🔍 Read the full analysis: Tracing The Nvidia H200 Servers Rented By A US-Blacklisted Chinese University on ThorstenMeyerAI.com
Get business pricing on office and shipping supplies
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
Archived procurement notices show Northwestern Polytechnical University awarded two contracts in January 2026 to rent servers equipped with eight Nvidia H200 GPUs each. The university is on the U.S. Commerce Department’s Entity List, but the records do not establish where the servers were located, how the chips reached China, or whether a U.S. export license applied.
Archived procurement notices show that Northwestern Polytechnical University, a Chinese institution on the U.S. Commerce Department’s Entity List, awarded two contracts in January 2026 to rent servers carrying eight Nvidia H200 GPUs each. The records document access to the hardware, not its location, origin, ownership or export-licensing status, leaving open how the arrangement fits U.S. controls on the university.
The two award notices were posted by the university’s School of Cyberspace Security on January 28, 2026. Copies preserved by the Internet Archive’s Wayback Machine on March 15 specify an “NVIDIA HGX H200 8-GPU SXM” server configuration, with 141 gigabytes of memory per card. The notices are no longer available on the school’s website, according to the source report.
One contract, for computing services for reinforcement-learning fine-tuning of a large model, is valued at 441,000 yuan and covers February 16 to September 16, 2026. The other, for multitask fine-tuning of a large model, is valued at 441,700 yuan and runs from February 1 to August 31. Both notices describe the service as server rental and name Shenzhen-based suppliers. They do not identify where the servers are hosted or where the GPUs were obtained.
The first notice says the system can provide 24-hour access and continuous operation. That wording indicates the contracted service was intended to offer ongoing computing access; it does not establish that the university owned the machines or that the equipment was physically on campus. The source report omits supplier names and personal contact details listed in the notices.
Export controls · buying vs. renting
Shipping the chips is controlled. Renting time on them is the open question.
How a university on the US Entity List can use Nvidia H200 chips without owning them, step by step.
Schematic
export of chipsunknown or reportedremote access
What the records and rules show
- 1Buying: exporting chips to a listed buyer needs a US license. For this university the policy is a presumption of denial.
- 2Reported, not verified: Reuters and AFP describe H200 purchase notices that were removed. We found no archived copy.
- 3Renting: the chips sit in a supplier’s server. How they got there is not in the records.
- 4Remote access: two notices dated January 28, 2026 award server rentals with eight H200 chips per server, for 441,000 and 441,700 yuan.
- 5The January 2026 H200 rule bars Entity List parties from remote access, but only as a condition on licensed exports.
Sources: eCFR, 15 CFR 744.11 and Part 744 Supplement No. 4 (as of November 10, 2026); Federal Register, 91 FR 1684 (January 15, 2026); NWPU School of Cyberspace Security award notices of January 28, 2026 (Wayback Machine copies); Reuters, November 11, 2026; AFP, November 12, 2026. Schematic, not a map of real locations. Not legal advice.
Graphic: Powered by Thorsten Meyer AI
How Server Rental Tests Export Controls
The records draw attention to a distinction at the center of this case: renting computing capacity is not the same as purchasing chips, but rental can still provide a customer access to advanced hardware. For researchers and policymakers, the notices raise questions about how export controls apply when a listed institution uses servers supplied by another company rather than importing or owning the accelerators itself.
The university’s Entity List entry requires a license for all items subject to the Export Administration Regulations, with a policy of “Presumption of denial.” The rules cited in the source report cover export, reexport and in-country transfer when a listed entity is a party to a transaction. But the archived notices alone do not establish that a covered item was exported or transferred in a way requiring a license, nor do they show whether any license was issued. The records are evidence of contracted access, not proof of an export-control violation.
The distinction matters because the H200 is a high-performance data-center accelerator used for demanding AI workloads. The projects named in the notices involve fine-tuning large models. The contracts therefore show that the university sought substantial computing resources for AI-related work, while leaving unresolved the route by which the specified hardware was made available.
