R2v3 · ECCN 3A090 & 4A090

Export-Controlled Electronics
Disposition

This service is for R2v3-certified electronics recyclers and ITAD companies that take in retired AI data-center hardware. Some of those GPUs, accelerators and servers are controlled under ECCN 3A090 or 4A090 of the U.S. Export Administration Regulations (EAR). We help you identify them, screen buyers and destinations before each sale, keep the records, and build all of it into your R2v3 management system so it holds up at your R2 audit.

"Keep it Simple. Keep it Real."

Jared Clark, R2v3 and export compliance consultant

The Problem

Retired AI Hardware Is Still Controlled

AI data centers are retiring GPUs, accelerators and the servers built around them. Some of it reaches R2 facilities for resale, refurbishment or recovery. Some of it is export-controlled.

ECCN 3A090 covers integrated circuits above set performance thresholds: GPUs, tensor processors, AI accelerators and similar chips. ECCN 4A090 covers computers, electronic assemblies and components that contain them. Both sit on the Commerce Control List in the Export Administration Regulations (EAR). The Commerce Department's Bureau of Industry and Security (BIS) administers them. They are not ITAR controls.

Nothing in either entry depends on whether the item is new or used. A decommissioned accelerator is classified the same way as one in the box. Exports and reexports to China and Macau need a BIS license, and other destinations can need one too, depending on the item and the country.

The rules move. BIS created these entries in October 2022, revised them in October 2023, and in January 2026 changed how it reviews license applications for chips such as the Nvidia H200 going to China and Macau. A process that was right last year may not be right today.

What the entries cover

  • 3A090.a and .b: chips with one or more digital processing units that meet a 'total processing performance' threshold, alone or combined with a 'performance density' threshold
  • 3A090.c: high bandwidth memory (HBM) above a set memory bandwidth density
  • 4A090: computers, electronic assemblies and components containing a chip that meets 3A090.a or 3A090.b
  • Excluded: chips not designed or marketed for data centers with a total processing performance below 4800

Source: 15 CFR part 774, Supplement No. 1; 15 CFR 742.6(a)(6). Full list of sources at the end of this page.

Where R2v3 Comes In

Your R2 Auditor Will Ask About Export Law

R2v3 does not grant export permission. It requires you to follow the export laws that do, for every international shipment, and to show your auditor how.

That means export law has to be written into the R2v3 management system you already run. It has to be part of your legal compliance plan, your sales release, your shipping records and your internal audits.

The EAR adds obligations that reach domestic sales too. You may not sell, store, transfer or dispose of an item when you know an export violation has occurred or is about to occur. BIS publishes red flags for spotting those sales. Export records must be kept for five years.

Core Requirement 4: Legal compliance plan

A legal compliance plan covering all applicable import and export laws for your shipments, part of your EHSMS, with the controls, monitoring and periodic compliance audits to keep it current

Core Requirement 6: Functioning products

Before any international shipment of functioning equipment, verify it complies with your legal compliance plan, and reference unique identifiers in sales and shipping records

Core Requirement 10: Transport

Shipping documents and import/export declarations use accurate codes, descriptions and required declarations

Appendix A: Downstream recycling chain

Verify import/export compliance before each international shipment of R2 Controlled Streams to downstream vendors

Appendix F: Brokering

Brokered R2 Controlled Streams must meet all legal requirements under Core Requirement 4, even when they never touch your dock

Source: The R2 Standard by SERI, Version 3.1.

What We Do

Five Steps, Inside Your R2v3 System

Built for the compliance or operations manager who has to make this work on the floor and defend it to an auditor.

1

Identify

We set up an intake check so that GPUs, accelerators, HBM and servers that may fall under 3A090 or 4A090 are flagged when they arrive. Classification is worked from the manufacturer's own data, model by model, and the reasoning is written down.

2

Screen

Before any sale or shipment of a flagged item, the buyer, the destination and the stated end use are checked. That includes restricted-party lists and BIS red flags. A hold is placed until each check is cleared or the deal is stopped.

3

Record

One record set that satisfies both the EAR and R2v3: classification notes, screening results, contracts, correspondence and shipping documents, tied to each unit's identifier and kept for five years.

4

Build it into R2v3

The steps become part of your Core Requirement 4 legal compliance plan, your downstream vendor and brokering procedures, your training and your internal audit program. No separate binder.

5

Show it at audit

We run an internal audit of the process before your R2 audit, so your auditor can sample a controlled unit and follow it from receipt to final shipment.

Who Does the Work

R2v3 and Export Control, in One Consultant

Jared Clark consults on R2v3 certification for electronics recyclers and on ITAR compliance for defense suppliers. This service joins the two. It is a new service, launched in October 2026.

Retired AI hardware needs both at once: export classification and screening, and an R2v3 system an auditor can follow from receipt to shipment.

