This page provides detailed information on the export control status of the
Apache Software Foundation's products, and pointers to
the open-source code from which those products are built.
ASF projects and PMCs should consult our guide to handling
cryptography in order to comply with our export
policies.
Exporting ASF Products
The Apache Software Foundation (ASF)
is a 501(c)(3) nonprofit charity based in the United States of America. All
of our products are developed via online collaboration in public forums and
distributed from a central server within the U.S. Therefore, U.S. export
laws and regulations apply to our distributions and remain in force as
products and technology are re-exported to different parties and places
around the world. Information on export control classifications and
associated restrictions may be required for exporting, re-exporting, record
keeping, bundling/embedding of ASF products, encryption reporting, and
shipping documentation. You can find more information on U.S. Export Regulations at http://www.bis.doc.gov/.
The Bureau of Industry and Security (BIS), a branch
of the U.S. Department of Commerce, regulates exports through the Export
Administration Regulations
(EAR). The regulations
describe export rules and restrictions on a wide range of commodities,
technologies, and software. This document is no substitute for
understanding those regulations; the ASF cannot anticipate how they might
apply to third party distributions or for specific export decisions made by
those parties. End-user, end-use and country of ultimate destination may
affect export licensing requirements.
The ASF Product Classification Matrix is a general listing of
ASF software products and their source links for which we have determined
an export classification for that product as distributed by the Apache
Software Foundation. Use the matrix in conjunction with the EAR
to provide classification information to assist exporters in the
export of ASF products and to provide guidance to BIS employees who seek
the source code for ASF products. All export classification information
contained in the matrix is subject to change without notice.
Embargoed Destinations
You may not export or reexport, either directly or indirectly, ASF software and/or technical data to any destination subject to U.S. embargoes or
trade sanctions, unless formally authorized by the U.S. Government. Note
that the list of embargoed destinations is subject to change and the scope of
what technology is included in the embargo is specific to each embargoed
country. For the most current information on U.S. embargoed and sanctioned
countries, see the U.S. Export Administration
Regulations and Treasury
Department regulations.
Denied Parties Lists
U.S. export regulations require that all international and domestic
transactions be screened against the U.S. Government listing of prohibited
end users. Shipments to certain individuals, organizations, or institutions
who have violated U.S. export laws are prohibited. The United States
government maintains export prohibited
lists ,
including but not limited to the Treasury Department's Specially
Designated Nationals
List and
Commerce Department's Entity and Denied Persons
Lists.
ASF Product Classification Matrix
The Apache Software Foundation (ASF) makes NO WARRANTY or representation
that the information contained in the ASF Product Classification Matrix is
accurate, current, or complete. It is your obligation as the exporter to
comply with the current applicable requirements of United States export
rules and regulations. Any use of such information by you is without
recourse to the ASF and is at your own risk. The ASF is in no way
responsible for any damages, whether direct, consequential, incidental, or
otherwise, that you suffer as a result of using or relying upon such
information for any purpose.
Each ASF product is
classified with an
Export Control Classification Number (ECCN) if it is believed to correspond
to an entry in the Commerce Control List (CCL) and subject to the EAR. All
ASF software is published in a publicly available source code form. Since
software classified as ECCN 5d002 or 5D992 is subject to the
EAR, all ASF
software product versions that do not fit those two classifications are
noted as ECCN "Not determined" or not included in the matrix.
The ASF exports products classified as ECCN
5D002 under the publicly-available exempton found in EAR Section 742.15(b),
which applies to software containing or designed for use with encryption software
that is publicly available as open source. Note that exporters other than the
ASF within the U.S. may or may not be eligible for the publicly-available exemption
in section 742.15(b), and it is each specific exporter's responsibility to understand
and comply with all export regulations applicable within their jurisdiction.
ASF Project
- ASF Product
- Version / ECCN Classification / Controlled Sources
- Apache ActiveMQ
- 4.1 and later / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache Camel
- 1.0.0 and later / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache Ant
- 1.1 and later / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache Ivy
- 2.0.0-alpha-*-incubating / 5D002
/ ASF
- 2.0.0-alpha-*-incubating-bin-with-deps / 5D002
/ ASF
/ JCraft, Inc.
- 2.0.0-beta1-* and later / 5D002
/ ASF
- 2.0.0-beta1-bin-with-deps and later / 5D002
/ ASF
/ JCraft, Inc.
