The Military Critical Technical Data Agreement (DD2345) is the institutional form the University fills out to register in the Joint Certification Program (JCP). Through the JCP, U.S. and Canadian defense contractors to apply for access to U.S. Department of Defense (DoD) or Canadian Department of National Defense (DND) unclassified export controlled technical data/critical technology on an equally favorable basis. The Joint Certification Office is staffed by DoD and DND staff that review and certify contractor applications submitted on the DD2345.
The University of Virginia's certification is principally used to facilitate either the exchange of export controlled technical data between defense contractors (i.e., between prime contractor and subcontractor) or the participation of University researchers in DoD/DND sponsored events (e.g., to discuss program requirements or present research findings). Under the JCP, data is sent to the recipient's Data Custodian named on the DD2345 who is then responsible for ensuring that appropriate safeguards (controls) are put in place to prevent unauthorized disclosures and exports before releasing it to the end user (i.e., researcher).
Note: University faculty, staff, trainees, and students engaging in University supported activities are required by the JCP to use our institutional certification rather than register as an individual.
Given that the purpose of the JCP is to facilitate the exchange of export controlled technical data, the Office of Export Controls is responsible for administering the University's certification under the oversight of Data Custodian.
Certification Details:
- Enterprise Name: The Rector and Visitors of the University of Virginia
- Certification Number: 0023855
- Expiration Date: 05/03/2026
- Data Custodian: Kelly Hochstetler (kjh5e@virginia.edu or 434-982-5725)
Process: All DD2345-related questions and requests must be directed to the Data Custodian; documents should be emailed to export-controls@virginia.edu to expedite processing. Examples include, but are not limited to, requests for a copy of the University's approved DD2345, employment verification with DD2345 authorization, and representations and certifications associated with sponsored programs proposals or awards.
An approved Technology Control Plan (TCP) is required for all JCP data, regardless of format, that will be accessed, developed, provided, used, or stored by or on behalf of the University or University personnel. A TCP is not required for meeting participation unless the participant will be retaining notes, conference proceedings, presentations, etc. from the meeting that require safeguarding.
Safeguarding: While not specifically required by the JCP, associated contractual requirements may require that subject data be safeguarded as controlled unclassified information (CUI). For more information on CUI safeguarding visit the University's CUI webpage.