Blacklisted PLA-Linked Chinese University Bought Nvidia H200 AI Chips, Records Show

admin · November 11, 2026 · 9 min read

An Nvidia H200-style AI chip glowing on a circuit board inside a dark data center server hall

A Chinese university with deep ties to the People’s Liberation Army bought Nvidia’s H200 artificial intelligence chips last month even though it has sat on a U.S. export blacklist for a quarter of a century, procurement records show, exposing the gaps in Washington’s efforts to keep advanced American computing power out of Chinese military-linked hands.

Northwestern Polytechnical University, based in the northwestern city of Xi’an, bought two H200 chips for 874,700 yuan — about $123,000 — according to an October 21 procurement record published on the university’s own website. The chips were bought for its management school from a local supplier, Shaanxi Bosuan Network Technology, rather than directly from Nvidia, Reuters reported on Tuesday, November 11.

The H200 is among Nvidia’s most capable chips for training and running advanced AI systems, and exports of the processor to China require U.S. export license approvals that are normally denied for blacklisted institutions such as Northwestern Polytechnical.

A pattern of purchases, not a one-off

The October purchase was not an isolated transaction. Procurement records show the university also bought access to H200 chips and other powerful Nvidia AI processors this year through five contracts for rented computing capacity from Chinese companies.

In January, the university’s cybersecurity school awarded two seven-month contracts for access to servers containing eight H200 chips each. The contracts, worth 441,700 yuan and 441,000 yuan, covered fine-tuning AI models and reinforcement-learning training — the techniques used to sharpen AI systems for specific tasks.

A separate September 4 notice from the cybersecurity school listed two more H200 cards for 796,000 yuan, bringing the university’s documented H200 purchases this year to at least four chips, plus the rented server access.

The university also rented access to servers containing eight Nvidia A100 chips and eight A800 chips. Both the A100 and the A800 are banned from export to all Chinese entities, making them off-limits even to buyers that are not on any blacklist. In April, another institute at the university bought computing services requiring at least 24 A100 chips in a 375,000-yuan contract for structural and fluid-dynamics simulations.

Northwestern Polytechnical, Nvidia and the U.S. Commerce Department’s Bureau of Industry and Security, which oversees export controls, did not respond to requests for comment, Reuters said. Reuters also said it could not determine contact details for Shaanxi Bosuan Network Technology.

A university on the blacklist since 2001

Northwestern Polytechnical is a member of China’s “Seven Sons of National Defense,” a group of elite defense-focused universities, and conducts research related to military aircraft, missiles and satellites.

The U.S. Commerce Department added the university to its trade blacklist, known as the Entity List, in 2001 over its alleged involvement in missile-proliferation activities and military research. It tightened the restrictions in 2019, making licenses for exports of controlled U.S. technology to the university subject to a policy of denial in most circumstances. Since September 2016, a license has been required to export, re-export or transfer any item subject to U.S. export regulations to the university.

The purchases show how Chinese institutions with military ties continue to obtain U.S. AI computing power through domestic suppliers, either by buying chips outright or by renting access to servers containing them. The records offered scant information about where the processors originated or where the rented servers operated.

A wider market for restricted chips

A Reuters review of 26 Chinese procurement and corporate records from this year found universities and research institutions buying U.S.-restricted Nvidia chips or renting access to Nvidia-powered computing services that use such chips through domestic suppliers. Several had close links to China’s defense industry or military research. The universities named in the records did not respond to requests for comment.

The pattern extends well beyond Northwestern Polytechnical:

Shenzhen University bought three H100 processors, another high-end Nvidia AI chip banned by the U.S., for 769,800 yuan in September.
Wuhan University of Technology bought a server containing an H100 chip for 355,000 yuan in June, and four A100 chips in a separate 344,000-yuan purchase.
Beihang University, another of the Seven Sons of National Defense universities, bought four A800 processors for 489,000 yuan in April. Beihang has close ties to China’s aerospace and defense industries and conducts research for military aviation and space programs.
Two government procurement announcements in July and September named suppliers selected to provide computing services using Nvidia H800 and A800 chips — both restricted from export to China — to the University of Chinese Academy of Sciences. One listed H800 access at 10 yuan per chip-hour. A separate January procurement award named a supplier of six A100 chips worth 484,800 yuan for a Shenzhen-based public institution.

Reuters has previously reported that Chinese institutions acquired restricted Nvidia chips embedded in servers made by Super Micro Computer, Dell and Gigabyte through domestic resellers. It has also documented an underground market in China for restricted Nvidia chips sourced from overseas inventories and third-country intermediaries. Last week, Reuters reported that small quantities of H200 chips had reached China through indirect routes while Beijing withheld approval for large-scale imports.

