AI Vendor Security & Compliance Brief

DeepSeek

Independent due-diligence summary · every fact links to the vendor's official source

2 source-cited facts

0 independently verified certs

9 legal documents tracked

Generated 2026-06-05

Data & Contract Facts deterministic · cited

Attribute	Value	Source
Data Residency	People's Republic of China	https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html
Trains on Customer Data	True	https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html

Security Posture authoritative · cited

Known Vulnerabilities (CVE / CISA KEV) Not determinable

Could not map this vendor to a software identity — abstained rather than guess.

Vulnerability Disclosure Policy (security.txt) None found

Queried the authoritative source; no records.

Email Spoofing Protection (DMARC) Protected

DMARC enforced and SPF present — spoofing well mitigated.

DMARC enforced (p=reject/quarantine) · SPF present · checked @deepseek.com

Web TLS Certificate Valid

Certificate valid · 206d to expiry · Amazon

Data Breach History (HIBP) None found

Queried the authoritative source; no records.

Supply-Chain Security (OpenSSF Scorecard) Not determinable

Could not map this vendor to a software identity — abstained rather than guess.

OFAC Sanctions Screening None found

Queried the authoritative source; no records.

SEC Cyber Incident Disclosures (8-K 1.05) Not determinable

Could not map this vendor to a software identity — abstained rather than guess.

Tracked Legal & Policy Documents

Document	URL
Dpa	https://deepseek.com/dpa
Pricing	https://api-docs.deepseek.com/zh-cn/quick_start/pricing
Privacy	https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html
Security	https://deepseek.com/security
Sla	https://cdn.deepseek.com/policies/en-US/deepseek-open-platform-terms-of-service.html
Soc Report	https://deepseek.com/soc
Subprocessors	https://deepseek.com/subprocessors
Tos	https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html
Trust	https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html

Monitor DeepSeek — get alerted when this changes

This brief is a point-in-time snapshot. Vendors quietly revise their DPA, sub-processors, certifications and security posture — and disclose new CVEs. Get a priority email the moment DeepSeek changes something that affects your risk. Built for procurement & security teams.

Free. One email per material change. Unsubscribe anytime. No sales spam.

Every data point above is extracted from the vendor's own official trust, security, or legal pages and links to its source. This brief contains no scraped sentiment, forum chatter, or AI-inferred opinion — only verifiable, deterministic facts. Verify each source before procurement decisions.