What "NDAA-compliant drone" actually means.

Published 2026-09-04

The law behind the label

Congress has used successive National Defense Authorization Acts to keep drones and drone components from specific foreign manufacturers out of federal hands. Two provisions come up most. Section 848 of the FY2020 NDAA restricts the Department of Defense from buying covered drones and components. Section 889 of the FY2019 NDAA restricts covered telecommunications and video surveillance equipment across federal procurement. Later acts extended the reach to grant-funded purchases and to the federal government generally.

To qualify, an aircraft and its critical subsystems must not come from the restricted sources. The systems named are the flight controller, radios and data transmission, cameras, data storage, and the ground control station.

Who has to care

• Federal agencies and their contractors, which cannot buy or use covered aircraft.
• Any agency spending federal money, including public safety grants. Since December 22, 2025, federal funds cannot buy covered aircraft at all.
• Critical infrastructure operators in energy, transportation, and utilities, whose customers and regulators increasingly require it.
• Agencies in states with their own rules. Florida required in-service replacement; other states restrict purchases.

The mistake buyers make

They treat "NDAA-compliant" as if it were an approved list. It is the opposite: a floor, stated by the manufacturer, with no certificate behind it. The approved lists are separate programs. Blue UAS is the Defense Innovation Unit's cleared list for Department of Defense buyers; every Blue UAS aircraft is NDAA-compliant, but most NDAA-compliant aircraft are not on Blue UAS. If your funding language says "NDAA-compliant," a manufacturer's written component statement is what you need. If it says "Blue UAS," you need the list. The Blue UAS vs NDAA guide covers the difference.

The second mistake is assuming the label covers the accessories. A compliant airframe with a restricted camera or radio bolted on is no longer compliant. Ask about every part that transmits, records, or controls.

What to ask a manufacturer

1. A written statement of component origin covering the flight controller, radios, cameras, storage, and ground station.
2. Where the aircraft is designed and assembled, and where the airframe parts are made.
3. Whether the aircraft or any accessory has changed suppliers since the statement was written.
4. Whether the company holds, or is pursuing, any approved-list status, and which one.

EnCor's answers: designed and built in Tulsa, Oklahoma, with a 3D printed ABS airframe; no Section 889 covered components or telecommunications; no Blue UAS listing claimed. Ask for the component statement in a capabilities briefing.

Questions buyers ask

Is there an official NDAA-compliant certification?

No. NDAA compliance is a statement by the manufacturer that the aircraft contains no components from the restricted entities and countries named in the law. There is no certifying body and no certificate. Ask the manufacturer for its component-origin statement in writing.

Does NDAA-compliant mean made in the USA?

No. A drone can be assembled abroad from permitted components and still be compliant, and a US-assembled drone with a restricted flight controller is not. EnCor aircraft are both: designed and built in Tulsa, Oklahoma, without Section 889 covered components.

Which parts matter most?

The flight controller, radios and data links, cameras, data storage, and the ground control station. Those are the systems the restrictions name.

Does my city police department have to buy NDAA-compliant?

If any federal money touches the purchase, yes in practice, because federal funds cannot buy covered aircraft. Some states require it for all agencies. Check your state and your grant terms.