ITAR vs EAR: export control basics for dual-use startups

Short answer: ITAR covers technology designed, developed, or specifically modified for military use, and is the stricter regime — foreign-person access and export both require State Department authorization in nearly every case. EAR covers a broader category of commercial and dual-use items, administered by the Commerce Department, with generally lighter (but not absent) licensing and foreign-person restrictions. Which one applies to a given technology is a formal classification determination, not a marketing choice — a company can't opt into the lighter regime by calling itself "dual-use."

A technology's export control classification isn't a footnote — it determines who a defense tech company can sell to, which employees can work on a given program, and what technical data can be shared with a foreign investor or partner. For dual-use companies specifically, this classification is often the single highest-stakes early decision a founder makes.

ITAR: inherently military or space-related

The International Traffic in Arms Regulations govern items on the US Munitions List — technology designed, developed, or specifically modified for military use. ITAR-controlled technology generally cannot be shared with foreign persons (including foreign national employees, in many cases, without a specific license) without State Department authorization, and export requires a license for nearly every foreign destination. ITAR classification is the stricter regime, and it applies regardless of whether a technology also has civilian applications, if its primary design intent was military. See the ITAR glossary entry for the full definition.

EAR: broader commercial and dual-use control

The Export Administration Regulations, administered by the Commerce Department, cover a much broader category of items, including genuinely dual-use technology with civilian applications. EAR still restricts exports — particularly to certain countries or end-users — but the licensing requirements and restrictions on foreign-person access are generally less stringent than ITAR's, and many EAR-controlled dual-use items can be exported to allied countries without a specific license at all. Items not otherwise listed on the Commerce Control List default to EAR99, and licensing also depends on a destination's assigned country group — see the EAR glossary entry for how EAR99 and country groups actually work.

Why the classification, not the marketing label, is what matters

A company describing itself as "dual-use" in a pitch deck hasn't thereby made itself EAR-classified — the actual regulatory determination depends on the specific technology's design and function, made through a formal commodity jurisdiction or classification process, not by marketing language. A technology can be genuinely dual-use in the sense discussed in what counts as dual-use technology and still land under ITAR if its primary design intent is military, regardless of how the company chooses to position it externally.

What this means for hiring, cap tables, and investors

ITAR classification restricts which employees (based on citizenship and permanent residency status) can access technical data, and it complicates foreign investment — a foreign investor with board rights or access to controlled technical data can itself trigger export control review. This is one reason cap table composition and board rights get extra scrutiny at defense tech companies in a way that's less relevant for a purely commercial software company. See companies in the index tagged by domain, or the methodology page for how domain classifications are sourced.