ITAR Registered Manufacturers in Missoula, MT

The International Traffic in Arms Regulations govern the export of defense articles and defense services listed on the United States Munitions List. Manufacturers, exporters, and brokers of those items must register with the State Department's Directorate of Defense Trade Controls (DDTC). That registration is an enrollment and a fee, paired with a compliance obligation, not a third-party audit of capability. There is no ITAR certificate hanging on a wall the way an ISO certificate does. For a Missoula buyer, this means ITAR registration tells you a shop has formally enrolled with DDTC and, presumably, stood up an export-compliance program to control technical data and physical articles. It says nothing about whether the shop's machining, welding, or assembly meets your engineering requirements. You still need a quality basis, usually ISO 9001 or AS9100, layered on top of ITAR registration for defense hardware. The most common buyer mistake is conflating the two. A shop can be a superb fabricator and not ITAR registered, which disqualifies it from handling controlled drawings or articles. Another shop can be ITAR registered with a weak quality system. For controlled work you generally need both, and you need to verify them separately because they come from entirely different authorities.

DDTC registration is not publicly searchable the way ISO or AS9100 certs are, so verification relies on the supplier providing evidence. Ask for the shop's DDTC registration code and a copy or confirmation of its current registration status, and confirm the registration is active and not expired, since ITAR registration must be renewed annually. A shop that cannot produce current registration evidence should not be touching your controlled data. Beyond the registration itself, evaluate the compliance program. A serious ITAR-registered shop has a written export-compliance policy, designated empowered official or compliance officer, controlled access to technical data (physical and digital), personnel screening for U.S.-person status where required, and procedures for handling and segregating controlled drawings. Ask how technical data is stored and transmitted, whether their IT environment restricts access to U.S. persons, and how they handle foreign-national employees or visitors on the floor. For data security, ask whether the shop's systems meet the controls your contract flows down, which for DoD work often means NIST SP 800-171 and DFARS 252.204-7012 compliance, and increasingly CMMC. ITAR registration and cybersecurity compliance are distinct but related obligations, and a gap in either can put your program at risk. Treat both as verification line items before you transmit a single controlled drawing.

The riskiest moment in an ITAR supply relationship is the transfer of technical data, the drawings, models, specifications, and process details that themselves are controlled. Releasing ITAR technical data to a non-U.S. person, even unintentionally inside the United States, is a deemed export and a violation. Before you send anything, confirm the receiving shop is registered, that the transmission method is secure, and that access on their end is restricted to authorized U.S. persons. Keep disciplined records on both sides. Document what controlled data you transmitted, when, to whom, and under what authorization. Require the supplier to maintain access logs and to return or destroy controlled data on program completion per your instructions. For physical articles, require controlled handling, marking, and shipment, and confirm that any export of the finished article is covered by the appropriate license or exemption, because the manufacturer's registration does not automatically authorize export of the end item. Flowdown matters here too. If the Missoula shop subcontracts any operation, machining, special processes, finishing, that handles controlled data or articles, those sub-tier suppliers must also be ITAR-compliant. Your purchase order and quality agreement should require the prime supplier to flow ITAR obligations to its subcontractors and to obtain your approval before involving any new party with access to controlled information.