Valarian: sovereign AI cloud with US$50M Series A

Valarian, a London startup co‑founded by former Palantir managing director Josh McLaughlin and fintech and crypto executive Max Buchan, has secured a US$50M Series A led by New Enterprise Associates, bringing total funding to US$70M. NEA’s first defence and dual‑use investment in Europe puts Valarian at the center of a new category: sovereign infrastructure layers that let governments and enterprises keep running AI on Amazon, Microsoft, and Google clouds while clawing back control over who can access, switch off, or exfiltrate sensitive workloads.

The round, joined by XTX Markets, Lightbank, Sequel, LitVC and angels such as Gokul Rajaram and Nikesh Arora, comes in the same year the U.S. CLOUD Act moved from abstract risk to practical concern for foreign institutions using American infrastructure. In that context, Valarian’s ACRA platform positions itself not as yet another AI model, but as the sealed operating room around AI systems, turning infrastructure sovereignty into a tangible product and signaling how quickly security, compliance, and geopolitics are converging in cloud and AI buying decisions.

ACRA: sovereignty as a software layer

Valarian is building ACRA, a software control layer that sits underneath an organisation’s AI systems and critical applications, effectively wrapping them in a sealed environment that governs how workloads communicate, what data they can access, and who can shut them down. Instead of asking governments or enterprises to abandon US hyperscalers, ACRA plugs into existing deployments on AWS, Microsoft Azure or Google Cloud and acts as a sovereignty arbiter: it decides what can leave the environment, which operators can touch specific workloads, and how governance rules are enforced at the infrastructure layer rather than only in application code or policy documents.

The business model reflects this dual track. Valarian Enterprise serves commercial customers running high‑consequence operations, such as financial institutions or industrial firms with sensitive operational technology, while Valarian Defence targets government and security clients with stricter control, audit, and deployment requirements. In both cases, the mechanism is similar: ACRA becomes the control plane that overlays existing cloud and AI stacks, offering a way to comply with national regulations, mitigate extra‑territorial reach like the CLOUD Act, and demonstrate to boards and regulators that AI systems handling critical data are governed from the infrastructure up.

Market context

The funding lands in a European market where “sovereign cloud” has shifted from political slogan to procurement reality, illustrated by the European Commission’s €180 million sovereign cloud framework awarded to consortia that include both European providers and a tightly governed Thales–Google Cloud joint venture. That contract explicitly showed that non‑European technology can be considered sovereign if wrapped in a sufficiently strict governance structure, which is precisely the niche Valarian is trying to industrialize for AI workloads and high‑consequence operations.

At the same time, governments and large enterprises are looking for ways to keep benefiting from American AI and cloud innovation while reducing the risk that another jurisdiction can legally compel providers to access or disrupt their data and systems. Valarian’s positioning as an infrastructure sovereignty company, rather than a generic cybersecurity vendor, taps into this capital cycle where defence, dual‑use, and compliance technologies are attracting fresh venture funds, and where investors are increasingly comfortable backing companies that sit directly at the intersection of cloud, regulation, and geopolitics.

What this means for investors and business owners

1. Infrastructure sovereignty is becoming a product category.
   For years, sovereignty was mostly discussed as a policy objective or legal risk, not a line item in IT procurement; Valarian’s US$50M round is a clear signal that investors now see a dedicated control layer over public cloud and AI infrastructure as a standalone market. For business owners and CIOs, this implies that sovereignty solutions will increasingly be sold like other infrastructure products: with clear SLAs, integration paths into AWS and Azure, and a measurable impact on compliance posture rather than abstract promises about jurisdiction.
2. Dual‑use and defence tech in Europe are investable at scale.
   NEA’s first defence and dual‑use investment in Europe, backing Valarian, confirms that the taboo around defence‑adjacent software has eroded, particularly when it is framed as infrastructure for governments and enterprises rather than weapon systems. For investors looking at European deal flow, this widens the universe: companies that help states and businesses manage AI risk, secure critical data, or harden infrastructure against legal or cyber pressure are now fair game for large Series A and beyond, which can accelerate the maturation of a new defence‑software stack.
3. Hyperscaler lock‑in will be challenged from the control plane, not from raw compute.
   Valarian is not trying to build a new European hyperscaler, which would require hundreds of billions in capex; instead, it layers sovereignty controls on top of existing US infrastructure, letting customers keep their cloud and AI stack while re‑balancing control. For business owners, this suggests a pragmatic strategy: rather than attempting to migrate wholesale away from US clouds, investing in control‑plane solutions like ACRA can deliver much of the regulatory and geopolitical benefit while preserving access to leading AI services and economies of scale.
4. Regulatory pressure on AI and data governance will drive spending on control layers.
   The CLOUD Act, data residency rules, and upcoming AI‑specific regulation are turning infrastructure governance into a board‑level topic, with tangible compliance risk for sectors such as finance, healthcare, and critical infrastructure. As regulators push for demonstrable control over how AI systems operate and access data, companies that can provide auditable, infrastructure‑level governance will be positioned to capture budget that once went mostly to traditional compliance software and point‑solution security tools.
5. For startups, sovereignty can be a wedge into legacy accounts.
   By attacking a narrow but painful problem, Valarian offers a way into organisations that already spend heavily on AWS, Azure, Palantir, and similar platforms, using sovereignty concerns as the initial reason to engage. Founders building in adjacent areas can learn from this playbook: wrap yourself around entrenched systems, solve a governance or control pain that incumbents are slow to address, and then expand from a sovereignty or compliance beachhead into broader infrastructure, analytics, or security offerings.

Valarian’s US$50M Series A, lifting its total capital to US$70M, marks a sharp turn in how the market values infrastructure sovereignty around AI and cloud workloads. For investors, CIOs and founders, the underlying thesis is simple: the next generation of outsized returns in infrastructure will not come only from faster chips or bigger data centers, but from whoever can turn geopolitical risk and regulatory pressure into a controllable, software‑defined layer that boards can understand and buy into. The real question is whether you treat sovereignty as a compliance checkbox, or as a strategic advantage built into your stack before the next regulatory shock hits.

Sources

• Valarian raises $50m to loosen America's cloud grip
• Valarian Raises $50 Million Series A Led by NEA to Deliver the Sovereign Infrastructure Layer for High-Consequence Operations and AI Driven Systems
• Valarian raises $50 million to help governments and enterprises escape America's cloud grip
• EU awards its €180 million sovereign cloud contract
• Valarian Raises $50 Million Series A To Build Sovereign Infrastructure For AI-Driven Systems