Contract analysis
Clause-by-clause risk read on any document of the firm. Pick a contract, or open any document from a matter.
Contract analysis / nsa-issues-matrix.xlsx
nsa-issues-matrix.xlsx
High · 6
Medium · 0
Standard · 0
§3.1 | Board Composition | 5-member board: 3 Security Board Members (U.S. citizens, TS/SCI
§3.1 | Board Composition | 5-member board: 3 Security Board Members (U.S. citizens, TS/SCI eligible, incl. independent Security Director) + 2 HSAG designees | Effective at closing (Feb 9, 2024); ongoing | HSAG / VPI | Yes | Up to $250,000/violation/day
§3.2 | Government Security Committee | GSC of 3 Security Board Members; exclusive authorit
High
⚑ Non-compete / exclusivity restraint
§3.2 | Government Security Committee | GSC of 3 Security Board Members; exclusive authority over classified/ITAR programs, personnel security, facility security | Effective at closing; ongoing | VPI GSC | Yes | Up to $250,000/violation/day
§3.3 | Security Board Member Qualifications | U.S. citizens holding or eligible for TS/SCI
§3.3 | Security Board Member Qualifications | U.S. citizens holding or eligible for TS/SCI; no disqualifying foreign affiliations; prior HSAG relationships subject to DCSA review | Effective at closing; ongoing for new appointments | HSAG / VPI / DCSA | Yes | Up to $250,000/violation/day
§4.1 | Technology Control Plan — Scope | Prohibits transfer of ITAR/EAR-controlled data an
§4.1 | Technology Control Plan — Scope | Prohibits transfer of ITAR/EAR-controlled data and trade secrets to non-U.S. persons without USG authorization; uncontrolled commercial data shareable under GSC-approved procedures | Effective at closing; ongoing | VPI (GSC oversight) | Yes | Up to $250,000/violation/day (no cure period for controlled data breaches)
§4.2 | TCP — Cross-Border R&D Collaboration | No cross-border R&D with non-U.S. HSAG entit
§4.2 | TCP — Cross-Border R&D Collaboration | No cross-border R&D with non-U.S. HSAG entities for controlled items; Halcyon US Inc. (Austin) may collaborate on uncontrolled commercial tech under GSC-approved TCP; no government-funded IP access | Effective at closing; ongoing | VPI / HSAG / GSC | Yes | Up to $250,000/violation/day (no cure period)
§5.1 | Facility Security Clearance Maintenance | VPI retains FCL at SECRET level; NSA as S
§5.1 | Facility Security Clearance Maintenance | VPI retains FCL at SECRET level; NSA as SSA-equivalent; DCSA monitoring; CAGE Code 7VK92 | Effective at closing; ongoing | VPI FSO (Col. Hendrickson) | Yes | Up to $250,000/violation/day
§5.2 | Facility Access Restrictions | HSAG barred from classified areas (Albuquerque fab C
§5.2 | Facility Access Restrictions | HSAG barred from classified areas (Albuquerque fab C-7 through C-12) without DCSA/GSC approval; unclassified areas with advance notice, escort, and visitor log; Colorado Springs HQ with advance notice | Effective at closing; ongoing | VPI FSO (Col. Hendrickson) | Yes | Up to $250,000/violation/day
§6.1 | Cybersecurity Standards | NIST SP 800-171 compliance; annual third-party penetratio
§6.1 | Cybersecurity Standards | NIST SP 800-171 compliance; annual third-party penetration testing; CMMC at level required by applicable DoD contracts | Ongoing; annual pen test | VPI IT / GSC | Yes | Up to $250,000/violation/day
§6.2 | Cybersecurity Incident Reporting | 72-hour reporting to DCSA; simultaneous notice t
§6.2 | Cybersecurity Incident Reporting | 72-hour reporting to DCSA; simultaneous notice to Treasury, DoD, DOE | Within 72 hours of incident discovery | VPI FSO / IT Security | Yes | Up to $250,000/violation/day
§6.3 | IT System Segregation | Physical and logical separation of VPI IT from HSAG global
§6.3 | IT System Segregation | Physical and logical separation of VPI IT from HSAG global network; no shared cloud; separate IT administration; GSC oversight | Effective at closing; ongoing | HSAG / VPI IT | Yes | Up to $250,000/violation/day
§7.1–7.4 | Third-Party Compliance Monitor | Whitmore Compliance Group LLC; $1.2M/year (qua
§7.1–7.4 | Third-Party Compliance Monitor | Whitmore Compliance Group LLC; $1.2M/year (quarterly $300K); annual audits + ad hoc reviews (5 days' notice); unannounced audits only upon DCSA directive; reports to DCSA, Treasury, DoD, DOE | First payment: Apr 19, 2024; first annual audit: Jan 19, 2025 | HSAG (cost); WCG (execution) | N/A (monitor is the oversight) | Up to $250,000/violation/day for obstruction
§8.1 | Key Personnel Retention | Trevorrow, Sung-Avila, Hendrickson: 24-month minimum; 60-
§8.1 | Key Personnel Retention | Trevorrow, Sung-Avila, Hendrickson: 24-month minimum; 60-day departure notice to GSC/DCSA; replacements require GSC + DCSA approval | 24 months from closing (through Feb 9, 2026) | HSAG / VPI | Yes | Up to $250,000/violation/day
