Home
cd ../playbooks
Legal & ComplianceAdvanced

ITAR Compliance Advisor

Navigate ITAR (22 CFR 120-130) — USML jurisdiction, DDTC registration, export licenses (DSP-5/73/94), TAAs/MLAs, brokering, deemed exports, technology control plans, and voluntary disclosures.

10 minutes
By SushegaadSource
#ITAR#export-control#USML#DDTC#defense#compliance

ITAR violations carry criminal penalties and multi-million-dollar fines per occurrence — and a foreign national reading a controlled drawing can be an unlicensed "deemed export." Getting USML jurisdiction and licensing right is not optional for defense work.

Who it's for: US defense contractors, exporters, and manufacturers, export-control and trade-compliance officers, engineering teams handling technical data on a USML item, companies determining ITAR vs. EAR jurisdiction, teams building a Technology Control Plan

Example

"Is our product ITAR-controlled, and what license do we need to share technical data with a foreign supplier?" → A jurisdiction determination, USML category scoping, the right license/agreement path, and a deemed-export and TCP plan

CLAUDE.md Template

New here? 3-minute setup guide → | Already set up? Copy the template below.

# ITAR Compliance Skill

You are an expert ITAR (International Traffic in Arms Regulations) compliance advisor with deep knowledge of 22 CFR Parts 120–130, DDTC regulatory practice, and US defense export control law. You assist exporters, manufacturers, legal counsel, and compliance teams navigate ITAR registration, classification, licensing, agreements, and enforcement.


## How to Respond

Match output format to task type:

| Task | Output Format |
|------|--------------|
| Jurisdiction / classification | Structured analysis: article description → USML test → EAR fallback |

Get new playbooks like this one

One email a week with new Claude Code workflows. Free, like everything here.

No spam. Unsubscribe anytime.

README.md

What This Does

Turns Claude Code into an ITAR compliance advisor for US defense contractors, exporters, and manufacturers. It covers 22 CFR Parts 120-130: United States Munitions List (USML) scoping, DDTC registration, export license applications (DSP-5/73/94), Technical Assistance Agreements (TAA), Manufacturing License Agreements (MLA), brokering (Part 129), deemed-export rules for foreign nationals, technology control plans, voluntary disclosures, violation mitigation, and ITAR-vs-EAR jurisdiction determination.


The Problem

ITAR jurisdiction is unforgiving: classify an item or its technical data wrong and you can commit a criminal violation simply by emailing a drawing or letting a foreign-national employee read it. The license and agreement landscape (DSP-5, TAA, MLA, brokering) is intricate, and deemed-export rules trip up companies that never thought of themselves as "exporters."


Quick Start

Step 1: Create Your Workspace

mkdir -p ~/Documents/ITAR-Compliance

Step 2: Download the Template

mv ~/Downloads/CLAUDE.md ~/Documents/ITAR-Compliance/

Step 3: Add Context (Optional)

Add product specs, technical-data descriptions, supplier/customer locations, and personnel nationalities.

Step 4: Run Claude Code

cd ~/Documents/ITAR-Compliance
claude

Step 5: Start

Say: "Determine whether our product is ITAR-controlled and scope the USML category."


Example Commands

"Is this item ITAR or EAR? Walk the order of review."
"Scope the USML category for our product and its technical data"
"Do we need to register with DDTC, and how?"
"Which license applies — DSP-5, TAA, or MLA?"
"Assess deemed-export risk for our foreign-national engineers"
"Draft a Technology Control Plan outline"
"How do we file a voluntary disclosure and mitigate a violation?"

What You Get

Output Contents
Jurisdiction Determination ITAR vs. EAR order-of-review analysis
USML Scoping Category and paragraph mapping
Licensing Path DSP-5 / TAA / MLA / brokering guidance
Deemed-Export Plan Foreign-national access controls and TCP outline
Disclosure Strategy Voluntary disclosure and mitigation steps

Tips

  • Start with jurisdiction — ITAR vs. EAR drives everything downstream.
  • Treat technical data like the hardware — emails, drawings, and source can all be exports.
  • Manage deemed exports — foreign-national access often needs a license.

Important Disclaimer

This is a compliance support tool, not legal advice. ITAR violations carry severe civil and criminal penalties. Have qualified export-control counsel review jurisdiction and licensing determinations before acting.

$Related Playbooks

Legal & Compliance

GDPR Privacy Expert

Run GDPR compliance assessments, generate DPIAs, map data processing activities, build breach protocols, and create privacy policies with consent frameworks.

10 minutes
Intermediate
Legal & Compliance

Immigration Document Tracker

Track complex immigration cases with deadline management, document checklists, and status updates for visa processes.

10 minutes
Intermediate
Legal & Compliance

Legal Memo Drafting Assistant

Draft structured, objective IRAC-format legal memoranda — question presented, brief answer, statement of facts, IRAC discussion, and a practical recommendation.

10 minutes
Intermediate
Legal & Compliance

LGPD (Brazil) Compliance Advisor

Run LGPD gap assessments, choose legal bases, handle sensitive data and data-subject rights, plan DPO appointment and ANPD breach notification, and draft Brazilian privacy policies and DPIAs.

10 minutes
Intermediate
Legal & Compliance

Legal Response Generator

Generate responses to legal inquiries including DSR, litigation hold, vendor, NDA, and subpoena

10 minutes
Advanced
Legal & Compliance

Legal Risk Assessor

Severity-by-likelihood risk framework with color-coded classification and mitigation plans

10 minutes
Intermediate
Legal & Compliance

Legal Team Briefing

Legal team briefings covering daily updates, topic deep-dives, or incident response

10 minutes
Intermediate
Legal & Compliance

Legal Advisor

Contract analysis, compliance guidance, legal risk assessment, terms of service review, NDA review, IP protection guidance, and regulatory requirement summaries.

10 minutes
Intermediate
Legal & Compliance

NDA Agreement Generator

Generate professional Non-Disclosure Agreements for investors, contractors, and partnership discussions.

10 minutes
Intermediate
Legal & Compliance

Signature Request Router

Prepare and route documents for e-signature with proper approval workflows

10 minutes
Intermediate
Legal & Compliance

Unbroker: Remove Your Data From Broker Sites

A consent-gated privacy workflow that maps where your personal data is exposed across people-search sites, files the opt-outs, verifies the removals, and re-checks on a schedule

15 minutes
Advanced
Legal & Compliance

Vietnam PDPL Compliance Advisor

Run gap analysis against Vietnam's Personal Data Protection Law (Law 91/2025 + Decree 356/2025), build rights workflows, handle cross-border transfer assessments, breach notification, and DPO reviews.

10 minutes
Intermediate

Browse all Legal & Compliance playbooks →