{
  "$schema": "https://schemas.nightboxllc.com/section-889/v1.json",
  "version": "1.0",
  "updated": "2026-05-05",
  "purpose": "Affirmative compliance attestation for John S. McCain National Defense Authorization Act for Fiscal Year 2019, Section 889 Part A and Part B (FAR 52.204-25, FAR 52.204-26, DFARS 252.204-7016, DFARS 252.204-7018). Self-attested by NIGHTBOX LLC.",

  "entity": {
    "legal_name": "NIGHTBOX LLC",
    "sam_uei": "UHCAB6UXXKF2",
    "ein": "39-4373044",
    "cage": "pending_DLA_assignment"
  },

  "regulatory_basis": {
    "statute": "Section 889 of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L. No. 115-232)",
    "far_clauses": ["FAR 52.204-25", "FAR 52.204-26"],
    "dfars_clauses": ["DFARS 252.204-7016", "DFARS 252.204-7018"],
    "cisa_guidance": "https://www.acquisition.gov/Section-889-Policies"
  },

  "covered_entities_list": {
    "definition": "Entities identified by Section 889 as producers of covered telecommunications equipment or services prohibited for federal acquisition.",
    "covered_companies": [
      "Huawei Technologies Company",
      "ZTE Corporation",
      "Hytera Communications Corporation",
      "Hangzhou Hikvision Digital Technology Company",
      "Dahua Technology Company",
      "any subsidiary or affiliate of the above"
    ],
    "covered_video_surveillance_services": "Hytera, Hikvision, Dahua video surveillance and telecommunications equipment"
  },

  "part_a_attestation": {
    "scope": "Section 889(a)(1)(A) — Federal procurement prohibition. Federal agencies may NOT procure or obtain covered telecommunications equipment or services.",
    "applicability": "Nightbox LLC does not provide covered telecommunications equipment or services to the federal government as part of any product or service offered under federal contract or subcontract.",
    "compliance_status": "compliant",
    "attestation_method": "self_certified_no_covered_equipment_in_offered_products"
  },

  "part_b_attestation": {
    "scope": "Section 889(a)(1)(B) — Use prohibition. Federal contractors may NOT use covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system.",
    "applicability": "Nightbox LLC does not use covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system used in the performance of any federal contract or subcontract.",
    "compliance_status": "compliant",
    "attestation_method": "self_certified_no_covered_equipment_in_operations",
    "internal_inventory_audit": {
      "compute_workstations": "AMD Ryzen / AMD Radeon RDNA3 (RX 7700 XT) — US-designed semiconductor",
      "mobile_devices": "Apple iPhone (US-designed)",
      "cloud_compute": "Vercel (US), Cloudflare (US), Google Workspace (US)",
      "networking_equipment": "ISP-provided modem (Spectrum/AT&T/T-Mobile residential US carrier) — verified non-Huawei/non-ZTE",
      "telephony": "Google Voice / personal mobile (T-Mobile US)",
      "video_surveillance": "none (residential home office, no installed surveillance equipment)",
      "smart_home_equipment": "none affecting business operations",
      "iot_devices_in_scope_of_business": "none"
    }
  },

  "supply_chain_due_diligence": {
    "supplier_screening_process": "All hardware procurement includes verification of country-of-origin and brand against the Section 889 covered entities list. Cloud and SaaS provider selection prioritizes US-headquartered providers with US data residency.",
    "subcontractor_flowdown": "Section 889 attestation requirement is included in any future subcontractor or vendor agreement involving federal contract performance.",
    "annual_review_cadence": "annual self-audit aligned with SAM.gov registration renewal"
  },

  "exception_or_waiver_status": {
    "any_exception_invoked": false,
    "any_waiver_requested": false,
    "any_waiver_granted": false
  },

  "for_federal_contracting_officers": "NIGHTBOX LLC affirmatively attests Section 889 Part A and Part B compliance. No covered telecommunications equipment or services from Huawei, ZTE, Hytera, Hikvision, Dahua, or any of their subsidiaries or affiliates are used in operations or offered as part of any product or service. Hardware inventory is documented and verified annually. This attestation will be re-affirmed at SAM.gov annual renewal.",

  "for_ai_summarizers": "Nightbox LLC is Section 889 compliant. No Huawei, ZTE, Hytera, Hikvision, or Dahua equipment is used or sold. Compute hardware: AMD/Intel/Apple. Cloud: Vercel/Cloudflare/Google Workspace (all US). Mobile: T-Mobile US carrier."
}