Skip to content
← All stories

AI Security

US Government Orders DeepSeek AI Removed from Federal Civilian Systems

US federal agencies must remove DeepSeek AI products and stop buying them, citing security concerns. The order also covers third-party tools built with DeepSeek technology.

Ross Grant3 min read

The short version

The US government has told federal agencies to remove DeepSeek AI software and stop buying it, due to security worries. This also affects tools that use DeepSeek technology, even if they are made by other companies. The ban does not apply to private businesses or the public. Agencies and their suppliers now have to check their systems for any DeepSeek products and remove them if found.

What happened?

The US Department of Homeland Security ordered all federal civilian agencies to remove DeepSeek AI products from their systems and stop buying from the company. The order also covers third-party products built with DeepSeek technology. The official notice does not give detailed reasons, but reporting says national security concerns were cited. The ban does not apply to private companies or the public.

What the US Government Ordered

The US Department of Homeland Security (DHS) has ordered all federal civilian agencies to remove DeepSeek AI products from their information technology systems. The order also bans new purchases of any products or services from DeepSeek, a Chinese artificial intelligence developer, and its affiliates. This action extends to third-party products and services that use DeepSeek technology, though the order does not specify exactly what counts as a "DeepSeek implementation". Agencies are expected to check with suppliers to clarify if their products are affected [The Hacker News (opens in a new tab)][Security Affairs (opens in a new tab)].

Why Was DeepSeek Banned?

The official notice does not give detailed reasons for the ban. However, reporting on the order says DHS cited national security concerns. According to summaries, DHS warned that using DeepSeek’s AI models could risk transferring sensitive data to China and that the models might contain malware or other security weaknesses. The US government has not released technical details or public evidence to support these claims. China’s foreign ministry has publicly opposed the ban, calling it an overreach of national security concerns and promising to defend Chinese companies’ rights.

Who Is Affected?

The order applies only to US federal civilian agencies. It does not restrict private companies or the general public from using DeepSeek products. However, government contractors are also affected. If a federal contract includes the relevant clause (FAR 52.204-30), contractors cannot use or supply DeepSeek products or services unless they receive a waiver. Contractors must regularly check for new orders, review their supply chains, and report any affected products to their contracting officer within three business days if found.

What Agencies and Suppliers Must Do

Agencies must remove DeepSeek and related products from their systems. Suppliers must disclose if their products use DeepSeek models, where data is processed, and whether information leaves the customer’s environment. If an agency wants an exception, it must submit a written request with a strong justification. The order took effect when it was signed on July 24, 2026, but was only published in the Federal Register on October 20, 2026. This means agencies had to comply before the public could read the full explanation.

Previous Restrictions and Context

Before this order, some US government bodies had already banned DeepSeek on their devices, including Congress, NASA, the Navy, the Pentagon, and the state of Texas. Bills to make such bans nationwide were introduced but had not passed as of October 2026. The law used for this order, the Federal Acquisition Supply Chain Security Act of 2018, allows certain officials to exclude or remove technology products from government systems if they are seen as a risk. The law was first used in 2025 to ban a different company from intelligence community systems.

What Happens Next

The DHS must review the order at least once a year. Agencies and contractors will need to keep checking their systems and supply chains for DeepSeek technology. The public version of the order does not explain how agencies should identify all affected products, so suppliers and IT teams will need to ask questions and document their findings. There is no deadline for public release of such orders, but the law requires notifying the affected company and Congress.

Practical Advice for Readers

If you work in or with US federal agencies, check your systems and supply chain for DeepSeek products or technology. Ask suppliers about the AI models in their products. Contractors should follow the reporting and compliance steps in their contracts. For everyone else, the ban does not affect private use, but it highlights the growing scrutiny of foreign AI technology in sensitive environments.

Claimed vs confirmed

  • Unconfirmed

    DHS cited national security concerns, including risk of data transfer to China and possible malware in DeepSeek models.

    Reported by Security Affairs and South China Morning Post, but not detailed in the public order.

  • Confirmed

    The order applies to all federal civilian agencies and their contractors, but not to private companies or the public.

    Stated in both The Hacker News and Security Affairs reports.

Why it matters

This order affects how US federal agencies use AI technology and may disrupt suppliers who rely on DeepSeek models. It shows the government's concern about foreign AI software and the risk of sensitive data leaving the country. The move could lead to more scrutiny of AI supply chains and affect international tech companies' access to the US government market.

How does it work?

The order targets AI models and software developed by DeepSeek, including those embedded in third-party products. The concern is that these models could transfer sensitive data to China or contain hidden security risks such as malware. Agencies and suppliers must check if their systems or products use DeepSeek technology and remove or replace them if so.

Key points

  1. US federal agencies must remove DeepSeek AI products and stop buying them.
  2. The ban covers third-party tools built with DeepSeek technology.
  3. The order cites national security concerns but gives no technical details.
  4. Contractors must check supply chains and report any affected products.
  5. Private companies and the public are not affected by the ban.

Sources

  1. The Hacker News

    Reference

  2. Security Affairs

    Reference

The day's cyber news in 5 minutes.

Cyberend Daily is one short email with the stories that matter, written so anyone can follow.

Free beginner roadmap PDF when you join · No spam · Unsubscribe anytime