DeepSeek (AI)
Series of language models developed by DeepSeek
From Wikipedia, the free encyclopedia
DeepSeek[a] is a series of large language models developed by the Chinese company DeepSeek. The series began in November 2023. A model released on 20 January 2025, DeepSeek-R1, became a breakthrough success, surpassing ChatGPT as the most downloaded freeware app on the iOS App Store in the United States by 27 January.
24 April 2026
DeepSeek V4.1 Flash /
9 September 2026
| DeepSeek | |
|---|---|
| Developer | DeepSeek |
| Release | 29 November 2023 |
| Stable release | DeepSeek V4 Pro / 24 April 2026 DeepSeek V4.1 Flash / 9 September 2026 |
| Written in | Python |
| Operating system | |
| Type | Chatbot |
| License |
|
| Website | chat |
DeepSeek's success against larger and more established rivals has been described as "upending AI"[1] and initiating "a global AI space race".[2] DeepSeek's compliance with Chinese government censorship policies and its data collection practices have also raised concerns over privacy and information control in the model, prompting regulatory scrutiny in multiple countries. However, it has also been praised for its open weights and infrastructure code, energy efficiency and contributions to open-source artificial intelligence.[3][4]
History
On 10 January 2025, DeepSeek released the chatbot, based on the DeepSeek-R1 model, for iOS and Android. By 27 January, DeepSeek-R1 surpassed ChatGPT as the most-downloaded freeware app on the iOS App Store in the United States,[1] which resulted in an 18% drop in Nvidia's share price.[5][6] And after a "large-scale" cyberattack on the same day disrupted the proper functioning of its servers, DeepSeek had limited its new user registration to phone numbers from mainland China, email addresses, or Google account logins.[7][8]
On 3 April 2025, in collaboration with researchers at Tsinghua University, DeepSeek published a paper unveiling a new model that combines the techniques generative reward modeling (GRM) and self-principled critique tuning (SPCT). The resulting model is referred to as DeepSeek-GRM. The goal of using these techniques is to foster more effective inference-time scaling within their LLM and chatbot services. Notably, DeepSeek has said that these new models will be released and made open source.[9][10]
On 30 April 2025, Deepseek released its math-focused Artificial Intelligence Model named "DeepSeek-Prover-V2-671B". This model is useful for formal theorem proving and mathematical reasoning.[11][12]
On 24 April 2026, DeepSeek released DeepSeek V4 and V4-Pro,[13][14] and then DeepSeek-V4.1-Flash in September 9, 2026.[15]
Usage
DeepSeek can answer questions, solve logic problems, and write computer programs on par with other chatbots, according to benchmark tests used by American AI companies.[1]
Users can access the chatbot for free through the official DeepSeek website or mobile application, without limitation on the number of queries.[16] DeepSeek only supports user-signup via a global email service, e.g. Gmail, Google or Yahoo. DeepSeek also offers access to the R1 and V3 models that power the chatbot via an API with a usage-based pricing model.[17] This modality is primarily targeted towards developers and businesses. As of February 2025, API usage is priced at approximately $0.28 per million input tokens and $0.42 per million output tokens, making it less expensive than some competing services. Its web version is completely free, with 500 messages per hour cap limit to prevent bots from spamming.[16]
Operation
The first DeepSeek models were essentially the same as Llama,[18] which were dense decoder-only transformers. Later models incorporated the multi-head latent attention (MLA), Mixture of Experts (MoE), and KV caching.[19][20]
A decoder-only transformer consists of multiple identical decoder layers. Each of these layers features two main components: an attention layer and a feedforward network (FFN) layer.[20] V2 replaced the standard multi-head attention mechanism (MHA) with multi-head latent attention (MLA). This introduces compressed latent vectors to reduce KV (key–value) cache size, and thus memory usage.[20]
A standard MoE Transformer generally use the sparsely-gated MoE layers in the FFN layers. In such an MoE layer, there are several FFN modules in parallel ("routed experts") and a small classifier ("gate") to compute a score for all these modules upon each token. Only the highest-scoring modules are activated. Starting with DeepSeekMoE, DeepSeek adopted a variant that adds "shared experts", which are always activated.[19]
DeepSeek Coder
DeepSeek Coder is a series of eight models, four pretrained (Base) and four instruction-finetuned (Instruct). All have 16K context lengths. The model was made source-available under the DeepSeek License, which includes "open and responsible downstream usage" restrictions.[21]
The training program was:[22][23][24]
- Pretraining: 1.8T tokens (87% source code, 10% code-related English (GitHub markdown and Stack Exchange), and 3% code-unrelated Chinese).
