The House Homeland Security and CCP select committees sent DoorDash a July 31 letter demanding documents on its use of Chinese open-weight AI models — after a co-founder posted that routing work to Moonshot's Kimi was cheaper and better.

San Francisco-based DoorDash spent the last week of July learning that a cost-cutting engineering post can become a national-security file. On July 31, the House Committee on Homeland Security and the House Select Committee on the Chinese Communist Party sent the company a joint letter demanding information and documents about how it evaluates and deploys AI models built in China, according to CNBC, which reviewed the request. The letter went to co-founder and CEO Tony Xu.

The trigger was documented in public, by DoorDash itself. Co-founder and CTO Andy Fang had posted that the company introduced open-weight models into its AI code reviewer without degrading quality — "have the frontier model do the hardest work, delegate lower-level work to Kimi," the model from Beijing-based Moonshot AI, while reserving Anthropic's frontier model for harder tasks. His framing, per CNBC: better quality, cheaper cost. That is the entire case against him, and it is his own words.

What the letter is matters. This is a congressional document request, not a subpoena and not an enforcement action — the committees are chaired by Andrew Garbarino (R-NY) and John Moolenaar (R-MI), and a committee aide told CNBC the panels are also probing whether the U.S. has any real strategy for open-weight models at all. That last part is the tell. Open-weight models are downloaded and self-hosted; a company running Kimi on its own servers is not necessarily piping user data to China the way an API call would. Whether DoorDash's setup actually moves any data offshore is precisely the question the letter has not answered — and neither has DoorDash.

The company isn't retreating. A spokesperson told CNBC it "looks forward to engaging with the Committees" on how it uses AI "safely and responsibly," including both American frontier models and open-weight models. Read that as: we're keeping the setup.

DoorDash is one name in a wider sweep. The same two committees opened this line of inquiry on April 29 with letters to Airbnb, which uses Alibaba's Qwen, and to Anysphere, whose Cursor coding tool is built on Moonshot's Kimi; the broader probe also names DeepSeek and MiniMax. DoorDash (NASDAQ: DASH) is a public company, so what surfaces here is disclosure-visible in a way a startup's wouldn't be.

Unsettled and worth watching: the committees have not published a response deadline, the enumerated list of documents they want isn't public, and no one has shown that a single byte of U.S. customer data reached a Chinese server. The story so far is a letter, a post, and a gap between them.