Aerospace Suppliers

What arrives

ITAR registration
22 CFR 122.1. Registration with the Directorate of Defense Trade Controls for any person in the business of manufacturing or exporting defense articles.
Source
The encryption carve-out
22 CFR 120.54(a)(5). Unclassified technical data sent or stored with end-to-end encryption, using FIPS 140-2 or successor modules, is not an export.
Source
7012
DFARS 252.204-7012. Safeguarding covered defense information on contractor systems, and reporting a cyber incident to DoD within 72 hours of discovery.
Source
CMMC, or 7021
32 CFR Part 170 and DFARS 252.204-7021. Phase 1 began November 10, 2025, the effective date of the 48 CFR rule; Phase 2 begins one calendar year later.
Source
A laser cutting head throwing a fan of sparks across a metal sheet.

Request an Introduction