We are a software vendor and provide tools for other software developers. One of large companies requested information in order to determine whether our software is subject to Federal Export Administration Regulations (EAR). They are requesting us to provide the Export Control Classification Number (ECCN) that classifies our software according to the Commerce Control List...
I remember dealing in my previous business engagements with "export" legal review - they were asking if there encryption algorithms are used in the software and things like that...
If we don't have the number - should we get it for them to consider having business with us (purchase products) or tell them we don't have one?
Another question is where do I even start if we were to get it?
Thanks!