美国下令所有联邦民事机构彻底清除 DeepSeek：连基于其构建的第三方工具也不例外
英文标题：🔶 The US orders every civilian agency to rip out DeepSeek, even tools built on it
美国国土安全部（DHS）正式发布约束性命令，要求所有联邦民事行政机构立即停止采购并从其 IT 系统中全面清除 DeepSeek，其禁令范围更进一步穿透至“基于 DeepSeek 开发的第三方产品和服务”。该命令依据 2018 年供应链安全法案出台，列举了数据出境、数字指纹追踪及应用安全漏洞等多项风险，但并未指出任何实际的数据泄露先例。这一举措标志着美国对中国开源大模型采取的最广泛限制，迫使所有向联邦政府销售 AI 软件与服务的供应商必须对自身技术栈进行严格审查。
36.0 KB
164.2 KB
18.5 KB
18.5 KB
13.2 KB
24.3 KB
14.5 KB
23.2 KB
11.4 KB
37.0 KB
187.7 KB
30.6 KB
206.5 KB
26.8 KB
115.2 KB
中文
马克韦恩·马林（Markwayne Mullin）出任国土安全部长前的美国参议院官方肖像照。图片来源：美国参议院 / Wikimedia Commons，公有领域，已裁剪
美国政府已命令所有联邦民事机构从其计算机系统中彻底清除 DeepSeek，停止采购该产品，并封杀任何基于这家中国实验室 AI 构建的第三方产品。美国国土安全部周一在《联邦公报》上提交了该命令的通知，依据是一项 2018 年的供应链法律，该法律允许其禁止政府系统采用高风险技术。
该命令编号为 2026-01，由国土安全部长马克韦恩·马林（Markwayne Mullin）签署，签署日期为 2026 年 7 月 24 日。该命令此前一直未对公众披露。其正式通知定于 10 月 20 日星期二在《联邦公报》上公示，案卷号为 DHS-2026-0628。
DeepSeek 禁令涵盖的范围
该命令要求所有民事机构执行两项规定。第一，“立即生效”将杭州深度求索人工智能基础技术研究有限公司（Hangzhou DeepSeek Artificial Intelligence）、其关联机构及其产品排除在采购之外，包括机构核准的产品清单、电子商务市场及类似采购渠道。第二，立即从机构 IT 系统中移除 DeepSeek 及其关联公司的产品，“以及利用 DeepSeek 实现方案所开发的第三方产品和服务”。
第二项条款的影响范围极广。DeepSeek 的模型以开源权重形式发布，因此它们既出现在其他公司的工具内部，也存在于 DeepSeek 自己的 App 和网站中。该命令并未具体列出涉及哪些产品，也没有说明各机构应如何处理运行在美国公司服务器上的 DeepSeek 模型。此外，就在该命令公开的几天前，DeepSeek 刚刚更新了其低成本的 Flash 模型，并声称其在部分代码基准评测上击败了 Claude Opus 5。
该禁令不涉及军方或情报机构。该命令适用于联邦民事行政分支机构，“但不包括其国家安全系统和特许隔离信息系统（secure compartmented information systems）”，后者受五角大楼和国家情报总监管辖。
“多重威胁向量”：DHS 为何称 DeepSeek 存在风险
该命令在风险摘要中指出，DeepSeek 的服务器位于中国境内，且中国法律“赋予了政府网络安全与情报职能部门访问私营企业基础设施的广泛权力”。命令称，DeepSeek 的注册流程会收集个人信息，并可能“跟踪用户并提取数字指纹”，且其应用依赖用户键入信息，这可能导致美国政府工作人员或承包商的敏感数据最终流向中国。
命令指出，结合公开数据，这些信息“可能会产生针对美国人员和/或政府项目的可付诸行动的情报”。此外，命令还补充称这些模型“可能包含恶意软件或其他安全漏洞”，并引用了 NowSecure 于 2025 年 2 月发布的一份审计报告，该报告指出了 DeepSeek iPhone 应用中存在的多个严重漏洞。
该命令列举的证据均取自公开资料：包括 DeepSeek 自身的隐私政策、DHS 于 2020 年发布的一份关于中国数据风险的商业咨询公告，以及众议院美中战略竞争特别委员会于 2025 年 4 月发布的一份报告。命令中并未描述任何政府数据确实流入 DeepSeek 的具体案例。
豁免申请与 60 天窗口期
无法遵守规定的机构可以申请豁免，例如请求免予执行、豁免某些特定操作或申请延期。申请必须在命令发布后 60 天内以书面形式提出，并附带“令人信服的正当理由”，例如对关键任务工作的影响，以及任何替代性安全保障措施。网络安全与基础设施安全局（CISA）将对这些申请进行审查，并以书面形式予以批准或拒绝。
在 DeepSeek 产品被彻底清除之前，各机构被要求监控出入其网络的数据流量、加强日志记录、增加防止数据流出系统的控制措施，并对任何异常情况进行标记。CISA 可为缺乏相应合规技能的机构提供协助，且国土安全部长必须在一年内以及随后的每年对该命令进行审查。
全球各地的 DeepSeek 禁令
据路透社报道，美国政府内部已有多个部门在其设备上禁用了 DeepSeek，包括商务部和海军；纽约州、田纳西州和弗吉尼亚州等州政府也采取了类似行动。在海外，意大利数据保护机构于 2025 年初封禁了 DeepSeek 应用，台湾地区、韩国和澳大利亚也禁止在政府设备上使用该应用。周一发布的命令走得更远，覆盖了所有民事机构及其采购的全部产品。
DeepSeek 尚未置评。据路透社报道，中国驻华盛顿大使馆未立即置评。该命令出台之际，北京方面也在加强对该行业的监管：中国目前正寻求管控其最大型 AI 模型的出口，而 DeepSeek 正利用中国国产芯片训练其下一代模型。
为什么这很重要
这是美国政府迄今为止针对中国 AI 实验室采取的最广泛举措；通过将范围扩大到基于 DeepSeek 构建的第三方工具，它将核查底层模型归属的责任转嫁给了所有向联邦机构销售 AI 产品的供应商。中国开源模型是全球下载量最高的模型之一，但很少有实验室在模型发布时公开安全评估结果，因此预计未来将有更多采购方开始提出同样的质询。
信息来源：美国国土安全部，“关于从联邦民事行政分支信息技术系统和采购中排除和移除 DeepSeek 产品的命令通知”及第 2026-01 号排除与移除命令（联邦公报公开查阅文件 2026-21447）；路透社（早期禁令及使馆回应）。
English / 原文
Markwayne Mullin in his official US Senate portrait, taken before he became Homeland Security Secretary. Image: United States Senate / Wikimedia Commons, Public domain, cropped
The US government has ordered every federal civilian agency to strip DeepSeek out of its computers and stop buying it, along with any third-party product built on the Chinese lab's AI. The Department of Homeland Security filed notice of the order with the Federal Register on Monday, under a 2018 supply chain law that lets it bar risky technology from government systems.