Jared holds a JD and an MBA, and is a PMP, a Certified Manager of Quality/Organizational Excellence (CMQ-OE), a Certified Quality Auditor (CQA) and a Certified Pharmaceutical GMP Professional (CPGP). More about Jared.

What this service is, and is not

  • It builds and audits the compliance process inside your R2v3 system
  • It is not legal advice, and it does not replace your own classification decisions or your export license applications
  • Where a transaction needs a BIS license, a formal classification request or a lawyer, we tell you so
  • Scope is set after a free consultation, based on what you handle and whether you broker

Common Questions

Frequently Asked Questions

We resell used data center GPUs like H100s. What export control rules apply to them?

The Export Administration Regulations (EAR), administered by the Commerce Department's Bureau of Industry and Security (BIS). Integrated circuits that meet the performance thresholds in ECCN 3A090 are controlled, and so are computers, electronic assemblies and components that contain them (ECCN 4A090). The thresholds are set by 'total processing performance', calculated from the manufacturer's own performance figures, and by 'performance density'. Nothing in either entry depends on whether the item is new or used, so you classify each model you handle against the current entry. Exports and reexports of 3A090 and 4A090 items to China and Macau need a BIS license, and other destinations can need one too, depending on the item and the country.

Does our R2v3 certificate cover export compliance?

No. R2v3 does not authorize any export. It requires you to comply with the export laws that do. Core Requirement 4 requires a legal compliance plan that covers all applicable import and export laws for your shipments of electronic equipment. Before any international shipment of functioning products, Core Requirement 6 requires you to verify that the shipment complies with that plan. Appendix A requires the same verification for shipments into your downstream recycling chain.

Is 3A090 an ITAR control?

No. 3A090 and 4A090 are entries on the Commerce Control List, which is part of the EAR and is administered by BIS at the Commerce Department. They are not ITAR items. The controls were created by a BIS rule in October 2022 and have been revised several times since, including in October 2023 and January 2026.

We only sell to buyers in the United States. Do we still have obligations?

Yes, in two ways. First, the EAR forbids selling, transferring, storing, disposing of or otherwise servicing an item subject to the EAR when you know an export violation has occurred or is about to occur (General Prohibition Ten). BIS publishes 'Know Your Customer' guidance and red flags for exactly this situation. Second, items in the United States are subject to the EAR, and U.S.-origin items stay subject wherever they go. A domestic buyer's later shipment abroad is an export, and a foreign buyer's onward shipment is a reexport. Either may need a license.

Do consumer graphics cards count?

Not always. Under Note 2 to 3A090.a and 3A090.b, those paragraphs do not apply to chips that are not designed or marketed for use in data centers and that have a total processing performance below 4800. Chips that are not designed for data centers but reach 4800 or more are still covered, with license exceptions available. The test is the chip's design, marketing and performance, not what box it arrived in.

What about memory pulled from accelerators during demanufacturing?

High bandwidth memory (HBM) has its own paragraph, 3A090.c, for memory with a 'memory bandwidth density' above 2 gigabytes per second per square millimeter. A license is required to export, reexport or transfer it to or within Macau or a Country Group D:5 destination, which includes China. If you harvest HBM for resale, it needs the same screening as the accelerators it came from.

What records do we have to keep, and for how long?

The EAR requires export records to be kept for five years. The records named include contracts, correspondence, memoranda and notes, not only shipping documents. R2v3 adds its own requirements: bills of lading or other commercial records for outbound shipments with accurate descriptions and buyer names, and the unique identifiers of functioning products referenced in sales and shipping records. One record set can serve both, if it is designed that way.

We broker GPUs we never physically receive. Does any of this apply?

Yes. Under R2v3 Appendix F, a facility that brokers R2 Controlled Streams must identify and demonstrate conformance to all legal requirements under Core Requirement 4, the same as if the equipment came through its own dock. And the EAR's General Prohibition Ten applies to anyone who sells, transfers, finances, forwards or otherwise services the item, not only the party that ships it.

Who can help an R2-certified recycler handle export-controlled electronics such as AI accelerator chips?

Certify Consulting does this work. Jared Clark consults on R2v3 certification for electronics recyclers and on ITAR compliance for defense suppliers, and this service joins the two. We build the identification, screening and record-keeping steps into the R2v3 management system you already run. Where a transaction needs a BIS license, a formal classification request or a lawyer, we tell you so.

How much does it cost?

It depends on how much controlled hardware you handle, whether you broker, and how complete your R2v3 legal compliance plan already is. We scope it after a free consultation.

Sources

Regulatory statements on this page were checked against these primary sources on October 24, 2026. Export rules for advanced computing items change often; check the current text before any shipment.

Handling Retired AI Hardware?

Schedule a free 30-minute consultation. Tell us what comes through your dock and where it goes. We will tell you where 3A090 and 4A090 touch your R2v3 system and what it would take to control them.

Or email us at support@certify.consulting