AI chips: Washington also looks at the buyer's headquarters, not just its warehouse

In short

• On 08/11, NVIDIA's board launches an independent investigation and says it has "no reason to believe that either national security or NVIDIA secrets were compromised". Three Republican committee chairs ask Jensen Huang to appear at a closed-door briefing on 18/11.
• At the centre of the story is Megaspeed, a Singapore-based cloud and NVIDIA customer. According to the New York Times, as cited by CNBC, it was suspected of helping companies get around US export controls. NVIDIA says those allegations were "debunked". Our sources mention no charges.
• The rule, restated on 31/05/2026 by the BIS, the US office that controls exports: a US licence is required to export advanced AI chips to a company headquartered in China, or whose ultimate parent is, even if it is located elsewhere. And sellers are not allowed to look away.

Six paragraphs signed by NVIDIA's board

Today's exhibit is six paragraphs long, dated 08/11. NVIDIA's board announces an independent investigation "in light of recent reporting" that Jensen Huang, its founder and CEO, has been the target of a foreign intelligence effort. A committee of independent directors oversees it, with outside counsel. Jensen Huang commits to cooperating. The board says it has confidence in him. No other name appears in the text.

Four days earlier, on 04/11, three lawmakers had written to Jensen Huang: Brian Mast (Foreign Affairs), John Moolenaar (Select Committee on China) and Rick Crawford (Intelligence). They want a closed-door briefing on NVIDIA's protections against espionage and on his interactions with Alice Huang. The letter calls her a "Megaspeed executive" and "a publicly reported People's Republic of China (PRC) intelligence asset". Proposed date: 18/11. Answer requested by 11/11. It is a request for a briefing, not a court summons.

Megaspeed, the story traced back to 2025

Megaspeed is a Singapore-based cloud: a company that rents out computing power remotely. It is an NVIDIA customer.

October 2025. According to the New York Times, as cited by CNBC, the US Commerce Department is looking into whether Megaspeed skirted export controls. The paper adds that it bought nearly 2 billion dollars' worth of NVIDIA's most advanced products through its subsidiary in Malaysia, and that it was using its NVIDIA chips in data centres in Malaysia and Indonesia that appeared to be serving customers in China remotely. On 10/10/2025, Singapore police confirm an investigation into "suspected breaches of our domestic laws". NVIDIA says at the time it found no "reason to believe products have been diverted": in its view, Megaspeed runs "a small commercial cloud", "as allowed by U.S. export control rules".

On 29/10/2026, the story grows. According to the New York Times, as cited by CNBC and the BBC, US intelligence suspects Alice Huang, a Chinese businesswoman linked to Megaspeed, of gathering information on NVIDIA for Beijing. She is also known as Huang Le, and is no relation to Jensen Huang. On 06/11, the same paper added, according to CNBC, that officials in the Trump administration had received a memo last spring with intelligence identifying her as recruited by China's Ministry of State Security.

The responses. NVIDIA: Jensen Huang's interactions with Alice Huang "are not unusual or unexpected", a customer like Megaspeed receives "ordinary business information - not sensitive Nvidia trade secrets - and zero information relevant to national security". As for the diversion allegations, they "were thoroughly investigated and debunked last year". Investigated by whom, NVIDIA does not say. Megaspeed told the New York Times its current leadership took the allegations seriously, had appointed external legal advisers to conduct an internal investigation, and had told the US government it was willing to cooperate. Alice Huang did not respond to the paper. On 30/10, Chinese foreign ministry spokesman Guo Jiakun said the report was "based on groundless speculation and is nothing more than an attempt to smear China".

In everything I read: no charges, no court ruling.

The 31/05/2026 reminder: headquarters count, not just addresses

The BIS (Bureau of Industry and Security) is the office of the US Commerce Department that decides which products leave the United States, and for whom. Since October 2022, it has controlled exports of advanced computing chips, the ones used to train AI. Its reason, in black and white: they can enable military-intelligence and weapons of mass destruction end uses.

On 31/05/2026, the BIS cleared up a doubt. To export these chips to a company headquartered in China (or Macau), or whose ultimate parent is headquartered there, you need a US licence, unless a licence exception provided for in the regulations applies. Even if the company itself is located elsewhere.

Take an imaginary company. It opens a data centre in Paris. Its parent company is headquartered in Shanghai. To deliver these chips to it in Paris, the seller must apply for a licence, just as for a delivery to China. The delivery address changes nothing. The BIS looks at who owns the buyer.

Why the reminder? The rule dates from 17/11/2023. A January 2025 reform had moved it, then in May 2025 the BIS said it would not enforce that reform's new compliance requirements. Hence the doubt. Answer: the 2023 rule still applies.

