What to keep, for how long, and what to file — across the EAR, the ITAR, and OFAC. The records you can produce on demand are the proof your compliance program works.