Cofactr is an ITAR-registered and compliant company that offers an ITAR-compliant platform for our customers. Below are some of the mechanisms in which we care for your export-controlled technical data:

We feature strong security controls including end-to-end encryption and are hosted in the secure AWS GovCloud region. All portions of our tech stack, such as product analytics and administrative tooling, that have the ability to access technical data (BOMs, etc) are deployed within our AWS GovCloud VPC

All employees with access to customer data are US persons who undergo mandatory recurring ITAR procedures training.

Customer technical data is never stored anywhere other than the Cofactr hosting in AWS.

Customer parts are stored in Cofactr's secure facility, which has extensive physical and personnel security, which you can learn more about here.

Check out this blog post from our CEO, Matthew Haber, that shares some useful info on how ITAR applies to software for hardware.