Not everything is shut, though. On 14/01/2026, Donald Trump announced that sales of the H200 to China would be approved, an NVIDIA chip already surpassed by two generations, Blackwell and Rubin, as he pointed out. Among the conditions: the US government takes 25% of sales, and shipments to China are capped at half of those going to US customers. For every 100 chips shipped to US customers, 50 at most for China. According to CNBC, Chinese regulators then prevented their import.

Three routes for a chip, according to the BIS

The BIS itself names the ways Chinese operations seek to obtain these chips: transshipment, diversion, and access to data centres equipped with them. Put simply, three routes:

• The detour through a third country. The chip is declared for one country, then moves on: that is transshipment.
• The front buyer. The one who signs is not the one who uses: a shell company, an intermediary, a virtual office.
• Remote access. The chip does not move. It stays in a data centre outside China, and a Chinese customer rents its power over the internet.

The third route is the grey area, in CNBC's words in 2025. Renting computing power is not banned as such, according to NVIDIA, which did not directly address the claim about customers in China being served remotely. But for the BIS, training AI models for companies headquartered in China may require a licence when the seller or provider has "knowledge" that the model will be used for a military-intelligence or weapons of mass destruction end use.

What the BIS advises sellers to check

The BIS guidance of 13/05/2025 lists red flags. I picked four:

• the company "has little to no presence online or there are differences between the English and non-English versions of the company's website";
• the declared end user has no premises of its own, for example "a legal office, a virtual office, a shipping and receiving company";
• the seller cannot determine whether the customer or its ultimate parent is headquartered in China, or the customer refuses to say;
• the customer renting out computing power "does not or cannot affirm that users of its services are not headquartered in the PRC".

That is what the guidance is for: checking before selling. The BIS prohibits going ahead with a transaction when there is knowledge that a violation has occurred or is about to, and exporters "may not self-blind to avoid license requirements". It recommends a written attestation from the data centre, on-site visits or audits, and additional scrutiny for data centres of 10 megawatts or more. Without authorisation, a violation may lead to civil or criminal enforcement.

NVIDIA says it visited several Megaspeed sites in 2025, one of the practices the BIS recommends. What those visits found, I only have NVIDIA's version. The checklist is there. The verdict belongs to the investigators.

What we don't know yet

• Whether Jensen Huang will appear on 18/11. An answer is requested by 11/11. Asked by the New York Times, NVIDIA's spokesman declined to comment.
• What the board's investigation will find. The board promises updates "as appropriate".
• Where the Megaspeed investigations stand. Singapore police called theirs "ongoing" in October 2025. Our sources do not say whether it is closed, nor what became of the Commerce Department's.
• What Alice Huang allegedly passed on, if anything. The BBC writes that it is unclear what, how valuable, or since when. Nor how closely she remains involved with Megaspeed.

Verdict: for Washington, a chip does not need to go to China to require a licence. It is enough for its customer, or the customer's parent, to be headquartered in China. I read the rule. The Megaspeed case, for its part, has not been judged.

Key terms

• BIS (Bureau of Industry and Security): the US Commerce Department office that controls sensitive exports.
• Export control: a rule saying which products may leave a country, to whom, and on what terms.
• Export licence: the written authorisation a seller must obtain before shipping a controlled product.
• Parent company: the company that owns another one. A subsidiary in Paris can have its parent elsewhere.
• Transshipment: routing goods through a third country before their real destination.
• Shell company: a company that buys on behalf of another, with no real business of its own.
• Cloud: a service that rents out the computing power of its servers remotely.
• Closed-door briefing: a session before lawmakers, closed to the public and the press.
• H200, Hopper, Blackwell, Rubin: the H200 is an NVIDIA chip of the Hopper generation; Blackwell and Rubin are two newer, more powerful generations.
• Megawatt: one million watts, a measure of electrical power.

Source sheet

• NVIDIA board of directors: statement of 08/11/2026.
• House of Representatives: press release of 05/11/2026 and letter of 04/11/2026 from Brian Mast, John Moolenaar and Rick Crawford.
• BIS: guidance against diversion of chips and policy statement on training models (13/05/2025), licence reminder (31/05/2026).
• Press: CNBC (10/10/2025, 14/01/2026, 29/10/2026, 08/11/2026) and BBC (30/10/2026), which also report New York Times information.
• Links: NVIDIA board statement · House Foreign Affairs Committee letter · BIS guidance of 31/05/2026

Source passages

Pages read on 09/11/2026 around 00:30-00:50 UTC (dated copies kept in the article folder). Amounts in US dollars. New York Times articles not read (paywalled): only what CNBC or the BBC attribute to them is reported.

