AI Chips and Export Controls: The 2026 BIS Rules and What Technology Companies Must Do

The Bureau of Industry and Security has spent the past two years constructing the most complex export control framework in a generation — one designed specifically to prevent advanced AI semiconductor technology from reaching adversaries capable of using it to develop military AI. For technology companies, chip manufacturers, cloud providers, and data center operators, the result is a compliance landscape that is simultaneously more flexible and more demanding than what existed before.

In January 2026, BIS issued a final rule revising the license review policy for exports of advanced AI chips — including the NVIDIA H200 and AMD MI325X — to China and Macau. The rule replaced a near-total presumption of denial with a case-by-case review framework, but layered onto that opening a set of KYC, testing, and volume requirements that make the path to compliance genuinely demanding.

This post walks through what the 2026 BIS rules actually require, who they apply to, what Know Your Customer obligations mean in the AI chip context, and what cloud providers and data center operators must do to stay on the right side of one of the most aggressively enforced regulatory frameworks in U.S. law.

The Regulatory Background: How We Got Here

Understanding the current rules requires a brief look at how the AI chip export control framework developed.

Export controls on advanced semiconductors with AI training applications have been in place in various forms since October 2022, when BIS first imposed license requirements on high-performance chips destined for China. The controls targeted chips above specific performance thresholds measured by Total Processing Performance (TPP) and memory bandwidth — parameters designed to capture the chips needed for large-scale AI model training.

The Biden administration’s AI Diffusion Rule, issued as an interim final rule in January 2025, attempted to establish a global, tiered framework for controlling AI chip diffusion. It was complex, broad, and controversial. In May 2025, the Trump administration rescinded it, two days before its compliance requirements were set to take effect.

The rescission of the AI Diffusion Rule did not mean the end of AI chip export controls. BIS simultaneously issued compliance guidance making clear that existing controls on advanced computing integrated circuits remained in full force and that enforcement would continue. The guidance specifically identified red flags that BIS considered indicators of diversion risk — patterns of behavior suggesting chips were being routed to prohibited destinations through intermediaries.

In January 2026, BIS formalized the current framework with a final rule published in the Federal Register on January 15, 2026. The rule represents the current state of the regulatory landscape.

What the January 2026 Final Rule Does

The January 2026 final rule has two core effects:

First, it shifts the license review standard for certain AI chips destined for China from presumption of denial to case-by-case review. Under the prior policy, license applications for H200-equivalent and MI325X-equivalent chips going to China faced a presumption that they would be denied. The new rule changes that presumption for chips meeting specific technical thresholds, allowing licenses to be reviewed on the merits — provided the exporter meets a series of conditions.

Second, it establishes a detailed set of certifications and conditions that exporters must satisfy to benefit from the case-by-case review policy. These are not formalities. They include substantive business, technical, security, and compliance requirements that have direct operational implications for chip manufacturers, distributors, and downstream buyers.

The technical threshold for the revised policy applies to chips with Total Processing Performance (TPP) of less than 21,000 and total DRAM bandwidth of less than 6,500 GB/s. This threshold includes the NVIDIA H200 and AMD MI325X.

The Four Conditions for Case-by-Case Review Eligibility

To qualify for the more favorable case-by-case review standard, exporters must demonstrate four conditions:

1. U.S. Supply Protection

Exporters must demonstrate that exports to China will not reduce the global semiconductor production capacity available to U.S. customers. Specifically, the volume of chips shipped to China in the covered performance tier cannot exceed 50% of the exporter’s U.S. sales volume for the same product line. This cap is designed to ensure that domestic supply is not being deprioritized to serve Chinese demand.

Practically, this means exporters must maintain records of both U.S. and China-bound shipments, calculate compliance with the 50% volume cap on an ongoing basis, and document that compliance at the time of each license application. Companies that have historically served Chinese customers at volumes approaching or exceeding their U.S. sales will need to restructure their sales allocations or accept that the case-by-case policy does not apply.

2. Know Your Customer (KYC) Requirements

Chinese purchasers must have adopted and maintained documented export compliance and customer screening procedures. BIS expects these programs to include end-use monitoring and records of downstream distribution. Exporters are responsible for verifying that their Chinese counterparties have compliant KYC programs in place — meaning the export compliance obligation does not end at the sale.

For chip exporters with established Chinese customers, this requirement means conducting due diligence on the customer’s compliance infrastructure, not just on the customer’s identity and business purpose. A Chinese purchaser that lacks documented end-use monitoring creates a diversion risk that falls back on the exporter.

For new customer relationships, the KYC requirement means that sales and compliance teams must work together on customer onboarding — obtaining documentation of the customer’s compliance program, evaluating its adequacy, and maintaining records of that evaluation.

3. Third-Party Testing

Every shipment must undergo verification by an independent U.S.-based testing entity to confirm that the chips meet their declared specifications and have not been modified. This condition addresses a specific enforcement concern: chips that have been modified to exceed the declared performance threshold while being shipped under documentation that describes them as falling below it.

The third-party testing requirement adds cost and time to every China-bound shipment of covered chips. Companies that have not previously used independent testing entities for chip verification will need to establish those relationships. The testing requirement also means that shipment timelines must account for testing lead times, which affects order fulfillment and customer relationships.

4. A 25% Tariff

Separately from the BIS export control framework, the White House announced a 25% tariff on covered chips exported to China, effective January 14, 2026. The tariff applies to the same performance tier as the revised export review policy — meaning H200 and MI325X chips shipped to China face both the licensing regime and the tariff. The combined financial impact is significant: companies exporting covered chips to China must factor tariff costs into their pricing models.

Know Your Customer in Depth: What It Actually Requires

The KYC requirements under the 2026 BIS framework are more demanding than the phrase “know your customer” might suggest in other regulatory contexts. This is not just due diligence at the time of sale. It is an ongoing compliance obligation that includes:

Customer identity verification. Exporters must verify the identity of their customers, including the ultimate beneficial owner of the purchasing entity. Shell companies, intermediaries, and front companies are among the red flags BIS has specifically identified as diversion indicators.

End-use verification. Exporters must verify that the stated end use of the chips — whether data center computing, cloud services, research, or commercial AI applications — is consistent with the customer’s actual business and facilities. A stated data center end use from a purchaser that does not operate data centers is a red flag.

End-user screening. Customers must be screened against BIS’s Entity List, Denied Persons List, and Unverified List, as well as against OFAC’s Specially Designated Nationals list. These lists are updated frequently, and a customer who passed screening at the time of sale may subsequently be added to a list. Ongoing monitoring is part of the compliance obligation.

Third-country routing awareness. BIS has specifically identified third-country intermediaries as a primary vector for chip diversion. Exporters must understand and document the chain of distribution through which chips will reach their end users. Shipments routed through third countries — particularly Malaysia, Singapore, Thailand, and other Southeast Asian jurisdictions that have appeared in documented diversion cases — require heightened scrutiny.

Downstream distribution records. For Chinese customers that are distributors rather than end users, exporters must obtain records of downstream distribution — who the chips will be resold to, and under what end-use conditions. This requires flow-down KYC obligations in contracts with Chinese distributors.

Cloud Providers and Data Center Operators: Specific Obligations

The 2026 BIS framework places specific obligations on Infrastructure-as-a-Service (IaaS) providers and cloud service providers that use covered chips to offer compute access. These obligations reflect a recognition that export controls on physical chips can be circumvented if access to the computational capacity of those chips is freely available over the internet.

IaaS end-user verification. Cloud providers offering access to compute clusters that include covered chips must identify remote end-users in countries of concern and implement compliance mechanisms to block unauthorized access. The obligation is not just to screen customers at account creation — it is to identify where computational access is actually flowing and to ensure that access is not reaching restricted end users.

The specific IaaS prohibition. The ultimate consignee of covered chips must certify that it will not, without prior BIS authorization, use those chips to provide IaaS access for training AI models classified under ECCN 4E091 for entities headquartered or located outside AI Authorization Countries (or whose ultimate parent is headquartered outside those countries). This means a cloud provider that has received covered chips under a license or exception cannot simply offer that compute to any customer globally — it must ensure that covered AI training workloads are not being run for restricted entities.

The “substantial risk” red flag. BIS issued guidance identifying a “substantial risk” faced by IaaS providers that support AI model training for entities headquartered outside Tier One Countries. That guidance specifically recommends that IaaS providers determine whether their customers intend to export the AI models trained on covered chips. The training of AI models using covered chips, followed by export of those models to restricted destinations, is itself a potential export control violation.

Practical compliance for cloud providers. Cloud providers operating under these obligations should implement customer intake processes that specifically assess AI training workload intent, maintain records of which customers are running AI training workloads at scale (as opposed to inference or general computing), and establish monitoring protocols for unusual patterns of computational access that may indicate unauthorized use by downstream parties.

Enforcement: The Consequences of Getting It Wrong

BIS export control violations are not administrative technicalities. The enforcement record from 2025 and early 2026 illustrates the severity of the consequences:

In July 2025, coordinated DOJ and BIS penalties exceeding $140 million resolved illegal exports of semiconductor design technology to Chinese entities supporting military supercomputer development. In December 2025, DOJ’s Operation Gatekeeper disrupted a network responsible for at least $160 million in AI chip exports to mainland China and Hong Kong through front companies. In January 2026, a $1.5 million settlement with a European company resolved unlawful in-country transfers of semiconductor manufacturing items to an Entity List foundry. In February 2026, a $252 million BIS settlement — the second-largest standalone penalty in BIS history — was imposed for illegal exports of semiconductor manufacturing equipment to China through a South Korean subsidiary.

A March 2026 indictment charged U.S. citizens and a Chinese national with using a Thailand-based front company to acquire and illegally export controlled chips. The use of third-country fronts is among the most commonly prosecuted diversion patterns.

Civil penalties under the Export Administration Regulations can reach $360,000 per violation (or twice the value of the transaction, whichever is greater). Criminal penalties for willful violations can include imprisonment of up to 20 years per count. BIS has publicly stated that it views existing civil penalties as an insufficient deterrent and has sought Congressional authority to raise the ceiling to $1.2 million per violation.

What Technology Companies Must Do Now

Map your supply chain for covered chips. The compliance framework applies not just to chip manufacturers but to anyone in the distribution chain. Identify every point at which covered chips move through your business — purchasing, inventory, distribution, resale, and end use.

Build a KYC program specifically calibrated to chip export controls. General-purpose anti-money-laundering KYC programs are not sufficient. AI chip export KYC must include Entity List screening, end-use verification, beneficial ownership identification, third-country routing analysis, and downstream distribution monitoring.

Implement the 50% volume cap tracking. If you export covered chips to China, you need a system that tracks the ratio of China-bound to U.S.-bound shipments and can produce documentation of compliance. This should be an automated compliance system, not a manual calculation.

Establish third-party testing relationships before you need them. Third-party testing of chip shipments to China is now a condition of case-by-case review eligibility. Companies that have not established relationships with BIS-acceptable testing entities should begin that process.

For cloud providers: implement AI training workload monitoring. If your infrastructure includes covered chips, you need to understand what your customers are doing with that compute. AI training workloads at scale, particularly for customers in or associated with countries of concern, require heightened scrutiny.

Train sales and business development teams. Export violations frequently originate in sales processes, where business development pressure creates incentives to complete deals without adequate compliance review. Sales and BD staff who handle chip or cloud compute sales should receive specific training on export control red flags and escalation procedures.

Review your contracts for flow-down obligations. Export control compliance obligations should flow down through distribution agreements and cloud services agreements to end users. Contracts with Chinese distributors and cloud customers should include representations regarding end use, compliance program maintenance, and downstream distribution.

The Bigger Picture

The AI chip export control framework is not static. BIS continues to update the Entity List, issue new guidance on red flags, and pursue enforcement actions against diversion networks. The January 2026 final rule represents the current equilibrium, but the competitive dynamics between U.S. technology policy and Chinese AI development will continue to produce regulatory adjustments.

For technology companies, the key insight is that export control compliance in the AI chip context is now a core business function — not a niche legal obligation that can be delegated to a single compliance officer and revisited annually. The stakes, as the enforcement record demonstrates, are severe enough to require ongoing investment in systems, training, and procedures that scale with the business.

This post is for general informational purposes only and does not constitute legal advice. Reading this post does not create an attorney-client relationship. If you have questions about your specific situation, consult a qualified attorney.