Key Takeaways for Regulated CNC Machining
- Jurisdiction for a machined part depends on its technical parameters on the USML or CCL, not the buyer or end platform.
- ITAR applies exclusively when a part meets a positive-list technical parameter in any USML category. If not, the CCL is checked next.
- ITAR registration with DDTC is mandatory for shops that produce defense articles. EAR obligations are transaction-specific and do not require universal registration.
- Deemed export rules restrict foreign national access to ITAR technical data and hardware. EAR permits more flexible license exceptions for many dual-use items.
- Precision Advanced Manufacturing is an ITAR-registered, AS9100D and ISO 9001 certified CNC partner ready to support defense and dual-use programs. Begin the qualification process with a compliant supplier.
How ITAR and EAR Apply to Machined Parts
The controlling regulatory regime for any precision-machined component is either ITAR or EAR, based on the part’s characteristics. ITAR applies to defense articles, defense services and technical data on the USML under 22 CFR Parts 120–130. EAR applies to dual-use and certain less-sensitive military items on the CCL under 15 CFR Parts 730–774. The two regimes do not overlap. When ITAR applies, EAR does not govern that item.
Procurement teams sourcing CNC-machined components for defense or aerospace programs need more than program context to determine jurisdiction. Selling a machined part to a military customer does not automatically make it ITAR-controlled. Jurisdiction depends on whether the part meets a USML technical parameter, not the identity of the buyer.
Step-by-Step Jurisdiction Decisions for Machined Parts
The determination follows a specific sequence. The analysis starts with the 21 USML categories under 22 CFR Part 121. If the part meets a positive-list technical parameter, ITAR applies exclusively. If it does not appear on the USML, the next step is to check the CCL. If the part appears on neither list, it is designated EAR99 and subject only to the general EAR.
The “specially designed” test plays a central role in this analysis. A drawing or machined part is ITAR-controlled if the item is enumerated in any USML category or is specifically designed, developed, configured, adapted or modified for a USML article, even when the underlying item is a commercial-spec fastener.
Practical examples show how narrow these distinctions can be. A milled aluminum bracket that holds a wiring bundle inside a fighter jet’s avionics bay may be classified EAR99, while an avionics housing on the same machine could qualify as Significant Military Equipment under ITAR Category XI. In the space sector, launch vehicles, sounding rockets, rocket engines, guidance systems and re-entry vehicles are almost always subject to ITAR under USML Category IV. Many commercial satellite components now fall under EAR 600-series ECCNs.
When jurisdiction remains unclear after internal review, a formal Commodity Jurisdiction determination through DDTC’s DECCS system provides a binding ruling, regardless of internal matrices or industry practice. Once EAR jurisdiction is confirmed, a Commodity Classification (CCATS) request to BIS establishes the correct ECCN.
Precision Advanced Manufacturing’s engineering team collaborates with customers to identify applicable USML categories and CCL classifications before production begins. This approach reduces misclassification risk that can halt a program mid-run.
Registration and Classification Duties for Machine Shops
ITAR requires annual DDTC registration for manufacturers, exporters and brokers of defense articles or services under the Arms Export Control Act. A machine shop that produces ITAR-controlled parts must maintain active DDTC registration as a precondition of operation.
EAR has no universal registration requirement. Obligations are transaction-specific and depend on classification, destination, end user and end use. A shop that produces EAR-controlled parts must understand the ECCN of each item and apply the correct license determination for each transaction. The shop does not register with BIS in the same way ITAR registrants register with DDTC.
Precision Advanced Manufacturing holds active ITAR registration with DDTC and operates under AS9100D and ISO 9001 certified quality management systems. Those credentials are available for verification at the quoting stage.
Verify our ITAR registration and AS9100D certification when requesting a quote.
Managing Foreign National Access and Deemed Exports
The deemed export concept shapes daily compliance decisions for CNC shops. Under ITAR, 22 CFR Section 120.17 defines export to include disclosing technical data to a foreign person, which has the effect of a deemed export even though ITAR does not use that term. This applies whether the person is in the United States or abroad.
