Martin Larsen Active Member Licensed User Longtime User Oct 8, 2020 #1 When submitting my app, App Store asks for Export Compliance Information. The question is asked here but little information is given. Apple's info page says: Use of encryption includes, but is not limited to: Making calls over secure channels (i.e. HTTPS, SSL, and so on). So I guess the answer to Does your app use encryption? is yes. But then comes a number of other questions: Does your app qualify for any of the exemptions provided in Category 5, Part 2 of the U.S. Export Administration Regulations? I guess No. Does your app implement any encryption algorithms that are proprietary or not accepted as standards by international standard bodies (IEEE, IETF, ITU, etc.)? I guess No. Does your app implement any standard encryption algorithms instead of, or in addition to, using or accessing the encryption within Apple’s operating system? Well, yes? https? Is your app going to be available on the App Store in France? Hmm, although it is in Danish only, there could be Danes in France wanting to use the app. So yes. Version 1.0 (1.0) cannot be submitted at this time because the build does not have associated export compliance documentation. What ??? If I answer No to France, I get: If you are making use of ATS or making a call to HTTPS, you are required to submit a year-end self classification report to the US government What classification report? Really? Please, what should I ask to all these questions? It's a nightmare!
When submitting my app, App Store asks for Export Compliance Information. The question is asked here but little information is given. Apple's info page says: Use of encryption includes, but is not limited to: Making calls over secure channels (i.e. HTTPS, SSL, and so on). So I guess the answer to Does your app use encryption? is yes. But then comes a number of other questions: Does your app qualify for any of the exemptions provided in Category 5, Part 2 of the U.S. Export Administration Regulations? I guess No. Does your app implement any encryption algorithms that are proprietary or not accepted as standards by international standard bodies (IEEE, IETF, ITU, etc.)? I guess No. Does your app implement any standard encryption algorithms instead of, or in addition to, using or accessing the encryption within Apple’s operating system? Well, yes? https? Is your app going to be available on the App Store in France? Hmm, although it is in Danish only, there could be Danes in France wanting to use the app. So yes. Version 1.0 (1.0) cannot be submitted at this time because the build does not have associated export compliance documentation. What ??? If I answer No to France, I get: If you are making use of ATS or making a call to HTTPS, you are required to submit a year-end self classification report to the US government What classification report? Really? Please, what should I ask to all these questions? It's a nightmare!
Erel B4X founder Staff member Licensed User Longtime User Oct 8, 2020 #2 This is a question for lawyers and I'm not one. This might be useful: Complying with Encryption Export Regulations | Apple Developer Documentation Declare the use of encryption in your app to streamline the app submission process. developer.apple.com Search for: "Typically, the use of encryption that’s built into the operating system" Upvote 0
This is a question for lawyers and I'm not one. This might be useful: Complying with Encryption Export Regulations | Apple Developer Documentation Declare the use of encryption in your app to streamline the app submission process. developer.apple.com Search for: "Typically, the use of encryption that’s built into the operating system"
Martin Larsen Active Member Licensed User Longtime User Oct 8, 2020 #3 Thanks. What do B4i users typically answer to these questions? I guess you all needed to answer? Upvote 0
Semen Matusovskiy Well-Known Member Licensed User Oct 8, 2020 #4 There is an 'explanation' - https://help.apple.com/app-store-connect/#/devc3f64248f Your app uses ATS or makes a call to HTTPSNo documentation required in App Store Connect. Submit a Self Classification Report to the U.S. Bureau of Industry and Security (BIS) directly. As I understand, Does your app use encryption? Yes Does your app qualify for any of the exemptions provided in Category 5, Part 2 of the U.S. Export Administration Regulations? Yes, because Limited to authentication, digital signature, or the decryption of data or files Upvote 0
There is an 'explanation' - https://help.apple.com/app-store-connect/#/devc3f64248f Your app uses ATS or makes a call to HTTPSNo documentation required in App Store Connect. Submit a Self Classification Report to the U.S. Bureau of Industry and Security (BIS) directly. As I understand, Does your app use encryption? Yes Does your app qualify for any of the exemptions provided in Category 5, Part 2 of the U.S. Export Administration Regulations? Yes, because Limited to authentication, digital signature, or the decryption of data or files
Martin Larsen Active Member Licensed User Longtime User Oct 8, 2020 #5 Thanks, Semen. It makes sense. Upvote 0
G geps Member Licensed User Longtime User May 19, 2025 #6 I’ve been through this App Store export compliance question mess too. It feels like a real maze, especially when it’s unclear what reports or documentation you actually need to submit. I found a good explanation on this page about export rules and how to defend yourself if you’re facing a BIS investigation — might help others feeling overwhelmed by all this. Last edited: May 24, 2025 Upvote 0
I’ve been through this App Store export compliance question mess too. It feels like a real maze, especially when it’s unclear what reports or documentation you actually need to submit. I found a good explanation on this page about export rules and how to defend yourself if you’re facing a BIS investigation — might help others feeling overwhelmed by all this.
mcqueccu Expert Licensed User Longtime User May 20, 2025 #7 You can add this code to the Main Module, so when you upload your build, they wont ask any question related to export compliance again. B4X: Copy 'Skip export compliance #PlistExtra: <key>ITSAppUsesNonExemptEncryption</key><false/> Upvote 0
You can add this code to the Main Module, so when you upload your build, they wont ask any question related to export compliance again. B4X: Copy 'Skip export compliance #PlistExtra: <key>ITSAppUsesNonExemptEncryption</key><false/>