- Long-context pretraining: 200B tokens. This extends the context length from 4K to 16K. This produced the
Basemodels. - Supervised finetuning (SFT): 2B tokens of instruction data. This produced the
Instructmodels.
They were trained on clusters of A100 and H800 Nvidia GPUs, connected by InfiniBand, NVLink, NVSwitch.[22]
DeepSeek-LLM
The DeepSeek-LLM series was released in November 2023. It has 7B and 67B parameters in both Base and Chat forms. DeepSeek's accompanying paper claimed benchmark results higher than Llama 2 and most open-source LLMs at the time.[18]: section 5 The model code is under the source-available DeepSeek License.[26]
The architecture was essentially the same as the Llama series. They used the pre-norm decoder-only Transformer with RMSNorm as the normalization, SwiGLU in the feedforward layers, rotary positional embedding (RoPE), and grouped-query attention (GQA). Both had vocabulary size 102,400 (byte-level BPE) and context length of 4096. They trained on 2 trillion tokens of English and Chinese text obtained by deduplicating the Common Crawl.[18]
The Chat versions of the two Base models was released concurrently, obtained by training Base by supervised finetuning (SFT) followed by direct policy optimization (DPO).[18]
MoE
DeepSeek-MoE models (Base and Chat), each have 16B parameters (2.7B activated per token, 4K context length). The training was essentially the same as DeepSeek-LLM 7B, and was trained on a part of its training dataset. They claimed performance comparable to a 16B MoE as a 7B non-MoE. It is a variant of the standard sparsely-gated MoE, with "shared experts" that are always queried, and "routed experts" that might not be. They found this to help with expert balancing. In standard MoE, some experts can become overused, while others are rarely used, wasting space. Attempting to balance expert usage causes experts to replicate the same capacity. They proposed the shared experts to learn core capacities that are often used, and let the routed experts learn peripheral capacities that are rarely used.[19]
Math
DeepSeek-Math includes 3 models: Base, Instruct, and RL. Math was trained as follows:[27]
- Initialize with a previously pretrained DeepSeek-Coder Base v1.5 7B.
- Further pretrain with 500B tokens (6% DeepSeekMath Corpus, 4% AlgebraicStack, 10% arXiv, 20% GitHub code, 10% Common Crawl). This produced Base.
- Train an instruction-following model by SFT Base with 776K math problems and tool-use-integrated step-by-step solutions. This produced Instruct.
- Reinforcement learning (RL): The reward model was a process reward model (PRM) trained from Base according to the Math-Shepherd method.[28] This reward model was then used to train Instruct using Group Relative Policy Optimization (GRPO) on a dataset of 144K math questions "related to GSM8K and MATH". The reward model was continuously updated during training to avoid reward hacking. This resulted in RL.
V2

In May 2024, DeepSeek released the DeepSeek-V2 series. The series includes 4 models, 2 base models (DeepSeek-V2, DeepSeek-V2 Lite) and 2 chatbots (Chat). The two larger models were trained as follows:[29]
- Pretrain on a dataset of 8.1T tokens, using 12% more Chinese tokens than English ones.
- Extend context length from 4K to 128K using YaRN.[30] This resulted in DeepSeek-V2.
- SFT with 1.2M instances for helpfulness and 0.3M for safety. This resulted in Chat SFT, which was not released.
- RL using GRPO in two stages. The first stage was trained to solve math and coding problems. This stage used 1 reward model, trained on compiler feedback (for coding) and ground-truth labels (for math). The second stage was trained to be helpful, safe, and follow rules. This stage used 3 reward models. The helpfulness and safety reward models were trained on human preference data. The rule-based reward model was manually programmed. All trained reward models were initialized from Chat (SFT). This resulted in the released version of Chat.
