DeepSeek deep-sixed at all US federal civilian agencies

The US Department of Homeland Security (DHS) has issued an order prohibiting federal civilian agencies from utilizing technology products from Chinese AI lab DeepSeek, as well as removing any existing implementations. The order encompasses all DeepSeek and DeepSeek-affiliate products, along with third-party products and services developed using DeepSeek's technology.

Compliance may prove challenging as it remains unclear which third-party products and services have been developed using DeepSeek's technology. Furthermore, the order is ambiguous regarding whether "developed using" implies ongoing access to DeepSeek models via API or refers to any app developed with the aid of DeepSeek. This ambiguity also raises questions about AI gateways, such as OpenRouter and Vercel AI Gateway, which provide DeepSeek's models through APIs.

Some federal agencies, including the Defense Information Systems Agency (DISA), the US Navy, NASA, and the US House of Representatives, have already restricted access to DeepSeek on their IT networks. Concerns surrounding DeepSeek's iOS mobile app arose shortly after its release in early 2025 due to potential plaintext information leaks, links to servers run by Chinese tech firms, and the lack of SSL pinning.

However, these issues are primarily associated with mobile security problems common to many apps, especially those integrating third-party advertising SDKs from outside US-based companies. Despite these concerns, Katie Moussouris, founder and CEO of Luta Security, argues that the order extends beyond necessary national security measures, particularly in banning third-party products and services developed using DeepSeek technologies.

The order's lack of clarity regarding "developed using" and the potential implications for software developed with DeepSeek tools pose practical verification challenges.