Alpha
Contact
Assess · DeepSeek-V3

Can you own it?

Ownership levelSubstantialnone·limited·partial·substantial·fullAnalytical input C ยท 64.4/100

This page is a projection of the one entry record, the Use & modify and Transparency factors that Assess covers. The full verdict is set by all four factors together, floor-weighted so the weakest caps the whole.

Which domain expands which factor
  • AssessUse & modify + Transparency
  • ImplementData control + Reliability
  • UseReliability
  • SupportTransparency

Intended & out-of-scope use

DeepSeek-V3 (MIT) is the general-purpose instruct line of DeepSeek-V3 as released under a clean MIT licence - the V3-0324 refresh and the V3.1 hybrid generation, both 671B-total / 37B-active Mixture-of-Experts models with a 128K context. It is intended as a general assistant, coding, and analysis engine. It is a separate entry from the original December-2024 DeepSeek-V3 because the licence changed: original V3 weights shipped under the custom DeepSeek License Agreement; V3-0324 and later moved to MIT.

Out-of-scope, in OneHill's read: any use requiring topic-neutral factuality (documented censorship on certain political topics), and any unguarded customer-facing or high-stakes deployment - the lighter safety tuning means the weights must be wrapped in your own safety system. Separate the open weights from DeepSeek's hosted app/API, a different product with its own privacy profile.

Known limitations, bias & failure modes

The distinctive limitation is topic censorship: refusals and steered answers aligned with Chinese content rules on certain political topics. Safety tuning is lighter than at Western frontier labs, known jailbreaks are easier to elicit, and no first-party guard/classifier model ships. V3.1's hybrid reasoning mode adds an output convention you must handle. Recorded factually: this is a China-origin model; some organisations restrict China-origin models by policy - a governance consideration, not a capability judgment.

Openness tier & components

DeepSeek-V3 (MIT) sits in the open_weights tier (dimension ceiling 3). The weights are open and MIT-licensed, and the documentation - a detailed technical report - is a strength. But training data is closed, training code partial, evaluation partial. That mix meets the open-weights anchor rather than the fully-open top anchor.

License terms & what you may do

The V3-0324 and V3.1 weights are released under the OSI-approved MIT License - permissive, with commercial use and modification allowed and no field-of-use restriction. This is a materially more open posture than the original December-2024 V3 weights, which carry the custom "DeepSeek License Agreement v1.0" with RAIL-style use restrictions (that generation is the deepseek-v3-original entry). Confirm you are on a V3-0324-or-later checkpoint to get the MIT grant. The MIT move is what lifts use-and-modify to strong and ownership to substantial.

Supply-chain provenance

The canonical source is the verified deepseek-ai organisation on Hugging Face, distributing safetensors with checksums and no malicious-checkpoint incident on the canonical org (checklist ~5/8). Safetensors is data-only, so loading the canonical weights cannot execute code. Short of a higher score only for the absence of cryptographic signing. The caveat is the sprawling ecosystem of third-party quantizations - separate artifacts whose trust equals their uploader. Pin the revision, verify the checksum, prefer the canonical org.

Open weights vs the hosted service. This entry documents the open weights, run on your own infrastructure with no data leaving your box - distinct from DeepSeek's hosted app and API, which has faced data-privacy scrutiny and bans in several jurisdictions. Those issues are not inherited by locally-run weights but are relevant if you call DeepSeek's own API. Self-hosting the safetensors sidesteps the concern.

EU AI Act posture

DeepSeek-V3 (MIT) is a GPAI model. The V3 technical report cites ~2.788M H800 GPU-hours over 14.8T tokens; at 671B the systemic-risk question is live, but DeepSeek publishes no FLOP budget, so the 1e25 crossing is not a grounded figure. On the licence alone MIT is a real free-and-open-source licence, a strong Article 53 exemption candidate. But the surviving obligations are unmet: no Article 55 documentation, no copyright policy, no training-content summary, and a China-based provider is unlikely to furnish an EU package. For a downstream EU deployer this is a concrete compliance gap despite the permissive licence - legal scores 2 and the grade holds at C.