They opted for 2-staged RL, because they found that RL on reasoning data had "unique characteristics" different from RL on general data. For example, RL on reasoning could improve over more training steps.[29]
The two V2-Lite models were smaller, and trained similarly. DeepSeek-V2 Lite-Chat underwent only SFT, not RL. They trained the Lite version to help "further research and development on MLA and DeepSeekMoE".[29]
Architecturally, the V2 models were significantly different from the DeepSeek LLM series. They changed the standard attention mechanism by a low-rank approximation called multi-head latent attention (MLA), and used the previously published mixture of experts (MoE) variant.[19]
The Financial Times reported that it was cheaper than its peers with a price of 2 RMB for every million output tokens. The University of Waterloo Tiger Lab's leaderboard ranked DeepSeek-V2 seventh on its LLM ranking.[33]
The DeepSeek-Coder V2 series included V2-Base, V2-Lite-Base, V2-Instruct, and V20-Lite-Instruct.. Training:[20][note 2]
- Base models were initialized from corresponding intermediate checkpoints after pretraining on 4.2T tokens (not the version at the end of pretraining), then pretrained further for 6T tokens, then context-extended to 128K context length.
- DeepSeek-Coder and DeepSeek-Math were used to generate 20K code-related and 30K math-related instruction data, then combined with an instruction dataset of 300M tokens. This was used for SFT.
- RL with GRPO. The reward for math problems was computed by comparing with the ground-truth label. The reward for code problems was generated by a reward model trained to predict whether a program would pass the unit tests.
DeepSeek-V2.5 was made by combining DeepSeek-V2-Chat and DeepSeek-Coder-V2-Instruct.[34]
V3

DeepSeek-V3-Base and DeepSeek-V3 (a chat model) use essentially the same architecture as V2 with the addition of multi-token prediction, which (optionally) decodes extra tokens faster but less accurately. Training process:[35]
- Pretraining on 14.8T tokens of a multilingual corpus, mostly English and Chinese. It contained a higher ratio of math and programming than the pretraining dataset of V2.
- Extend context length twice, from 4K to 32K and then to 128K, using YaRN.[36] This produced DeepSeek-V3-Base.
- SFT for 2 epochs on 1.5M samples of reasoning (math, programming, logic) and non-reasoning (creative writing, roleplay, simple question answering) data. Reasoning data was generated by "expert models". Non-reasoning data was generated by DeepSeek-V2.5 and checked by humans.
- The "expert models" were trained by starting with an unspecified base model, then SFT on both <problem, original response> data, and synthetic <system prompt, prompt, problem, R1 response> data generated by an internal DeepSeek-R1-Lite model. The system prompt asked R1 to reflect and verify during thinking. Then the expert models were RL using an undisclosed reward function.
- Each expert model was trained to generate just synthetic reasoning data in one specific domain (math, programming, logic).
- Expert models were used instead of R1 itself, since the output from R1 itself suffered "overthinking, poor formatting, and excessive length".
- Model-based reward models were made by starting with a SFT checkpoint of V3, then finetuning on human preference data containing both final reward and chain-of-thought leading to the final reward. The reward model produced reward signals for both questions with objective but free-form answers, and questions without objective answers (such as creative writing).
- An SFT checkpoint of V3 was trained by GRPO using both reward models and rule-based reward. The rule-based reward was computed for math problems with a final answer (put in a box), and for programming problems by unit tests. This produced DeepSeek-V3.
DeepSeek released its DeepSeek-V3-0324 model, which used the same architecture as V3, on 24 March 2025 under the MIT License.[37]

V3[35]: Figure 6 The DeepSeek team performed extensive low-level engineering to improve efficiency. They used mixed-precision arithmetic. Much of the forward pass was performed in 8-bit floating point numbers (5E2M: 5-bit exponent and 2-bit mantissa) rather than the standard 32-bit, requiring special GEMM routines to accumulate accurately. They used a custom 12-bit float (E5M6) only for the inputs to the linear layers after the attention modules. Optimizer states were in 16-bit (BF16). They minimized communication latency by extensively overlapping computation and communication, such as dedicating 20 streaming multiprocessors out of 132 per H800 for only inter-GPU communication. They lowered communication by rearranging (every 10 minutes) the exact machine each expert was on so as to avoid querying certain machines more often than others, adding auxiliary load-balancing losses to the training loss function, and other load-balancing techniques.[35]
After training, it was deployed on clusters of H800 GPUs. The 8 H800 GPUs within a cluster were connected by NVLink, and the clusters were connected by InfiniBand.[35]
| Stage | Cost (in one thousand GPU hours) | Cost (in one million USD$) |
|---|---|---|
| Pre-training | 2,664 | 5.328 |
| Context extension | 119 | 0.24 |
