Export Control · EAR · ITAR · OFAC

The complete export-control workflow for university research.

Every defensible export-control determination a university research office produces — FRE / TCP triage, ECCN classification, deemed-export scholar vetting, country/embargo screening, BIS Affiliates Rule cascade, annual TCP review. One system. One audit trail. Citation-anchored to EAR / ITAR / OFAC.

Seven sub-features

From plain-English project description to signed, audit-ready artifacts.

Each sub-feature emits a tamper-evident record with SHA-256 attestation. Every cited authority anchors to a real CFR / USC row in our reference data.

EC-1

Project Triage

15 CFR §734.8 + §734.13

Plain-English project description in. FRE_APPLIES, TCP_REQUIRED, or LICENSE_REQUIRED out — with cited reasoning, signed PDF, and forward-link to the TCP Builder.

EC-2

TCP Builder

15 CFR §734.8(c)

10-section guided plan generation. Personnel, scope, controls, attestations. Supersede chain on amendment. Signed PDF with statutory awareness panel at signing.

EC-3

ECCN Classification Helper

15 CFR Part 774 + 22 CFR §121.1

Plain-English item description ranked against the full Commerce Control List + USML. Confidence floors enforced. Defaults to MANUAL on ambiguity — never a substitute for a CCATS where one is required.

EC-4

Foreign National / Visiting Scholar Vetting

15 CFR §734.13 + 22 CFR §120.50

Per-scholar 7-status workflow with deemed-export decisioning. License-required determination cited to authorities. Tamper-evident affirmation hash.

EC-5

Affiliates Rule Ownership Intelligence

90 FR 47201 (reactivates 2026-11-10)

50%-rule cascade walked deterministically against a curated entity ownership graph. Five verdicts: RESTRICTED_DIRECT, RESTRICTED_AGGREGATE, RED_FLAG_29, AFFIRMATIVE_DUTY, NOT_RESTRICTED.

EC-6

Restricted Country / Embargo Screening

22 CFR §126.1 + 31 CFR Chapter V

Travel + shipping country gate. NO_GO for embargoed destinations. LICENSE_REQUIRED with cited authority for restricted destinations + technology pairings.

EC-7

Annual TCP Review + Penalty Library

Institutional best practice + EAR §764

365-day timer with T-30 / T-7 / T-0 nudge cadence. Mark Reviewed extends the supersede chain. Statutory awareness panel surfaces FCA + EAR / ITAR / OFAC exposure at signing.

Why one system

The defensibility argument lives in the audit trail.

Citation-anchored

Every determination cites a verifiable CFR / USC row. No hand-waving, no best-effort summaries.

Tamper-evident

SHA-256 attestation hashes on every signed artifact. Source-version capture on every screening claim.

Forward-compatible

Affiliates Rule reactivates 2026-11-10. EC-5 ownership data is in place today — your institution is ready before the regulatory shift.

Statutory awareness at signing

The signatory sees the exposure before they sign.

Vigilarx surfaces the False Claims Act and EAR / ITAR / OFAC penalty exposure on every signing surface — TCP, ECCN classification, scholar clearance, country screening. Acknowledgement-gated. Recorded in the audit trail with the reference-data version and surface for separate query.

Ready to see it run against a real determination?

30-minute walkthrough with your institution's own scenarios. No sales pressure.