ITAR CNC machining: what controlled work actually means

• 1
  Key takeaways
• 2
  What ITAR actually regulates on a machined part
• 3
  Where the boundary sits for a CNC shop
• 4
  Why controlled parts usually need 4 or 5 axes
• 5
  The 6 checks to run before you release a drawing
• 6
  Materials and finishes on controlled programs
• 7
  Step by step: running a controlled job without breaking the chain
• 8
  Controlled vs uncontrolled machining: what changes

ITAR stands for International Traffic in Arms Regulations. The rules govern defense articles and defense services listed on the United States Munitions List. A machined bracket, housing or optical mount can be a defense article. So can the drawing that describes it. When a part is on the list, the technical data behind it is controlled as well.

That word, data, is where most confusion starts. A bare block of 7075 aluminium is not controlled. A STEP file that shows the internal geometry of a controlled assembly is. The same machine can run controlled and uncontrolled work on the same shift, as long as the data, the people and the records stay separated.

In practice, three things determine whether a job is ITAR work. First, is the part or the data on the Munitions List. Second, who is allowed to see that data. Third, can you produce a record showing who saw it and when. Get any one of those wrong and the job is not compliant, no matter how tight the tolerance is.

• 1
  Controlled itemThe part itself appears on the Munitions List.
• 2
  Controlled dataThe drawing or model reveals controlled geometry or performance.
• 3
  Controlled serviceMachining that assists a foreign defense program.

A shop does not need a special machine to run ITAR work. It needs a controlled perimeter around the information. That means the CAM programmer who opens the model, the operator who loads the blank, and the inspector who measures the finished part are all inside the same controlled group. Files stay on isolated storage. Prints stay in a locked area.

The most common failure we see is not a leak. It is scope drift. A shop quotes a controlled part, then sends the same model to an outside anodizer for a clear coat. That transfer is a release of technical data to a third party. It has to be covered, or it breaks the chain.

Another grey zone is nationality. If your shop floor includes workers who are not US persons, those workers cannot see controlled technical data unless an approved agreement covers them. This is why some buyers ask for a nationality roster before they release a file, not because they doubt the work, but because the record has to hold up.

None of this changes how the part is cut. Feeds, speeds and tool paths are the same. What changes is who is in the room and what is written down.

Controlled work tends to cluster around a few part families: optical housings, gimbal frames, waveguide bodies, and structural brackets with compound angles. These shapes share a trait. Their critical features do not sit on three orthogonal faces. A 3-axis machine can reach them only by re-fixturing, sometimes three or four times.

Every re-fixture adds a datum shift. Stack four setups at ±0.005 mm each and the tolerance budget is gone before the first cut. A simultaneous 5-axis center holds the part once and reaches five faces from that single datum. We run 16 simultaneous 5-axis machining centers and 12 four-axis mills for exactly this reason.

Five-axis is not a compliance requirement. It is a geometry response. If a controlled part is a simple plate with two holes, a 3-axis machine does the job and the compliance paperwork is the same. The axis count follows the drawing, not the regulation.

One practical limit: a Ø400 mm rotary table sets the ceiling for what can be swung in one setup. Beyond that, parts move to our larger travels, and the setup plan changes. Confirm the swing before you assume one-hit machining.

You cannot audit a shop from a certificate alone. ISO 9001, IATF 16949 and ISO 13485 say something about process discipline. They do not say anything about export control. Ask six questions instead.

Start with jurisdiction. Has someone classified the part against the Munitions List, and is that decision written down. Then ask who sees the file. Get a named list, not a department. Third, ask how the file moves. If the answer involves a shared drive or a personal email, stop there.

Then ask about sub-tier work. Anodizing, plating, heat treat and laser marking are all data transfers. Fourth check: does each outside supplier sit under the same controls. Fifth, ask what the inspection record contains and how long it is kept. Sixth, ask who signs off when something goes wrong.

A shop that answers all six in one conversation is ready. A shop that says they will check and get back to you is telling you something useful too.

• 1
  Written classificationA dated decision on the part and the data.
• 2
  Named access listProgrammer, operator, inspector, by name.
• 3
  Transfer pathEncrypted upload, no personal email.
• 4
  Sub-tier coverageFinishers and heat treat under the same terms.

The material list for controlled work looks like any other high-end machining job. Aluminium 6061-T6 and 7075 show up in housings and frames. Stainless 17-4PH and 316L cover corrosive environments. Titanium TC4 (Ti-6Al-4V) and Inconel appear where temperature or strength rules out steel.

What matters more than the alloy is traceability. A controlled part needs a heat lot number tied to the mill certificate, and that number has to survive through the finishing steps. Laser marking helps here, with a minimum character height of 1.5 mm so the lot code stays readable after anodizing or plating.

Finishes do not change the compliance picture, but the transfer to a finisher does. Hardcoat anodizing, electroless nickel and black oxide are routine on defense hardware. Each one is a handoff unless the finisher sits inside the same controlled perimeter.

If a program needs both controlled and uncontrolled parts, keep them on separate travelers. Mixing them on one routing sheet is the fastest way to lose the audit trail.