| Fine-tuning | 5 | 0.01 |
| Total | 2,788 | 5.576 |
The cost has been discussed[39][40][41] and called misleading, because it covers only parts of the true cost.[42]
Benchmark tests show that V3 outperformed Llama 3.1 and Qwen 2.5 while matching GPT-4o and Claude 3.5 Sonnet.[43][44][45][46]
R1

In January 2025, DeepSeek released the DeepSeek-R1 model under the MIT License. It was a reasoning language model post-trained from DeepSeek-V3-Base.[47]
DeepSeek-R1-Lite-Preview[48][49][note 3] was trained for logical inference, mathematical reasoning, and real-time problem-solving. DeepSeek claimed that it exceeded performance of OpenAI o1 on benchmarks such as American Invitational Mathematics Examination (AIME) and MATH.[50] However, The Wall Street Journal reported that on 15 problems from the 2024 edition of AIME, the o1 model reached a solution faster.[51]
DeepSeek-R1 and DeepSeek-R1-Zero[52] were initialized from DeepSeek-V3-Base and share its architecture. DeepSeek-R1-Distill models were instead initialized from other pretrained open-weight models, including LLaMA and Qwen, then fine-tuned on synthetic data generated by R1.[53]
DeepSeek-R1-ZeroA conversation between User and Assistant. The user asks a question, and the Assistant solves it. The assistant first thinks about the reasoning process in the mind and then provides the user with the answer. The reasoning process and answer are enclosed within <think> </think> and <answer> </answer> tags, respectively, i.e., <think> reasoning process here </think> <answer> answer here </answer>. User: <prompt>. Assistant:
DeepSeek-R1-Zero was trained exclusively using GRPO RL without SFT. Unlike previous versions, it used no model-based reward. All reward functions were rule-based, "mainly" of two types (other types were not specified): accuracy rewards and format rewards. Accuracy reward was checking whether a boxed answer is correct (for math) or whether a code passes tests (for programming). Format reward was checking whether the model puts its thinking trace within a <think>...</think> tag.[53]
R1-Zero has issues with readability and mixing languages. R1 was trained to address these issues and further improve reasoning:[53]
- SFT DeepSeek-V3-Base on "thousands" of "cold-start" data all with the standard format of
|special_token|<reasoning_process>|special_token|<summary>, designed to improve model output readability. - Apply the same GRPO RL process as R1-Zero, adding a "language consistency reward" to encourage it to respond monolingually. This produced an un released internal model.
- Synthesize 600K reasoning data from the internal model, with rejection sampling (i.e. if the generated reasoning had a wrong final answer, then it is removed). Synthesize 200K non-reasoning data (writing, factual QA, self-cognition, translation) using DeepSeek-V3.
- SFT DeepSeek-V3-Base on the 800K synthetic data for 2 epochs.
- Apply the same GRPO RL process as R1-Zero with rule-based reward (for reasoning tasks), but also model-based reward (for non-reasoning tasks, helpfulness, and harmlessness). This produced DeepSeek-R1.
Distilled models were trained by SFT on 800K data synthesized from DeepSeek-R1, in a similar way as step 3. They were not trained with RL.[53]
With the release of R1 in January, the DeepSeek team published a preprint on arXiv.[53] Later, an updated version was published in Nature in September.[54]
Most Chinese cloud providers of R1 used Nvidia H20.[55]
R2
R2 was planned as the successor to R1, but never released. It was originally planned for release in early May 2025.[56] However, on 28 May 2025, R1 was instead updated to version R1-0528.[57]
R2 was reportedly delayed several times throughout 2025. Liang Wenfeng was reportedly not yet satisfied with its performance.[55] It was delayed by slow data labelling and chip problems. DeepSeek was encouraged by authorities to adopt Huawei’s Ascend chips for training, but it had stability issues, slower inter-chip connectivity and inferior software. Consequently it has opted to use Nvidia chips for training and Huawei Ascend chips for inference.[58] It is also reported that the Cyberspace Administration of China requested several large corporations to stop buying Nvidia H20 and buy from domestic suppliers instead.[59]
V4
In 2026-04, DeepSeek-V4 was released under the MIT license. The release included 2 models: Pro (1.6T parameters, 49B activated) and Flash (284B parameters, 13B activated). Its context length is 1M. It was pretrained on 32T tokens, then posttrained by SFT and RL, then consolidated by on-policy distillation.[60]
The main architectural innovations include manifold-constrained hyper-connections (mHC) to improve upon residual connections,[61] the Muon optimizer to improve upon gradient descent,[62] and improvements to the attention mechanism to compress the KV cache further than MLA.[60]
mHC
In normal residual connections, the residual stream is of form . mHC divides its residual stream into parts . The residual stream is updated bywhere
- is a doubly stochastic matrix called the residual mapping. It mixes the parts of the residual stream. It depends on :here SK denotes the Sinkhorn–Knopp algorithm, denotes learnable matrices of the appropriate sizes, and denotes a learnable scalar.
