Tier 2 and tier 3 suppliers manufacturing components for the U.S. defense aerospace supply chain: precision machined parts, electronic assemblies, sensors, avionics hardware, structural components, fasteners, motors, magnets, printed circuit boards, and other subcomponents delivered to prime contractors or higher-tier integrators. If your parts end up in a defense platform, the regulations below apply to your materials, your manufacturing processes, your sub-tier sourcing, and your documentation.
Component suppliers in the aerospace and defense supply chain face a compliance landscape that has grown significantly more complex in recent years. It is no longer sufficient to manufacture a quality part to specification. Primes and contracting officers now expect documented evidence of where your materials came from, who fabricated your PCBs, where your magnets were mined, and whether any of your sub-tier vendors have connections to adversary-nation entities. The F-35 samarium-cobalt magnet incident, in which a Chinese-origin magnet was discovered in a delivered defense system, resulted in delivery halts and a national security waiver. That event reshaped how DoW approaches sub-tier component traceability, and the regulations that followed reflect it. For component suppliers, the compliance question is whether your supply chain documentation is audit-ready, not just whether your finished part is compliant. Primes are held responsible for the compliance of their supply chains, which means they are increasingly requiring documented evidence from sub-tier suppliers before awarding subcontracts and during purchasing system reviews.
Defense components containing specialty metals including titanium, zirconium, hafnium, niobium, tungsten, and nickel alloys must be melted or produced in the United States or qualifying countries. China, Russia, North Korea, and Iran are covered nations where melting or production disqualifies the component. The requirement applies at all tiers of the defense supply chain and demands heat lot traceability from the mill through the finished part. Suppliers sourcing titanium, tungsten, or high-strength alloys must maintain documentation proving domestic or qualifying-country origin for every lot used in defense components.
10 U.S.C. 4863Through December 31, 2026, the restriction covers the melting, alloying, and all subsequent production phases of NdFeB and SmCo magnets, tantalum, and tungsten from covered countries. Effective January 1, 2027, the restriction expands to the entire supply chain from mining through finished product. Component suppliers whose products contain these magnet types (including motors, actuators, sensors, and other electromechanical assemblies) must have full upstream traceability documentation in place before that date. The F-35 incident demonstrated that even a small magnet in a single subcomponent can halt an entire program.
Contractors subject to Cost Accounting Standards must maintain a formal counterfeit electronic part detection and avoidance system covering training, inspection and testing, traceability to original manufacturers, authorized supplier sourcing, GIDEP alert monitoring, and reporting and quarantining of suspect parts. The requirement flows down to all subcontractors supplying electronic parts and assemblies. Sourcing electronic components from anything other than the original component manufacturer or an authorized distributor requires additional inspection, testing, and authentication by a CASL-listed test resource. Failure to maintain an acceptable system can result in payment withholding and cost disallowance for rework.
DFARS 252.246-7008Prohibits the use of telecommunications and video surveillance equipment from Huawei, ZTE, Hikvision, Dahua, Hytera, or their affiliates in any component supplied under a federal contract or grant. For aerospace and defense component suppliers, this applies to any communications hardware, wireless modules, network interfaces, or video systems incorporated into a delivered component. A supplier not itself named may still be a covered entity through ownership. Part A of Section 889 flows down to subcontractors at every tier.
Components on the U.S. Munitions List require DDTC registration, export licenses before any international shipment or transfer, and access controls preventing foreign nationals from accessing controlled technical data without authorization (deemed export compliance). The USML was significantly revised in September 2025, removing some items and adding others. DDTC has signaled further revisions in 2026 covering semiconductor and circuit board controls (Category XI), space-related systems (Categories IV and XV), and a redefinition of defense services (Category IX) that may affect how some component-level services are classified. Primes are responsible for ensuring that subcontractors receiving controlled data or articles are eligible to receive them.
Commerce Control ListComponents not on the USML but with dual-use potential fall under BIS Export Administration Regulations. Component suppliers must classify their products against the Commerce Control List and screen customers and end users against the BIS Entity List, Military End User List, and Unverified List before shipment. The BIS Affiliates Rule, suspended through November 9, 2026, will when reinstated automatically extend Entity List restrictions to unlisted subsidiaries and affiliates of named entities, expanding the restricted counterparty universe substantially beyond what the Consolidated Screening List reflects.
