ITAR Registered Manufacturers in San Bernardino, CA

ITAR, the International Traffic in Arms Regulations, controls the export of defense articles and defense services on the U.S. Munitions List. A manufacturer that produces or handles USML items must register with the Directorate of Defense Trade Controls (DDTC) at the State Department. That registration is a legal prerequisite to engage in manufacturing or exporting controlled articles; it is not a certification of quality, capability, or process control. This distinction trips up buyers constantly. Registration tells you a San Bernardino shop has paid its DDTC fee, filed its registration, and is legally permitted to handle controlled defense work. It tells you nothing about whether the shop holds tolerances, controls its processes, or runs a conforming quality system. Those are the job of AS9100 or ISO 9001, which is why defense fabrication shops typically carry an ITAR registration plus a quality certification. For controlled work, both are mandatory in their own lane: the quality standard governs whether the part is made correctly, and ITAR governs whether the people, data, and parts were handled lawfully. A buyer must verify each separately.

The hardest part of ITAR is not making the part; it is controlling the technical data. Drawings, models, specifications, and process detail for a USML item are themselves controlled, and disclosing them to a foreign person, even one standing on the shop floor in San Bernardino, can constitute an unauthorized export. ITAR shops therefore restrict access to controlled data to U.S. persons and segregate it on access-controlled systems and physical areas. This shapes how an ITAR shop runs: employee nationality verification, locked drawing storage, controlled network shares, visitor controls, and careful management of any subtier that touches the data. A fabricator that emails a controlled drawing to an offshore engineering service or stores it on an uncontrolled cloud has potentially exported it, regardless of intent. For a buyer, the practical consequence is that when you send controlled technical data to a San Bernardino supplier, you inherit responsibility for confirming they handle it lawfully. Flow your export-control requirements down in the PO and the agreement, confirm the shop's U.S.-person controls, and verify that any plating, heat treat, or machining subtier in the chain is also cleared to touch the data.

Unlike OASIS for AS9100, the DDTC registry is not publicly searchable for due diligence, so verification is done by requesting evidence directly. Ask the supplier for its DDTC registration code and current registration letter, confirm the registration is active, and confirm the registered entity matches the company and the San Bernardino site you are contracting with. A reputable defense supplier provides this on request as part of normal qualification. Beyond the paperwork, assess the supplier's actual export-compliance program: a designated empowered official, written technical-data handling procedures, employee screening, and visitor and IT controls. Ask how the shop handles controlled data in its quoting process and whether its estimators and engineers are U.S. persons, since the data is controlled the moment it arrives, not just on the production floor. Sourcing controlled work inside the Inland Empire has a real advantage: keeping the technical data and parts within a tight geographic and vetted-vendor footprint reduces the export-control surface area. Every additional out-of-region subtier is another place the data and parts can be mishandled. A local AS9100 plus ITAR machining house with vetted nearby special-process sources is often the lowest-risk path for a defense buyer.