Sovereign Builds: What NDAA Compliance and Blue UAS Mean for Drone Buyers

Defence and government drone procurement is under growing scrutiny over where components come from, who manufactured them, and who could gain access to data in transit. In the US this has taken legal form through NDAA Section 848 and the Blue UAS Cleared List. Outside the US, UK and NATO buyers are asking the same questions even where no single law forces the issue. This guide explains what these terms actually mean, who they apply to, and how a “sovereign build” supply chain works in practice.

Quick Answer

• NDAA Section 848 — US law barring the Department of Defense (and, through later NDAAs, the wider federal government) from buying or operating drones made in “covered” countries — principally China — or built on their critical components.
• Blue UAS Cleared List — a vetted catalogue of commercial drones and components, run first by the Defense Innovation Unit and now by the Defense Contract Management Agency, confirming a platform meets NDAA requirements and has passed cybersecurity testing.
• Sovereign build — a drone built from a supply chain the buyer can specify and verify, rather than one dictated by whatever is cheapest or most available.
• Firefly’s approach — we build to the customer’s chosen sourcing. Components are available from the UK, Europe, the USA (including NDAA-compliant parts) and non-restricted Asian suppliers, so a programme can specify exactly the supply chain it needs, not just inherit ours.

What Is NDAA Section 848?

Section 848 of the National Defense Authorization Act prohibits the US Department of Defense from procuring or operating unmanned aircraft manufactured in a “covered” foreign country, or built around critical components from one — in practice this is aimed squarely at Chinese manufacturers such as DJI and Autel. It isn’t an isolated rule: Section 817 of the FY2023 NDAA and Section 1822 of the FY2024 NDAA extended similar restrictions across the rest of the federal government, and to state, local and tribal agencies spending federal grant money.

The underlying concern is straightforward: a drone’s flight controller, radio link, camera and companion app all have the potential to move data off the aircraft. If any of those components are built by a manufacturer that could be compelled to share that data, the drone is treated as a security liability regardless of how well it flies.

What Is the Blue UAS Cleared List?

The Blue UAS programme was launched by the Defense Innovation Unit (DIU) in 2020 in direct response to Section 848, giving US government buyers a pre-vetted shortlist of drones they could procure without running their own teardown and security assessment. In late 2025 management of the list moved from DIU to the Defense Contract Management Agency (DCMA), whose Special Programs division now runs it. The catalogue currently covers dozens of approved airframes and well over a hundred cleared individual components.

It’s worth separating two things that get used interchangeably: NDAA-compliant just means a platform doesn’t fall foul of Section 848 — no covered-country manufacture, no covered-country critical components. Blue UAS cleared is a narrower, harder bar — it means a platform has been independently vetted and penetration-tested against that standard and added to the list. Every Blue UAS drone is NDAA-compliant; not every NDAA-compliant drone has gone through Blue UAS clearance.

Why This Matters Beyond the US

Blue UAS is a US federal procurement mechanism — it isn’t a certification a non-US manufacturer can be awarded, and it doesn’t directly govern purchasing by the UK MOD, police forces or NATO allies. But the underlying concern it was built to address — an adversary nation able to see into, or reach into, your drone fleet — doesn’t stop at a border. UK and allied buyers are increasingly asking the same questions NDAA forces onto US procurement: what’s inside this airframe, where was it made, and who else could theoretically touch that supply chain. A sovereign posture on components is becoming an expectation in its own right, not just a US compliance checkbox.

Sovereign Supply Chain — Firefly’s Approach

We’re a UK manufacturer with in-house CAD design, carbon fibre CNC machining, 3D printing and in-house battery assembly, and we maintain manufacturing relationships across the UK, Europe, the USA, Taiwan, South Korea, Israel, India and Ukraine — deliberately, so no single country’s supply chain is the only option on the table.

That means a build can be configured to whatever sourcing a programme actually requires:

• A fully NDAA-compliant component list, for customers who need to satisfy US-linked procurement rules or simply want to rule out covered-country parts entirely.
• A UK/European-weighted build, for customers prioritising a shorter, more easily audited supply chain.
• A mixed build using the best-available part for each subsystem, where sourcing restrictions aren’t a programme requirement.

FAQ

Is Firefly on the Blue UAS Cleared List?
No. That list is a US federal procurement mechanism run by DCMA, open to platforms put through its vetting process — it isn’t something a UK manufacturer’s airframe is listed on. We build to the same underlying sourcing principles and can supply NDAA-compliant component configurations where a customer’s programme requires it.

Can Firefly build an NDAA-compliant drone?
Yes. Component sourcing can be restricted to NDAA-compliant and non-covered-country suppliers at the customer’s request.

Does any of this matter for UK buyers, if NDAA is a US law?
Yes. UK and NATO procurement is increasingly asking the same supply chain questions NDAA forces in the US, even without an equivalent law. Knowing exactly where every component came from is becoming a baseline expectation, not a US-only concern.

What determines which components go into a build?
The customer’s requirements. We can source from the UK, Europe, the USA, or non-restricted Asian suppliers depending on what a given programme needs to satisfy — the sourcing is a specification, not a fixed default.

Firefly UAV designs and manufactures FPV drones in the UK, with a global manufacturing network spanning the UK, Europe, the USA and allied nations — allowing every build’s supply chain to be configured to NDAA-compliant, sovereign, or mixed sourcing depending on the customer’s programme requirements. Read more about Firefly or get in touch to discuss sourcing for your programme.