Bio-export control & dual-use compliance

01Overview and value chain#

Markers EC: Dual-use export classification & denied-party screening software | OECD: Bioeconomy policy & governance | Regulator: BIS (US), EU Dual-Use Regulation

Bio-export control and dual-use compliance is a B2B services category that classifies controlled biotechnology and life-science goods under national export-control lists, screens trading counterparties against denied-party and sanctions lists, and traces the ownership and supply-chain networks behind a buyer to catch indirect or forced-labor-linked risk before a shipment leaves the exporter’s control. Exiger runs the 1Exiger trade-compliance and third-party risk platform, recently launching 1Exiger.AI, an AI-native operating network trusted by more than 150 Fortune 500 companies and 60+ federal agencies to trace hidden downstream supply-chain entities. Kharon provides export-control and forced-labor compliance data that goes beyond published denied-party lists, helping technology and life-science exporters move from name-based screening to full network visibility of restricted entities’ ownership structures. Descartes Systems Group operates the Descartes Visual Compliance denied-party screening platform, adding AI-enabled false-positive reduction in 2025 and onboarding customers such as flavor and fragrance group Givaudan in 2026. MIC Customs Solutions runs export-control and global-trade-management software, certified for SAP S/4HANA Cloud Private Edition in 2026 and building an agentic-AI platform for trade-compliance workflows. World-Check, an LSEG data product, maintains a proprietary structured screening and due-diligence database spanning North America, Asia-Pacific, EMEA and Latin America since 2000. Thomson Reuters’ ONESOURCE Global Trade suite covers export/import classification, free-trade-agreement management and duty optimization as part of a broader global-trade-compliance product line.

The key directions of bio-export control and dual-use compliance are:

Dual-use export classification: determining which national export-control list (e.g., the US Commerce Control List, the EU dual-use list) a controlled biotechnology, genetic-engineering tool or life-science instrument falls under, and what license requirement follows.
Denied-party and sanctions screening: checking every counterparty in a transaction — buyer, freight forwarder, end-user — against government denied-party, sanctions and restricted-entity lists before a shipment proceeds.
Network-based ownership and entity-risk mapping: tracing beneficial-ownership and supply-chain networks behind a counterparty to catch indirect exposure to a restricted entity that simple name-matching would miss.
End-use and end-user due diligence: verifying the declared end use and end user of a controlled item to detect diversion risk, particularly for dual-use biotechnology with both civilian and defense-relevant applications.

Sectoral value chain#

[Product/technology classification] ──> [License determination] ──> [Counterparty & sanctions screening]
                                                                        │
                                                            (Beneficial-ownership network trace)
                                                                        │
              [Shipment clearance] <──── [End-use/end-user due diligence] <─── [Restricted-entity risk scoring]

Fig. 1— Sectoral value chain

Value chain levels#

Level	Description	Key inputs/outputs
Product/technology classification	Determining which national export-control list and classification code a controlled biotechnology or life-science item falls under.	In: Product/technology specification. Out: Export-control classification code.
License determination	Establishing whether the classified item requires an export license for the destination, end user and end use in question.	In: Export-control classification code, destination/end-user data. Out: License requirement determination.
Counterparty and sanctions screening	Checking every counterparty in the transaction against denied-party, sanctions and restricted-entity lists.	In: Counterparty identity data. Out: Screening match/no-match result.
Restricted-entity risk scoring	Scoring counterparty and transaction risk based on screening results and known restricted-entity network links.	In: Screening results. Out: Risk score.
Beneficial-ownership network trace	Tracing the ownership and corporate-network structure behind a counterparty to detect indirect exposure to a restricted entity.	In: Risk score, corporate-registry data. Out: Ownership-network map.
End-use/end-user due diligence and shipment clearance	Verifying the declared end use and end user, then clearing the shipment for export once all checks pass.	In: Ownership-network map, end-use declaration. Out: Shipment clearance decision.

