Why DDTC Registration Is Not Optional
If your company manufactures, exports, imports, or brokers defense articles or defense services controlled under the United States Munitions List (USML), you are required to register with the Directorate of Defense Trade Controls (DDTC) before conducting any of those activities. This is not a voluntary certification or a best-practice recommendation. It is a legal prerequisite under the International Traffic in Arms Regulations (ITAR), specifically 22 CFR Part 122.
Failing to register — or operating on an outdated registration — exposes your company to civil penalties of up to $1,308,326 per violation and potential criminal liability. Yet every week, companies in the defense industrial base attempt to secure contracts or transfer technical data while their DDTC registration is lapsed, incomplete, or simply nonexistent. If you are new to the process, this guide will walk you through exactly what to do and what to watch for.
For a broader foundation on what ITAR requires and who falls under its jurisdiction, I recommend reviewing our post on what ITAR compliance is and who needs to comply before proceeding.
Who Must Register with DDTC
Before you log into any system, you need to confirm your registration obligation. The following categories of U.S. persons and entities are generally required to register:
- Manufacturers of defense articles listed on the USML, even if they never export
- Exporters of defense articles or defense services to foreign persons or governments
- Importers of defense articles from foreign sources
- Brokers facilitating transactions involving foreign parties and USML items
One of the most common misconceptions I encounter is the belief that a company does not need to register simply because it sells only to domestic customers or prime contractors. If your product or its technical data falls under a USML category, domestic-only activity does not eliminate your registration obligation. For companies in the manufacturing sector, our resource on ITAR compliance for manufacturers addresses this in detail.
The DECCS System: Your Registration Portal
All DDTC registration activity now takes place through DECCS — the Defense Export Control and Compliance System. DECCS replaced the older D-Trade platform and is the single portal for registration, license applications, commodity jurisdiction requests, and compliance submissions. You will access it at the DDTC website under the State Department.
Before you can submit a registration, you need a DECCS account. Account creation requires a valid business email address, your company's Employer Identification Number (EIN), and DUNS or SAM.gov Unique Entity Identifier (UEI). Gather these before you begin, because incomplete account setup is one of the most common causes of delay.
Step-by-Step: Completing Your DDTC Registration
Step 1: Confirm Your USML Jurisdiction
Registration fees and categories depend on which USML categories apply to your products or services. Review the 21 USML categories in 22 CFR Part 121 and identify every category that covers your items. If you are uncertain whether a product is ITAR-controlled or falls under the Export Administration Regulations (EAR), you may submit a Commodity Jurisdiction (CJ) request through DECCS before registering. Do not skip this step — registering under the wrong category is a compliance deficiency, not a technicality.
Step 2: Designate a Responsible Official and Empowered Officials
Your registration must identify a Senior Officer who is legally accountable for ITAR compliance, as well as one or more Empowered Officials — individuals with authority to sign export license applications and legal authority to bind the company. These individuals must be U.S. persons. Empowered Officials must understand the export control laws and cannot simply be designated on paper without genuine authority and knowledge.
This is also the stage where many first-time registrants discover they need a more structured internal compliance function. Our ITAR and Export Controls Compliance service is specifically designed to help companies establish these foundational roles correctly from the start.
Step 3: Create Your DECCS Account and Initiate Registration
Navigate to DECCS and create an organizational account. You will be prompted to enter your company's legal name exactly as it appears in your corporate formation documents, physical address, EIN, and UEI. Once the account is created and verified, select New Registration from the DDTC Registration module.
Step 4: Complete the DS-2032 Registration Statement
The core registration document is the DS-2032. Within DECCS, this form captures:
- Company legal name and all doing-business-as (DBA) names
- Physical address of all facilities engaged in ITAR-controlled activities
- Description of business activities and applicable USML categories
- Identification of Empowered Officials with their citizenship, title, and contact information
- Disclosure of any pending or prior criminal charges, debarments, or State Department violations
- Foreign ownership, control, or influence (FOCI) disclosures
The FOCI disclosure is frequently underestimated by first-time applicants. If any foreign person owns ten percent or more of your company, holds a board seat, or has any contractual right to direct company operations, you must disclose that relationship. Omitting it — even inadvertently — can result in registration denial or future enforcement action.
Step 5: Pay the Registration Fee
DDTC charges an annual registration fee based on the number of USML categories under which you register. As of the most recent fee schedule, fees range from approximately $2,250 for a single category to higher tiered amounts for multiple categories. Payment is processed through DECCS at the time of submission. Keep your payment confirmation — it serves as your provisional evidence of registration while DDTC processes your application.
Step 6: Submit and Monitor Your Application
Once all fields are complete and payment is confirmed, submit the registration. DDTC typically processes new registrations within 30 to 60 days, though processing times can vary. You can monitor your application status directly in DECCS. Do not assume silence means approval — follow up through official DDTC channels if you approach the 60-day mark without a determination.
Upon approval, you will receive a Registration Code that must appear on all export license applications and relevant correspondence. Store this securely and ensure your Empowered Officials have immediate access to it.
Renewals, Amendments, and Common Pitfalls
DDTC registration must be renewed annually. The renewal window opens 60 days before expiration, and DDTC will not grant grace periods for late renewals. If your registration lapses, you are legally prohibited from manufacturing, exporting, or brokering USML-controlled items until it is reinstated.
Amendments are required whenever material changes occur — including changes to your company name, address, ownership structure, Empowered Officials, or the USML categories applicable to your products. Failing to file timely amendments is itself a violation. Build a compliance calendar that tracks renewal and amendment deadlines the same way you track contract performance milestones.
For companies that want a comprehensive view of what a full ITAR program looks like beyond registration, our post on the ITAR compliance checklist is a useful companion resource. And if your organization needs to think carefully about how ITAR intersects with your information systems and data handling, our coverage of EAR and ITAR requirements for information systems addresses that directly.
Building Compliance Infrastructure Around Your Registration
DDTC registration is the starting line, not the finish line. Once registered, your company takes on ongoing obligations: screening foreign nationals before granting access to ITAR-controlled technical data, maintaining export licenses, controlling physical and digital access to USML items, training employees, and documenting every relevant transaction for a minimum of five years.
Physical access control is part of that infrastructure. If foreign nationals or uncleared visitors may be present in your facility, you need a documented visitor control program. That includes proper badging — our ITAR visitor badges and ITAR-compliant visitor log books are designed specifically for registered facilities managing these requirements.
For companies that need to build or mature the broader compliance program that surrounds registration, our Compliance Program Development service provides a structured approach — from policy development through training and ongoing monitoring.
When to Bring in Expert Support
DDTC registration support is most valuable at two stages: before you submit your first registration, and after you receive a deficiency notice or denial. In the first case, expert review of your DS-2032 can prevent the kind of errors — particularly around FOCI disclosures and USML category selection — that trigger additional scrutiny or delay. In the second case, responding to DDTC with a well-structured clarification requires familiarity with regulatory language and agency expectations that most first-time registrants simply do not have.
At Cleared Systems, we work with defense contractors, manufacturers, and technology companies navigating DDTC registration for the first time and with established registrants managing complex amendments. If you are preparing for initial registration, renewing after a lapse, or managing a merger that affects your registration status, the stakes are too high for a trial-and-error approach.
Ready to get your DDTC registration right the first time? Request a quote from Cleared Systems and speak directly with an ITAR compliance expert who can guide your registration from preparation through approval — and help you build the compliance infrastructure that keeps you in good standing long after your registration code arrives.