WM23 encryption export regulations (no replies)

Hi everyone,

I know this is not a windev or coding question but...I have 2 apps almost ready to be published on both Google & Apple. Both stores ask if the app uses encryption. Both my apps communicate to either my vps or my client's dedicated server. Both use HTTPS and one uses CryptStandard, AES128 to encrypt info being sent to the server. No encrypted data is stored on any mobile device. Both apps will be free and only used by US clients.

Does anyone know if I need to file the annual encryption Self Classification Report? Is this sufficient? Am I too paranoid?

Thanks, Bill