International Traffic in Arms Regulations (ITAR)

The International Traffic in Arms Regulations (ITAR) are a set of U.S. government regulations administered by the U.S. Department of State’s Directorate of Defense Trade Controls (DDTC). These regulations control the export of defense articles and defense services. Among other things, these regulations place restrictions on the handling of software and technical data controlled on the United States Munitions List (USML). You can find more information about the ITAR on the DDTC website.

Google Cloud supports customers with ITAR-controlled software or technical data with security controls provided through Assured Workloads.

Google Workspace supports customers with ITAR-controlled software or technical data by providing the Workspace Client-side encryption feature. When properly configured and integrated into the customer’s broader ITAR compliance procedures, the Client-side encryption feature in Workspace applications can be used to meet the requirements of the ITAR’s end-to-end encryption carve-out (see 22 C.F.R. 120.54(a)(5)) as implemented in March 2020.