The Department of Homeland Security has ordered every federal civilian agency to pull DeepSeek out of its IT systems and to stop buying anything that contains it. Reuters reported on Monday, October 19, 2026 that DHS is "ordering the removal of DeepSeek products and third-party services using the Chinese AI model from US civilian agency IT systems, according to a notice published Monday." Bloomberg carried the same story under the headline that the US is moving to bar DeepSeek from federal agencies and contracts.
It goes beyond earlier bans on devices and apps. It reaches the supply chain: products built on DeepSeek models are covered too. That matters because DeepSeek ships open weights, and a lot of software quietly runs on them. This post covers what the notice says, what is still unclear, and what builders who sell to the government should check.
Update (October 20, 2026): China pushes back
China's Ministry of Commerce responded late on Tuesday, October 20. According to BNN Bloomberg, it expressed "strong dissatisfaction and firm opposition," said the US had ignored the consensus between Xi and Trump, and vowed to take necessary measures to defend its interests. Earlier that day, Foreign Ministry spokesperson Mao Ning said China "will resolutely safeguard the legitimate rights and interests of Chinese companies" and opposes "overstretching" the concept of national security.
The same report adds two details. The DHS order itself dates to late July and was made public in Monday's Federal Register notice. The notice's stated concerns include DeepSeek's servers being in China and Chinese authorities potentially reaching sensitive US data. Some headlines call the Chinese complaint a violation of a "state agreement"; the reporting describes a leader-level consensus, not a formal treaty. Nothing in the order itself has changed.
Update (October 21, 2026): Beijing's own AI walls, and a possible retaliation path
The Decoder's analysis, which cites the New York Times, argues that China's protest is on shaky ground because Beijing itself keeps ChatGPT, Claude and Gemini out of its market. It notes that since 2023 the Cyberspace Administration has had to review AI services, which must comply with political guidelines, and that state bodies and state-owned companies are supposed to replace foreign software and hardware gradually. The Decoder reads the protest mainly as a political signal that could lay the groundwork for later retaliation, and says the US concern has a concrete basis in China's 2017 National Intelligence Law, which obliges companies and citizens to support intelligence work.
The same piece, citing the NYT, says Beijing proposed its own export and licensing controls for AI technologies last week, similar to the American approach. This is reported analysis, not a new official action: we have not seen the Chinese proposal's text, and neither government has changed its position since the order was published.
Update (October 22, 2026): DeepSeek reportedly raises about $15 billion
TechCrunch reports, citing Bloomberg, that DeepSeek has raised about 100 billion yuan, roughly $15 billion, two days after the US order, in one of China's largest funding rounds. Potential investors named in the report include battery maker CATL and Tencent. DeepSeek did not immediately respond to TechCrunch's request for comment, so the round is reported, not confirmed by the company.
TechCrunch places it after a June round of more than $7 billion at a $50 billion valuation, and a reported July effort to raise another $1.5 billion at about $71 billion, with a possible China IPO as early as next year. The report says DeepSeek is stepping up spending on AI infrastructure and open models for domestic and international markets despite US restrictions. It also notes founder Liang Wenfeng reportedly holds about 81.6% of the Chinese operating entity, per WireScreen ownership data. The practical read: the federal-agency ban removes one customer group, not DeepSeek's funding or model pipeline.
Quick facts
| Question | Answer |
|---|---|
| Who issued it? | The US Department of Homeland Security, via a notice published October 19, 2026 |
| Who must comply? | Federal civilian executive agencies (not described as covering defense or intelligence systems) |
| What is required? | Remove DeepSeek products and third-party services using DeepSeek from agency IT systems |
| What is banned going forward? | Acquisition of DeepSeek products and of third-party services developed using DeepSeek |
| Stated reasons | "Multiple threat vectors", possible data transfer to the PRC, possible intelligence on US persons and agencies, possible malware in the models |
| Earlier steps | A July memo, made public Monday, told agencies to monitor traffic in and out of government websites for DeepSeek risks |
| Deadline | Reportedly none specified for completing removal; exception requests due in writing within 60 days |
What exactly did DHS say?
The reporting quotes DHS directly on the rationale. The department said DeepSeek models pose "multiple threat vectors" and that use of the product "may result in the transfer of sensitive data to the PRC if used by US government employees or vendors." Some coverage also attributes to DHS the view that agency use could yield intelligence on US persons or agencies. The Reuters text we could read says the models "may contain malware or other security vulnerabilities."
Those are four distinct claims, and they are worth separating:
- Data flow to China. This is the best-understood risk. When an employee uses DeepSeek's hosted app or API, prompts go to servers the company operates. That is a data-handling risk shared with any hosted AI service, sharpened by Chinese law and by US concerns about government access.
- Intelligence value. Aggregated queries from government workers can reveal what agencies are working on. This is a counterintelligence argument rather than a software bug.
- Malware in the models. This is the least documented claim. Open weights are tensors, not executables, though the code and loaders around them can carry risk, as with any download. The reporting does not include technical evidence for this claim, so treat it as a DHS assertion until the notice text or a follow-up shows specifics.
- Vulnerabilities. Safety and jailbreak weaknesses in DeepSeek models have been documented by outside researchers in the past; whether DHS means those or something else is not clear from the coverage.
