Speed International Shipments. Understand What Encryption is in Your Software. Ensure Export Compliance.

As an export compliance officer, you know governments around the world enforce strict laws controlling the export of software and software-driven products. Any cryptographic code not legal for export may jeopardize international distribution, especially in complex supply chains that often include inadequately documented code from multiple sources. Validation is requested on short notice, but manually checking code for cryptographic code is error-prone and time-consuming. You need a way to quickly and accurately identify the encryption methods in your software and secure the required regulatory approvals to ensure compliance.

Black Duck automates the accurate identification of cryptographic code contained in your software. We make it easier to comply with export laws and secure required regulatory approvals without relying on cumbersome manual methods of code review. With our automated process and reporting, Black Duck will help you:

• Identify encryption. Automate the process of finding and identifying cryptography components. Save time and avoid lost revenue due to potential shipment delays.
• Automate encryption policies. Compare your code against the most comprehensive and up-to-date KnowledgeBase™ of encryption code and export regulations. Enforce policies and avoid violations by scanning code for export with each build cycle or before procurement acceptance.
• Streamline reporting. Use a system that automatically maintains an online export compliance audit trail and assists with preparation of applications to the US Bureau of Industry and Security (BIS) and National Security Agency (NSA).

Find out more:

• Read about Black Duck® Export™, the first and only open source scanning, detecting and reporting solution specifically for encryption export compliance management.
• Download and read our whitepapers:
  • A Guide to Software Encryption Export Compliance demonstrates how Black Duck Export can benefit your organization’s open source compliance and governance needs.
  • What Makes Complying with Export Controls Involving Encryption so Hard? explains how to classify products with encryption functions using current Export Administration Regulations (EAR) provisions. Written by Ben Flowe, who leads the export/import open source compliance team at Berliner, Corcoran & Rowe, LLP in Washington, DC.
• Contact us for more information about our open source license management and open source governance solutions.