DOJ Clears TikTok for Government Use After Algorithm Secured in Oracle Cloud, 80.1% US-Owned

For cybersecurity teams tasked with securing federal devices, the DOJ's green light for TikTok marks a pivotal moment in supply chain risk management. The joint venture that moved the algorithm into Oracle's U.S. cloud and gave domestic investors majority control is designed to sever data backdoors, but the 19.9% ByteDance stake and the app’s Chinese origins keep the threat model alive. What the memo leaves unaddressed is as important as what it authorizes.

The U.S. Department of Justice reversed a years-long ban on Friday, announcing that federal employees may now download TikTok on government devices. The decision flows from a January 2026 corporate restructuring that shifted control of the app’s U.S. user data and core recommendation algorithm into the hands of a domestically governed joint venture, TikTok USDS. The DOJ’s legal opinion, addressed to President Trump, asserts that the current version of the application “does not pose risks” to national security, effectively closing a chapter that began with a 2022 prohibition and a 2024 divestiture law—the latter upheld by the Supreme Court but never enforced. Approximately 200 million Americans use the short-video platform, making this policy pivot both a significant workforce change and a landmark moment in the broader debate over Chinese-owned technology.

“

Under this structure, American and global investors collectively hold 80.1% equity, while ByteDance retains a non-controlling 19.9% minority stake.

The original ban, enacted in 2022, prohibited executive-branch employees from having TikTok on any government-issued device. It reflected deep concerns in Congress and national security circles that ByteDance, TikTok’s Beijing-based parent, could be compelled under Chinese law to share user data or manipulate content. Those fears intensified with the April 2024 passage of the Protecting Americans from Foreign Adversary Controlled Applications Act, which required ByteDance to divest its U.S. assets by January 19, 2025, or be removed from app stores. The Supreme Court upheld that law, but President Trump opted not to enforce it, citing his political following on the platform and a pending alternative deal.

The alternative turned out to be TikTok USDS Joint Venture LLC, finalized in January 2026. Under this structure, American and global investors collectively hold 80.1% equity, while ByteDance retains a non-controlling 19.9% minority stake. Oracle, one of the venture’s lead investors, will host and secure the content recommendation algorithm within its U.S. cloud infrastructure. TikTok USDS is responsible for retraining, testing, and updating that algorithm solely on American user data, walling it off from ByteDance’s global systems. The DOJ memo dismisses the residual minority stake, saying it “makes no practical difference,” indicating that operational control is firmly in U.S. hands.

The practical outcome for the roughly 2.1 million federal civilian employees is immediate: agencies may now permit TikTok on official devices at their discretion, so long as it aligns with general workplace and cybersecurity policies. The memo explicitly notes that President Trump instructed agencies to allow downloads, leaving implementation to individual departments. For HR and IT departments, this triggers an urgent review of acceptable-use policies, mobile device management (MDM) configurations, and employee training modules that until now classified TikTok as a prohibited application. Agencies must weigh the morale and communication benefits—many employees already use TikTok on personal phones—against the productivity and distraction risks inherent in a hyper-engaging app.