DHS Bars DeepSeek Products From Federal Civilian Procurements

The Department of Homeland Security (DHS) issued Exclusion and Removal Order #2026-01 on July 24, 2026, barring DeepSeek and covered affiliates from federal civilian procurements. The order directs agencies to remove covered DeepSeek products from affected procurements. Its reach includes not only products directly supplied by DeepSeek, but also third-party offerings developed using DeepSeek implementations. Because the order took effect upon issuance, contractors should treat the restrictions as active rather than awaiting a later implementation date. The 60-day window for agencies to request exceptions closed on September 22, 2026.

The order has practical implications for acquisition teams, prime contractors, and subcontractors supporting covered federal civilian work. A product’s branding or immediate supplier may not reveal whether it incorporates a covered implementation. Contractors therefore need to trace AI components and their origins through products and subcontractor supply chains, then determine whether any exposure affects a covered procurement. This calls for more than a one-time review: the supplied guidance also instructs contractors to check SAM.gov for Federal Acquisition Supply Chain Security Act (FASCSA) orders at least every three months.

Contract terms and reporting procedures are another immediate compliance consideration. Contractors must flow down FAR 52.204-30 to subcontracts, extending relevant obligations through the supply chain. Where reporting applies, the stated deadlines are three business days for an initial report and 10 business days for a follow-up report. These short timelines make it important to assign ownership for identifying a potential covered product, escalating the issue, and coordinating accurate reporting across the prime and affected subcontractors.

For GovCon teams, the central procurement task is to connect the order’s product scope with actual components in current offerings and proposed solutions. Agencies must remove covered products from affected procurements, while contractors should use component-origin reviews to identify exposure before it affects delivery or proposal commitments. The order also underscores that third-party integration does not necessarily eliminate supply-chain risk: contractors should ask vendors and subcontractors for sufficiently specific information about embedded AI technology, document review results, and establish a process to revisit those findings as products and acquisition requirements change.

• Order: DHS Exclusion and Removal Order #2026-01 was issued July 24, 2026, and took effect upon issuance.
• Scope: The order bars DeepSeek and covered affiliates from federal civilian procurements and reaches specified third-party products built using DeepSeek implementations.
• Agency action: Agencies are directed to remove covered products from affected procurements; the agency exception-request window closed September 22, 2026.
• Component review: Inventory AI components and trace their origins, including technology embedded in third-party offerings.
• Subcontract flow-down: Contractors must flow down FAR 52.204-30 to subcontracts.
• Reporting: Applicable deadlines are three business days for an initial report and 10 business days for a follow-up report.
• Ongoing monitoring: Check SAM.gov for FASCSA orders at least every three months.
• Practical response: Review prime and subcontractor supply chains, document component-origin checks, and establish escalation procedures for potential exposure.