Almost every organisation on Earth is paying for the privilege to hand over its IP to someone else's AI.
We just closed a $50M Series A, led by @NEA, to build the alternative from right here in London: every model, agent and workload sealed in its own enclave, on infrastructure you control, with keys only you hold.
You can't be sovereign on someone else's stack. Build your own with Valarian.
Honestly, 12 months ago I thought “sovereignty” was a BS marketing message for founders to leverage to get funding.
Now I think it is a strategic imperative and will breed some of the largest companies of our time.
Mistral is the poster child of sovereignty. The last remaining hope for Europe when it comes to frontier model providers.
I sat down with @MistralAI CEO, @arthurmensch to debunk the hype from reality and ask the uncomfortable questions. My notes from the discussion below.
1. Why Energy Is Not the Ultimate Cost That Matters
Energy makes up around 10% of the total cost of ownership of compute, so it is not where most optimization can happen. The cost of energy is not the one thing that matters in the economics of a project.
Love to hear your thoughts on this @alanchanguk @ChaseLochmiller @ZachBDell
2. What Would Mistral Do Differently If They Were Totally Resource-Unconstrained?
Mistral would build much more capacity, with capital as the main bottleneck. Customers are running out of compute, and once one use case scales they need thousands of GPUs rather than eight. Europe does not have enough compute, so Mistral is putting equity to work to build capacity ahead of demand.
Love to hear your thoughts on this, if you were resource unconstrained today, what would you do differently @alexmashrabov @bavaria_kush
3. How the Inference Market Behaves Very Much Like a Commodity Market
On-demand inference behaves like a high-margin commodity market where pricing matters a lot and demand comes from non-committed customers. Mature customers need service level agreements, reserved physical capacity and guarantees on latency and generation speed. The more precisely they describe the shape of their demand, the better Mistral can price it.
What does no one see about the inference market that everyone should see @tuhinone @neilmovva @lqiao
4. Models Have Gotten So Strong They Are Being Treated as Defense Systems
Models are now strong enough to carry out cyberattacks, and the US began banning them outside the country in May. China is also looking at restricting exports beyond a certain threshold. As with any dual-use technology, customers now want security of supply on both infrastructure and model IP.
What does no one see about the future of security that everyone should see @zeyu1337 @nikesharora @pilvar222
5. Will We End Up With a Model Landscape That Has Just Two to Three Providers?
If every company relies on two or three centralized AI providers, those providers gain enormous leverage. They will use the data their systems produce to build better systems and go after their customers' business, an end game Arthur sees as priced in today.
What will the model landscape look like in 5 years @emostaque @AnjneyMidha @mmurphy
6. The Biggest Problem With AI Effectiveness Within Enterprise Today Is...
Most enterprise problems are not well defined, and ambiguous objectives with humans in the loop cannot be solved through self-improving loops. They only get solved by deploying models that interact with people, which is why Mistral uses FDEs to define problems better.
7. Why You Can Go Public in Europe and Negativity Around European Stock Markets Is BS
Mistral can absolutely go public in Europe, because the bottlenecks of 10 years ago are no longer there. There is a huge appetite from investors worldwide to invest in Europe in both private and public equity. Mistral is preparing for the operational constraints of being public while delivering on its commercial milestones.
You think this is true, you really think you can go public in Europe @eldsjal @klarnaseb
(links in comments)
Read the full piece here: teapaw.org/RyanRadloff/status/210…
My learnings & opinions on the status of Enterprise Ai - formed from talking to 250+ @valarian customers & prospects in Q3 this year.
39
A discovered zero-day in CPython can turn an LLM’s chat template into a code-execution primitive.
Meaning a malicious model could compromise your inference server.
Contain AI and make your systems secure, safe, and sovereign with ACRA.
We found an 0day in CPython that turns your LLM's chat template into a code execution primitive. A backdoored model on Hugging Face can own your inference server 🧵
5
169
Sovereignty has become an umbrella term. But what does it actually mean?
To be sovereign, your AI stack must be:
✅ Modular: so you can swap things out.
✅ Composable: so the layers work together.
✅ Observable: so you can see what's in the stack.
✅ Extensible: so it plugs into your systems.
@neemustafa on @MTSlive with @sophiadew last week.
Do you control your keys?
Replying to @Pathfounders @WorldSummitAI @mikebutcher @carmelcrimmins @Reuters @Moonfire_VC @RonaldJSchuurs @AntlerGlobal @DNCapital
FIRESIDE
The Next Wave of Sovereign Intelligence
youtu.be/fO_bUydWnqg
Moderator: Mike Butcher @mikebutcher, Founder, @Pathfounders
Jonnie Beddall, VP Strategic Markets, @Valarian
youtu.be/fO_bUydWnqg
Live in 5, @neemustafa 🍿
MTS HALLOWEEN EDITION 🎃👻 | BINANCE HACK | INTEL TANKS teapaw.org/i/broadcasts/1pKkOXkMY…
2
188
"You don’t have to trade off sovereignty for quality." - @max_buchan
Our partnership with @perplexity_ai ensures you don't.
7
521
Don't replicate, add value.
Our VP Strategic Markets at the World Summit AI with @mikebutcher and @Pathfounders, discussing the role Europe should play in the AI race.
What a time to be live.
ETN Vest Compass | Genetically Mutated War Dogs | Agents in The Banks | Kushner’s Phone Hacked teapaw.org/i/broadcasts/1pKkOXlvB…
1
254
This week we announced a partnership with @perplexity_ai to bring Perplexity's Computer to institutional infrastructure with controls for sensitive data and regulated environments.
Great to have AI Minister, @KanishkaNarayan's support!
Deployments are now available.
2
10
420
@CityAM piece here:
cityam.com/ai-giant-perplexi…
1
105
Every company on earth will need clear, deterministic rules to govern non-deterministic agents.
Policies for which data, tools and networks each agent can reach, and a record of everything it does.
The first thing to change will be terms of service and blocking these agents. Not because the value is low but because the risk is high. Banks will chose self preservation and risk mitigation.
Then we will need to find a security and governance architecture that will get external auditors comfortable.
These are the practical issues of human risk tolerance in AI diffusion that model capability can’t solve.
7
266
Every time you use AI externally, you are reaching a third party server with your API keys. Your attack surface widens.
Keep your keys to yourself.
Run AI within your organisation, not outside.
Choose ACRA.
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
12
425
We've partnered with @perplexity_ai to bring Perplexity Computer inside your compute boundary.
ACRA runs it on your infrastructure and enforces which data, tools and networks each workload can access.
You choose the open-weight model, such as Nemotron, GLM, Kimi, DeepSeek-R1 or Qwen, then connect the documents and systems each task needs. Your data stays where it already lives.
Big time. Welcome @neemustafa, let's build 🚀
TRANSFER CONFIRMED: Mustafa Neemuchwala (@neemustafa) has joined @Valarian from @NEA for an undisclosed sum.
13
528
Control and capability are not a trade-off.
@RandoxOfficial will use ACRA so its researchers and clinicians can work with frontier-level intelligence while patient data stays under their control.
The digital sovereignty debate has always assumed a trade-off: to keep control of your systems, you have to use worse tools.
That's a trade-off we don't have to accept. And one we must never accept in healthcare.
@Valarian and @RandoxOfficial are going to show everyone in the UK and abroad that organisations can have both control AND capability. You can run best-in-the-world models inside your compute boundary and stay in control of your data.
Don’t rent your intelligence, own it.

























