DHS mandates removal of DeepSeek products from civilian federal IT networks due to data security concerns.
Key points
- DHS orders removal of DeepSeek tech from federal civilian agencies.
- Ban covers third-party tools built on DeepSeek models.
- Cites risk of data sharing with Chinese government.
The US Department of Homeland Security has ordered all federal civilian agencies to remove DeepSeek artificial intelligence technology from their IT systems. This directive also prohibits future procurement of DeepSeek products and services, effectively banning the company from federal contracts.
What happened
The Department of Homeland Security issued an order requiring federal civilian agencies to remove DeepSeek products from their IT systems and stop purchasing them. According to The Next Web, this action was taken under a 2018 supply chain security law that allows the government to exclude risky suppliers. The order applies to civilian agencies and includes third-party tools built on DeepSeek’s AI models.
The directive, dated July 24, was signed by Homeland Security Secretary Markwayne Mullin, Bloomberg reported. The government stated that DeepSeek collects significant user data that could be shared with the Chinese government under Chinese security laws. Reuters reported that the department also cited multiple threat vectors, noting the models may hide malware or security flaws.
Some agencies had already restricted these tools prior to this order. A Pentagon IT agency blocked the DeepSeek chatbot in January 2025, while the Commerce Department and the Navy banned it on work devices. New York, Tennessee, and Virginia have also taken similar steps at the state level.
Why it matters
Government agencies rely on strict supply chain controls to protect sensitive information from foreign adversaries. When software vendors operate under foreign jurisdictions, local laws may compel them to hand over user data to their own governments. This creates a risk where classified or private information could be accessed by hostile actors without the user’s knowledge.
Teams usually assess vendor risk by examining where data is stored and who has legal access to it. They check whether third-party tools introduce hidden vulnerabilities or backdoors that could bypass existing security controls. Organizations must verify that their procurement processes align with national security guidelines to prevent unauthorized data exfiltration.
The fix
- Remove DeepSeek products from all federal civilian agency IT systems.
- Stop purchasing any new DeepSeek products or services.
- Eliminate third-party tools built on DeepSeek’s AI models.
- Bar DeepSeek from participating in future federal contracts.
Why it matters
Security teams must evaluate third-party software based on the legal jurisdiction of its developer. If a vendor is subject to foreign laws, user data may be accessible to foreign governments, creating a significant security risk. Organizations should regularly audit their software supply chains to ensure compliance with national security standards and prevent unauthorized data access.
Background: Supply chain attacks
Verify code signatures and hash values before installing any update. Monitor for unexpected outbound traffic or permission requests. If anomalies appear, isolate the system immediately and revert to a known good state. Treat third-party updates as untrusted until proven otherwise.
Read the full guide: Supply Chain Attack Warning Signs and Response Steps
What to do and how to stay safe: DeepSeek
- Review your organization’s use of AI tools from foreign vendors.
- Check if any third-party applications rely on DeepSeek models.
- Monitor official government notices for updates on banned technologies.
- Ensure procurement policies align with current supply chain security laws.
Step-by-step guide: What is password policies and how they protect systems
General security guidance from the Crypt Weekly newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Who issued the order to remove DeepSeek technology?
The US Department of Homeland Security issued the order to federal civilian agencies.
Does the ban apply to tools built on DeepSeek models?
Yes, the order covers third-party tools built on DeepSeek’s AI models.
Why did the government ban DeepSeek products?
The government cited risks that sensitive data could be shared with the Chinese government.
