ITAR Part 121 USML Categories: The 2025 Rule Explained

ITAR Part 121: How the 21 USML Categories Work, and What Changed in September 2025

Ask ten defense manufacturers where their product falls on the U.S. Munitions List, and several will be wrong in a specific, predictable way. Not careless wrong. The kind of wrong that happens when a part looks like something in Category VII but is actually controlled under Category XII, because classification runs on function and performance thresholds rather than appearance. That gap is where 22 CFR Part 121 does its real work, and it's where a surprising share of ITAR violations begin.

Part 121 is short as regulations go. It's one long list, organized into 21 categories, each broken into subparagraphs that describe an article outright or describe it by function and performance level. Get the category wrong and everything downstream, registration, licensing, technical data controls, deemed export analysis, inherits the mistake. This article walks through how Part 121 is structured, how to read an individual category entry, and what changed when DDTC issued its most significant revision to the list in a decade. For the full category-by-category breakdown with worked examples, our USML categories guide is the deeper reference; this piece focuses on the mechanics and the current state of the regulation.

What 22 CFR Part 121 Actually Is

Part 121 is the section of the International Traffic in Arms Regulations that contains the United States Munitions List itself, the enumerated catalog of defense articles, defense services, and related technical data subject to State Department jurisdiction under the Arms Export Control Act. The list lives at 22 CFR 121.1. Everything else in the ITAR, registration under 22 CFR 122.1, licensing under 22 CFR 123.1, technical data handling under 22 CFR 120.10, depends on whether an item first lands somewhere in this list.

The USML is organized into 21 categories, numbered I through XXI, each covering a family of defense articles: firearms, ground vehicles, aircraft, spacecraft, military electronics, and more. Reading an old printout of Part 121 is one of the more common ways companies drift out of compliance without noticing, because the list itself has changed more than most people assume.

The September 2025 Revision: Why "Current" Matters Here

DDTC published a final rule, effective September 15, 2025, that revised 15 of the 21 USML categories. It is the most significant restructuring of the list since Export Control Reform wound down around 2020. Three changes matter most for classification work happening right now.

First, the rule added new unmanned underwater vehicle provisions at Category XX(a)(10), closing a gap where certain UUVs and their controlled subsystems had been handled inconsistently across submersible and naval equipment categories. Second, it relocated USML-specific definitions out of the individual category text and into a consolidated set at 22 CFR 121.0, which changes where a compliance team should look first when a category references a defined term. Third, it removed several items that no longer met the specially designed or exclusive military-application standard, including lead-free birdshot ammunition and GNSS anti-jam and anti-spoofing systems that had drifted into predominantly civil use.

If your classification file, your technology control plan, or your export license support documentation cites category language from before September 2025, it's worth a direct comparison against the current 22 CFR 121.1 text before you rely on it again. A category entry that controlled an item in 2024 may not control it today, and a category that didn't apply to your product in 2024 may reach it now.

The 21 USML Categories at a Glance

That last column matters more than it looks like it should. Categories XVII and XXI exist so that something genuinely designed, developed, or modified for a military application doesn't escape jurisdiction just because it wasn't anticipated when the other 20 categories were drafted.

How to Actually Read a Category Entry

Each USML category is broken into lettered and numbered subparagraphs, and the drafting style has shifted over time. Categories including I, II, III, VII, VIII, XV, and XIX now rely more on a "positive list" structure: specific, enumerated criteria such as caliber, thrust level, or material composition, rather than broad descriptive language. If your item doesn't meet a listed parameter in one of these categories, it is presumptively not controlled under that paragraph, and the next step is to check the Commerce Control List's corresponding 600-series ECCN.

Categories that still use functional description rely on the term "specially designed," defined at 22 CFR 120.41. The definition works in two separate steps, and conflating them is the most common way companies talk themselves out of a correct answer. Step one asks whether the item was developed for a defense article, or has properties that give it a peculiar capability to achieve or exceed a controlled performance level. If step one says yes, step two asks whether an exclusion applies, most often that the item is used in identical form in a separate, non-controlled commercial application. Only an exclusion pulls the item back off the list. A "yes" on step one and a failed exclusion in step two means the item is specially designed, full stop. I've seen more companies skip straight to hunting for an exclusion than actually run step one first, and that shortcut produces the wrong answer more often than it produces the right one.

The Categories That Cause the Most Confusion

Category I (Firearms) is the one every small manufacturer thinks they understand and usually doesn't. The March 2020 revision moved most non-automatic and semi-automatic firearms below .50 caliber, along with their parts and components, to Commerce Department jurisdiction under ECCN 0A501. Automatic firearms, firearms specially designed for automatic fire, and a list of specific enumerated items stayed on the USML. A shop that read a headline about "firearms deregulation" in 2020 and stopped registering with DDTC entirely, without checking whether its specific product still falls under the retained USML paragraphs, is carrying real exposure right now.

Category VII (Ground Vehicles) looks straightforward until you reach armor kits, up-armoring services, and vehicle subsystems sold separately from the vehicle itself. A bracket that mounts a weapons system, sold on its own, can still be a Category VII defense article even though nobody would call it a "ground vehicle."

Category XI (Military Electronics) is where software gets people. The hardware analysis is usually the easy part. The firmware and software that controls, monitors, or enables the listed hardware often carries its own controlled status as technical data, and that determination is separate from whether the box itself is on the list.