The DoW publishes an annually updated list of Chinese Military Companies covering entities across AI, aerospace, biotechnology, and other sectors. Effective June 30, 2026, DoW may no longer directly procure goods, services, or technology from any listed entity or their affiliates. Effective June 30, 2027, the prohibition extends to indirect procurement, meaning defense contractors must eliminate listed entities from their entire supply chains. For aerospace and defense component suppliers, this means that if your company, your sub-tier vendors, or entities involved in your manufacturing process appear on the 1260H list, your components will be disqualifying for DoW programs. The FY 2025 NDAA also introduced an ownership penetration clause: parent companies and subsidiaries of listed entities with 50% or more equity control can themselves be designated as Chinese Military Companies. The 1260H list does not automatically surface these affiliates, making ownership-chain tracing essential. Primes are required to flow compliance obligations down through their supply chains and face False Claims Act liability if they knowingly source from non-compliant suppliers.
DoW may not acquire covered printed circuit boards from covered nations effective January 1, 2027. For component suppliers, this applies to any PCB or PCBA in a delivered product. Suppliers currently sourcing PCBs from China, Russia, North Korea, or Iran must identify compliant alternative sources or secure a written waiver before this date. The waiver standard is high: the Secretary of Defense must determine in writing that no significant national security concerns exist and that compliant boards are unavailable at reasonable cost. Waivers require congressional notification within 10 days.
The FAR Council published a proposed rule in February 2026 to implement the prohibition on electronic products containing semiconductors designed, produced, or provided by SMIC, CXMT, YMTC, or their affiliates. The prohibition takes effect December 23, 2027. Component suppliers delivering electronic assemblies to the government must conduct reasonable inquiry to detect covered semiconductor content. The proposed rule is also considering requiring offerors to document the provenance of semiconductor components, including identifying vendors and facilities responsible for design, fabrication, assembly, packaging, and testing. Components already in service prior to the effective date are not required to be replaced and may continue through end of lifecycle.
FY 2022 NDAAComprehensive and targeted sanctions apply wherever Russian, Iranian, or other sanctioned entities appear in the component supply chain, including raw material suppliers, surface treatment providers, or specialized process vendors. Any transaction with a Specially Designated National creates serious legal exposure. The BIS Entity List restricts transactions with covered entities and, after November 10, 2026, with their unlisted affiliates under the reinstated Affiliates Rule. FAR 52.225-13 requires OFAC compliance to flow down to all subcontracts.
In effect
DFARS 252.225-7009: Specialty metals restriction
Components containing titanium, zirconium, hafnium, niobium, tungsten, or nickel alloys melted or produced in covered countries (China, Russia, North Korea, Iran) cannot be supplied under DoW contracts. Applies to all tiers of the defense supply chain. Heat lot traceability from domestic or qualifying-country mills is required.
In effect
DFARS 252.246-7007 and 7008: Counterfeit electronic parts
Contractors subject to Cost Accounting Standards must maintain a formal counterfeit electronic part detection and avoidance system. Requires traceability from original manufacturer, authorized supplier sourcing, inspection and testing protocols, and GIDEP reporting. Flows down to all subcontractors supplying electronic parts and assemblies.
In effect
NDAA Section 889: Prohibited telecom equipment
Electronic components, sensors, or communications hardware from Huawei, ZTE, Hikvision, Dahua, Hytera, or their affiliates cannot be supplied into federal programs. Applies to any component regardless of whether telecom is the primary function, if covered equipment is a substantial or essential element. Flows down to subcontractors at every tier.
In effect
ITAR / USML: Export controls on defense articles
Components on the U.S. Munitions List require DDTC registration, export licenses for international shipments, and controls on foreign national access to technical data. USML was revised September 2025. Further revisions covering semiconductors (Category XI), space (Categories IV and XV), and defense services (Category IX) are planned for 2026.
In effect
EAR / CCL: Dual-use export controls
Components not on the USML but with dual-use potential fall under BIS Export Administration Regulations. Requires Commerce Control List classification and end-user screening against the BIS Entity List, Military End User List, and Unverified List before shipment.
June 30, 2026
NDAA Section 1260H: Direct procurement ban
DoW may no longer directly procure goods, services, or technology from any 1260H-listed Chinese Military Company or their affiliates. If your company or a sub-tier vendor is on the 1260H list, your components are disqualifying for DoW programs from this date.
