ITAR and EAR technical data: why controlled records stay out of a data license

What is ITAR and EAR technical data, and why does it stay out of a license?

"Technical data" under the International Traffic in Arms Regulations (ITAR) and "technology" under the Export Administration Regulations (EAR) are export-controlled information about defense articles or controlled items, such as blueprints, specifications, engineering drawings and the know-how to design, produce or operate them. Controlled records need to stay out of any data license because sharing them with the wrong party can be an export, even when the recipient is in the United States. This is general information, not legal, tax or financial advice. Confirm with your own counsel, tax adviser or professional body before acting.

The two regimes are separate. ITAR is administered by the State Department and covers items on the US Munitions List. The EAR is administered by the Commerce Department's Bureau of Industry and Security and covers dual-use and other items on the Commerce Control List. The rule text, definitions and exemptions live in those agencies' regulations, which change over time, and this page deliberately does not paraphrase them in detail. Export counsel should read the current text for the company in question.

For an M&A advisor, the practical point is simple: a defense-adjacent manufacturer can still be a strong candidate, but the controlled engineering material has to be carved out first and the rest assessed on its merits.

How the two regimes differ for a data-licensing screen

Classification is the company's job, not the introducer's. If nobody at the company can say how a record set is classified, treat it as unscreened until someone can.

Why does a "deemed export" make a domestic license risky?

The rules treat releasing controlled technology or technical data to a foreign person, even inside the United States, as an export to that person's country. That idea is often called a deemed export. A data license moves records to buyers, to buyers' contractors and sometimes across borders, so a controlled file in the delivery set is a risk even if the buyer is a US entity.

For a company, this is not a technicality to fix at the end. It is the reason a company should settle what is controlled before any license discussion, and why controlled engineering data belongs outside the scope. The company's compliance team and the rights review come before anything is shared with buyers.

Which records are likely out, and which may still be in scope?

Start from the system, then the record. The table is a screening aid for conversations, not a classification.

Email and chat are the usual trap. A thread about a delivery delay is fine; the same thread with an attached drawing is not. The company decides whether to filter, redact or exclude, and that is agreed before any work begins. Government contract clauses and customer confidentiality terms can also restrict use independent of export rules, and the FTC has stated that promises not to use customer data for undisclosed purposes are enforceable. That is one reason the data license agreement page matters for these companies.

The 4-gate screen for a defense-adjacent manufacturer

Use four gates before you raise the idea. If any gate is a clear no, park the company.

• Classification: does the company have a named person who can say which record sets are export-controlled?
• Separation: can commercial records (finance, HR, sales, service) be separated from engineering and program records?
• Contract terms: do government prime contracts, subcontracts or customer NDAs restrict use of the commercial records?
• Sponsor: is the owner, CEO, CFO or an authorized representative willing to explore a license under these limits?

Companies with 50+ full-time employees at peak (contractors excluded), years of operations and records across many systems still fit the baseline on the who qualifies page. The export question narrows what is in scope; it does not change the baseline.

When does this come up in an M&A advisor's calendar?

Advisors who run sell-side processes see these questions early, so they are well placed to raise a license as a separate, optional conversation. The M&A advisor referral page covers how that fits an engagement. For roll-ups that include machine shops and fabricators, the screening ideas on specialty contractor roll-ups apply in parallel.

How the introduction works without touching records

You introduce; you never handle or describe confidential records.

1. You register as a partner and share your referral link or submit the company through the referral form.
2. SourceX qualifies the company on size, history, data breadth and rights, with the company's own export lead confirming anything that is controlled.
3. The company completes a data inventory of systems and years of history; the data inventory builder helps list systems without exposing content.
4. Price and terms are agreed, with excluded record sets written into the scope before buyers see anything.
5. Buyers review, and once a company is deal-ready they typically respond within about two weeks.
6. If the company signs, data is delivered under the agreed redaction rules, the company is paid, and the partner reward follows.

Nothing is binding until the company agrees price and terms and signs. Redaction and exclusion requirements are agreed before work begins.

What to say to a defense-adjacent owner

Never ask the owner to describe controlled material to you. If the conversation drifts there, stop and route it to the company's compliance lead.

How rewards work for advisors

Partners earn 25% of the eligible platform fees SourceX actually collects from the referred company's licensing deals, capped at $100,000 per referred company. Rewards become payable only after the buyer pays and SourceX receives its fee; a lead, meeting or signed agreement alone does not trigger payment, and no reward is guaranteed. The reward is never deducted from what the company receives. Advisors who are registered with a broker-dealer or bound by professional rules should check their own obligations before accepting any referral fee, and the program terms set out the current details.

When to skip the conversation

• The company's value sits mainly in controlled engineering data.
• Nobody can say how records are classified.
• A government trustee, court or assignee controls the assets and has not been involved.
• The records belong to customers or primes who have not agreed.
• The owner will not consider an exclusive license for an agreed term.

For adjacent ownership questions see franchise data ownership and MGA data ownership; for another people-heavy record set see staffing firm ATS data.

Next step

Pick one manufacturing client with a commercial side to its business and run the four gates. If it passes, register as a partner and make the introduction, or have the owner apply at sourcex.si/apply with your referral link.