Drone manufacturers, component and parts suppliers, and system integrators selling into the U.S. defense market. If your product is a UAS platform, a flight controller, an ESC, a battery, a motor, a GPS module, a camera, or any other critical component that goes into a drone used by the U.S. government or its contractors, the regulations below govern what you can source, from whom, and how you must document it.
The drone supply chain is the most heavily and rapidly regulated product category in the defense industrial base right now. Three separate regulatory frameworks converge on January 1, 2027. The Drone Dominance Program is advancing supply chain requirements faster than statute requires. And the FCC Covered List, which added foreign-produced UAS to the FCC's restricted equipment list in December 2025 (with a temporary exemption for Blue UAS-listed products and Buy American domestic end products running through January 1, 2027), has turned Blue UAS status from a procurement credential into a market access credential. For manufacturers, the compliance question is no longer whether your platform is NDAA-compliant at a high level. It is whether every component in your bill of materials, traced to the sub-tier level, is sourced from non-covered-country entities and documented to the standard a DCMA assessor will accept.
Effective December 22, 2025, federal funds may no longer be used to purchase or operate UAS from covered foreign entities. The covered entity list is maintained by the Federal Acquisition Security Council on SAM.gov and is broader than the drone-specific entity lists: it captures any entity the FASC determines poses a supply chain security risk. The prohibition applies to contracts, grants, and cooperative agreements, meaning a state agency using federal grant funding to buy drones is subject to the same restrictions as a DoW program office. Any platform or critical component tied to a covered-country entity disqualifies the product from federally funded programs.
FASC Covered Entity ListProhibits the use of telecommunications and video surveillance equipment from five Chinese companies (Huawei, ZTE, Hikvision, Dahua, and Hytera), or their subsidiaries and affiliates, in any federal contract or grant. For drone manufacturers, this applies to any communications hardware, telemetry radios, video links, or data systems in the product. A component supplier not itself named may still be a covered entity through ownership, making sub-tier vetting essential. Part A of Section 889 flows down to subcontractors at every tier.
Comprehensive sanctions against Cuba, Iran, North Korea, and Syria, and broad targeted sanctions against Russia and others, apply to any transaction in the drone supply chain. Motor manufacturers, battery cell producers, semiconductor suppliers, and rare earth processors with connections to sanctioned jurisdictions or SDN-listed entities create serious legal exposure. The SDN List is updated multiple times per week, meaning a supplier that was clean at your last assessment may not be clean today. FAR 52.225-13 requires OFAC compliance obligations to flow down to all subcontracts.
Drone platforms and components with military applications may be controlled under ITAR (the U.S. Munitions List) or the EAR (the Commerce Control List). Flight controllers, GPS and GNSS systems, encryption modules, RF communications hardware, and electro-optical sensors are common control points. Manufacturers must classify their products correctly, screen technology recipients, and ensure that foreign nationals involved in design or manufacturing do not receive controlled technical data without authorization. Primes are responsible for ensuring that subcontractors receiving controlled data or articles are eligible to receive them, making sub-tier vetting a legal obligation. The USML was revised in September 2025 and further revisions covering semiconductors and communications hardware are planned for 2026.
Commerce Control ListEstablishes a rebuttable presumption that any goods produced wholly or in part in China's Xinjiang Uyghur Autonomous Region, or by entities on the UFLPA Entity List, are made with forced labor and are prohibited from U.S. import. For drone manufacturers, the highest-risk inputs are battery cells and rare earth materials for magnets, both of which have significant Xinjiang-origin supply chains. The presumption extends to any product incorporating Xinjiang-origin inputs at any tier, not just direct Xinjiang suppliers. CBP enforcement expanded dramatically between 2023 and 2024, with aerospace and electronics components now among the highest-scrutiny categories. A successful rebuttal requires clear and convincing evidence of clean sourcing, not just a supplier declaration.
CBP importer guidanceCurrently suspended through November 9, 2026. When it reinstates on November 10, 2026 (absent a further extension, which BIS has not ruled out given the rule's role as a US-China trade negotiating instrument), any entity 50% or more owned by a BIS Entity List company will automatically be subject to Entity List restrictions, whether or not individually named. For drone parts suppliers, this is particularly acute: many Chinese component manufacturers that are not themselves on the Entity List are subsidiaries or affiliates of companies that are. The Consolidated Screening List will not reflect these relationships. Suppliers that pass a standard screening today may fail under the Affiliates Rule when it reinstates.
Federal Register suspension noticeDec 22, 2025 (in effect)
ASDA / FAR 52.240-1: Federal funds ban
Federal funds may no longer be used to purchase or operate UAS from covered foreign entities including DJI and Autel. Applies to contracts, grants, and cooperative agreements. Any platform or component in your supply chain tied to a covered-country entity disqualifies your product from federally funded programs.