The order, numbered 2026-01 and signed by Homeland Security Secretary Markwayne Mullin, is dated July 24, 2026. It was kept out of public view until this week. Its notice is due to appear in the Federal Register on Tuesday, October 20, under docket DHS-2026-0628.
What the DeepSeek ban covers
The order tells all civilian agencies to do two things. First, exclude Hangzhou DeepSeek Artificial Intelligence, its affiliates and their products from purchasing "effective immediately", including agency-approved product lists, e-commerce marketplaces and similar buying channels. Second, remove products from DeepSeek and its affiliates, "and third-party products and services developed using DeepSeek implementations", from agency IT systems immediately.
That second clause is the wide one. DeepSeek's models are released as open weights, so they turn up inside other companies' tools as well as in DeepSeek's own app and website. The order does not list which products it means, and it does not say how agencies should treat a DeepSeek model running on a US company's servers. It also comes days after DeepSeek updated its cheap Flash model, which it says now beats Claude Opus 5 at some coding tasks.
It does not reach the military or spy agencies. The order applies to federal civilian executive branch agencies "except for their national security systems and secure compartmented information systems", which fall under the Pentagon and the Director of National Intelligence.
"Multiple threat vectors": why DHS says DeepSeek is a risk
The order's summary of risks says DeepSeek's servers are in China and that Chinese law "permits extensive authority to government cyber and intelligence functions to access private company infrastructure". It says DeepSeek's sign-up process collects personal information and may "track and digitally fingerprint users", and that its apps work by having people type in information, which could mean sensitive data from US government staff or contractors ends up in China.
Combined with public data, that information "could produce actionable intelligence on U.S. persons and/or government programs", the order says. It adds that the models "may contain malware or other security vulnerabilities", and cites a February 2025 NowSecure audit that found multiple critical flaws in DeepSeek's iPhone app.
The order's evidence is drawn from public material: DeepSeek's own privacy policy, a 2020 DHS business advisory on Chinese data risks and an April 2025 House Select Committee on China report. It doesn't describe any case of government data reaching DeepSeek.
Exceptions and the 60-day window
Agencies that can't comply can ask for an exception, such as having the order not apply to them, to certain actions, or a delay. Requests must be made in writing within 60 days of the order's issue, with a "compelling justification", for example the impact on mission-critical work, and any alternative safeguards. The Cybersecurity and Infrastructure Security Agency (CISA) reviews them and approves or refuses in writing.
Until DeepSeek products are gone, agencies are told to monitor traffic in and out of their networks, step up logging, add controls against data leaving their systems and flag anything unusual. CISA can help agencies that lack the skills to comply, and the Secretary must review the order within a year and every year after.
DeepSeek bans around the world
Several parts of the US government already blocked DeepSeek on their own devices, including the Commerce Department and the Navy, as did states including New York, Tennessee and Virginia, Reuters reported. Abroad, Italy's data protection authority blocked the DeepSeek app in early 2025, and Taiwan, South Korea and Australia barred it from government devices. Monday's order goes further, covering every civilian agency and everything they buy.
DeepSeek hasn't commented. The Chinese embassy in Washington didn't immediately comment, according to Reuters. The order lands as Beijing tightens its own grip on the sector: China now wants to control exports of its largest AI models, and DeepSeek is training its next model on Chinese chips.
Why it matters
This is the US government's broadest move yet against a Chinese AI lab, and by reaching third-party tools built on DeepSeek it puts the burden on every vendor selling AI to federal agencies to know which models sit inside their products. Chinese open models are among the most downloaded in the world, and few publish safety results at launch, so expect more buyers to start asking the same question.
Sources:Department of Homeland Security, "Notice of Order Regarding Exclusion and Removal of DeepSeek Products from Federal Civilian Executive Branch Information Technology Systems and Procurements" and Exclusion and Removal Order #2026-01 (Federal Register public inspection, document 2026-21447); Reuters (earlier bans and embassy response).