DHS tells civilian agencies to remove DeepSeek software from federal systems
The Department of Homeland Security has ordered federal civilian agencies under its authority to stop procuring and using DeepSeek products, including affiliate and derivative offerings. Agencies must remove covered tools or request an exception within 60 days, with CISA reviewing requests. DHS cited concerns about Chinese government access to data and security weaknesses in DeepSeek's iOS app; the order does not cover private or consumer use.
DHS's directive reaches not only DeepSeek's own tools but also offerings from related companies and services built on its technology. Agencies must drop covered products from purchasing channels and government systems, or seek a written exception within 60 days; CISA will assess those requests.
DeepSeek produces large language models, a chatbot, API offerings, and tools for coding and reasoning. Its rapid uptake was followed by security-risk reports. A February 2025 NowSecure assessment of the iOS app flagged unprotected data movement, fragile encryption, unsafe on-device storage, user fingerprinting, and information sharing with ByteDance.
The order could mainly affect federal civilian agencies under DHS authority, along with vendors whose products rely on DeepSeek technology. Staff may see AI tools removed or restricted while agencies assess alternatives and submit exception requests, potentially disrupting workflows and adding review burdens. Private and consumer users are not covered, though the cited security findings may prompt some organizations to reassess similar tools. The broader effect may be greater caution around AI services linked to foreign infrastructure.