🛡️ ITAR
ITAR-Registered Welding & Fabrication for Defense Hardware
If your weldment is a defense article, the controlling factor is not metallurgy but export law: who is allowed to touch the drawing, where the work can physically happen, and which government office the fabricator is registered with. ITAR registration is a compliance status, not a quality mark, and understanding exactly what it does and does not guarantee is the difference between a clean defense supply chain and an export violation.
ITARAS9100NADCAP
What ITAR Registration Actually Means for a Weld Shop
ITAR, the International Traffic in Arms Regulations codified at 22 CFR 120 to 130, is administered by the Directorate of Defense Trade Controls within the State Department. A fabricator that manufactures or exports defense articles on the United States Munitions List must register with DDTC under 22 CFR 122 and pay an annual fee, currently tiered starting around 3,000 USD. That registration is what people mean by ITAR-registered. It is a legal prerequisite to handle USML hardware and technical data; it is emphatically not a statement about weld quality, which is why ITAR is almost always paired with AS9100 and frequently NADCAP for actual defense welding work.
The critical operational reality is technical-data control. The drawings, WPS, models, and specifications for a USML weldment are ITAR-controlled technical data under 22 CFR 120.10. An export occurs not only when hardware crosses a border but when that data is disclosed to a foreign person, including a foreign-national employee inside a U.S. facility, which is a deemed export under the rules. So an ITAR-compliant weld shop must control who can view drawings, segregate ITAR data on its network, and ensure that welders and engineers touching the work are U.S. persons unless a specific license or exemption applies.
Registration alone does not authorize exports; that requires a license or qualifying exemption. A registered shop that ships a defense weldment abroad without authorization is still in violation.
Determining Whether Your Weldment Is Even on the USML
Before chasing ITAR-registered suppliers, confirm your part is actually ITAR-controlled, because misclassification cuts both ways and both directions carry risk. The United States Munitions List in 22 CFR 121 enumerates 21 categories; welded defense hardware commonly lands in Category VIII (aircraft and related articles), Category IV (launch vehicles and missiles), Category I or II (firearms and guns, post-2020 many moved to the Commerce list), and others. The classification is driven by the end item and its specially designed status, not by the welding process.
Many parts that feel military are actually controlled under the Export Administration Regulations on the Commerce Control List instead, especially since the Export Control Reform effort moved numerous parts and components from the USML to EAR 600-series classifications. If your weldment is EAR-controlled rather than ITAR, you need a supplier compliant with EAR, not necessarily DDTC-registered, and the flow-down obligations differ. The authoritative way to resolve this is a Commodity Jurisdiction request to DDTC when ambiguous, or working from the prime's classification. Getting this right matters because over-controlling wastes money and time while under-controlling exposes you to civil penalties that can exceed a million dollars per violation and criminal liability.
Verifying Registration and Building a Compliant Flow-Down
ITAR registration status is not publicly searchable the way an ISO certificate registry is, so verification works differently. Ask the supplier for their DDTC registration code and confirm the registration is current; the registrant must renew annually and the code appears on their license applications and agreements. Reputable defense fabricators will state their registration code and describe their empowered official, their technology control plan, and how they segregate ITAR data. A shop that cannot articulate its technology control plan or name its empowered official is a red flag regardless of what it claims on its website.
For your purchase order, the flow-down must be explicit: state that the items or data are ITAR-controlled, cite the USML category if known, prohibit access by non-U.S. persons absent authorization, prohibit unauthorized re-export or transfer, and require the supplier to flow these same restrictions to any sub-tier source it uses for welding, NDT, or finishing. Confirm the supplier holds U.S.-person welders and engineers for the work, that any cloud storage of technical data meets the relevant controls, and that visitor and remote-access controls are real. Because welding is often subcontracted, the sub-tier exposure is where many defense supply chains quietly leak ITAR data.
Records and the Penalty Landscape
ITAR imposes recordkeeping obligations under 22 CFR 122.5, requiring registrants to maintain records of defense-article manufacturing and related transactions for five years and to make them available to DDTC. For a weldment that means the shop should retain the controlled drawings and revisions, the manufacturing records, any license or exemption used, and evidence of U.S.-person handling and access controls. As a buyer you should expect a certificate of conformity and, where you have specified them, the quality records from the AS9100 and NADCAP systems that govern the actual weld, since ITAR itself produces no quality documentation.
