🛡️ ITAR
ITAR-Registered Manufacturers in Burlington, NC
ITAR registration means a supplier is registered with the U.S. State Department's Directorate of Defense Trade Controls and is bound by the International Traffic in Arms Regulations when handling defense articles and technical data. It is a legal status, not a quality system, and that distinction shapes everything about how you verify and work with a Burlington shop on controlled parts. For Triad defense buyers, the right local supplier combines genuine ITAR compliance with the machining and fabrication capability the region is known for.
ITARISO 9001AS9100
What ITAR Actually Is, and Why It's Not a Certificate
The most common misunderstanding among buyers is treating ITAR like ISO 9001, a certificate you can look up in a registrar directory. It isn't. ITAR registration is enrollment with the Directorate of Defense Trade Controls (DDTC), required for any U.S. company that manufactures or exports defense articles or services on the United States Munitions List. There is no public certificate and no accreditation body. A Burlington shop is either registered with DDTC or it isn't, and compliance is an ongoing legal obligation, not an audited badge.
That changes verification entirely. You can't simply look up an ITAR mark; instead you confirm the supplier holds a current DDTC registration and, critically, that they operate a real compliance program around it. ITAR controls technical data and access by foreign persons, so a registered shop must control who sees drawings, who touches controlled parts, and how data moves. Registration without an actual compliance program is exposure waiting to happen.
For Burlington shops that came up through automotive and heavy-equipment work, ITAR compliance is a discipline layered onto strong machining capability. The capability is local and real; what you verify is whether the compliance infrastructure around it is equally real.
Verifying Registration and a Real Compliance Program
Because there's no public ITAR directory, verification leans on direct confirmation and evidence of a working program. Ask the Burlington supplier to confirm their DDTC registration is current, registration is renewed annually, so a lapsed registration is a real risk. A compliant shop will speak precisely about their registration status and won't be vague about it.
Beyond registration, probe the compliance program itself. ITAR turns on U.S.-person access: only U.S. persons may access controlled technical data and defense articles without specific authorization. Ask how the shop verifies the citizenship status of employees who'll touch your work, how they segregate and control technical data, and how they prevent unauthorized foreign access, including in their IT systems and cloud storage. A shop with a real program has documented procedures and an empowered Empowered Official or compliance lead.
Red flags are telling here. A supplier who can't explain how they control technical data access, who stores drawings in uncontrolled systems, or who treats ITAR as paperwork rather than operational control is a liability. For defense work, the supplier's compliance failure can become your violation, so this verification matters more than any quality check.
Handling Technical Data and Local Site Visits
Technical data control is where ITAR most affects day-to-day work, and proximity to a Burlington supplier helps. Controlled drawings, specifications, and CAD files are technical data under ITAR and can't be shared with or accessed by foreign persons without authorization. That means how you transmit data to the shop matters, secure, controlled channels rather than open email or consumer file sharing, and the shop's internal handling must keep that data restricted to authorized U.S. persons.
Being local in the Triad makes the controlled relationship easier to manage. You can conduct source inspections and discuss controlled work in person rather than transmitting more data than necessary, and you can verify the shop's physical and data security firsthand. For defense programs that already favor onshore, vetted suppliers, a Burlington shop an hour away is far simpler to oversee than a distant one.
Confirm too that any subcontracting stays within ITAR controls. If your Burlington supplier routes special processes or secondary operations out, those subcontractors must also handle the controlled work compliantly. The supplier should manage that flow-down and keep the controlled data and articles within authorized hands at every step.
Pairing ITAR Compliance With Quality Certification
ITAR alone tells you nothing about whether a Burlington shop makes good parts; it only tells you they're authorized to handle controlled work. For defense hardware you almost always need both ITAR registration and a quality certification, typically ISO 9001 at minimum and AS9100 for aerospace-defense work. The combination is what makes a supplier genuinely useful: legally cleared to handle the controlled data and articles, and operating a quality system that ensures the parts conform.
In the Burlington area, the shops most likely to be ITAR-registered are also the ones carrying AS9100 or strong ISO 9001 systems, because defense and aerospace customers demand both. When sourcing, treat the two as a paired requirement. Verify the DDTC registration and compliance program for the legal side, and verify the quality certificate and its scope for the conformance side. A shop strong on one but weak on the other isn't a complete defense supplier.
The practical advantage of the Triad is that this combination exists locally. A defense buyer can find a Burlington shop that machines to aerospace tolerance, holds AS9100, and maintains a real ITAR compliance program, all within driving distance, which simplifies oversight of both the quality and the controlled-data dimensions of the work.