Show the 10 sources

Ref.	Quote (original language)	URL
S1↑1↑2↑3↑4	"November 8, 2026" ; "The NVIDIA Board is initiating an independent investigation in light of recent reporting that founder and CEO Jensen Huang has been the target of a foreign intelligence effort." ; "A committee of independent directors, assisted by outside independent counsel, will oversee the investigation." ; "While the Board has no reason to believe that either national security or NVIDIA secrets were compromised, the Board's inquiry will examine all available information." ; "Jensen fully supports the review and has committed to cooperating with it." ; "The Board has confidence in Jensen and his leadership team and will provide further updates as appropriate."	https://nvidianews.nvidia.com/news/statement-from-nvidia-board-of-directors
S2↑1↑2↑3↑4	"House Foreign Affairs Committee Chairman Brian Mast, Select Committee on China Chairman John Moolenaar, and House Permanent Select Committee on Intelligence Chairman Rick Crawford sent a letter to NVIDIA CEO Jensen Huang requesting that he appear before their committees for a joint, closed-door briefing on Huang's interactions with Megaspeed executive Alice Huang, a publicly reported People's Republic of China (PRC) intelligence asset, and NVIDIA's security protocols against foreign adversary espionage." ; "the Chairmen have requested that Mr. Huang brief the committees on November 18, 2026, and asked that he accept the date or provide an alternative session date by November 11, 2026." ; lettre "November 4, 2026"	https://foreignaffairs.house.gov/news/press-releases/chairmen-mast-moolenaar-and-crawford-request-jensen-huang-brief-congress-on-link-to-chinese-intelligence-asset
S3↑1↑2↑3↑4↑5↑6	"According to the Times report, which cited people briefed on intelligence surveillance, Alice Huang, who is linked to the Singapore-based cloud Megaspeed" ; "Intelligence agencies worried that she was a spy, helping the Chinese government gain information from Nvidia and Jensen Huang" ; "saying that Singapore-based Megaspeed is another one of the company's regional cloud customers, and that Jensen Huang's interactions with its officials are not unusual, because he speaks with thousands of customers every year" ; "The report also alleged that Megaspeed was previously suspected of helping companies evade U.S. export controls" ; "The diversion allegations against this regional cloud were thoroughly investigated and debunked last year" ; "Earlier this year the U.S. government cleared Nvidia's H200 chip to be shipped to China, but Chinese regulators prevented their imports."	https://www.cnbc.com/2026/10/29/nvidia-jensen-huang-chinese-intelligence-asset.html
S4↑1↑2↑3↑4↑5↑6+3	"Singapore authorities are investigating artificial intelligence computing firm Megaspeed, a customer of American AI chipmaker Nvidia, for allegedly helping Chinese companies evade curbs on U.S. chip exports." ; "The Singapore Police Force confirms that investigations are ongoing into Megaspeed for suspected breaches of our domestic laws" ; "the New York Times reported Thursday that the U.S. Commerce Department was also investigating whether Megaspeed skirted American export controls" ; "without identifying \"any reason to believe products have been diverted.\"" ; "NVIDIA visited multiple Megaspeed sites yet again earlier this week and confirmed what we previously observed—Megaspeed is running a small commercial cloud, like many other companies throughout the world, as allowed by U.S. export control rules" ; "Megaspeed, which spun off from a Chinese gaming company in 2023, bought nearly $2 billion worth of Nvidia's most advanced products through its subsidiary in Malaysia." ; "Singapore had launched a separate probe into the alleged smuggling of restricted Nvidia chips, which were declared bound for Malaysia but may have been diverted elsewhere, including China." ; "Chinese companies have also exploited a legal gray area by tapping into computing power from data centers in Southeast Asia equipped with restricted Nvidia chips, according to recent reports." ; "Megaspeed was using its Nvidia chips for data centers in Malaysia and Indonesia, which appeared to be remotely serving customers in China, according to the Times." ; "Nvidia didn't directly address this claim"	https://www.cnbc.com/2025/10/10/singapore-us-investigate-nvidia-client-megaspeed-export-controls-violation.html
S5↑1↑2↑3↑4	"Today's news will not slow NVIDIA. Jensen is committed to continuing to lead NVIDIA as CEO without interruption" ; "while Democratic lawmakers separately called for an investigation or testimony" ; "Policymakers in the Trump administration received a memo last spring with intelligence identifying Alice Huang as having been recruited by China's Ministry of State Security [...], the Times first reported on Friday." ; "When asked by the Times whether Huang would appear before lawmakers to discuss the matter, Nvidia spokesman John Rizzo declined to comment."	https://www.cnbc.com/2026/11/08/jensen-huang-nvidia-china-spy-congress.html
