TAA Compliance for Federal IT: A Buyer's Guide

The TAA implements U.S. obligations under the World Trade Organization Government Procurement Agreement (WTO GPA) and a set of bilateral and regional free trade agreements. The mechanism is a waiver plus a restriction: for covered acquisitions, the government waives the Buy American statute's domestic-preference arithmetic for goods from countries that gave the United States reciprocal access, and in exchange it excludes goods from countries that did not. The operative clause is FAR 52.225-5, Trade Agreements, and the definitions live at FAR 25.003.

The acceptable set is therefore narrower than "not made in a sanctioned country" and wider than "made in America." An end product qualifies if it is a U.S.-made end product or a designated country end product. Designated countries fall into four groups defined at FAR 25.003: WTO GPA countries, free trade agreement countries, least developed countries, and Caribbean Basin countries. A country that appears in none of those four groups is simply not designated, and a product whose origin is that country is not an acceptable end product on a covered acquisition.

It is worth being precise about the word "compliant." TAA compliance is a property of a specific end product under a specific contract, asserted by the party offering it. Manufacturers routinely designate particular models or configurations as TAA-designated and say so in the product's own name or documentation, which is why federal IT buyers shop by model rather than by brand: the same manufacturer very often ships both designated and non-designated variants of the same product family, differing only by where the unit was assembled.

There are two doors into the rule, and buyers who only know one of them get surprised by the other.

The first is the contract-level door. GSA states that the Trade Agreements Act applies to all Multiple Award Schedule contracts unless the solicitation or contract says otherwise: the TAA clause is incorporated into the Schedule solicitation and the resulting contract, and contractors may offer only U.S.-made or designated-country end products against it. Because the rule is tested at the contract level, and a Schedule contract's value sits far above any of the trade-agreement thresholds, the origin restriction reaches individual orders regardless of what any one order is worth. A small order placed against such a contract is still governed by the origin rule — the order's dollar value never buys you out of it.

The second is the threshold door, which governs open-market acquisitions. Outside a contract that already carries the clause, TAA generally attaches at or above the applicable trade-agreement threshold. For supplies under the WTO GPA that threshold is $174,000 for calendar years 2026-2027, set by USTR and implemented in the FAR at 25.402 by FAR Case 2025-007, effective March 13, 2026. Several free trade agreements set their own, lower supply thresholds — $105,767 under agreements including USMCA, CAFTA-DR, Australia, Chile, Colombia and Singapore, and $100,000 under the Korea FTA — so the number that governs depends on which agreement is in play. Below the applicable threshold, an open-market supply purchase is generally governed by the Buy American statute's domestic-preference evaluation rather than by the TAA's origin restriction.

One rule does not have a threshold at all. Section 889 of the FY2019 National Defense Authorization Act applies to every acquisition, including micro-purchases and commercially available off-the-shelf items. That is why a small card purchase can be entirely outside TAA's reach and still be prohibited — a distinction covered in detail in the comparison linked below.

As of August 2026, FAR 25.003 defines designated countries in four groups: 47 WTO GPA countries, 17 free trade agreement countries, 47 least developed countries, and 21 Caribbean Basin countries. Several countries appear in more than one group — Australia, Korea and Singapore are both WTO GPA and FTA countries, for instance — which changes nothing about the outcome but does explain why counts published elsewhere sometimes disagree.

For IT hardware specifically, the designated origins that come up constantly are the United States, Mexico, Canada, Taiwan, Japan, Korea, Singapore, and the European Union member states. Taiwan and Mexico cause the most confusion and are worth committing to memory: Taiwan is a WTO GPA country and Mexico is a free trade agreement country, so both are designated. Poland is likewise on the WTO GPA list, and appears there in the FAR text at both 25.003 and clause 52.225-5.

On the other side, several countries with very large electronics manufacturing bases appear in none of the four groups and are therefore not designated countries under FAR 25.003 as of August 2026 — among them China, India, Russia, Malaysia, Thailand and Vietnam. That is a statement about the FAR lists, not a sanction or an import ban: goods from those countries move in ordinary commerce and are lawful to buy commercially. They simply are not acceptable end products on an acquisition to which the TAA applies, which is why the same laptop model can be perfectly saleable in the commercial channel and unusable on a covered federal order.

