DDTC Registration Help: What Defense Manufacturers Need to Know Right Now
By Jared Clark, JD, MBA, PMP, CMQ-OE, CPGP, CFSQA, RAC — Principal Consultant, Certify Consulting
Last updated: 2026-03-03
If you've landed here searching for DDTC registration help, you're not alone — and the timing couldn't be more significant. Interest in Directorate of Defense Trade Controls (DDTC) registration has surged in recent months as defense budgets expand, new defense technology companies enter the market, and enforcement scrutiny intensifies. The State Department's compliance posture has shifted, and organizations that were once operating in a gray area are finding that posture increasingly untenable.
After helping more than 200 clients navigate ITAR registration and compliance — with a 100% first-time audit pass rate across eight-plus years of practice — I've seen every flavor of registration challenge: startups that don't know where to begin, established manufacturers who let their registration lapse, and mid-market companies that are scaling into defense contracts and suddenly need to get compliant fast. This guide is designed to give you actionable, expert-level clarity on what DDTC registration actually requires, what's changed, and how to avoid the costly mistakes I see regularly.
What Is DDTC Registration and Who Needs It?
The Directorate of Defense Trade Controls (DDTC) is the State Department bureau responsible for administering the International Traffic in Arms Regulations (ITAR), codified at 22 CFR Parts 120–130. Under ITAR, any U.S. person or organization that manufactures, exports, temporarily imports, or brokers defense articles or defense services listed on the United States Munitions List (USML) must register with DDTC before engaging in those activities.
This is not optional. It is not contingent on whether you are actively exporting. If you manufacture a defense article — even if you've never shipped a single item internationally — registration is legally required under 22 CFR § 122.1.
Key entities that must register include:
- U.S. manufacturers of USML-listed hardware, software, or technical data
- Exporters and temporary importers of defense articles
- Defense services providers (training, technical assistance, design work for foreign parties)
- Brokers who facilitate ITAR-controlled transactions
- Foreign persons and entities in specific circumstances under § 129
One of the most common misconceptions I encounter: companies believe that because they are a subcontractor — never dealing directly with a foreign customer — they don't need to register. That's incorrect. If you manufacture a USML-controlled component anywhere in the supply chain, the registration requirement applies to you.
Why DDTC Registration Is Trending Right Now
Several converging forces are driving the surge in DDTC registration activity that we're seeing in 2025 and into 2026:
1. Defense Spending Expansion. The U.S. defense budget for FY2025 was enacted at approximately $895 billion, the largest in history. This has created a wave of new defense contractors — including many small and mid-sized businesses — entering the USML supply chain for the first time.
2. DDTC's Modernization of the Registration System. DDTC has continued rolling out its electronic registration and licensing platform (DTrade and its successor systems), requiring registrants to update records, resubmit documentation, and engage with the system in new ways. Many legacy registrants are encountering the updated requirements for the first time during renewal.
3. Increased Enforcement Visibility. DDTC and the Department of Justice have signaled elevated enforcement priority for ITAR violations. High-profile consent agreements — some exceeding $100 million in penalties — have made headlines, prompting boards and executives to take a hard look at compliance infrastructure. According to DDTC's own data, civil penalty cases have included companies fined over $13 million for unauthorized exports resulting from inadequate registration and licensing practices.
4. Dual-Use and Emerging Technology Reclassification. As technologies like autonomous systems, hypersonics, directed energy, and advanced semiconductors increasingly intersect with defense applications, companies that previously operated under EAR (Commerce Control List) jurisdiction are discovering their products may have migrated to the USML. This jurisdictional shift triggers a registration obligation that didn't previously exist.
5. Foreign Ownership, Control, and Influence (FOCI) Scrutiny. DDTC has increased scrutiny of registrants with foreign ownership or investment. This is particularly relevant for startups that have taken foreign venture capital, which can trigger FOCI mitigation requirements that intersect directly with ITAR registration.
The DDTC Registration Process: Step-by-Step
Understanding the mechanics of registration is the first step to getting it right. Here is the current process as of early 2026:
Step 1: Determine Registration Category
Before you can register, you must determine which registration category applies to your organization. DDTC uses a category-based system tied to the type of ITAR-controlled activity:
- Manufacturer – 22 CFR § 122.1(a)(1)
- Exporter – 22 CFR § 122.1(a)(2)
- Temporary Importer – 22 CFR § 122.1(a)(3)
- Broker – 22 CFR Part 129
Many organizations fall into more than one category. Registering for the wrong category — or only registering for one category when multiple apply — is a compliance gap that can surface during audits or when applying for export licenses.
Step 2: Gather Required Documentation
The DS-2032 registration form requires the following information at minimum:
- Legal name and address of the registrant
- Identification of senior officers (names, titles, citizenship)
- Description of defense articles or services
- Relevant USML categories
- Statement of legal violations (including any prior ITAR violations or export enforcement history)
- Empowered Official designation
- Certification by a senior officer
Step 3: Submit via the DDTC Electronic System
Registrations are submitted electronically through the DDTC portal. As of current guidance, first-time registrants should allow 30 to 60 business days for DDTC processing, though complex applications or those requiring additional review can take longer.
