Insights · CFIUS

CFIUS for Foreign Investors: When U.S. Deals Trigger National Security Review

What foreign investors should know about CFIUS jurisdiction, filing strategy, mitigation, U.S. real estate, sensitive technology, and transaction planning in 2026.

CFIUS can affect a transaction long before a filing is made

Foreign investors entering the United States increasingly need to evaluate national-security review as part of transaction strategy. The Committee on Foreign Investment in the United States, or CFIUS, reviews certain transactions involving foreign investment in U.S. businesses and certain real-estate transactions. Its jurisdiction is broad enough that parties should assess CFIUS early even where the transaction does not look defense-related. Technology, data, infrastructure, supply chains, critical minerals, proximity to sensitive government locations, and foreign-government connections can all matter. The practical consequence is that CFIUS analysis belongs alongside tax, antitrust, financing, and commercial diligence. Waiting until signing can create avoidable timing problems, disclosure disputes, or renegotiation over who bears mitigation risk.

The core question is whether the transaction is within CFIUS jurisdiction

CFIUS jurisdiction is highly fact-specific. Traditional control transactions involving a foreign person acquiring control of a U.S. business remain central, but the regulations also cover certain non-controlling investments in U.S. businesses involving critical technology, critical infrastructure, or sensitive personal data. Certain real-estate transactions can also fall within CFIUS jurisdiction, particularly where property is located near designated military or other sensitive installations. Investors therefore need a factual map of the target: ownership, business lines, technology, licenses, customers, data, facilities, government relationships, and real estate. A simple statement that the investor is acquiring “only a minority stake” does not resolve the analysis.

Mandatory and voluntary filings require different strategic judgments

Some transactions can trigger mandatory filing requirements, while many other covered transactions may be submitted voluntarily. A voluntary process can still be important because CFIUS has authority to review certain transactions after closing. The decision whether to file voluntarily should therefore consider the national-security profile, investor identity, target sector, transaction structure, and the parties’ tolerance for post-closing uncertainty. Investors should also consider what information will be required and whether the transaction timetable realistically accommodates review. CFIUS is not simply a form-filing exercise; it is a national-security process in which the government may ask detailed questions regarding ownership, affiliations, business plans, technology, customers, and governance.

Investor identity and ownership structure matter

The government’s assessment does not stop at the direct purchaser. CFIUS can examine ultimate ownership, governance rights, foreign-government interests, financing relationships, and other affiliations. Investors using holding companies, funds, consortiums, or sovereign-linked capital should therefore prepare a clear ownership and control narrative. Ambiguity creates delay and can generate additional questions. The investor should be able to explain who ultimately owns and controls the acquiring vehicle, who can appoint directors or managers, whether any foreign government has meaningful rights, and how investment decisions are made. For funds, limited-partner rights and advisory structures may require careful analysis. Transparency is not merely a disclosure obligation; it is part of transaction planning.

Sensitive technology, infrastructure, and data require deeper diligence

A company does not need to manufacture weapons to create national-security concerns. Businesses involving semiconductors, artificial intelligence, advanced computing, telecommunications, cybersecurity, aerospace, energy, critical infrastructure, geospatial capabilities, or certain types of personal data may warrant heightened attention. The first diligence task is to understand what the company actually does rather than rely on marketing descriptions. Technology classifications, export licenses, government contracts, datasets, infrastructure functions, and customer types may all be relevant. This analysis can also intersect with export controls and sanctions, making coordinated review preferable to separate workstreams.

Real estate can create CFIUS exposure independent of a business acquisition

CFIUS also has jurisdiction over certain purchases, leases, or concessions of U.S. real estate by foreign persons. Proximity to designated military installations and certain airports and maritime ports can be important. Treasury expanded the list and geographic scope of covered military installations through a rule effective in December 2024. Foreign investors acquiring industrial sites, logistics facilities, data centers, agricultural land, or other strategic real estate should therefore assess location-specific CFIUS issues early. Real-estate diligence should not assume that national-security review is relevant only when a U.S. operating company is being acquired.

Mitigation can change the economics and governance of the deal

Where CFIUS identifies national-security risk, it may seek mitigation. Depending on the facts, mitigation can address access to technology or data, security protocols, governance, personnel, supply arrangements, reporting, audits, or divestiture of sensitive assets. Investors should consider in advance which forms of mitigation would be commercially acceptable. A transaction may still be technically possible but materially less attractive if mitigation prevents the investor from exercising expected governance rights or accessing important information. Purchase agreements should therefore allocate responsibility for mitigation and define the limits of the parties’ obligations.

The 2026 Known Investor initiative may improve process, but it does not remove diligence

In February 2026, Treasury requested public input on a proposed Known Investor Program and other ways to streamline aspects of CFIUS review while maintaining national-security scrutiny. The initiative reflects an effort to facilitate investment from allies and partners, but investors should not assume that a favorable nationality or prior investment history eliminates review. As of this writing, the program remains part of an evolving policy process. The prudent approach is to monitor implementation while continuing to prepare complete ownership, governance, and transaction information. Streamlining can reduce friction, but it does not substitute for jurisdictional analysis or national-security diligence.

CFIUS strategy should be integrated with the overall U.S. market-entry plan

Foreign investors often analyze CFIUS only after they have selected a target. A broader approach is better. If U.S. expansion may involve acquisitions, minority investments, strategic partnerships, sensitive technology, or strategic real estate, national-security review should be built into the market-entry model. That can affect target selection, acquisition vehicle, governance rights, financing, data access, and location. Axon Point Advisory assists foreign companies and investors with the commercial and regulatory planning around U.S. entry while coordinating with qualified U.S. counsel on formal CFIUS legal analysis and filings when required.

What management should decide before signing a CFIUS-sensitive transaction

Management should not leave CFIUS strategy entirely to the legal workstream. Before signing, the business team should decide how much timing uncertainty it can tolerate, what mitigation would undermine the investment thesis, which governance rights are essential, and whether an alternative structure or target would reduce national-security risk. The board or investment committee should also understand the consequences of a post-closing review and the practical cost of responding to extensive government information requests. These decisions help counsel negotiate realistic covenants and closing conditions. They also prevent a common problem in which the parties discover late in the process that their commercial expectations are incompatible with the regulatory risk allocation they accepted in the purchase agreement.

Frequently Asked Questions

Does every foreign acquisition of a U.S. company require a CFIUS filing?

No. Jurisdiction and filing obligations depend on the transaction, investor, target business, and specific regulatory categories.

Can CFIUS review a transaction after closing?

Yes, certain covered transactions may be reviewed after closing, which is why voluntary filing strategy can matter.

Is CFIUS only about Chinese investment?

No. Investor nationality is relevant, but CFIUS jurisdiction is not limited to any one country.

Selected official sources

  • U.S. Department of the Treasury, CFIUS program page and current regulations.

  • U.S. Department of the Treasury, Request for Information on the CFIUS Known Investor Program, February 6, 2026.

  • U.S. Department of the Treasury, 2024 final rules concerning CFIUS penalties, information requests, mitigation, and covered real estate.

This article is provided for general informational and business-advisory purposes and does not constitute legal advice. Laws, regulations, sanctions, and enforcement policies change. Legal advice should be obtained from appropriately licensed counsel for a specific matter.

Discuss U.S. Market Entry

Discuss U.S. Market Entry & Business Advisory

If this analysis addresses a problem your company, investment, or client is confronting, contact Axon Point Advisory to discuss the specific facts, jurisdictions, timing, and business objective.