Account Management

Becoming ITAR Registered

What is ITAR?

There is high demand in the Xometry Marketplace for manufacturing work supporting defense prime contractors, government agencies, and commercial aerospace firms. Much of this work falls under International Traffic in Arms Regulations (ITAR)—the U.S. government rules governing the manufacture and export of defense-related goods, services, and technical data. To protect national security, the U.S. government requires manufacturers producing defense items to register with the Directorate of Defense Trade Controls (DDTC) before accessing restricted project files or components. For full regulatory details and current rules, always refer directly to official U.S. Department of State guidance here.

Benefits of ITAR Registration

Exclusive Job Access: View and take on high-value defense and aerospace work that is off-limits to standard shops.
Reduced Competition: Capitalize on smaller bidding pools due to strict regulatory entry barriers.
Higher Margin Potential: Tap into complex work orders that typically command premium pricing.
Marketplace Advantage: Stand out as a compliant, top-tier manufacturing partner.

Getting Registered

Registering for ITAR is an official administrative process handled directly through the U.S. Department of State's DDTC portal. Before submitting any documentation, always consult the official DDTC website for the most up-to-date filing instructions.

Read the DDTC’s Official Guide (June 2026) Here →

Visit the Official Source: Access the DDTC Public Portal to review current registration guidelines and requirements.
Submit the Application: Complete the official business registration documentation in the Defense Export Control and Compliance System (DECCS), detailing your facility, ownership, and manufacturing scope.
Pay the Registration Fee: Submit the required annual processing fee directly to the U.S. Department of State.
Receive Confirmation: Once approved, the DDTC issues official confirmation documentation containing your registration details and unique code.
Renew Annually: ITAR registration is valid for 1 year. You will need to plan for annual renewal. Prepare for renewal in advance to avoid any disruption in your ability to fulfill ITAR POs.

ℹ️Application Tip: An organizational chart is mandatory if your registration lists any subsidiaries, affiliates, or a parent company. Omitting it will delay your application process with the DDTC.

Unlock ITAR Work with Xometry

Once your DDTC registration is active, submit your verification details via Workcenter. See the Configuring Your Shop’s Capabilities article for further instruction. After Xometry verifies your registration, your account will automatically gain access to ITAR-designated work available in the Marketplace.

Financial Assistance: Financial support may be offered on a case-by-case basis. To explore partial or full ITAR sponsorship, please email partnermanagementteam@xometry.com.

Key Terms

USML (United States Munitions List): The official government index listing the categories of defense articles, services, and technology subject to ITAR rules.
U.S. Person: Under ITAR regulations, this generally refers to U.S. citizens, lawful permanent residents (green card holders), or protected individuals.
Technical Data: Blueprints, CAD files, or technical specifications tied to controlled defense items. Sharing controlled technical data with non-qualified individuals—even inside your own shop—can constitute a compliance violation.
Security Practices: ITAR compliance involves securing digital files with appropriate encryption and controlling physical access to your shop floor while ITAR parts are in production.

(Note: Always consult official DDTC guidelines for exact, up-to-date legal definitions and requirements.)

Top Requirements to Maintain Compliance

Read the DDTC’s Guide to Getting and Staying in Compliance with the ITAR →

Active DDTC Registration: Maintain active registration with the U.S. Department of State and complete mandatory annual renewals on time.
Workforce Access & Verification: Limit exposure to ITAR technical data, blueprints, and physical parts exclusively to verified U.S. Persons, unless explicit government export authorization is granted.
Digital & Physical Security: Secure digital project files with encrypted storage and role-based access controls while enforcing physical shop-floor safeguards—such as visitor logs and restricted work cells—during production.
Thorough Recordkeeping: Retain complete, auditable records of all ITAR job travelers, technical data disclosures, visitor logs, and authorizations for the standard five-year retention period.
Documented Compliance Management: Establish clear internal procedures for handling sensitive files, conduct regular staff training, and regularly defer to official DDTC guidelines to keep operations aligned with current regulations.

NIST 800-171 and CMMC

Beyond ITAR itself, customers increasingly expect Xometry to validate Partners' cybersecurity posture — especially as CMMC requirements approach. Here's a brief overview:

NIST 800-171 is a set of cybersecurity guidelines for contractors handling Controlled Unclassified Information (CUI) — which for Xometry most often applies to export-controlled jobs, including those subject to ITAR and EAR.
ITAR-registered Partners are being asked to attest to compliance with DFARS 7012, 7019, and 7020, which require self-assessing against NIST 800-171 and reporting the score to the government via the Supplier Performance Risk System (SPRS).
Unmet controls are common and don't block attestation. Partners should document any gaps in a Plan of Action (POA) and show ongoing progress toward remediation.
CMMC Level 2 covers essentially the same controls as NIST 800-171, but requires a third-party audit rather than self-attestation, and requires all controls to be met. CMMC is being phased in over three years and is not expected to have an immediate impact on ITAR-registered Partners.
For help with your self-assessment or remediation, your local Manufacturing Extension Partnership (MEP) is a good starting point.

For the full FAQ, including scoring tools and a walkthrough video, see this announcement.

Frequently Asked Questions

Does ITAR registration guarantee job awards?
No. Registration makes your shop eligible to view and accept ITAR jobs in the Marketplace, but job selection still depends on your shop's available machinery, capacity, and performance metrics.

How long does the DDTC registration process take?
Processing times vary depending on government agency workloads. Refer directly to the official DDTC portal for current processing estimates.

Can non-U.S. person employees work on ITAR jobs in my shop?
Generally, ITAR limits access to controlled technical data and physical parts to qualified U.S. persons unless a specific government license or exception applies. Refer to official State Department rules to evaluate your workforce.

How often do I need to renew my registration?
ITAR registration requires renewal through the DDTC annually. Keep your documentation current to maintain uninterrupted access to ITAR jobs in the Xometry Marketplace.