Dr. Alex Wissner-Gross’s September 7 issue of The Innermost Loop carried one sentence that should stop any business owner who ships hardware, software, or components across a border. Aivres — described as the renamed US arm of blacklisted Chinese server maker Inspur — reportedly moved $5.6 billion of advanced hardware into Southeast Asia, $3 billion of it Blackwell systems, while a Chinese state shell operating out of an empty office took $700 million in unlabeled servers and a US license for H200 chips. The reporting is The New York Times’. The legal problem is yours.
Search the Entity List for “Aivres.” You get nothing. Not one hit.
What You’ll Learn
- Why a clean name-match against the Entity List is not a compliance defense
- The two red flags already on the books that cover the renamed-affiliate problem
- The November 10, 2026 Entity List deadline most businesses have not calendared
- What the knowledge standard actually requires of your sales team
- Concrete steps to take in the next sixty days
What the Aivres Story Means for Your Business
Here is what we confirmed directly in the regulations rather than taking on faith.
Inspur Group Co., Ltd. has been on the Entity List since March 6, 2023, added by 88 FR 13673 for “acquiring and attempting to acquire U.S.-origin items in support of the China’s military modernization efforts.” Its listing carries a presumption of denial. Six more Inspur entities were added on March 28, 2025 at 90 FR 14046, under a policy of denial: Inspur (Beijing) Electronic Information Industry Co., Ltd.; Inspur Electronic Information Industry Co., Ltd.; Inspur Electronic Information (Hong Kong) Co., Ltd.; Inspur (HK) Electronics Co., Ltd.; Inspur Software Co., Ltd.; and Inspur Taiwan.
Read that second name twice. Inspur Electronic Information Industry Co., Ltd. is the listed flagship, and its Entity List entry carries the aliases “Inspur Information,” “IEIT Systems Co. Ltd.” and “IEII.” A buyer who introduces itself as IEIT Systems is a listed party. A screening list that does not carry aliases will not tell you that.
“Aivres” appears nowhere in the current Entity List at Supplement No. 4 to Part 744. It has never appeared in the Federal Register at all.
That gap is the whole lesson. A US distributor, contract manufacturer, freight forwarder, or reseller who typed the customer name into a screening tool, got a clean result, and shipped would have done exactly what most small and midsize companies understand compliance to be. And a clean screen, standing alone, is not what the Export Administration Regulations ask of you.
This is not an exotic problem reserved for chip companies. If you sell industrial equipment, lab instruments, drone components, networking gear, encryption software, or machine tools — or if you are a bank, insurer, or logistics provider touching those deals — the same rules reach you. So does the same penalty schedule.
The Legal Impact: 6 Entity List Rules That Bind US Businesses
1. A clean name-match is a starting point, not a defense
Nothing in the EAR says “screen the name and you are done.” The obligation runs to knowledge, not to paperwork. The Commerce Department’s own “Know Your Customer” guidance at Supplement No. 3 to Part 732 puts it plainly: absent red flags, “there is no affirmative duty upon exporters to inquire, verify, or otherwise ‘go behind’ the customer’s representations.” But “when ‘red flags’ are raised in information that comes to your firm, you have a duty to check out the suspicious circumstances.”
So the question is never “did the Entity List screen come back clean.” The question is what else your company already knew.
2. Two red flags already cover the renamed-affiliate problem — and neither is suspended
This is the finding worth the read. Commerce added red flags 24 and 25 to its official list in the same rule, 89 FR 96790, effective December 2, 2024. Both describe the renamed-entity fact pattern almost literally.
Red flag 24 fires when a new customer’s “senior management or technical leadership… overlaps with an entity on the Entity List… particularly if the supplier previously provided the same or substantially similar item or service to the Entity List entity, most likely prior to the listed entity being added to the Entity List.”
Red flag 25 fires when a new customer requests “an item or service that was designed or modified for an existing or former customer that is now designated on the Entity List,” raising the flag that the new customer “has assumed the operations” of the listed one. On that flag Commerce does not hedge: “The exporter, reexporter, or transferor must resolve this Red Flag before proceeding with the transaction.”
In our reading, a company that sold to Inspur before March 2023 and then picked up a new customer with familiar engineers ordering familiar boxes is looking at both flags. That is our argument, not a quotation from Commerce — the preamble to 89 FR 96790 frames the new flags around advanced computing and semiconductor equipment.
What is not arguable is that neither flag is suspended. Part 732 carries exactly one effective-date note, and it reaches only paragraph 29. Flags 24 and 25 stand today. Note the status they have: the supplement says on its face that this “guidance does not change or interpret the EAR.” But red flag 25 still tells you that you “must resolve” it before proceeding, and an unresolved red flag is exactly what supplies “knowledge” under General Prohibition Ten.