Nov 10, 2026
BIS Affiliates Rule reinstated
Any entity 50% or more owned by an Entity List company becomes automatically subject to Entity List restrictions. Component suppliers without ownership-tracing infrastructure for their own sub-tier vendors face a compliance cliff. The Consolidated Screening List will not reflect these affiliates.
Jan 1, 2027
10 USC 4873: PCB prohibition
DoW may not acquire covered printed circuit boards from covered nations. Applies to any PCB or PCBA supplied under DoW contracts. Component suppliers whose products contain PCBs from China, Russia, North Korea, or Iran must identify alternative sources or obtain a written waiver before this date.
Jan 1, 2027
DFARS 252.225-7052 Phase 2: Full mine-to-product magnet traceability
For NdFeB and SmCo magnets in defense components, the restriction expands from melting and production to the entire supply chain from mining through finished magnet. Any component containing these magnet types must have full upstream traceability documentation.
June 30, 2027
NDAA Section 1260H: Indirect procurement ban
Prohibition extends to indirect procurement. Defense contractors must eliminate 1260H-listed entities from their entire supply chains. Component suppliers whose sub-tier vendors appear on the list must have remediation plans in place before this date.
Dec 23, 2027
NDAA Section 5949: Semiconductor prohibition
FAR proposed rule (published February 2026) prohibiting electronic products containing semiconductors designed, produced, or provided by SMIC, CXMT, YMTC, or their affiliates from being supplied under federal contracts. Contractors must conduct reasonable inquiry to detect covered semiconductor content. Provenance documentation for semiconductor components in products delivered to government may be required.
2026 (pending)
ITAR USML revisions: Semiconductors, space, defense services
DDTC has signaled three USML revisions for 2026 covering space-related controls (Categories IV and XV), semiconductor and circuit board controls (Category XI), and redefinition of defense services (Category IX). Component suppliers in these categories should monitor the Federal Register for proposed rules.
Screen component suppliers, sub-tier vendors, and raw material sources against OFAC SDN, BIS Entity List, NDAA 1260H, and UFLPA Entity List in a single workflow. Trace ownership structures through Mandarin-language corporate registries to identify covered-entity connections that do not appear in English-language sources.
Map printed circuit board fabrication, assembly, and semiconductor sourcing to produce the provenance documentation that NDAA Section 5949 and 10 USC 4873 compliance will require. Identify covered-country PCB and chip content ahead of the January 2027 and December 2027 deadlines.
Document heat lot traceability for titanium, tungsten, nickel alloys, and other DFARS specialty metals from domestic or qualifying-country mill through finished component, in the format DCMA purchasing system reviews and contracting officers expect.
Trace NdFeB and SmCo magnet sourcing from neodymium, iron, boron, cobalt, and samarium ore through all processing stages to finished magnet to meet DFARS Phase 2 mine-to-product requirements effective January 1, 2027.
Identify unlisted affiliates of BIS Entity List companies in your sub-tier supply chain before the Affiliates Rule reinstates November 10, 2026. Ownership tracing through Chinese holding structures and variable interest entities is core to SolidIntel's capability.
Verify that sub-tier suppliers, technology recipients, and international customers are not debarred, restricted, or otherwise ineligible under ITAR or EAR before controlled technical data or defense articles are shared.
Entity designations change. SolidIntel monitors your supplier base in real time and escalates new risk flags as OFAC, BIS, UFLPA, and 1260H lists update, so a supplier clean at contract award remains clean through delivery.
Generate timestamped, citation-backed entity screening reports and supply chain provenance records in the format DCMA purchasing system reviews, prime contractor audits, and contracting officers expect.
The National Defense Authorization Act includes provisions that restrict dealings with Chinese military companies (Section 1260H) and prohibit procurement of telecommunications equipment from covered entities (Section 889).
Prohibits transactions with designated individuals, entities, and jurisdictions across OFAC, EU, UK, and UN sanctions lists — requiring continuous screening of counterparties, suppliers, and beneficial owners.
Controls the export and re-export of dual-use and defense-related items under EAR and ITAR, requiring end-user screening, item classification, and documentation to prevent controlled goods from reaching prohibited destinations.
Prohibits importation of goods produced wholly or in part in the Xinjiang Uyghur Autonomous Region, placing the burden of proof on importers to demonstrate their supply chains are free of forced labor.