This distinction has direct consequences on the shop floor. Showing ITAR-controlled hardware or discussing related technical information with a foreign person in the United States triggers export-control requirements. These rules affect shop-floor conversations, visual access and CAD file handling in CNC machining environments.
EAR applies more flexible rules to deemed exports. EAR allows license exceptions such as TSU (technology and software unrestricted) for certain dual-use items, while ITAR maintains strict authorization requirements with no equivalent broad exceptions for foreign national access. Additionally, under EAR, a foreign person can generally access and operate equipment identified on the CCL, even though the release of related technology or source code to that person would be a deemed export.
For ITAR programs, Precision Advanced Manufacturing restricts access to controlled technical data, drawings and hardware to U.S. persons only. These controls align with DDTC requirements and the company’s Technology Control Plan.
Protecting Technical Data and Controlling Shop-Floor Access
CAD files, CNC program data and engineering drawings qualify as technical data under both regimes. ITAR compliance requires Technology Control Plans to manage access to controlled technical data such as blueprints, drawings, plans and specifications, using procedural and physical controls to govern who can view or discuss the information.
Digital storage and transmission of ITAR technical data involve specific safeguards. Under the ITAR encryption carve-out in 22 CFR § 120.54(a)(5), storing or transmitting unclassified ITAR technical data over the internet or in commercial cloud environments is not considered an export when four conditions are met: the data is unclassified, end-to-end encryption is applied, the encryption meets FIPS 140-2 standards and decryption keys are not provided to any foreign person.
TLS alone and server-side encryption where the cloud provider holds the keys do not satisfy the 22 CFR § 120.54 carve-out. A compliant program uses client-side encryption with customer-held keys and immutable audit logs of all access events.
Effective ITAR and EAR compliance programs tag technical data, source code, drawings and controlled documentation at creation, then restrict access by role, location, citizenship where required and business need. Machine shops that handle both ITAR and EAR programs maintain separate access controls for each classification rather than a single blanket policy.
Precision Advanced Manufacturing’s quality systems include documented access controls, personnel screening and data handling procedures aligned to ITAR requirements. These controls apply from the quoting stage through final delivery and documentation.
Qualifying a CNC Supplier at the Quoting Stage
Supplier qualification for regulated programs starts before a purchase order is issued. Procurement and supplier quality teams should request the following documentation at the quoting stage:
- Active DDTC registration certificate for ITAR programs, with registration number and expiration date
- AS9100D and ISO 9001 certificates with scope statements confirming applicability to the part type
- A Technology Control Plan or equivalent written procedure governing access to controlled technical data
- Evidence of a formal export classification process, including use of CJ or CCATS determinations where applicable
- Material traceability and inspection documentation from prior programs of comparable complexity
Several red flags signal supplier risk. These include shops that cannot produce a current DDTC registration for ITAR work, shops that conflate ITAR and EAR obligations and shops that lack written procedures for foreign national access or CAD file handling. The April 2026 GE Aerospace settlement shows that failures to establish proper jurisdiction and classification before technical data moves through the supply chain create significant financial and operational consequences.
Targeted compliance questions strengthen qualification. Key topics include how the shop classifies parts at intake, who holds responsibility for export control determinations and how the team handles a part whose jurisdiction is unclear. A shop that cannot answer these questions with documented procedures represents program risk.
Start supplier qualification and receive documentation of Precision Advanced Manufacturing’s ITAR registration, AS9100D certification and compliance procedures at the outset.
Addressing Cost, Schedule and Traceability Concerns
Procurement teams often compare ITAR-registered, AS9100D-certified machining to standard commercial machining on unit price alone. The relevant comparison is total program cost. When parts arrive out of spec, require rework or trigger a compliance review, downstream costs often exceed any initial price savings. Precision Advanced Manufacturing’s certified processes aim to produce parts correctly the first time, which reduces rework and compliance risk that non-certified suppliers frequently create.
Program managers also weigh schedule performance. Precision Advanced Manufacturing operates multi-shift production across facilities in California and Texas, with a scalable platform that supports both prototype and full-rate production without supplier changes. Integrating machining, fabrication, finishing and kitting under one roof reduces handoff delays between vendors.
