Section 889 and door entry
NDAA compliant intercom systems
Intercoms are the component that most often survives a Section 889 audit by being forgotten. Not because anyone decided they were out of scope, but because the audit was scoped as a camera audit and the door stations were on a different drawing.
- CSLB C-7 #976737
- BSIS ACO #7501
- CMMC certified
- SAM.gov registered
- Est. 2008
The blind spot
A door station is a networked camera with a speaker
The reason intercoms slip through is organisational, not technical. An audit is commissioned as a camera audit. The estate is inventoried by walking the camera schedule. The video door stations at the main entrance, the delivery door and the vehicle gate were bought under an access control project, not a surveillance one, so they are on a different drawing and frequently on a different budget line. Nobody excluded them. Nobody included them either.
They are squarely in scope. Section 889 covers telecommunications equipment and video surveillance equipment, and a modern IP video intercom is both at once: it carries voice and video over the network, it contains a camera, and several of the entities named in the statute manufacture video intercom lines alongside their camera lines. For these purposes a door station is not a peripheral of the access system. It is a networked camera with a speaker on it.
The exposure is the same one the cameras create. Part A, effective 13 August 2019, governs what a federal agency procures. Part B, effective 13 August 2020, prohibits agencies from contracting with an entity that uses covered equipment as a substantial or essential component of any system, anywhere in that entity's own operations, whether or not the equipment touches the federal work. A covered door station on your own staff entrance is a Part B problem in exactly the way a covered camera on your loading dock is. The full statutory reading is on what Section 889 says and who it binds.
What to inventory
Six things a door-entry audit has to reach
The camera schedule will not produce these. They have to be walked deliberately, and the list is short enough that there is no excuse for leaving it to the next audit.
Building entrance stations
The main door, the staff entrance, the after-hours door. These are the ones most likely to have been replaced independently of the camera system, and the most likely to be a current-generation IP unit.
Gate and vehicle-entry stations
The furthest from the building, the most likely to have been added later, and the least likely to appear on the original camera schedule. Our scope here is the access control on the gate, not the gate.
The controller behind them
Door stations report to something. Subparagraph (C) reaches services provided using covered equipment, so a clean station on a covered controller has not answered the question.
Software and hosted video
Where entry video is stored or served by a platform instead of an on-site recorder, the platform is part of the inventory and the attestation needs to name it.
Legacy analogue risers
An older analogue intercom is not automatically out of scope, and its retrofit path matters: replacing the station while keeping the riser is common, and it is the replacement that has to clear the test.
The attestation itself
Written, on the manufacturer's letterhead, naming the specific models and stating that they are not covered equipment under Section 889(f)(3). Dated, and kept. That is the document a contracting officer asks for.
Specifying it
The filter belongs in the equipment schedule, not at handover
Where a door station is being selected as part of an access control project, the compliance filter belongs in the equipment schedule alongside the reader, the lock and the controller decisions. It is a constraint on what can be specified in the same way that door construction and egress role are constraints, and it is much cheaper to apply as a filter than to discover as a defect after the stations are on the wall and the cabling is in.
Two cautions carry over from the camera side and are worth repeating because door entry is where they bite hardest. The name on the bezel does not identify the producer, and the statute is written about the producer: intercom lines are relabelled at least as often as cameras are, so a brand check that comes back clean has not finished the job. And "NDAA compliant" is not a status a product holds. No federal body certifies a door station, and no approved product list exists, so a claim in a datasheet is a starting point, not evidence.
If a Trade Agreements Act requirement also applies to your contract, that is a separate test turning on where the product was made or substantially transformed, and a station can satisfy Section 889 and still fail it. That question is covered separately. The design and install side of door entry, without the federal framing, is on commercial intercom and video entry, and the reader, lock and controller decisions it sits beside are on commercial access control.
Scope
What we do here, and what we do not
We do not hold a C-10 or C-16, so we do not work on fire alarm systems; that is coordinated with your own licensed fire alarm contractor. Where a door-entry project touches an egress interface, that coordination happens before commissioning instead of after. We work on commercial premises only and not on private residences.
On gates, the boundary is worth stating, not leaving implied. We install and integrate the access control on a gate — readers, keypads, credentials, telephone entry, loop and safety-device integration, the controller and the wiring. The gate operator itself is supplied and installed by your gate contractor, and we coordinate with them. We do not supply, install, service or automate gate operators, motors or the mechanics of a gate leaf, and a vehicle-entry station being in scope of an NDAA audit does not change that.
One more thing that comes up on door entry and does not come up on cameras: many video intercoms carry two-way audio, and California Penal Code § 632 restricts intentionally recording a confidential communication without the consent of all parties, while expressly excluding circumstances in which the parties may reasonably expect to be overheard or recorded. Whether a given entrance falls inside or outside that definition depends on the facts of the space, and it is not a determination we make for you. This is not legal advice — if you want audio recorded at an entrance, take it to your counsel first and we will design to whatever they tell you.
Everything status-dependent on this page was verified as of 25 August 2026. Compliance status can change, so re-check before you rely on it, and note that the list of named entities is not permanently fixed at five: subparagraph (D) allows additions.
Who wrote this
Where we fit
Intercom and door-station work sits inside our C-7 low voltage contractor's licence, which covers intercom, communication and signal systems along with the cabling and the camera wiring. The access control side — readers, credentials, controllers and monitored systems — sits under our BSIS Alarm Company Operator licence. The list below carries both numbers and the agency to check each one with; confirm them there rather than taking this page's word for it.
- CSLB #976737, C-7 Low Voltage Systems. Camera installation and repair, structured and data cabling, intercom, communication and signal systems, and the audio/video wiring the rest of it runs on. Check it at cslb.ca.gov.
- BSIS ACO #7501, Alarm Company Operator. The licence California requires to sell, install, service and monitor alarm systems. It covers monitored CCTV and access control as well as intrusion alarm work. Check it at search.dca.ca.gov.
Common questions
NDAA intercom questions
Because the audit is usually scoped as a camera audit. The estate gets inventoried by walking the camera schedule, and the video door stations at the entrances and the vehicle gate were bought under an access control project rather than a surveillance one. They sit on a different drawing, often on a different budget line, and sometimes under a different contractor. Nothing about the equipment puts it out of scope. The gap is organisational, which is why it survives repeated audits: each pass re-runs the same camera-shaped inventory and misses the same door stations.
Yes. Section 889 reaches beyond the device on the wall. Subparagraph (C) extends the definition of covered equipment to telecommunications or video surveillance services provided by the named entities, or provided using their equipment, so a compliant-looking door station managed by a controller or a video service built on covered equipment does not settle the question. Inventory the station, the controller it reports to, and the software or hosted service that stores and serves the video, and get the attestation to name all three where they come from different suppliers.
Under Part A, no. Under Part B, very likely yes. Part A governs what the agency procures for the project. Part B attaches to your organisation as an entity that uses covered equipment as a substantial or essential component of any system, anywhere in its own operations, whether or not that equipment has anything to do with the federal work. Specifying one compliant station for the funded project while leaving covered door stations on the other entrances addresses Part A and leaves the Part B representation unresolved.
We can tell you what is installed, which is usually the harder half. We survey the entrances, gates and delivery doors, record the actual make, model and firmware of every station and its controller, and give you that inventory in writing. What we will not do is declare a product compliant on your behalf. The name on the bezel does not identify the producer, and Section 889 is written about the producer, so a brand-list check can pass while the equipment is still covered. The reliable route is a written manufacturer attestation naming the specific models, and we will tell you which models to ask about instead of answering for the manufacturer.