
z. Other software, as follows:
z.1.a Software that is described in 5D002.a.1, and that also meet or exceed the performance parameters in 3D001 for 3A090.a or 4D001 for 4A090.a;
z.1.b Software that is described in 5D002.a.1, and that also meet or exceed the performance parameters in 3D001 for 3A090.b or 4D001 for 4A090.b;
z.2.a Software that is described in 5D002.a.2, and that also meet or exceed the performance parameters in 3D001 for 3A090.a or 4D001 for 4A090.a;
z.2.b Software that is described in 5D002.a.2, and that also meet or exceed the performance parameters in 3D001 for 3A090.b or 4D001 for 4A090.b;
z.3.a Software that is described in 5D002.a.3a, and that also meet or exceed the performance parameters in 3D001 for 3A090.a or 4D001 for 4A090.a;
z.3.b Software that is described in 5D002.a.3a, and that also meet or exceed the performance parameters in 3D001 for 3A090.b or 4D001 for 4A090.b;
z.4.a Software that is described in 5D002.a.3.b, and that also meet or exceed the performance parameters in 3D001 for 3A090.a or 4D001 for 4A090.a;
z.4.b Software that is described in 5D002.a.3.b, and that also meet or exceed the performance parameters in 3D001 for 3A090.b or 4D001 for 4A090.b;
z.5.a Software that is described in 5D002.b and that also meet or exceed the performance parameters in 3D001 for 3A090.a or 4D001 for 4A090.a;
z.5.b Software that is described in 5D002.b and that also meet or exceed the performance parameters in 3D001 for 3A090.b or 4D001 for 4A090.b;
z.6.a Software that is described in 5D002.c.1 and that also meet or exceed the performance parameters in 3D001 for 3A090.a or 4D001 for 4A090.a;
z.6.b Software that is described in 5D002.c.1 and that also meet or exceed the performance parameters in 3D001 for 3A090.b or 4D001 for 4A090.b;
z.7.a Software that is described in 5D002.c.2 and that also meet or exceed the performance parameters in 3D001 for 3A090.a or 4D001 for 4A090.a;
z.7.b Software that is described in 5D002.c.2 and that also meet or exceed the performance parameters in 3D001 for 3A090.b or 4D001 for 4A090.b;
z.8.a Software that is described in 5D002.c.3.a and that also meet or exceed the performance parameters in 3D001 for 3A090.a or 4D001 for 4A090.a;
z.8.b Software that is described in 5D002.c.3.a and that also meet or exceed the performance parameters in 3D001 for 3A090.b or 4D001 for 4A090.b;
z.9.a Software that is described in 5D002.c.3.b and that also meet or exceed the performance parameters in 3D001 for 3A090.a or 4D001 for 4A090.a; or
z.9.b Software that is described in 5D002.c.3.b and that also meet or exceed the performance parameters in 3D001 for 3A090.b or 4D001 for 4A090.b.
ecfr-15cfr774-supp1-2026-08-28 · effective 2026-08-28
Issue date 2026-08-28. Amendment date 2026-08-28.
- eCFR Commerce Control List (15 CFR 774, Supplement No. 1)www.ecfr.gov
- eCFR versioner XML captured at ingestwww.ecfr.gov
This page quotes the loaded release. A shareable report freezes this text.
Was this helpful?
A short note about this page. Not shown on the site.