PLA-linked Chinese university bought Nvidia H200 chips despite US blacklist: Report

A Chinese university with deep ties to the People's Liberation Army bought Nvidia's powerful H200 AI chips last month despite being on a US export blacklist, procurement records show, highlighting gaps in Washington's efforts to curb China's access to advanced technology.

The H200 is among Nvidia's most capable chips for training and running advanced AI systems. (REUTERS)The findings come as Nvidia and its CEO Jensen Huang face mounting scrutiny in Washington over his lobbying for looser restrictions on sales of AI chips to China, following reports alleging he was targeted by a Chinese spying operation.

Huang has argued that continued US sales to China would preserve American technological leadership and keep Chinese customers reliant on US technology. But some US lawmakers say access to Nvidia's most powerful AI chips can speed China's development of AI systems for weapons design, intelligence analysis and military modernisation.

Both Democrats and Republicans in Congress have urged stronger controls on China's access to advanced AI chips, such as chip-tracking requirements and greater congressional oversight of exports. Three Republican congressional committee chairmen have requested a briefing with Huang on November 18 over his reported contacts with an alleged Chinese intelligence operative.

Northwestern Polytechnical University, a member of China's "Seven Sons of National Defense" group of elite defence-focused universities, bought two H200 chips last month for 874,700 yuan ($123,000), according to an October 21 procurement record on its website.

The chips were purchased for its management school from Shaanxi Bosuan Network Technology rather than directly from Nvidia, the record shows. The H200 is among Nvidia's most capable chips for training and running advanced AI systems and is subject to US export licence approvals, which are normally denied for blacklisted institutions such as Northwestern Polytechnical.

Northwestern Polytechnical also bought access this year to H200 chips and other powerful Nvidia AI processors through five contracts for rented computing capacity from Chinese companies, procurement records show. Reuters is reporting the chip purchases and computing contracts for the first time.

Northwestern Polytechnical, Nvidia and the US Commerce Department's Bureau of Industry and Security, which oversees export controls, did not respond to requests for comment. Reuters could not determine contact details for Shaanxi Bosuan Network Technology.

Based in the northwestern city of Xian, Northwestern Polytechnical conducts research related to military aircraft, missiles and satellites. The US Commerce Department added the university to its trade blacklist, known as the Entity List, in 2001 over its alleged involvement in missile-proliferation activities and military research.

It tightened the restrictions in 2019, making licences for exports of controlled US technology to the university subject to a policy of denial in most circumstances. Northwestern Polytechnical's purchases show how Chinese institutions with military ties continue to obtain US AI computing power through domestic suppliers, either by buying chips outright or renting access to servers containing them.

A Reuters review of 26 Chinese procurement and corporate records from this year found universities and research institutions buying US-restricted Nvidia chips or renting access to Nvidia-powered computing services that use such chips through domestic suppliers.

Several had close links to China's defence industry or military research. The universities named in the records did not respond to requests for comment. US President Donald Trump's administration began allowing some H200 exports to China on a case-by-case basis in January.

But that policy did not lift the separate restrictions applying to Entity List organisations such as Northwestern Polytechnical. The January licensing rules also require safeguards to prevent blacklisted entities and military end-users from remotely accessing chips exported under the policy, which covers H200 processors and less advanced models.

In addition to the management school's outright purchase of the two H200 chips, procurement records show the university's cybersecurity school awarded two seven-month contracts in January for access to servers containing eight H200 chips each.

The contracts, worth 441,700 yuan and 441,000 yuan, covered fine-tuning AI models and reinforcement-learning training. It also rented access to servers containing eight Nvidia A100 chips and eight A800 chips. The A100 and A800 are banned from export to all Chinese entities, though the H200 is the most advanced of those cited in Northwestern Polytechnical's procurement records.