NDAA.com Product Verification Terms & Privacy Notice

Effective Date: October 15, 2026
Version: Product Terms 2026-10-15 v2

NDAA.com is a company registered in the State of Nevada, United States. These Product Verification Terms and Privacy & Data Processing Notice apply to applications submitted for NDAA.com Product Verification using this version of the notice.

By agreeing to this notice and submitting a Product Verification application, the applicant company (the “Applicant”) accepts the following terms. Publishing this notice does not mean that Product Verification applications are open.

1. Product Verification Service and Scope

NDAA.com provides an independent, document-based and risk-based product verification service for unmanned aircraft systems, related components, and other electronic products.

Each application covers one stated combination of product model, hardware revision, configuration, and HBOM revision or date. The review may include the product’s hardware bill of materials (HBOM), actual manufacturers and manufacturing origins, software and firmware, associated systems and services, supporting documents, and signed declarations.

The criteria applied depend on the product and the stated review scope. Requirements specific to unmanned aircraft systems, including Section 848 of the National Defense Authorization Act for Fiscal Year 2020, as amended, are not automatically applied to every electronic product. Any verification result must identify its product configuration, review scope, and applicable criteria.

Supplier Verification and Product Verification are separate. Approval of a supplier does not approve its products, and approval of one product configuration does not approve other models, revisions, configurations, or HBOM versions.

2. Complete Disclosure and Country-Related Information

The Applicant must disclose the actual manufacturers and manufacturing origins of the submitted product and its components, rather than identifying only distributors or resellers. The HBOM must link each listed component to its actual manufacturer and provide an official email address or contact-form URL for each external component manufacturer.

Where applicable, the Applicant must disclose software and firmware developers and development locations, together with the providers and locations of associated ground control systems, network connectivity, and data-storage services.

These disclosures must include known relevant connections to the People’s Republic of China, Russian Federation, Islamic Republic of Iran, and Democratic People’s Republic of Korea. Information that cannot be confirmed must be clearly identified. Country-related information is considered together with the applicable review criteria and other evidence; a country connection alone is not a universal finding that a product violates the NDAA or other law.

Missing, uncertain, or inconsistent information may require clarification or additional evidence before a decision can be made. Disclosure does not guarantee approval.

3. Accuracy, Authority, and Material Changes

The Applicant certifies that, after reasonable inquiry, the information and documents submitted are true, accurate, complete in all material respects, and not misleading. The submitting representative must be authorized to act for the Applicant and to provide the submitted information and documents, including any confidential information belonging to others.

The Applicant must not knowingly conceal or misrepresent product identity, component sources, manufacturing origins, software or system information, alternative components, or other material facts. The Applicant agrees to provide clarification and supporting evidence when reasonably requested.

The Applicant must notify NDAA.com at info@ndaa.com within 30 calendar days after becoming aware of a material change affecting the reviewed product configuration or the accuracy of its disclosures. A material change may require a new or updated application and a new review. An existing result must not be represented as covering the changed configuration unless NDAA.com confirms that scope.

4. Documents and File Security

A HBOM must be submitted as one Excel file in XLSX or XLS format, up to 10 MB. CoO and/or CoC documents must be combined into one required PDF, up to 20 MB. A purchase order or invoice may be submitted as one optional PDF, up to 10 MB. Files must correspond to the stated product configuration and comply with the upload instructions.

Documents may be quarantined and checked for file type, structure, integrity, and malicious content. Unsupported, encrypted, damaged, unsafe, or unverifiable files may be rejected or require replacement. File acceptance is not a determination that its contents are accurate or that the product is approved. Authorized reviewers may download original files for manual review without waiting for automated file-security checks. Approval requires a reviewer to confirm review of the current documents and record the product scope, applicable criteria, and supporting evidence. File receipt or download does not establish file safety.

Do not submit executable content, unnecessary personal information, passwords, payment-card details, or information that the Applicant is not authorized to disclose. Unrelated commercial or personal details may be redacted where doing so does not hide information needed for the review.

5. Manual Review, Decisions, and Delivery

The current process uses human review and manual decisions. NDAA.com may request clarification or supporting evidence, approve only the expressly stated scope, or decline an application where the available evidence does not support approval.

