Key Takeaways
- • Valarian, a London-based data security startup, raised $50 million in Series A funding led by New Enterprise Associates (NEA), bringing total funding to $70 million and marking NEA's first defense and dual-use investment in Europe.
- • The company's ACRA platform operates as a software layer beneath AI systems and sensitive applications, enabling governments and enterprises to maintain operational control over data access, usage, and governance while remaining deployed on American cloud infrastructure (AWS, Microsoft Azure).
- • Founder Max Buchan, 24, identified infrastructure sovereignty as critical vulnerability following Russia's invasion of Ukraine; the company addresses the U.S. CLOUD Act's provision allowing American authorities to compel data disclosure from U.S.-based providers globally.
- • Valarian's co-founder Josh McLaughlin brings Palantir experience as former managing director, lending credibility to the company's position as a European alternative to American-dominated cloud and AI infrastructure providers.
- • The $50 million Series A will fund expansion of government partnerships and deployment pathways, positioning Valarian to capture demand from NATO-aligned governments and enterprises seeking digital sovereignty without full infrastructure migration.
Summary
Valarian has secured $50 million in Series A funding led by NEA, according to Fortune's exclusive reporting, bringing the London-based startup's total capitalization to $70 million. The round represents NEA's inaugural defense and dual-use technology investment in Europe, signaling institutional validation for the company's infrastructure sovereignty thesis at a critical geopolitical moment.
The company, founded by Max Buchan and Josh McLaughlin, addresses a structural vulnerability in modern enterprise and government operations: dependence on American cloud providers subject to U.S. jurisdiction. Buchan, who previously helped scale a fintech company to unicorn status before its $1.2 billion Nasdaq listing, identified this risk years before Ukraine's invasion elevated infrastructure security concerns. The core problem, as he frames it, is that Western governments and enterprises have consolidated critical operations across three primary cloud environments—U.S., Europe, and Asia—creating a single point of failure and regulatory exposure under the U.S. CLOUD Act, which permits American authorities to compel data disclosure from U.S. companies globally regardless of data location.
Valarian's ACRA platform operates as an isolation layer deployed atop existing cloud infrastructure, functioning as what Buchan describes as a "sealed operating room around AI workloads and sensitive applications." The architecture preserves customers' ability to utilize established cloud providers while Valarian's software enforces granular control over data egress, access permissions, and operational governance. This approach sidesteps the false choice between migration costs and sovereignty loss. McLaughlin's background as a managing director at Palantir adds credibility to the dual-use intelligence and defense positioning, while the NEA investment signals confidence in the European market opportunity as NATO members and EU governments prioritize digital autonomy.
The Series A proceeds will fund expansion of government partnerships and additional deployment pathways, positioning Valarian to capture enterprise and public-sector demand across geographies where regulatory frameworks increasingly mandate data sovereignty over cost optimization. The funding timing aligns with rising institutional emphasis on infrastructure decoupling and European technological self-sufficiency.
The company, founded by Max Buchan and Josh McLaughlin, addresses a structural vulnerability in modern enterprise and government operations: dependence on American cloud providers subject to U.S. jurisdiction. Buchan, who previously helped scale a fintech company to unicorn status before its $1.2 billion Nasdaq listing, identified this risk years before Ukraine's invasion elevated infrastructure security concerns. The core problem, as he frames it, is that Western governments and enterprises have consolidated critical operations across three primary cloud environments—U.S., Europe, and Asia—creating a single point of failure and regulatory exposure under the U.S. CLOUD Act, which permits American authorities to compel data disclosure from U.S. companies globally regardless of data location.
Valarian's ACRA platform operates as an isolation layer deployed atop existing cloud infrastructure, functioning as what Buchan describes as a "sealed operating room around AI workloads and sensitive applications." The architecture preserves customers' ability to utilize established cloud providers while Valarian's software enforces granular control over data egress, access permissions, and operational governance. This approach sidesteps the false choice between migration costs and sovereignty loss. McLaughlin's background as a managing director at Palantir adds credibility to the dual-use intelligence and defense positioning, while the NEA investment signals confidence in the European market opportunity as NATO members and EU governments prioritize digital autonomy.
The Series A proceeds will fund expansion of government partnerships and additional deployment pathways, positioning Valarian to capture enterprise and public-sector demand across geographies where regulatory frameworks increasingly mandate data sovereignty over cost optimization. The funding timing aligns with rising institutional emphasis on infrastructure decoupling and European technological self-sufficiency.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.