ITAR / EAR and the DD Form 2345

Export control is the first compliance wall most defense startups hit — often just to download topic attachments.

ITAR vs. EAR in one minute

ITAR (State Department / DDTC) governs defense articles and services on the U.S. Munitions List. EAR (Commerce / BIS) governs dual-use items on the Commerce Control List. If you manufacture or export defense articles — even without exporting anything — ITAR registration with DDTC is required.

1. 1Determine jurisdiction — is your tech USML (ITAR) or CCL (EAR)? When unsure, file a Commodity Jurisdiction request with DDTC
2. 2Register with DDTC if ITAR applies — Statement of Registration (DS-2032) through the DECCS portal; annual fee applies pmddtc.state.gov
3. 3Build an export-control program — technology control plan, employee training, foreign-person access controls

DD Form 2345 — Militarily Critical Technical Data Agreement (JCP)

The Joint Certification Program (JCP) certification lets a U.S. or Canadian contractor receive export-controlled unclassified technical data from the DoW. Many DSIP topics require it before you can open the technical package.

1. 1Complete DLA's export-control training — "Introduction to Proper Handling of DoD Export-Controlled Technical Data" — mandatory prerequisite
2. 2Download the DD 2345 official form (PDF)
3. 3Fill it out typed, not handwritten — follow DLA's line-by-line instructions DLA instructions (PDF)
4. 4Email the signed PDF to JCP-ADMIN@dla.mil — U.S. firms no longer need supporting legitimacy docs (Canadian firms do)
5. 5Renew every 5 years — send the renewal at least 60 days before expiration