Sanctions & Export‑control Due Diligence in M&A: Germany, 2026 Practical Guide for Buyers, Sellers & Advisers

M&A sanctions risk has moved from a background compliance consideration to a front‑of‑deal priority in Germany. Expanded EU restrictive‑measures packages, tighter enforcement by the Bundesamt für Wirtschaft und Ausfuhrkontrolle (BAFA) and the Deutsche Bundesbank, and a broadening scope of dual‑use controls under the EU Dual‑Use Regulation mean that sanctions due diligence in Germany now sits at the centre of every cross‑border transaction involving German targets, sellers, or assets. This guide provides buyers, sellers and their advisers with a transaction‑ready playbook, covering pre‑deal screening, contractual risk allocation, authority notification triggers, and post‑closing remediation, grounded in German statutory requirements under the Außenwirtschaftsgesetz (AWG) and the Außenwirtschaftsverordnung (AWV), as well as directly applicable EU sanctions regulations.

Whether you are a general counsel evaluating a carve‑out, a private equity sponsor underwriting a platform acquisition, or a sell‑side adviser preparing disclosures, this article sets out the practical steps needed to identify, quantify and manage export‑control due diligence risk throughout the deal lifecycle.

Executive Summary, At a Glance

Sanctions and export‑control exposure can delay, re‑price or entirely block an M&A transaction in Germany. The decision to proceed, pause or restructure a deal should be made early, ideally at the screening stage, and revisited whenever new information surfaces during diligence or between signing and closing.

Key decision checklist:

• Screen first. Run all counterparties, beneficial owners, key customers, suppliers and product lines against EU consolidated sanctions lists, BAFA denial‑order databases and the Bundesbank’s restricted‑party guidance before engaging in substantive negotiations.
• Assess materiality. Quantify the revenue, contract and technology exposure tied to sanctioned jurisdictions, listed persons or controlled goods, and determine whether the exposure is severable or structural.
• Plan for authority interaction. Identify whether pre‑closing licensing (BAFA), FDI clearance, voluntary self‑disclosure or blocking obligations (Bundesbank) are triggered, and build realistic timelines into the deal timetable.

BAFA maintains regularly updated guidance on export‑control licensing requirements and dual‑use classifications, while the Auswärtiges Amt publishes the current EU and national sanctions lists applicable in Germany.

Regulatory & Enforcement Landscape for Sanctions Due Diligence in Germany

Germany operates a layered regulatory framework: EU sanctions regulations apply directly as a matter of EU law, while national legislation, principally the AWG and the AWV, supplements those rules with enforcement mechanisms, administrative penalties and criminal offences specific to the German jurisdiction.

Key Authorities and What They Enforce

Five principal institutions share responsibility for sanctions and export‑control enforcement in Germany:

• BAFA (Bundesamt für Wirtschaft und Ausfuhrkontrolle). Administers export licences, enforces the EU Dual‑Use Regulation and national export‑control lists, and processes licence applications for controlled goods and technologies.
• Auswärtiges Amt (Federal Foreign Office). Coordinates Germany’s foreign‑policy sanctions framework and acts as the national link to EU Common Foreign and Security Policy (CFSP) measures.
• Deutsche Bundesbank. Oversees compliance with financial sanctions, issues guidance on asset‑freezing obligations and administers the blocking of payments involving designated persons and entities.
• BaFin (Bundesanstalt für Finanzdienstleistungsaufsicht). Supervises regulated financial institutions’ sanctions‑screening processes and integrates sanctions compliance into its broader AML/CFT supervisory regime.
• Public prosecutor offices (Staatsanwaltschaften). Investigate and prosecute criminal violations of the AWG and EU sanctions regulations, including wilful and negligent breaches.

