Register 09 · Compliance controls

ITAR.

ITAR draws a boundary around technical data and who may receive it. Planisphere's posture is the answer: model state never leaves the enclave, only sha-pinned metadata crosses the port — so the audit can be performed without an ITAR-controlled transfer ever occurring.

Open the Console See how a record is checked
register 09 · Compliance controls· Export control

Reviewed 2026-07-08

01 ·

What this is.

Seventy-two regulatory cite-anchors, organized for evidence lookup and review

Use. USML technical-data control · deemed-export boundary for model artifacts.

Register. 09 · Compliance controls — one of the 17 registers of the PLANiSPHERE corpus library.

02 ·

Promise. compliance

The contract this mark binds — derived, not asserted.

ITAR draws a boundary around technical data and who may receive it. Planisphere's posture is the answer: model state never leaves the enclave, only sha-pinned metadata crosses the port — so the audit can be performed without an ITAR-controlled transfer ever occurring.

Answers: How does Planisphere audit a model without triggering ITAR?

03 ·

See it work.

Evidence record you can check — not code you have to trust.

Planisphere measures your tool deployment against ITAR and seals the result into a signed, Merkle-rooted evidence record. The grade recomputes on your own hardware; the model state never crosses the boundary.

Prepare evidence for program review →See how a record is checked
04 ·

Questions this answers.

2 high-intent questions buyers search — each on its own page, each pinned to ITAR.
Does auditing my model risk an ITAR deemed-export of the weights? Read the answer → Are AI model outputs considered ITAR or EAR controlled technical data? Read the answer →
05 ·

The boundary this control draws.

Related marks, and the surface this one funnels to.

ITAR (USML technical-data control · deemed-export boundary for model artifacts) asks for an evidence record: ITAR draws a boundary around technical data and who may receive it. Read the related defense AI workflow product context at /defense.

EAR reg 09 · Dual-use export control (EAR99 / CCL) · AI-diffusion chip + weight controls ATO reg 09 · Authorization to Operate · program-office citation C-SCRM reg 09 · supply-chain risk · NIST SP 800-161r1
06 ·

Routes here from.

Where this mark is referenced in the Planisphere surface.
Defense Education Law Medicine About

Any internal link in the Planisphere site that names "ITAR" canonicalises here.

07 ·

Sibling marks. Compliance controls

Same register · same construction.
NIST AI RMF
NIST AI 100-1 · Govern · Map · Measure · Manage
OMB M-25-21/22
federal AI risk-management + acquisition
DoW RAI S&IP
Responsible · Equitable · Traceable · Reliable · Governable
EO 14179
Removing Barriers to American Leadership in AI (Jan 2025)
ISO/IEC 42001
international AI management system standard
FIPS 140-3
crypto module validation · 4 security levels
SHA-256 / FIPS 180-4
hash algorithm · per-file pinning primitive
SLSA v1.0
supply-chain levels for software artifacts
SBOM
software bill of materials · NTIA + CISA
SCITT
supply-chain integrity, transparency, trust · IETF
C-SCRM
supply-chain risk · NIST SP 800-161r1
08 ·

For each vertical.

ITAR framed for the four buyer surfaces.
For Defense

ITAR for defense AI workflow

NIST AI RMF · DoW RAI · OMB M-25-21 Open the page
For Medicine

ITAR for clinical AI workflow

HHS §1557 · HIPAA · FDA PCCP Open the page
For Law

ITAR for legal AI workflow

FRE 702 · ABA Model Rules Open the page
For Education

ITAR for tutor and grader workflow

Title VI · FERPA · §504 / IDEA Open the page

See the record ITAR asks for.

The console shows the evidence; the docs show the endpoints; the briefing shows what the product does and does not claim.

Open the Console Read the Docs Read the capability briefing
API ·

When ITAR asks for proof, hand over records — not assurances.

record the duty · seal the receipt · verify offline

Planisphere records each duty event — an output marked, a disclosure shown, a review made — and seals it into a receipt that verifies offline against our published keys. You send hashes, never content. A record is evidence a third party can check; it is not a certification and not a legal determination.

Open the Console Read the Docs Read the capability briefing

See how a record is checked