FCC Expands Covered List to Include Foreign-Produced Routers

The Federal Communications Commission (FCC) has taken a decisive step in hardening the United States' telecommunications infrastructure by adding "routers produced in foreign countries" to its formal Covered List. This designation, issued by the Public Safety and Homeland Security Bureau on March 23, 2026, marks a strategic evolution in how the U.S. government manages supply chain risks. Unlike previous iterations of the list that focused on specific corporate entities like Huawei or ZTE, this expansion adopts a broader, category-based approach that targets hardware based on its country of origin and its potential for exploitation by foreign adversaries.

The move is rooted in the Secure and Trusted Communications Networks Act of 2019, which mandates the FCC to maintain a list of communications equipment and services that pose an unacceptable risk to national security. By including routers produced in specific foreign jurisdictions—typically those identified as adversaries by the Department of Commerce—the FCC is effectively closing loopholes that allowed unbranded or "white-label" hardware from these regions to permeate the domestic market. For the SaaS and Cloud industry, this development is particularly significant. While major hyperscalers often design their own proprietary silicon and hardware, the broader ecosystem of Tier 2 and Tier 3 data centers, as well as edge computing providers, often relies on a diverse array of networking equipment where provenance can be difficult to verify.

“

The Federal Communications Commission (FCC) has taken a decisive step in hardening the United States' telecommunications infrastructure by adding "routers produced in foreign countries" to its formal Covered List.

The immediate impact of this ruling will be felt most acutely by organizations that receive federal funding through programs like the Universal Service Fund (USF). These entities are now strictly prohibited from using federal subsidies to purchase, lease, or maintain any equipment on the Covered List. However, the ripple effects will extend far beyond those receiving direct subsidies. SaaS providers pursuing or maintaining FedRAMP authorization will likely face intensified scrutiny regarding their underlying infrastructure. Compliance officers will now need to provide more granular documentation regarding the manufacturing origin of their routing and switching fabric, as any "covered" equipment could disqualify a service from federal procurement.