Some people have asked for an Export Control Classification Number (ECCN) for WinSCP. I do not know whether WinSCP has one, and as a free software developer based in the Czech republic I do not have the time, money, or effort to deal with US bureaucracy to investigate any further. I believe that WinSCP falls under 5D002 on the US Commerce Control List, but that should not be taken as definitive. If you need to know more you should seek professional legal advice. The same applies to any other country’s legal requirements and restrictions.
Similarly, some people have asked for FIPS certification of the WinSCP. Unless someone else is prepared to do the necessary work and pay any costs, I cannot provide this.1