Contract analysis

I. EXECUTIVE SUMMARY The purpose of this memorandum is to assess the existing trade secret management program of Marlowe Asset Management Photonics Inc. ("VPI") and to recommend enhanced protections in connection with the pending acquisition of VPI by Halcyon Semiconductor Aktiengesellschaft ("HSAG"), the negotiation of the National Security Agreement (NSA-2024-0019) with the Committee on Foreign Investment in the Un

II. SCOPE AND METHODOLOGY A. Scope This assessment encompasses a comprehensive review of VPI's trade secret management program, including written policies and procedures, access controls (both physical and electronic), contractual protections afforded by employee agreements and third-party NDAs, physical and information technology security measures, employee training and awareness programs, and exit procedures for de

1. VPI Trade Secret Management Policy (Revision 4, dated March 15, 2022), including all appendices and referenced procedures;

2. VPI Trade Secret Registry (31 entries as of October 31, 2023), maintained by the VP Engineering, including classification levels, custodian designations, authorized personnel lists, and creation dates;

3. VPI Employee Invention Assignment and Non-Disclosure Agreement ("IANDA"), current form version (last revised January 2021), together with a sample of 14 executed IANDAs provided by VPI Human Resources;

4. VPI Facility Security Plan for the Albuquerque Fab, as coordinated with Col. (Ret.) Bryce Hendrickson, VPI's Facility Security Officer ("FSO"), who holds a Top Secret/Sensitive Compartmented Information ("TS/SCI") security clearance;

5. VPI Information Security Program documentation, including the VPI System Security Plan, network architecture diagrams, access control matrices, and incident response procedures;

6. Draft National Security Agreement (NSA-2024-0019), as circulated by CFIUS on November 3, 2023, together with Calderwood & Harkness's annotations and proposed revisions dated November 15, 2023;

7. Draft Technology Control Plan provisions (NSA Annex B), working draft dated November 12, 2023;

8. NIST Special Publication 800-171 compliance self-assessment prepared by VPI's IT Director, reflecting VPI's current implementation status against the 110 security requirements for protecting Controlled Unclassified Information ("CUI") in nonfederal systems (the framework referenced in NSA Annex D);

9. VPI's existing ITAR/EAR compliance procedures, including VPI's DDTC Registration (Registration No. M-24817), export classification determinations for VPI products and technology (relevant Export Control Classification Numbers: ECCN 3A001, ECCN 3A991, and ECCN 3E001), and VPI's internal Technology Control Procedures Manual;

10. Eight sample Non-Disclosure Agreements executed between VPI and suppliers, subcontractors, and commercial customers;

11. Government contract documentation for VPI's 14 active Department of Defense contracts, including FAR/DFARS data rights clauses and relevant contract data requirements lists, provided in summary form by VPI's contracts department; and

12. VPI organizational charts, facility layout diagrams, and employee headcount data. C. Interviews Conducted We conducted in-person and secure videoconference interviews with the following VPI personnel: • Dr. Nathan Trevorrow, Chief Executive Officer of VPI, who holds a TS/SCI security clearance. Dr. Trevorrow provided an overview of VPI's strategic approach to trade secret protection, the relationship between the

III. OVERVIEW OF VPI'S TRADE SECRET PORTFOLIO A. Trade Secret Registry — Summary VPI maintains an internal Trade Secret Registry (the "Registry") that catalogues 31 trade secrets that have been identified, documented, and formally registered by VPI's internal processes. The Registry is maintained by VPI's Vice President of Engineering, who serves as the de facto trade secret custodian, with annual review and legal gu

1. GaN-on-SiC Epitaxial Growth (8 granted patents, 4 pending applications) — corresponds to Category 1 trade secrets;

2. HEMT Gate Structure Optimization (19 granted patents, 5 pending applications) — corresponds to Category 3 trade secrets; and

3. GaN Power Amplifier Module Design (20 granted patents, 3 pending applications) — not directly associated with registered trade secrets, as these patents primarily cover module-level integration and packaging innovations. VPI has adopted a deliberate hybrid intellectual property strategy in which broad inventive concepts are patented to establish a defensive portfolio and a public claim of priority, while the detai

IV. ASSESSMENT OF EXISTING TRADE SECRET PROTECTIONS This section evaluates the adequacy of VPI's existing trade secret protections across five dimensions: contractual protections, physical security measures, information technology security, employee awareness and training, and exit procedures. For each dimension, we identify specific gaps that must be addressed, particularly in light of the heightened risks arising f

1. An HR department interview in which the departing employee is reminded of their continuing NDA obligations under the IANDA;

2. Return of company-issued property, including the employee's company laptop, facility access badge, parking credentials, and any other company-owned devices or materials;

3. Deactivation of the employee's network login credentials within 24 hours of the employee's last day of employment; and

4. For employees holding security clearances, a debriefing conducted by the FSO in accordance with DCSA requirements, followed by initiation of clearance transfer or termination as appropriate. Gaps identified in exit procedures: • No trade-secret-focused exit interview: The current exit process relies on a general HR interview that addresses NDA obligations at a high level but does not specifically identify the trad

V. HEIGHTENED RISKS FROM FOREIGN OWNERSHIP A. CFIUS-Identified Concerns Relevant to Trade Secrets CFIUS's preliminary national security concerns, communicated to the parties on October 20, 2023 through the CFIUS Staff Chairperson, identified two principal areas of concern with respect to the proposed acquisition: (1) the risk of foreign access to classified defense programs in which VPI participates, and (2) the pote

VI. RECOMMENDATIONS FOR ENHANCED TRADE SECRET PROTECTIONS Based on the assessment set forth in Sections III through V above, we recommend the following enhancements to VPI's trade secret management program. These recommendations are designed to address the identified gaps, satisfy the requirements of the NSA and TCP, and establish a defensible compliance record for the ongoing CFIUS monitoring framework. A. Integrati