Uniqcli Security

Is Amcrest NDAA Compliant?

Is Amcrest NDAA compliant? Amcrest is a US brand, but its hardware is widely reported as Dahua-OEM — a named Section 889 entity. Here's how to verify.

Amcrest is not itself named on the NDAA Section 889 covered-entity list, but a meaningful share of its camera and DVR/NVR hardware is widely reported to be manufactured or OEM'd by Dahua Technology — a company that is named on that list, which puts many Amcrest SKUs at real risk of failing federal compliance review. Amcrest markets itself as a US-based brand, and that part is broadly accurate. But Section 889 doesn't care whose logo is on the box; it cares who actually produced the equipment and its substantial components. Because the Amcrest-Dahua manufacturing relationship is widely reported for at least some product lines, federal, DoD, and many SLED buyers can't safely assume any given Amcrest model is clear without checking the specific SKU.

What Section 889 actually restricts

FAR 52.204-25 (implementing Section 889 of the FY19 NDAA) prohibits federal agencies from procuring or using "covered telecommunications equipment or services" from five named entities: Huawei, ZTE, Hytera, Hikvision, and Dahua Technology — plus their subsidiaries, affiliates, and, critically, equipment for which any of these companies is a substantial or essential producer, regardless of what brand name ends up on the housing. This is the detail that trips up buyers evaluating rebrand and OEM lines: the rule follows the manufacturing relationship, not the retail label.

Where Amcrest fits

Amcrest is not one of the five named entities, so a literal reading of the covered-entity list won't flag "Amcrest" by name. That's technically true and also not the whole picture. Independent industry reporting has widely documented that a portion of Amcrest's camera, DVR, and NVR catalog is manufactured by Dahua and sold under the Amcrest label as an OEM arrangement — model-level teardowns and shared configuration utilities are the usual evidence cited. Amcrest has not publicly confirmed or denied the relationship, and the reported compliance picture varies by model rather than applying uniformly across the whole brand.

What that means in practice: some Amcrest SKUs may be independently sourced and clear of any Dahua manufacturing link. Others are widely reported to be Dahua hardware wearing an Amcrest badge. Without a paper trail tying a specific model number to its actual factory of origin, a contracting officer, IG auditor, or security reviewer has no reliable way to separate one from the other — and neither do you, if you're relying on the brand name alone.

Why "it says Amcrest, not Dahua" doesn't hold up in an audit

This is the exact pattern federal audits and DoD security reviews are trained to catch. Section 889 review looks past the retail label to the true manufacturer, and rebranded covered equipment sold under private-label names is a well-known way that banned hardware slips into an installed base. A brand name change doesn't reset the compliance clock. If an installed base includes Amcrest hardware and a Dahua manufacturing link applies to that model, the agency is in the same remediation position as if it had bought Dahua directly — pulled equipment, a corrective action plan, and an uncomfortable conversation with an IG.

For federal, DoD, and most SLED and critical-infrastructure buyers, the safe posture is to treat undocumented Amcrest hardware the same way you'd treat any product with a reported covered-entity manufacturing link: assume it needs rip-and-replace unless the specific SKU comes with documented, verifiable manufacturer and country-of-origin records clearing it.

What documentation should actually look like

Compliant hardware should come with traceable sourcing — a bill of materials or manufacturer attestation identifying the actual factory and component suppliers, not just a Section 889 self-certification checkbox on a quote. Self-certifications are a starting point, not proof; they're only as good as the paper behind them. When we scope a system, we pull country-of-origin documentation for every component in the design — cameras, recorders, encoders, even PoE switches — before it goes on a quote, because a single undocumented device anywhere in the chain can sink an otherwise clean install during audit.

The practical path if you already have Amcrest installed

If your site currently runs Amcrest cameras or recorders and you're not certain of their manufacturing origin, don't wait for an audit to find out. Start by pulling exact model numbers off the housings and firmware or configuration screens, then request documented origin verification before the next procurement or compliance review cycle. If that documentation can't be produced, or it confirms a Dahua manufacturing link, budget for a phased swap to hardware with a clean, documented supply chain rather than hoping the brand name carries you through review.

We sell direct — no cooperative-contract markup, no reseller layer — and every system we quote comes with country-of-origin documentation for every component, not just a checkbox. If you need to verify what's on your walls now or plan a compliant replacement, request a documented quote from Uniqcli and we'll walk through your specific equipment list together.

Frequently asked questions

Is Amcrest on the NDAA Section 889 banned list?

No, Amcrest itself is not one of the five named covered entities (Huawei, ZTE, Hytera, Hikvision, Dahua). But Section 889 also covers equipment for which a named entity is a substantial producer, and Amcrest hardware is widely reported to include Dahua-manufactured OEM product lines — so brand name alone doesn't clear a given SKU.

Does Amcrest make its own cameras or is it rebranded Dahua?

It varies by model. Amcrest is a US-based company, but independent industry reporting has widely documented specific Amcrest models that correspond directly to Dahua hardware sold under a different label. Amcrest has not publicly clarified which lines are affected, so compliance verification needs to happen at the SKU level, not the brand level.

Can I use Amcrest cameras on a federal contract or facility?

Only if you can document that the specific model in question was not produced by Dahua or another covered entity as a substantial component. Without that documentation, federal, DoD, and most SLED compliance officers will treat undocumented Amcrest hardware as a risk and require it to be swapped before award or renewal.

What should I do if I already have Amcrest equipment installed?

Pull the exact model numbers and request documented country-of-origin and manufacturer verification before your next compliance review or contract renewal. If that documentation isn't available or confirms a Dahua manufacturing link, plan a phased rip-and-replace rather than risk findings during an audit.

Is a Section 889 self-certification from Amcrest enough proof of compliance?

A self-certification is a starting point, not standalone proof. Given the widely reported OEM relationship affecting some Amcrest models, agencies and serious buyers should ask for underlying bill-of-materials or manufacturer attestation showing the actual factory of origin, not just a signed checkbox.

Ready when you are

Need it sourced compliant and direct?

Tell us what you need secured. We'll confirm compliance, design the system, and quote it — no payment up front.