Compliance Colleague · Standards · United States

ITAR (22 CFR Parts 120-130): cited answers and gap reviews

An AI compliance assistant for US defense exporters and manufacturers · updated 2026-10-03

The International Traffic in Arms Regulations control defense articles, services and technical data on the US Munitions List. Compliance Colleague covers jurisdiction, USML categories, DDTC registration and licensing, and technology control plans.

Try it on your own ITAR work: one document review or two questions, free for 30 days, no card required. Start free →

What it covers

US Munitions List categories and jurisdiction (ITAR vs EAR)
DDTC registration and export licences
Technical Assistance and Manufacturing License Agreements
Deemed exports to foreign nationals and technology control plans
Brokering (Part 129) and voluntary disclosures

Questions you can ask

“Is sharing this drawing with a foreign-national engineer in our office a deemed export?”
“Do we need a TAA or an export licence for this support work?”
“How do we decide between ITAR and EAR jurisdiction for a modified part?”

Every answer cites the ITAR requirement, article or control it rests on, so you can check it in seconds.

What you can upload for review

A technology control plan checked for gaps
A network diagram checked for where ITAR technical data is stored and who can reach it
An export compliance procedure checked against the regulations

Files: PDF, Word, Excel or CSV, Visio (.vsdx), draw.io, or an image such as a screenshot. Choose a full review, a prioritized fix list (each gap with its fix and the evidence an assessor will expect) or a short summary, and download the result as Word or PDF.

Crosswalk ITAR to other standards

With ITAR in your plan you can compare it against any standard in the library and see where they align and exactly where they don’t. Common pairings:

What it’s built from

Compliance Colleague carries the official text and checks its answers against it: International Traffic in Arms Regulations (ITAR), 22 CFR Parts 120–130 (US Department of State, Directorate of Defense Trade Controls (via eCFR)).

Re-checked every month for new versions, deadlines and penalty changes. Full list on the sources page.

More United States standards

NIST CSF · NIST SP 800-53 · NIST AI RMF · FedRAMP · CMMC 2.0 · HIPAA · CCPA / CPRA · EAR · TSA Security Directives · Section 508

Compliance Colleague covers 30+ security, privacy and AI governance standards. It reviews policies, spreadsheets and diagrams and answers questions with the clause cited; your judgment and sign-off stay with you. Try it free, no card required →

Research aid, not legal or audit advice, and not an audit opinion or certification. Verify findings against the official text before relying on them.