Blacklisted Chinese University Bought H200s

A Chinese defence-linked university on the US Entity List bought two Nvidia H200 chips in an October 21 procurement, according to a Reuters report carried by Al Jazeera. The buyer, Northwestern Polytechnical University in Xi’an, paid 874,700 yuan, about $123,000, for the pair through Shaanxi Bosuan Network Technology rather than directly from Nvidia.

That is the useful number first: roughly 437,350 yuan per chip, before anyone starts pretending export controls are a clean wall instead of an obstacle course with resellers.

The H200 sits near the sharp end of Nvidia’s AI lineup for training and running advanced systems. US rules require export licence approval for such chips, and the policy for Entity List organisations such as Northwestern Polytechnical is normally denial. The university was added to the list in 2001 over alleged missile-proliferation activity and military research, with restrictions tightened in 2019.

Northwestern Polytechnical is not just another campus with a machine-learning lab and a talent for grant applications. It is one of China’s “Seven Sons of National Defense” universities, a group closely associated with the country’s defence-industrial base. Its research areas include military aircraft, missiles and satellites. In other words, this is the category of end user export hawks worry about most, not the one they mutter about for television and then quietly wave through.

The procurement record said the chips were for the university’s management school. That detail may be true and still fail to reassure anyone. AI hardware does not lose its capabilities because an invoice lands in the hands of an administrative faculty. Compute is portable, fungible and very easy to describe politely on paperwork.

Reuters also found the university had bought access during the year to H200 chips and other Nvidia processors through five separate contracts for rented computing capacity from Chinese companies. That matters because it widens the story beyond one suspicious purchase. If blacklisted institutions can buy chips outright through domestic suppliers and rent access to servers loaded with the same restricted hardware, then the control point is not where Washington keeps saying it is.

The Trump administration began allowing some H200 exports to China on a case-by-case basis in January, but that did not remove the separate restrictions on Entity List buyers such as Northwestern Polytechnical. So the policy baseline is not ambiguous. The issue is not whether some H200s may legally enter China. It is whether a university that should face a presumption of denial still managed to get them anyway.

Reuters reviewed 26 Chinese procurement and corporate records from this year showing universities and research institutions either buying restricted Nvidia chips or renting access to Nvidia-based computing services through domestic suppliers. Several had close links to China’s defence industry or military research.

That leaves Nvidia in the familiar position of being both the indispensable supplier and the official nonparticipant. The chips in this case were not sold directly by Nvidia, based on the procurement record. But Washington’s problem is no longer just what leaves an American company’s loading dock. It is whether the rules stop military-linked end users from obtaining the compute after it enters wider commercial channels. On that evidence, the answer looks expensive, but not especially difficult.