Understanding NDAA Drone Compliance for Enterprise Clients
A practical guide to sourcing restrictions, federal timelines, and the difference between NDAA, Green UAS, and Blue UAS status.
What is Covered?
NDAA (National Defense Authorization Act) compliance refers specifically to Section 889 and the American Security Drone Act (ASDA). It prohibits the procurement or use of unmanned aircraft systems (UAS) manufactured or assembled by covered foreign entities—primarily companies based in China, Russia, Iran, and North Korea.
- The Drone Airframe: The physical aircraft cannot be built or assembled by restricted manufacturers like DJI or Autel.
- Critical Subsystems: Sourcing restrictions extend to flight controllers, data links, radios, cameras, and storage components.
- Associated Software: Ground control software and cloud pathways used to process telemetry and data must secure data against foreign exposure.
Why This is Important Now
- Federal Funding Restrictions: Operations using federal grant money, including FEMA, DOT, or university research funding, may be barred from using covered drones.
- Critical Infrastructure Security: Energy grids, nuclear plants, water treatment facilities, and other sensitive industries increasingly mandate NDAA compliance to protect operational data.
- FCC Restrictions: On December 23, 2025, the FCC added covered foreign-produced UAS and critical components to its Covered List, preventing new equipment authorizations. Existing previously authorized models were not made illegal by that action.
The Compliance Timeline: When Did It Switch?
December 2023 — The Trigger
Congress enacted the FY2024 NDAA on December 22, 2023, including the American Security Drone Act and a federal transition away from covered foreign drone technology.
December 22, 2025 — The Hard Ban
FAR 52.240-1 began prohibiting operation of FASC-prohibited UAS in performance of federal contracts.
May 20, 2026 — Procurement Update
OMB Memorandum M-26-02 required civilian federal agencies to update procurement policies and implement the UAS security requirements.
What is Green UAS?
Green UAS is an AUVSI-administered cybersecurity and supply-chain assessment for commercial and public-sector use. It builds on NDAA sourcing compliance with additional review of product security, corporate cyber hygiene, and supply-chain practices, but it is not the same as DoD Blue UAS clearance.
What is Blue UAS?
While basic NDAA sourcing compliance is common for commercial and municipal work, Blue UAS is a stricter Department of Defense-vetted list for defense procurement and certain high-security federal deployments. The program originated with the Defense Innovation Unit and is transitioning to the Defense Contract Management Agency. Use directory filters to find pilots possessing the level your project mandates.