1Export controls
Which of the company's products, software and technical data are controlled, and under which regime: ITAR, the EAR, the UK Export Control Order or the EU Dual-Use Regulation?
Controlled technical data cannot be shared freely with lenders, investors or advisers, and some controls follow the technology into any buyer's hands.
eCFR: International Traffic in Arms Regulations (22 CFR 120-130)
Will any lender, investor or adviser who is a foreign person need access to controlled data during diligence or reporting?
Sharing ITAR data with a foreign person is an export. Set up clean teams or summaries, or obtain a licence.
Has the company made voluntary disclosures, or entered into consent agreements, with the State Department, Commerce or HM Revenue & Customs?
Past violations affect reputation risk, representations and the price of insurance.
Would a sale of the business, including on enforcement, need export licences or notifications, such as the 60-day ITAR notice for a foreign buyer?
Build those approvals into the enforcement provisions and the buyer pool.
Does the EU Dual-Use Regulation or the UK Export Control Order apply to any products made or shipped in Europe?
European controls run alongside US rules, and licences may be needed for intra-group transfers.
- 2Security clearances and classified work · 3 questions
- 3Foreign ownership and investment screening · 4 questions
- 4Government contracts · 4 questions
- 5ESG and lender policies · 3 questions
- 6Security package and enforcement · 3 questions
The rest of this tool covers the remaining five sections: clearances, foreign ownership, government contracts, ESG policies and enforcement, each with the drafting point it leads to. It is free with a work email, along with the full guides and the register downloads.
Unlock the full tool
Free. Work emails only. Unsubscribe at any time.
General information on public documents and law as at 28 Oct 2026, not legal advice on any transaction. Filed wording is quoted from the public document linked to it.