This report aggregates video surveillance products that manufacturers have told IPVM are compliant with NDAA Section 889 that bars products produced or using essential components from Dahua, Hikvision, and Huawei.
Determining Blacklist / Whitelist
The key difficulty for buyers is determining which products are deceptively-labeled by Western companies but actually are made by or use essential components from the banned companies (like Hikvision as Honeywell).
Any product OEM / relabelled from Dahua or Hikvision is banned, though many brands doing so will not readily admit to it. See: Dahua OEM Directory and Hikvision OEM Directory for the companies doing so. Note that companies OEM'ing products may have non-OEM models that are NDAA compliant.
Of course, since this is time-consuming and requires having a device physically on hand, the goal of this whitelist is to simplify the discovery process for which devices are not banned.
Current Products Vs Past Products Warning
Because of the NDAA ban, many manufacturers have recently discontinued products that are covered by the ban, or just discontinued them in the US but still sell them globally. As such, you should be careful to verify that you do not have existing products that are covered, that you are buying products not taken from old NDAA-banned inventory, or are buying products internationally that are banned.
The following companies told IPVM that all their products are compliant. Note that past models are not necessarily compliant.
I have a statement from EnGenius, a wireless technology firm, stating that they are fully NDAA compliant. I would post it, but I feel it is not my place to speak for them. I know that many others on this site use their products, so I thought I would mention it. Feel free to reach out to them on your own to confirm.
How come the NDAA fiscal year 2019 did not implement a manufacturer stipulation of YES or NO compliance listing to all datasheet, white sheets, warranties. We already have Serial Numbers, Manufacture date, UL, IK ratings...what gives?
Doug, can you link the cameras And NVR? Avertek sounds like the Avermedia brand. They used to make DVR cards and Hybrid NVRs like Geovision did circa 2006. I did not think they were still in the surveillance market.
Rhombus is, and has always been, NDAA compliant. Rhombus uses Ambarella chipsets, Sony imagers, and US-based memory. All cameras are assembled in Taiwan. For the sensors, they are assembled in the USA.
See my answer below: Essentially we can create a table of your entire inventory, manufacturer, oe manufacturer, model and firmware. This can be correlated with vendor information. In the main, you can get a quick check on compliance. In the margins, you may have investigative work. For our integrator partners, this becomes a Professional Services engagement to help people demonstrate compliance.
This article actually pulls together a lot of useful, model specific information which is leverageable in the exercise.
Since early 2019, we maintain a Manufacturer and OE Manufacturer attribute for every camera.
These fields are derived automatically from what we can discover from your configuration. VMS's often have their notion of manufacturer and model. If you give us the device credentials, we can get more refined information about the device. The OE Manufacturer is derived from the MAC Address of the device only.
If the vendor has replaced the NIC card in the device with their own, we can't tell automatically. At that point, you have to go by the vendor's information. These two camera fields as well as model, firmware version, IP Address, MAC Address, location, recorder, et cetera can be exported into a spreadsheet if necessary and people can do their own deeper analysis and/or use it as evidence of compliance.
The OE Manufacturer is derived from the MAC Address of the device only.
But how are you determining which devices use Huawei Hisilicon? Your company Viakoo is selling an audit ("For a fixed price we will provide an Inventory management audit.") but I don't see how anyone could confidentially and fully offer such a service when there are so many brands and not an obvious fingerprinting for Huawei Hisilicon generally.
That makes sense. That also means you need to have a list of models that are known to use Huawei Hisilicon. Not a criticism, just trying to clarify that it's not some magic algorithm that detects if there is Huawei inside a device.
No magic, but vendors are declaring and your article actually is pulling a lot of data together. The point is that a large percentage in our customer's inventory resolves quickly. Then there is research to do on the rest but the database is getting more fleshed out every day.
Yes, that's fine for new purchases but for people trying to audit their current inventory, it makes it cumbersome to have to select each individual model one at a time. It makes it easy if you can provide the list that people can quickly match to their inventory.
Conor - do you have any info on i3 International & Click-IT - Both OEM Cameras and their NVR/ HVRs are suspected to have the Huawei Chipsets. They are not "mainstream" but have been sold into the specific niche vertical markets. Thanks
Hi David. This information should only be taken to apply to products that are being sold today. That said, if you have questions about a specific past product, please feel free to post those in a comment, and we'll see what information we have.
