# DHS Excludes Acronis Products From Federal Systems

The Department of Homeland Security ordered federal civilian executive-branch agencies to stop acquiring covered Acronis products immediately and remove them from agency IT systems because of security concerns involving elevated or root-level access. The order was signed July 31, 2026, and scheduled for public publication on October 30, 2026. Agencies must remove the products within 180 days of issuance or seek an exception; the period runs to approximately January 27, 2027, with 89 days remaining as of October 30, assuming calendar-day counting.

- Agencies must exclude covered Acronis products from procurement activities now and plan for removal or an exception within the order’s timeline.
- Contractors should review product dependencies, reseller channels, and proposed solutions for covered Acronis components to avoid conflicts with agency procurement and system-removal requirements.
- Acronis suppliers and resellers may face changes to federal sales and deployment plans; contractors should assess whether affected products are embedded in offerings to civilian agencies.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** October 29, 2026

### Government Entities
- Department of Homeland Security (DHS)
- Federal Acquisition Security Council (FASC)
- General Services Administration (GSA)

### Vendors
- Acronis AG (Supplier of products subject to exclusion)

### Sources
- [DHS Orders Acronis Products Removed From Federal IT Systems](https://www.executivegov.com/articles/dhs-remove-acronis-products-it-systems) - ExecutiveGov