Products Worth Considering
Dell UltraSharp U2724DE 27-Inch WQHD IPS Black Monitor
Samsung 32-Inch Movingstyle Essential 4K UHD Smart Monitor with Adjustable Rolling Stand
Canon SELPHY CP1500 Wireless Compact Photo Printer Bundle with RP-108 Ink and Paper Set, White
As an affiliate, we earn on qualifying purchases.
The Entity List and January H200 Rule
Northwestern Polytechnical University, based in Xi’an, has been on the U.S. Commerce Department’s Entity List since 2001. The entry cited in the source report applies to all items subject to the EAR and states a license review policy of “Presumption of denial.” Under the regulation quoted in that report, a license is required, to the extent specified in the listing, for export, reexport or in-country transfer of covered items when a listed entity is a party to the transaction. The cited rule also addresses entities owned 50 percent or more by a listed party.
The source report also points to a January 15, 2026, Commerce Department rule that changed the license review policy for certain semiconductor exports to China and Macau and set conditions for H200 shipments. It says those conditions address remote access and cloud infrastructure-as-a-service users for licensed shipments. The available source text does not provide the full rule or enough detail to determine how its provisions apply to these specific rental contracts.
Reuters reported on November 11 that the university had awarded the two seven-month H200 rental contracts. Reuters also reported that the university rented additional servers using Nvidia A100 and A800 chips, describing five computing-rental contracts in total that year. The source report says it had not seen the other rental notices. Reuters and AFP separately reported purchases of H200 cards, but those purchase notices had been removed and the report’s author found no archived copies. Those purchases are therefore attributable to the agencies’ reporting, not independently verified from preserved records.
“The system “can guarantee 24-hour access and continuous operation.””
— Northwestern Polytechnical University School of Cyberspace Security, in the first archived award notice
Server Location and Licensing Remain Unknown
The two archived notices do not say where the servers were located, who owned the H200 chips, where the hardware was manufactured or how it reached China. They also do not identify whether the suppliers, a cloud provider or another party obtained a U.S. license. Without those details, the notices do not establish whether the specific arrangement complied with or violated U.S. export controls.
Separate reports about outright purchases should be treated with additional caution. Reuters reported that an October 21 procurement record showed the university’s management school buying two H200 chips for 874,700 yuan. AFP reported a September 4 notice showing the cybersecurity school buying two more for 796,000 yuan. The source report says both notices were no longer accessible and that it found no archived copies, so it could not independently verify those transactions.
It is also unclear whether the two rental contracts were performed exactly as specified, whether the university used all of the contracted computing time, or whether the rented servers were shared with other customers. The records describe contract awards and service periods; they do not provide operational logs, shipping documents, license records or a response from the university or suppliers.
Further Records Needed to Trace the Hardware
The next reporting step is to establish the servers’ location and supply chain, and to determine whether any export, reexport or in-country transfer occurred under a license. That would require records beyond the award notices, such as shipping documents, hosting information, supplier disclosures and relevant licensing records. The notices themselves do not provide those answers.
Additional archived procurement records could also help clarify the broader pattern of rentals and the separately reported H200 purchases. For now, the two preserved notices provide a documented account of contracts specifying eight-GPU H200 servers, while the hardware’s route and the regulatory status of the arrangement remain unconfirmed.
Key Questions
What do the archived notices confirm?
They show that Northwestern Polytechnical University’s School of Cyberspace Security awarded two server-rental contracts on January 28, 2026. Each specifies a server configuration with eight Nvidia H200 GPUs and a service period of about seven months.
Do the notices prove the university owned H200 chips?
No. They describe server rental, not a purchase by the university. The records do not say who owned the GPUs or where the servers were located.
Do the records establish an export-control violation?
No. The university’s Entity List status and the rules governing covered items are documented, but the notices do not establish how the equipment reached the servers, whether a relevant transfer occurred, or whether a license applied or was obtained.
What is known about reported H200 purchases?
Reuters and AFP reported separate purchases of H200 cards by the university. The source report says the underlying notices were no longer available and no archived copies could be found, so those purchases were not independently verified from the preserved records.
Source: ThorstenMeyerAI.com
