What is ITAR? Explained simply

The problem it is meant to solve

Some things made in the United States are weapons, or parts and know-how that go into weapons. The government wants to know who makes them and to decide who outside the country gets them.

The International Traffic in Arms Regulations, usually shortened to ITAR, is the set of federal rules that does this. It covers military items, the technical information needed to build or repair them, and help given to foreign parties with them.

What it actually asks you to do

First, find out whether what you make or handle is on the U.S. Munitions List. It is the government's list of military items, in 21 categories from firearms to spacecraft.

If you are unsure, you can ask the State Department for a formal ruling.

If you make, export or temporarily import listed items, or provide defense services such as technical help to foreign parties, even once, you must register with the State Department and renew every year. Brokers who arrange these deals register separately. There are a few narrow exceptions.

A manufacturer that never exports still has to register. Registration carries an annual government fee, currently $3,000 for a new registrant and more for companies that received licenses in the past year.

Before anything on the list leaves the country, you need a license or a specific exemption written into the rules. The same is true for sharing controlled technical information with a foreign person, even inside the United States. This is called a deemed export.

Under these rules a green card holder counts as a U.S. person, but someone here on a work visa does not.

You must keep records of what you made, shipped and shared, generally for five years. If you find you broke a rule, the State Department encourages you to report it yourself. This is called a voluntary disclosure, and it may count in your favor when penalties are decided.

What it is not

It is not a certification. No one audits you and hands you an ITAR certificate. The State Department says plainly that registering does not certify that you comply.

When someone says a company is "ITAR certified," they usually mean it is registered and has a compliance program.

It is also not voluntary. It is federal law, with civil fines that can exceed $1 million per violation, and criminal charges for willful ones. And it does not cover every export: items not on the list are usually handled by the Commerce Department under separate rules.

What it looks like in a real company

Take a 40-person machine shop. A defense customer sends drawings for a bracket used on a military aircraft and asks, "Are you ITAR registered?" The shop is not.

They check the list's aircraft category and confirm this bracket is covered. That check matters: many parts for military aircraft are not on the list and fall under Commerce Department rules instead. They enroll in the State Department's online system, a senior officer signs the registration, and they pay the fee, renewing 30 to 60 days before it expires each year.

Then the harder parts. One engineer is on a work visa, so he cannot see the drawings until the State Department approves it, usually with a license. They lock the files away from everyone else in the meantime.

They keep records, write a short manual, name someone to sign export paperwork, and train staff. None of it changes how they cut metal.

Who deals with it day to day

In a small company one person usually owns it, often a contracts or operations manager. The rules also define an "empowered official": a senior employee authorized in writing to sign license requests, who can refuse to sign one without being punished for it.

Around them are engineers handling drawings, IT staff controlling file access, and whoever meets foreign customers or visitors.

Why a business bothers

Because the law requires it once you make or export listed items, and defense customers often ask about it before they share drawings.

The second reason is protection. The State Department's own guidance says that simply holding controlled items or data raises your risk of an accidental violation. A written program helps you catch mistakes early.

Who writes it and who checks it

The Directorate of Defense Trade Controls, part of the State Department, writes and runs the rules. It decides what goes on the list, with the Defense Department's agreement.

Its compliance office handles registration and reviews voluntary disclosures, and the State Department can impose fines and inspect your records. The Justice Department prosecutes criminal cases. U.S. Customs and Border Protection and Immigration and Customs Enforcement can stop shipments.

There is no private certifier and no accreditation body. The rules change often. Since 2024 the State Department has created a license exemption for trade among approved parties in the United States, the United Kingdom and Australia (the security partnership known as AUKUS), and has revised the list more than once.

Check the current list before relying on an old answer.

Where it leads next

If your items are not on the list, look at the Commerce Department's Export Administration Regulations, which control many other exports.

If you stay under ITAR, the usual next steps are a written compliance manual and a plan for protecting technical data. The State Department publishes free guidelines for both.