Service · Records, reporting & audit readiness
When an authority audits you, or a shipment is questioned years later, it isn't enough to have been compliant. You have to prove it, with records showing what was exported, to whom, under which licence, and why each decision was made at the time.
In two lines
We define a record standard for your business, map where each piece of information lives, set up the process so records are created as the work happens, build your reporting calendar, and rehearse the audit before the authority arrives.
For each export, your file should answer: what and where (item, classification under each regime, quantities, values, dates, route, consignee, end user); why (the reasoning behind the classification, the de minimis analysis, the licence determination); who was checked (screening of every party, results, how matches were resolved); under what authority (licence or general authorisation used, quantity and value used against it, conditions met); and intangible transfers (technology and software sent by email, shared through cloud platforms or released to foreign nationals; the records most often missing).
Under the EU dual-use regulation and the US EAR and ITAR, records must generally be kept at least five years from export. We set out a retention policy covering every regime that applies to you: what to keep, in what form, for how long, and who is responsible.
We build your reporting calendar and prepare or review the filings: notifications and reports for EU general authorisations and UK open licences; US annual reports for encryption self-classification and certain controlled items; sanctions reporting obligations such as frozen funds; voluntary disclosures, where something has gone wrong, prepared with counsel.
A regular, short report for your board covering export volumes by risk level, licences used and expiring, screening alerts, open issues and incidents.
A free 30-minute scoping call, or the 15-question assessment.