I know this will not be what you want to hear, but we had a meeting with a security guru from Autodesk a few weeks ago about the exact same concern. Although not specifically about ITAR because we have no intention of going there, it was part of the discussion, because if Fusion was ITAR compliant, it would bring in a lot of confidence about its online security. The answer that we were given, was that there is no ITAR being worked on, and neither is there any plans to do so. There are plans to bonify the security through some other compliances, but not ITAR. Here is a link about security, compliances, and other online issues:
https://www.autodesk.com/trust/overview
Read about compliances and security (top tabs) in particular.
Now, don't take my word for it, do get a meeting organized with their security staff, and get the answer directly from them please. Did you buy your Fusion through a reseller or directly from Autodesk? The meeting was organized by our reseller, and I was quite impressed that they were able to get us a meeting with a security staff (high level). I can say that security is taken very seriously, and it will continue to improve, just not ITAR I was told.
EDIT: He did tell us "never say never" (ITAR), just that right now, there is no plan for it. Also, no plan for saving on local servers, it will remain in the cloud, and that was a more definitive "NO" to building our own local "cloud" if you will.