年度自我分类报告 - 我需要吗？

Question

My iOS App ONLY makes HTTPS calls to send data from the app to the server. And I also use bcrypt to encrypt passwords on the back end. Would I need to submit a classification report? This is what I see when I click 'No' when asked to provide export compliance information.

And this is what I see when I click 'Yes' and 'Next'

I am located in Asia, so which options should I check? And would I need to submit a self classification report if my app only makes HTTPS calls to send data to the server and only uses encryption in the back end?

Answer 1

The connection between your app and your server is encrypted when you make HTTPS calls so your app is using encryption.

Your app is subject to Export Administration Regulations when you make your app available to users outside of the US and Canada because this means you are exporting an app using encryption from the App Store servers located in the US

You do need to submit a self classification report between January 1st and February 1st.