Relevant Laws and Instruments

The core statutory framework for sanctions due diligence Germany practitioners must navigate includes the AWG (which establishes the legal basis for national trade restrictions and criminal penalties), the AWV (which implements detailed licensing requirements, embargo rules and reporting duties), directly applicable EU regulations published in the Official Journal of the European Union (accessible via EUR‑Lex), and sector‑specific rules such as the EU Dual‑Use Regulation. The interplay with Germany’s Supply Chain Due Diligence Act (LkSG) is relevant where supply‑chain risk overlaps with sanctioned jurisdictions or controlled commodities, but the LkSG is a separate compliance obligation and should not be conflated with sanctions and export‑control screening.

When Sanctions or Export‑Control Issues Stop or Slow a Deal, Decision Triggers

Not every sanctions or export‑control issue is deal‑breaking, but certain findings should trigger an immediate pause, escalation or restructuring. Identifying these triggers early prevents costly surprises between signing and closing.

Screening Thresholds and Automated Screening Limits

Automated screening tools compare counterparty names, addresses and identification data against consolidated sanctions lists. While these tools are effective for initial triage, they have well‑documented limitations: transliteration errors, common‑name false positives, and incomplete beneficial‑ownership data can all produce misleading results. Deal teams should treat automated screening as a first filter, not a final answer, and supplement it with manual verification of flagged hits, beneficial‑ownership analysis using commercial registers and regulatory databases, and targeted interviews with the target’s compliance personnel. The FDI and sanctions interplay adds another dimension: an acquisition of a German target holding dual‑use technology may simultaneously trigger both BAFA export‑control licensing and a foreign direct investment review under AWV Section 55 et seq.

Pre‑Clearance and Licensing Triggers

A deal must pause or build in additional timeline where any of the following applies:

• The target holds active contracts with persons or entities on EU consolidated sanctions lists or BAFA denial lists.
• The target manufactures, trades or transfers controlled goods (including dual‑use items) to restricted destinations.
• BAFA has previously refused, revoked or conditioned an export licence held by the target.
• The transaction would result in a change of control over controlled technology, triggering a re‑assessment of existing licences.
• FDI screening thresholds are met, creating a risk of prohibition or conditions that interact with sanctions‑related remediation.

Decision flow (textual): Initial automated screening → manual verification of flagged matches → materiality assessment (revenue, contracts, technology exposure) → legal risk classification (criminal, administrative, contractual) → decision: proceed / proceed with conditions / pause for authority clearance / withdraw.

Pre‑Deal Sanctions & Export‑Control Diligence

Effective export control due diligence requires a structured data‑request process that maps directly to the risk categories identified during screening. Buyers should issue a targeted data request set (DRS) early in the diligence phase and supplement it with management interviews and site visits as warranted.

Diligence Checklist, Data Request Items

The following items form the core of a sanctions and export‑control DRS for German M&A transactions:

• Sanctions compliance programme documentation. Written policies, screening protocols, escalation procedures and training records.
• Export licence register. All current and historical BAFA and EU export licences, including conditions, refusals and revocations.
• Product and technology classifications. Internal classification of products, software and technology against EU Dual‑Use Annex I and national control lists.
• Customer, supplier and intermediary lists. Full counterparty data (including beneficial ownership where available) for screening against sanctions lists.
• Shipping and logistics records. End‑user certificates, delivery verification certificates and freight‑forwarding documentation.
• Correspondence with authorities. All communications with BAFA, Bundesbank, BaFin or prosecutors relating to sanctions, export controls or trade compliance.
• Internal investigation reports. Any internal or external investigation into potential sanctions or export‑control breaches.
• IT systems and screening tools. Documentation of automated screening systems, update frequencies and false‑positive resolution procedures.

Export‑Control Screening Methodology

Export‑control screening in M&A should cover five dimensions: parties (counterparties, beneficial owners, directors and key personnel), products (commodity classifications and dual‑use assessments), destinations (sanctioned countries, embargoed regions, restricted end‑users), trade lanes (routes, trans‑shipment points, intermediary jurisdictions) and technology transfers (intangible technology and software transfers, including cloud‑hosted data). Screening should be repeated at signing, at any material update to the target’s customer or supplier base, and immediately prior to closing.

