I haven't seen official guidance on where it should be placed, but there are a few things we've seen as best practices:
- It should be immediately obvious that it is export controlled, so probably on the front panel, and the first front panel that the user sees. You don't want someone to use the software for some period of time before they realize that it's export controlled.
- If a component of the software is export controlled, the entire distribution is controlled, so you will want to make it obvious at the top level. Again, the front panel.
- Some people may redistribute the software without opening it, so you will want to note it in the documentation as well.
- Our policy is to also note it in the file name so that it is obvious, by appending to the name. Like "Test program_ITAR version.vi". But that's not always possible.
- If the program is export controlled because of a single component (or multiple single components), you should also mark those components with a comment. This will make it easier to identify what to remove if you ever need to de-classify the code to allow export, or to show a user why the code is export controlled.
None of this is official guidance, but I hope you find it helpful.
