Scenario 1: A partner or customer has an employee who is a non-US citizen: the organization must apply for an export license for the foreign employee concerned, ensuring that the employee is not a citizen or resident of the proscribed countries. Without the license, when the non-US employee tries to access ITAR-related technical data, access should be denied.
Scenario 2: A partner of customer has US employees located both in the US and foreign countries: employees who are US citizens and are in the US can access any controlled information regardless of where the data resides (SAP, SharePoint, etc.). However, if the employee is in a foreign country, access to these technical data will be denied. Since the employee is located outside of the US, it is required for organizations to obtain authorizations or licenses to allow this employee to access the data from outside the US.
Scenario 3: A partner or customer whose company is based outside the US: In most cases, a company that is based outside the US would have non-US employees. In this case, technical data can only be shared or exported if there are appropriate licenses or agreements in place.