January 17, 2026
3 min read
BIS 50% rule ownership aggregation beta by SecurePoint USA
Beta Now Open

BIS 50% Rule:
Ownership Aggregation for Export Compliance

Stop calculating ownership percentages in spreadsheets. Get sub-second aggregation results, full ownership chain visibility, and timestamped evidence for your compliance files.

January 17, 2026
7 min read

The Problem You Know Too Well

Compliance teams are drowning in ownership math. Here is what we hear every week.

Ownership Spreadsheets

Tracing indirect ownership through shell companies in Excel is error prone and impossible to audit.

Time Sink

Compliance teams spend hours per entity manually calculating aggregate percentages across ownership chains.

Audit Evidence Gaps

When BIS asks how you calculated ownership, you need timestamped evidence, not a stale spreadsheet.

What is Ownership Aggregation?

The BIS 50% rule says: if sanctioned parties collectively own 50% or more of an entity, that entity inherits their restrictions. The challenge is calculating "collectively" when ownership flows through multiple layers.

Example: Indirect Ownership

Target Company: Acme Widget Corp

Owner A (Entity List): Owns 60% of Holding Co X

Holding Co X: Owns 50% of Acme Widget Corp

Indirect ownership calculation: 60% × 50% = 30%

If another listed party owns 25% directly, the aggregate is 55%, triggering the rule.

Beta Features

What the Beta Includes

Everything you need to operationalize ownership screening.

Ownership Aggregation

Sub-second calculation of aggregate ownership percentages across multi-layer corporate structures.

Full Chain Visibility

See every ownership path from target entity up to sanctioned owners, with percentages at each level.

Sanctions List Coverage

Sources we sync from: OFAC SDN, BIS Entity List, BIS MEU, UN Sanctions, EU Consolidated List, UK Sanctions.

Evidence Pack

Timestamped record of your query: entity searched, ownership chain found, lists checked, result timestamp.

The Evidence Pack

Every ownership lookup generates a timestamped record for your compliance files. This is not "audit defense"; it is documentation showing what you checked, when you checked it, and what the system found.

Evidence Pack Contains:

  • Entity name and identifiers searched
  • Full ownership chain with percentages at each level
  • Sanctions lists checked and their last sync timestamps
  • Aggregate ownership percentage calculated
  • Query timestamp (UTC)

Common Questions

The objections we hear, and straight answers.

Where does ownership data come from?

Public corporate filings plus customer-imported CSV or manually added relationships. You control the inputs; the engine does the math.

What if my entity is not in the graph?

You can import ownership edges via CSV or add relationships manually. Once added, the calculation runs against your data.

How fresh is the sanctions data?

Same-day updates. Each query shows the sync timestamp, and we link to source list pages where available.

Who This Is For

Teams that need ownership screening without the spreadsheet pain.

Defense Contractors

Managing classified visitor access and export-controlled technology.

Aerospace Suppliers

Screening vendors and partners in complex global supply chains.

Export Compliance Teams

Operationalizing BIS and OFAC 50% rule requirements at scale.

Compliance Consultants

Advising clients on ownership screening without manual graph building.

What We Are NOT

Clear boundaries on what this tool does and does not do.

Not Legal Advice

This tool does not provide legal counsel. Consult qualified export control attorneys for compliance decisions.

Not a Corporate Registry

We calculate ownership from data you provide or import. We are not a primary source of corporate records.

Not a Guarantee

Results depend on data quality and completeness. We do not guarantee regulatory compliance outcomes.

Join the Beta

Limited spots available. Get early access to ownership aggregation screening and help shape the product before general release.

Frequently Asked Questions

What is the BIS 50% rule?

The BIS 50% rule applies Entity List and MEU List restrictions to any entity that is 50% or more owned, directly or indirectly, by listed parties. This mirrors OFAC's longstanding 50% rule for SDN ownership.

How does ownership aggregation work?

The system traverses all ownership paths from a target entity upward. If multiple listed owners each hold partial stakes, their percentages are summed. For example, if Owner A (listed) holds 30% and Owner B (listed) holds 25%, the aggregate is 55%.

What sanctions lists are checked?

We sync from OFAC SDN, BIS Entity List, BIS Denied Persons, BIS MEU, BIS Unverified List, UN Sanctions, EU Consolidated List, and UK Sanctions. New sources are added based on customer requirements.

Can I import my own ownership data?

Yes. You can upload ownership relationships via CSV or add them manually through the admin interface. The calculation engine uses whatever data you provide.

What is included in the Evidence Pack?

The Evidence Pack is a timestamped record containing: entity name searched, ownership chain discovered, sanctions lists checked, aggregate percentage calculated, and query timestamp. This is documentation for your compliance files.

Is this tool legal advice?

No. This tool performs calculations based on data you provide. It does not constitute legal advice, guarantee regulatory compliance, or replace consultation with qualified export control counsel.

How long does a typical lookup take?

Most ownership lookups complete in under one second. Complex graphs with many ownership layers may take slightly longer.

What happens after the beta?

Beta participants will have early access to the production release and input on feature priorities. Pricing will be announced separately.

Disclaimer

This tool and the information provided in this article are for informational purposes only and do not constitute legal advice. The BIS 50% rule and related regulations are complex and subject to change.

Ownership calculations depend on the accuracy and completeness of data you provide or import. SecurePoint USA does not guarantee the accuracy of calculations, regulatory compliance outcomes, or fitness for any particular purpose.

Always consult with qualified export control counsel before making compliance decisions. Regulatory enforcement timelines mentioned are planning assumptions based on publicly available information and may change.

Visitor Compliance Checklist

  • ITAR/EAR and CMMC L2 requirements
  • Audit-ready evidence collection
  • AI assists, humans approve
Download PDF

Stay ahead of compliance changes

Get weekly insights on sanctions, export controls, and visitor compliance delivered to your inbox.

No spam. Unsubscribe anytime.