AI
“The US Department of Homeland Security issued Exclusion and Removal Order #2026-01, signed by Secretary Markwayne Mullin and dated July 24, 2026, requiring federal civilian executive branch agencies to remove DeepSeek products and services from their IT systems.”
Plain restatementDHS issued an order numbered 2026-01, under the signature of Secretary Markwayne Mullin, bearing a July 24, 2026 date, directing federal civilian executive branch agencies to remove DeepSeek products and services from their information technology systems.
This checks out. The US Department of Homeland Security did issue Exclusion and Removal Order 2026-01, which carries a release date of July 24, 2026 and the signature of Homeland Security Secretary Markwayne Mullin, who has held that office since March 24, 2026. The order tells federal civilian agencies to stop buying DeepSeek products and to remove DeepSeek products, plus third-party products built using DeepSeek, from their computer systems. It was filed with the Federal Register on October 19, 2026 and published on October 20, under docket DHS-2026-0628, and the signed order is attached to that filing. The order applies only to federal civilian agencies, not to private companies, and it does not cover national security or compartmented systems. One detail in the accompanying caption is off: the 60-day window for agencies to request an exception runs from when the order was issued in July, so it had already closed by the time the public could read the order in October. Open questions remain about how agencies are meant to identify third-party tools built on DeepSeek models, and no removal deadline appears in the notice.
[drifted from the evidence:] The US Department of Homeland Security issued [drifted from the evidence:] Exclusion and Removal Order #2026-01, [drifted from the evidence:] signed by Secretary Markwayne Mullin [drifted from the evidence:] and dated July 24, 2026, [drifted from the evidence:] requiring federal civilian executive branch agencies to remove DeepSeek products and services from their [drifted from the evidence:] IT systems.
[added by the neutral restatement:] DHS issued [added by the neutral restatement:] an order [added by the neutral restatement:] numbered 2026-01, [added by the neutral restatement:] under the signature of Secretary Markwayne Mullin, [added by the neutral restatement:] bearing a July 24, 2026 [added by the neutral restatement:] date, directing federal civilian executive branch agencies to remove DeepSeek products and services from their [added by the neutral restatement:] information technology systems.
Red-tinted words in the claim drifted from the evidence. Green-tinted words are what a neutral restatement needs.
The trace / claim to source
- An order with the number and title described exists in the official federal record. The Federal Register notice of it was filed for public inspection on October 19, 2026 and scheduled for publication on October 20, 2026.
- Markwayne Mullin is the Secretary of Homeland Security, in office since March 24, 2026, so the named signatory held the office on the order's stated date.
- The order's stated release date of July 24, 2026 and its number, 2026-01, match what multiple outlets reading the filed document report.
- The order requires federal civilian executive branch agencies to remove DeepSeek and DeepSeek-affiliate products from their information technology, and it also bars those agencies from procuring them.
- The legal authority is the Federal Acquisition Supply Chain Security Act of 2018, acted on after a Federal Acquisition Security Council recommendation, as stated in the notice itself.
- The removal requirement does extend beyond DeepSeek's own products to third-party products and services developed using DeepSeek implementations, which is what the caption asserts.
- The order's reach stops at federal civilian systems. It does not restrict private companies, and it excludes national security systems and secure compartmented information systems.
- The quoted security language, including that the models "may contain malware or other security vulnerabilities," appears in the notice as reported by several independent outlets.
- This applies to the caption, not to the core claim. The caption says agencies "can ask for an exception in writing within 60 days," in the present tense, which reads as though the option is open now. Reporting on the filing indicates the 60-day window runs from the order's issuance, and measured from July 24 it had closed before the order became public on October 19. The timing changes the practical meaning of the exception process from an available route to one that had already lapsed for most agencies by the time anyone outside government could read the order.
- Nothing else material. The claim sentence understates slightly by describing only the removal half of a two-part order that also excludes DeepSeek from procurement, but that is a narrowing of scope rather than an inflation of it, and it does not change the meaning of what is asserted.
- Whether the restriction originated earlier than July 24, 2026. CyberScoop reports the notice includes a June 26 Mullin letter ordering the exclusion, which would make the operative restriction older than the date on Order #2026-01. The relationship between that letter and the July 24 order is not resolved by the notice text I retrieved.
- How "developed using DeepSeek implementations" will be applied in practice. The notice does not enumerate covered third-party products, and it does not address how to treat a DeepSeek open-weight model running on a US company's servers. No compliance guidance resolving this was found.