Frequently Asked Questions
No, and this is a critical difference from ISO certifications. ITAR registration is enrollment with the U.S. State Department's Directorate of Defense Trade Controls, and there is no public registry or certificate you can search the way you'd look up an ISO 9001 certificate in a registrar directory. Registration status is not publicly disclosed. To verify a Burlington supplier, you confirm directly with the shop that their DDTC registration is current, registration must be renewed annually, and you ask for evidence of a functioning compliance program around it. A compliant supplier will speak precisely about their registration and won't be evasive. Because you can't independently verify through a public lookup, the depth of your direct due diligence matters more: ask how they control technical data, verify U.S.-person access, and manage the registration renewal. Treat any vagueness about registration status or compliance procedures as a serious red flag, because for defense work the supplier's compliance failures can become your own legal exposure under the regulations.
Under ITAR, only U.S. persons, citizens, lawful permanent residents, and certain protected individuals, may access controlled technical data and defense articles without specific government authorization. For a Burlington supplier handling your controlled work, this means the shop must verify the citizenship or immigration status of every employee who will see your drawings, touch the parts, or access the data, and must prevent unauthorized foreign-person access including through IT systems, cloud storage, and even casual exposure on the shop floor. When evaluating a Triad supplier, ask specifically how they screen employee access, how they segregate controlled technical data, and how their IT environment prevents foreign access, since cloud and email systems are common weak points. A shop with a genuine ITAR program has documented procedures and a designated compliance lead or Empowered Official who owns these controls. A supplier that can't explain its access controls, or that stores controlled drawings in uncontrolled consumer systems, is a liability, because an unauthorized disclosure is a violation that can implicate you as the customer who provided the controlled data.
For nearly all defense hardware, yes. ITAR registration is a legal compliance status that authorizes a supplier to handle controlled defense articles and technical data, but it says nothing about whether the supplier makes conforming parts. Quality certification, ISO 9001 at minimum and AS9100 for aerospace-defense work, governs whether the parts actually meet specification. You need both: the legal clearance to handle the controlled work and the quality system to ensure conformance. In the Burlington area, the shops most likely to be ITAR-registered are also those carrying AS9100 or robust ISO 9001 systems, because aerospace and defense customers require both as a matter of course. When sourcing, treat them as paired requirements and verify each separately, confirm the DDTC registration and compliance program for the legal dimension, and verify the quality certificate, its scope, and its records for the conformance dimension. A supplier strong on compliance but weak on quality, or vice versa, is an incomplete defense supplier that exposes you on one side or the other.
Controlled drawings, specifications, and CAD files are technical data under ITAR and must be transmitted and stored in ways that prevent access by unauthorized foreign persons. That rules out open email and consumer file-sharing services that may route or store data without adequate controls. Use secure, access-controlled channels agreed with the supplier, and confirm the shop's internal handling keeps that data restricted to authorized U.S. persons throughout its lifecycle. One advantage of sourcing locally in the Triad is that proximity lets you discuss controlled work and conduct reviews in person, reducing how much controlled data needs to be transmitted at all, and lets you verify the supplier's physical and data security firsthand. Also confirm that if the Burlington shop subcontracts any operations, the controlled data and articles stay within authorized, compliant hands at every handoff. The supplier should manage that flow-down. Getting transmission and handling right protects both parties, because an inadvertent disclosure of technical data, even through a careless file-sharing choice, can constitute a violation.
Proximity to a Burlington supplier directly reduces the friction and risk of managing controlled work. Because ITAR restricts how technical data moves and who can access it, being able to conduct source inspections, design discussions, and reviews in person means you transmit less controlled data over networks and can verify the supplier's physical and data security firsthand. Defense programs already favor onshore, vetted suppliers, and overseeing a shop an hour away in the Piedmont Triad is far simpler than overseeing a distant one. Proximity also speeds the practical work, first-article reviews, problem resolution, and schedule changes happen face to face rather than through extended data exchanges. For controlled work where every data transmission carries compliance weight, the ability to handle sensitive coordination in person is a genuine operational and risk advantage. Combined with the Triad's real machining and fabrication capability, a local ITAR-registered supplier lets a defense buyer manage both the compliance and the quality dimensions of the work with the oversight that controlled programs demand.
Last updated: July 2026
Find ITAR-Certified Manufacturers in Burlington, NC
Search verified Burlington shops that hold ITAR.
No logins. No email gates. Just results.