Red‑Flag Prioritisation Matrix

Not all findings carry equal weight. Deal teams should triage issues using a two‑axis framework, legal severity (criminal exposure versus administrative risk versus contractual breach) and commercial impact (percentage of revenue at risk, severability of the affected business line, cost of remediation). Critical red flags, such as active transactions with designated persons or unlicensed exports of controlled items, warrant immediate escalation and potential deal suspension. Medium‑severity findings, such as gaps in compliance documentation or historical screening failures that were self‑corrected, may be addressed through contractual allocation and post‑closing remediation covenants.

Target & Seller Obligations: Seller Disclosures and Sanctions Information Packs

Seller disclosures on sanctions and export‑control matters serve a dual function: they inform the buyer’s risk assessment and establish the factual baseline against which seller representations will be measured post‑closing.

Seller Questionnaires, Sample Questions and Required Documents

A robust seller questionnaire for sanctions due diligence Germany transactions should cover at minimum the following areas:

• Has the target, any subsidiary, or any director or officer been the subject of any sanctions‑related investigation, enforcement action or enquiry by any authority?
• Does the target maintain contracts, orders or receivables involving any person or entity currently listed on EU or national sanctions lists?
• Has BAFA ever refused, revoked or conditioned an export licence application submitted by the target?
• Does the target export controlled goods, dual‑use items, software or technology to any jurisdiction subject to EU or German embargo measures?
• What sanctions‑screening tools and processes does the target use, and how frequently are they updated?

Supporting documents should include the target’s current compliance manual, screening system specifications, export licence files, and copies of all end‑user certificates issued in the preceding five years.

Disclosure Schedules and Updating Mechanisms

Disclosure schedules should be structured to require granular, item‑level disclosure against each sanctions and export‑control representation in the purchase agreement. Sellers should be contractually required to update disclosure schedules between signing and closing, a mechanism often resisted but essential in the sanctions context, where new designations can occur at any time. The purchase agreement should specify the consequences of a post‑signing, pre‑closing disclosure update: whether it reduces the buyer’s indemnity claim, triggers a walk‑away right, or has no effect on previously given representations. Industry observers expect that in the current enforcement environment, buyers will increasingly insist on “bring‑down” representations at closing with no materiality scrape for sanctions matters.

Authorities, Notification & Self‑Reporting: Timing and Practical Steps

Determining when a sanctions or export‑control violation must be notified to German authorities during a transaction is one of the most consequential decisions a deal team will face. The answer depends on the nature of the breach, the type of entity involved and the specific authority’s reporting framework.

Practical Steps for Pre‑ and Post‑Closing Notifications

Financial institutions supervised by BaFin face immediate blocking and reporting obligations under the Bundesbank’s financial‑sanctions guidance when they identify transactions involving designated persons. For non‑financial corporates, voluntary self‑disclosure to BAFA or the Auswärtiges Amt is the primary mechanism. Pre‑closing, voluntary disclosure may be advisable where diligence reveals historical breaches that could affect the buyer’s own compliance posture post‑acquisition. Post‑closing, the acquirer steps into the target’s regulatory shoes and must ensure that any outstanding notifications are made promptly. Timing self‑disclosure before closing can, in some circumstances, allow the buyer to negotiate enhanced indemnities or escrow reserves based on the authority’s preliminary response.

What Regulators Typically Expect

German regulators generally respond more favourably to voluntary self‑disclosure than to passively discovered breaches. The likely practical effect of early cooperation will be a more constructive dialogue with BAFA or the Bundesbank, potentially resulting in reduced administrative penalties or more favourable settlement terms. Regulators typically expect the disclosing entity to present a comprehensive internal investigation report, a remediation plan with defined milestones, and evidence that the offending conduct has been suspended. For criminal matters referred to public prosecutors, early cooperation and voluntary disclosure remain mitigating factors, although they do not guarantee immunity from prosecution under the AWG.

