What is ITAR?

The International Traffic in Arms Regulations — the U.S. rules controlling defense articles, defense services, and the technical data behind them.

Last Reviewed: 2026-06-01Plain-English reference · not legal advice

Plain-English Summary

ITAR (the International Traffic in Arms Regulations) is the body of U.S. law that controls military and defense-related items, the services to support them, and the technical data needed to design, build, or use them. It is administered by the State Department's Directorate of Defense Trade Controls (DDTC). If something appears on the U.S. Munitions List, it is ITAR-controlled, and sharing it — including sharing technical data with a foreign person — is regulated.

Why This Matters

A facility that handles ITAR-controlled items or technical data carries real legal obligations: who may access the technology, who must be escorted, what gets recorded, and what requires a government license. For visitor management, ITAR is the reason foreign-national access is a controlled event rather than a routine sign-in. Violations carry steep civil and criminal penalties and can lead to debarment from defense work, so getting access control right at the door matters.

Explanation Depth

Concept Explanation

ITAR is the set of U.S. rules for military and defense technology. If a product or piece of information is on the government's "U.S. Munitions List," ITAR controls who can have it and who can even see the technical details. A big part of ITAR is that you cannot share controlled technical data with a foreign national without permission — even inside the U.S. That is why an ITAR facility is careful about which visitors go where. The penalties for getting it wrong are severe, so these sites take access control seriously.

When You'll See This in SecurePoint

SecurePoint Visitor supports ITAR-facility access control by capturing U.S.-person / foreign-national status at check-in, enforcing escort and restricted-area rules, screening parties against restricted-party lists, and producing a time-stamped, tamper-evident record of who entered and who escorted them. SecurePoint does not classify items or issue export determinations; it captures the facts and enforces the customer's export-control policy.

What You Should Do Next

Know whether your facility handles ITAR-controlled articles or technical data, and where that data lives or is visible. Apply U.S.-person / foreign-national status checks and escort rules to anyone entering those areas, and keep records of access and screening. For classification questions (is this item or data ITAR-controlled?) or licensing, work with your export-control officer or qualified counsel — these determinations are consequential and should not be guessed.

What Can Go Wrong

Treating ITAR as "someone else's job" is the trap. Common failures include letting an unescorted foreign national into an area with controlled drawings or hardware, assuming a U.S.-based subsidiary or employee is automatically a U.S. person, or relying on EAR-style "low-value" exceptions that do not exist under ITAR. Because ITAR is stricter than the commercial export rules (the EAR), when it is unclear which applies, the safe move is to control access and seek expert classification.

Sources & References

Related Terms

Need structured workflow compliance?

SecurePoint USA builds these checks, watchlists, approvals, and immutable logs directly into your daily operations.

Talk to SecurePoint

Legal Disclaimer

This glossary entry is provided for educational and informational purposes only and does not constitute legal advice. SecurePoint USA is not a law firm, does not provide legal representation, and this system is not a replacement for qualified sanctions or export control counsel. While we strive to present accurate, up-to-date summaries of regulatory terms, regulations are complex and subject to change. Always consult with your institution's legal team or a certified compliance professional before making legal or operational determinations.