Editorial

Field Notes: Technology

Field Notes on technology geopolitical risk: export controls, semiconductors, cloud and data residency, and cyber exposure, written for risk and legal leaders.

TechnologySector

Chips, cloud, export controls and cyber exposure.

Export Control Classification Drift: When Your Own Product Becomes Controlled Mid-Contract

A suspended US export rule resumes on 9 November 2026. Contracts compliant today could need a license overnight, for products that never changed.

Jay Bimbrah · October 26, 2026

Trade War Supply Chain Risk: Planning for the Round, Not the Announcement

China matched five US tariff moves in ten weeks in 2025, each paired with its own export control response. The headline is one data point; the sequence is what breaks a supply chain plan.

Shekhar Attri · September 15, 2026

US China Technology Risk: A Bifurcation Checklist for Product Teams

Nvidia cut memory out of a chip to stay under an export threshold. ByteDance handed 80 percent of TikTok's US venture to non-Chinese owners. Both are the same decision, made by different teams.

Jay Bimbrah · August 31, 2026

AI Geopolitical Risk: The Stack Has a Geography

Compute, model weights, data and talent do not carry the same geopolitical exposure, and treating AI risk as one category means missing which layer is actually moving.

Shekhar Attri · August 31, 2026

Semiconductor Geopolitical Risk Sits Past the Fab, Not Inside It

A single Japanese chemical company holds more than nine tenths of the film that binds an AI chip's package together, and it just cut shipments to China by 30 percent.

Jay Bimbrah · August 31, 2026

Data Localization Fragments the Multinational: A Geoeconomic Reading of the Cross-Border Data Wars

When Apple moved Chinese iCloud encryption keys onto servers run by a state-linked operator in 2018, it wasn't a privacy footnote. It was a template for how localization law converts infrastructure into a state lever.

Shekhar Attri · July 27, 2026

False Redundancy: The Geopolitical Risk Inside Multi-Region Cloud Architecture

Three 2025 hyperscaler outages and a French certification rule show multi-region cloud deployments often share one identity layer, control plane, or jurisdiction underneath.

Shekhar Attri · July 25, 2026

The Geopolitical Exposure Map Automakers Still Don't Have

A single Commerce Department rule now sets a 2027 deadline for connected-vehicle software while a 25 percent Section 232 tariff, a Euro 7 type-approval gate, and Beijing's battery-technology export controls converge on the same vehicle program.

Jay Bimbrah · July 21, 2026

The Geopolitical Blind Spot in AI Inventories: Why Use Case, Not Model Name, Decides Regulatory Exposure

The same model inventoried once by vendor contract carries a 2025 prohibition test in Brussels, a 2026 impact-assessment deadline in Denver, and near-zero exposure in a marketing use case down the hall.

Shekhar Attri · July 19, 2026

The Geopolitical Grid: How AI Data Center Power Demand Is Rationing National Electricity Capacity

In June 2026, FERC gave all six US grid operators 60 days to fix data center interconnection rules, the same month Texas logged a 438-gigawatt queue that is 90 percent data centers.

Jay Bimbrah · July 8, 2026

Geopolitical Risk Software Is Measuring the Wrong Thing

EY found board action on political risk tripled since 2021, yet only 30% of CEOs can see their own exposure. The tooling, not the attention, is the gap.

Shekhar Attri · July 3, 2026

Export Controls Are Now a Geopolitical Supply-Chain Problem

BIS Entity List growth, the deemed export doctrine, and a $300M Seagate penalty signal a shift in export control enforcement that sits well outside what most supply chain risk systems are built to detect.

Jay Bimbrah · July 2, 2026