Valarian ACRA sovereignty platform: $50M Series A to control AI data on US clouds

Valarian has raised a $50 million Series A led by NEA to launch ACRA, a software layer that enforces data sovereignty over AI workloads running on major US cloud providers like AWS and Azure. For AI builders serving government or regulated enterprise customers, this changes how you think about data residency and access control: instead of switching clouds, you can keep existing infrastructure while adding a sovereignty wrapper.

What happened

Valarian, a London-based startup founded by Max Buchan and ex-Palantir managing director Josh McLaughlin, raised a $50 million Series A led by NEA, bringing total funding to $70 million. The round marks NEA's first defense and dual-use investment in Europe. The company's product, ACRA, acts as a sealed operating room around AI workloads and sensitive applications. Government departments and businesses can keep using Amazon or Microsoft cloud infrastructure, but Valarian's layer controls exactly what data leaves, who touches it, and when.

The motivation is the U.S. CLOUD Act, which allows American authorities to compel U.S.-based companies to hand over data they hold anywhere in the world. Buchan argues that sovereignty cannot be a settings toggle inside someone else's infrastructure; it has to be the infrastructure itself.

Valarian's launch comes amid a broader geopolitical shift. European defense spending hit $447 billion last year. An incoming U.K. prime minister is moving to cancel a state Palantir contract, part of a broader European pullback from U.S. data giants. And when the Trump administration cut off Anthropic's access abroad this year, Buchan said infrastructure sovereignty shifted from an abstract policy debate to a live emergency: "No one could use their model anymore, because the president of another country had shut it off."

Why AI builders should care

If you build AI products for defense, public sector, or regulated enterprises in Europe, the CLOUD Act is a real constraint. Customers worry that their data on AWS or Azure could be accessed by U.S. authorities. Valarian's ACRA layer lets you keep using those clouds while adding a sovereignty wrapper that controls data exit and access. This could unlock deals that were previously blocked by data residency concerns.

The Anthropic incident is a concrete example: a U.S. executive action cut off model access abroad, demonstrating that infrastructure sovereignty is not theoretical. For builders, this means your AI service could be disrupted by geopolitical decisions outside your control. Valarian's approach aims to insulate your workloads from that risk.

Practical implications

ACRA does not require switching cloud providers. You can continue using AWS, Azure, or other US clouds, but Valarian's software layer enforces sovereignty at the infrastructure level. This is different from VPNs or encryption alone, because it controls who can access the environment and when controls can be toggled.

For AI builders, this means you can deploy AI workloads on US clouds for European customers without violating sovereignty requirements. The layer defines what data leaves the environment, who can access it, and when controls can be toggled. This could simplify compliance with GDPR, national security directives, and defense procurement rules.

NEA's Mustafa Neemuchwala noted that Valarian sidesteps the classic defense startup trap: no production lines to blow up, no missiles to test. "If this company fails, it's not going to be because they overspent on a production facility." This suggests a software-only risk profile that is easier to scale than hardware-based defense solutions.

Caveats

ACRA is a software layer, not a hardware root of trust. Its effectiveness depends on correct configuration and the trustworthiness of the underlying cloud provider's infrastructure. The article does not specify pricing, performance overhead, or deployment complexity. For builders, you should evaluate whether the latency and operational overhead of the sovereignty layer are acceptable for your AI workloads.

The product is early stage. Valarian has raised $70 million total, but the ACRA platform is newly launched. Details on specific integrations with AWS and Azure, supported regions, and compliance certifications are not yet public. The company's focus is government and defense, so general enterprise availability may come later.

Finally, the geopolitical context is volatile. European defense spending and Palantir contract shifts are ongoing. Valarian's success depends on sustained demand for sovereignty, which could change with new administrations or trade agreements.