Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Export Compliance in iOS App Submission

I making a new app and want to submit to app store.

But at the time of final submission there is check for Export Compliance.

enter image description here

What should I Check Yes Or No.

I use https url in my app.

Please Help Me .

Thanks In Advance.

like image 747
saurabh_mishra_08 Avatar asked Aug 24 '17 07:08

saurabh_mishra_08


People also ask

What does export compliance mean?

Export compliance, therefore, refers to the act of complying with these regulations. It is the legal obligation of organizations to comply with all export regulations and rules that are relevant and applicable to the jurisdictions where they conduct business.

Is HTTPS exempt from export compliance?

Typically, the use of encryption that's built into the operating system—for example, when your app makes HTTPS connections using URLSession —is exempt from export documentation upload requirements, whereas the use of proprietary encryption is not.

Does your app use encryption Apple HTTPS?

App Uses Non-Exempt Encryption : No If you are making use of ATS or making a call to HTTPS, you are required to submit a year-end self classification report to the US government. Export laws require that products containing encryption must be properly authorized for export.

Does HTTPS count as encryption?

SSL (HTTPS/TLS) is still encryption and unless you are using it just for authentication, then you should get the proper approval.


1 Answers

If you are using https in your application, you will need to answer yes to this question, even if all you are using is built in mechanisms to communicate over https. The good news is that you no longer need to get the Encryption Registration Number (ERN) - the current requirements (as of August 2017) are that you just need to submit the annual self classification report to the BIS(Bureau of Industry and Security). To submit a self classification report, follow the instructions on item 13 in this FAQ: A sample Self Classification report can be found here.

For a great write up that talks about both sides of the story (apps that only use common / freely available encryption, like SSL, as well as apps that have their own, proprietary encryption, see this Medium post.

Please don't listen to other people who state that they just answer no to this question to make things easier when submitting an app.

like image 74
wottle Avatar answered Sep 20 '22 17:09

wottle