Export of DES, either in hardware or software, is strictly regulated by the U.S. State Department and the NSA (see Question 148). The government rarely approves export of DES, despite the fact that DES is widely available overseas; financial institutions and foreign subsidiaries of U.S. companies are exceptions.