None of this is permanent. The lists change as countries accede to the WTO GPA, as free trade agreements enter into force or lapse, and as least developed country designations are updated. Treat any list you read — including this one — as a snapshot, and confirm a country's current status in FAR 25.003 at acquisition.gov before you rely on it for a determination.

A product does not have to be built from the ground up in a designated country to qualify. The alternative test is substantial transformation: an item qualifies if it is wholly the growth, product or manufacture of the United States or a designated country, or if it is substantially transformed in one of those countries into a new and different article of commerce, with a name, character or use distinct from what it was made from.

The phrase to hold onto is "new and different article of commerce." The question is not how much labor was performed or how much value was added; it is whether what came out is a different thing from what went in. Assembling manufactured components into a working server that is sold, described and used as a server is the standard example of a transformation that qualifies. Simple operations generally do not: repackaging, relabeling, adding a power cord, translating a manual, or performing minor finishing work on an item that was already the finished article does not turn a non-designated product into a designated one.

This is the reason origin cannot be inferred from a bill of materials. A designated-country server can contain components made almost anywhere; a unit assembled in a non-designated country from designated-country parts does not qualify. It is also the reason the same model number can be designated in one configuration and not another — origin follows where the assembly that created the finished article happened, and manufacturers commonly run more than one line.

Where the determination is genuinely close, the authoritative route is a U.S. Customs and Border Protection country-of-origin ruling. Manufacturers who serve the federal market frequently obtain them and cite them, and a vendor should be able to point at the basis for a designation rather than merely repeating the word.

Verification on an IT order comes down to two checks, run in order, before the requisition is committed.

The first is the manufacturer's own designation. Manufacturers that sell into the federal market publish which models and configurations they designate as TAA-compliant, and on many product lines the designation is carried in the product's own name — a distinct part number, or the letters appearing in the model string itself. That published designation, tied to the exact part number you intend to order, is the primary evidence. "The brand sells to the government" is not evidence, and neither is a designation attached to a sibling model: check the part number in front of you, because manufacturers ship designated and non-designated versions of the same family under part numbers that differ by a character or two.

The second is a country-of-origin screen on the specific part number quoted to you, before the order is placed rather than after it arrives. This is the step that catches configuration substitutions, and it is the one that fails silently when it is skipped — an origin problem discovered at receiving is a return, a re-solicitation, and a schedule slip.

Two habits make both checks stick. Put the requirement in the requirement document, not the evaluation notes, and phrase it against part numbers rather than product families. And ask the vendor to state origin per line item on the quotation, so the record you keep is contemporaneous with the price you accepted. The same discipline that produces a defensible origin file also produces the answer quickly the next time the same part comes up.

Origin is not the only question a federal IT line item has to survive, and the other questions are independent. Section 889 asks who made the equipment rather than where it was made: it bars covered telecommunications and video surveillance equipment from five named entities — Huawei, ZTE, Hytera, Hikvision and Dahua, along with their subsidiaries and affiliates — under FAR provision 52.204-24 and clause 52.204-25, with Part A effective August 13, 2019 and Part B effective August 13, 2020. Because §889 has no dollar threshold, a product can be a designated-country end product and still be prohibited, and a product can be outside §889 entirely and still fail the origin test.

Cryptographic requirements are a third, separate axis. FIPS 140-3 validation is about whether a named cryptographic module was tested and certified under the NIST Cryptographic Module Validation Program; it says nothing about where the product was assembled. CMMC assessments for the defense industrial base sit alongside both, governing how a contractor protects controlled unclassified information rather than what the government may buy. A line item can pass any one of these and fail another, so run them as independent checks rather than as a single "is it federal-ready" question.

On quoted line items, Uniqcli performs TAA country-of-origin screening before the quote, and any per-model TAA designation reported is the manufacturer's own — verified against the manufacturer's published product designation for that part number, never asserted independently. The regulatory determination for a given acquisition remains the contracting officer's, made against the FAR text in force at the time of award.