Ethical Export Policy

Software from Netresec is not subject to national export control. However, we acknowledge that our software could potentially be used by repressive regimes to spy on their own citizens. We have therefore created this Ethical Export Policy, which aims at preventing repressive regimes from obtaining our software. In short, we practice “know your customer” (as recommended by EFF) and strictly deny sales to the countries on the “Export BlackList” below.

Export BlackList

Country EU UN Reporters
Without
Borders
Freedom
House
Netresec's Shit List
Afghanistan EU UN
Bahrain RWB FH 34
Bangladesh FH 28
Belarus EU RWB FH 28
Burma / Myanmar EU RWB FH 27
Central African Republic EU UN
China [1] EU RWB FH 40 MITM of GitHub, Google, Yahoo, iCloud and outlook.com
Cuba RWB FH 32
Democratic Republic of the Congo EU UN
Egypt EU FH 33
Eritrea EU UN
Ethiopia FH 32
Gambia FH 27
Iran EU UN RWB FH 37
Iraq EU UN
Kazakhstan FH 26 Nationwide SSL MITM
Lebanon EU UN
Libya EU UN FH 25
North Korea EU UN RWB
Pakistan FH 31
Russia EU FH 32
Saudi Arabia RWB FH 34
Somalia EU UN
South Sudan EU
Sudan EU UN FH 30
Syria EU RWB FH 37
Thailand FH 33
Turkey FH 27
Turkmenistan RWB
United Arab Emirates FH 32
Uzbekistan RWB FH 31
Venezuela FH 25
Vietnam RWB FH 34
Yemen EU UN
Zimbabwe EU FH 25

[1] Excluding Special Administrative Regions Hong Kong and Macau

Sources

We rely on several different sources in our assessment regarding what countries to put on our Export Blacklist.

European Union (EU)
The European Union’s Restrictive measures (sanctions) in force presents a list of countries for which EU require restrictive measures in economic or financial relations. All countries with an arms embargo or "ban on exports of equipment for internal repression" are put on our Export BlackList.
(EU list updated 2017-05-10 based on ISP)

United Nations Security Council (UN)
The UN Security Council impose sanctions and/or more targeted measures such as arms embargoes, travel bans, financial or diplomatic restrictions. All countries with UN arms embargoes are put on our Export BlackList.
(UN list updated 2017-05-10 based on ISP)

Reporters Without Borders
Reporters Without Borders is a non-profit organisation, with consultant status at the United Nations and UNESCO, that continuously monitor attacks on freedom of information worldwide. Reporters Without Borders compile a data set called "Enemies of the Internet" (2012), which is a list of countries whose governments are using technology that monitors online activity and intercepts electronic communication in order to arrest journalists, citizen-journalists and dissidents. All countries on this list are added to our Export BlackList.

Freedom House
Freedom House is an independent watchdog organization that speaks out against the main threats to democracy and empowers citizens to exercise their fundamental rights. Freedom House produces a yearly report called Freedom on the Net (November, 2016), which evaluates the degree of internet freedom around the world based on barriers to access, limits on content, and violations of user rights. All countries with a score of at least 25 (out of 40) in the “Violations of User Rights” category in this study are added to our Export Blacklist. The numbers appearing in the Freedom House column of our BlackList is the “Violations of User Rights” score for each respective country.

Netresec's Shit List
We at netresec maintain an additional list of countries that we for various reasons do not sell our software to.