Valarian's new funding lands at the exact moment European cloud anxiety has moved from policy talk to working risk.
Valarian's pitch used to sound like insurance. Now it sounds like a phone call you make after the outage has already started.
NEA led a $50 million Series A this week, according to Fortune, pushing the London startup's total funding to $70 million. That's a big round. It's also a useful marker of where American venture capital now sees money in Europe: not in replacing Amazon and Microsoft overnight, but in helping governments keep using them without surrendering control of sensitive data.
Valarian's software is called ACRA. The company says it sits beneath AI workloads running on large cloud platforms and lets customers decide what data leaves, who can touch it, and when. If you're a ministry, a bank, an airline, or a defense buyer, that detail isn't a technical footnote. It's the thing procurement officers are suddenly paid to worry about.
The legal pressure point is the CLOUD Act, the 2018 US law that lets American authorities compel US-based companies to produce data they control, even when that data is stored outside the United States. A European agency can keep its servers in Frankfurt or Paris and still have a dependency problem if the provider is answerable in Washington. Geography alone doesn't solve it.
Washington made the risk visible #
For years, buyers could treat that risk as a compliance slide. Then June 2026 gave them a live demonstration. Anthropic took its Fable 5 and Mythos 5 models offline for foreign users after a Trump administration directive citing national security concerns, according to the Associated Press and The Verge. The restriction hit foreign customers and even foreign-national employees before the administration later lifted limits on Fable 5, Axios reported on June 30. That last detail matters. The models didn't vanish forever. But they did stop working for customers outside the US for long enough to prove the point. If access to a critical AI system can be switched off by a government order in Washington, European sovereignty is no longer just about where the database sits. It's about who can interrupt the service.
French President Emmanuel Macron called the episode a wake-up call and nationalist overreach. Both descriptions fit. Europe has spent years talking about digital sovereignty, Gaia-X, trusted cloud labels, and domestic AI champions such as Mistral. Talk is cheap. A cutoff order is not.
Valarian had already built around that concern. Business Insider reported in May 2025 that the company emerged from stealth with $7 million in new funding, bringing its seed round to $20 million, and that its ACRA platform was designed to isolate and control sensitive data across cloud environments and third-party applications. The company was founded in London in 2020 by Max Buchan, while Josh McLaughlin joined as co-founder and chief operating officer in 2023.
The founders' backgrounds help explain why buyers in this market would take the meeting. Business Insider reported that McLaughlin previously served as a US Army Ranger and later worked at Palantir in Qatar, where he led the opening of the company's Doha office. Buchan came from CoinShares, the digital asset manager. You can see the blend Valarian is trying to sell: defense trust, enterprise software, and a European flag.
The Palantir comparison is useful, up to a point #
Investors like the Palantir comparison because it's easy. McLaughlin worked there. Valarian sells to governments. Its product lives near sensitive data. Fine. But the better comparison is narrower.
Palantir became valuable by making difficult government data usable inside systems that agencies already had. Valarian wants to become valuable by making hyperscaler cloud and AI infrastructure tolerable for institutions that can't look casual about sovereignty. It isn't trying to be AWS. It wants to be the control layer that lets a buyer keep AWS or Azure while proving who governs the data underneath.
That's a sharper business than a vague sovereignty pitch. European governments are not about to rip out every American cloud contract. They don't have the time, budget, or replacement capacity. Look at the actual behavior: governments complain about dependence, then keep buying from the platforms that work. Valarian's argument meets that reality instead of pretending it away.
There is still a hard test ahead. Rivals in France, Germany, and the broader cloud security market will make similar claims, and every serious customer will ask whether ACRA can stand up inside real procurement, audit, and battlefield conditions. Business Insider reported last year that Valarian was expanding into defense after interest from a US government customer in late 2024, while also selling to commercial clients. That split can help. It can also blur the message if the company tries to be everything at once.
Here's the thing: this round is less about one London startup than about a changed buyer mood. The market Valarian is chasing didn't look this urgent eighteen months ago. Now European customers have a recent example of an American AI provider being forced to cut off foreign access, a live legal concern under the CLOUD Act, and a stack of existing cloud contracts they can't simply throw away.
That is enough to make a control layer look less like insurance and more like infrastructure.
Also read: Intel Pours $5.7 Billion Into Its Irish Chip Campus to Chase AI Demand • Saudi Aramco Bets $800 Million That Open Source Beats Closed AI • America's AI Boom Is Starving the Chip Factories It Depends On