NDAA Section 889 and the FCC Covered List: what the law actually says
This is a compliance-migration page, not a traditional product comparison. Hikvision is on the FCC Covered List and is covered equipment under NDAA Section 889. It’s not a vendor Tec-Tel recommends, installs, or sells. This page exists because a lot of people searching for Hikvision alternatives are in the middle of a forced migration and need accurate information about the law and compliant replacements.
NDAA Section 889 was enacted as part of the National Defense Authorization Act for Fiscal Year 2019 (Public Law 115-232). Section 889 prohibits federal executive agencies from procuring or obtaining, or extending or renewing a contract, for equipment, systems, or services that use “covered telecommunications equipment or services” as a substantial or essential component or critical technology of any system. Hikvision is named in the statute alongside Huawei, ZTE, Hytera, and Dahua Technology.
Section 889 has two operative parts. Part A prohibits federal agencies from directly buying covered equipment. Part B - which has broader reach - prohibits federal agencies from contracting with any entity that uses covered equipment anywhere in their operations. Part B is what catches contractors and subcontractors who may not have thought carefully about their internal security cameras.
The FCC Covered List is maintained by the Federal Communications Commission under the Secure and Trusted Communications Networks Act of 2019. It identifies equipment and services posing an unacceptable risk to national security. Hikvision is on this list. Federal agencies cannot purchase communications equipment on the Covered List using funds from the FCC’s Universal Service programs. The full list is publicly available at https://www.fcc.gov/supplychain/coveredlist.
Who does this bind?
- Federal executive agencies - directly prohibited from buying or using covered equipment.
- Federal contractors and subcontractors - prohibited from using covered equipment in contract performance under Part B; some agencies extend this to facility-wide use.
- Recipients of certain federal grants - check your grant terms; infrastructure grants increasingly include NDAA compliance requirements.
- Private companies in federally regulated industries - not directly bound by NDAA, but insurance carriers and enterprise customers are increasingly asking about Hikvision exposure during procurement audits.
What the law does not say: NDAA Section 889 does not prohibit private companies with no federal exposure from owning or operating Hikvision cameras. If you’re a small retailer with no government contracts and no federal funding, the legal requirement does not currently apply to you. The decision to migrate in that case is a business risk decision, not a legal requirement.
What Tec-Tel’s position is: We don’t install Hikvision. We don’t recommend it for any customer. Tec-Tel works across industries with federal contract exposure - manufacturing, logistics, healthcare, higher education. Recommending a vendor on the FCC Covered List creates procurement risk for our customers and resale liability for us. We removed it from our install portfolio and we’ve been helping customers migrate off it ever since.
The compliance migration: what it involves
If you’re a federal agency, federal contractor, or grant recipient operating Hikvision cameras, the migration is not optional - it’s a remediation project with a compliance deadline you may have already passed.
The steps look like this:
- Inventory your camera fleet. Identify every Hikvision unit by model, location, and VMS connection. Hikvision-labeled and EZVIZ-labeled (a Hikvision subsidiary) cameras are covered. Dahua cameras and Lorex cameras (Dahua-owned) are separately on the Covered List and need the same treatment.
- Map federal exposure. Which sites, systems, or networks are within the scope of your federal contracts or grant awards? Cameras at those sites need priority migration.
- Choose compliant replacements. Tec-Tel installs Axis, Hanwha Vision, Avigilon, and Bosch Security as primary rip-and-replace options. All four are NDAA Section 889 compliant with published compliance statements.
- Verify your VMS compatibility. If you’re running a VMS (Genetec, Milestone, Avigilon Unity, Eagle Eye Networks), confirm it supports your replacement cameras. Most major VMS platforms support all four of the vendors above.
- Document the migration. Your contracting officer or grant administrator will want records showing covered equipment has been removed and compliant equipment is in service.
Compliant alternatives Tec-Tel installs
All four primary partners below are NDAA Section 889 compliant. Each vendor’s headquarters and compliance status comes from its own published NDAA Section 889 statement.
Axis Communications
Headquarters: Sweden (Lund). NDAA compliant per Axis’s published Section 889 statement.
Axis is the quality benchmark for IP cameras. The Axis line covers fixed domes, PTZ cameras, multisensor panoramic cameras, and edge AI cameras. Axis ARTPEC processors run on-camera analytics without cloud dependency. Integration support covers Genetec, Milestone, Avigilon Unity, and most major VMS platforms.
For customers migrating off Hikvision, Axis is the premium replacement. Axis cameras are not the cheapest option, but they have a 10 to 15 year commercial lifespan, published security advisories, and strong firmware update cadence. They’re the default choice for higher-security facilities where camera longevity and cybersecurity posture matter.
Hanwha Vision
Headquarters: South Korea. NDAA compliant per Hanwha Vision’s published compliance statement.
Hanwha Vision (formerly Samsung Techwin) is the value-performance leader in the compliant camera market. Wisenet cameras typically land 15 to 25% below Axis on hardware cost for comparable resolution and feature sets. Hanwha has strong ONVIF support and works well with Genetec, Milestone, and Avigilon Unity.
