The federal government just told DeepSeek to get off its computers. The Department of Homeland Security is ordering the removal of DeepSeek products (and any third-party services built on the Chinese AI model) from US civilian agency IT systems, according to a notice published Monday, Oct. 19.

It’s also banning future purchases. Civilian agencies can’t buy DeepSeek products or acquire third-party tools developed using DeepSeek going forward. DHS’s reasoning was blunt: the models pose “multiple threat vectors,” and their use “may result in the transfer of sensitive data to the PRC if used by US government employees or vendors.”

That’s the sharpest language Washington has used against a foreign AI model yet. And it landed alongside a second warning in a July memo that DHS made public Monday: federal agencies were told to watch the traffic flowing in and out of government websites, specifically to address potential risks from DeepSeek.

What DHS actually said about DeepSeek

Read the notice closely and two claims stand out. First, the data concern. DHS said use of DeepSeek by government agencies “could produce actionable intelligence on US persons and/or government agencies.” That’s not about a chatbot giving bad answers. It’s about the fear that queries, documents, and usage patterns fed into a Chinese-built model could be useful to Beijing, even if nobody exfiltrates anything on purpose.

Second, the integrity concern. “The models themselves may contain malware or other security vulnerabilities,” the department said. That’s a claim aimed at open-weight deployments in particular. DeepSeek’s models can be downloaded and run anywhere, which means a version installed on a government network is hard to audit and, in DHS’s view, hard to trust.

Both concerns feed the same argument: you can’t inspect your way out of the risk, so the product has to go. Civilian agencies are now expected to rip it out of their IT environments.

This didn’t come out of nowhere

DHS isn’t the first to reach for the delete key. The Commerce Department and the US Navy already banned DeepSeek on their devices. Multiple states, including New York, Tennessee, and Virginia, took similar steps earlier.

Zoom out and the pattern gets clearer. The Trump administration has been tightening the screws on Chinese tech for months. In December, the FCC banned imports of all new models of Chinese drones, and also blocked new models of Chinese-made consumer routers. Now the FCC is scheduled to vote on October 29 to bar all Chinese labs from testing electronic devices (smartphones, cameras, computers) for use in the US. DHS pointed out why that matters: last year, 82% of US electronics were tested in China.

The DeepSeek order fits into a larger strategy that treats Chinese tech as a supply-chain problem, not just a product problem. It isn’t only about what an app does. It’s about where the data can travel, who controls the weights, and which labs get to certify hardware.

The Chinese Embassy in Washington didn’t immediately comment on the DHS order.

Why this matters beyond government laptops

Here’s the part worth watching: the ban doesn’t stop at DeepSeek’s own app. By covering third-party services “developed using DeepSeek,” DHS is telling vendors that building on a Chinese model is now a liability for federal contracts. Any startup that quietly swapped its backend to a cheap open-weight DeepSeek model to cut inference costs just got a compliance headache.

That reach will ripple through the vendor ecosystem. Government contractors will audit their AI supply chains, and some will find DeepSeek dependencies they didn’t know about, tucked into code assistants, data pipelines, or vendor tools. Expect a wave of “we don’t use DeepSeek” attestations from federal IT vendors before Thanksgiving.

There’s also the irony angle. DeepSeek became famous by proving frontier-quality AI could be built cheaply, which is exactly why cash-strapped teams around the world adopted it. Washington isn’t disputing that the technology is good. It’s arguing the technology is too risky to touch, no matter the price.

The open question is whether the private sector follows. So far, corporate America hasn’t rushed to rip out DeepSeek integrations the way agencies are now being told to. But every escalation like this one, from state bans to Navy bans to a government-wide DHS order, narrows the window for any company doing business with the feds. The model that shocked Silicon Valley with its efficiency is finding out that being cheap and good isn’t enough. It also has to be trusted. Right now, Washington has decided it isn’t.

FAQ

Why did the US ban DeepSeek from government IT systems? The Department of Homeland Security said DeepSeek models pose “multiple threat vectors” and warned that their use “may result in the transfer of sensitive data to the PRC” if used by government employees or vendors. DHS also said the models “could produce actionable intelligence on US persons and/or government agencies” and “may contain malware or other security vulnerabilities.”

Does the DeepSeek ban apply to all federal agencies? The Oct. 19 order covers US civilian agency IT systems: removal of DeepSeek products plus a ban on buying them. Separately, the Commerce Department and the US Navy had already banned DeepSeek on their devices before this order landed.

Can US government contractors still use DeepSeek? Not if they want to sell to civilian agencies. The order bans acquisition of third-party services developed using DeepSeek, so vendors building on the model would be disqualified from those contracts.

Is DeepSeek banned in any US states? Yes. New York, Tennessee, and Virginia have taken steps to ban DeepSeek on state government devices, according to Reuters.

Sources: Reuters, The Straits Times