Gabrielle Hempel, Security Operations Strategist at Exabeam, comments, “What I find particularly interesting about the DeepSeek order is the breadth of its language. The restriction extends beyond DeepSeek itself to third-party products and services developed using its implementations, which raises some significant questions about software provenance and supply-chain compliance.

“I understand the national security concerns, particularly around data sovereignty and foreign intelligence collection, but country of origin isn’t necessarily a proxy for security risk. A locally-deployed model with appropriate controls presents a different risk profile than a foreign-hosted service.

“I suspect we’re going to see increasing tension between national security policy and the practical realities of AI development, particularly as governments begin imposing restrictions that extend beyond the models themselves and into the broader software supply chain. The challenge will be making those requirements sufficiently clear and technically enforceable.”