What the US order requires
The United States Department of Homeland Security has ordered federal civilian agencies to stop purchasing DeepSeek products and remove the technology from government computer systems. The measure also covers third-party services developed using DeepSeek and allows exceptions to be requested, according to reporting by TechCrunch and the Associated Press.
The order, dated late July but made public later, applies to the federal civilian government. It is not a nationwide ban for every company or citizen, nor is it proof that every version of the model has handled data improperly. Its practical scope depends on how agencies identify products, components and services that incorporate the technology.
The rationale concerns data and infrastructure
The US government’s communication describes DeepSeek as a set of possible threats, citing the fact that the company’s servers are located in China and the risk that company or government data could become accessible to Chinese authorities. These are the reasons stated by the administration. An independent technical assessment would require details on the systems, data flows and specific vulnerabilities, which the public measure does not provide in full.
The case shows why public procurement also considers where data are processed, who controls the infrastructure and which parties can access it. A model can be used through a cloud service, embedded in a commercial product or run locally. Risks and controls change depending on the mode, so verification must follow the entire supply chain.
From the model name to the dependency map
The provision on third-party products makes compliance more complex: an application might use a model without exposing its name to the user. Agencies must therefore inventory tools, contracts and software components, request information from suppliers and establish a procedure for replacing non-permitted services. The same need applies to other AI systems, even when they are not subject to a ban.
The measure sits within the broader technological competition between the United States and China, which includes limits on exports of chips and machinery and mutual accusations over model development practices. Data security is a legitimately central rationale for public entities, but transparency about the technical basis of decisions helps distinguish targeted measures from political statements.
For now, the verifiable consequence is operational: the agencies concerned must remove the products and block new purchases, unless authorized exemptions apply. The effect on private companies and ordinary users is different and must not be confused with the scope of the order.