Why the "third-party products" clause is the real story
Earlier US action was mostly about the DeepSeek app on government phones and laptops. The Reuters report notes that the Department of Commerce and the Navy had banned DeepSeek on government devices, and that states including New York, Tennessee and Virginia had taken similar steps.
This order is different in kind. A procurement ban on "third-party services developed using DeepSeek" means a vendor can no longer sell a product to a civilian agency if it is built on a DeepSeek model, even if the agency never touches deepseek.com. For a developer, that raises questions the old device bans never did:
- Does my product call the DeepSeek API, or run DeepSeek weights locally, or use a model distilled from one?
- Does a library or hosted gateway I depend on route some traffic to DeepSeek by default?
- If I fine-tuned an open DeepSeek checkpoint, is my model "developed using DeepSeek"?
The coverage does not define the boundary, and that last question is the hard one. A fine-tune of an open checkpoint plausibly counts. A model that merely learned from DeepSeek-generated text is a murkier case. Vendors should ask their agency customers and contracting officers rather than guess.
How this fits the bigger picture
DeepSeek has spent 2026 going from a curiosity to infrastructure. It released V4.1 Flash with MIT-licensed open weights only days before this order, and tools from desktop agents to coding harnesses have added it as an option, including DeepSeek's own desktop harness and OpenCode's free tier. Gateway data also shows open models carrying a large share of token volume. When a model is that widely embedded, a ban that follows the supply chain is bound to touch products that never advertise their base model.
The politics have been building too. Washington has accused Chinese labs of extracting capability from US models, a charge Beijing rejects; see our coverage of the model-theft accusation and China's countermeasures and of Chinese labs secretly serving Claude. Researchers have also audited Chinese open models for built-in censorship, as in the Hirundo audit of Qwen. And US-built open-weight alternatives are arriving, such as Reflection's open-weight model, pitched as a US answer to DeepSeek and Qwen, which gives agencies and vendors a replacement path that did not exist a year ago.
On the other side, Chinese labs are not standing still on safety transparency. Our write-up of the SemiAnalysis count of 857 Chinese releases and their safety disclosures shows how thin published safety documentation is across many of them, which is one reason procurement officers are cautious.
What is confirmed, and what is not
Confirmed by multiple outlets: a DHS notice dated Monday, October 19, 2026 orders removal of DeepSeek products and services built on DeepSeek from civilian agency systems and bars acquiring them. DHS's quoted language about threat vectors and data transfer is in the Reuters report.
Reported but worth verifying against the notice text: the legal basis, the Federal Register publication date, the 60-day exception window, and the absence of a removal deadline. We could not read the notice itself at the time of writing; coverage says it is scheduled for the Federal Register on October 20. Read it at the Federal Register before you act on any of these details.
Not shown in the coverage we found:
- Any technical evidence for the claim that the models contain malware.
- A definition of "developed using DeepSeek."
- How agencies will find DeepSeek inside software they already run.
- Whether DeepSeek has responded. We found no statement from the company in the reporting we reviewed.
The Wall Street Journal, via Techmeme's summary, reported the same order. The WSJ article is paywalled, so we relied on Reuters and Bloomberg for attribution.
What should developers and vendors do?
If you sell to US civilian agencies, or plan to, here is a practical checklist:
- Inventory your model dependencies. List every model your product calls or ships, including defaults inside frameworks, gateways and agents. A software bill of materials that names the model, not just the library, is now a sales asset.
- Check your gateway routing. If you use a router such as an AI gateway, confirm that fallback or "cheapest provider" settings cannot silently send government traffic to a DeepSeek endpoint.
- Separate government and commercial builds. Keep a build or tenant for federal customers with an allow-list of models.
- Ask your contracting officer. Ask whether fine-tuned or distilled derivatives are in scope. Get the answer in writing.
- Prepare a swap. Test an alternative open-weight or hosted model on your own evaluation set so you can replace DeepSeek without a rewrite. Our look at a proxy that routes Claude Code through dozens of providers explains the data and terms-of-service risks of routing through third-party providers, which apply here.
- Do not assume local equals safe. Running open weights on your own hardware removes the hosted-data-flow concern, but the order, as reported, covers products developed using DeepSeek, not only its cloud.
Security teams evaluating any AI agent or model in a sensitive environment may also want runtime controls on what agents can do; AgentBeam, the agent security platform from the explainx.ai team, is built to stop AI agents before they take dangerous actions.
What this means for people who just use DeepSeek
Nothing changes for private individuals or companies without federal contracts. The order governs federal civilian agencies and what they buy. If you use DeepSeek at work, the same sensible data rules apply as for any hosted model: do not paste secrets, customer data or source code you cannot afford to lose, and prefer local weights or a trusted host for sensitive material. Provider reliability is its own question; DeepSeek's recent five-hour API outage and credit refund is a reminder to design for failover anyway.
What to watch next
- The Federal Register text. It should confirm the legal authority, the definitions, and the exception process.
- Agency guidance. Expect memos on how to find and remove affected software, and on timelines.
- Vendor responses. Cloud and software vendors that host DeepSeek models may publish statements on whether they are affected.
- DeepSeek and Beijing. A response from the company or Chinese officials, as in earlier disputes, is likely.
- Copycat action. States and allied governments have restricted DeepSeek before; a federal procurement bar may prompt more of the same.
Details here reflect reporting available on October 19, 2026 and may change once the full notice is published. We will update this post when the notice text is available.