ITAR Registered Manufacturers in Burlington, VT

ITAR registration cannot be checked in an open public directory the way an ISO certificate can, because the State Department's Directorate of Defense Trade Controls does not publish registrant lists for general search. To verify, ask the supplier directly for its DDTC registration code and confirm the registration is current, since it must be renewed annually. Build a written ITAR compliance representation into your purchase order or supplier agreement so the obligation is contractual, not just verbal. For controlled programs, go further and request evidence of the supplier's technology control plan, its procedures for restricting technical-data access to U.S. persons, and how it screens or segregates any foreign-person employees. Many defense primes also now require the supplier to demonstrate cybersecurity compliance such as NIST SP 800-171 and CMMC certification, because controlled unclassified information must be protected on the supplier's IT systems. A Burlington shop genuinely operating in the defense space will answer these questions readily and have documented procedures; a shop that treats ITAR as a checkbox and cannot describe its technology control plan should not receive your controlled data until it can.

No, and conflating them is a meaningful mistake. ITAR registration is a legal and regulatory status: it means a manufacturer of defense articles or services on the U.S. Munitions List has enrolled with the State Department's DDTC and is authorized to handle defense-controlled technical data and pursue export licensing. It says nothing about whether the shop produces conforming parts. Quality certifications like AS9100 Rev D and ISO 9001, by contrast, are the result of an accredited third party auditing the shop's quality-management system. In the Burlington defense aerospace supply chain these credentials almost always travel together, because the military propulsion and aerospace work that requires ITAR also demands aerospace quality discipline, but they answer different questions. Think of ITAR as the gate that controls who is legally permitted to see your drawing and handle your part, and AS9100 or ISO 9001 as the measure of whether that supplier can actually machine, inspect, and document the part to flight standards. When you place defense work, require both: ITAR for the compliance gate and the appropriate quality certification for delivery confidence.

The heart of ITAR compliance is controlling who can access technical data and how it moves. A disciplined Burlington defense supplier operates a technology control plan that restricts access to defense-controlled drawings, models, and specifications to U.S. persons as ITAR requires, and it has explicit procedures for any foreign-person employees so that an unauthorized disclosure, which counts as an export even if it happens inside the building, cannot occur inadvertently. Controlled data is stored on IT systems that meet the security expectations of the program, increasingly governed by NIST SP 800-171 and CMMC requirements, with access logging so the shop can show who viewed what. Physically, controlled drawings carry appropriate distribution-statement and export-control markings, and the shop maintains procedures for receiving, marking, storing, and ultimately returning or destroying that data. If the part itself is a Munitions List defense article, even its domestic movement and storage carry export-control implications. Before you release a drawing, confirm the supplier can describe all of this concretely, because as the party transmitting the technical data you share responsibility for any compliance failure that follows.

ITAR rarely stands alone in this market because the work that requires it sits inside aerospace and defense programs with their own quality and security demands. The most common companion is AS9100 Rev D, since defense propulsion and airframe hardware must meet aerospace quality requirements around configuration management, first-article inspection, and counterfeit-parts prevention. ISO 9001 underlies AS9100 and is sometimes held for the supplier's commercial work. For parts requiring special processes like heat treat, plating, or non-destructive testing, NADCAP accreditation on the processing chain becomes relevant. On the cybersecurity side, defense work involving controlled unclassified information increasingly requires the supplier to meet NIST SP 800-171 and to pursue or hold CMMC certification, because protecting controlled technical data on IT systems is now an explicit contractual obligation in much of the defense industrial base. When sourcing in the Burlington corridor, map your program's full requirement set first, then look for a supplier whose ITAR registration, quality certifications, special-process chain, and cybersecurity posture all line up, rather than assuming ITAR registration alone makes a shop ready for your defense work.