U.S. orders DeepSeek removed from civilian federal systems, including third-party integrations

The story

The United States has ordered federal civilian agencies to remove DeepSeek products from government information systems and to stop buying technology developed by the Chinese artificial-intelligence company. The Department of Homeland Security notice, scheduled for publication in the Federal Register on October 20, also reaches DeepSeek affiliates and third-party products or services developed using DeepSeek implementations. That makes the action broader than a ban on installing a single chatbot application.

The signed order was issued on July 31 and became public with the Federal Register notice. It applies to federal civilian executive branch agencies under the government’s software-supply-chain security framework. The public text does not disclose the removal timetable; DHS says those operational details are confidential. Agencies therefore have a binding direction, but outsiders cannot assess from the published document how quickly every deployment must be identified and retired.

DHS grounded the action in the Federal Acquisition Supply Chain Security Act of 2018 after reviewing a recommendation from the Federal Acquisition Security Council. The order says DeepSeek technology presents several potential risk paths. Among them are the possibility that sensitive federal data could become accessible in China, that interactions could reveal useful intelligence about U.S. personnel or agencies, and that models or related software could contain exploitable vulnerabilities or malicious code. These are the government’s risk findings, not a public determination that every DeepSeek deployment has been compromised.

The government also linked its decision to China’s legal and political environment. The order says DeepSeek stores user data on servers in China and argues that authorities there may be able to compel access to corporate infrastructure and data. It further cites concerns about model training practices and a September cybersecurity advisory from U.S. and partner agencies. DeepSeek has previously drawn restrictions from individual federal departments and several states, but the new order converts a patchwork of controls into a civilian-government-wide supply-chain action.

The technical reach is unusually important. A procurement officer may never encounter a product carrying the DeepSeek name even though an underlying service uses one of its models for summarization, coding, search or customer support. By expressly covering third-party technology developed with DeepSeek implementations, DHS shifts the burden toward software composition and vendor transparency. Agencies will need inventories that identify embedded models, not merely installed applications or network endpoints.

That requirement can extend beyond systems operated directly by the government. The order says contractor systems are covered when they become federal information systems under applicable acquisition rules. It also directs agencies to strengthen monitoring of network traffic into and out of government websites. In practical terms, compliance may involve contract attestations, architecture reviews, traffic analysis and replacement planning—not just deleting an app from employee devices.

There are limited escape valves. The order permits narrowly tailored exceptions when agency officials conclude that a temporary waiver is necessary, including for controlled research into security risks. Any exception must identify the affected product, explain why the mission need outweighs the risk and specify mitigating controls. The document separately says employees may use personal devices and non-federal systems on their own time, while warning them about the same risks and prohibiting the transfer of non-public government information.

Independent reporting from Reuters confirmed the removal and procurement restrictions when the notice appeared. The Associated Press reported on October 20 that China’s foreign ministry rejected what it described as an overextension of national-security controls and said Beijing would protect the rights of Chinese companies. DeepSeek did not immediately respond to AP’s request for comment. The disagreement places a federal cybersecurity measure inside the wider U.S.-China contest over AI models, chips, data and market access.

INNOVOX analysis: the order’s lasting significance may be less about one developer than about a new procurement test for generative AI. Traditional software inventories track packages, versions and vendors. Foundation models can be accessed through an API, bundled inside another platform or changed without a visible interface update. A defensible control regime therefore needs a model bill of materials: who developed the model, which version is running, where prompts and outputs travel, what data was used to adapt it and which subcontractors can alter the stack.

What to watch next is implementation. Agencies must discover where DeepSeek is present, while suppliers may need to disclose dependencies or replace them to remain eligible for federal business. Exception requests will show which research or operational uses are difficult to unwind. Outside Washington, the most consequential signal will be whether allied governments, critical-infrastructure operators and heavily regulated companies copy the model-specific approach—or instead adopt technology-neutral controls based on data flows, testing and measurable security properties.

INNOVOX analysis

The consequential part is the treatment of model provenance as a software-supply-chain control. Agencies and contractors can no longer treat an embedded foundation model as an invisible implementation detail; they must know which models sit inside acquired services, where those systems communicate and what data can reach them.

What to watch

Watch for agency inventories, vendor disclosures, exception requests and contract changes, along with any Chinese countermeasures. The decisive question is whether other governments and regulated industries adopt similarly model-specific procurement rules.