A trust upgrade with an expiration date
On July 10, 2026, the Commerce Department's Bureau of Industry and Security (BIS) reclassified the United Arab Emirates from Export Administration Regulations Country Groups D:3 and D:4 — tiers reserved for countries facing proliferation and national-security restrictions — into Country Group A:5, the most trusted tier in the US export-control system. The final rule, "Enhanced Favorable Treatment for the United Arab Emirates Under the Export Administration Regulations," published July 14, 2026, cites the UAE's status as a US Major Defense Partner and, per BIS's own press release, its support for US national-security interests including Operation Epic Fury.
The headline beneficiaries are G42 and its cloud subsidiary Core42, named directly in the rule as Approved Entities eligible to import advanced computing items — the AI accelerators underpinning frontier model training — without the shipment-by-shipment licenses that previously took months to clear. G42's own account of the moment calls it a shift "from planning into execution," pointing to projects like Stargate UAE, a 1-gigawatt compute cluster built with OpenAI, Oracle, Cisco, Nvidia and SoftBank, and a planned 5-gigawatt US-UAE AI campus.
The catch: a 270-day trust clock
But the rule is not an unconditional green light. As Morgan Lewis's analysis of the text confirms, BIS wrote in that G42 and Core42's Approved Entity status "automatically expires 270 days after" the rule's effective date — April 6, 2027 — unless the companies "become US companies" or secure a new authorization through BIS's Advisory Opinion process. Crucially, the rule does not define what "become a US company" means, an ambiguity several trade-law firms have flagged as a live compliance risk for any UAE entity trying to plan a multi-year data center buildout around it.
The rule also draws a sharper line than headlines suggest. US hyperscaler subsidiaries operating in the UAE — Amazon, Microsoft, xAI and others — get license-free access to advanced computing items and full eligibility for the Strategic Trade Authorization (STA) license exception, which covers a broader range of controlled categories with no sunset. G42 and Core42 get neither the STA exception nor an open-ended clock. It is a conditional, time-boxed trust grant to a foreign entity, not parity with a US company's subsidiary — and BIS explicitly preserved end-use and end-user licensing requirements under EAR Part 744, meaning the approval, in the agency's own words, "does not overcome" underlying diversion-control law.
Steelmanning the skepticism
The caution embedded in the rule is not paranoia. G42 has a documented history worth taking seriously: as part of its 2024 deal bringing in a $1.5 billion Microsoft investment, the company pledged to strip out Huawei technology and divest Chinese holdings in ByteDance, xFusion and Honor. CSIS's analysis of the UAE's AI ambitions notes that those Chinese investments were transferred to Lunate, a related entity still under UAE National Security Advisor Sheikh Tahnoun bin Zayed Al Nahyan's orbit, rather than genuinely liquidated — and that AI chips are remotely accessible, meaning diversion risk doesn't require the hardware itself to leave Abu Dhabi. Congressional Democrats have separately alleged that US intelligence found chip technology routed toward programs benefiting Chinese missile systems even after the 2024 pledge. A 270-day clock, an STA carve-out, and a requirement that BIS relationship-manage rather than fire-and-forget license this relationship are proportionate responses to that track record, not protectionist theater.
Why the structure still gets the incentives right
Even granting all of that, the rule's design deserves credit for solving a real problem without abandoning oversight. The old D:3/D:4 licensing regime imposed a roughly six-month per-shipment review — the delay UAE officials cited in getting the country's first Blackwell chips in May 2026 — which pushed Gulf capital and compute demand toward alternatives with far less compliance discipline than BIS's Regulated Technology Environment framework now attached to G42 and Core42. A blanket, permanent exemption would have been the wrong instrument given G42's history; an outright ban would have handed the UAE's $91-billion-by-2031 AI ambition, and its 5–10 gigawatts of spare power capacity, to whichever supplier asks fewer questions. The 270-day sunset instead forces a concrete choice onto G42 within a defined window: restructure toward the ownership and reporting standard the US already trusts, or lose license-free access and fall back to case-by-case licensing. That is a policy that can be renewed, tightened, or let lapse based on observed compliance — not a permanent geopolitical bet.
The UAE's own AI governance apparatus — the National Strategy for AI 2031, the 2024 AI Charter, and ADGM's Financial Services Regulatory Authority overseeing model risk in its financial free zone — has spent two years building the kind of auditable, sector-specific framework Washington says it wants to see mirrored on the compliance side of this deal. The next ten months will show whether that framework, and G42's restructuring, can actually clear the bar BIS set — or whether the clock runs out first.