- are vectors with nonnegative entries called the input mapping and output mapping. The input mapping projects the residual stream down by a factor of so that it can be used by the layer, and the output mapping does the opposite. They depend on :here denotes the logistic function.
KV cache data movement minimization
Standard query-key-value attention retrieves the key-value vectors, uses the query vectors to match the key vectors, and sums the value vectors weighed according to how well their keys matched the query. Since the retrieval step is bandwidth-bound, they used the rerank method in information retrieval to cut down the data movement cost:
- Retrieve all cheap indexing vectors, and match them against the query vector. Find the top-k best matching ones.
- Retrieve the key-value vectors corresponding to these, and then do the query-key-value attention on those only.
They called this the "indexer" method.
In detail, during prefilling, for each KV cache vector , the model also computes . When decoding a token , instead of paying attention to all , the model reranks:
- Retrieve all from memory. Compute all .
- Retrieve only those for which , and perform the standard attention mechanism on those.
This increases the KV cache size, but decreases the data movement cost.
Each indexer run still takes in data movement, so to cut down the data movement cost further, most layers do not even run the indexers. They simply copy whatever part of the global KV cache was read by the previous layer. They called these layers the "Reuse mode" layers.
To cut down the data movement cost even further, layers 21 to 40 use reranking twice:
- Layer 21 runs the indexer normally, but it produces two lists: a top- list and a top- list. It retrieves the top- entries for its own attention. They called this the "Full mode".
- Layers 25, 29, 33, 37 run the indexer only over the top- list, each picking its own top-. They called this the "Reindex mode". Each Reindex mode layer saves data movement compared to a Full mode layer, since it only reads indexing vectors, instead of indexing vectors.
- Each other layer reuses the top- of the layer before it. They called this the "Reuse mode".
They called this the "Hierarchical Sparse Indexer" method, "hierarchical" because it reranks twice.
KV cache compression
Let be the output of the -th layer at the -th token index. In normal multi-headed attention, the KV cache of the -th layer has one key vector and one value vector , per (token t, layer l, attention head h). In MLA, the KV cache has one key-value vector per (token t, layer l). This already cuts down the KV cache by .
To cut down the KV cache even further, they used "token-level compression". That is, they divided the tokens into consecutive blocks of length m, and provide one key-value vector per (token block, layer). This cuts down the KV cache by m. Specifically, suppose that tokens are to be merged, then the merged key-value vector is a component-wise weighted sum, where the weight vectors are computed by component-wise softmax:where in the first equation is component-wise multiplication, and exponentiation and division are done component-wise in the second equation.
The actual V4 paper named two attention mechanisms: "Compressed Sparse Attention" (CSA) and "Heavily Compressed Attention" (HCA), which are just the same attention mechanism described in this section, except that one uses (CSA) and the other uses (HCA, does not use the indexer).
V4.1
In 2026-09, DeepSeek-V4.1-Flash was released. Though it is called "V4.1", it is quite different from the V4 models. Whereas the two V4 models are mostly based on the decoder-only MoE architecture of most frontier models, V4.1 has a completely different architecture for its attention mechanisms. It has 552B parameters in total, 8B activated in the encoder half, and 8B activated in the decoder half. Consequently, only 8B are activated for prefilling, and all 16B are activated for decoding. It incorporates many architectural variations to cut down the KV cache further.[63][64]
Multimodality
V4.1 is multimodal, accepting inputs that have images and text interspersed together. Text is tokenized and embedded into a sequence of embedding vectors in the same way of a standard LLM. The images are converted by a vision transformer DeepSeek-ViT into a sequence of image embedding vectors, then these are mapped by a small 2-layer MLP to embedding vectors that DeepSeek-V4.1-Flash accepts (since DeepSeek-ViT and DeepSeek-V4.1-Flash uses different embedding dimensions).
