The $5.6 Billion Backdoor: How Blacklisted Inspur Kept Buying Nvidia's Best Chips Through Its American Arm

The United States has spent three years building a fence around its most advanced AI chips. On September 6, The New York Times published an investigation showing how easily that fence is stepped over — not by smugglers in shadows, but by a 270,000-square-foot facility in Fremont, California, operating in plain sight.

The company is Aivres Systems Inc. Until May 2023, it carried a far more familiar name: Inspur Systems Inc. Its parent, Inspur Group, is one of China’s largest server manufacturers and has sat on the US Commerce Department’s Entity List since March 2023 over ties to military-civil fusion programs. In June 2026, the Pentagon added Inspur Group to its Section 1260H list of Chinese military companies. Aivres itself, however, has never been individually listed — and that single administrative gap is doing billions of dollars of work.

What the trade records show

Working with ImportGenius shipping records, the NYT found that Aivres exported at least $5.6 billion worth of advanced technology from the United States to Southeast Asia between April 2024 and February 2026. More than $3 billion of that consisted of computers built around Nvidia’s Blackwell-generation chips — the same class of hardware that export rules formally bar from Chinese hands.

The destination trail matters as much as the volume. The shipments were routed through intermediaries in Southeast Asia that, per the investigation, ultimately served data centers belonging to Alibaba and ByteDance — two of the three Chinese firms with the largest appetite for frontier training compute. In other words, restricted silicon flowed not to a rogue end user, but to the exact customers the controls were written to wall off.

One earlier transaction illustrates the pattern with unusual clarity. In November 2025, Aivres sold 32 server racks built on Nvidia’s Blackwell architecture — roughly 2,300 GB200 processors — to Indonesian telecom operator Indosat Ooredoo Hutchison for approximately $100 million. Reporting at the time traced how that compute became accessible to a Chinese AI company renting capacity from the Indonesian firm. The deal was, by the letter of then-current rules, entirely legal: the license trigger sat on the shipping address, and the shipping address was Jakarta.

Why the loophole existed

The architecture of US export controls is fundamentally entity-based: restrictions attach to named companies, named individuals, and named end users. When a subsidiary incorporates as a legally distinct US entity, rebrands after its parent’s blacklisting, and buys through normal commercial channels, it can fall outside the scope of a list built for its parent.

Aivres is roughly one-third owned by Inspur, according to the investigation’s description of the ownership structure. It continues to collaborate with Nvidia and AMD, and has showcased AI solutions at Nvidia’s GTC conference. It reportedly offers Nvidia- and AMD-based AI server platforms at prices around 30% below comparable Western and Taiwanese systems — a competitive edge born substantially of regulatory ambiguity, since a blacklisted rival cannot bid at all.

The scale is not trivial. Aivres signed a lease on over 270,000 square feet in Fremont dedicated to AI infrastructure production. This is not a shell company moving pallets through a free zone; it is a substantial manufacturing and integration operation inside the United States, staffed and shipping at industrial volume.

The response — and its limits

Regulators have not been entirely passive. On May 31, 2026, the Commerce Department’s Bureau of Industry and Security issued guidance closing the “overseas subsidiary” route: export licenses are now required for advanced computing items sold to entities headquartered in China — or whose parent company is headquartered in China — even when those entities operate abroad. Reuters reported at the time that the clarification implied hundreds of thousands of chips may already have flowed through the gap, and senators blasted the administration over the scale of prior leakage.

But the May guidance addresses the offshore case. The Aivres case is in some ways harder: an American-incorporated company, on American soil, buying American-origin chips and exporting them to third countries. The NYT investigation notes that the window it documents runs through February 2026 — before the new guidance — leaving open the question of what, exactly, the current rule reaches. Meanwhile, the Trump administration this year approved Maginfra, another firm flagged with overlapping risk indicators, for an H200 license, suggesting that enforcement appetite remains uneven even after the rules tightened.

Why it matters

The stakes here go well than one company’s revenue. Export controls are the West’s primary policy instrument for slowing Chinese frontier AI development, and their credibility depends on the gap between the written rule and the observable flow of chips. Every billion dollars of Blackwell compute that reaches Alibaba or ByteDance data centers through a legal side door partially cancels the intended effect of the entire regime — while imposing real costs on Nvidia’s licensed China business and on US allies navigating compliance.

There is also a market-distortion effect. Aivres undercuts legitimate integrators by roughly 30% while carrying the backing of a blacklisted parent. Western and Taiwanese server builders compete against a firm whose advantage is precisely the ambiguity of its status. That is a strong incentive for others to seek the same structure.

The structural lesson is uncomfortable: entity-list enforcement assumes the restricted actor stays put. When blacklisting a parent effectively invites its subsidiary to rebrand in Fremont, the control regime needs to pivot from naming entities to analyzing ownership chains, beneficial control, and end-use verification — or accept that lists alone will keep leaking. The NYT’s $5.6 billion accounting is, on the evidence so far, a floor rather than a ceiling.