- Whether any removal deadline exists. Reporting indicates the notice does not set one, and I found no separate deadline document.
- The evidentiary basis for the Federal Acquisition Security Council recommendation. The notice references the recommendation and affiliated evidence but does not publish them.
- Whether any agency obtained an exception, and how many requests were filed. No data found.
The instrument exists and is in the official record. The Federal Register public inspection filing states that DHS is publishing notice of the Secretary of Homeland Security's issuance of an order (1) excluding information technology products and services developed by Hangzhou DeepSeek Artificial Intelligence Co., Ltd, to include affiliated entities as defined in applicable regulations, from federal civilian agency procurements, and (2) removing all DeepSeek and DeepSeek-affiliate products, and third-party products and services developed using DeepSeek implementations, from civilian agency information technology. The filing records that the Secretary acted under the Federal Acquisition Supply Chain Security Act of 2018, 41 U.S.C. 1321-1328, and implementing regulations, following review of the Federal Acquisition Security Council Recommendation and affiliated evidence, and that a copy of the signed order is contained in the accompanying Appendix and can be found at regulations.gov under DHS Docket Number DHS-2026-0628. The document carries FR Doc. 2026-21447, filed 10/19/2026 at 8:45 am, with a publication date of 10/20/2026. The signatory is confirmed in office. DHS's own channel states that Markwayne Mullin was sworn in as Secretary of the Department of Homeland Security on March 24th, 2026, following a Senate vote in which he was confirmed as the 9th Secretary of DHS by a bipartisan vote of 54-45. The order number and date are corroborated by multiple independent outlets reading the filing. One report records that the signed order, Exclusion and Removal Order #2026-01, carries an "Original Release Date: July 24, 2026" and is from Homeland Security Secretary Markwayne Mullin, with Office of Management and Budget Director Russell Vought copied. Another states that the order, Exclusion and Removal Order #2026-01, excludes products and services developed by Hangzhou DeepSeek Artificial Intelligence Co., Ltd and its affiliated entities from civilian federal procurement, and is dated 24 July 2026. Reuters reported on October 19 that the US Homeland Security Department is ordering the removal of DeepSeek products and third-party services using the Chinese AI model from US civilian agency IT systems, according to a notice published Monday. On scope and stated reasoning, CyberScoop reports that the notice cites the Federal Acquisition Supply Chain Act and a review by the Federal Acquisition Security Council to bar federal agencies from buying all information technology products and services from parent company Hangzhou DeepSeek Artificial Intelligence, and that the notice includes a copy of a letter from Secretary Mullin ordering the exclusion of DeepSeek products on June 26, indicating the ban has been in place for months. The security rationale quoted from the notice includes that DeepSeek servers are located in the PRC and the PRC legal system permits extensive authority for government cyber and intelligence functions to access private company infrastructure, and that for DeepSeek-hosted instances of their models, DeepSeek's account generation process collected personally identifiable information and may also track and digitally fingerprint users, and that transfer of that information to the PRC could provide actionable intelligence on US persons or government programs, and "the models themselves may contain malware or other security vulnerabilities".
Complete reasoning
The reply is formatted for pasting into the thread where the claim is circulating.
Ask this case
Answers come only from the case file above; nothing is added.
Did DHS actually issue this order?
Yes. The order exists in the official federal record, filed with the Federal Register on October 19, 2026 and published October 20, under docket DHS-2026-0628, with the signed order attached.
Does this order affect private businesses?
No. It only applies to federal civilian executive branch agencies. It does not cover private companies, national security systems, or secure compartmented information systems.
Why did DHS order DeepSeek removed from government systems?
The notice cites the Federal Acquisition Supply Chain Security Act of 2018 and a Federal Acquisition Security Council recommendation, pointing to concerns that DeepSeek servers are in the PRC, that PRC law allows broad government access to private company infrastructure, that account creation may have collected personal data and fingerprinted users, and that the models themselves may contain malware or security vulnerabilities.
Can agencies still ask for an exception to this order?
The order allows a written exception request within 60 days of issuance, but that window ran from July 24, 2026, so it had already closed by the time the order became public on October 19, 2026.
Is there a deadline for agencies to remove DeepSeek products?
The investigation did not establish a removal deadline. No such date appears in the notice, and it also remains unclear how agencies are supposed to identify third-party products built using DeepSeek implementations.