For customers migrating large fleets of Hikvision cameras where budget is a constraint, Hanwha is the most common replacement. The quality is solid, the NDAA documentation is clean, and the supply chain is South Korean, not PRC-controlled.
Avigilon (Motorola Solutions)
Headquarters: United States (Chicago, via Motorola Solutions). NDAA compliant per Avigilon’s published documentation.
Avigilon Unity cameras include on-camera AI with Appearance Search capability. For organizations that want to upgrade analytics capability at the same time as the compliance migration, Avigilon is worth evaluating. The tradeoff is that Avigilon’s best AI features require Avigilon’s Unity VMS - if you’re running Genetec or Milestone, you’ll get a compliant camera but not the full AI feature set.
Bosch Security
Headquarters: Germany. NDAA compliant per Bosch Security’s published documentation.
Bosch makes cameras for high-security and critical infrastructure deployments. Strong encryption, built-in cybersecurity features (signed firmware, secure boot), and compatibility with major VMS platforms. Bosch is the default recommendation when the customer’s primary concern is camera-level cybersecurity posture alongside NDAA compliance. Higher price point than Hanwha, comparable to Axis premium lines.
Also worth evaluating: Pelco and i-PRO
Pelco (US-headquartered, redesigned NDAA-compliant lineup) and i-PRO (formerly Panasonic, mid-market NDAA alternative) are compliant options. The compliant brands Tec-Tel most commonly installs are Axis, Hanwha, Avigilon, and Bosch, but if your deployment has specific requirements that fit Pelco or i-PRO better, they’re worth including in your RFP.
Compliance alternatives at a glance
| Vendor | HQ | NDAA compliant | Cloud-native | On-prem option | Primary install use case |
|---|---|---|---|---|---|
| Axis Communications | Sweden | Yes | No | Yes | Premium IP cameras, edge AI, high-security |
| Hanwha Vision | South Korea | Yes | No | Yes | Value rip-and-replace, large fleet migration |
| Avigilon (Motorola Solutions) | US | Yes | Hybrid | Yes | Enterprise AI + compliance migration |
| Bosch Security | Germany | Yes | No | Yes | Critical infrastructure, cybersecurity-priority deployments |
| Pelco | US | Yes | No | Yes | Legacy camera replacement, large-format installs |
| i-PRO (ex-Panasonic) | Japan | Yes | No | Yes | Mid-market NDAA alternative |
Side-by-side: What changes in the migration
| Dimension | Hikvision (pre-migration) | Axis | Hanwha | Avigilon | Bosch |
|---|---|---|---|---|---|
| NDAA Section 889 | Covered - prohibited | Compliant | Compliant | Compliant | Compliant |
| FCC Covered List | Yes - on the list | Not listed | Not listed | Not listed | Not listed |
| HQ / supply chain | China | Sweden | South Korea | US | Germany |
| Published security advisories | Inconsistent | Yes, regular | Yes | Yes | Yes |
| VMS compatibility | Broad but declining | Broad | Broad | Unity preferred | Broad |
| Federal contract use | Prohibited | Permitted | Permitted | Permitted | Permitted |
Pricing reality
Hikvision cameras are inexpensive upfront - that’s a large part of why they spread so widely. Compliant replacements cost more per unit. In the quotes we benchmark:
- Hanwha Vision is typically 1.3x to 1.8x the Hikvision hardware cost per camera, which is the smallest premium among compliant alternatives.
- Axis runs 2x to 3x the Hikvision hardware cost at comparable resolution. The premium reflects firmware quality, cybersecurity posture, and longevity.
- Bosch and Avigilon are in a similar premium tier to Axis, with Avigilon potentially higher depending on which camera series and AI tier you’re buying.
For a 50-camera single-site migration using Hanwha Vision cameras, hardware cost alone typically runs $15,000 to $35,000 depending on camera type and resolution. Add installation labor, cabling updates, VMS reconfiguration, and documentation for $20,000 to $50,000 total project cost - site-specific, quoted after the free consultation.
The compliance cost is real. The alternative cost - failing an NDAA audit, having a federal contract suspended, or dealing with a breach attributed to covered equipment - is much higher.
Who should migrate when
Migrate immediately if you: hold a federal contract or subcontract, receive federal grants that fund your security infrastructure, or operate in a federally regulated industry where your contracting officers have already flagged the issue.
Migrate on your next refresh cycle if you: have no current federal exposure but want to future-proof against insurance requirements and enterprise customer procurement audits that increasingly ask about covered equipment.
Consult legal counsel before acting if you: are uncertain whether your specific contract vehicles or funding sources trigger Part B Section 889 obligations.
Tec-Tel will not install Hikvision for any customer - we’ve structured our business around compliant vendor partners only, and we’d rather lose a deal than create NDAA liability for a customer.
Get a free consultation
If you have Hikvision cameras and aren’t sure about your compliance posture, start with the free consultation. The Tec-Tel team can map your current camera inventory against federal contract exposure and give you a written migration plan with options at different price points.
Book directly: . You’ll leave knowing exactly which cameras need to go, what replaces them, and what the project will cost.
Tec-Tel. Morganville, NJ. 855-577-0400.