Preparing controlled-document copies: ITAR and CMMC considerations

Plan this review copy

Determine the material’s classification, access restrictions and approved processing environment before opening it. ITAR and CMMC address different obligations; neither can be reduced to whether a PDF tool uses the cloud. Have the responsible security or export-control team approve the workflow. TruePage is not represented as CMMC-certified, an export-control determination service or an approved system for classified information.

Official reference: DoD CIO — CMMC, 22 CFR 120.54.

Local processing is one part of a document workflow, not a compliance certification. Confirm which rules apply, who may access the records, and which systems your organization authorizes. These instructions cover document preparation, not a determination of legal compliance.

The regulatory sources discussed here concern US frameworks. Applicability, including contractual obligations outside the US, requires review by the responsible organization; local processing is not certification.

A fictional packet with explicit boundaries

The table is an assembly example, not a required submission order. Confirm the recipient’s actual list first; use only authorized copies. The counts are invented to make missing pages easy to detect.

Order	Document	Pages	Check before inclusion
1	Cover note	1	Approved contract scope
2	Approved drawing	3	Approved contract scope
3	Approved annex	2	Approved contract scope

Expected output: 6 — one PDF, in the listed order. Keep separate files when the recipient requests separate fields or categories.

Exclude unrelated records, superseded copies and material the recipient did not request. Removing a page is not redacting sensitive text on a retained page; use an appropriate tool when redaction is required.

Assemble without losing document boundaries

Add the approved files, arrange each complete document in the table’s order, and inspect the boundary between documents. Rotate or remove only the intended page copies. Export all pages under a new name, then open the saved PDF and compare it with the list. If a row is missing or a page belongs to another case, correct the inputs rather than accepting the expected total.

Page organization and export instructions

This retained native screenshot shows controls using synthetic guide files; it does not represent this fictional professional packet.

Before handing it over

Confirm recipient authority, document versions and dates, complete attachments, readable details, filename and output destination. Keep signed originals and authoritative records in their approved system. Use the approved delivery channel; assembly does not complete an upload or submission.

TruePage does not provide OCR, existing-text editing, redaction or signatures. Compression and password operations use a whole source PDF: export the arrangement first. Cloud-synced output folders follow their own policies.