DeepSeek Federal Ban: DHS Orders Agencies to Drop It

The DeepSeek federal ban is official: the Department of Homeland Security has ordered every federal civilian agency to stop using products from the Chinese AI lab and to rip out what is already installed. The order was made public on Monday, according to CNBC, although it was first issued back in July.

What the order actually says

The notice is broad. It excludes products from Hangzhou DeepSeek Artificial Intelligence and its affiliates from federal civilian purchasing, and it requires removal of "third-party products and services developed using DeepSeek implementations," according to The Register. In plain terms, it is not only the chatbot that is banned.

Agencies can ask for an exception. According to BleepingComputer, requests must come within sixty days of the order and explain the justification and the plan to reduce risk, and the cybersecurity agency CISA will approve or deny them in writing.

Why Washington says it is worried

DHS said DeepSeek's models pose "multiple threat vectors." The department raised concerns that using the product "may result in the transfer of sensitive data to the PRC if used by US government employees or vendors," according to BusinessLine.

The notice also warned that government use could produce actionable intelligence on US persons or agencies, and that the models themselves may contain malware or other security holes. In the July memo, DHS also told agencies to watch traffic flowing in and out of government websites.

Who is covered and who is not

The order covers civilian agencies under DHS authority, so think Treasury, State and Justice. The Defense Department is outside its scope, and it is not a general ban on private or consumer use, according to BleepingComputer. Anyone can still download the app on a personal phone, at least for now.

The messy part: what does "built using" mean?

Here is where it gets complicated. The order does not define what counts as a product developed using DeepSeek, and The Register noted that complying will be tricky because it is not clear which vendors rely on its models. One security expert quoted there said banning the app and API is workable, but the third-party clause is the real problem.

Another open question is whether AI gateways such as OpenRouter fall under the ban, according to The Decoder. That outlet also noted the notice does not set a deadline for removal or name the specific security concerns behind the decision.

Why this matters for the AI race

DeepSeek shook the industry when its cheap, powerful models appeared, and open model weights meant lots of companies built on top of them. That is exactly why a rule reaching into third-party software could ripple far beyond one app. Software vendors who sell to the government will now have to check what is under their own hood.

The move also fits a bigger pattern of tech tension between Washington and Beijing, from chips to apps. If you follow the AI scene, expect more questions about which models are trusted for sensitive work. For more, browse our tech coverage.

What happens next

Agencies now face a scramble. IT teams must inventory their software, ask vendors what models power their tools, and decide whether to request an exception before the sixty day window closes. That is a lot of paperwork for departments that already juggle tight budgets and aging systems.

Vendors have a stake too. Companies selling analytics, translation or coding tools to government customers may need to prove their products do not rely on DeepSeek, or swap in another model quickly. Lawyers and compliance staff will probably be busy, and some firms may simply drop the model to avoid trouble.

For regular users, the practical effect is small today, but it sends a signal. Governments are starting to treat AI models the way they treat telecom hardware, as part of the supply chain that can be trusted or blocked. Expect that debate to keep growing as more countries write their own rules.

The DeepSeek federal ban is simple on paper and fuzzy in practice. Over the next two months, the exception requests and vendor responses will show how far the order really reaches.