Benchmarks & evaluation

On public-leaderboard evidence the MIT V3 generations are competitive among large open-weight instruct models. OneHill has not re-run these benchmarks this cycle, so performance is capped at 4 and no specific figures are asserted as verified. Evaluate against your own task before adoption, particularly where topic-neutral factuality matters.

How this scores

The ownership factors this domain covers, drawn from the one entry record.

1

Use and modify freelyCan you run, modify and adapt it with no gate and no field-of-use trap?

Strong

The V3-0324 and V3.1 generations are MIT-licensed (OSI, permissive, ungated), with commercial use and any modifications permitted and no field-of-use limit - a clean permissive grant, so use-and-modify is strong.

How this scores (AOI sub-dimensions)
Openness3/5how much is released - weights, data, code, licence - and how freelyOpen-weights tier: MIT-licensed weights and open documentation via a detailed technical report, but the training data is closed, the training code only partial, and evaluation partial.
Legal2/5how permissive and clean the licence is for real commercial useThe move to MIT is a genuine plus over the original V3 weights, but for EU compliance it is outweighed by the gaps: no Article 55 documentation, no copyright policy, no training-content summary, and at 671B the systemic-risk exemption may be void - a concrete compliance gap for a downstream deployer, despite the permissive licence.
2

TransparencyDo you know what it is: weights, training, behaviour, and legible terms?

Moderate

Weights are inspectable and there is a detailed technical report, but the training data and code are closed, and the weights carry China-aligned topic filtering you cannot inspect - open_weights, so moderate.

How this scores (AOI sub-dimensions)
Provenance3/5how well we can trace and verify what went into the modelVerified deepseek-ai org on Hugging Face, safetensors distribution with checksums and a clear canonical source with no malicious-checkpoint incident (checklist ~5/8).
Governance3/5how accountable and well-documented the publisher isActive, named publisher (DeepSeek) with a verified org and a track record of technical reports, meeting the score-3 anchor.
What this means for adoptionYou substantially own the self-hosted MIT DeepSeek-V3 generations: MIT permits commercial use and modification, and self-hosting keeps your data yours, so use-and-modify and data-control are both strong - ownership is substantial. It stops short of full because the training corpus and code are closed (not reproducible), the weights carry China-aligned filtering you cannot inspect, and there is no first-party guard model. Note the original Dec-2024 V3 weights are the more restrictive deepseek-v3-original entry - confirm you are on a V3-0324-or-later MIT checkpoint. Deploy behind your own guardrails, and treat EU high-stakes use as needing a self-assembled compliance package.

Sources

The same evidence records as the entry sheet. Read means the text was verified; unverified means it is known to exist but not yet read.

Licenceread2026-08-03
DeepSeek-V3-0324 model card / LICENSE, read: the V3-0324 (and later V3.1) weights are licensed under the MIT License - "This code repository and the model weights are licensed under the MIT License." This is a change from the original December-2024 DeepSeek-V3, whose weights use the custom "DeepSeek License Agreement, Version 1.0".
Model cardread2026-08-03
DeepSeek-V3-0324 model card on the verified deepseek-ai HF org: 671B total / 37B active MoE, 128K context, safetensors; V3.1 is a later hybrid-reasoning generation on the same org; first-class serving (vLLM, SGLang, llama.cpp, Ollama) and an extensive community quant ecosystem.
Third-party analysisunverified2026-08-03
On independent public leaderboards the MIT DeepSeek-V3 generations are competitive among large open-weight instruct models (coding, maths, analysis); not OneHill-reproduced this session.
Third-party analysisunverified2026-08-03
Independent analysis notes DeepSeek open-weight models apply China-aligned content filtering on politically sensitive topics, with lighter safety tuning than Western frontier labs and no companion guard model.
Third-party analysisunverified2026-08-03
No public EU AI Act training-content summary, copyright policy, or GPAI documentation package is published for DeepSeek-V3, and the training corpus is not released.