🛡️ ITAR

ITAR-Registered Metal Stamping Suppliers

The press makes the part the same way whether it's a commercial bracket or a missile-system detail; ITAR doesn't touch the forming at all. What it controls is who may look at the drawing, where the data may live, and which country the work may happen in, and getting that wrong is an export violation before a single part is stamped. Here's how the regulation actually constrains a defense stamping supplier, how to verify registration when there's no public registry, and how the DDTC/USML framework drives sourcing.

ITARAS9100NADCAP

A Compliance Wrapper, Not a Quality Standard

ITAR, the International Traffic in Arms Regulations at 22 CFR 120 to 130, controls defense articles and defense services on the US Munitions List and is administered by the State Department's Directorate of Defense Trade Controls (DDTC). A shop that manufactures USML-controlled defense articles must be registered with DDTC. Crucially, ITAR is not a quality certification; it says nothing about how dimensionally accurate or reliable a stamped part is. It governs people, data, and geography. In practice ITAR compliance for a stamper centers on three controls. First, US-person access: technical data and controlled work may only be accessed by US persons unless an export authorization exists, so a foreign-national employee reviewing a controlled drawing on the floor is an export even though the part never leaves the building. Second, security of technical data: drawings, models, and specs marked export-controlled must be segregated, access-controlled, and held on US-based systems, with controlled email and IT handling. Third, domestic manufacturing: the controlled work stays in the United States absent a license, technical assistance agreement, or manufacturing license agreement. Because ITAR rides alongside quality rather than replacing it, a defense stamped part typically still requires AS9100 for the QMS and NADCAP for any special processes, with ITAR layered on top to govern the drawings, the people, and the supply chain. The blanking, forming, and piercing are unchanged. What changes is the compliance perimeter around everything that touches the controlled article and its data.

Verifying Registration When There Is No Public Registry

Unlike AS9100, which is searchable in OASIS, ITAR registration is confidential and there is no public DDTC lookup. Verification happens supplier-to-supplier through your qualification process. Request confirmation of active DDTC registration: registrants receive a registration code and an annual registration confirmation, and a compliant supplier will share evidence under NDA or through your standard supplier survey. Registration renews annually, so confirm it is current rather than lapsed. Registration alone is not the whole story; verify the controls that make it meaningful. Request the shop's Technology Control Plan, confirm that everyone with access to controlled parts and data is a US person or covered by an authorization, and confirm that technical data is stored on US-based, access-controlled systems with controlled email and IT handling. Many primes require controlled drawings to move only through approved secure portals, never ordinary email or consumer cloud storage. Finally, confirm the sub-tier chain stays compliant, because outsourced plating or heat treat that exposes controlled data to non-US persons is still a violation. On ManufacturingBase you can filter for ITAR-registered stamping suppliers, then validate registration and data handling directly before transmitting any controlled drawing, since sending controlled data to an unverified recipient can itself be an export violation.

How Export Control Shapes Sourcing, Lead Time, and Cost

ITAR itself does not change tooling or piece-price mechanics the way a quality standard does, but it confines the supplier pool to US-based, US-person-staffed shops, which removes low-cost offshore options and raises baseline pricing. Because defense stamping almost always pairs with AS9100 and often NADCAP, the dominant cost and schedule drivers mirror aerospace stamping: low volume, AS9102 First Article, traceability, and special processes. Tooling commonly runs $5,000 to $200,000 depending on complexity, amortized over defense-typical quantities in the hundreds to low thousands, so per-piece cost is high. Expect AS9102 FAI costs of $1,500 to $8,000 and 12 to 24 week new-part timelines including tooling and qualification, longer when NADCAP special processes sit in the routing, and 6 to 16 week procurement for controlled aerospace alloys with full traceability. The ITAR-specific overhead is administrative and front-loaded: secure data handling, US-person staffing, and the technology control plan add compliance cost that shops bake into their rates, and the qualification setup (NDA, supplier survey, secure data-transfer configuration) can add a week or two before work even starts. The single most important step is on your side: classify your own part and its technical data against the USML before sourcing. Mis-sourcing a controlled part to a non-registered shop, or emailing a controlled drawing to the wrong recipient, creates liability that dwarfs any savings, so build the ITAR check into supplier selection from the very first quote, and accept the domestic, US-person supplier pool as the cost of doing controlled work.