Category XIII (Materials and Miscellaneous Articles) functions almost like a second catch-all inside the list. It covers metallurgical processes, stealth-related coatings, and other material science that doesn't fit neatly under a weapons platform but is still militarily significant.

Category XXI is the one to check last, not skip. If you've worked through every other category and concluded your item isn't listed, XXI asks the harder question: was this specifically designed, developed, configured, adapted, or modified for a military application, with a significant military or intelligence application not available in an equivalent civil product? A "no" across Categories I through XX doesn't automatically mean "not ITAR." It means go read XXI before you close the file.

Where the USML Ends and the Commerce Control List Begins

Export Control Reform, running roughly from 2013 through 2020, deliberately narrowed several USML categories and pushed less sensitive, more widely available items to the Commerce Control List, where they're controlled under the Export Administration Regulations instead. Items that moved didn't become uncontrolled. They became controlled under a different agency, a different licensing process, and a different, though still real, penalty structure.

The practical effect is that "military" and "USML" stopped being synonyms for a meaningful slice of hardware. A commercial derivative aircraft part, a widely available firearm component, or a small satellite bus component might sit on the CCL's 600-series ECCNs even though it clearly has defense applications. The order of review matters here: check the USML first as written in 22 CFR 121.1, and only move to the CCL after ruling the USML out. Guessing backward from "this feels like a Commerce item" is how misclassification happens.

Common Classification Mistakes

Classifying the end product but not its components. A Category VIII aircraft assembly might contain a Category XII targeting subsystem and a Category XI electronics package. Each of those can carry its own registration, licensing, and technical data obligations independent of the airframe.

Treating a pre-2025 printout of the USML as current. Fifteen of 21 categories changed in the September 2025 rule alone, on top of the Export Control Reform revisions before it. A classification file that references superseded language is stale, and stale is not a defense in an audit.

Assuming "dual-use" means "not ITAR." Dual-use is an EAR concept, not an ITAR one. An item can have obvious civilian applications and still be specially designed for a military one under 22 CFR 120.41. The two facts aren't mutually exclusive, and "our customers are mostly commercial" is not a classification argument on its own.

Skipping technical data. A physical item might be correctly classified as EAR99 or CCL-controlled, while the drawings, specifications, or test data describing it still qualify as ITAR technical data under 22 CFR 120.10 if they were generated for a defense article. The hardware and the paperwork get classified separately, and one clean answer doesn't guarantee the other.

How to Determine Your Item's Category With Confidence

Self-classification is legal and expected. DDTC doesn't classify items for you as a first step. When self-classification is genuinely unclear, a company can ask DDTC to make the call formally through a commodity jurisdiction request. The substantive standard for what commodity jurisdiction covers sits at 22 CFR 120.4; the actual request procedure, including what to submit and how DDTC responds, is set out at 22 CFR 120.12. That process takes time, so it isn't something to reach for on every item, but it's the right move when a classification decision carries real licensing or registration consequences and the internal analysis keeps landing on "maybe."

For most companies, the more useful daily discipline is a classification file for every product line: which category and subparagraph applies, which specific criteria were checked, what specially designed analysis was run if applicable, and who signed off. That file is what an auditor or a DDTC compliance visit will ask for. It's also what protects the next engineer who touches the product line years from now and needs to know why it was classified the way it was. Our ITAR compliance checklist includes the documentation baseline to build that file from if you don't already have one.

Frequently Asked Questions

How many categories are on the U.S. Munitions List? Twenty-one, numbered I through XXI, set out at 22 CFR 121.1. Categories cover everything from firearms and ammunition to spacecraft, directed energy weapons, and a residual catch-all for items not otherwise enumerated.

What changed in the September 2025 USML revision? DDTC's final rule, effective September 15, 2025, revised 15 of the 21 categories. It added new unmanned underwater vehicle provisions at Category XX(a)(10), moved USML-specific definitions into a consolidated section at 22 CFR 121.0, and removed several items, including lead-free birdshot ammunition and GNSS anti-jam and anti-spoofing systems, that no longer met the controlling standard.

Did the 2020 firearms rule remove Category I from the USML entirely? No. It moved most non-automatic and semi-automatic firearms below .50 caliber, and many of their parts and components, to Commerce Department jurisdiction under ECCN 0A501, effective March 9, 2020. Automatic firearms and several other enumerated items remain on the USML under Category I.

What does "specially designed" mean under the ITAR? It's a defined term at 22 CFR 120.41 with a two-step test. Step one asks whether the item was developed for a defense article or has properties peculiarly responsible for its controlled performance; step two checks whether a specific exclusion, such as identical use in an unrelated commercial product, pulls it back off the list.

Can an item be on the USML and the Commerce Control List at the same time? No. Jurisdiction is exclusive: an item is subject to either the ITAR under the USML or the EAR under the CCL, not both at once. A single product can still contain multiple components, each classified separately under either list.

Where do I go if self-classification isn't clear? A company can file a commodity jurisdiction request with DDTC. The substantive standard is at 22 CFR 120.4, and the request procedure itself is at 22 CFR 120.12.

Classification is the one piece of ITAR compliance that genuinely can't be handled by a checklist alone. It takes someone sitting with the actual regulatory text, the actual product specifications, and the actual subparagraph language, reasoning through it deliberately and checking it against the current version of Part 121. Get that piece right, and registration, licensing, and technical data controls follow logically. Get it wrong, and the rest of the program is built on a foundation that looks solid right up until an audit or a disclosure forces a rebuild from the one step that should have come first.

Last updated: 2026-08-31