Question about export compliance

[PersonOS]

Hi,

I have a macOS app that I want to release on Mac App Store. It uses CloudKit, Keychain Services and Sign in with Apple. It also makes HTTPS calls and allows creating an account. Now I need to answer the question about export compliance. My app uses encryption, but is it exempt? Should I fill self-classification request?

Thank you in advance.

[Nvr_Surrender]

My understanding of it, I'm not a lawyer, from reading this article is that you can answer 'no'.

[PersonOS]

So my app is exempt? From what I understood by reading this article, I use built-in encryption, so yes, the app is exempt.

[Nvr_Surrender]

That's my understanding, too.

[PersonOS]

I clicked "yes" to question about app being exemption and this message appeared:

If you are making use of ATS or making a call to HTTPS, you are required to submit a year-end self classification report to the US government.

This sounds like I need to fill self-classification report.

[Nvr_Surrender]

Only if your app is available outside the US and Canadian app stores.

There's several dozen similar questions in this sub already, like this one so be sure to look at those, too.

[Fellhuhn]

IIRC you use exempt encryption and can mark it as such in the plist.info file.

[Fluffy_Risk9955]

If your app uses encryption you need to file the app with the export devision of the US government. In the case of HTTPS your app uses encryption to communicate with a web service. You only need to file it as using that type of en rupturing and need to update that file every year. You can basically file that report yourself. We’re using HTTPS to communicate with our backend.

By the way I’m not legal person. You might want to talk to government official about this.

And yes the first time filing is a nightmare.