Moonshot AI, the Beijing-based developer of the Kimi models, spent this year trying to rent its way around an export control it cannot lobby away.
Four people familiar with the discussions told CNBC on November 5 that the company approached cloud providers running Nvidia hardware in European data centers about leasing clusters of more than 8,000 Blackwell GPUs. The capacity would be used mainly for inference, according to those accounts, with training a possibility rather than the stated purpose. The talks were described as exploratory in some cases and advanced in others.
The reason is simple. Blackwell sits inside US export controls on advanced AI chips, and direct shipment to China is effectively barred. Chinese labs can still buy older silicon that falls below the performance thresholds, but frontier inference and model training increasingly want the newest parts. Renting them in a jurisdiction where they are legal is the workaround, and Europe has become the preferred one because its data center market is deep, its power contracts are long, and its cloud operators have spare capacity that US hyperscalers do not resell to Chinese tenants.
Moonshot is not a marginal customer. Founded in 2023, it became one of the country's largest model developers on the strength of the Kimi series. Kimi K3 launched in July, and the company said demand outstripped its serving capacity so badly that it temporarily stopped accepting new subscriptions in order to protect existing users. A lab that has to turn away paying subscribers has a compute problem, and a compute problem in China in 2026 has only one practical shape: find capacity outside the export fence.
That scarcity is visible in the price. People involved in the discussions said Moonshot indicated it would pay prepayments 30 to 50 percent above what a typical overseas customer pays, in exchange for long-term supply. The premium is not generosity. It is the market price of regulatory risk, and the cloud operators are pricing it deliberately. Several neoclouds have begun demanding larger upfront payments from Chinese buyers specifically to hedge against the possibility that remote access itself gets restricted before the contract ends.
Those operators have reason to be careful. In July, the White House accused Moonshot of reaching Blackwell capacity remotely through facilities in Thailand. Washington has since moved from accusation to legislation. The Remote Access Security Act, which would bring cloud-based use of controlled chips under the same export regime as physical shipments, has passed the House and is awaiting Senate action. If it becomes law, a lease signed in 2026 could become a compliance problem in 2027, and the contractual question of who bears that cost is currently unresolved in most of these deals.
Nvidia has added its own constraint. The company requires GPU rental providers to sell at least 51 percent of their services to non-Chinese customers, a rule intended to keep its installed base from being effectively dedicated to buyers it cannot ship to directly. That caps how much Chinese demand any single lessor can absorb, which in turn strengthens the lessor bargaining position on price and term.
For the European providers, the arithmetic is attractive but uncomfortable. A 30 to 50 percent prepayment premium improves utilization economics on clusters that are expensive to finance and slow to fill. It also puts a Chinese anchor tenant inside a facility that may host regulated data, and it invites scrutiny from investors, insurers and, eventually, export regulators. Some operators have walked away from these conversations for exactly that reason. Others are willing to book the revenue while the rules are still permissive.
The broader signal matters more than any single deal. Export controls were designed around objects crossing borders. Compute increasingly crosses borders as a service, delivered over fiber to a tenant who never touches the hardware. Every tightening of the physical regime pushes demand toward that gap, and every lease signed in Europe is evidence that the gap is being used at scale. The legislation pending in the Senate is an attempt to close it, and the outcome will determine whether the next round of Chinese model development happens on rented foreign capacity or stalls.
For companies that sell compute rather than chips, the lesson is that compliance is now a product feature. Contracts need clauses that allocate the risk of a change in remote-access rules, disclosure requirements on end users, and exit terms that do not require a lawsuit. Lessors that write those clauses will keep the business when the rules tighten. Those that treat a prepayment as sufficient protection will discover that a regulator can make a profitable contract unenforceable.
What to watch is not whether Moonshot eventually signs. It is whether the Senate moves the remote access bill, whether Nvidia adjusts the 51 percent rule, and whether European operators keep signing Chinese tenants after the first enforcement action. Until one of those three changes, the incentive to rent abroad will keep growing, and so will the premium that Chinese labs are willing to pay for the privilege.