The stakes justify the rigor. Civil penalties under the Arms Export Control Act can reach into the millions per violation, criminal penalties include substantial fines and imprisonment, and DDTC can impose debarment that removes a company from defense trade entirely. Enforcement actions against manufacturers for unauthorized disclosure of technical data to foreign-national employees are well documented. For the buyer, the practical takeaway is to treat ITAR as a shared-liability relationship: your compliance depends on your supplier's compliance, so verify, flow down explicitly, and document the trail.
Frequently Asked Questions
No, and the distinction is important. There is no such thing as ITAR certification; no government body or registrar issues an ITAR certificate the way ANAB-accredited bodies issue ISO 9001. ITAR registration is a specific act: a manufacturer or exporter of defense articles registers with the Directorate of Defense Trade Controls under 22 CFR 122 and pays an annual fee. Registration is a legal prerequisite to handle United States Munitions List hardware and technical data, but it does not by itself authorize any export, prove weld quality, or guarantee the shop is actually compliant in practice. ITAR compliance is the broader, ongoing state of obeying all the regulations: controlling technical data, restricting access to U.S. persons, obtaining licenses or exemptions before exporting, maintaining records, and flowing requirements to sub-tier suppliers. When a fabricator says it is ITAR-registered, ask to see evidence of compliance infrastructure too, including a technology control plan and a named empowered official, because registration without genuine compliance is a violation waiting to happen.
Generally not without specific authorization, and this is one of the most common ways defense supply chains fall into violation. Under ITAR, disclosing controlled technical data to a foreign person counts as an export even if it happens entirely inside the United States; this is called a deemed export. Technical data includes the drawings, models, welding procedure specifications, and any information required to manufacture a defense article. So allowing a foreign-national welder, engineer, or inspector to view the controlled drawing or instructions is treated as exporting that data to their home country, which requires a license such as a DSP-5 or a qualifying exemption. A compliant fabricator restricts ITAR work to U.S. persons, defined to include citizens, lawful permanent residents, and certain protected individuals, unless it holds the appropriate authorization. When sourcing, confirm the supplier's technology control plan addresses personnel screening and that the specific people touching your weldment qualify. The same applies to remote access, cloud storage, and visitors, so verify the controls are comprehensive.
Unlike ISO certifications, ITAR registration is not posted in a public registry you can search, so verification is relationship-based. Ask the supplier directly for their DDTC registration code, which is the identifier assigned upon registration and appears on their license applications and technical assistance agreements. Confirm the registration is current, since it must be renewed annually with a fee. Beyond the code, evaluate compliance maturity: a serious defense fabricator can name its empowered official, describe its technology control plan, explain how it segregates ITAR technical data on its network and storage, and describe its U.S.-person screening for welders and engineers. Ask how it handles sub-tier suppliers for welding, NDT, or finishing, since that is where data frequently leaks. For high-value or sensitive programs, conduct a supplier audit and put ITAR flow-down language directly into your purchase order citing the USML category, prohibiting non-U.S.-person access, and barring unauthorized re-export. A supplier that cannot speak fluently to these controls should not be handling defense articles.
That is increasingly common and changes your supplier requirements. The Export Control Reform initiative moved many parts and components off the United States Munitions List onto the Commerce Control List administered under the Export Administration Regulations, often into the 600-series classifications that cover military items of a more commercial character. If your weldment is EAR-controlled rather than ITAR-controlled, you do not necessarily need a DDTC-registered fabricator; you need a supplier that complies with the EAR, screens for restricted parties, and observes the licensing rules tied to the specific Export Control Classification Number and destination. The control logic differs: EAR licensing often hinges on destination country and end use rather than the blanket controls ITAR applies to all foreign persons. Resolving which regime applies is critical because over-controlling an EAR part as if it were ITAR wastes time and money, while treating an ITAR article as EAR is a serious violation. When the classification is ambiguous, use a Commodity Jurisdiction request to DDTC or rely on the prime contractor's documented determination, and flow the correct regime down to your supplier.
Last updated: July 2026
Find ITAR-Certified Welding & Fabrication Suppliers
Search verified welding & fabrication shops that hold ITAR.
No logins. No email gates. Just results.