To get ITAR certified, you register your company with the Directorate of Defense Trade Controls (DDTC) at the U.S. Department of State by submitting Form DS-2032 through the DECCS online portal, paying a $3,000 fee for first-time registrants, and waiting roughly 30 days for approval. One clarification before anything else: the process is formally called ITAR registration, not certification. There is no certificate or credential issued. You receive a registration code and an active status in DECCS, and that is what “ITAR certified” means in practice.
Do You Actually Need to Register?
The requirement is broader than many companies assume. Anyone in the United States who manufactures defense articles, exports them, temporarily imports them, or provides defense services must register with the DDTC. Even a single transaction triggers the obligation, and manufacturers must register even if they never plan to export.1eCFR. 22 CFR 122.1 – Registration: Requirements, Exemptions, and Purpose Brokers who arrange defense trade transactions register under a separate part of the regulations.2eCFR. 22 CFR Part 129 – Registration and Licensing of Brokers
What counts as a defense article or service is defined by the United States Munitions List (USML), which runs 21 categories covering firearms, ammunition, military electronics, spacecraft, related technical data, and much else.3eCFR. 22 CFR Part 121 – The United States Munitions List
Narrow Exemptions
A handful of situations are exempt from registration: U.S. government officers and employees acting in an official capacity; companies whose only relevant activity is producing unclassified technical data; entities whose manufacturing and exports are entirely licensed under the Atomic Energy Act; and people building defense articles solely for research and development. That last exemption has a catch. Even if it applies to you, you still cannot receive an export license without registering first.1eCFR. 22 CFR 122.1 – Registration: Requirements, Exemptions, and Purpose
ITAR or EAR?
Not every export-controlled product is ITAR-controlled. Dual-use items and commercial technologies fall under the Export Administration Regulations (EAR), administered by the Department of Commerce and listed on the Commerce Control List. ITAR covers items specifically designed for military applications, listed on the USML. If your product could plausibly sit under either regime, you can request a Commodity Jurisdiction Ruling from the State Department to settle which set of rules applies. When there is real ambiguity, getting that determination in writing is worth the effort, because guessing wrong means violations under whichever regime actually controls the item.
What to Gather Before You Apply
The registration itself centers on one document: the Statement of Registration, Form DS-2032. Assemble the information and files below before you open DECCS, because a half-finished application in a government portal is rarely a pleasant thing to return to.
Company and Personnel Information
You will need your company’s legal name, physical address, and Employer Identification Number. The form asks you to identify senior officers, board members, partners, and any foreign persons with ownership or control over the company. It also asks which USML categories apply to your business and whether you have any prior ITAR violation history. Getting the USML categories right matters — listing the wrong ones can cause processing delays and complications when you later apply for licenses.
Supporting Documents
New and renewing applicants submit documentation proving they are authorized to do business. For U.S. companies, that usually means state-level records such as articles of incorporation, articles of organization, partnership agreements, or a certificate of good standing.4U.S. Department of State. DS-2032 Instructions for Preparing and Submitting a Statement of Registration If your company sits inside a corporate family with parents, subsidiaries, or affiliates, you also submit an organizational chart showing all ownership layers up through the ultimate parent.5Reginfo.gov. DS-2032 Statement of Registration Instructions
The DS-2032 does not need to be notarized, but everything on it must be accurate. False statements on a registration can trigger criminal penalties.6U.S. Department of State. Registration FAQs – DECCS Industry Portal
An Empowered Official
Every registrant must designate at least one Empowered Official. This is a U.S. person directly employed by the company who has authority over policy or management, understands ITAR requirements and penalties, and can sign license applications on the company’s behalf. Regulations require that the Empowered Official have independent authority to investigate a proposed export, verify its legality, and refuse to sign off on a transaction without facing retaliation for doing so.7eCFR. 22 CFR 120.67 – Empowered Official
Choose carefully. Naming a person who lacks real authority or a genuine grasp of the rules is a common shortcut, and it produces compliance problems later.
The Registration Steps
1. Create a DECCS Account
All ITAR registration happens through the Defense Export Control and Compliance System (DECCS), the DDTC’s online portal at deccs.pmddtc.state.gov. Create a user account before you try to submit anything. If your company already holds an ITAR registration, keep your Registration Code handy during enrollment.