3. The Entity List reaches the transaction, not just the buyer — and license exceptions are off
15 C.F.R. § 744.11(a) requires a license, “to the extent specified on the Entity List,” to export, reexport, or transfer any item subject to the EAR when a listed entity “is a party to the transaction as described in § 748.5(c) through (f) of the EAR.” Two things follow. The requirement is entry-specific — read the actual Entity List row, not a summary of it. And “party” is a defined set: purchaser, intermediate consignee, ultimate consignee, end-user.
That set is broader than the buyer. Section 748.5(d) says the intermediate consignee “may be a bank, forwarding agent, or other person who acts as an agent for a principal party in interest.” Your freight forwarder can be the party that triggers the license. A pure financier that never takes possession generally sits outside § 748.5(c) through (f) — though General Prohibition Ten and § 764.2(e) can still reach it on their own terms.
And the escape hatch most businesses assume exists does not: “License exceptions may not be used unless authorized in the Entity List entry for the entity that is party to the transaction or for an address that presents a high diversion risk that is used by a party to the transaction.” All seven Inspur entries read the same way in the license-requirement column, and none of them authorizes one.
4. The Entity List 50% affiliates rule comes back on November 10, 2026
Calendar this one. On September 30, 2025, Commerce published the “Affiliates Rule” at 90 FR 47201, as an interim final rule. Its effect: any foreign entity owned, directly or indirectly, individually or in the aggregate, 50 percent or more by one or more listed entities — or by unlisted entities already subject to Entity List restrictions because of their own ownership — becomes subject to Entity List restrictions itself, without ever being named on the list. The same 50 percent logic extends to listed military end users and certain sanctioned parties. The word foreign is doing real work: the rule does not sweep in a domestic affiliate.
Six weeks later Commerce suspended it. The one-year suspension at 90 FR 50857 runs from November 10, 2025 to November 9, 2026. But read the second half of that rule. It is written in two phases, and phase two is already law: “In the second phase of this final rule, effective November 10, 2026 and extending indefinitely, the changes included in the Affiliates Rule that are removed in the first stage will be added back into the EAR.”
The reimposition is self-executing. The rule’s own DATES section lists the twelve amendatory instructions that take effect November 10, 2026, so absent a further action the 50 percent rule switches back on by its own terms in roughly eight weeks. One honest caveat: BIS said in the same document that it “did not consider public comments received on the Affiliates Rule” and that those comments “will be considered for future, subsequent rulemakings.” More rulemaking is contemplated. None of it has appeared as of September 11, 2026, and planning around a rescue that has not been published is not a strategy.
One consequence deserves its own sentence. Red flag 29 is currently stayed. It provides that when you have knowledge that “a foreign entity that is a party to the transaction has one or more owners that are listed on the Entity List or the MEU List, or that are unlisted entities that are subject to license requirements or other restrictions based upon their ownership, it has an affirmative duty to determine the percentage of ownership by those entities and if that is not possible, to obtain a license from BIS if required under the Entity List or MEU List based on the requirements for the owner or owners of that foreign entity, unless a license exception is available.” Note the qualifiers: it reaches foreign counterparties, it covers the military end-user list too, and the license obligation is conditional. On November 10 it returns. The ownership diligence you can decline to perform today becomes an affirmative duty then.
5. Knowledge is the trigger, and self-blinding is an aggravating factor
General Prohibition Ten, at 15 C.F.R. § 736.2(b)(10), bars you from selling, transferring, financing, forwarding, or “otherwise servic[ing]” any item subject to the EAR with knowledge that a violation “has occurred, is about to occur, or is intended to occur in connection with the item.” It ends with a line worth memorizing: “There are no license exceptions to this General Prohibition Ten in part 740 of the EAR.” The parallel enforcement provision is § 764.2(e).
Two features of the knowledge standard catch businesses out. First, Commerce says knowledge held by one employee “can be imputed to a firm so as to make it liable for a violation.” Your salesperson’s hallway conversation about who really owns the buyer is the company’s knowledge, whether or not it ever reaches the person running the Entity List screen. Second, the guidance expressly warns: “Do not self-blind… An affirmative policy of steps to avoid ‘bad’ information would not insulate a company from liability, and it would usually be considered an aggravating factor in an enforcement proceeding.”
Telling the sales team to stop asking where the boxes end up is worse than useless. It is evidence.
6. A quiet Entity List year is not a safe one
The Innermost Loop noted Commerce logging its longest blacklisting lull in eighteen years; that eighteen-year figure is the newsletter’s and we could not verify it from primary sources. What we did verify is narrower and still striking. Searching the Federal Register for 2026 Commerce rules touching the Entity List returns exactly two, both published August 24, 2026, and both removals — one entity under Turkey, and two addresses associated with Arrow Electronics (Hong Kong) Co., Ltd. There have been no additions to the Entity List at all in 2026.