Table 1— Value chain levels

Cross-cutting technologies of the sector:

Denied-party screening: automated checking of every named counterparty in a transaction against government denied-party, sanctions and restricted-entity lists.
Export-control classification: the specific practice of determining which national control list and classification code a dual-use item falls under, and the license requirement that follows.
Network-based entity-risk mapping: tracing beneficial-ownership and supply-chain networks behind a counterparty to surface indirect exposure to a restricted entity that name-matching alone would miss.

02US#

The United States hosts the leading trade-compliance data and software providers building on Bureau of Industry and Security requirements, several combining AI-driven network analysis with traditional denied-party screening.

Exiger’s 1Exiger.AI network platform, Kharon’s network-visibility data, Thomson Reuters’ ONESOURCE Global Trade suite#

Exiger: runs the 1Exiger trade-compliance and third-party risk platform, recently launching 1Exiger.AI, trusted by more than 150 Fortune 500 companies and 60+ federal agencies to trace hidden downstream supply-chain entities.
Kharon: provides export-control and forced-labor compliance data that goes beyond published denied-party lists, helping exporters move from name-based screening to full network visibility of restricted entities’ ownership structures.
Thomson Reuters (ONESOURCE Global Trade): covers export/import classification, free-trade-agreement management and duty optimization as part of its broader global-trade-compliance product suite.

03CN#

China is covered qualitatively rather than through a live-screened Chinese vendor: candidate Chinese compliance firms searched during this screen returned no confirming 2026 source specific to export-control or dual-use compliance services, and China regulates dual-use exports under its own Export Control Law and control-list framework rather than the US/EU regimes that define most of this category’s commercial tooling market.

No China-headquartered vendor confirmed in this screen#

Search outcome: two candidate Chinese firms were searched during this screen and neither returned a confirming live 2026 source for this specific service category.
Structural difference: China’s Export Control Law (2020) and its own control lists operate independently of the US Commerce Control List and EU dual-use list, so a Chinese-market compliance vendor would likely serve a distinct regulatory stack rather than the US/EU-anchored tooling market this article screens.

04EU#

Europe hosts specialist customs and trade-compliance software vendors alongside a major global risk-data provider, serving exporters navigating the EU Dual-Use Regulation across fragmented national licensing authorities.

MIC Customs Solutions’ export-control software, World-Check’s global screening database#

MIC Customs Solutions: headquartered in Austria, runs export-control and global-trade-management software, certified for SAP S/4HANA Cloud Private Edition in 2026 and building an agentic-AI platform for trade-compliance workflows.
World-Check (LSEG): headquartered in the UK, maintains a proprietary structured screening and due-diligence database spanning North America, Asia-Pacific, EMEA and Latin America since 2000.

05Leading companies and research institutes#

Company / Institute	Country	Key products / platforms	Tech features	Status 2026
Exiger	🇺🇸 USA	1Exiger trade-compliance platform	1Exiger.AI network operating system	commercial
Kharon	🇺🇸 USA	Export-control & forced-labor compliance data	Network-visibility beyond denied-party lists	commercial
Descartes Systems Group	🇨🇦 Canada	Descartes Visual Compliance screening	AI-enabled false-positive reduction	commercial
MIC Customs Solutions	🇦🇹 Austria	Export-control & global-trade software	SAP S/4HANA-certified, agentic AI	commercial
World-Check (LSEG)	🇬🇧 UK	Global screening & due-diligence database	Coverage since 2000, 4-region span	commercial
Thomson Reuters ONESOURCE	🇺🇸 USA	Global Trade classification suite	FTA management, duty optimization	commercial

Table 2— Leading companies and research institutes

06Tech stack and innovations#

The bio-export control and dual-use compliance technology stack is shifting from static denied-party list matching toward AI-driven network analysis that surfaces indirect and beneficial-ownership risk:

AI-native supply-chain network mapping:
- Exiger’s 1Exiger.AI has uncovered over 20,000 hidden downstream entities in customer supply chains, reducing screening signal noise materially versus name-based matching alone.
Network-visibility export-control data:
- Kharon’s data model moves beyond BIS Entity List screening and published denied-party lists to map ownership structures and end-use risk across a counterparty’s full network.
AI-enabled denied-party screening:
- Descartes’ Visual Compliance platform added AI-enabled false-positive reduction in 2025, cutting the manual review burden for exporters like Givaudan.

