Contract analysis

I. Executive Summary The purpose of this memorandum is to assess the potential national-security mitigation measures that the Committee on Foreign Investment in the United States ("CFIUS") may require in connection with the voluntary joint notice (Tracking No. CFIUS-2025-0087) filed on April 4, 2025, for the proposed acquisition of Luminex Systems Holdings Inc. ("Luminex Holdings") by Ardent Apex Holdings Inc. ("Apex

II. Transaction Background A. Transaction Structure The Transaction is structured as a reverse triangular merger in which Ardent Apex Merger Sub Inc. ("Merger Sub"), a Delaware corporation incorporated on March 7, 2025, solely for the purpose of effecting the Transaction, will merge with and into Luminex Systems Holdings Inc., a Delaware corporation incorporated on June 14, 2021 (the "Merger"). Upon consummation of t

III. CFIUS Jurisdictional Analysis A. Covered Transaction Determination The proposed acquisition constitutes a "covered transaction" under Section 721 of the Defense Production Act of 1950, as amended by the Foreign Investment Risk Review Modernization Act of 2018 ("FIRRMA"), and its implementing regulations at 31 C.F.R. Part 800. A "covered transaction" is defined, in relevant part, as any transaction that could res

1. Access to Sensitive Government Data. This is expected to be CFIUS's primary concern. Luminex US's DOD logistics module processes supply-chain and logistics data that, while classified at the "sensitive but unclassified" level, could reveal military supply-chain dependencies, procurement patterns, and logistical vulnerabilities if accessed by a foreign adversary or unauthorized party. The DOE procurement platform h

2. Foreign Government Influence. The participation of Northvale Sovereign Holdings Ltd. as a co-investor, and the presence of sovereign wealth and state-affiliated pension fund LPs in the broader Ardent CP III investor base, raise concerns about the potential for a foreign government to exercise influence over Luminex US's operations, either directly (through governance rights, board representation, or information ac

3. Data Residency and Cross-Border Transfers. Luminex One is a cloud-based SaaS platform with a global customer base. Luminex's corporate structure includes operating entities in Switzerland, Germany, the United Kingdom, and Singapore, each of which may have some level of access to the platform's underlying infrastructure, development environments, or customer data. CFIUS will be concerned about the risk that governm

4. Personnel Security. Certain Luminex US employees who support government contracts may require, or currently hold, personnel security clearances or may have access to controlled unclassified information ("CUI"). The change in ownership resulting from the Transaction may trigger review and reclassification requirements under the National Industrial Security Program ("NISP") and could raise questions about the contin

5. Supply Chain Integrity. Luminex One provides supply-chain analytics capabilities, and the government contracts specifically leverage these analytics for defense logistics and energy procurement. Compromise of this data — or even access to aggregated, anonymized supply-chain analytics derived from government client data — could reveal government procurement patterns, vendor dependencies, and logistics vulnerabiliti

IV. Proposed Mitigation Measures The following section outlines the comprehensive mitigation framework that we recommend proposing to CFIUS. Each category of measures is designed to address one or more of the national-security concerns identified in Section III.C above. The measures are structured to be robust and credible while preserving, to the extent possible, the operational flexibility that Ardent Capital requi

1. Security Control Board / Proxy Board. We recommend establishing a Government Security Committee ("GSC") within Ardent Apex Holdings Inc. The GSC would be composed of at least three independent directors, each of whom must be a U.S. citizen holding (or eligible to obtain) appropriate security clearances. The composition of the GSC would be subject to prior approval by CFIUS, and any replacement or removal of a GSC

2. Restriction on Foreign National Board Participation. To address CFIUS concerns regarding foreign national access to sensitive government information, we recommend the following restrictions: (a) No individual who is not a U.S. citizen or U.S. lawful permanent resident shall serve as a director or officer of Luminex US, or have access to Luminex US government contract data, without the prior written approval of CFI

3. Compliance Officer Appointment. We recommend the appointment of a Government Security Officer ("GSO") at Luminex US. The GSO would serve as the designated individual responsible for day-to-day oversight and implementation of all CFIUS mitigation obligations. The GSO must meet the following qualifications: (a) U.S. citizenship; (b) Active security clearance at the appropriate level (Secret or Top Secret, depending

1. Data Segregation and Access Controls. All U.S. government data — including, without limitation, DOD logistics data, DOE procurement data, GSA platform data, and any metadata, analytics, or reports derived from such data — shall be stored exclusively on servers physically located within the United States, operated and maintained by Luminex US personnel who are U.S. citizens or lawful permanent residents. Luminex US

2. Cloud Infrastructure Requirements. Government contract workloads — including all production, development, staging, and disaster-recovery environments supporting government client data — shall be hosted in FedRAMP-authorized cloud environments physically located within the continental United States. Luminex US currently utilizes Ridgeway Industries ("Meridian Technologies") GovCloud for certain government workloads

3. Cross-Border Data Transfer Restrictions. No government contract data, CUI, sensitive supply-chain analytics data, or any information derived from government contract performance shall be transferred, disclosed, or made accessible to any non-U.S. affiliate of Luminex or any non-U.S. third party, without the prior written approval of the GSC and, if required by the terms of the NSA, the CFIUS monitoring agency. Exis

