Does the DHS DeepSeek order cover products built on DeepSeek models?

According to Mad Robot's reading of the DHS order, it also covers "third-party products and services developed using DeepSeek implementations." The order does not list which products that means, and it does not address DeepSeek open-weight models running on servers of U.S. companies. Vendors selling to civilian agencies will likely need to check their stacks.

Which agencies does the DeepSeek ban apply to?

The DHS DeepSeek order applies to federal civilian executive branch agencies. National security systems and secure compartmented information systems are excluded, because they fall under the Pentagon and the Director of National Intelligence. The order covers both future purchases of DeepSeek products and any versions already running on agency systems.

Why did DHS ban DeepSeek from federal systems?

DHS Secretary Markwayne Mullin says DeepSeek's models present "multiple threat vectors" to civilian agency IT systems. The order cites Chinese laws that give the government access to private company infrastructure, data collection at sign-up, and the risk that prompts and responses reach China. It also cites security flaws found in DeepSeek's iPhone app.

Can an agency get an exception to the DeepSeek order?

Yes. An agency can ask in writing for an exception to the DHS DeepSeek order, with a compelling justification such as being unable to perform a mission-critical function, plus any alternative safeguards. CISA reviews each request and approves or denies it in writing, and can help agencies that lack the skills to comply.

U.S. Department of Homeland Security · 2026-10-19 · major

DHS bans DeepSeek from federal civilian agencies — remove it from IT systems

DHS ordered U.S. federal civilian agencies to stop buying DeepSeek products and remove existing ones from their IT systems. The order uses the 2018 supply chain security law and was filed with the Federal Register on October 19.

U.S. civilian agencies must stop buying DeepSeek products and pull existing ones from their networks.

Quick facts

Issued by	U.S. Department of Homeland Security
Legal basis	Federal Acquisition Supply Chain Security Act of 2018
Covers	Hangzhou DeepSeek IT products and services
Who must comply	Federal civilian executive agencies
Federal Register	Document 2026-21447, filed October 19
Exceptions	Written request; CISA decides

What is it?

The Department of Homeland Security issued an exclusion and removal order against Hangzhou DeepSeek Artificial Intelligence under the Federal Acquisition Supply Chain Security Act of 2018. Federal civilian agencies may no longer buy DeepSeek IT products or services and must remove versions already in place. The notice was filed with the Federal Register on October 19, 2026.

How does it work?

The 2018 law lets DHS, after a review by the Federal Acquisition Security Council, exclude risky vendors from federal buying and order their products removed. Until removal is done, agencies are told to watch network traffic, increase logging and guard against data leaving their systems. Exceptions need a written request with a compelling justification, such as a mission-critical need, and CISA decides them.

Why does it matter?

Secretary Markwayne Mullin says DeepSeek's prompt-and-response process "may result in the transfer of sensitive data" to the Chinese government. Agency IT teams now have to find and remove DeepSeek apps and services, and vendors selling to civilian agencies have to check whether their products are built on DeepSeek. National security systems are outside this order.

Who is it for?

federal IT teams, government contractors, AI vendors

Frequently asked questions

Does the DHS DeepSeek order cover products built on DeepSeek models?: According to Mad Robot's reading of the DHS order, it also covers "third-party products and services developed using DeepSeek implementations." The order does not list which products that means, and it does not address DeepSeek open-weight models running on servers of U.S. companies. Vendors selling to civilian agencies will likely need to check their stacks.
Which agencies does the DeepSeek ban apply to?: The DHS DeepSeek order applies to federal civilian executive branch agencies. National security systems and secure compartmented information systems are excluded, because they fall under the Pentagon and the Director of National Intelligence. The order covers both future purchases of DeepSeek products and any versions already running on agency systems.
Why did DHS ban DeepSeek from federal systems?: DHS Secretary Markwayne Mullin says DeepSeek's models present "multiple threat vectors" to civilian agency IT systems. The order cites Chinese laws that give the government access to private company infrastructure, data collection at sign-up, and the risk that prompts and responses reach China. It also cites security flaws found in DeepSeek's iPhone app.
Can an agency get an exception to the DeepSeek order?: Yes. An agency can ask in writing for an exception to the DHS DeepSeek order, with a compelling justification such as being unable to perform a mission-critical function, plus any alternative safeguards. CISA reviews each request and approves or denies it in writing, and can help agencies that lack the skills to comply.