Contractual Allocation: Sanctions Reps and Warranties, Escrow & Indemnities

Effective contractual allocation of M&A sanctions risk requires more than boilerplate representations. In the current German enforcement environment, deal teams need bespoke clauses that address the specific risks identified during diligence and align with the remediation pathway agreed between the parties.

Sanctions & Export‑Control Reps and Warranties, Buyer‑Side Priorities

Buyers should insist on flat (unqualified) representations that the target, its subsidiaries and their respective officers have not engaged in any transaction or dealing prohibited by applicable EU sanctions regulations or the AWG/AWV; that all required export licences have been obtained and remain in full force; and that no investigation, enquiry or enforcement proceeding by BAFA, the Bundesbank, BaFin or any public prosecutor is pending or threatened. Knowledge qualifiers (“to the best of the seller’s knowledge”) should be resisted for core sanctions representations, as they shift discovery risk back to the buyer.

Practitioner example, sanctions representation (illustrative, not legal advice):

“The Company and each of its Subsidiaries are, and have at all times during the preceding five (5) years been, in compliance in all material respects with all applicable Sanctions Laws and Export Control Laws. Neither the Company nor any Subsidiary, nor any of their respective directors, officers or employees, is a Sanctioned Person or is owned or controlled by a Sanctioned Person.”

Seller Carve‑Outs, Disclosure Schedules and Knowledge Qualifiers

Sellers will seek to carve out disclosed matters from the scope of sanctions representations, cap indemnity exposure and introduce knowledge qualifiers. The negotiation typically settles on a structure where specifically disclosed items (set out in the disclosure schedule) are excluded from the representation but remain subject to a specific indemnity with a separate cap. Sellers may also argue for a de minimis threshold below which individual claims are disregarded. In the sanctions context, buyers should resist de minimis thresholds for matters that could give rise to criminal liability under the AWG, as even low‑value transactions can attract disproportionate enforcement consequences.

Remedies, Escrows and Insurance

Escrow accounts and holdback mechanisms are standard tools for bridging the gap between signing and the resolution of identified sanctions issues. The escrow amount should reflect the estimated cost of remediation (including potential fines, legal costs, contract termination penalties and revenue loss) plus a contingency buffer. Representations and warranties insurance (W&I insurance) is increasingly used in German M&A, but insurers commonly exclude sanctions and export‑control matters, or sub‑limit coverage severely. Deal teams should obtain insurer feedback early and not rely on W&I policies to cover sanctions exposure without express confirmation.

Practitioner example, remedial covenant (illustrative, not legal advice):

“Following Closing, the Buyer shall procure that the Company implements the Remediation Plan set out in Schedule [X] within [180] days of Closing, including voluntary disclosure to BAFA of all matters identified in the Disclosure Schedule as requiring notification, and shall keep the Seller reasonably informed of the progress of such implementation and any material communications with the relevant authorities.”

Post‑Closing Remediation & Enforcement Response in Germany

Post‑closing remediation in Germany follows a structured sequence: investigate, remediate, disclose and cooperate. The buyer inherits both the target’s compliance obligations and, in share deals, its existing regulatory liabilities, making a disciplined remediation timeline essential.

Typical Timelines and Milestones

• Days 1–30. Suspend all identified non‑compliant transactions. Appoint external counsel and, where necessary, forensic accountants. Secure and preserve relevant records, emails and export documentation. Brief the board and compliance function.
• Days 31–90. Complete the internal investigation. Prepare a comprehensive remediation plan addressing root causes, process gaps and personnel issues. Engage with BAFA or the Bundesbank on a preliminary basis if voluntary disclosure is intended.
• Days 91–180. File voluntary self‑disclosures. Implement the remediation plan (new screening systems, updated policies, retraining). Negotiate with authorities on any penalties or conditions. Align remediation costs with indemnity claims and escrow release schedules.

