Inspur's Renamed US Arm Kept Buying Nvidia's Best AI Chips

Three years ago, the U.S. Commerce Department placed Inspur Group, one of the world's largest server makers, on its Entity List, the government's blacklist for companies deemed a national-security risk. The listing was supposed to cut Inspur off from American technology, including Nvidia's most advanced AI chips. It did not. A New York Times investigation, based on trade records reviewed with the data firm ImportGenius and reported by Inside AI News, found that Aivres, a Silicon Valley company that is legally Inspur's renamed U.S. subsidiary, exported at least $5.6 billion in advanced American technology between April 2024 and February 2026 — more than $3 billion of it computers built around Nvidia's cutting-edge Blackwell chips. The shipments moved through Southeast Asia and, according to the same trade records, onward to data centers and technology firms serving China's largest AI companies, including Alibaba and ByteDance.

What the Entity List Actually Blocks

The Bureau of Industry and Security's Entity List is the core tool Washington uses to stop sensitive American technology reaching companies it judges to be security threats. Once a company is listed, U.S. suppliers need a special license — rarely granted for advanced chips — to sell it anything covered by export-control rules. What the list does not automatically do is reach every corporate relative of a listed company. When Inspur Group was added in March 2023 for allegedly seeking U.S. technology to build military supercomputers, its U.S. subsidiary was not named. Within two months, that subsidiary quietly dropped the name Inspur Systems for Aivres Systems. On paper, Inspur Group holds only a one-third stake in Inspur Electronic, which wholly owns Aivres — a layer of separation that has so far kept Aivres off the same blacklist that stopped its parent from buying anything at all.

A Renamed Office and a Company That Doesn't Answer Its Door

Aivres is not the only link in the chain. Trade records examined by ImportGenius show a Chinese company called Maginfra, founded last year and based a few streets from Inspur's headquarters in Jinan, imported more than $700 million worth of servers from Malaysia into China in six months — including over 1,500 units priced in line with high-end AI hardware. Maginfra has no ownership tie to Inspur on paper, but corporate filings show its parent's legal representative previously held roles at Inspur-affiliated firms, and patent records list inventors who once worked at Inspur. When a reporter visited Maginfra's registered address, the office was empty — a few chairs and desks behind a locked door, with building staff saying they had never seen anyone use it. Despite that, the Trump administration approved Maginfra this year for a license to buy Nvidia's less powerful H200 chips, and Maginfra separately signed a $165 million contract to sell high-performance computing gear to a division of a Chinese state-owned bank.

• Corporate renaming: Inspur's U.S. subsidiary dropped the Inspur name for Aivres two months after the parent was blacklisted in March 2023.
• Ownership layering: Inspur Group holds only an indirect, one-third stake in the entity that owns Aivres, keeping the subsidiary off the Entity List.
• Shell companies: Maginfra, a newly founded Chinese firm with Inspur-linked staff and patents, imported over $700 million in servers from Malaysia in six months.
• Remote cloud access: Chinese firms have reportedly trained models on Nvidia GB300 chips housed in Thai data centers without ever owning the hardware, a gap current export rules do not cover.

It's very hard to look at this and not see a state-sponsored Chinese network for bypassing export controls.

Why Washington Keeps Missing the Gap

The pattern points to an enforcement problem as much as a legal one. Inside the Commerce Department, ten months have passed without a single company added to the Entity List — the longest gap in 18 years, according to current and former officials cited by Inside AI News. Officials say the administration has grown more cautious about expanding the blacklist after an earlier attempt drew retaliation threats from Beijing in 2025. On May 31, 2026, the Bureau of Industry and Security issued guidance clarifying that license requirements follow a company's ultimate parent, wherever headquartered, regardless of which subsidiary places the order — a rule the agency says has technically applied since November 2023, yet Aivres has still not been added to any list. In Congress, the Remote Access Security Act, which would extend export controls to cloud-rented chips rather than only chips a company owns outright, passed the House in January 2026 but remains stalled in the Senate, according to CNBC. 'Are they trying to ban them, or are they not?' asked Jordan Nanos, an analyst at SemiAnalysis who has studied Aivres's operations, noting the subsidiary runs the same servers, staff and offices as its blacklisted parent. Nvidia spokesperson John Rizzo said the company does not support 'diverted products' and sells only to partners that work to stay compliant with export rules.

What This Changes for the Chip Supply Chain

For companies that sell, ship or install AI hardware, the Aivres case is a warning that compliance now has to look past the name on the purchase order. A buyer's ultimate parent, ownership chain and shared staff or offices can matter more than which legal entity signs the contract — and regulators have shown they will publish that history after the fact rather than block it in advance. Distributors and cloud operators working with Southeast Asian data centers face a similar exposure on remote compute access, an area regulators are actively trying to bring under license requirements. Until the Senate acts on the Remote Access Security Act or the Bureau of Industry and Security adds new names to its list, the compliance burden for closing these gaps sits mostly with the sellers themselves.