Does anyone have any experience with 889 compliance for Wordpress? My org is asking that all vendors fill out a form verifying that they don't use telecomms or surveillance equipment from some places in China, because we do a lot of business with the fed.

It feels like a fundamental misunderstanding of what Wordpress is - WP isn't hardware? But unsure how to explain this in a way that makes sense to my (very paranoid, tech illiterate) org.