A client-side export-control audit terminal for aerospace and defense teams. Screen specifications, drawings and bills of materials against the USML and Commerce Control List and get a page-by-page map of ITAR and EAR exposure in seconds. Documents never leave your browser: no upload, no server, no LLM.
StaticBastion is built for export compliance officers, empowered officials, program managers and engineers at aerospace and defense companies who need to know one thing before a document goes out the door: does it contain ITAR or EAR controlled technical data?
How it works:
Drop a specification, drawing, bill of materials or deck. PDF, DOCX, XLSX, PPTX and plain text up to 50 MB are supported.
Text is extracted page by page inside a background Web Worker in your browser tab, including headers, footers, spreadsheet cells and slide notes.
A deterministic matcher checks every section against 6 USML categories, 20 Commerce Control List entries, export legends, distribution statements and CUI banners, plus your own organisation watchlist.
What you get:
An overall verdict with page-, sheet- and slide-level findings, each with surrounding context, the matching ECCN or USML category, the CFR legal basis and suggested remediation.
An organisation watchlist for program code names and controlled part numbers.
An encrypted audit ledger: findings are saved in your browser under AES-256-GCM with your passphrase, alongside the file's SHA-256 fingerprint, so you can show exactly which revision was screened and when. Ledgers are portable via encrypted backup.
Zero-knowledge by construction:
StaticBastion is a static application with no application server, no database and no analytics. Technical data never leaves the browser, so there is no third-party cloud to clear for ITAR or CUI handling.
There is no LLM and no model drift: the same file and matrix version always produce the same findings, each traced to a trigger term, a page and a CFR reference.
Every subscriber gets the full terminal, with a 30-day free trial and no card required.
StaticBastion is a screening aid, not a formal commodity jurisdiction or classification determination. Not legal advice.
Highlights
Zero-knowledge screening: documents are parsed and matched entirely inside your browser sandbox. No upload, no server, no analytics and no third-party cloud to clear for ITAR or CUI.
Page-level ITAR and EAR findings: every hit is mapped to a USML category or ECCN with context, CFR legal basis and remediation, across PDF, DOCX, XLSX, PPTX and text.
Deterministic and auditable: no LLM or model drift, an organisation watchlist, and an AES-256-GCM encrypted audit ledger with SHA-256 file fingerprints.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
This listing has one pricing dimension: Free. You pay nothing to use it. There are no tiers, instance sizes, or usage add-ons to choose from. A single flat option covers the full audit terminal, so pricing does not scale with usage, documents, or seats. Everything runs inside your browser, so there is no metered cloud consumption to track. You simply activate the Free dimension and begin screening files.
Top-of-mind questions for buyers
What does the Free dimension include for screening export-control documents?
The Free dimension gives you the whole audit terminal. You can screen PDF, DOCX, XLSX, PPTX, and text files up to 50 MB. It checks against USML categories, Commerce Control List entries, export legends, and CUI markings. You also get an organisation watchlist and an encrypted audit ledger.
Does my cost change as I screen more files or add more users?
No. The Free dimension does not meter usage. Parsing and matching run inside your browser tab, not on a cloud server. There is no per-document, per-seat, or per-page charge to track. Screening one file or many thousands costs the same: nothing.
Are there separate charges for storing audit reports or for the file processing?
No. Findings save locally to your browser's encrypted storage under a passphrase, alongside each file's SHA-256 fingerprint. Processing runs in a background Web Worker inside your tab. Because nothing uploads to a server, there is no metered storage or compute fee tied to the Free dimension.
staticbastion.com
Helpful?
Vendor refund policy
No refunds
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Vendor support is provided through https://staticbastion.com. Email sales@staticbastion.com with any questions about access, your subscription or the terminal. Because all documents and findings stay encrypted locally in your browser, support staff can never see or recover your data; please keep your passphrase and an encrypted backup safe.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Bastion Technologies is the all in one Service-as-a-software solution (cybersecurity & compliance SaaS platform + service) dedicated to SaaS, tech and AI startups and scale-ups to get compliant (SOC 2, ISO 27001, C5, GDPR etc.) and secure fast and smooth.
Simplify compliance and security challenges by blocking inbound IP connections from ITAR and OFAC sanctioned countries. These managed rules track changes from the US State Department International Traffic in Arms Regulations, and the US Treasury Department Office of Foreign Asset Control.
QuotaGuard Shield is a HIPAA/PCI compliant solution that routes HTTPS and Secure SOCKS traffic through a pair of load balanced static IP addresses, built to handle traffic that needs full end-to-end protection of Financial / Health / PII and other sensitive information.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.