US Market Entry · United Kingdom · AUKUS-Era Defense & Aerospace Manufacturers
AUKUS lowered the barrier. The carve-outs are where the work is.
AUKUS Pillar 2 is lowering export-control barriers between the UK, the US, and Australia, not erasing them. The carve-outs and the exclusions are the part that decides whether your controlled work can cross the Atlantic or has to be built here. I stand up and run the compliant US operation that holds either way, to a CMMC and ITAR-ready posture, in the New England corridor where the primes already are.
The direct answer
How a UK manufacturer enters the US defense market.
A UK defense or aerospace manufacturer enters the US defense market by standing up a compliant US operation: a US entity, a US-person data boundary, and a floor that runs to a CMMC Level 2 and ITAR-ready posture from the first day it opens. AUKUS Pillar 2 is easing some export-control friction between the three nations, but significant carve-outs remain, and the reciprocal defense-procurement agreement is a procurement preference, not an ITAR or CMMC waiver. The US-person data boundary is still the build.
The UK sits in the AUKUS lane, and that lane is moving. Pillar 2, the advanced-capabilities pillar, is actively lowering the ITAR barriers between the UK, the US, and Australia. What the headlines miss is that the barriers are lowered, not removed. Exclusions and carve-outs remain, and knowing which of your technical data still needs a US-person boundary is exactly the nuance the reforms create rather than resolve.
For the work AUKUS does not clear, the answer is the same one every allied manufacturer reaches: a real US operation that holds controlled technical data compliantly, near the primes, on a CMMC Level 2 and ITAR-ready floor. AUKUS changes what crosses the border. It does not change the fact that a US operation still has to be stood up and run to a posture an assessor will accept.
New England is the landing zone. The prime relationships, the supply base, and the compliance depth are already here. A UK parent onshoring into the corridor gets an operator on the ground who reads the carve-outs and builds to them, instead of a data-room product sold as if AUKUS had made the boundary go away.
Know your work class
Most UK sub-tier work lands in one class.
Before anyone quotes a UK parent a timeline, you need to know which class of defense work you are chasing. Commercial and dual-use parts need only a US entity and a clean quality system. Classified work needs a facility clearance and FOCI mitigation negotiated with DCSA, which stays with your cleared-facility counsel.
The bulk of sub-tier DoD manufacturing sits between them: controlled technical data, CUI, ITAR-controlled but unclassified. AUKUS Pillar 2 touches some of this data and leaves the rest under the standard regime, so the class you are in decides the build. That class needs DDTC registration, a US-person data boundary, and CMMC Level 2 in the workflow, and a foreign-owned US entity can reach it without a facility clearance.
● The class I build and run
That middle class, CUI and ITAR-controlled but unclassified, is the class I build and run. It is where a UK supplier's US operation lives, carve-outs or no carve-outs.
The 90-day operating build
A compliant US floor in one quarter, built to the carve-outs.
The build runs in parallel, not in sequence, because a prime gate does not wait for you to finish one phase before starting the next. The operating model, the IT and OT environment, and the compliance posture come up together.
Days 1 to 30
Diagnostic and design
Stand up the US operating model on paper and on the floor, and map which of your controlled technical data the AUKUS Pillar 2 carve-outs still gate versus what needs a US-person boundary. The org, the value stream, the SQDIP cadence, and the data border come up together.
Days 30 to 60
Stabilize and build
Bring the IT and OT environment to a CMMC and ITAR-ready posture from day one. Scope the CUI enclave tight around the data that stays controlled, so the assessment stays sane and the boundary holds where AUKUS does not yet reach.
Days 60 to 90
Qualify and run
Sequence the readiness evidence against the prime gate you are actually racing, coordinate the FOCI and DDTC steps with your counsel, and hand your team a floor that holds after I step back.
The UK lane, answered
Three questions an AUKUS-era supplier asks first.
Does AUKUS Pillar 2 mean we no longer need ITAR compliance in the US?
No. AUKUS Pillar 2 is lowering some export-control barriers between the UK, the US, and Australia, but significant carve-outs and exclusions remain, and the reforms are still being implemented. Some of your controlled technical data will move more freely, and some will still need a US-person data boundary. Which is which is the analysis that decides your build. The safe operating assumption is that the boundary is still required until the specific carve-out says otherwise.
We already sell to US primes from the UK. Why stand up a US operation?
You stand up a US operation when a program needs controlled technical data held inside a US-person boundary, when a domestic-content threshold applies, or when a prime expects a supplier with a real US footprint near the line. AUKUS makes some cross-border work easier. It does not remove the cases where the DoD or the prime needs the operation itself to be American.
Is qualifying-country status the same as an ITAR exemption?
No. The United Kingdom is a DFARS qualifying country under a reciprocal defense-procurement agreement, which gives your end products a procurement preference against Buy American restrictions. It is not an ITAR exemption, a CMMC exemption, or a FOCI clearance. Those regimes still apply in full, and building for them is the work.
What I own
The operations partner, not the law firm.
I stand up and run the compliant US operation: the floor, the operating model, the IT and OT build, the US-person data boundary, and the readiness evidence for the gate you are racing. Entity formation, FOCI mitigation, and site selection stay with your corporate counsel, your export-control counsel, and a site-selection advisor. I coordinate with them and own the operating outcome.