Drone-in-a-Box Buyer's Checklist 2026: 12 Checks and a Scoring Table

To choose a drone-in-a-box vendor in 2026, settle five things before you compare features: which compliance rules your funding brings, how quickly the dock turns the drone around, whether it survives your site's weather, who controls the imagery and the AI, and how you will get permission to fly with no pilot on site. Charging docks publish turnaround times of roughly 20 to 35 minutes at room temperature; battery-swap docks relaunch in one to three minutes. The 12 checks and the weighted scoring table below turn that into one comparable score per vendor.

Disclosure: this guide is published by Dronehub. Every regulatory fact links to its source and was checked on 28 September 2026. For the systems themselves, see our comparison of 18 drone-in-a-box systems; for budgets, what a drone-in-a-box costs.

Order matters: a dock that fails your compliance screen is out, however good its specification.

The 12-point checklist

The scoring table

Score each vendor from 0 to 3 on each criterion, multiply by the weight for your type of buyer, and add up; the maximum is 300. The weights are our suggested starting point, not an industry standard, so adjust them to your own risk assessment. Treat compliance as a gate: a vendor that scores 0 there is out, whatever its total.

Worked example: a vendor that scores 3 on compliance and 2 on everything else earns 30 × 3 + 70 × 2 = 230 of 300 with the DoD weights.

1. Compliance: the funding source sets the rules

Section 848 of the FY2020 National Defense Authorization Act, as amended by Section 817 of the FY2023 act, stops the Department of Defense from buying or operating drones made in China, Russia, Iran or North Korea, or drones that use flight controllers, radios, data links, cameras or gimbals made there, ground-control software developed there, or data storage administered from there (10 U.S.C. 4871 note). The statute covers the drone "and any related services and equipment", which brings the dock and the cloud into scope. Since 1 October 2024 the DoD also may not contract with companies that operate DJI or other covered-company equipment on DoD work. The law creates no certificate: "NDAA compliant" on a datasheet is the vendor's own declaration.

The Blue UAS Cleared List is the Pentagon's vetted catalogue, run by the Defense Contract Management Agency since 3 December 2025. Listing is item-specific. Skydio announced on 23 July 2026 that its Dock for X10 had joined the list alongside its X10 and R10 drones, and DCMA's public list shows the dock among its cleared components; Ondas says its Optimus drone was granted Blue List status on 28 January 2026, a release that names the drone, not the dock.

The FCC Covered List is the rule that reaches commercial buyers. Since 22 December 2025, drones and drone critical components produced outside the US — docks included, the FCC says — cannot receive new equipment authorisations unless they are on DCMA's Blue UAS list or qualify as Buy American domestic end products (both exempt until 1 January 2028), or hold a Conditional Approval. Models authorised earlier can still be imported, sold and used. In July 2026 the FCC proposed ending further imports and sales of previously authorised foreign-produced "military-grade" drone equipment, docking stations included, to buyers other than the federal government; the proposal had not been adopted by 28 September 2026.

In the EU none of these US rules apply. The European equivalents bite through money and duties: purchases financed by the EU's SAFE defence loans may contain no more than 35% component cost from outside the EU, EEA-EFTA states and Ukraine (EUR-Lex summary), and NIS2 makes supply chain security part of every essential and important entity's cybersecurity risk management (Article 21(2)(d)). Our Blue UAS vs NDAA vs FCC explainer covers the US rules in full.

2. Turnaround: swap or charge

The biggest operational difference between docks is what happens between flights. A charging dock keeps the drone on the pad for the whole charge: DJI rates Dock 3 at 27 minutes from 15% to 95%, Skydio quotes about 35 minutes for its Dock for X10 at 25 °C and up to 73 minutes in extreme heat or cold, and BRINC's Responder Station charges from 10% to 90% in 20 minutes. A swap dock takes the depleted pack out, puts a charged one in and relaunches: our own dock takes about two minutes, Hextronics quotes as little as 80 seconds, Flock Safety says its Alpha dock is ready to fly again in less than 90 seconds, and Asylon quotes less than three minutes.

For persistent coverage — perimeter patrols, alarm response, back-to-back corridor sweeps — time on the pad is time the site is uncovered, and swapping earns its extra mechanics. For a few scheduled inspections a day, charging is simpler and has fewer moving parts. Either way, ask for the measured figure at your site's temperature extremes; our battery swap vs in-station charging analysis goes deeper.

3. Weather and site

Check the IP rating, the operating temperature range and the launch and landing wind limit against your site's worst week, not its average. Published figures vary: our own dock operates from −20 °C to +45 °C; DJI Dock 3 is rated IP56 from −30 °C to 50 °C with a 12 m/s landing wind limit; Skydio's Dock for X10 IP56 from −20 °C to 50 °C; the Avy Dock −15 °C to 50 °C; Dronus's NEST IP54 from −20 °C to 60 °C. At the site itself, DJI specifies a 100–240 V AC supply and up to 800 W for Dock 3, and Skydio lists wired Cat6, Starlink or 5G as backhaul options for its dock.