Interaction with M&A Remedies

Post‑closing remediation Germany costs should be tracked against the indemnity and escrow provisions in the purchase agreement. Buyers should ensure that the escrow release schedule is aligned with the remediation timeline, meaning that escrow funds are not released until the buyer has confirmed that no further authority action is pending. Holdback amounts should be sufficient to cover potential administrative fines under the AWG/AWV, which can be substantial for serious or repeated violations. Where the remediation cost exceeds the escrow amount, the buyer’s recourse will depend on the indemnity cap and the seller’s creditworthiness, making robust contractual protections all the more critical.

Enforcement Posture, Aggregate Learnings

Early indications suggest that German authorities are adopting a more proactive enforcement posture across sanctions and export‑control matters, with BAFA increasing its compliance audits and the Bundesbank refining its asset‑freezing guidance. Industry observers expect this trend to continue through 2026 and beyond, driven by the geopolitical context and the EU’s commitment to sanctions effectiveness. Practically, this means that acquirers of German targets should budget for longer remediation timelines and higher compliance costs than would have been typical before the current wave of enforcement activity.

Practical Tools, Checklists & Templates

The tools below are designed for rapid deployment by deal teams conducting sanctions due diligence Germany transactions. Each is intended as a starting point to be adapted to the specific risk profile of the target and the transaction structure.

Quick Triage Checklist

• Have all counterparties, beneficial owners and key personnel been screened against EU and German sanctions lists?
• Does the target export controlled goods, dual‑use items or restricted technology?
• Has BAFA ever refused, revoked or conditioned an export licence?
• Are there active contracts with persons or entities in sanctioned jurisdictions?
• Is there any pending or threatened investigation by BAFA, the Bundesbank, BaFin or public prosecutors?
• Does the transaction trigger FDI screening under the AWV?
• Has the target made any voluntary self‑disclosures to authorities in the past five years?

A comprehensive, downloadable sanctions and export‑control diligence checklist for M&A is available as a companion resource to this guide.

Where to Get Licensing and Clearance

• Export licences and dual‑use classification. Apply to BAFA via the ELAN‑K2 electronic application system. Processing times vary but typically range from 30 to 90 days for standard dual‑use applications.
• Financial sanctions guidance and blocking obligations. Consult the Deutsche Bundesbank’s published guidance notes on compliance with financial sanctions.
• Sanctions lists and designations. The Auswärtiges Amt maintains the current EU and national sanctions lists and links to the EU consolidated list of designated persons and entities.
• Supervised‑entity compliance. BaFin publishes guidance on how regulated entities should integrate sanctions screening into their AML/CFT compliance frameworks.

Conclusion and Recommended Next Steps

Sanctions due diligence in Germany is no longer a peripheral compliance exercise, it is a core transactional workstream that directly affects deal timing, valuation and post‑closing integration. The practical steps outlined in this guide, from structured pre‑deal screening and targeted data requests through to bespoke contractual allocation and disciplined post‑closing remediation, provide a framework for managing M&A sanctions risk systematically. Deal teams should begin screening at the earliest opportunity, engage with the relevant German authorities proactively where issues are identified, and ensure that purchase agreements contain robust, unqualified sanctions representations backed by meaningful escrow and indemnity protections.

For tailored guidance on a specific transaction, consult a regulatory expert in Germany with deep experience in export controls, sanctions enforcement and cross‑border M&A.

Sources

1. Bundesamt für Wirtschaft und Ausfuhrkontrolle (BAFA), Export Control
2. German Federal Foreign Office (Auswärtiges Amt), Sanctions Information
3. Gesetze im Internet, Außenwirtschaftsgesetz (AWG)
4. Gesetze im Internet, Außenwirtschaftsverordnung (AWV)
5. EUR‑Lex, Official Journal of the European Union
6. Deutsche Bundesbank, Financial Sanctions Guidance
7. BaFin, Sanctions and AML Guidance