Setting the scene - define the basics

Based on this understanding of import and export controls, TrustSource allows to define the criticality per country concerning im- and export. There is no global standard on how to judge a specific algorithm.  This is something you will have to define by yourself. If you require help, our professional services team may arrange an exports controls workshop.

Typically legal advisors may help on this. But the Linux foundation OpenChain project also has an export controls workgroup, which maintains a repository, originally initiated and many years maintained by Bert Jaap Koops, holding probably the most comprehensive collection of information on that topic. We incorporated a mechanism, to update our data based on their updates. Unfortunately the workgroup recently dissolved.

However, to get alerted when critical algorithms get applied, it is sufficient to set the rules on corporate level once. These settings will be applied automatically. to all projects or can be overwritten on project level.  Once set up, they will be applied and become part of the Compliance Report.