AN-063 Build guides · cluster
Military PCB Assembly: ITAR, Traceability, and Who Qualifies
Military PCB assembly requirements by name: ITAR registration, IPC J-STD-001 and Class 3, AS9100, DFARS counterfeit-part and cyber clauses, traceability.
by the HardwareMap editors4 min read
Contents
Military PCB assembly is ordinary surface-mount and through-hole assembly wrapped in requirements: export control, a stricter workmanship class, an aerospace quality system, counterfeit-part controls and full traceability. This note names each requirement and links the authority behind it. It sits under electronics contract manufacturers, next to PCB assembly in the USA.
Military PCB assembly requirements, by name
These are the names that show up in defense purchase orders. Not every one applies to every board, and contracts often add program-specific requirements on top.
ITAR and controlled data
The International Traffic in Arms Regulations control defense articles, defense services and the technical data behind them. For a board, technical data can include the Gerbers, drawings and test procedures, so the question starts before anything is built: who may receive the files.
Two points matter for choosing an assembler. First, 22 CFR Part 122 generally requires persons in the United States who manufacture or export defense articles to register with the Directorate of Defense Trade Controls. Registration has an annual fee; the Tier 1 fee is $3,000 a yearest. Registration is not a license and does not by itself authorize any export. Second, controlled data handling is a process: access limited to authorized persons, controlled file transfer, visitor controls on the floor.
Whether a board is on the U.S. Munitions List or falls under the Commerce Department's Export Administration Regulations is a classification decision. Make it with counsel, in writing, before you send files to anyone.
Workmanship and quality systems
IPC J-STD-001 sets how joints are made; IPC-A-610 sets how they are judged. Both define three classes, and defense and aerospace work commonly specifies Class 3. In practice Class 3 tightens criteria such as barrel fill on through-hole joints, wetting and allowable defects, and it adds inspection time to the quote. IPC also certifies operators and inspectors to these standards, so ask how many of the assembler's staff hold current certification.
AS9100 sits one layer up. It is a quality management system standard for aviation, space and defense organizations, built on ISO 9001 with added requirements for configuration management, risk, counterfeit part prevention and supplier control. Primes commonly require it through supplier terms. Ask to see the certificate and the scope it covers, and check it against the registrar's listing.
Bare boards have their own track. Programs may call out IPC-6012 Class 3, or military performance specifications for printed boards that require a qualified board shop. That is the fab side of the one vendor or two decision, and it often forces two.
Budget for the difference. Class 3 inspection, X-ray on more packages, first-article reports, serialization and a fuller build record all add hours, and fewer shops can quote the work. Get the requirement list from your customer before the first quote, so every vendor prices the same scope and you are not re-quoting after award.
Traceability and counterfeit parts
DFARS 252.246-7007 asks covered contractors for a counterfeit electronic part detection and avoidance system: trained personnel, risk-based inspection and test, traceability from the original manufacturer, quarantine and reporting of suspect parts to the contracting officer and GIDEP, and flow-down to subcontractors at all levels. On a board, that turns into concrete asks:
- Parts bought from the original manufacturer or its authorized distributors, with certificates of conformance.
- Lot and date codes recorded per reference designator or per build.
- Serial numbers on each assembly, linked to its build record, inspection results and test data.
- A written process for any part bought outside authorized channels.
Cyber rules reach the assembler too. DFARS 252.204-7012 covers controlled unclassified information on contractor systems, and 252.204-7021 makes a CMMC level a condition of award. CMMC Phase 1 began on 10 November 2025, and Phase 2, which brings third-party Level 2 assessments for applicable contracts, is scheduled from 10 November 2026. If your drawings are controlled, the assembler's IT systems are in scope.
Who qualifies: questions to ask a military PCB assembly vendor
The index carries 11 defense companies as of REV 26.09, and their products run on boards built this way. Some make sourcing part of the pitch: Neros describes its Archer drone as built without Chinese components. The defense tech startups list covers the rest.
Frequently asked questions
Does a PCB assembler need ITAR registration?
Under 22 CFR Part 122, persons in the United States in the business of manufacturing or exporting defense articles are generally required to register with the State Department's Directorate of Defense Trade Controls. Whether a given board is a defense article depends on its classification under the U.S. Munitions List. That classification is a legal question for your counsel and your customer, not your assembler's sales team.
What IPC class is used for military PCB assembly?
Defense and aerospace programs commonly call out IPC Class 3, the high-performance class, in IPC J-STD-001 for soldering and IPC-A-610 for acceptance. Some programs add the space addendum or customer-specific requirements on top. The class is set by the contract or the prime's drawing, so read the flow-down documents rather than assuming Class 3 is required or sufficient.
What is AS9100 and does a defense assembler need it?
AS9100 is the aerospace quality management system standard, published by SAE and built on ISO 9001 with added requirements for configuration management, product safety, counterfeit prevention and supplier control. Many defense and aerospace primes require it of their suppliers through purchase order terms. It is a contractual requirement in most cases, so the prime's supplier requirements decide whether a given assembler must hold it.
What does DFARS require for electronic parts?
DFARS 252.246-7007 requires covered contractors to keep a counterfeit electronic part detection and avoidance system, including traceability, inspection and reporting of suspect parts, and to flow it down to subcontractors. Other clauses cover cybersecurity for controlled information and specialty metals. Which clauses apply depends on the contract, so the clause list in your purchase order or subcontract is the starting point.
Can a startup use offshore assembly for a defense product?
Sometimes for unclassified, non-controlled hardware, often not for controlled items. Export controls restrict who may receive controlled technical data, including Gerbers and drawings, and many defense contracts add domestic sourcing or supplier-approval terms. Decide the classification and contract terms with counsel first, then choose the assembler. Many defense startups keep assembly domestic from the first prototype to avoid rework later.
HardwareMap catalogues the defense hardware startups these assemblers build for. Building one? Submit it and get a part number.
Building one?
Submit it to the index and get a part number. Every entry is reviewed by hand.