us-export-expert

Determining ITAR or EAR jurisdiction involves mapping workload items to defense-related or dual-use categories. The Skill provides framework crosswalks and licensing posture guidance to classify cloud deployments and identify applicable export-control requirements.

EAR export-controlled data in the cloud requires FIPS 140-2 encryption standards. The Skill specifies FIPS encryption requirements alongside CSP attestation guidelines to ensure compliant data residency and protect controlled technologies.

Deploying ITAR-controlled workloads to public clouds requires specific data residency configurations and denied-party screening. The Skill outlines explicit cloud deployment requirements and cross-framework mitigations for production-ready compliant architectures.

Denied-party screening checks entities against restricted export lists. It is required for ITAR and EAR export compliance when deploying defense-related items or dual-use technologies, and the Skill provides operational guidance for implementing these checks.

Tagging and logging controlled data for ITAR and EAR requires specific marking strategies and operational logging recommendations. The Skill delivers actionable checkpoints to help engineers implement tracking mechanisms for export-controlled architectures.