Frequently Asked Questions

No, ITAR is not a quality certification. It is a US export-control regulation (22 CFR 120 to 130) administered by the State Department's DDTC that governs who may access defense articles and their technical data and where that work may occur. It says nothing about how accurate or reliable a stamped part is. Because of that, an ITAR-registered stamping supplier almost always also needs a quality system, and for defense and aerospace parts that means AS9100 for the QMS and frequently NADCAP for special processes like plating, anodize, passivation, and heat treat. Think of it as two independent layers: AS9100 and NADCAP control whether the part is built right and traceable, while ITAR controls whether the right people, in the right country, on the right systems, are handling the part and its drawings. A shop can be AS9100-certified but not ITAR-registered, which makes it fine for commercial aerospace but not for USML-controlled defense work, and registration alone does not make a shop capable of flight-grade stamping. When sourcing defense stamping, confirm all the layers your part requires: ITAR registration for the controlled data, AS9100 for quality, and NADCAP for any special process in the routing.
Unlike AS9100, which is publicly searchable in OASIS, ITAR registration is confidential and there is no public DDTC directory. Verification is done supplier-to-supplier through your qualification process. Ask the shop for confirmation of active DDTC registration; registrants receive a registration code and an annual registration confirmation, and a compliant supplier will provide evidence under NDA or through a standard supplier survey. Registration must be renewed every year, so confirm it is current, not lapsed. Registration alone is not the whole story. Verify the controls that make it meaningful: request the shop's Technology Control Plan, confirm that everyone with access to controlled parts and data is a US person or covered by an export authorization, and confirm that technical data is stored on US-based, access-controlled systems with controlled email and IT handling. Many primes require controlled drawings to move only through approved secure portals, never ordinary email. Finally, confirm the sub-tier chain stays compliant, because outsourced plating or heat treat that exposes controlled data to non-US persons is still a violation. On ManufacturingBase you can filter for ITAR-registered stamping suppliers, but always validate registration and data handling directly before transmitting any controlled drawing, since sending controlled data to an unverified recipient can itself be an export violation.
Generally no, not without specific export authorization, and that is the central sourcing constraint ITAR imposes. ITAR requires that defense articles and their technical data be handled by US persons and, absent a license, technical assistance agreement, or manufacturing license agreement, manufactured in the United States. Sending a controlled drawing to an offshore stamping shop, or even allowing a foreign-national employee at a domestic shop to access it, is an export that requires authorization, and unauthorized exports carry severe civil and criminal penalties. In practice this removes the low-cost offshore options buyers use for commercial stamping and confines the supplier pool to US-based, US-person-staffed shops. That naturally raises baseline pricing, and combined with the low volumes typical of defense work, it makes ITAR stamped parts considerably more expensive per piece than commercial equivalents. The right approach is to classify your part and its data against the US Munitions List before you source. If it is USML-controlled, build the ITAR check into supplier selection from the first quote, accept the domestic supplier pool, and do not chase offshore savings that create export-control liability dwarfing any cost reduction. If your part is not actually USML-controlled, you have more freedom, but make that determination through your export-control or compliance function, not by assumption.
Because ITAR almost always rides on top of AS9100 and often NADCAP, plan your timeline and budget like an aerospace stamping program with added compliance overhead. Tooling typically runs $5,000 to $200,000 depending on complexity, amortized over defense-typical quantities in the hundreds to low thousands, which drives a high per-piece cost. Expect an AS9102 First Article Inspection at $1,500 to $8,000 and a new-part timeline of roughly 12 to 24 weeks including tooling and qualification, extending further when NADCAP special processes sit in the routing. Controlled material with full traceability adds 6 to 16 week procurement lead times for aerospace alloys like 7075, titanium, and Inconel. The ITAR-specific overhead is mostly administrative and front-end: setting up secure data transfer, completing the supplier survey and NDA, and confirming US-person staffing and the technology control plan can add a week or two before any cutting starts, and shops bake their compliance infrastructure cost into their rates. Production releases off a qualified die typically run 6 to 12 weeks. Build in time for your own export-control classification of the part before sourcing, because that determination drives the entire supplier-selection path, and a misclassification discovered late can force a re-source and reset the schedule entirely.

Last updated: July 2026

Find ITAR-Certified Stamping Suppliers

Search verified stamping shops that hold ITAR.

No logins. No email gates. Just results.