§8.2 | FSO Retention | Col. (Ret.) Bryce Hendrickson retained as FSO; replacement only wit
§8.2 | FSO Retention | Col. (Ret.) Bryce Hendrickson retained as FSO; replacement only with DCSA approval for voluntary departure, incapacity, or cause; must hold TS/SCI | Ongoing during NSA term | VPI / DCSA | Yes | Up to $250,000/violation/day
§8.3 | Cleared Personnel Management | GSC exclusive authority over 212 cleared employees;
High
⚑ Non-compete / exclusivity restraint
§8.3 | Cleared Personnel Management | GSC exclusive authority over 212 cleared employees; HSAG receives anonymized aggregate headcount only; individual clearance matters within GSC/FSO purview | Effective at closing; ongoing | VPI GSC / FSO | Yes | Up to $250,000/violation/day
§9.1 | Data Segregation | Physical/logical separation of controlled/classified data and tr
§9.1 | Data Segregation | Physical/logical separation of controlled/classified data and trade secrets; financial/admin data shareable after GSC review; no shared cloud | Effective at closing; ongoing | HSAG / VPI IT / GSC | Yes | Up to $250,000/violation/day
§10.1 | Pre-Notification of Material Changes | 30-day advance notice to CFIUS for divestit
§10.1 | Pre-Notification of Material Changes | 30-day advance notice to CFIUS for divestitures, foreign subcontracts, cleared personnel changes, facility changes, government contract modifications | 30 days before any material change | HSAG | Yes | Up to $250,000/violation/day
§10.2 | Annual Compliance Reporting | Annual compliance audit by Whitmore Compliance Group
§10.2 | Annual Compliance Reporting | Annual compliance audit by Whitmore Compliance Group LLC; HSAG annual self-certification of compliance; reports to all CFIUS monitoring agencies | First annual audit due: Jan 19, 2025; annually thereafter | WCG (audit) / HSAG (self-cert) | Yes | Up to $250,000/violation/day
§11.1 | Government Contract Continuity | VPI continues all 14 active DoD contracts ($193M
§11.1 | Government Contract Continuity | VPI continues all 14 active DoD contracts ($193M top-5 backlog); HSAG may provide financial support with GSC notification; no non-U.S. subcontracting of classified/controlled work; novation per FAR 42.12 | Effective at closing; ongoing during contract periods | HSAG / VPI | Yes | Up to $250,000/violation/day
§11.2 | Export License Maintenance | Maintain DDTC Reg. No. M-24817; 3 DSP-5 licenses amen
§11.2 | Export License Maintenance | Maintain DDTC Reg. No. M-24817; 3 DSP-5 licenses amended; new ITAR licenses require GSC approval; EAR to allies: GSC notification; non-allied: GSC + DCSA approval | Effective at closing; ongoing | VPI (GSC oversight) | Yes | Up to $250,000/violation/day
§12.1–12.2 | Penalties & Enforcement | Up to $250,000/violation/day; 15-day cure for admin
High
⚑ Penalty / liquidated damages
§12.1–12.2 | Penalties & Enforcement | Up to $250,000/violation/day; 15-day cure for administrative violations; no cure for classified/controlled data breaches; injunctive relief; divestiture for willful material breach uncured after 60 days with written CFIUS notice | Upon violation | U.S. Government | Yes | As stated
§13.1 | Term & Sunset | 15 years (Jan 19, 2024 – Jan 19, 2039); petition for modification/
High
⚑ Automatic / tacit renewal
§13.1 | Term & Sunset | 15 years (Jan 19, 2024 – Jan 19, 2039); petition for modification/termination at 7 years (earliest: Jan 19, 2031); 5-year auto-renewal periods absent termination | Ongoing through Jan 19, 2039 (minimum) | All parties | Yes | N/A
§13.2 | Post-Termination Survival | Confidentiality and data protection: 10 years post-ter
High
⚑ Penalty / liquidated damages
§13.2 | Post-Termination Survival | Confidentiality and data protection: 10 years post-termination; penalty provisions: 3 years for term violations; gov't IP rights per statute (Bayh-Dole / DFARS) | Upon NSA expiration or termination | All parties | No | Up to $250,000/violation/day (3-year survival)
§14.1 | Governing Law & Dispute Resolution | U.S. federal law; exclusive jurisdiction in U
High
⚑ Non-compete / exclusivity restraint
§14.1 | Governing Law & Dispute Resolution | U.S. federal law; exclusive jurisdiction in U.S. District Court for the District of Columbia; no arbitration | Ongoing | All parties | No | N/A
§14.2 | Amendment & Waiver | Written consent of HSAG, VPI, and Treasury (as CFIUS Chair);
§14.2 | Amendment & Waiver | Written consent of HSAG, VPI, and Treasury (as CFIUS Chair); DoD/DOE consent required for classified/defense/energy amendments | As needed | All parties | No | N/A [sheet: Parties & Contacts] Party / Entity | Role | Principal Contact | Title | Address | Notes Halcyon Semiconductor Aktiengesellschaft | Acquiror | Stefan Lohse | General Counsel (Chefjustitiar) | Industriestraße 44, 01099 Dr