DeepSeek-ViT is a standard ViT with Transformer++ and 2D RoPE. Each image embedding vector it outputs corresponds to a 52×52 pixel image patch.
Training
The training recipe:
- DeepSeek-ViT was trained by SigLIP-style contrastive learning on about 47B image-text pairs.
- It was connected to a 4B MoE LLM and they were jointly pretrained by next-token prediction on 236B tokens of captions, charts, and OCR. The small LLM was discarded after this.
- DeepSeek-ViT was frozen, and connected to DeepSeek-V4.1-Flash. They were pretrained on 45T multimodal tokens by next-token prediction on the text tokens (the image tokens cannot be predicted, since DeepSeek-V4.1-Flash does not output image tokens). The sequence length goes from 64K to 1M at the 34T mark without special tricks.
- DeepSeek-ViT was unfrozen, and they were jointly posttrained by SFT and RL, then consolidated by on-policy distillation. Same as V4.
KV cache compression
The V4.1 cuts down the KV cache further than V4, by changing the attention mechanism architecture itself. They called their innovation the "Causal Encoder-Decoder" (CED) and the "Compressed Sparse Attention 2" (CSA2). They claimed to take inspiration from the "you only cache once decoder-decoder".[65]
The idea is as follows. The layers of the full neural network are split to several blocks, with layers respectively. Each block uses causal sliding-window self-attention. Furthermore, except the first block, all other blocks have a limited amount of global cross-attention over whatever the previous block's output is. It goes as follows:
- Given an input sequence , block 1 is a transformer that produces an output sequence , using standard causal sliding-window self-attention.
- Block 2 is a transformer that pays attention to two KV caches, a global one and a local one. The local KV cache is the same causal sliding-window self-attention, computed at every layer. The global KV cache is a cross-attention mechanism upon , computed by block 1.
- After that, block 3 does the same, with causal sliding-window self-attention KV cache combined with cross-attention global KV cache paid upon , and so on.
- Finally, block does the same, and its output on the last token is the output of the entire neural network.
To prefill this architecture, each layer needs to store its last entries in its KV cache in order to perform sliding-window-self-attention on new tokens. Each block's output, except the last, needs to be stored too, in order to perform global cross-attention on new tokens. Consequently, the total KV cache requires memory , which is smaller than the global KV cache . It is also smaller than that of V4, which use global KV cache with consecutive tokens merged, achieving memory .
To cut down the cost of prefilling further, they used "bounded replay" on the last block. Specifically, instead of doing the normal causal sliding-window self-attention, they simply mask out any attention on any token other than the tokens . In other words, the attention mask looks like instead of . They admit that this is mathematically different from actual causal sliding-window attention, but stated that empirically, it did not harm model performance.
Other things
V4.1 has an extra embedding matrix with 768 million rows. It embeds frequent n-grams (with n=2, 3, 4). Because it has so many rows, the embedding matrix is stored as a hash table to make retrieval feasible. They call this hash table the "Engram". This adds 196B parameters for storage, above and beyond the 552B parameters of the model itself.
Reactions
DeepSeek's success against larger and more established rivals has been described as "upending AI",[1] constituting "the first shot at what is emerging as a global AI space race",[2] and ushering in "a new era of AI brinkmanship".[66]
Challenge to US AI dominance
DeepSeek's competitive performance at relatively minimal cost has been recognized as potentially challenging the global dominance of American AI models.[67] Various publications and news media, such as The Hill and The Guardian, have described the release of the R1 chatbot as a "Sputnik moment" for American AI,[68][69][70] echoing Marc Andreessen's view. OpenAI wrote a letter to the Office of Science and Technology Policy (OSTP), in March 2025, citing issues concerning a possibility that Deepseek could manipulate responses to cause harm.[71]
Chinese perspective
DeepSeek's founder Liang Wenfeng has been compared to OpenAI CEO Sam Altman, with CNN calling him the Sam Altman of China and an evangelist for AI.[72] Chinese state media widely praised DeepSeek as a national asset.[73][74] On 20 January 2025, Chinese Premier Li Qiang invited Wenfeng to his symposium with experts and asked him to provide opinions and suggestions on a draft for comments of the annual 2024 government work report.[75] On 20 February 2025, Wenfeng met with General Secretary of the Chinese Communist Party Xi Jinping, who encouraged party and state leaders to experiment with DeepSeek. Government officials responded to Xi's approval of the chatbot by reportedly using it to draft legal judgements, propose medical treatment plans, and analyze surveillance videos to search for missing persons.[71]
