ITAR gets talked about as though it’s a certification you pass once and hang on the wall. It’s not. It’s a set of federal export control regulations that restrict who can access defense-related technical data — including engineering drawings, CAD files, process parameters, and inspection results. For a machine shop, that means every person who sees your drawing has to be a U.S. person, and the shop has to have an active ITAR registration with the Directorate of Defense Trade Controls (DDTC).
Quick Summary: ITAR registration (22 CFR Parts 120–130) is required for any U.S. manufacturer that fabricates defense articles or provides defense services. For machine shops, this means controlling access to ITAR-controlled drawings and technical data, restricting shop floor access to U.S. persons, and maintaining records that demonstrate compliance. Registration costs roughly $3,000/year and must be renewed annually. The operational overhead — access control, training, visitor policies, IT security — is what actually drives cost.
What Does ITAR Require From a Machine Shop?
| Requirement | What It Means in Practice |
|---|---|
| DDTC Registration | Annual registration with the State Department ($3,000/year). Must be current before accepting ITAR work. |
| Access control | ITAR-controlled drawings, CAD files, and technical data can only be accessed by U.S. persons (citizens, permanent residents, or protected individuals). |
| Shop floor restrictions | Non-U.S. persons cannot be in areas where ITAR-controlled parts or drawings are visible. This may require physical barriers or scheduling controls. |
| Visitor policy | Visitors must be screened. Foreign nationals cannot enter ITAR-controlled areas. |
| IT security | ITAR technical data must be stored on secure systems. No cloud storage outside the U.S., no unencrypted email of drawings. |
| Training | All employees must be trained on ITAR requirements and the consequences of violations (criminal penalties, fines, debarment). |
| Record keeping | Logs of who accessed what, when, and how technical data was transmitted. |
Why Does ITAR Registration Add Cost to My Parts?
Not because of the $3,000 registration fee — that’s trivial spread across a year of jobs. The cost is operational:
Workforce constraints. Every person on the shop floor during ITAR work must be a U.S. person. In areas with large non-citizen workforces, this limits scheduling flexibility and may require dedicated shifts. Some shops pay a premium for ITAR-cleared operators.
IT infrastructure. ITAR technical data can’t sit on a shared Google Drive or get emailed without encryption. Shops running ITAR work maintain separate file servers, encrypted email, and access-controlled CAD stations. That infrastructure costs money.
Administrative overhead. Tracking which jobs are ITAR, which aren’t, who accessed what, and maintaining training records adds quality-system labor to every ITAR job.
These costs get distributed across the shop rate, so every ITAR job carries a slightly higher hourly rate than non-ITAR work at the same shop.
How Do I Know If My Part Requires ITAR?
If the part is on the United States Munitions List (USML, 22 CFR §121), or if the technical data (drawings, specs, test data) associated with the part is defense-related, it’s ITAR-controlled. Common indicators:
Your customer or prime contractor tells you it’s ITAR. That’s the most reliable signal. The PO or contract includes DFARS clauses (252.204-7012 or similar). The drawing is marked “ITAR Controlled” or “Distribution Statement” restricted.
If you’re unsure, ask the customer before accepting the job. Manufacturing an ITAR-controlled article without registration is a federal violation.
Frequently Asked Questions
Is ITAR the same as EAR? No. ITAR (State Department / DDTC) covers defense articles and services. EAR (Commerce Department / BIS) covers dual-use items. Some items that seem military are actually EAR-controlled, and vice versa. The customer’s export classification determines which regime applies.
Can a non-ITAR shop subcontract ITAR work? No. Every entity in the manufacturing chain that handles ITAR technical data or defense articles must be independently registered.
Does ITAR affect quoting turnaround? Sometimes. If the RFQ package itself contains ITAR-controlled data, the shop can only share it internally with ITAR-trained U.S. persons. This can slow down quoting if the estimator or programmer who needs to review the drawings isn’t available.
Written by James Wright, CEO of Accurate Machine & Tool.
Sources
[1] eMachineShop FAQ — ITAR registration reference, emachineshop.com/faq
[2] U.S. Department of State, Directorate of Defense Trade Controls (DDTC) — ITAR registration guidance, pmddtc.state.gov
[3] 22 CFR Parts 120–130 — International Traffic in Arms Regulations