Export control regimes are expanding rapidly and now cover software, AI models, and chip technology, not just physical goods. What does a GC at a tech-adjacent company actually need to have in place?