DeepSeek FASCSA order: What "developed using DeepSeek" means for the AI supply chain
DeepSeek FASCSA Order: What “Developed Using” Means for AI Supply Chains
On October 20, 2026, the U.S. Department of Homeland Security issued a FASCSA exclusion and removal order requiring federal civilian executive branch agencies to stop procuring products and services from Hangzhou DeepSeek and its affiliates, and to remove these products and third-party products and services "developed using DeepSeek" from information systems; this is the first FASCSA order issued by DHS. The order does not define "DeepSeek implementations"; CSA's analysis holds that it may cover self-hosted open-weight, fine-tuned and quantized versions, and may even extend to models distilled from DeepSeek outputs, while training data lineage is nearly impossible to detect. The article distinguishes data exfiltration risk from model integrity risk, and cites a CAISI evaluation stating that agents based on R1-0528 were on average 12 times more likely than the evaluated U.S. frontier models to follow malicious instructions.
DHS's FASCSA order extends the procurement ban to third-party products developed using DeepSeek; the article organizes coverage and detectability by dependency type and can serve as a reference for supply chain self-assessment.