4. AI stack and data: who controls the output

The software that turns flights into findings is where vendors differ most. Ask three questions:

• Rights. Can you use, retrain, export or sublicense the detection models under your contract? A third-party model rented on a subscription usually cannot be passed on to your own customers.
• Improvement. When the models improve on your assets — rail fasteners in your network, transformer types in your grid, weld patterns in your pipeline — who owns that improvement?
• Data path. Where does inference run, and where are imagery, telemetry and audit logs stored? For DoD work, Section 848 covers network connectivity and data storage administered from the four covered countries. NIS2 does not require data to stay in the EU, but it does make supplier security part of an essential entity's risk management, so a regulated operator will want to know which cloud provider holds its imagery, and where.

If the dock or its software counts as a product with digital elements under the EU's Cyber Resilience Act, its manufacturer's duty to report actively exploited vulnerabilities applies from 11 September 2026, and the full requirements from 11 December 2027. Ask whether the vendor considers its product in scope and how it handles vulnerability reports.

5. Manufacturing location and audit trail

Where the dock is built matters differently under each rule. For Section 848, any country other than China, Russia, Iran and North Korea can qualify, provided the listed components and software do too. For a new FCC authorisation, the FCC looks at the place of production, not the maker's nationality. For SAFE-financed EU defence purchases, the 35% ceiling on component cost from outside the EU, EEA-EFTA states and Ukraine applies. Within any qualifying jurisdiction, ask for:

• A per-unit audit trail: serial tracking, bill-of-materials verification, supplier certification
• Evidence of production scale: does the line deliver volume, or is it a prototype shop?
• Supplier heritage: do the underlying suppliers have defence-procurement history?

Our own production line is in Jasionka, Poland, inside the Aviation Valley aerospace cluster near Rzeszów.

6. Permission to fly remotely

A dock earns its keep only if it may fly without a pilot on site. In the US, the FAA's Part 108 rule for routine beyond-visual-line-of-sight flights was proposed on 7 August 2025 and was still not final on 28 September 2026, so dock operators rely on case-by-case approvals: Part 107 waivers, Section 44807 exemptions or Part 135 certification. Drones flying from a US dock must also meet Remote ID, which the FAA has enforced since 16 March 2024. In the EU, remote dock flights usually fall in the "specific" category and need an operational authorisation from the national aviation authority, unless they fit a declared standard scenario or the operator holds a light UAS operator certificate. Ask each vendor which approvals its customers already hold in your jurisdiction and what it provides for yours.

7. Deployment scale evidence — does the architecture survive real operations?

Final criterion: what's the largest production deployment the vendor has actually delivered? Marketing decks and pilot programmes are not the same artifact as a national-scale validation. The buyer's procurement panel will ask the question regardless of how the conversation starts; it's worth asking it up front.

Among the non-CN vendor pool, deployment-scale evidence is uneven. The strongest single reference in the category is Deutsche Bahn — Germany's 33,000-kilometre national rail network, where the Sentinel AI stack and the Dronehub drone-in-a-box hardware deliver per-fastener defect detection above 95% accuracy, sub-15-minute reports, and 24/7 availability by design. The validation translates directly to other linear-infrastructure use cases (energy transmission, pipelines, ports) and to the equivalent fixed-site deployments (refineries, dams, defense installations).

For every vendor on your shortlist, ask for docks in service, flight hours and uptime over the last 12 months, and a reference you can call.

What this looks like for the procurement panel

For a US federal innovation buyer — an SBIR/STTR topic, AFWERX or a DIU solicitation — the filter is hardware and software that meet Sections 848 and 817, a US small-business prime where the programme requires one (SBIR and STTR were reauthorised on 13 April 2026 through 30 September 2031), and the operational uptime the use case demands. Dronehub Inc. is a Delaware C-Corp SBIR-eligible US small business with EB1A-resident founder; the manufacturing sits in Aviation Valley, Poland under sovereign supply chain; the deployment evidence is at Deutsche Bahn national scale.

For an EU defence buyer — European Defence Fund projects, NATO DIANA or national procurement financed by SAFE loans — the filter changes shape: EDF money goes to recipients based in the EU with executive management there and not controlled by a non-associated third country, and SAFE-financed purchases carry the 35% component ceiling.

For an industrial operator — a utility, rail operator, port or refinery — the constraints arrive through the regulator or a customer: NIS2 supply-chain duties in the EU; in the US, the FCC Covered List and, with federal money, the American Security Drone Act.

The full Dronehub product context lives on /drone-in-a-box. The deployment-evidence story is on /projects/deutsche-bahn. For a buyer's evaluation conversation, open the contact form.