07Value chains and production pipelines#

Industrial pipeline for a controlled bio-technology export transaction#

┌───────────────────────────┐      ┌───────────────────────────┐
│ 1. Product/technology       │ ───> │ 2. License                  │
│    classification                │      │    determination                  │
└───────────────────────────┘      └───────────────────────────┘
                                                 │
                                                 ▼
┌───────────────────────────┐      ┌───────────────────────────┐
│ 4. Restricted-entity        │ <─── │ 3. Counterparty &           │
│    risk scoring                  │      │    sanctions screening            │
└───────────────────────────┘      └───────────────────────────┘
              │
              ▼
┌───────────────────────────┐      ┌───────────────────────────┐
│ 5. Beneficial-ownership     │ ───> │ 6. End-use/end-user         │
│    network trace                 │      │    due diligence & clearance      │
└───────────────────────────┘      └───────────────────────────┘

Fig. 2— Industrial pipeline for a controlled bio-technology export transaction

Stage 1: Product/technology classification

The controlled biotechnology or life-science item is classified against the applicable national export-control list.

Stage 2: License determination

Whether the classified item requires an export license for the destination, end user and end use in question is established.

Stage 3: Counterparty and sanctions screening

Every counterparty in the transaction is checked against denied-party, sanctions and restricted-entity lists.

Stage 4: Restricted-entity risk scoring

Counterparty and transaction risk is scored based on screening results and known restricted-entity network links.

Stage 5: Beneficial-ownership network trace

The ownership and corporate-network structure behind a counterparty is traced to detect indirect exposure to a restricted entity.

Stage 6: End-use/end-user due diligence and shipment clearance

The declared end use and end user are verified, and the shipment is cleared for export once all checks pass.

Supplier	Region & tags
Exiger	US
Kharon	US
Descartes Systems Group	Canada
MIC Customs Solutions	EU
World-Check (LSEG)	EU
Thomson Reuters ONESOURCE	US

AI Recommendation

Key directions:

Dual-use export classification — determining which national export-control list a controlled biotechnology or life-science item falls under, and the license requirement that follows.
Denied-party and sanctions screening — checking every counterparty in a transaction against government denied-party, sanctions and restricted-entity lists before a shipment proceeds.
Network-based ownership and entity-risk mapping — tracing beneficial-ownership and supply-chain networks behind a counterparty to catch indirect exposure a name-match alone would miss.
End-use and end-user due diligence — verifying the declared end use and end user of a controlled item to detect diversion risk for dual-use biotechnology.

Regulatory:

The US Bureau of Industry and Security (BIS) administers the Commerce Control List and Export Administration Regulations that define most of the classification and licensing logic this category automates.
The EU Dual-Use Regulation (2021/821) sets the parallel EU-wide licensing framework, enforced through fragmented national licensing authorities rather than a single EU agency.
A biotechnology or life-science instrument can be dual-use even without an obvious weapons application — gene-synthesis equipment, certain pathogen-handling tools and some genetic-engineering platforms carry export-control classifications precisely because of civilian/defense overlap.

Companies not in table: two candidate Chinese compliance firms were searched for this screen and neither returned a confirming live 2026 source, so China stays qualitative rather than tabled from general knowledge.

Category boundary: distinct from general customs brokerage and logistics (see the customs-brokerage article) — the differentiator here is classification, licensing and counterparty-risk screening for controlled dual-use items specifically, not general cross-border shipment handling.

Processing note: China’s own Export Control Law (2020) and control-list framework operate independently of the US/EU regimes this article screens, so the absence of a confirmed Chinese vendor reflects a structurally distinct regulatory stack rather than a search gap.