- development / 5D002
/ ASF
- Apache Commons Compress
- 1.6 and later / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache Commons Crypto
- Apache Commons OpenPGP
- development / 5D002
/ ASF
- Apache CouchDB
- 0.9.0 and later / 5D002
/ ASF
/ ibrowse
- development / 5D002
/ ASF
- Apache DdlUtils
- ddlutils-1.0 and higher / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache Derby
- derby-10.* / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache ObjectRelationalBridge - OJB
- development / 5D002
/ ASF
- ojb-1.0.0 and higher / 5D002
/ ASF
- Apache Torque
- development / 5D002
/ ASF
- torque-3.1 and later / 5D002
/ ASF
- Apache Directory Server
- Apache Directory Studio
- Apache Geronimo
- 1.0 and later / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache HAWQ (incubating) Project
- development / 5D002
/ ASF
- Apache Flood
- development / 5D002
/ ASF
- flood-0.4 / 5D002
/ ASF
- Apache HTTP Server
- apache_1.3.x / n/a
- apache_2.2.x-win32--openssl- / 5D002
/ ASF
/ The OpenSSL Project
- development / 5D002
/ ASF
- httpd-2.0.x / 5D002
/ ASF
- httpd-2.2.x / 5D002
/ ASF
- httpd-2.4.x / 5D002
/ ASF
- Apache libapreq
- development / 5D002
/ ASF
- libapreq / n/a
- libapreq2 / 5D002
/ ASF
- Apache mod_ftp
- development / 5D002
/ ASF
- Apache mod_python
- development / 5D002
/ ASF
- mod_python-* / 5D002
/ ASF
- Apache Hadoop
- 17.0 and later / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache Hive
- 1.3.0 and on / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache HttpComponents Client
- 1.x, 2.x, 3.x / 5D002
/ ASF
- 4.0 and later / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache HttpComponents Core
- 4.0 and later / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache Abdera
- Apache Airavata
- Apache CloudStack
- Apache Hop
- Development / 5D002
/ ASF
- all releases / 5D002
/ ASF
- Apache Impala
- 2.7.0 and later / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache Milagro
- Development - C Library / 5D002
/ ASF
- Development - JavaScript Library / 5D002
/ ASF
- Development - Rust Library / 5D002
/ ASF
- Libraries and Servers 0.0.1 and later / 5D002
/ ASF
- Apache NiFi
- Apache PDFBox
- Apache Pirk
- 0.1.0-incubating and later / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache Pulsar
- Apache Shindig
- development / 5D002
/ ASF
- Apache Slider
- Apache Taverna
- Apache Trafodion
- Apache Tuweni
- Apache Whirr
- Apache JAMES Mailet Crypto
- Apache JAMES Mime4J
- 0.4 and later / 5D002
/ ASF
- Apache JAMES Server
- Apache JAMES jDKIM
- Apache Jakarta JMeter
- 1.0 and later / 5D002
/ ASF
- Apache Jena (distribution)
- binary distribution / 5D002
/ ASF
/ ASF
- development / 5D002
/ ASF
- Apache Kudu
- 1.1.0 and later / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache BaDCA
- development / 5D002
/ ASF
- Apache Vysper
- Apache Nutch
- 0.7 and later / 5D002
/ ASF
/ PDFBox
- development / 5D002
/ ASF
- Apache Solr
- Apache Tika
- Apache FtpServer
- 1.0 / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache MINA
- 1.0, 1.1, 2.0 / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache SSHD
- Apache Vysper
- Apache MyFaces
- 1.1.2 and later / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache Oltu
- development / 5D002
/ ASF
- Apache Open For Business
- 4.0 release branch / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache OpenEJB
- 1.0 and later / 5D002
/ ASF
- All 0.x / n/a
- development / 5D002
/ ASF
- Apache POI
- 3.5 and later / 5D002
/ ASF
- development / 5D002
/ ASF
- APR
- development / 5D002
/ ASF
- APR-Util
- 0.9.x, 1.2.x / n/a
- 1.4.x and later / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache RocketMQ
- Apache RocketMQ ONS
- Apache XML Security for C++
- development / 5D002
/ ASF
- Apache XML Security for Java
- 1.5.x / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache ServiceComb Java-Chassis
- Apache ServiceComb Pack
- Apache ServiceComb Service-Center
- Apache ServiceMix 3.x
- Apache ServiceMix 4.x
- 4.0-m1 / n/a
- development / 5D002
/ ASF
- Apache ServiceMix Kernel
- All 1.0 milestones / n/a
- development / n/a
- Apache ServiceMix NMR
- 1.0-m1, 1.0-m2 / n/a
- development / 5D002
/ ASF
- Apache Shiro
- 1.0 / 5D002
/ ASF
- 1.1 and later / 5D002
/ ASF
- All 0.x / n/a
- development / 5D002
/ ASF
- Apache Tomcat
- 3.x and later / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache Tomcat native connector
- Apache UIMA Addon Tika Annotator
- 2.3.0 and later / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache UIMA Addons
- 2.3.0 and later / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache UIMA-AS
- all releases starting with 2.2.2-incubating / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache UIMA-DUCC
- all releases starting with 1.0 / 5D002
/ ASF
- development / 5D002
/ ASF
- Apache VCL
- 2.1 to 2.2.2 / 5D002
/ ASF
- 2.3 and later / 5D002
/ ASF
/ phpseclib
- development / 5D002
/ ASF
- Apache Rampart/C
- Apache Rampart/Java
- Apache Synapse
- Apache WSS4J
- Apache Wicket
- 1.3, development / 5D002
/ ASF