U.S. orders removal of China's Pramana products from federal civilian agencies

The Department of Homeland Security ordered federal civilian agencies to remove Pramana products from their information technology systems. It also barred those agencies from procuring the products or services. The order targets technology developed by Hangzhou Pramana Artificial Intelligence Co. and affiliated entities. It matters because it changes both existing federal systems and future technology purchases.

The restriction is broader than deleting a named application. It includes third-party products and services developed using Pramana implementations. The order therefore addresses technology that may incorporate Pramana tools, rather than only products sold directly by the Chinese startup. The notice says the action followed a recommendation from the Federal Acquisition Security Council and related evidence.

The order applies to federal civilian agencies, not to private businesses or individual users across the United States. Agencies that already use covered products must remove them, while procurement officials must avoid buying covered technology. The notice was scheduled for publication in the Federal Register on Tuesday, following its release on Monday.

Pramana is a Chinese artificial intelligence startup. The article identifies the company as Hangzhou Pramana Artificial Intelligence Co. and says the order also covers its affiliated entities. In practical terms, Pramana develops AI-related information technology products and services. The source does not name specific applications, models, or product categories.

The order covers more than products carrying the Pramana name. It includes third-party products and services developed using Pramana implementations. That wording means the government is treating the underlying implementation as important, not just the company branding. A separate service can therefore fall within the restriction if it was built using covered Pramana technology.

The article gives limited detail about Pramana’s commercial lineup. It describes the company as an AI startup and refers to the Chinese AI service in connection with South Korea’s 2025 restrictions. The U.S. action applies only to federal civilian systems and purchases. It does not establish a general prohibition on Pramana for private users or companies.

The order reaches federal civilian agencies across their information technology systems and procurement activities. It covers products and services developed by Hangzhou Pramana Artificial Intelligence Co. and its affiliated entities. It also covers third-party products and services developed using Pramana implementations. This makes the restriction broader than a ban on one company’s branded software.

For example, an agency cannot simply avoid a Pramana label by buying a separate vendor’s service that was built using a Pramana implementation. The order addresses both installed technology and future purchases. It was issued under the Federal Acquisition Supply Chain Security Act of 2018, after a Federal Acquisition Security Council recommendation and review of related evidence.

The restriction does not apply to every user in the United States. The notice specifically concerns federal civilian agency IT systems and procurements. It does not impose a general ban on private businesses or individuals using Pramana products. The article also does not say that state governments, local governments, or military systems are covered.

Third-party coverage closes an obvious indirect path around the restriction. Without it, an agency might avoid buying a product directly from Pramana while purchasing another service that incorporated Pramana technology. The order treats that underlying implementation as relevant to supply-chain risk. This helps make the restriction consistent across direct and indirect purchases.

The article does not list specific third-party vendors or explain the technical tests used to identify Pramana implementations. It does state that third-party products and services developed using those implementations are covered. The same rule therefore reaches products that may appear under another company’s name but depend on Pramana technology.

This matters for both procurement and existing systems. Agencies must consider how a product was developed, not only who sells it. They must remove covered products already in their information technology systems and avoid procuring covered services. The restriction remains limited to federal civilian agencies, rather than becoming a general U.S. ban.

The Federal Acquisition Supply Chain Security Act of 2018 is the legal authority DHS cited for this order. In the article, it is the framework that allowed the department to restrict certain technology products and services in federal civilian systems and purchases. The source does not provide the law’s full text or every power it grants.

Its use here follows a supply-chain review. The Federal Acquisition Security Council made a recommendation, and DHS reviewed that recommendation along with related evidence. DHS then issued an order covering Pramana products, affiliated entities, and third-party services built with Pramana implementations. The mechanism connects a security assessment to federal procurement controls.

The practical result is twofold. Agencies must remove covered technology already present in their systems, and procurement officials must stop buying it. The act therefore functions as a way to restrict federal technology purchases viewed as a supply-chain concern. The article does not say that the law creates a general consumer ban or applies automatically to private-sector purchases.

Agencies that already have covered Pramana products installed must remove them from their information technology systems. The order also bars future procurement. Together, those requirements affect both current operations and technology planning. Agencies may need to identify covered products, take them out of service, and find replacement tools, although the article does not describe a deadline or replacement process.

The impact can extend beyond a directly branded Pramana product. Third-party products and services built using Pramana implementations are also covered. An agency therefore may need to review how a service was developed, not just the name of the vendor. That requirement can affect interconnected systems when a covered component is part of a broader technology service.

The immediate scope is federal civilian agencies. The order does not impose a general ban on private businesses or individuals in the United States. Its broader technology effect is therefore concentrated in federal civilian IT and procurement. The article does not estimate costs, identify affected agencies, or say how many systems currently use Pramana.

AI supply-chain security means examining the technology, providers, and components that support an AI system. The goal is to understand whether a product could create risks for the organization using it. In this case, the concern reaches Pramana products and third-party services built with Pramana implementations. The order treats the technology chain as part of the security question.

Software developed in another country can create concern when users worry about how data is collected, stored, or accessed. If a tool handles government information, possible leaks or unauthorized access could expose sensitive material. The article links South Korea’s February 2025 restrictions to concerns about user-data collection and potential information leaks. It does not identify a confirmed leak by Pramana.

The U.S. response is a procurement and system-removal order, not a general public ban. DHS acted after a council recommendation and review of related evidence. The approach could lead agencies to examine vendors and embedded technologies more closely. However, the article does not describe specific technical vulnerabilities, investigations, or future U.S. policy beyond this order.