US orders federal civilian agencies to remove DeepSeek, including third-party tools built on it

The Department of Homeland Security has directed federal civilian agencies to strip DeepSeek technology from their systems. Earlier restrictions targeted the consumer app; this order reaches into the supply chain. Any third-party product that uses DeepSeek models also falls under it. DHS cites data-transfer and cybersecurity risks.

In practice, the third-party clause is the hard part. DeepSeek's MIT-licensed weights have been widely fine-tuned and embedded in commercial tools, often without obvious labeling. Agencies, and the vendors selling to them, now have to audit which products route through DeepSeek models or derivatives. That is a nontrivial software-bill-of-materials exercise for AI components.

The order lands in the same week DeepSeek shipped V4.1-Flash-1017 under an MIT license, opened its Search API to the public, and open-sourced its DeepInfer serving stack. DeepSeek is moving to become infrastructure that others build on, just as Washington is ruling out that kind of infrastructure for government use.

Community reaction on r/DeepSeek (405 upvotes) focused on how far the order reaches into derived tools and on whether it foreshadows broader restrictions on Chinese open-weight models in regulated industries. Watch for implementation guidance on detecting fine-tuned derivatives and for whether state governments or federal contractors adopt similar rules. The order applies to civilian agencies; defense systems were already subject to separate restrictions.