Skip to content

Your Enterprise Cloud Data Protection Platform

StratoKey's Cloud Data Protection (CDP) Platform helps provide enterprises the security controls needed to keep data safe and compliant in the cloud.

Cloud Data Protection Platform

Cloud Compliance Manager

Compliance management and reporting for HIPAA, GDPR, ITAR, CMMC, NIST 800-53 & 171 and any other regulation or standard.

When You Can't Compromise on Security

StratoKey helps enterprises meet evolving security and compliance requirements with encryption, tokenization, and access controls across SaaS, APIs, and cloud.

There is a new CMMC Style Cybersecurity Guide for GSA: CIO-IT Security-21-112
GSA’s CMMC-LIKE GUIDE

StratoKey

StratoKey has secured sensitive cloud data for clients globally since 2014. Trusted for when you cannot compromise on security, it’s a mission-critical platform used daily for reliable data protection.

Company

Connect

The CDP Platform Now Secures NetSuite SuiteProject Pro

Secure-suiteprojects-pro-with-encryption

 

NetSuite ITAR

StratoKey’s integration with NetSuite® empowers organizations to confidently manage and secure ITAR-controlled data within their NetSuite (and SuiteProjects Pro) environment. By providing seamless end-to-end field and file encryption, tokenization, and strict access controls, StratoKey helps keep sensitive ITAR-controlled data in NetSuite secure and compliant. With this integration, organizations can enforce ITAR controls, meet ITAR encryption carve-out standards, store technical data in FedRAMP-authorized environments, prevent unauthorized access, especially by non-U.S. citizens, and maintain full control over regulated data, all without disrupting NetSuite workflows.

Meet Your ITAR Compliance Requirements

NetSuite's strength in enabling global business operations also presents possible ITAR compliance risks for organizations dealing with ITAR-controlled data. Through the supply chain, sensitive technical data such as Bills of Materials, Work Orders, blueprints, engineering documents etc. need to be secured for ITAR compliance, allowing only U.S. citizens and ITAR-authorized access. This is where StratoKey comes in, providing granular control and visibility over access to ITAR-controlled data.

Secure Technical Data With End-to-End Encryption for NetSuite

StratoKey secures controlled technical data end-to-end using FIPS-validated 140-2 / 140-3 encryption libraries before data ever leaves your environment. Properly implemented, this means you control at a granular level who can access ITAR-regulated data and that the activity of sharing the technical data is not deemed an export activity, known as ITAR-encryption carve-out, 22 CFR 120.54. 

Tightly Control Access to Technical Data in NetSuite

StratoKey’s NetSuite Integration enforces robust user identification, granular permissions, group policies, and advanced authentication, ensuring only authorized U.S. persons can access ITAR-controlled technical data. This prevents unauthorized or offshore access while leveraging the full benefits of NetSuite's cloud technology.

Local Data Storage in FedRAMP Authorized Environments

StratoKey’s tokenization engine enables secure and compliant local storage of ITAR-controlled data. By tokenizing technical data, only non-sensitive tokens are used in NetSuite, while the original data is encrypted and stored locally. This meets ITAR data residency requirements and supports storage within FedRAMP-authorized environments like Microsoft GCC High, Azure Government, and AWS GovCloud.

Monitor and Audit Access to Technical Data

Powerful audit and monitoring capabilities automatically log all interactions with ITAR-secured technical data to support end-use monitoring as required by 22 CFR 120.17.  These features help organizations identify and self-report control violations, supporting voluntary disclosures under 22 CFR 127.12 and acting as a mitigating factor in any potential penalties.

ITAR Encryption Carve-out and NetSuite

ITAR-regulated technical data that has been encrypted end-to-end in accordance with the implementation requirements within 22 CFR § 120.54(a)(5) meets ITAR encryption carve-out. Encryption carve-out means the activity of "Sending, taking, or storing" that data is not considered an export. StratoKey can be used to meet encryption carve-out requirements for NetSuite.

Encryption for NetSuite Using Approved Standards

StratoKey enables organizations to meet the specifications outlined for ITAR encryption carve-out 22 CFR 120.54(a)(5)(iii). StratoKey secures data in NetSuite by leveraging FIPS 140-2 / 140-3 validated encryption for data in transit and at rest, exceeds the 128-bit security requirement and aligns with NIST standards.

NetSuite Cannot Access Encryption Keys

The unique StratoKey architecture allows organizations to maintain control over encryption keys, ensuring that keys are never transmitted to third parties (including NetSuite). Encryption key separation is a key requirement for carve-out 22 CFR 120.54(b)(1)(ii).

End-to-End Encryption for NetSuite

Utilize end-to-end encryption for NetSuite data, safeguarding it from the source (or security boundary) to the destination (or recipient’s boundary). This ensures data remains encrypted throughout its lifecycle, never exposed in plain-text, meeting 22 CFR 120.54(b)(1)(i).

NetSuite Integration Features for ITAR Compliance

StratoKey enables ITAR compliance within NetSuite by securing sensitive data, enforcing strict access controls, monitoring user activity, and maintaining detailed audit trails. When configured, these features ensure only authorized U.S. persons can access ITAR-regulated information in your NetSuite environment.

NetSuite-ITAR-compliance-encryption-2
  • End-to-end encryption of fields and files using NIST standard encryption methods.
  • End-to-end encryption of BOMs, Work Orders, Transactions etc.
  • Encryption key separation to remove cloud service provider access (CMEK, BYOK).
  • Tokenization support for data onshoring to limit access to ITAR-regulated data to the U.S.
  • Tokenization support for local storage of technical data in FedRAMP-authorized environments (GCC High, Azure Government, AWS GovCloud).
  • Real-time user monitoring and detailed audit trails for end-use monitoring and reporting.
  • Security analytics of interactions with ITAR-regulated data.
  • Security Rule and Policy Enforcement to limit access to ITAR-regulated data.
  • Single Sign On support (SSO).
  • No performance impact.
  • Support for workflows, integrations and SuiteScripts.
  • Zero end-point configuration for smooth implementation.

Defense Contractor Using NetSuite for ITAR-Controlled Data

A U.S. satellite communications company designs and manufactures secure satellite transponders for government and military customers. The company uses NetSuite as its ERP platform to manage procurement, inventory, and engineering documentation, including Bills of Materials (BOMs) and technical specifications for its satellite hardware.

ITAR Challenge

A U.S. satellite communications company using NetSuite faces ITAR compliance risks because its global workforce and cloud access could allow non-U.S. persons to view sensitive technical data, violating ITAR rules. Multi-tenant hosting and third-party integrations increase exposure risks, potentially leading to compliance failures, fines, or contract loss.

StratoKey Solution

To address these risks, the company implements StratoKey Cloud Data Protection platform, which provides end-to-end encryption and strict access controls for ITAR controlled technical data including BOMs constructed in NetSuite. StratoKey works with the company to configure access controls to ensures only authorized U.S. persons can access ITAR-regulated information, maintaining compliance while allowing global NetSuite usage and operations.

Request the StratoKey NetSuite ITAR Compliance Brochure

If you would like to know more about how StratoKey can assist with NetSuite ITAR compliance, please contact us.

stratokey-ITAR-Compliance-NetSuite

* EMAD™ is a trademark of StratoKey Pty Ltd.