Apple - iPhone - Cryptography

Apple - iPhone - Cryptography

iTunes Connect Developer Guide - Cryptography and U.S. Export Compliance

1. Answer questions about Export Compliance, and if needed, upload encryption authorization documents.
   Because all apps are loaded on Apple servers in the United States, all apps are subject to U.S. export laws. See Cryptography and U.S. Export Compliance for more details about this step.
2. Answer questions about Content Rights.
   Indicate whether the app has added third-party content. If you answer yes, you are asked to confirm that you have permission to use the third-party content in each territory in which the app will be available. It’s your responsibility to determine and follow regulations that apply in each territory...

Cryptography and U.S. Export Compliance

U.S. export laws require that products containing encryption be properly authorized for export. When you’re ready to upload your first build for your app or upload a new build, iTunes Connect presents a series of questions regarding software encryption. The questions are designed to determine the level of encryption in the app according to U.S. Bureau of Industry and Security (BIS) classifications. Based on your answers, you may be required to provide one or more of the following documents:

• Encryption Registration approval from BIS
  
• CCATS approval from BIS
  
• French import declaration
  

For more information on BIS requirements for encryption, go to Bureau of Industry and Security Encryption webpage.
All apps distributed through the App Store or Mac App Store must go through the encryption review: All apps are uploaded to an Apple server in the United States, which means that your product is exported from the United States and is captured by U.S. export laws. This requirement applies even if you plan to distribute apps only within your own country.

Important:  If your app requires that you provide additional documents for the encryption review, your app won’t have the Ready for Sale status on the store until Export Compliance has reviewed and approved your documents. The app can’t be distributed for prerelease testing until Export Compliance has reviewed and approved it.

If your app is not using encryption and you don’t want to have to answer these questions at the time of submission, you can provide export compliance information with your build. You can also provide new or updated documentation via iTunes Connect to receive the appropriate key string value to include with your build before uploading it to iTunes Connect.
To add export compliance documentation in iTunes Connect:

1. Go to the Encryption section under Features.
   
2. Click the plus sign next to the appropriate platform section.
   
3. Answer the questions appropriately.
   
4. Attach the file when prompted.
   
5. Click Save.