S6↑1↑2↑3↑4↑5↑6+2	"advanced computing integrated circuits (ICs) [...] which have been subject to BIS export restrictions since October 2022" ; "BIS has determined that advanced computing ICs have the potential to enable military-intelligence and weapons of mass destruction (WMD) end uses." ; "address PRC operations inside and outside of China and Macau that seek to acquire advanced ICs through transshipment and diversion, and by accessing datacenters with advanced ICs" ; red flags 4, 5, 8, 11 : "has little to no presence online or there are differences between the English and non-English versions of the company's website" ; "You are unable to determine whether the headquarters of the customer or its ultimate parent is located in a destination specified in Country Group D:5 (including China) or Macau, or the customer refuses to disclose" ; "is not a unique storefront for that organization (for example, a legal office, a virtual office, a shipping and receiving company)" ; "The customer providing Infrastructure as a Service (IaaS) does not or cannot affirm that users of its services are not headquartered in the PRC" ; "Request a written attestation from the data center" ; "It is also a best practice that suppliers conduct on-site visits at the data center, or alternatively, utilize independent third-party certified auditors" ; "greater than 10 megawatts. Data centers at or above this threshold merit additional scrutiny"	https://www.bis.gov/media/documents/ai-counter-diversion-industry-guidance-may-13-2025.pdf
S7↑1↑2↑3↑4↑5	"The following activities may trigger a license requirement under the catch-all controls of part 744 of the EAR when there is \"knowledge\" [...] that the SI model will be used for a WMD or military-intelligence end use/user" ; "to conduct training of SI models for or on behalf of parties headquartered in D:5 countries (including China) or Macau" ; "Parties that do not obtain prior BIS authorization to engage in these transactions or activities may be subject to potential civil or criminal enforcement action if a violation of the EAR occurs." ; "Parties are prohibited from proceeding with a transaction when parties have \"knowledge,\" [...] that a violation has occurred, is about to occur, or is intended to occur. Exporters, reexporters, and transferors also may not self-blind to avoid license requirements."	https://www.bis.gov/media/documents/ai-policy-statement-training-ai-models-may-13-2025
S8↑1↑2↑3↑4	"[May 31, 2026]" ; "a license is required to export advanced computing items to entities headquartered in Country Group D:5 [...] or Macau or with an ultimate parent company headquartered in Country Group D:5 or Macau – even if the entities themselves are located outside Country Group D:5 or Macau." ; "This license requirement was first introduced on November 17, 2023." ; "In January 2025, the AI Diffusion Rule transferred the requirement" ; "In May 2025, BIS announced that it would not be enforcing the AI Diffusion Rule's new compliance requirements." ; "The answer is yes." ; "Exporters should continue to seek BIS licenses for such transactions, unless a license exception specified in § 740.2(a)(9)(ii) is available." ; "Bona fide operators of data centers who are otherwise engaged in activities consistent with the EAR are not required to cease the ongoing use, storage, disposal, or servicing of advanced computing items because of this guidance, until further notice from BIS."	https://www.bis.gov/media/documents/bis-guidance-may-31-2026.pdf
S9↑1↑2↑3↑4↑5↑6+1	"US intelligence officials believe that Alice Huang, a Chinese businesswoman linked to Singapore-based data centre firm Megaspeed, was gathering information for Beijing on the US chip-making giant, according to a report by The New York Times." ; "who is of no relation to Jensen Huang" ; "Alice Huang did not respond to the paper's request for comment." ; "who is also known as Huang Le" ; "It remains unclear what information Alice Huang [...] allegedly passed to Beijing, how valuable it was, or when she is believed to have begun gathering intelligence." ; "The report in question is based on groundless speculation and is nothing more than an attempt to smear China." ; "Jensen's interactions with Ms Huang are not unusual or unexpected" ; "receive ordinary business information - not sensitive Nvidia trade secrets - and zero information relevant to national security." ; "Megaspeed told the paper its current leadership took the allegations seriously and had appointed external legal advisers to conduct an internal investigation. The company also said it had informed the US government that it was willing to cooperate." ; "It is unclear how closely Alice Huang remains involved with Megaspeed."	https://www.bbc.com/news/articles/ckgj9plnlxdeo
S10↑1↑2↑3	"President Donald Trump on Wednesday said that his administration will approve China sales of Nvidia's H200 chip for artificial intelligence, but the U.S. government will take 25% of sales" ; "the H200 is a version of the company's Hopper generation" ; "the rule change had some requirements, including that the exporter certifies that there is sufficient supply of the H200 chips in the U.S." ; "the H200's performance has been exceeded by two generations of Nvidia chips currently in production, naming Nvidia's Blackwell and Rubin AI chips." ; "Shipments of the chips to China would be capped at 50% the total product shipped to U.S. customers."	https://www.cnbc.com/2026/01/14/trump-nvidia-h200-china-ai-chips.html