May 20, 2026 (passed)
OMB M-26-02: Civilian agency procurement update
All non-defense federal agencies were required to update procurement policies to implement ASDA requirements. Civilian agency customers of drone manufacturers should have clean procurement posture by this date.
Aug 2026
DDP Phase 2: NCC assembly required
Non-covered-country assembly required for flight controllers, ESCs, comms, and GNSS. No ASDA-covered entity components. No gray-market sourcing. Non-compliance is disqualifying for DDP orders. Bills of materials, capitalization stacks, and physical components will be inspected.
Nov 10, 2026
BIS Affiliates Rule reinstated
Suspension expires (absent further extension). Any entity 50% or more owned by an Entity List company becomes automatically subject to Entity List restrictions whether or not individually named. The Consolidated Screening List will not reflect these affiliates. Drone parts suppliers without ownership-tracing infrastructure face a compliance cliff.
Jan 1, 2027 (three deadlines converge)
FCC exemptions expire / ASDA phase-out closes / DFARS magnet Phase 2
(1) FCC exemptions for Blue UAS-listed products and Buy American domestic end products expire. Foreign-produced UAS and components cannot receive new FCC equipment authorizations unless DoW issues a new National Security Determination. (2) Federal agencies must have fully retired existing covered-country drones from federally funded programs. (3) Full mine-to-magnet traceability required for NdFeB magnets in DoW systems.
Jan 1, 2027
10 USC 4873: PCB prohibition
Statutory prohibition on defense PCBs and PCBAs sourced from covered countries takes effect. DDP Phase 2 pulls this forward for critical flight-control boards.
Feb 2027
DDP Phase 3: NCC PCBs and auditable firmware
NCC PCBs required across all critical components. Firmware source repos must be hosted and auditable by a US entity. Encryption modules must be NCC-sourced. Open-source firmware compliance ambiguity (PX4, ArduPilot) must be resolved before this date.
Late 2027 / Oct 2027
NDAA Section 154: Battery prohibition
DoW battery procurement from six specific Chinese entities prohibited by October 2027, including CATL. DDP Phase 2 already targets 100% NCC pack assembly, well ahead of this date.
Aug 2027
DDP Phase 4: US / nearshored assembly preferred
US or nearshored assembly for all major components. US-entity-controlled firmware repos. NCC passives throughout. US or nearshored PCB fab for all boards. This is the long-term target state for a fully domestic sUAS supply chain.
Dec 23, 2027
NDAA Section 5949: Semiconductor prohibition
Proposed FAR rule prohibiting covered semiconductor products and services. Long qualification cycles mean supplier identification needs to begin now.
Jan 1, 2029
FAR 25.101: Buy American threshold rises
Domestic content threshold rises from 65% to 75% for products delivered from this date. Drone systems and components that currently qualify as domestic end products may not qualify after 2029 without further supply chain migration.
Map ownership structures of component suppliers through Chinese corporate registries, investment databases, and Mandarin-language sources to identify covered-entity exposure that does not appear on named lists, including motor manufacturers, battery cell suppliers, and PCB fabs.
Generate timestamped, citation-backed entity reports for every supplier in your BoM, in the format DCMA assessors and DDP contracting officers expect. Produced in minutes rather than analyst-weeks.
Screen all suppliers and sub-tier vendors against the FASC covered entity list on SAM.gov, BIS Entity List, and OFAC SDN list in a single workflow, with continuous monitoring for new designations.
Trace ownership chains through subsidiaries, joint ventures, and affiliates to identify unlisted entities that will become subject to Entity List restrictions when the suspension expires November 10, 2026.
Map upstream sourcing for battery cells, rare earth magnets, and PCB materials to identify Xinjiang-origin inputs at tier 2, 3, and beyond, where forced labor risk is most likely to be obscured.
A supplier that was clean at Blue UAS assessment may not remain clean. SolidIntel monitors your supplier base in real time and escalates new risk flags as covered entity lists expand, so engineering updates do not create undetected compliance gaps.
Map foreign ownership, investor relationships, and CCP-affiliated capital in your company's own cap table and board structure for facility clearance reviews and FOCI determinations.
The National Defense Authorization Act includes provisions that restrict dealings with Chinese military companies (Section 1260H) and prohibit procurement of telecommunications equipment from covered entities (Section 889).
Prohibits importation of goods produced wholly or in part in the Xinjiang Uyghur Autonomous Region, placing the burden of proof on importers to demonstrate their supply chains are free of forced labor.
Prohibits transactions with designated individuals, entities, and jurisdictions across OFAC, EU, UK, and UN sanctions lists — requiring continuous screening of counterparties, suppliers, and beneficial owners.
Controls the export and re-export of dual-use and defense-related items under EAR and ITAR, requiring end-user screening, item classification, and documentation to prevent controlled goods from reaching prohibited destinations.