I would urge you to not put vendors in the "100%" compliant list unless they have always been compliant. You should have a distinction for "100% Compliant from now on" that is different than "100% Compliant" simply because there is the inventory that is already in place that can affect people in terms of compliance.
I have the same letter from Bosch. They are pretty specific about which models are compliant. Reference the model #s you bought against that list. If it is not on there it is definitely non-compliant. Products that were non-NDAA compliant were in the 3000 series, the Tinyon cameras, some PTZs, and some lower cost fisheyes. If I recall properly most of the 5000 series was OK. Most of the non-NDAA compliant product was on the lower end.
The cameras I have been buying were the Dinion 5000 bullets which were in the list I was given months ago.
But as of a few days ago, Bosch apparently said this. Anyone know if this is true? If so then Bosch lied.
On August 14, 2020, a provision of NDAA will go into effect that prevents a company from doing business with the U.S. government, if they are also selling video products that are not NDAA compliant to other non-government entities in the U.S.
As a result, there will be a few Bosch products that we will remove from our portfolio, including the DIVAR hybrid 3000 and 5000 recorders, DIVAR network 2000, 3000 and 5000 recorders, the DINION IP 4000, 5000, and 6000 bullet cameras, and the Sony SNC-WL862 Multi-Sensor Adjustable Dome Network Camera.
These products will be removed from our U.S. offering beginning August 14, so that Bosch can continue to do business with the government. However, we expect our distribution partners will have stock remaining and will continue to supply them to customers until their inventory is exhausted.
We apologize for any inconvenience this causes you, but we want to be able to continue to do business with the US Government so we had to make these difficult decisions.
Can someone clarify Panasonic's statement "All Panasonic-branded cameras sold in the U.S. are engineered, manufactured and quality assured solely by Panasonic. As such, they are not impacted by the NDAA legislation (federal ban)." Can Panasonic verify they do not use Hi-silicon/Huawei chips in the i-Pro product line? The product line may be engineered, manufactured and QA'd solely by Panasonic but the country of origin is still China.
My understanding from several months ago, is Panasonic branded cameras are NDAA compliant. But their Advidia by Panasonic models are in transition to compliance. A series are not compliant, B series are.
Would like to see a statement from Verint - they manufacture their Edge VR boxes and have yet to issue a formal statement to any of their dealers. I talked to one yesterday who was told "Don't worry about it" from his rep which isn't quite the same as a "no"
Team IPVM - this information is a great resource tool for Integrators, End Users and Consultants.
As a Regional Manager for Geutebrück USA, I would like to state that all of our product portfolio is NDAA compliant.
Geutebrück's complete line of Servers, Viewing Stations, Cameras and related components including:
- Mainboards / Motherboards- Central Processing Units (CPU's)- Random Access Memory (RAM)- Graphics Cards- Solid State Drives (SSD's)- Hard Disk Drives (HHD's)
Therefore, our hardware does not contain any banned components, such as System-on-a-Chip (SoCs) or other technology with Chinese origin, in accordance with the announcement by the National Defense Authorization Act (NDAA).
We would be pleased to provide a statement of compliance endorsed by our Managing Director and Director of Quality Control to any individual or entity requesting further documentation.
Thank you for adding clarity to an extremely murky situation.
Panasonic i-Pro has been removed from the whitelist. Suspecting deception by the manufacturer, we took apart one of their US-listed models and found a Huawei chip inside. Read our report on this issue for more information: Warning: Panasonic i-PRO Deceives About NDAA Compliance
For those curious about Geovision's NDAA compliance, it is certainly not 100%. I tore down 2 current Geovision cameras, and found that the GV-EBD8711 uses a HiSilicon chip, while the GV-EVD2100 uses a Grain chip. I checked Geovision's website prior to posting this, and I do not see any NDAA-specific message from them yet.
Several months ago I requested an NDAA compliant statement and received one from GeoVision. Because the wording of the compliance statement did not disclose the source of the SoC, I requested clarification from the company, twice, and never received a reply. Based on this non-response a decision was made not to use GeoVision products.
Update: several readers have asked about JCI's sourcing of their new Illustra Essentials Gen4 line. Based on configuration similarities in their documentation, these cameras appear to be from the same supplier as their Gen3 Pro line:
This supplier is likely Topview, though neither JCI nor Topview have confirmed this relationship. Import records to JCI (under the Sensormatic name) from Topview from the past six months show significant activity: