Nvidia deploys software-enforced GPS tracking for AI GPUs to enforce U.S. export control compliance and prevent unauthorized resale.

Despite U.S. government efforts to prevent Chinese entities from obtaining advanced AI and HPC processors developed in America, Chinese companies continue to acquire them through smuggling or by installing them in nearby countries for remote access. To address this, U.S. legislators proposed installing tracking devices on AI processors such as Nvidia's Blackwell to remotely disable them if used illegally by adversary nations. Rather than accept a hardware tracking device requirement, Nvidia developed a software solution that achieves similar objectives, according to Reuters.

Officially, Nvidia positions its tracking technology as a capability for infrastructure operators to oversee their GPU fleets and monitor their health. The feature also addresses U.S. political demands to curb illegal diversion of advanced AI GPUs to restricted markets such as China, North Korea, or Russia. An Nvidia spokesperson told Tom's Hardware: "We are in the process of implementing a new software service that empowers data center operators to monitor the health and inventory of their entire AI GPU fleet. This customer-installed software agent leverages GPU telemetry to monitor fleet health, integrity, and inventory." The capability has only been demonstrated confidentially, though Nvidia does not deny its existence but has not formally confirmed that the software can determine the physical location of its hardware.

Reuters reports that the tracking software reads GPU telemetry while incorporating timing measurements from communication between customer systems and Nvidia servers. By analyzing this latency, the software can estimate GPU location with roughly the same precision as standard Internet-based geolocation services. The software is slated to appear first on Blackwell-generation components, which include strengthened capabilities for "attestation," a process verifying that the hardware and software stack have not been altered. According to Reuters, these AI accelerators contain more advanced verification logic than the preceding Hopper and Ampere families, though it remains unclear whether Nvidia can remotely disable hardware if used in a prohibited region.

China's main cybersecurity regulator has summoned Nvidia for questioning over concerns that verification functions could act as backdoors accessible to the U.S. government. Nvidia has firmly rejected the notion that its hardware contains any backdoors, stating that reading hardware telemetry does not undermine cryptographic protections and other security features.