Do not mistake that for shelter. Under 50 U.S.C. § 4819, a willful violation carries a criminal fine up to $1,000,000 and up to 20 years’ imprisonment for an individual. The civil maximum is the greater of a statutory figure or twice the value of the transaction; as adjusted for inflation effective January 15, 2025, that figure stands at $374,474 per violation (15 C.F.R. § 6.3(c)(6)). Commerce has not published its 2026 adjustment, which is overdue: § 6.5 requires an annual adjustment taking effect “not later than January 15.” That is not good news. Under § 6.4, a new figure applies to penalties assessed after its effective date “including those whose associated violation predated such adjustment” — so the number that eventually lands can attach to conduct happening now.
Meanwhile 15 C.F.R. § 762.6 requires export records to be kept for five years — and the clock runs from the “latest of” the export, any known reexport, transfer or diversion, or any other termination of the transaction. So a deal you close this quarter is not clear in 2031 if shipments run into 2027 or you learn of a downstream transfer in 2028. Enforcement pace changes. Your file does not.
What Howard East Clients Should Do Now
Screen beyond the name. Use the free Consolidated Screening List, but treat a clean result as step one. An Entity List screen tells you about names, not about owners. Ask for ultimate beneficial ownership in writing. Ask who the principals are. Save the answers. And remember the Entity List is one list among several: Inspur also appears on the Defense Department’s Section 1260H list of Chinese military companies, which carries its own federal-contracting consequences, and Treasury maintains the SDN and NS-CMIC lists separately.
Run the red-flag 24 and 25 test on your top counterparties. Any new customer since 2023 whose leadership, engineers, or product specs trace back to a company later added to the Entity List needs a documented resolution memo before the next shipment.
Put the November 10 date on the calendar today. Eight weeks is enough time to collect ownership certifications from foreign counterparties. It is not enough time to do it in November, when every counterparty you contact will be fielding the same Entity List request from everyone else.
Fix your contracts. Most distribution and supply agreements written before 2023 have no export-control representation, no ownership-change notice provision, and no suspension right. Add all three. The same discipline we recommend for AI vendor contracts and training-data sourcing applies here, and the drafting logic tracks how we handle defined terms generally.
Escalate, do not improvise. Commerce’s guidance when a red flag survives inquiry is that you “should either refrain from the transaction or submit all the relevant information to BIS in the form of an application for a license or in such other form as BIS may specify.” Route that decision to counsel, not to the deal desk.
Make it a diligence item in every deal. Export-control exposure travels with the business. Whether you are structuring an asset sale or an equity sale or absorbing companies through a roll-up, ask what the target shipped, to whom, and whether anyone screened. For related exposure on the inbound side — foreign nationals on your own payroll touching controlled technology — see our piece on deemed-export risk for employers.
Frequently Asked Questions
Does the Entity List apply to my company if we only sell domestically?
It can, but be precise about how. A domestic sale to a US buyer you know intends to reexport can trigger exposure, because General Prohibition Ten reaches anyone who sells, finances, forwards or services an item with knowledge that a violation is intended. The Entity List’s own license requirement is narrower: it runs to parties described in § 748.5(c) through (f), who are defined as persons abroad. And the affiliates rule that will extend listings to unlisted affiliates reaches foreign entities only — it does not capture a purely domestic affiliate, and it is stayed until November 10, 2026.
What happens on November 10, 2026?
Phase two of 90 FR 50857 takes effect. Entities at least 50 percent owned by one or more listed parties become subject to Entity List restrictions automatically, and the affirmative ownership-diligence duty at red flag 29 comes back. Commerce could extend the suspension, but nothing has been published doing so as of September 11, 2026.
Is a distributor liable if the customer lied?
It depends on what the distributor knew or had reason to know. Commerce says you may rely on customer representations “unless red flags oblige you to take verification steps.” If the flags were there and no one resolved them, a false customer statement is not a shield — and a deliberate policy of not asking is, in Commerce’s words, an aggravating factor.
Talk to a Business Attorney Before the Deadline
Export-control exposure is one of the few compliance problems where the diligence is cheap and the penalty is not. If you sell across borders, take financing or logistics roles in cross-border deals, or are buying a company that does, Howard East can review your counterparty screening, your contract language, and your ownership certifications before the affiliates rule returns. Where a matter has already escalated, our colleagues at Howard Law Group handle the commercial litigation and M&A sides of the same fact patterns.
Book a consultation and let’s get your Entity List screening in order before November.
Credit where it is due: this piece began with Dr. Alex Wissner-Gross’s The Innermost Loop, which surfaced the Aivres reporting. Facts about Aivres, Inspur, and Maginfra are as reported by The New York Times; the regulatory analysis is ours and is drawn from the primary sources linked above.
This article is for informational purposes only and does not constitute legal advice. Export control questions are fact-specific and the regulations change frequently; the law described here is current as of September 11, 2026.