Performance and success
Leading figures in the American AI sector had mixed reactions to DeepSeek's performance and success.[76] Microsoft CEO Satya Nadella and OpenAI CEO Altman—whose companies are involved in the United States government-backed "Stargate Project" to develop American AI infrastructure—both called DeepSeek "super impressive".[77][78] Various companies including Amazon Web Services, Toyota, and Stripe are seeking to use the model in their program.[79] When American President Donald Trump announced The Stargate Project, he referred to DeepSeek as a wake-up call[80] and a positive development.[81][69][70][82]
Other leaders in the AI field, however—including Scale AI CEO Alexandr Wang, Anthropic cofounder and CEO Dario Amodei, and Elon Musk—have expressed skepticism of the app's performance or of the sustainability of its success.[76][83][84] Wang in particularly referred to DeepSeek-V3 as "earth-shattering" and DeepSeek-R1 as "top performing, or roughly on par with the best American models", but speculated that China may possess more AI-powering Nvidia H100 GPUs than thought.[85]
Stock market implications
DeepSeek's optimization of limited resources has highlighted potential limits of United States sanctions on China's AI development, including export restrictions on advanced AI chips to China.[43][86] The success of the company's AI models consequently "sparked market turmoil"[87] and caused shares in major global technology companies to plunge on 27 January 2025: Nvidia's stock fell by as much as 17–18%,[88] as did the stock of rival Broadcom. Other tech firms also sank, including Microsoft (down 2.5%), Google's owner Alphabet (down over 4%), and Dutch chip equipment maker ASML (down over 7%).[70] A global sell-off of technology stocks on Nasdaq, prompted by the release of the R1 model, led to record losses of about $593 billion in the market capitalizations of AI and computer hardware companies;[89] and by the next day a total of $1 trillion of value was wiped from American stocks.[69]

Concerns
Distillation
DeepSeek has been reported to sometimes claim that it is ChatGPT.[90][91] OpenAI said that DeepSeek may have "inappropriately" used outputs from its model as training data in a process called distillation.[92] However, there is currently no method to prove this conclusively.[93]
Censorship
DeepSeek's compliance with Chinese government censorship policies and its data collection practices have raised concerns over information control in the model, prompting regulatory scrutiny in multiple countries.
Reports indicate that it applies content moderation in accordance with the government's "public opinion guidance" regulations, limiting responses on topics such as the Tiananmen Square massacre and Taiwan's political status.[94][95][96] DeepSeek models that have been uncensored also display a bias towards Chinese government viewpoints on controversial topics such as Xi Jinping's human rights record and Taiwan's political status.[97][98] However, users who have downloaded the models and hosted them on their own devices and servers have reported successfully removing this censorship.[99][100]

Some sources[who?] have observed that the official application programming interface (API) version of R1, which runs from servers located in mainland China, uses censorship mechanisms for topics considered politically sensitive for the government of China. For example, the model may initially generate answers to questions about the 1989 Tiananmen Square massacre, persecution of Uyghurs, comparisons between Xi Jinping and Winnie the Pooh, and human rights in China, but a censorship mechanism deletes the uncensored response afterwards and replaces it with a message such as:[94][95][101]
"Sorry, that's beyond my current scope. Let's talk about something else."
The post hoc censorship mechanisms and restrictions added on top of the model's output can be removed in the open-source version of the R1 model.[97] If the "core Socialist values" defined by the Chinese Internet regulatory authorities are undermined in a response, or if a response undermining the reunification of mainland China and Taiwan is produced, the relevant response is deleted, but the prompt can be still be edited and resubmitted.[102] Locally hosted instances of R1 are still occasionally reported to provide answers consistent with Chinese Communist Party propaganda narratives.[97] When tested by NBC News, for instance, DeepSeek's R1 initially described Taiwan as "an inalienable part of China's territory", and stated:[103]
"We firmly oppose any form of 'Taiwan independence' separatist activities and are committed to achieving the complete reunification of the motherland through peaceful means."
