US Orders Federal Agencies to Remove DeepSeek From Their Systems, Including Tools Built on It
Homeland Security has used a supply-chain security law for the first time against an AI company, barring civilian agencies from buying or running DeepSeek and anything built on it.
Outspoken Digest Technology Desk
Thursday, October 22, 2026/2 min read

Civilian agencies of the US government have been told to stop using DeepSeek. The Department of Homeland Security (DHS) has ordered them to remove the Chinese lab's products from their IT systems and to stop buying them, according to TechCrunch, which cites a notice in the Federal Register dated 20 October.
The order does not stop at DeepSeek's own app and models. It reaches any third-party product or service built with DeepSeek technology, which is where most agencies would actually meet it.
What does the DeepSeek order cover?
The notice applies to federal civilian executive agencies, covering both new purchases and systems already in place. Agencies can ask for exceptions, TechCrunch reports. OfficeChai says it is reportedly the first time the Federal Acquisition Supply Chain Security Act of 2018 has been used against an AI company.
It does not touch American companies or private users. DeepSeek's models remain freely downloadable in the US for anyone outside the federal government, OfficeChai notes.
Why is DHS removing DeepSeek?
DHS pointed to what it called multiple threat vectors. It said use of DeepSeek by government employees or contractors may result in sensitive data being passed to China, and that the models' outputs could yield actionable intelligence on US persons or agencies. It also flagged that the models themselves might contain malware or other security flaws, OfficeChai reports.
TechCrunch adds that the stated concern is that data from US government users could be reachable by Chinese authorities under Chinese law. A July memo, released alongside the notice, had already told agencies to watch data moving in and out of government websites for DeepSeek-related risk.
How did we get here?
The order is the latest step in a longer run of restrictions. The Commerce Department and the Navy had already banned DeepSeek on staff devices, and New York, Virginia and Tennessee restricted it on state government hardware, according to OfficeChai. A law passed in December 2025 limited its use in intelligence national security systems, TechCrunch says.
In September, TechCrunch notes, a CISA advisory accused DeepSeek and five other Chinese AI firms, including Alibaba and Moonshot AI, of large-scale distillation, meaning the extraction of capabilities from US models. OpenAI and Anthropic have both said they saw suspected attempts by DeepSeek to collect their models' outputs.
How has China responded?
Foreign Ministry spokesperson Mao Ning said on Tuesday that Beijing opposes stretching the idea of national security and politicising technology and trade, and that China would defend its companies' legitimate rights, TechCrunch reports. Bloomberg reported on 16 October that Beijing is weighing export controls on 23 AI-related technologies, including chip designs and some advanced models.
The practical test now falls on federal IT and procurement teams. They must find every product with DeepSeek inside it, including software that quietly calls its models, and replace it, while the exceptions process shows how strict the order will be in practice.
Published in The Outspoken Digest
Editorial desk
Outspoken Digest Technology DeskSoftware, hardware, artificial intelligence and what they change for everyone else.
Newsletter
The Digest, in your inbox
One edition, sent when it is ready. No noise, and your address is never passed on.
Read Next
More Technology →
What PHP2Shell Reveals About Maintaining the Code Behind Most of the Web
Oct 22, 2026/3 min read

PHP2Shell for Hosts, Developers and Security Teams: Backports, WAF Rules and Incident Response
Oct 22, 2026/3 min read

PHP2Shell: What Website Owners and Small Businesses Should Do Right Now
Oct 22, 2026/3 min read

PHP2Shell Timeline: From a Quiet August Report to a Leak, Early Attacks and a Day-Early Patch
Oct 22, 2026/3 min read