Why is export control central to NATO procurement?
NATO procurement is multinational by nature. Goods are manufactured in one country, integrated in another and handed to the user in a third, and the supply chain often contains components from several continents. Every border crossing brings its own body of law governing what may be exported, to whom and on what conditions.
Export control is therefore not an administrative afterthought but a factor determining whether a bid is worth making, on what delivery schedule and with which suppliers. A company that establishes its licensing needs only after signature has effectively committed to a schedule it does not control.
For a Finnish supplier the essential point is that regulation arrives from several directions: national defence-materiel export licensing, the EU dual-use regime and often the rules of the country of origin as well, where the delivery contains foreign technology or components.
What are dual-use goods and why does classification matter?
Dual-use goods are products, software and technology with civil applications that are also suitable for military use. Typical examples include certain sensors, materials, encryption solutions, machine parts and measuring equipment. The boundary is not intuitive: a component designed purely for civil use can fall under control on the basis of its technical characteristics.
The first practical task is therefore classification: establishing whether the product matches a control list entry and under which item. Classification rests on the technical characteristics of the product, not on its sales description or intended use. If the classification is wrong, everything built on it is wrong too, including the licence application, the delivery schedule and the contract terms.
Classification should be documented with its reasoning, because it will be cited later in applications, customer questions and any authority inspection. In unclear cases the national licensing authority can be asked for a binding or advisory view, which is usually faster than correcting a mistake afterwards.
When does a delivery require an export licence?
The need for a licence depends on the classification of the product, the destination, the end use and who the recipient is. Items classified as defence materiel are licensable as a starting point, and for dual-use goods the requirement follows from the combination of item and destination country. Some deliveries can proceed under a general or global licence, which speeds the process considerably where the conditions are met.
In NATO deliveries the recipient may be a NATO agency, a member state's defence administration or another company integrating the product into a larger system. Each of these can mean a different procedure and different supporting documents, so simply noting that this is a NATO procurement does not settle the licensing question.
- classification and control list entry with its reasoning
- destination country and the recipient's position in the chain
- declared end use and end user
- technical documentation and software included in the delivery
- any foreign origin content and the conditions attached to it
- contract duration and the need for maintenance and spare parts
What does an end-user statement mean in practice?
The licensing authority wants to know who will ultimately use the product and for what. Supply chains therefore use end-user and end-use statements in which the recipient confirms the purpose and often undertakes not to transfer the item onward without authorisation. Obtaining the document is not a formality: it requires a process on the customer's side and can take time.
At bidding stage this means the delivery commitment should be tied to receipt of the required documents. If a company promises a delivery time assuming the statement arrives in a week and it arrives in six, the delay is the supplier's contractual risk regardless of whose delay it actually was.
Why do re-export conditions apply to subcontractors as well?
Export control conditions travel with the product through the supply chain. Where a supplier received a component on condition that it is not transferred to certain countries or uses, the condition still binds once the component forms part of a larger assembly. In practice the prime contractor needs to know the conditions attached to its subcontractors' deliveries, and the subcontractor must state them truthfully.
Components and software of foreign origin deserve particular attention, since the regulation of the country of origin may extend to re-export from another country. Choosing such a component at design stage can narrow later markets or add licensing rounds, which is worth weighing when technical solutions are selected rather than when the shipment is arranged.
How are transfers of technical data regulated?
Export control is not limited to physical goods. Transfers of technical data can also be licensable: emailing drawings, sharing documentation in a cloud service, granting remote access to a system or training a foreign colleague can all constitute controlled transfers. The same applies where information is disclosed to a third-country national inside one's own country.
This is the most common inadvertent breach in day-to-day work, because data moves quickly and often without any formal process. The most effective protection is a clear internal instruction on which documentation is controlled, who may receive it and where it is stored, together with a practice of marking controlled material so that whoever handles it recognises it.
How is the licensing schedule reflected in a bid?
Processing times vary with the product, the destination and the quality of the application, and this is one of the few parts of a schedule that a supplier cannot accelerate with more resources. The licensing phase therefore belongs in the bid schedule as a phase of its own, and the delivery time is best expressed as tied to submission of the application and receipt of the decision.
The quality of the application affects processing time more than is often assumed. An incomplete application triggers requests for further information, and every round adds weeks. A careful classification, a clear end-use description and the required annexes correct the first time are the fastest way to shorten lead time.
- classification and licence assessment immediately after reading the request
- requesting the end-user statement from the customer as early as possible
- the licensing phase as its own line in the schedule and risk register
- a fallback plan for an alternative component if a licence is delayed
- licence needs for maintenance and spares assessed across the whole contract
What does an internal compliance programme contain?
An internal compliance programme means a written way of running export control: who owns classification, how customers and recipients are screened, how controlled information is handled, how training is arranged and how deliveries are documented so they can be reviewed afterwards. It does not require a large organisation, but it does require named responsibility and written instructions.
The programme also brings direct commercial benefit. Prime contractors assess the ability of their subcontractors to manage export control, because an error at the lower end of the chain is a risk to the whole contract. A company able to demonstrate a systematic practice is easier to accept into a supply chain than one whose practice rests on one person's memory.
How does Salpa help with export control considerations?
Salpa continuously monitors the procurement channels of NATO organisations including NSPA, NCIA, ACT, ACO and NATO Headquarters, and identifies requests matching the categories your company has selected. Each request is summarised with AI in your own language, so the destination, the schedule and the nature of the item are visible immediately, and a first assessment of licensing needs can be made in minutes rather than days.
Because licensing is the slowest part of a bid schedule, spotting it early is decisive. Salpa can be trialled free for 14 days with no commitment, which is enough to judge how well the category alerts surface exactly those procurements where export control for your own product is manageable.