DeepSeek Ban Hits US Federal Civilian Agencies

The US Department of Homeland Security ordered federal civilian agencies on October 20, 2026 to remove DeepSeek products from their IT systems and to stop procuring new ones. The order reaches past DeepSeek itself to affiliated companies and to third-party products built with its technology.

Two directions at once

The directive hits both installed systems and future purchases. Agencies have to tear out what is already running and cannot buy replacements from the same source.

Military and intelligence systems sit outside it — not because they are cleared to run DeepSeek, but because DHS cannot direct them. Those systems were already addressed by a law passed in December 2025, whose formal title none of the reports name.

Agencies may request exceptions. What the order does not supply is a date by which the cleanup has to be finished.

The rationale, and the gap in it

Speaking to reporters, DHS said DeepSeek's models present multiple threat vectors and that use by government employees or vendors may result in the transfer of sensitive data to China, given where the servers sit and how broadly Chinese authorities can reach into private infrastructure.

The published notice is thinner than the briefing. The Decoder notes it names no specific security incident and does not lay out the reasoning. The authority invoked is a 2018 supply-chain security law governing federal procurement, and the text is on file as Federal Register document 2026-21447.

What counts as "built with"

That phrase is where compliance gets hard. Nobody has defined how far it extends — whether AI gateways such as OpenRouter, which route requests across many vendors' models, are inside the ban or outside it.

The problem is not theoretical for procurement teams. A vendor application quietly fine-tuned on DeepSeek weights rarely advertises the fact, and the order gives no test for spotting one.

Beijing responds

Chinese foreign ministry spokesperson Mao Ning pushed back, saying her government opposes stretching the concept of national security and politicizing technology and trade, and will defend the interests of Chinese firms.

The timing cuts across a thaw. Washington and Beijing agreed an AI communication channel in September 2026, and the two countries' leaders meet in Shenzhen in November 2026. DeepSeek shipped its V4 model in April 2026.

Still unconfirmed

Three things the available reporting does not settle: when compliance is due, what the December 2025 law is formally called, and what DeepSeek makes of the order — AFP says it asked the company and got no reply.