Submission, receipt of documents, and completion of file checks do not constitute approval. Review timing depends on complete information and any required clarification. Approval does not automatically send a notification or issue a certificate; result notification and electronic PDF certificate delivery are handled manually.

Any validity period or conditions are those expressly stated in the issued result or certificate. These terms do not authorize use of a verification mark beyond that stated scope or validity.

6. Verification Activities

The Applicant authorizes NDAA.com to check submitted information using lawful sources, including official manufacturer contacts, corporate or government registries, public records, certification issuers, and applicable restricted-entity sources. Verification inquiries should be limited to information reasonably necessary for the review.

NDAA.com may compare information, request explanations, and record the evidence and reasons supporting a decision. A lack of response from a manufacturer or other source may leave an issue unresolved and require further evidence.

7. Privacy and Data Processing

NDAA.com collects and processes information reasonably necessary to administer and assess the application: applicant company and business contact information; product identifiers and configurations; HBOMs; manufacturer and origin disclosures; software, firmware, system and service information; supporting documents; contact names and job titles; declaration and agreement versions and timestamps; correspondence; review results; and security, access and audit records.

This information is used to provide the verification service, assess evidence, request clarification, prevent fraud or misrepresentation, protect files and systems, maintain review and delivery records, manage changes or verification status, handle disputes, and comply with applicable law.

Access is limited to authorized personnel and service providers as reasonably necessary for these purposes, or where disclosure is required by law. Service providers may support website and form hosting, private storage, infrastructure, and security. Information may be processed in the United States, Taiwan, or other jurisdictions where the authorized service providers operate.

NDAA.com does not sell confidential application documents or make HBOMs, CoO/CoC documents, invoices, or other confidential supporting documents public merely because they were submitted or a product was approved.

8. Security, Retention, and Requests

NDAA.com uses reasonable access restrictions and security measures appropriate to the application information. No storage or transmission system can be guaranteed completely secure.

Information is retained for as long as reasonably necessary for the purposes described in this notice, including maintaining evidence of the review and consent, managing verification status, meeting legal obligations, and resolving disputes. Retention requirements may differ by record type.

Contact info@ndaa.com to request access to or correction of submitted information, ask about retention, or request deletion. Requests may require identity or authority verification and are subject to applicable law and legitimate recordkeeping requirements. Deleting evidence needed to support an active verification may affect the ability to maintain that verification.

9. Automated Processing

Technical checks may assist with submission validation, file integrity, and security. These checks do not independently verify product compliance or replace human review. The current process does not make final approval decisions, notify results, or issue certificates automatically.

This notice does not state that a malware-scanning service or AI document-analysis service is currently operational. Any material change to the processing described here will be reflected in an updated notice and, where required, additional consent.

10. Misrepresentation, Suspension, and Revocation

If material information is missing, inconsistent, or suspected to be misleading, NDAA.com may request evidence, pause the review, or suspend the affected verification while the issue is assessed.

If material misrepresentation, falsified documents, or unauthorized use of a verification result is confirmed, NDAA.com may decline, suspend, or revoke the affected verification and require the Applicant to stop representing that configuration as verified. Minor clerical errors do not, by themselves, constitute intentional misrepresentation.

11. Verification Limitations and Liability

An NDAA.com verification reflects the information, evidence, product configuration, and criteria reviewed at the time of assessment. A document review does not establish that every physical unit matches the submitted information and does not include laboratory testing, source-code audit, cybersecurity certification, or a factory inspection unless expressly included in the stated review scope.

NDAA.com is not a U.S. Government agency. Its verification is not legal advice, U.S. Government or Department of Defense approval, or a guarantee of compliance with every NDAA, FAR, DFARS, sanctions, export-control, or procurement requirement. It does not guarantee eligibility for a particular contract or discovery of intentionally concealed information.

To the maximum extent permitted by applicable law, NDAA.com is not responsible for losses caused by information that the Applicant intentionally concealed, falsified, or materially misrepresented where that information could not reasonably have been identified within the stated review scope. Nothing in these terms excludes liability or rights that cannot lawfully be excluded.

12. Governing Law, Versions, and Contact

These terms are governed by the laws of the State of Nevada, United States, subject to mandatory laws that cannot legally be excluded. The version accepted with an application forms part of its review record; publishing a later version does not, by itself, change the version previously accepted.

NDAA.com
A company registered in the State of Nevada, United States.
Contact: info@ndaa.com