2. Complete and Submit the DS-2032
Fill out Form DS-2032 electronically in DECCS and upload your supporting documents. Review your USML categories one more time before submitting.
3. Wait for DDTC Review
Processing generally takes about 30 days from submission.8U.S. Department of State. FAQ Detail – DDTC Public Portal The DDTC either approves the application, requests more information, or denies it. Once approved, your Registration Dashboard in DECCS updates and you are assigned a registration code.
4. Pay the Fee
Approval triggers a payment notification. You then have 21 calendar days to log into DECCS and submit payment. If you miss that window, the DDTC returns the application without action, and you start the entire process over.9U.S. Department of State. DDTC Public Portal – Registration Payment
What It Costs
ITAR registration fees follow a three-tiered structure that took effect on January 9, 2025.10Federal Register. International Traffic in Arms Regulations: Registration Fees A “favorable determination” in the tier rules means the DDTC approved a license application or authorization request the company submitted.
- Tier 1, $3,000. All new registrants pay this. Renewing registrants also pay this if they received zero favorable license determinations from the DDTC in the 12-month period ending 90 days before their registration expires. Small entities can petition for a $500 discount, reducing the fee to $2,500, if $3,000 represents 1% or more of their total annual revenue.
- Tier 2, $4,000. Renewing registrants with one to five favorable determinations in that 12-month window.
- Tier 3, calculated. Renewing registrants with more than five favorable determinations. The formula is $4,000 plus $1,100 for each favorable determination above five. A company with 10 favorable determinations pays $4,000 + ($1,100 × 5) = $9,500.
Companies that register but never apply for export licenses stay at Tier 1 indefinitely.10Federal Register. International Traffic in Arms Regulations: Registration Fees
Registration Is Not a License
A common and expensive misconception: being registered does not authorize you to export anything. Registration is a prerequisite for obtaining export licenses, but you still need a separate license or other DDTC approval before each export, temporary import, or brokering transaction.11U.S. Department of State. Getting and Staying in Compliance with the ITAR
Registration also covers technical data. Sharing ITAR-controlled technical data with a foreign person inside the United States is treated as an export to that person’s home country, which means it too can require prior authorization.
Keeping Your Registration Active
Reporting Changes Within Five Days
ITAR registration is not a one-and-done filing. If key information changes, you must notify the DDTC in writing within five days. Reportable changes include company name, address, legal structure, ownership or control, board of directors or senior officers, and the acquisition or sale of a subsidiary involved in defense trade. Any intended sale or transfer of ownership or control to a foreign person requires 60 days’ advance notice to the DDTC by registered mail.12eCFR. 22 CFR 122.4 – Notification of Changes in Information Furnished by Registrants
Annual Renewal
ITAR registration expires after one year. Submit your renewal through DECCS at least 30 days before the expiration date, and no earlier than 60 days before it. The DDTC sends a courtesy reminder and notice of the fee due at least 60 days in advance. The renewal fee uses the same tiered structure. If your registration lapses and you continue performing defense-related work during the gap, you will owe back fees covering the entire unregistered period, on top of exposure for operating without a valid registration.13eCFR. 22 CFR 122.2 – Registration: Submission, Certification, Frequency, Renewal, and Lapse
Recordkeeping
Registered entities must maintain records of all defense trade activities for five years from the expiration of a license or approval, or from the date of the transaction if no license was involved. The DDTC can extend that retention period in individual cases.14eCFR. 22 CFR 122.5 – Maintenance of Records by Registrants
What Happens If You Get It Wrong
ITAR penalties are among the steepest in export control, and they can stack. The DDTC can impose civil fines of up to $1,271,078 per violation, or twice the value of the underlying transaction, whichever is greater.15eCFR. 22 CFR Part 127 – Violations and Penalties Willful violations of the Arms Export Control Act carry criminal fines of up to $1,000,000 per violation, imprisonment of up to 20 years, or both, and false statements on a registration or license application fall under this provision.16Office of the Law Revision Counsel. 22 USC 2778 – Control of Arms Exports and Imports A criminal conviction also triggers automatic statutory debarment, which blocks license applications and ITAR-regulated activity for at least three years, with reinstatement only by formal petition.
The practical takeaway for anyone starting the process: register before you do the activity, name an Empowered Official who can actually do the job, and treat renewal deadlines and change reports as the operational discipline they are.