Invest1 distinct publisher3 min readPublished
Export controls have governed who holds a chip rather than who logs into it. A draft that could reach AI companies in September would change that. The deals already done show what offshore capacity was priced to earn.
The Investor · Invest desk
Compiled by The InvestorSomething wrong?How this is made
Two numbers already in the record price this channel. Tencent's December deal, $1.2 billion for access to 15,000 B200 chips through a Japanese cloud provider [12], works out at $80,000 a chip of contracted access [1], while the Indonesian facility where Carnegie found INF Tech training on roughly 2,300 leading-edge Blackwells sits on servers Indosat bought for about $100 million [9][10], or roughly $43,500 a chip of hardware [2]. Contracted access, in other words, clears at about 1.8 times the host's cost per box [3]. The term of the Tencent contract is not in the source, so the per-chip-year figure is unavailable; at a four-year term it would be $20,000 [4], and I would defend the order of magnitude rather than the assumption.
This is deliberate design, not an accident of drafting. Moonshot AI was accused of tapping GB300 systems in Thailand after Kimi K3 shipped, and analysts said it had broken nothing, because it never held the hardware [6]; Cassia King of the Institute for AI Policy and Strategy puts the gap as policy that controls physical AI chips and does not cover remote access to them [7]. An offshore rack has therefore always been worth what its permitted tenant list allows, and the tenant list is what the Bureau of Industry and Security is now drafting [1][3].
It is worth stating plainly what the office is actually doing here. Having scrapped the AI Diffusion Rule in 2025 on the grounds that it would have stifled American innovation and saddled companies with burdensome new regulatory requirements [5], BIS is steering clear of country caps on advanced chip sales [4]; it is regulating who logs in rather than where the machines sit, which is cheaper to write and considerably harder to verify.
Any reprice that follows will show up in the spread rather than in the value of the asset itself. At least eleven state-linked Chinese entities have sought restricted US technology by this route [13], Alibaba and ByteDance have reportedly trained recent models in Southeast Asian facilities [11], and the regional data center market hosting that compute is projected to top $30 billion by 2030 [14] - a total the source supplies without the Chinese-linked share, which is exactly the line a lender to a Thai or Indonesian operator now wants.
The counter-thesis is Oren Etzioni's, and it is a serious one: the founding chief executive of the Allen Institute for Artificial Intelligence argues that if the Remote Access Security Act passes, foreign customers who currently buy American cloud compute may instead begin patronizing China, costing the United States revenue and long-term influence [17]. If he is right, the demand hole at a Bangkok or Jakarta facility is wider than the Chinese slice of the book. The White House, meanwhile, says the administration has already implemented the most rigorous export control regime in modern history [8] - a claim that sits oddly next to an agency about to publish something sweeping.
This is probably wrong, but I think the repricing does not wait for the rule. Circulation of the draft to AI companies and other stakeholders as early as September [2] is enough to attach a compliance discount to offshore capacity let to Chinese tenants, because RASA's own mechanism puts the verification duty on the cloud provider [16] and providers price duties they cannot fully discharge. Two ways it plays out otherwise: the duty becomes a KYC line item and the trade continues at a wider spread, or the rule ships narrow and the racks re-let to non-Chinese tenants at the same rate. The re-let rate is the evidence that settles it.
Ranked by verification strength, evidence, and original report placement.
The Trump administration is drafting a rule that would stop Chinese companies from renting American AI chips through data centers in other countries; the Commerce Department's Bureau of Industry and Security has been working on the draft and is also the office in charge of chip export licensing.
Remote rental of American AI chips sited abroad is a channel that current US export controls do not cover.
BIS scrapped the AI Diffusion Rule in 2025, saying it would have "stifled American innovation and saddled companies with burdensome new regulatory requirements."
Cassia King, a senior researcher on the Compute Policy team at the Institute for AI Policy and Strategy, said existing US policy "controls physical AI chips" and "does not cover remote access to those chips."
The White House said the administration "has implemented the most rigorous export control regime in modern history."
In November 2025 it was reported, according to the Carnegie Endowment for International Peace, that Shanghai startup INF Tech was training AI on roughly 2,300 leading-edge Blackwell chips housed in an Indonesian data center.
Distinct publishers with included, body-backed reporting in this cluster.
1 article · August 28, 2026
Follow any of these and your For You feed starts watching them — no settings page required.
invest
The chips never move: Washington's fix for the Southeast Asia compute loophole1 distinct publisher
build
H200s reach China at 2.5% of the order book, and Hong Kong holds the rest2 distinct publishers
product
Baidu's AI line grew 25 percent and still lost the arithmetic1 distinct publisher
product
Nvidia's H200 finally lands in China at about 1% of the order book2 distinct publishers
Evidence-backed comparisons of source perspectives and observed adoption signals. Read the methodology
Which Builder, Operator, and Investor concerns the observed source mix emphasized—not a truth score.
Evidence, demonstrated adoption, hype gap, incentives, and confidence are assessed independently, each on its own current evidence. How these are measured.
One outlet, three good quotes, unsourced arithmetic
Everything reaches the reader through Cryptopolitan alone, and the piece is strongest exactly where it quotes someone: Cassia King of the Institute for AI Policy and Strategy on what the controls actually reach, the White House defending its record, Etzioni's published objection, and the Indonesian arrangement that Carnegie described and Indosat characterised in its own words. The lines doing the heaviest work carry no attribution at all — Tencent's $1.2 billion for 15,000 B200s, the eleven state-linked entities, the $30 billion 2030 market — and the September timing comes from people who are not named.
The workaround is shipping; the rule is a draft
Two things here are moving at very different speeds. Renting offshore compute is already ordinary commerce: 2,300 Blackwells for INF Tech in Indonesia, 15,000 B200s contracted by Tencent through Japan, Alibaba and ByteDance training in Southeast Asia, Moonshot accused of reaching GB300s in Thailand. The response meant to catch all of that is an unreleased Commerce draft plus a bill halfway through Congress — nobody has yet had to comply with anything.
Repricing announced before the rule exists
$80,000 a chip is division, not reporting — 1.2 billion over 15,000 — and both inputs sit in a sentence with nothing behind them. Nor does anything in this coverage show a repricing having happened: the draft has not circulated, so the offshore racks are still earning what they were contracted to earn. The loophole itself is real and quotably confirmed; the overstatement is in treating a price tag derived from one unverified contract as the market's new number.
Almost every voice is defending something
Read the quotes for what each party is protecting. Indosat, roughly $100 million into the servers, wants it on record that its tenant never touches hardware. The White House, whose own bureau scrapped the Biden diffusion rule, calls the present regime the most rigorous in modern history. Etzioni warns that broader controls send foreign buyers to Chinese clouds — an argument aligned with the American cloud market his field runs on. And unnamed people describing a September draft have every reason to set expectations before the text lands.
Direction solid, numbers thin
The mechanism is safe to rely on: controls follow the chip, not the login, said on the record and consistent with every example given. Past that, confidence drops fast — a single publisher, a headline price we derived ourselves, no contract term anywhere (the four-year annualisation is our supposition, not Cryptopolitan's), and a rule whose text nobody outside Commerce has seen.