00

Export control for machinery and plant engineering

Every shipment screened.
Every decision on record.

Licitus screens your exports against sanctions lists, classifies goods against Annex I and the German export list, and produces a complete audit protocol for every case. Release is granted by your export control officer — not by the software.

Four-eyes principle · Tamper-evident protocol
Processed in the EU · Built in Munich

Case LIC-2026-04417 29 July 2026
Audit protocol issued29.07.2026 · 08:47
01

The stakes

Responsibility stays personal.

An export control breach is not a footnote. Under German law, § 19 AWG provides for fines up to €500,000 and § 18 AWG for imprisonment. The person held to account is the one who granted release — not the system that ran the check. Which is why Licitus documents your review rather than replacing it.

Today that review costs 30 to 45 minutes per case, spread across portals, PDF lists and spreadsheets. Most of it is not judgement. It is transcription.

Work per export case
StepTodayWith Licitus
Sanctions screeningPortal, name by nameAutomatic, with list version
Annex I / AL classificationPDF search, spreadsheetAutomatic, with cited entry
Catch-all under Art. 4Judgement, rarely documentedReasoning recorded
Audit protocolWord template by handCreated on release
BAFA applicationBlank formPre-filled draft
Time per case30–45 minutes2–5 minutes of review
02

What is checked

Three determinations on every shipment.

Each determination is made separately, reasoned separately and recorded separately. You can read any of them and overrule any of them.

Sanctions and embargo

Customer, consignee and end user are screened against the EU Consolidated List and OFAC SDN — fuzzily, so spelling variants and transliterations do not slip through. The list version is stored with the case, not just the result.

Example output HIT · match 0.91
Spelling variant of consignee name detected
List: EU Consolidated, version 2026-07-29
Case stopped, compliance notified

Goods classification

Goods are assessed against Annex I of EU Regulation 2021/821 and the German export list. You get the number, the cited entry and the reasoning — readable, checkable and reusable per material. Technical datasheets feed into the assessment.

Example output AL 2B350.d — listed
Heat exchanger, nickel alloy
Heat transfer area 0.21 m² > 0.15 m²
Source: Annex I, entry 2B350

Catch-all under Article 4

Destination, end use and red flags are assessed against the catch-all provisions. The result is a reasoned judgement with named risk factors — the step most often left undocumented today.

Example output Medium
Third-country diversion risk noted
End-user certificate on file
Referred to the export control officer
03

The record

The evidence is created while checking, not afterwards.

Every step writes itself into a running chain. Each entry carries a timestamp, the list version, the reasoning and the hash of the entry before it — a later change breaks the chain visibly. One export delivers the complete file: decision register, documents, protocol.

Audit protocol LIC-2026-04417Sample Page 1 of 1
Exporter
Sample Plant Engineering GmbH, Augsburg
Consignee
Sample Chemical Works LLP, Uzbekistan
End user
same as consignee · EUC dated 14 July 2026
Goods
Heat exchanger HX-900, nickel alloy, 0.21 m²
Classification
AL 2B350.d · Annex I, Reg. (EU) 2021/821
Sanctions check
no hit · EU 2026-07-29 · OFAC 2026-07-29
Catch-all Art. 4
Medium — end use documented
Determination
licence required — BAFA application drafted
Release
A. Müller, export control officer · 29 July 2026, 08:47
Chain a3f1c7 → 9c02b4 → 4be7d0 → f10da9 → 77e5b1 unaltered ✓

This is the file an inspector asks for: which list, in which version, on what reasoning, released by whom and when.

04

Responsibility

Licitus recommends. Your export control officer decides.

Uncritical cases pass through and are documented. Anything notable goes to review — ordered by risk, with customer history, reasoning and a confidence figure per determination. Your reviewer confirms, rejects or escalates. Each of those actions is recorded with person and timestamp. The four-eyes principle can be enforced per risk level.

Software may prepare an export. A human must answer for it. Product principle
What Licitus deliberately does not do
TaskStays with
Releasing or rejecting an exportYour export control officer
Filing with BAFAYour team — Licitus drafts the application
Obtaining end-user certificatesYour team — Licitus flags the need
Order and shipment controlYour ERP
Maintaining sanctions listsThe issuing bodies — Licitus downloads daily
05

Data and law

Your data stays in the EU.

Export data is customer data, pricing data and design data at once. It is treated accordingly.

  • §Processed exclusively in the EU. Hosting and storage in an EU data centre.
  • §Data processing agreement under Art. 28 GDPR, including the list of sub-processors, before the project starts.
  • §Your data is never used for model training. Contractually assured.
  • §No cookies, no trackers, no third-party content. Fonts and graphics are served from our own origin — no connection to Google Fonts or comparable services.
  • §Roles, permissions and the four-eyes principle follow your internal compliance instruction.
  • §Retention and deletion on your terms. Full export of the file at any time, including on exit.
06

Integration

Between order and shipment release.

Licitus replaces neither your ERP nor your sanctions database nor the BAFA portal. It sits between them and takes over the paperwork.

In
Your ERP
A daily CSV export is enough to start. No system change, no migration.
Check
Licitus
Sanctions, classification and catch-all per shipment. Result with reasoning and protocol.
Out
Release
Uncritical cases close documented. Anything notable is waiting for your reviewer.

In preparation: real-time webhook integration with a response back to the ERP.

07

Pilot programme

We are onboarding a small number of exporters.

A pilot runs for eight weeks on a defined product range with real orders. You keep your process; we shape Licitus around it.

  • 01Eight weeks, one product range. Clearly scoped, with real cases.
  • 02Hands-on onboarding. A direct line to the team, not a ticket queue.
  • 03No system change. A CSV export is enough to begin.
  • 04Outcome: audit protocols you can put in front of an inspector.

A good fit if you export listed or dual-use goods and the review is still largely done by hand.