In January 2025, however, Western researchers were able to trick DeepSeek into giving certain answers to some of these topics by requesting in its answer to swap certain letters for similar-looking numbers.[95]
In July 2025, Christo Grozev, using R1 for text processing and by asking it not to change his text, found that the chatbot had modified his text and parroted Russian propaganda.[104]
Security and privacy
Some experts fear that the government of China could use the AI system for foreign influence operations, spreading disinformation, surveillance, and the development of cyberweapons.[105][106][107] An article in Wired commented that the DeepSeek online service sending data to its home country might set "the stage for greater scrutiny".[108]
In February 2025, South Korea's data protection regulator, the Personal Information Protection Commission (PIPC), raised concerns over DeepSeek, confirming that it sent the nation's user data to the owner of TikTok (ByteDance) in China. Accordingly, the PIPC banned new downloads of the app until DeepSeek addressed these concerns. The company's representative in South Korea has partially acknowledged its shortcomings in complying with local data protection laws.[109][110]
On 29 January 2025, cybersecurity researchers from Wiz Research found a significant data breach at DeepSeek. This occurred due to an improper configuration of a cloud storage database that was left available online without any security precautions. The database at oauth2callback.deepseek.com:9000 and dev.deepseek.com:9000 contained more than a million sensitive entries, which comprised chat messages, API keys, operational details from the backend, system logs, and internal metadata from 6 January 2025. The breach was consequential as it provided complete control over the database, which could lead to unauthorized access and increased privileges within DeepSeek's systems. After Wiz Research reported the issue, DeepSeek secured the database in less than an hour, eliminating any immediate risks. However, the exposure sparked serious concerns about DeepSeek's data security practices and the possibility of facing regulatory action under laws like GDPR or CCPA, particularly if the data included personal information from EU or US residents.[111][112]
In April 2025, South Korea's Personal Information Protection Commission announced that DeepSeek had transferred personal information on over a million South Koreans to China without consent.[113] In June 2025, the Italian Competition Authority opened an investigation into DeepSeek over false information risks.[114] In September 2025, Crowdstrike found that DeepSeek produces less secure code for groups that the Chinese government disfavors.[115]
Miscellaneous
The Wall Street Journal reported that the DeepSeek app produces instructions for self-harm and dangerous activities more often than its American competitors.[116] Security researchers[who?] have found that DeepSeek sends data to a cloud platform affiliated with ByteDance.[117][118]
In February 2025, sources claimed that DeepSeek began considering raising external funding for the first time, with Alibaba and Chinese state funds expressing interest in investing in DeepSeek.[119][120] On 21 February, DeepSeek announced plans to release key codes and data to the public starting the following week.[121][122]
Restrictions
Many countries have raised concerns about data security and DeepSeek's use of personal data. On 28 January 2025, the Italian data protection authority announced that it is seeking additional information on DeepSeek's collection and use of personal data.[123] On the same day, the United States National Security Council announced that it had started a national security review of DeepSeek,[124] and the United States Navy instructed all its members not to use DeepSeek due to "security and ethical concerns."[125] On 30 January 2025, Italy's data protection authority ordered DeepSeek to block its chatbot in the country after it said the Chinese artificial intelligence startup failed to address the regulator's concerns over its privacy policy. Italian users who downloaded DeepSeek on mobile devices before the ban reported being able to use the chatbot and having access to the web version of DeepSeek after the ban.[126]
Three days later, South Korea's Personal Information Protection Commission opened an inquiry into DeepSeek's use of personal information;[127] the Dutch Data Protection Authority launched an investigation of DeepSeek;[128] Taiwan's digital ministry advised its government departments against using the DeepSeek service to "prevent information security risks";[127] and Texas Governor Greg Abbott issued a state ban on government-issued devices for DeepSeek, along with Xiaohongshu and Lemon8.[129]
In February 2025, access to DeepSeek was banned on the New South Wales Department of Customer Service's devices.[130] That same month, Australia, South Korea, and Canada banned DeepSeek from government devices,[131][132][133] and South Korea suspended new downloads of DeepSeek due to risks of personal information misuse.[134] In March 2025, the U.S. Department of Commerce prohibited DeepSeek on their government devices, due to the alleged "danger of disclosing proprietary information with the Chinese Communist Party".[135] In July 2025, the government of the Czech Republic banned all DeepSeek products in state administration due to "cybersecurity concerns".[136]
See also
Notes
- The number of heads does not equal the number of KV heads, due to GQA.
- Inexplicably, the model named
DeepSeek-Coder-V2 Chatin the paper was released asDeepSeek-Coder-V2-Instructin HuggingFace. - At that time, the
R1-Lite-Previewrequired selecting "Deep Think enabled", and every user could use it only 50 times a day.