Moonshot AI seeks to lease Nvidia Blackwell GPUs in Europe

Seeking European capacity

Moonshot AI, the Beijing-based laboratory behind the Kimi models, is reportedly in talks with European neocloud operators to lease Nvidia Blackwell GPUs. The lab is interested in large-scale capacity, specifically looking for clusters of 8,000 or more units. These discussions come as Moonshot faces significant demand for its services, with reports indicating that Kimi's GPU limits were nearly reached in a recent 48-hour window.

The reported deal includes a proposal where Moonshot might pay a 30% to 50% upfront premium compared to non-Chinese customers. This higher deposit would move cash to the European hardware owners early, potentially compensating for the risk that Washington might intervene in the arrangement. While these are reported talks and not a signed lease, they highlight a clear strategy to secure high-end compute power outside of mainland China.

Moonshot's need for such massive scale is driven by the technical architecture of its Kimi K3 model. Because it is a mixture-of-experts system with 2.8 trillion parameters, the model must keep all its experts resident in memory at all times. To serve this model effectively in production, Moonshot recommends using at least 64 accelerators, making the Blackwell generation a primary target for their expansion.

Nvidia's new customer rules

While renting chips abroad is currently legal under U.S. rules, the pressure is shifting toward the companies that own the hardware. Reports from the Financial Times suggest that Nvidia has verbally instructed its data-center partners to direct at least 51% of their services to non-Chinese customers on new contracts. This represents a new shift in how the chipmaker manages its distribution and partner relationships.

Neocloud operators are particularly sensitive to these rules because of how they finance their hardware. Many of these companies borrow money to buy Nvidia chips and then use those same chips as collateral for the loans. If Nvidia restricts their ability to sell to Chinese customers, it could impact their relationship with lenders who hold the chips as security. This makes the owner's relationship with Nvidia a primary factor in who actually gets access to Blackwell time.

Nvidia has not officially confirmed or denied the 51% requirement, but it has stated that American infrastructure must win worldwide to win the AI race. The company also maintains a vetting process for its cloud partners to ensure compliance with export controls. For European neoclouds, Nvidia's new requirements create a layer of friction that they must navigate before they can fulfill requests from international clients like Moonshot.

Legal and regulatory gaps

Under current U.S. Export Administration Regulations, bans typically attach to the items themselves, the end users, and the end uses. Because the Bureau of Industry and Security does not currently consider cloud services as exports, Chinese firms can legally use remote services. This creates a loophole where a Chinese company can access American technology without physically possessing the hardware on Chinese soil.

The U.S. government is aware of this gap and is currently reviewing how Chinese firms reach Nvidia chips overseas. However, it remains unclear if the government has the power to police these specific cloud deals under existing laws. Other companies have already established precedents, such as Tencent renting capacity from a Japanese data center and ByteDance planning to use a cluster in Malaysia. These examples show that remote access is a common path for bypassing direct hardware restrictions.

There is also pending legislation in the U.S. that could change this landscape. The Remote Access Security Act would allow the government to license or penalize remote access to controlled items if it poses a national security risk. If passed, this would create a second layer of compliance for European cloud providers, requiring them to screen customers and obtain specific licenses for remote access by foreign persons.

Data and security implications

Moving the physical servers to Europe does not change the legal jurisdiction of the company providing the service. Because Moonshot is a Beijing-based company, it remains subject to China's National Intelligence Law and Cybersecurity Law. These laws require organizations to cooperate with national intelligence efforts and provide access to data, regardless of where the servers are physically located.

For users of Kimi, this means that the location of the GPU cluster does not necessarily offer a shield against Chinese data laws. Any prompts, uploaded files, or personal information sent to Moonshot-run services remain subject to the company's domestic legal obligations. While self-hosting open weights can keep some prompts off the company's servers, the company itself still operates under Chinese oversight.

Furthermore, the technical performance of the models remains a concern for users despite the move to better hardware. Reports indicate that the Kimi K3 model has a hallucination rate near 51% in some measurements. Securing more Blackwell GPUs may improve the speed and availability of the service, but it does not inherently fix the underlying accuracy issues or the legal risks associated with the data being processed.