Beyond schedule performance, supplier quality engineers require full traceability for regulated programs. Every component produced by Precision Advanced Manufacturing is backed by material certifications, in-process inspection records and final documentation aligned to AS9100D requirements. That documentation package is available at delivery.
Programs that transition from an existing supplier benefit from a structured changeover. Precision Advanced Manufacturing supports pilot builds and validation runs to establish continuity before full-rate production begins. This approach reduces integration risk during the transition period.
Frequently Asked Questions
What determines whether a machined part is ITAR or EAR?
Jurisdiction is determined by the part’s technical characteristics, not by the customer’s identity or the platform it supports. The classification follows the USML-to-CCL-to-EAR99 sequence described earlier. The “specially designed” test determines whether a commercial component falls under ITAR control. When jurisdiction is genuinely unclear, a formal Commodity Jurisdiction determination from DDTC provides a binding ruling. Precision Advanced Manufacturing works with customers to identify the applicable classification before production begins.
Does ITAR registration increase lead time or cost?
ITAR registration is a precondition for legally producing or handling defense articles. It is not an optional premium. As noted earlier, DDTC registration is legally required before accepting any ITAR work. The compliance infrastructure that accompanies ITAR registration supports process discipline that can reduce rework, misclassification risk and program delays. Precision Advanced Manufacturing’s ITAR-registered, AS9100D-certified operations are structured to deliver mission-critical components on schedule with full documentation at delivery.
Can foreign nationals work on EAR-controlled CNC programs?
The answer depends on the specific ECCN, the foreign national’s country of nationality and the applicable license exceptions. Under EAR, a foreign national can generally operate CCL-listed equipment, but releasing related technology or source code, including CAD files, process instructions or engineering drawings, to that person constitutes a deemed export to the person’s country of nationality. License exceptions such as TSU may apply to certain dual-use items, but each situation requires a specific analysis. Under ITAR, no equivalent broad exception exists. Access to ITAR-controlled technical data or hardware by a foreign national requires prior authorization from DDTC. Nationality, not visa status, governs this determination for both regimes.
What 2026 enforcement actions affect precision machining suppliers?
Several 2026 enforcement actions carry direct lessons for precision machining supply chains. In April 2026, DDTC concluded a $36 million settlement with GE Aerospace covering 116 ITAR violations that included misclassification of specially designed parts and unauthorized exports of technical data on military aircraft engines. In February 2026, BIS announced a $252.5 million settlement with Applied Materials for re-exporting semiconductor manufacturing equipment to restricted Chinese entities without required licenses, the second-highest BIS stand-alone penalty on record. In July 2026, DDTC announced the statutory debarment of 14 persons for violating the Arms Export Control Act, prohibiting them from participating in any ITAR-controlled activities. Additionally, Executive Order 14415, issued July 20, 2026, requires defense contractors and subcontractors at every tier to submit complete Bills of Materials tracing all components to raw material origins and to conduct supply chain risk assessments screening for foreign ownership, control or influence. These actions signal sustained, cross-agency enforcement that reaches into the supplier base, not just prime contractors.
Conclusion: Choosing a CNC Partner for ITAR and EAR Programs
The decision framework for qualifying a CNC supplier on ITAR or EAR programs follows a consistent sequence. Teams confirm jurisdiction per part using USML and CCL criteria, verify the supplier’s DDTC registration status for ITAR work, assess deemed export controls and the Technology Control Plan and review traceability and documentation practices before the first purchase order.
Precision Advanced Manufacturing is ITAR-registered, AS9100D and ISO 9001 certified and operates multi-axis CNC machining and precision fabrication capabilities across facilities in California and Texas. The company’s quality systems, access controls and engineering support are structured for defense, aerospace, space and dual-use programs where compliance failures create nonrecoverable impacts.
Program managers, procurement teams and supplier quality engineers working on regulated programs can engage Precision Advanced Manufacturing at the quoting stage to receive documentation of certifications, compliance procedures and production capabilities before committing to a supplier relationship.
Begin the qualification process with a verified ITAR-registered, AS9100D-certified precision machining partner.