Step 4: Pay Registration Fees
DDTC registration fees are structured by registration period:
| Registration Period | Fee |
|---|---|
| 1 Year | $2,750 |
| 2 Years | $5,250 |
| 3 Years | $7,500 |
Source: 22 CFR § 122.3, current fee schedule
Step 5: Maintain and Renew
Registration must be renewed before expiration. Operating with a lapsed registration is itself an ITAR violation — a point many organizations miss. DDTC expects registrants to maintain their registration continuously if the underlying manufacturing or export activity continues.
Common DDTC Registration Mistakes (And How to Avoid Them)
In eight-plus years of ITAR consulting, I've identified the errors that most frequently derail registration or create downstream compliance exposure:
Mistake 1: Failing to Identify the Correct Empowered Official
The Empowered Official (EO) must be a U.S. person, employed by and directly responsible to the senior management of the registrant. The EO holds personal legal responsibility for export license applications and compliance certifications. Designating someone without the requisite authority — or who is not a U.S. person — invalidates this critical role.
Mistake 2: Incomplete USML Category Identification
Registrants must identify which USML categories cover their products or services. A manufacturer that lists only Category IV (Launch Vehicles, Guided Missiles) but also produces ground support equipment potentially covered under Category XV (Spacecraft Systems) has an incomplete registration. Incomplete USML category coverage is a gap that can surface during a consent agreement investigation.
Mistake 3: Not Disclosing Prior Violations
The DS-2032 asks about prior ITAR violations or other export law violations. Non-disclosure — even of violations the registrant believes were minor or were resolved — can constitute a material misrepresentation to DDTC. Always disclose and contextualize. I've helped clients navigate this carefully, and transparency consistently yields better outcomes than omission.
Mistake 4: Lapsed Registration
DDTC does not send automatic renewal reminders in a way that guarantees receipt. Many companies allow registrations to lapse inadvertently, particularly during leadership transitions or M&A activity. A lapsed registration means any manufacturing, exporting, or brokering that occurred during the lapse period was potentially unauthorized — creating retroactive exposure.
Mistake 5: Failing to Update Registration After Corporate Changes
Under 22 CFR § 122.4, registrants must notify DDTC of changes in senior officers, address, or ownership within five days. M&A activity, restructuring, and changes in beneficial ownership trigger this requirement — and it's regularly overlooked in the chaos of corporate transactions.
DDTC Registration vs. Export License: Understanding the Difference
A question I receive constantly: "Once we're registered, are we good to export?"
Registration and licensing are distinct requirements. Registration establishes your legal standing to engage in ITAR-controlled activities. It does not authorize any specific export. For most actual exports of defense articles or defense services, you will also need:
| Requirement | Purpose | Issued By |
|---|---|---|
| DDTC Registration | Legal standing to manufacture/export/broker | DDTC |
| DSP-5 License | Permanent export of unclassified defense articles | DDTC |
| DSP-73 License | Temporary export of defense articles | DDTC |
| DSP-61 License | Temporary import of defense articles | DDTC |
| TAA (Technical Assistance Agreement) | Export of defense services / technical data | DDTC |
| MLA (Manufacturing License Agreement) | Foreign manufacture using U.S. defense articles | DDTC |
| Exemptions (22 CFR § 126.4 et seq.) | Case-by-case exemptions where applicable | Self-determined with EO |
Registration is the foundation. Licensing is the authorization for specific transactions. You cannot apply for a license without an active registration.
How a DDTC Registration Consultant Adds Value
Many organizations attempt self-registration, and some succeed. But the failure points I've seen are instructive. DDTC registration is not a simple form-filling exercise — it is a legal compliance determination that requires:
- Jurisdiction analysis: Confirming whether your products are ITAR-controlled (USML) or EAR-controlled (CCL) — this requires a formal commodity jurisdiction (CJ) determination in ambiguous cases
- USML category mapping: Identifying all applicable USML categories for your product portfolio
- Organizational assessment: Identifying all individuals, affiliates, and corporate structures that intersect with the registration
- FOCI screening: Evaluating whether foreign ownership or investment creates additional compliance obligations
- Empowered Official qualification: Ensuring the designated EO meets all legal requirements
- Ongoing compliance program design: Registration alone doesn't create compliance — it creates a legal obligation to maintain a compliant program
At Certify Consulting, I've built a structured engagement model that takes clients from initial assessment through registration submission, with post-registration support to build the compliance infrastructure that keeps the registration defensible. Every client we've taken through this process has passed their first audit. That's not an accident — it's the product of a methodical approach.
Learn more about our broader approach to ITAR compliance program development and how registration fits into a defensible compliance architecture.
What Does a Robust ITAR Compliance Program Look Like Post-Registration?
