SAFE Supply Chains Act

This bill requires federal agencies to procure and use information and communications technology products only from original equipment manufacturers or authorized resellers, with limited waivers for research or mission-critical functions. It also mandates vendor assistance and reporting to Congress.

Sec. 2, Agency use of IT products: Defines key terms including 'agency,' 'authorized reseller,' 'covered product' (hardware and embedded software, excluding non-ICT hardware), 'end-use product,' 'information and communications technology,' and 'original equipment manufacturer.' Prohibits agencies from procuring, obtaining, renewing contracts for, or using covered products from entities other than original equipment manufacturers or authorized resellers, subject to waivers. Allows agency heads to waive the prohibition for scientifically valid research or to avoid jeopardizing mission-critical functions, with written notice to the Director of the Office of Management and Budget specifying justification, security mitigations, and a plan to avoid future waivers. Research waivers last for the duration of the research. Requires each agency to establish procurement guidance to help ineligible entities become authorized resellers. Mandates the Director of the Office of Management and Budget to report annually to Congress for six years on the number and types of waivers granted, legal authority for each, and actions to reduce waivers. Reports are unclassified but may include a classified annex. No additional funds are authorized. The section takes effect one year after enactment.