---
Export control compliance is treated by most defense-tech founders as a legal problem. It is also a communications problem — and the lawyers cannot solve it without the communications function understanding it.
Every public statement, press release, product launch, social media post, hiring announcement, conference presentation, and investor communication produced by a defense or dual-use company sits inside an export control framework. The U.S. International Traffic in Arms Regulations (ITAR), the Export Administration Regulations (EAR), the Wassenaar Arrangement, and the corresponding allied regimes (UK Strategic Export Controls, EU Dual-Use Regulation, Israel Defense Export Control Act, Japan Foreign Exchange and Foreign Trade Act) all create speech-level constraints that most communications professionals were not trained to navigate.
This pillar is the working reference. It is not legal advice. It is the operational discipline a defense communications function needs to operate inside the regimes without freezing under them.
The Two Regimes Every Defense Founder Must Understand
U.S. export control runs through two primary frameworks. Defense communications has to be fluent in both.
ITAR — International Traffic in Arms Regulations. Administered by the Directorate of Defense Trade Controls (DDTC) inside the State Department. Governs defense articles, defense services, and related technical data. The U.S. Munitions List (USML) categorizes what is controlled. Items on the USML are heavily restricted in disclosure, export, and transfer to foreign persons — including foreign employees, contractors, and visitors inside the United States.
EAR — Export Administration Regulations. Administered by the Bureau of Industry and Security (BIS) inside the Commerce Department. Governs dual-use technology — items with both commercial and military applications. The Commerce Control List (CCL) categorizes items. EAR includes the 600-series classifications that handle defense-adjacent items moved from the USML.
The high-stakes distinction: ITAR-controlled technical data cannot be disclosed to foreign persons without authorization, even inside the United States. A press release, a product page, a conference presentation, a LinkedIn post, or a podcast appearance can constitute a "deemed export" if it discloses ITAR-controlled technical data in a way accessible to foreign persons. The penalties — criminal and civil — are not theoretical.
EAR is generally more flexible than ITAR but is not unconstrained. Specific countries, end users, and end uses are heavily restricted under EAR. The current U.S. export control posture toward China, Russia, Iran, North Korea, and a growing watchlist of intermediary countries makes EAR compliance a continuous operating discipline.
What "Technical Data" Means in Communications Practice
The communications function's primary ITAR exposure is around "technical data" — defined under ITAR as information required for the design, development, production, manufacture, assembly, operation, repair, testing, maintenance, or modification of defense articles. This includes blueprints, drawings, photographs, plans, instructions, and documentation.
What this means in practice for a defense communications function:
- Detailed performance specifications of ITAR-controlled systems are typically not publishable. Range, payload, sensor capability, communications protocols, and operational envelopes for ITAR-controlled platforms require careful review before public disclosure.
- Test data, exercise results, and operational performance require coordination with the program office before publication.
- Component-level technical detail is often more constrained than system-level marketing language.
- Visual content — photos, video, renderings — can disclose technical data even when accompanying text does not.
- Conference presentations and demonstrations at industry events have to be cleared before disclosure.
This does not mean defense companies cannot communicate. It means they communicate from a publishable surface that has been deliberately identified inside the export control framework. Marketing materials, capability narratives, mission framing, customer references (where authorized), and operational context can be communicated extensively without disclosing controlled technical data.
The discipline is to map the publishable surface in advance, not to navigate it post hoc.
The Foreign Person Question
ITAR's foreign-person disclosure rules have particular implications for the communications function in several scenarios.
Hiring announcements and team content. Hiring foreign nationals for roles with ITAR exposure requires authorization. Public hiring announcements that describe ITAR-relevant roles being filled by foreign nationals can themselves constitute disclosure. Engineering blog posts featuring foreign-national team members working on ITAR-relevant programs require careful review.
Investor communications. Foreign LPs in U.S. defense companies create direct ITAR exposure. Communications around foreign investment, foreign board members, foreign advisory presence, and foreign partnerships have to be coordinated with export control counsel.
Conference and event content. International defense exhibitions (Paris Air Show, Farnborough, DSEI, IDEX, Eurosatory, AUSA International events) create complex disclosure scenarios. Both the booth content and the executive speaking presence have to be cleared in advance.
Social media and personal content. Executive personal social media, including LinkedIn activity describing defense work, can constitute disclosure to foreign persons. Defense-tech executives operate under personal social media protocols that commercial-tech executives do not.
EAR and the China Question
The communications discipline around EAR has shifted substantially in the last several years driven by U.S. export control posture toward China. Defense and dual-use technology companies now operate inside a layered framework that includes:
- The Entity List (denied parties)
- The Unverified List (heightened diligence requirements)
- The Military End User List
- The expanding semiconductor and AI-related controls
- The Foreign Direct Product Rule extensions
For communications functions, the operational discipline:
- Customer references involving Chinese entities are typically not publishable even when the underlying business arrangement is lawful
- Partnership announcements with foreign companies require denied party screening before publication
- Hiring narrative around foreign nationals from designated countries requires specific review
- Investment announcements involving capital from designated jurisdictions require coordinated public posture
The communications function does not make the legal determination. The communications function has to know when the question must be asked.