1. Current Clearance Status. An important threshold question is whether Luminex US currently holds, or is required to obtain, a facility security clearance ("FCL") under the National Industrial Security Program ("NISP") administered by the Defense Counterintelligence and Security Agency ("DCSA"). If Luminex US holds an FCL, or if one is required for the performance of its DOD contract, the Transaction will trigger Fo

2. FOCI Mitigation Instruments. If FOCI mitigation is required — either because Luminex US currently holds an FCL or because CFIUS requires the establishment of one as a condition of clearance — we recommend proposing a Special Security Agreement ("SSA") as the primary FOCI mitigation instrument. An SSA permits a company to retain its FCL while under foreign ownership, control, or influence, subject to specific gover

3. Personnel Clearances. As part of the mitigation implementation, Luminex US will be required to identify all employees who currently hold, or are required to hold, personnel security clearances in connection with the government contracts. This inventory must include: (a) The identity and clearance level of each cleared employee; (b) The government contract(s) that each clearance supports; (c) The status of each cle

1. Novation and Assignment. The DOD, DOE, and GSA contracts held by Luminex US may require novation or assignment consent from the applicable contracting officers following the change of control resulting from the Merger. Under the Federal Acquisition Regulation ("FAR") 42.12, a successor entity that acquires all of a government contractor's assets through a merger or acquisition must typically execute a novation agr

2. Right of First Refusal / Termination Right. To provide the U.S. government with a meaningful enforcement mechanism in the event of non-compliance, we recommend offering CFIUS a contractual commitment that, in the event of a material breach of the mitigation agreement that is not cured within a specified cure period: (a) The U.S. government retains the right to require divestiture of the government contract busines

3. Subcontractor and Supply Chain Controls. Luminex US shall maintain a comprehensive, current list of all subcontractors, vendors, and suppliers engaged in the performance or support of government contracts. This list shall be maintained by the GSO and made available to the GSC and the monitoring agency upon request. No subcontractor or supplier that is owned or controlled by a foreign national (as determined by ref

1. Information Access Limitations. Given Northvale's status as a foreign-government-affiliated investor, the mitigation framework must include specific, enforceable restrictions on Northvale's access to information relating to Luminex US's government operations. We recommend the following measures: (a) Northvale shall be excluded from receipt of any non-public information relating to Luminex US's government contracts

2. Voting and Influence Restrictions. Northvale's equity interest in the post-closing structure is approximately 6.9% of total post-closing equity, calculated as $200,000,000 of approximately $2,901,000,000 in total equity sources (comprising $2,800,000,000 in aggregate deal value less the $405,020,000 management rollover, plus the rollover amount, plus the co-investment commitments, structured to net to total equity

3. Broader LP Base Protections. Beyond the Northvale-specific restrictions, the mitigation framework should address the broader foreign-government-affiliated LP exposure within Ardent CP III. We recommend the following: (a) Ardent Capital Partners III LP shall maintain records identifying any limited partner whose aggregate capital contributions derive, in whole or in part, from foreign government sources (including

1. Annual CFIUS Compliance Reports. Luminex US, through the GSO, shall submit annual compliance reports to the designated CFIUS monitoring agency. These reports shall provide a comprehensive accounting of the company's adherence to all mitigation measures set forth in the NSA. At a minimum, the annual report shall cover: (a) Data security audit results, including findings from the annual third-party cybersecurity aud

2. Incident Reporting. In addition to annual reporting, the mitigation framework shall include incident reporting obligations requiring immediate notification to the monitoring agency of specified events. We recommend the following notification triggers and timelines: (a) Within 24 hours: Any confirmed data breach involving government contract data or CUI; any unauthorized access to government contract systems by a n

3. Third-Party Monitoring. We recommend agreeing to engage a CFIUS-approved third-party monitor to conduct periodic compliance audits for the duration of the mitigation agreement. Third-party monitoring has become a standard feature of NSAs in recent years and provides CFIUS with independent assurance that the mitigation measures are being effectively implemented. The monitor shall be selected from a list of CFIUS-ap

V. Coordination with Other Regulatory Filings A. HSR / FTC Review The Transaction is subject to pre-merger notification under the Hart-Scott-Rodino Antitrust Improvements Act of 1976, as amended ("HSR Act"). The parties filed their respective HSR notification forms on March 28, 2025 (Transaction No. HSR-20250328-4192). The initial 30-day waiting period under the HSR Act is currently set to expire on April 27, 2025. B

VI. Timeline and Process Recommendations A. CFIUS Review Timeline The following table summarizes the anticipated CFIUS review timeline and key milestones: We note that the timeline above assumes CFIUS accepts the joint notice without requesting re-filing (which can occur if the notice is deemed incomplete) and that the initial review period is calculated from the date of acceptance. If CFIUS requests supplemental inf

1. Immediate — By April 15, 2025: Prepare a detailed mitigation proposal in draft term sheet format for informal pre-submission to CFIUS staff. The term sheet should outline the key elements of the mitigation framework (GSC, data security protocols, Northvale restrictions, FOCI mitigation, government contract carve-outs, and reporting obligations) in sufficient detail to enable CFIUS staff to assess the proposal's ad

2. By April 20, 2025: Engage with the Ardent Capital deal team — specifically Ted Hargrove, Victoria Langford, and David Ng — to present the recommended mitigation framework, obtain t