Imagine you've spent eighteen months landing a new overseas distributor. The paperwork is signed, the first container is packed, and then a compliance officer at your freight forwarder asks a question you can't answer: "Who owns the company you're shipping to?" Not "is it on a sanctions list" — you already checked that. Who actually owns it, three layers up the corporate chain?
Starting November 10, 2026, that question stops being optional. A federal rule known as the "Affiliates Rule" makes any company that is 50% or more owned — directly or indirectly, by one restricted party or several added together — automatically subject to the same export restrictions as the parent entity on the U.S. government's Entity List or Military End-User List. For a small manufacturer or distributor that has never had a full-time trade compliance department, this is one of the biggest shifts in export control obligations in years.
What the Affiliates Rule Actually Does
The Bureau of Industry and Security (BIS), the Commerce Department agency that administers U.S. export controls, adopted the rule on September 29, 2025. It closes what regulators had come to see as an obvious loophole: a sanctioned or restricted company could simply spin up a "legally distinct" subsidiary or joint venture, and under the old standard, that new entity wasn't automatically covered by the parent's restrictions — even if the parent owned it outright.
Under the new rule, ownership is what matters, not the corporate paperwork. Specifically:
- The 50% threshold aggregates. If three separate entities on the Entity List each own 20% of a fourth company, that company crosses the 50% line and inherits restrictions — even though no single owner holds a majority.
- It applies "look-through" logic. BIS traces ownership through holding companies and intermediate entities rather than stopping at the first corporate layer.
- The most restrictive rule wins. When a company is owned by multiple listed entities with different license requirements, the tightest restriction among them governs the whole entity.
- It covers the Entity List and the Military End-User (MEU) List — the two BIS restricted-party lists most likely to catch commercial exporters off guard (as opposed to the more familiar OFAC sanctions lists).
The practical effect: a customer that passed a denied-party screening cleanly last year could be newly restricted today, purely because its ownership changed — and your screening software may never flag it, because most commercial screening tools check company names against watchlists, not beneficial ownership.
Why It Was Paused — and Why That Pause Is Ending
If you searched for this rule in early 2026 and found articles saying it was suspended, that's accurate but incomplete. BIS stayed the rule on November 10, 2025, as part of broader U.S.–China trade negotiations, pushing the effective date to November 9, 2026 — meaning it kicks back in on November 10, 2026. A narrow temporary general license offered limited relief during the pause, but that relief expired on December 1, 2025.
In other words: the rule isn't dead, it's dormant. Trade negotiations can extend or shorten a stay with little public notice, and betting your compliance program on a further extension is a risky assumption for a company whose export privileges — and, in serious cases, criminal exposure — are on the line.
The New Obligation: "Red Flag 29"
Alongside the ownership rule, BIS added a new item to its long-standing "Know Your Customer" red-flags guidance: Red Flag 29. It creates an affirmative duty that didn't exist before. If you have knowledge that a party to your transaction has ownership ties to a listed entity, you must determine the ownership percentage. If you can't determine it, you generally can't proceed without a BIS license.
This shifts the burden in a way many small exporters aren't set up for. Previously, "we didn't know" was a meaningful defense if your screening came back clean. Under Red Flag 29, once you have any indication of a listed owner in the chain, willful blindness is no longer a safe harbor — you have to resolve the ownership question or stop the transaction.
The cost of getting this wrong is not abstract. In July 2025, Cadence Design Systems agreed to pay $140 million — $95 million to BIS and $45 million in criminal forfeitures to the Department of Justice — after its software reached an end user with ties to a Chinese military university that adequate screening should have caught. Administrative penalties can currently run up to roughly $374,000 per violation or twice the value of the transaction, whichever is higher, and criminal violations can carry up to 20 years in prison and $1 million in fines per count. A denial of export privileges — being barred from any transaction involving U.S.-origin goods, software, or technology — can be even more damaging to a small company than the fine itself.
What Small Exporters Should Actually Do Before November 2026
You don't need a compliance department the size of a defense contractor's to get ahead of this. A handful of concrete steps make the biggest difference:
1. Re-screen your active customer and distributor list — not just for names, for ownership. Most denied-party screening tools were built to catch a restricted company doing business under its own name. Very few automatically surface a subsidiary two or three ownership layers removed from a listed parent. Ask your screening vendor directly whether their database includes beneficial-ownership data mapped to the Entity List and MEU List, and understand the gaps if it doesn't — some vendors are still building this out.
2. Add ownership representations to your sales contracts and distributor agreements. A clause requiring the counterparty to disclose material ownership changes, paired with a right to suspend shipments pending review, gives you a documented basis for due diligence and a contractual off-ramp if ownership shifts mid-relationship.
3. Document your due diligence, even when the answer is "we couldn't determine it." If ownership truly can't be verified through public records or counterparty disclosure, BIS expects you to explain those efforts — ideally in a license application, if the transaction is significant enough to warrant one. A blank spot in your file, with no record of effort, is what turns an honest gap into a willful-blindness problem.
4. Train the people who actually take the orders. Sales and customer-onboarding staff are usually the first to hear about a change in ownership, a new joint-venture partner, or an unfamiliar intermediary company — long before it reaches a compliance review. A short training on the new red flag is far cheaper than a penalty.
5. Build in a compliance calendar reminder for November 2026. Given the rule's on-again, off-again history, it's worth tracking the Federal Register directly (or a trade counsel's alert list) rather than assuming the current suspension timeline holds.
Where Bookkeeping Fits Into Export Compliance
Export compliance and financial recordkeeping intersect more than most small business owners expect. Screening subscriptions, trade counsel retainers, and any BIS license application fees are real operating costs that deserve their own expense categories — both so you can measure what compliance actually costs your business and because a clean, well-documented ledger is itself evidence of a functioning compliance program if you're ever audited. If a shipment gets held or a transaction is cancelled because of an ownership red flag, having accurate records of the related costs (lost freight, reissued paperwork, legal fees) also matters for insurance claims and, in some cases, loss deductions.
This is a case where plain-text, version-controlled accounting has a real advantage over black-box software: every entry — including a new "Export Compliance" or "Trade Screening" expense account — is visible, auditable, and easy to tag consistently over time, which matters when you're trying to demonstrate a documented compliance history rather than reconstruct one after the fact.
Keep Your Finances Organized as Compliance Gets More Complex
As export control obligations grow more detailed, keeping clean, well-categorized financial records becomes part of your compliance story, not just your tax prep. Beancount.io provides plain-text accounting that gives you complete transparency and control over your financial data — no black boxes, no vendor lock-in. Get started for free and see why developers and finance professionals are switching to plain-text accounting.