US Market Entry · United Kingdom · AUKUS-Era Defense & Aerospace Manufacturers
US operations for UK defense manufacturers: AUKUS lowered the barrier, the carve-outs are the work.
AUKUS Pillar 2 is lowering export-control barriers between the UK, the US, and Australia, not erasing them. The carve-outs decide whether your controlled work can cross the Atlantic or has to be built here. I stand up and run the compliant US operation that holds either way, in the New England corridor.
The direct answer
How a UK manufacturer enters the US defense market.
A UK defense or aerospace manufacturer enters the US defense market by standing up a compliant US operation: a US entity, a US-person data boundary, and a floor at a CMMC Level 2 and ITAR-ready posture from the day it opens. AUKUS Pillar 2 is easing some export-control friction between the three nations, but significant carve-outs remain, and qualifying-country status is a procurement preference, not an ITAR or CMMC waiver. The US-person data boundary is still the build.
The UK sits in the AUKUS lane, and that lane is moving. Pillar 2, the advanced-capabilities pillar, is lowering the ITAR barriers between the UK, the US, and Australia. Lowered is not removed. Exclusions and carve-outs remain, and knowing which of your technical data still needs a US-person boundary is the nuance the reforms create rather than resolve. That reading is where the work starts.
For the work AUKUS does not clear, the answer is the one every allied manufacturer reaches: a US operation that holds controlled technical data compliantly, near the primes, on a CMMC Level 2 and ITAR-ready floor. AUKUS changes what crosses the border. The operation still has to be stood up and run to a posture an assessor will accept.
New England is the landing zone. The prime relationships, the supply base, and the compliance depth are already here. A UK parent onshoring into the corridor gets an operator on the ground who reads the carve-outs and builds to them, not a data-room product sold as if AUKUS had removed the boundary.
Know your work class
Most UK sub-tier work lands in one class.
Settle which class of defense work you are chasing before anyone quotes a UK parent a timeline. Commercial and dual-use parts need a US entity and a clean quality system. Classified work needs a facility clearance and FOCI mitigation negotiated with DCSA, which stays with your counsel.
Most sub-tier DoD manufacturing sits between them: controlled technical data, CUI, ITAR-controlled but unclassified. AUKUS Pillar 2 touches some of that data and leaves the rest under the standard regime, so your class decides the build. That class needs DDTC registration, a US-person data boundary, and CMMC Level 2 in the workflow, and a foreign-owned US entity can reach it without a facility clearance.
● The class I build and run
That middle class, CUI and ITAR-controlled but unclassified, is the class I build and run. It is where a UK supplier's US operation lives, carve-outs or no carve-outs.
The 90-day operating build
A compliant US floor in one quarter, built to the carve-outs.
The build runs in parallel, not in sequence: a prime gate will not wait for one phase to finish. Operating model, IT and OT environment, and compliance posture come up together.
Days 1 to 30
Diagnostic and design
Stand up the US operating model on paper and on the floor, and map which of your controlled technical data the AUKUS Pillar 2 carve-outs still gate and which needs a US-person boundary.
Days 30 to 60
Stabilize and build
Bring the IT and OT environment to a CMMC and ITAR-ready posture from day one. Scope the CUI enclave tight around the data that stays controlled, so the assessment stays sane and the boundary holds where AUKUS does not reach.
Days 60 to 90
Qualify and run
Sequence readiness evidence against the gate you are racing, coordinate the FOCI and DDTC steps with your counsel, and hand your team a floor that holds after I step back.
The UK lane, answered
Three questions an AUKUS-era supplier asks first.
Does AUKUS Pillar 2 mean we no longer need ITAR compliance in the US?
No. AUKUS Pillar 2 is lowering some export-control barriers between the UK, the US, and Australia, but significant carve-outs and exclusions remain, and the reforms are still being implemented. Some of your controlled technical data will move more freely, and some will still need a US-person data boundary. Assume the boundary is required until the specific carve-out says otherwise.
We already sell to US primes from the UK. Why stand up a US operation?
You stand up a US operation when a program needs controlled technical data inside a US-person boundary, when a domestic-content threshold applies, or when a prime expects a real US footprint near the line. AUKUS makes some cross-border work easier. It does not remove the cases where the operation itself has to be American.
Is qualifying-country status the same as an ITAR exemption?
No. The United Kingdom is a DFARS qualifying country under a reciprocal defense-procurement agreement, which gives your end products a procurement preference against Buy American restrictions. It is not an ITAR exemption, a CMMC exemption, or a FOCI clearance. Those regimes apply in full, and building for them is the work.
What I own
The operations partner, not the law firm.
I stand up and run the compliant US operation: the floor, the operating model, the IT and OT build, the US-person data boundary, and the readiness evidence for the gate your prime set. Entity formation, FOCI mitigation, and site selection stay with your counsel and a site-selection advisor. I coordinate with them and own the operating outcome.