ITAR Compliance in
Demilitarization
A Defense Contractor's Guide

Written for informational purposes only. Nothing here is legal advice. ITAR is a federal regulatory framework; consult your compliance officer and the U.S. Department of State's Directorate of Defense Trade Controls (DDTC) for authoritative guidance on your specific situation.

What Is ITAR?

The International Traffic in Arms Regulations (ITAR) are a set of U.S. federal regulations, codified at 22 CFR Parts 120–130, that govern the manufacture, export, temporary import, and brokering of "defense articles" and "defense services" enumerated on the U.S. Munitions List (USML). ITAR is administered by the State Department's Directorate of Defense Trade Controls (DDTC).

ITAR is often confused with export-control regulations administered by Commerce (the EAR — Export Administration Regulations) or with Treasury sanctions programs (OFAC). They're related but distinct. Different articles fall under different jurisdictions, and jurisdiction is the first thing a compliance officer needs to nail down when disposition is on the table.

Where ITAR and Demilitarization Overlap

ITAR touches demilitarization at three specific points:

1. Custody transfer. When ITAR-controlled articles leave the manufacturer's or holder's custody — even for destruction — the transfer itself is a regulated event.
2. Method of destruction. Some ITAR articles have specific demilitarization requirements that dictate how destruction must occur (rendered permanently unusable, not just crushed; specific witness or documentation requirements; specific final disposition of resulting materials).
3. Post-destruction documentation. The paper trail is often the entire audit surface. Physical destruction can be perfect and the audit can still fail if the paperwork isn't right.

Any vendor claiming to handle ITAR-controlled demilitarization needs to demonstrate competence at all three points — not just the first.

Chain of Custody: The Non-Negotiable Baseline

Chain of custody is the auditable record of who had physical control of each article at each point in time, from manufacturer's floor to final disposition. For ITAR-controlled inventory, chain of custody needs to be:

• Contemporaneous. Recorded at the time of each transfer, not reconstructed after the fact.
• Attributable. Every transfer signed by a named individual, with printed name, title, and date. Anonymous signatures fail audits.
• Unbroken. Every gap in the record is a compliance vulnerability. An unexplained hour, a missing signature at a shift change, an unrecorded intra-facility move — any of these can become the finding.
• Retained. Retention periods vary by article category. Some records retention obligations run for 5 years post-disposition; some run longer under contract-specific requirements.

Our operating standard is: if you can't produce a signature-and-timestamp record for every hand-off, from the moment the article left the manufacturer to the moment the demilitarized residue reached its final disposition, the paper trail isn't complete.

The Documentation Auditors Actually Check

ITAR audits vary by regulator and by contract, but there's a common core of documentation that gets pulled every time:

• Bills of lading and transport manifests for every intra-facility move and every off-site transport. Names, dates, signatures, article descriptions matching the ITAR classification.
• Destruction certificates issued at the point of final demilitarization, describing exactly what was destroyed, when, by what method, witnessed by whom.
• Photographs or video of the destruction process, timestamped and geotagged where possible.
• Chain-of-custody logs covering every hand-off between and within organizations.
• Contractor licenses demonstrating the demilitarization vendor was legally authorized to handle the specific article class (ATF licensing for explosive articles, State/DDTC registration for brokered transfers, etc.).
• Final disposition records for any residual materials — where scrap metal went, how propellant residuals were handled, what happened to demilitarized casings.
• Insurance certificates covering the transport and destruction phases.

The 4 Most Common ITAR Compliance Failures in Demilitarization

1. Under-classification. Assuming an article isn't ITAR-controlled because a similar civilian article isn't. Jurisdiction determinations are article-specific, not category-specific. Getting this wrong upstream contaminates every downstream compliance decision.
2. Incomplete chain of custody at shift changes and intra-facility moves. The gaps that fail audits are almost never on the obvious transfers (out-the-door shipments). They're on the invisible transfers — the hand-off between second shift and third shift, the move from receiving to secured storage, the intra-warehouse relocation.
3. Vendor licensing gaps. The demilitarization contractor's license needs to cover the specific article class being processed. A general scrap yard license doesn't authorize ATF-regulated destruction. A Type-10 explosives license doesn't necessarily authorize handling of a specific export-controlled article. Vendor licensing is the first thing a serious auditor pulls.
4. Destruction method mismatch. "Demilitarized" is a legal standard, not a colloquial one. Some articles need specific destruction methods to meet the standard (rendered permanently unusable for their military purpose). Bulk crushing without the required verification can leave articles technically not demilitarized, even after physical destruction.

Choosing an ATF-Licensed Demilitarization Contractor

The right demilitarization vendor for ITAR-controlled work has, at minimum:

• Current federal explosives license appropriate to the article class (typically a Federal Explosives License — see ATF's explosives licensing overview).
• DDTC registration if brokering activities are involved.
• Documented compliance procedures — not just a policy, but a demonstrable operational workflow with audit trails.
• Insurance appropriate to the article class and volume being processed.
• References from other defense contractors who've completed audit cycles after using the vendor. This is the single strongest signal.
• Willingness to name specific individuals as compliance points-of-contact and to be responsive to audit inquiries after project completion.

The Cost of Getting ITAR Compliance Wrong

Civil penalties for ITAR violations can reach hundreds of thousands of dollars per violation. Criminal penalties for willful violations can include multi-year federal prison sentences and multi-million dollar fines. Export-license suspensions can shut down a defense contractor's ability to do business with the federal government or with foreign allies. Consent agreements — the DDTC's usual settlement tool — commonly include multi-year monitoring, expensive third-party compliance oversight, and public disclosure obligations that damage brand and customer trust for years.

The cost of doing ITAR-compliant demilitarization the right way is not small. The cost of doing it the wrong way is much bigger.

What Good ITAR Demilitarization Looks Like Operationally

From our side of the fence, an ITAR-compliant demilitarization project has a predictable rhythm:

1. Kickoff. Article classification confirmed. Scope, volume, timeline agreed. Insurance certificates exchanged. Vendor and contractor NDAs in place.
2. Transport plan. Route, carrier, insurance, chain-of-custody protocol documented and signed off by both compliance officers.
3. Receipt. Physical receipt at the demilitarization facility. Chain-of-custody log continues. Articles logged into secured storage with per-article visibility.
4. Destruction. Per the destruction plan agreed upfront. Photographed, witnessed, timestamped. Method documented on the destruction certificate.
5. Residual disposition. Any recovered metals or materials moved to final commodity disposition. Paperwork trails on the residuals too.
6. Documentation package. Delivered to the client at project close. Everything the client needs for future audits.
7. Retention. Our copies retained per statutory and contractual requirements. Ready to be produced if the auditor comes calling in year three or year five.

Every step above is a place where a shortcut can save money in the short term and cost the client a compliance finding in the long term. We don't take those shortcuts.

Get a Scoped Proposal on Your Project

ITAR-controlled disposition work happens quietly, for good reasons. If you're carrying inventory that needs to be handled properly — QC rejects, end-of-lifecycle articles, decommissioned equipment, contract-completion residuals — the earlier we're brought in, the cleaner the paperwork and the cheaper the project.

Send us the outline — article class (as much as you can share pre-NDA), rough volume, timeline, existing documentation — and we'll come back within five business days. If we're not the right vendor for the specific work, we'll tell you and, where we can, refer you to someone who is.