On December 22, 2025, the rules governing drone procurement in the United States stopped being theoretical. The American Security Drone Act’s two-year transition period expired. The FCC added all foreign-manufactured drones and their critical components to its Covered List. And a market that had been running on DJI hardware for a decade hit a hard wall.
The question most operators, contractors, and procurement officers are now asking is the same: what does NDAA compliance actually mean, and does it apply to me?
Three Laws, One Effect
NDAA compliance is not a single rule. It is the cumulative product of several pieces of legislation that each tightened the same screw.
Section 848 of the FY2020 NDAA was the foundation — it barred the Department of Defense from procuring or operating drones manufactured in covered foreign countries, primarily China. Section 817 of the FY2023 NDAA expanded those restrictions deeper into the DoD supply chain. Then the American Security Drone Act, embedded in the FY2024 NDAA, extended the prohibitions government-wide: not just DoD, but every federal agency, every federal contractor, and every program operating on federal grant money.
The FY2025 NDAA added the final mechanism. It directed the FCC to add DJI and Autel equipment to its Covered List unless a national security agency formally determined otherwise by December 23, 2025. No such determination was made. The FCC went further than the statute required — rather than adding DJI specifically, it added all foreign-produced drones and UAS critical components in a single December 22 public notice.
The combined effect of these three enforcement layers: NDAA restricts who can buy and use drones, ASDA extends that restriction to all federal spending, and the FCC Covered List controls what can be imported, marketed, or sold in the United States going forward.
What Compliance Actually Requires
There is no NDAA certification. No label, no government registry of approved models, no single body that issues a compliance determination. The requirement is a sourcing standard: the drone’s entire system — airframe, flight controller, radios, data links, cameras, gimbals, ground control station, and software — must not incorporate components manufactured by or in covered foreign countries.
That list covers China, Russia, Iran, and North Korea. In practice, it means China. And because DJI and its affiliates are embedded throughout the global drone supply chain — not just in complete aircraft but in sensors, flight controllers, and firmware — building a genuinely compliant platform requires end-to-end supply chain verification, not just a country-of-origin check on the airframe.
Compliance is also not permanent. A drone that cleared procurement review in 2023 may not clear it today if the manufacturer has changed suppliers, updated firmware, or shifted component sourcing since purchase. Treat it as an ongoing audit requirement, not a one-time box to check.
Blue UAS and Green UAS: What They Are and What They Are Not
The Blue UAS Cleared List — now managed by the Defense Contract Management Agency after transitioning from the Defense Innovation Unit — is the closest thing the market has to an approved-drone registry. Platforms on the list have been vetted for NDAA compliance and cybersecurity, and DoD buyers can procure them without additional waivers or security reviews.
As of early 2026, the list includes more than 50 platforms. Notable entries include the Skydio X10D and X2D series, Anduril Ghost and Ghost-X, AeroVironment Red Dragon, Teal 2 and Golden Eagle (Red Cat), Freefly Astro and Alta X, BRINC LEMUR 2, Inspired Flight IF800 and IF1200A, and the Parrot ANAFI USA variants.
Blue UAS is not, however, synonymous with NDAA compliance. A platform can be fully NDAA-compliant without appearing on the list. The list is a procurement convenience tool for DoD buyers — it is not the law. Green UAS, run by AUVSI, extends similar vetting to commercial and public safety operators outside the defense procurement system. Both programs are additive to NDAA compliance, not definitional of it.
Who Is Actually Affected
Federal agencies are directly bound. They cannot procure or operate covered drones using federal funds, full stop, with narrow national-interest exemptions for DoD, DHS, DOJ, and DOT in specific research, counterterrorism, and airspace safety contexts.
Federal contractors are bound by FAR clause 52.240-1, which took effect December 22, 2025, and flows down to subcontractors. If federal money is anywhere in the procurement chain, the restriction applies — regardless of whether the contracting entity is a defense agency or a university receiving a research grant.
State and local governments are not directly bound by NDAA if they are spending their own funds. But most public safety agencies receive federal grants, which brings them under ASDA. And the practical market effect — DJI and Autel cannot receive FCC authorization for new models — means the supply of non-compliant drones will tighten regardless of legal status.
Private operators face no federal ownership or flight prohibition on drones already in service. Existing FCC authorizations were grandfathered by the December 22 notice. But the pipeline of new foreign-made hardware has been cut off, and some pre-deadline DJI and Autel authorizations were quietly revoked by the FCC’s Office of Engineering and Technology in January 2026.
The Market Reality
Compliant platforms cost more. Substantially more. Where a capable DJI enterprise system might have run $3,000–$7,000, equivalent NDAA-compliant platforms typically start at $10,000 and reach $50,000 or higher for heavy-lift or defense-configured systems. The Skydio X10 enterprise package exceeds $20,000. The cost premium reflects lower production volumes, domestic manufacturing, and the absence of the Chinese supply chain efficiencies that made DJI hardware so cheap.
Skydio holds the most entries on the Blue UAS Select list and has positioned itself as the primary DJI alternative for government and enterprise. Red Cat, through its Teal Drones subsidiary, is the dominant small tactical drone play. BRINC opened a new manufacturing facility in Seattle and is producing its LEMUR 2 domestically. The broader ecosystem — Freefly, Inspired Flight, Ascent Aerosystems, AgEagle — is scaling, but production capacity remains constrained relative to the volume the market demands.
What Comes Next
The FCC’s January 7, 2026 exemptions for Blue UAS platforms and Buy American domestic end products expire on January 1, 2027. After that date, the December 22 restrictions apply in full unless extended by the Trump administration or superseded by new rulemaking.
DJI has filed for FCC review and is pursuing litigation in the Ninth Circuit. Autel’s FCC application for review had comments due in early April 2026. Neither challenge has produced a resolution, and the legal path back to FCC authorization is unclear.
What is clear is the direction of policy. The July 2025 presidential memorandum on drone dominance explicitly signaled preference for domestic production. The NDAA framework, the ASDA operational ban, and the FCC Covered List expansion are three reinforcing mechanisms pointing the same way. The question for the US drone industry is whether domestic manufacturers can close the capability and cost gap before the 2027 deadline removes the last remaining exemptions for foreign hardware.
Watch the January 1, 2027 expiry date. Everything else is commentary.