Question 1

What is NDAA Section 889?

Accepted Answer

NDAA Section 889 is a provision of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (P.L. 115-232). It prohibits US federal agencies from procuring, and federal contractors from using, telecommunications equipment from five covered Chinese entities: Huawei Technologies, ZTE Corporation, Hytera Communications, Hangzhou Hikvision Digital Technology, and Zhejiang Dahua Technology.

Question 2

Are Reolink cameras NDAA compliant?

Accepted Answer

Yes. Reolink officially states that its hardware, chips, and cloud services do not use equipment from any entity restricted under NDAA Section 889. Reolink devices use Novatek and SigmaStar chipsets -- both Taiwanese -- not HiSilicon. Reolink is not TAA compliant, however, meaning it cannot be used on GSA Schedule contracts.

Question 3

Is Ubiquiti UniFi NDAA compliant?

Accepted Answer

Yes. As of 2026, Ubiquiti explicitly documents NDAA Section 889 compliance in the technical specifications for each UniFi product. However, Ubiquiti is NOT TAA (Trade Agreements Act) compliant, meaning it cannot be used on GSA Schedule contracts where TAA is mandated.

Question 4

Is Lorex NDAA compliant in 2026?

Accepted Answer

No. Despite Lorex being sold by Dahua to Skywatch (Taiwan) in late 2025, supply chain analysis indicates Lorex devices continue to use Dahua hardware architectures, image sensors, and firmware baselines. Security advisors widely recommend treating Lorex as non-compliant for federal or critical infrastructure use until a verified clean-sheet hardware redesign is confirmed and documented.

Question 5

What does the May 2026 FCC software update extension mean?

Accepted Answer

On May 8, 2026, the FCC extended the software update window for already-owned foreign-made drones and routers to January 1, 2029. Organizations with pre-ban DJI drones or foreign consumer routers can continue applying security patches and firmware updates until that date while procuring compliant replacements.

Question 6

Is HiSilicon banned under NDAA?

Accepted Answer

Yes. HiSilicon is a subsidiary of Huawei Technologies, a named prohibited entity under NDAA Section 889. Any device containing a HiSilicon chipset -- identifiable by the 'Hi' logo and model numbers beginning with 'Hi35' -- is non-compliant regardless of the brand name on the outer casing.

Area	Description
The Banned List	Prohibited entities under NDAA Sec 889 and FCC Covered List, including subsidiaries and OEM aliases
The Compliant List	Verified compliant manufacturers organized by tier and sector
Legislation Hub	Regulatory updates: NDAA Sec 889, FCC Covered List, UK Procurement Act 2023
Device Directories	Compliant products by category: Video Surveillance, Networking, UAV/Drones, Access Control
MAC Lookup Tool	Forensic OUI prefix lookup for field compliance verification
Buyer’s Guides	Procurement pathways for replacing non-compliant legacy hardware

Regulation	Development
FCC Covered List — Routers	March 23, 2026: foreign consumer-grade routers added to Covered List
FCC Software Update Extension	May 8, 2026: update window for pre-ban drones/routers extended to January 1, 2029
Blue UAS Exemption	January 7, 2026: DoW carve-out for Blue UAS Cleared List until January 1, 2027
UK Procurement Act 2023	April 2025 deadline enforced: Chinese CCTV removed from all sensitive government sites

NDAA Compliance Intelligence — A to Z

The NDAA Compliant Device Reference – A to Z

Coverage Areas

Q2 2026 Status Updates