CFIUS when a foreign buyer wants a U.S. manufacturer

Which mandatory tests belong on a manufacturing LOI?

Critical technology includes ITAR defense articles. A shop that looks like a job shop on the teaser can still be a critical-technology business. Sensitive personal data is less common on a manufacturer than on a software file, but a medical manufacturer with patient-adjacent data can wander into that prong. Critical infrastructure is fact-specific. Do not self-clear because the plant makes brackets.

Mandatory filings are generally due at least thirty days before completion. That is a shorter clock than ITAR § 122.4(b)'s sixty-day DDTC notice, and it is a different clock. If both apply, the longer constraint wins the Gantt chart. See ITAR and EAR.

How should a seller run a process that includes a foreign bidder?

Run a process, not an exclusive. IBBA / M&A Source Market Pulse Q1 2026 reported that 83 percent of deals over $5 million drew three or more offers (Source: IBBA). A single foreign LOI is not a market. Keep a domestic strategic or searcher in the room until CFIUS counsel says the foreign path can close on a date you can live with.

The foreign-buyers page is the buyer-type conversation: when a foreign check is the right high bid. This page is the statute-and-calendar conversation. They should be read together. They should not be copy-pasted into each other.

How it works still applies: blind teaser, NDA, staged room, plant visit after numbers. Foreign bidders do not get a faster drawing dump because they flew in. They get a slower one if controlled data sits on the floor.

What facts does counsel actually ask for in week one?

Ownership of the buyer up to the people and governments who matter. Whether any U.S. regulatory authorization — including export licenses — sits on the target's products. Whether the target is a TID U.S. business. Whether the transaction is a covered control transaction or a covered investment. Whether any mitigation from a prior filing already binds the buyer. Those are counsel's questions. The broker's job is to get them asked before exclusivity.

Stanford's 2026 search-fund study is not a CFIUS study. Its 2024–25 median purchase of $16 million at about 6.2x EBITDA on a roughly 25 percent margin company (Source: Stanford GSB) simply reminds sellers that some "individual" buyers are investor vehicles. Vehicles have owners. Owners can be foreign. Ask.

How do government contracts and CFIUS share a close date?

A foreign buyer who also needs a FAR 42.12 novation is stacking federal processes. Novation is not CFIUS. Set-aside status is not CFIUS. FOCI mitigation on a cleared contractor is another pile again. The LOI should list every federal process that can veto Monday production. The LOI-to-close timeline should show them as separate bars.

If the foreign bidder cannot tolerate that stack, they are not the clearing bidder. Say so early. A high headline price with a nine-month federal gauntlet is a different instrument than a domestic cash close.

What does a failed exclusive look like when CFIUS was a footnote?

A seller grants a 90-day exclusive to a foreign-backed buyer at a number the domestic bidders will not match. The LOI mentions CFIUS in one clause that says the buyer will file "if required." Week six, buyer's counsel decides a mandatory filing applies because the shop's coating process sits behind an export authorization. The 30-day pre-close clock has not started because the filing has not been prepared. The DDTC 60-day notice, if foreign-person control of a registrant is also in play, has not started either.

Week ten, the domestic backup has moved on. The seller is now in a single-track federal process with no leverage. That is not bad luck. That is a process design error. HedgeStone's advice on these files is boring: do not exclusive a foreign path until counsel has said, in writing, which filings are mandatory and how long they take. Keep a domestic alternative warm.

A related failure mode is the opposite: refusing every foreign inquiry because CFIUS exists. Some foreign buyers are the right high bid and can file on time. The work is to tell those two stories apart with counsel, not with folklore.

How should mitigation, withdrawal, and walk rights be written?

If counsel expects mitigation — supply-chain assurances, board observer limits, data-security commitments — the LOI should say who pays to negotiate that mitigation and whether the seller can walk if mitigation kills the operating thesis. A foreign buyer who can close only after giving up the customer list or the export authorization is not buying the company you marketed.

Withdrawal of a filing, a request for more information, and a presidential decision are not "ordinary diligence." They are deal events. Walk rights should be bilateral and dated. A seller who cannot remarket for six months while a filing sits is financing the buyer's process with time. Price that, or refuse the exclusive.

Representation-and-warranty insurance will not quietly absorb a CFIUS problem. Read the exclusions. See escrow, indemnity, and R&W.

What should a purely commercial plant still put in the first memo?

Not every foreign bid on a cabinet shop or a short-run printer is a mandatory CFIUS filing. The first memo still asks the ownership question, the government-interest question, and whether any export authorization or critical technology quietly sits in a side product line. A "commercial" plant that also machines a controlled spare is a TID question. Counsel writes the memo. The broker refuses to skip it because the teaser looked boring.

Search-fund vehicles and independent sponsors can have foreign LPs. Ask who owns the SPV. Search-fund capital structures is the money page. This is the national-security page. Both can be true on the same buyer.

Sellers also ask whether a minority foreign investor in a U.S. buyer vehicle "counts." That is a control-and-covered-investment question, not a percentage slogan. Some investments that look small still hit a TID plus access test. Some majority deals do not hit a mandatory trigger. The memo is the work. The slogan is how files die.

If the foreign bidder wants exclusivity while "we figure out CFIUS," the answer is a short option with a filing deadline, not a 90-day blackout. Put the deadline in the LOI. If the filing is not in by that date, the seller remarks. Domestic backups should know they may be recalled.

Government-contract novation, set-aside loss, and FOCI issues can sit on the same foreign buyer. Read those pages as a stack, not as optional homework. A high bid that cannot novate the only contract that matters is not a high bid.

Personal data on employees is usually not the CFIUS "sensitive personal data" prong, but a manufacturer that hosts customer design portals, biometric access logs, or medical-device complaint files can wander closer than the teaser suggested. Tell counsel what systems exist. Do not decide the prong in the kitchen.

BizBuySell's 2025 manufacturing median close of 223 days (Source: BizBuySell) already assumes a slow sector. Adding an unplanned CFIUS filing after exclusivity is how that median becomes a missed refinance on the seller's building. Put the analysis on the front of the process, not the back.

A buyer who is almost U.S. because the operating partner lives in Ohio still needs an ownership chart that names every fund, blocker, and government-linked LP that counsel cares about. Almost is not a filing posture. Charts are. If the chart arrives two days before a planned close, you do not have a close plan. You have a hope. Move the date or move the bidder. HedgeStone will not treat a missing ownership chart as a paperwork nit. It is the fact that decides whether the thirty-day clock even applies. Ask for the full ownership chart before the exclusive starts, not after someone tells a champagne story in the conference room.

Jason Taken is a business broker. He does not file CFIUS notices and does not clear foreign ownership. Educational information only. Confirm mandatory-filing tests with CFIUS counsel using the live regulations. Data current as of September 2026.