The January rule change that did not open this door

President Donald Trump’s administration began allowing some H200 exports to China on a case-by-case basis in January 2026. But that policy did not lift the separate restrictions applying to Entity List organizations such as Northwestern Polytechnical.

A January 15, 2026 rule moved qualifying exports of H200 and equivalent chips to end users in China or Macau from a presumption of denial to case-by-case review. The January licensing rules also require safeguards to prevent blacklisted entities and military end users from remotely accessing chips exported under the policy, which covers H200 processors and less advanced models.

In other words, the door Washington opened in January was for vetted civilian buyers, not for a university that has been on the Entity List since 2001. The procurement records suggest that distinction is not holding in practice, at least for small quantities bought through domestic intermediaries.

Why this matters

The findings land as Nvidia and its chief executive, Jensen Huang, face mounting scrutiny in Washington over his lobbying for looser restrictions on sales of AI chips to China, following reports alleging he was targeted by a Chinese spying operation. Nvidia’s board opened an independent investigation into Huang after the reports, and Nvidia shed about $400 billion in market value over two sessions as the fallout deepened.

Huang has argued that continued U.S. sales to China would preserve American technological leadership and keep Chinese customers reliant on U.S. technology. But some U.S. lawmakers say access to Nvidia’s most powerful AI chips can speed China’s development of AI systems for weapons design, intelligence analysis and military modernization.

Both Democrats and Republicans in Congress have urged stronger controls on China’s access to advanced AI chips, such as chip-tracking requirements and greater congressional oversight of exports. Three Republican congressional committee chairmen have requested a briefing with Huang on November 18 over his reported contacts with an alleged Chinese intelligence operative.

The stakes go beyond one university. If a blacklisted institution can buy the chips it needs through a domestic supplier for about $123,000, the export-control system is being tested at its weakest point: not the big, visible shipments that regulators can block, but the small, scattered purchases that add up across dozens of institutions. A Reuters review of 26 records found exactly that kind of pattern, and the controls are part of a wider U.S.-China trade fight in which China’s trade surplus topped $1 trillion in just 10 months.

Latest developments

The H200 findings are the latest in a fast-moving series of disclosures around Nvidia and China. The Information reported on Tuesday that a relationship between Huang and a woman identified as Alice Huang helped facilitate at least $7.5 billion of Nvidia chips reaching Chinese firms since 2023 — about 240,000 H100, H200 and A100 chips — through a network linked to Shanghai Century Litong. Reuters said it could not independently verify that report, which does not say Huang knew of or approved any shipments, and Century Litong has denied doing business with Alice Huang. U.S. officials have concluded that Alice Huang, an executive at the Chinese firm Megaspeed, is a Chinese intelligence asset, according to The New York Times; she has not been charged, and China denies the claims.

For now, the Commerce Department has not said whether it is investigating the Northwestern Polytechnical purchases, and it did not respond to Reuters’ request for comment. The university has not explained how the chips reached it, and the supplier named in the October record, Shaanxi Bosuan Network Technology, could not be reached for comment.

Frequently asked questions

What is the Nvidia H200?

The H200 is one of Nvidia’s most capable data-center chips for training and running advanced AI systems. Because of its performance, the U.S. government subjects H200 exports to China to license approvals, and exports to blacklisted entities are normally denied.

What is the Entity List?

The Entity List is the U.S. Commerce Department’s trade blacklist. Organizations on the list face strict licensing requirements for receiving U.S. technology, and licenses are often denied. Northwestern Polytechnical University was added in 2001 over alleged missile-proliferation activities and military research, and restrictions were tightened in 2019.

How did a blacklisted university get the chips?

According to procurement records reviewed by Reuters, the university bought the chips from a Chinese domestic supplier, Shaanxi Bosuan Network Technology, rather than directly from Nvidia. It also rented access to servers containing H200, A100 and A800 chips from Chinese companies. The records do not show where the processors originally came from or where the rented servers operated.

What happens next?

Congress is pressing for stronger controls, including chip-tracking requirements and greater oversight of exports, and three Republican committee chairmen have requested a briefing with Nvidia CEO Jensen Huang on November 18. Nvidia reports quarterly results on November 17. Whether the Commerce Department investigates the Northwestern Polytechnical purchases remains unclear.

The bottom line

Procurement records show that a Chinese university on the U.S. export blacklist since 2001 bought Nvidia H200 AI chips last month — and rented access to even more restricted processors — through domestic suppliers. The purchases, first reported by Reuters, are small in dollar terms but large in implication: they suggest Washington’s chip controls are leaking at the edges, through the small transactions and rented server time that are hardest to police. With Congress demanding answers and Nvidia’s chief executive facing a briefing on November 18, the question now is whether the U.S. can close those gaps before they widen.