How Defense-Tech Founders Build a Defensible Communications Posture
The companies that operate at high communications velocity inside export control regimes — Anduril, Palantir, Shield AI, Helsing, SpaceX — built defensible postures through specific operating discipline:
1. Internal classification of every public statement. Every press release, product page, marketing asset, executive op-ed, podcast appearance, and conference presentation is classified internally for export control sensitivity before publication. The classification process is fast — typically 24 to 48 hours for standard content — but it is consistent.
2. Coordination with export control counsel as a standing function. Defense companies retain dedicated export control counsel and integrate that counsel into the marketing and communications workflow. Surprise reviews on critical-path content do not happen.
3. Cleared messaging libraries. Standardized capability language, system descriptions, mission framing, and customer references are pre-cleared and made available to the communications function for reuse. New content draws from cleared building blocks where possible.
4. Trained executive spokesperson protocols. Every executive who speaks publicly on behalf of the company is trained on the boundaries of cleared messaging. Press interviews, podcast appearances, conference panels, and analyst briefings all operate under protocols rather than improvisation.
5. Conservative defaults during ambiguity. When a piece of content is genuinely ambiguous, the default is to delay or omit, not to publish and clarify later. The cost of delay is small. The cost of an export control finding is enormous.
Funding Announcements and Foreign Capital
Defense and dual-use companies raising capital face a specific communications challenge around foreign LPs. The structural reality:
- U.S. defense-tech funding rounds increasingly include foreign LPs through fund-of-fund structures, sovereign wealth fund commitments, and direct strategic investment
- Several allied jurisdictions (UK, Australia, Japan, Israel) are explicitly favored, while others (China, Russia, several intermediary jurisdictions) are explicitly restricted
- The Committee on Foreign Investment in the United States (CFIUS) reviews certain foreign investments in defense and critical technology companies
The communications discipline around funding announcements:
- Disclose lead investors and named participants with normal precision
- Avoid disclosing the full LP base in any single investor unless required
- Coordinate the public posture of foreign investors (where any) with export control counsel
- Time the announcement after any required CFIUS review is complete, where applicable
- Do not preempt CFIUS findings through public commentary
Funding rounds that announce well and survive CFIUS review compound brand authority. Funding rounds that announce prematurely and trigger CFIUS scrutiny produce months of negative coverage.
Allied Export Control Regimes
A communications function serving any company with allied government engagement has to be fluent in the corresponding allied regimes:
- United Kingdom — Strategic Export Controls, administered by the Export Control Joint Unit. The UK regime operates with slightly different categorizations than the U.S. but addresses comparable scope.
- European Union — Dual-Use Regulation (Regulation 2021/821) plus national-level controls in member states. France, Germany, Italy, and Sweden each maintain national defense export controls in addition to the EU framework.
- Australia — Defence Trade Controls Act, administered by the Defence Export Controls office. AUKUS technology transfer pathways have reduced certain controls but added others.
- Israel — Defense Export Control Act administered by the Ministry of Defense. The Israeli regime is among the more sophisticated outside the U.S. framework, reflecting the country's defense export volume.
- Japan — Foreign Exchange and Foreign Trade Act, with substantial recent updates aligning Japan more closely with U.S. and allied controls on advanced technology.
The structural communications implication: coordinated allied messaging requires coordinated allied export control review. A press release issued in three capitals about an AUKUS technology transfer requires three regulatory reviews, not one.
What This Pillar Connects To
ITAR-aware messaging connects directly to Pentagon press strategy (the trade press surface where many disclosures happen), to dual-use brand positioning (where the publishable surface is shaped by export control), to congressional appropriations communications (where international FMS programs intersect with allied export control regimes), and to crisis communications (where export control findings represent one of the most damaging crisis categories a defense company can face).
Defense communications functions that operate without export control fluency eventually produce a disclosure problem. The serious ones operate with fluency from the beginning and treat compliance as a permanent operating discipline, not a periodic legal review.
ITAR is administered by the State Department and governs defense articles and defense services. EAR is administered by the Commerce Department and governs dual-use technology. The two regimes have different jurisdictional scope, different licensing requirements, and different penalty structures.
Can a defense company publish capability claims about ITAR-controlled products?
Yes, within the publishable surface that has been cleared inside the export control framework. Marketing language, mission narrative, and authorized customer references are typically publishable. Detailed technical specifications, test data, and component-level disclosure typically require specific authorization.
What is a "deemed export"?
A deemed export is the release of controlled technology or technical data to a foreign person, even inside the United States, that is treated as an export under U.S. export control regimes. Public disclosure that makes controlled information accessible to foreign persons can constitute a deemed export.
Are press releases reviewed by export control counsel?
At well-run defense companies, yes. Standard practice integrates export control review into the press release workflow. Companies that skip this step occasionally produce findings that cost more than the press release earned.
How does export control affect international expansion communications?
Substantially. Announcements of international offices, partnerships, customers, and hires all sit inside export control frameworks. Allied expansion is generally feasible with appropriate licensing; expansion into countries with restricted designation is generally not.
---
Part of the EPR Defense & Defense-Tech vertical. Continue with [Crisis Communications for Defense Contractors](/crisis-communications-defense-contractors/) and return to [The State of Defense-Tech in 2026](/state-of-defense-tech-2026/).
