Beyond the Covered List: What "Compliant" Actually Requires

September 29, 2026 · Defense

Compliance gets treated as a brand decision. It isn’t. It’s a bill-of-materials decision, and it gets harder every layer down you go.

Here’s the practical version — what “compliant” means in the current US regulatory stack, what each layer actually governs, and where the traps are. Everything below reflects the rules as of September 21, 2026; the lists and dates in this space move, and you should confirm each against the primary document linked at the end.

The four layers

1. FCC equipment authorization. Since December 22, 2025, foreign-produced UAS and critical UAS components sit on the FCC’s Covered List. The practical effect is on new equipment authorizations: new models can’t be imported, marketed, or sold in the US under that authorization. Existing authorized models are unaffected.

Trap: “My drone was authorized in 2023” answers a question the Covered List doesn’t ask. What matters is the authorization status of the specific model you’re buying and whether a covered component has been substituted into it.

2. Federal procurement eligibility. The American Security Drone Act (FY2024 NDAA) bars federal agencies from procuring covered UAS from “covered foreign entities,” and separately bars agencies from operating such systems and from using federal funds to procure or operate them. The procurement bar took effect on enactment (December 22, 2023); the operation and federal-funds prohibitions took effect two years later, on December 22, 2025. For Defense Department buyers, the authoritative directory of NDAA-compliant platforms is now the DCMA-managed Blue List (successor to the DIU Blue UAS Cleared List). For the rest of the federal government, the statute directs a separate government-wide procurement policy rather than the Blue List — so “DoD-compliant” and “federally acceptable” are not the same test.

Trap: Federal funding flows carry procurement conditions that reach past the prime contractor. The statutory ban on using federal funds to procure or operate covered UAS applies down the chain — including through grants and cooperative agreements. If you’re buying with federal dollars, or selling to someone who is, compliance status is a prerequisite, not a nice-to-have.

3. State and local restrictions. Several states have adopted their own procurement or use limits on covered drones — including Nevada, which restricted public-safety use of DJI drones, and Arkansas, which set a multi-year phase-out of foreign platforms. These vary in scope and change without much notice.

Trap: A nationally compliant platform can still be unsellable to a state agency. Check the jurisdiction, not the federal list.

4. Component provenance. This is where compliance actually gets hard, and where most teams are least prepared. The Covered List action reaches UAS critical components — not just finished aircraft. The December 2025 national security determination defines “UAS critical components” to include, but not be limited to: data transmission devices; communications systems; flight controllers; ground control stations and UAS controllers; navigation systems; sensors and cameras; batteries and battery management systems; motors — and any associated software. Which means your compliance posture depends on knowing what’s inside the airframe, down to the parts you didn’t design.

The component problem

A drone is a stack of dependencies: flight controller, radio link, camera/gimbal, GNSS, motors, batteries, the ground station that flies it, and the firmware that binds them. Each is a potential provenance question, and each arrives with its own supply chain that you probably don’t have visibility into.

Two years of policy has focused everyone’s attention on the airframe. The exposure increasingly sits in the components — and in the materials beneath them. A motor is a magnet problem before it’s a motor problem, and as we covered in the companion piece on magnets, that is a supply chain the US does not control.

The honest caveat: the precise scope of “critical UAS components” and the current Blue List should be read from the FCC document and the DCMA list directly, not from a summary — including this one. Since December 2025 the government has also created a conditional-approval pathway that exempts specific platforms individually, so “covered” and “not covered” is no longer a clean binary. Those documents are authoritative and they change. Treat everything below as a process, not a list.

What a compliant program looks like

This is general information about a changing regulatory landscape — not legal, procurement, or contracting advice. Requirements vary by contract, funding source, and jurisdiction. Confirm against the current FCC Covered List, the current DCMA Blue List, and your contracting officer or counsel before acting.

For buyers:

Match the requirement to the layer. FCC authorization ≠ procurement eligibility ≠ state acceptance. Most procurement mistakes come from satisfying one layer and assuming the others follow.
Ask for provenance, not adjectives. “US-made” and “NDAA-compliant” are claims. Ask for component-level origin documentation and the Blue List status of the specific model.
Write the exemption expiry into your planning. The FCC’s January 2026 exemption — for platforms and components on the DCMA Blue UAS Cleared List, and for UAS qualifying as “domestic end products” under the Buy American Standard — runs through January 1, 2027. Plan against that date.
Keep a continuity file. What you fly, what’s inside it, which layer each item satisfies, and when each authorization or exemption was last confirmed.

For builders:

Map the BOM to the provenance level now. Not “who sold me the motor” — where the magnet, the controller, and the radio came from, and who can prove it.
Document as a product feature. In a market where defense buyers source from the Blue List, a documented, auditable supply chain is a sales asset. The audit trail is the product.
Design substitution latitude in. Component-level compliance rules are moving faster than airframe design cycles. Designs that tolerate second-source components survive those moves; designs that don’t, don’t.
Treat compliance as a continuous program. This is not a one-time submission. The exemption has a date, the covered-component scope has moved repeatedly since December 2025, and states are legislating independently.

The point

“Compliant” is not a stamp. It’s a documented chain — legislation to rule to list to component to material — and the weakest link is always the layer furthest from the finished product, because that’s the layer nobody on your team has ever been asked about.

The manufacturers who win the next procurement cycle won’t be the ones with the best story about being American-made. They’ll be the ones who can produce a piece of paper for every layer, on demand, and who designed for that requirement two years before the buyer asked. Behind every one of those documents is a small company making a capital bet against a January 1, 2027 deadline it does not control — which is exactly why the boring layer is the one that decides who’s still delivering.

Compliance is boring. So is losing a contract you’d already won.

Disclosure: Aedes Manufacturing Network is a domestic manufacturing network and has a commercial interest in US drone supply-chain resilience. The sourcing below is to public primary documents and does not depend on that interest.

Sources

FCC, DA-25-1086, “Public Safety and Homeland Security Bureau Announces Addition of Uncrewed Aircraft Systems (UAS) and UAS Critical Components Produced Abroad… to FCC Covered List,” released December 22, 2025, incl. Appendix B (National Security Determination, Dec 21, 2025, and the definition of “UAS critical components”) — https://docs.fcc.gov/public/attachments/DA-25-1086A1.pdf
Equipment-authorization effect: 47 CFR §2.903(a); applicant certification: 47 CFR §2.911(d)(5)(i). Newly covered equipment is identified by place of production, not by entity.
American Security Drone Act of 2023, Title XVIII, Subtitle B, FY2024 NDAA, Pub. L. 118-31 (Dec 22, 2023): §1823 (procurement prohibition), §1824 (operation prohibition — effective two years after enactment, Dec 22, 2025), §1825 (federal-funds prohibition — effective Dec 22, 2025), §1829 (government-wide policy for non-DoD procurement).
FCC, Public Notice, January 7, 2026 — exemption through January 1, 2027 for UAS/critical components on the DCMA Blue UAS Cleared List and for UAS qualifying as “domestic end products” under the Buy American Standard.
DCMA Blue List (successor to the DIU Blue UAS Cleared List) — https://bluelist.dcma.mil
FCC conditional-approval notices (March–August 2026) exempting individually approved platforms.
FCC, proposals pending as of September 2026: July 21, 2026 notice of proposed restrictions on additional foreign-produced “military-grade” UAS; August 20, 2026 Third Further Notice of Proposed Rulemaking on hardware/software disclosure.
State limits: Nevada (2025 restriction on public-safety use of covered drones); Arkansas (2023 acquisition ban with multi-year phase-out).

Aedes Manufacturing Network — UAV production capacity already exists. We organize it.