Registration is the starting line, not the finish line. DDTC expects registered entities to maintain a functioning compliance program. The minimum elements of a defensible ITAR compliance program include:
- Written Export Management and Compliance Program (EMCP) — a documented policy framework covering jurisdiction determination, license determination, recordkeeping, training, and audit procedures
- Empowered Official authority and training — the EO must be active, knowledgeable, and empowered to halt shipments
- Screening procedures — for employees, customers, vendors, and partners against the Consolidated Screening List and DDTC's list of debarred parties
- Technology control plans — controlling access to ITAR-controlled technical data, particularly for organizations with foreign national employees or visitors
- Recordkeeping — ITAR requires retention of export records for five years under 22 CFR § 122.5
- Audit and self-assessment — annual or semi-annual internal compliance reviews
- Voluntary Disclosure procedures — a process for identifying and self-reporting potential violations before DDTC discovers them
For organizations building this infrastructure for the first time, I recommend engaging a consultant who can accelerate the build while ensuring alignment with current DDTC expectations. The cost of building a compliant program is a fraction of the cost of a consent agreement.
Explore our ITAR compliance audit services for organizations that want to stress-test their existing programs.
Citation-Ready Facts for Decision Makers
DDTC registration is a legal prerequisite for all U.S. manufacturers of USML-listed defense articles, regardless of whether any export activity has occurred, pursuant to 22 CFR § 122.1. This is one of the most consistently misunderstood thresholds in U.S. export control law.
Operating with a lapsed DDTC registration while continuing to manufacture or export USML-controlled items constitutes an unauthorized activity under ITAR and may expose the organization to civil penalties up to $1,305,722 per violation under 22 CFR Part 127. The per-violation structure means that each transaction, shipment, or unauthorized disclosure during a lapse period counts separately.
DDTC consent agreements have historically required not only monetary penalties but also the appointment of Special Compliance Officers, third-party audits, and enhanced reporting obligations lasting three to five years — demonstrating that the non-monetary costs of ITAR enforcement often exceed the direct financial penalties.
FAQ: DDTC Registration Help
How long does DDTC registration take?
First-time DDTC registration typically takes 30 to 60 business days from submission, though complex applications — particularly those involving prior violations, foreign ownership, or multiple USML categories — can take longer. Working with an experienced ITAR consultant can help ensure your application is complete and accurate on first submission, avoiding requests for additional information that extend the timeline.
How much does DDTC registration cost?
DDTC charges a government fee of $2,750 for a one-year registration, $5,250 for two years, and $7,500 for three years. In addition to the government fee, organizations typically incur costs for professional legal or consulting assistance, internal time for documentation preparation, and post-registration compliance program development. The total cost of a properly supported registration engagement varies based on organizational complexity.
What happens if my DDTC registration lapses?
A lapsed registration means that any ITAR-controlled manufacturing, export, or brokering activity conducted during the lapse period may constitute an unauthorized activity under ITAR, creating civil and potentially criminal exposure. If your registration has lapsed, you should immediately cease ITAR-controlled activities, consult with an ITAR attorney or consultant, and consider whether a voluntary disclosure to DDTC is appropriate before submitting a renewal.
Do I need DDTC registration if I only sell to the U.S. government domestically?
Yes, in most cases. The registration requirement under 22 CFR § 122.1 applies to manufacturers of USML-listed defense articles regardless of whether any export activity has occurred. Domestic sales to U.S. government customers do not eliminate the registration obligation for manufacturers. There are narrow exceptions, but they should be verified through formal legal analysis rather than assumed.
Can a small business or startup register with DDTC?
Yes. DDTC registration is available to any U.S. person or entity that meets the registration criteria, regardless of company size. Small businesses and startups entering the defense industrial base should register before beginning any manufacturing or export activity. Many startup-friendly defense programs — including SBIR/STTR awards involving USML-controlled technology — require or presuppose active DDTC registration.
Getting Expert DDTC Registration Help
If you're navigating DDTC registration for the first time, managing a renewal, or dealing with a lapse or compliance gap, the stakes are too high to navigate alone. At Certify Consulting, my team brings 8+ years of focused ITAR compliance experience, a track record of 200+ clients served, and a 100% first-time audit pass rate to every engagement.
We offer a structured DDTC registration engagement that includes:
- Initial jurisdiction and USML category analysis
- DS-2032 preparation and review
- Empowered Official qualification review
- Submission support and DDTC correspondence management
- Post-registration compliance program roadmap
Visit certify.consulting to learn more about how we support defense manufacturers, exporters, and emerging defense technology companies through every stage of ITAR compliance.
Last updated: 2026-03-03
Jared Clark is the principal consultant at Certify Consulting and holds credentials including JD, MBA, PMP, CMQ-OE, CPGP, CFSQA, and RAC. He has served 200+ clients across the defense, aerospace, and regulated technology sectors.
Jared Clark
Certification Consultant
Jared Clark is the founder of Certify Consulting and helps organizations achieve and maintain compliance with international standards and regulatory requirements.