Contract analysis

I. Executive Summary This memorandum analyzes the Technology Control Plan ("TCP") obligations that will be imposed on Halcyon Semiconductor AG ("HSAG") and Marlowe Asset Management Photonics Inc. ("VPI") under the proposed National Security Agreement ("NSA," docket reference NSA-2024-0019) currently being negotiated with the Committee on Foreign Investment in the United States ("CFIUS"). The TCP is one of the central

II. Background A. Transaction Overview Halcyon Semiconductor AG ("HSAG") is a publicly traded Aktiengesellschaft organized under the laws of the Federal Republic of Germany, with its principal offices located at Industriestraße 44, 01099 Dresden, Saxony, Germany. HSAG is registered in the German commercial register under HRB 28416 at the Amtsgericht Dresden (Legal Entity Identifier: 5299007KXQ2M4GHILZ38). HSAG's ordi

III. Legal Framework Governing Technology Control Plans A. CFIUS Authority The Committee on Foreign Investment in the United States derives its authority from Section 721 of the Defense Production Act of 1950, as amended ("DPA"), codified at 50 U.S.C. § 4565. Section 721 was substantially amended by the Foreign Investment Risk Review Modernization Act of 2018 ("FIRRMA"), Pub. L. No. 115-232, which broadened CFIUS's j

IV. Detailed Analysis of TCP Obligations A. Scope of Controlled Information The draft TCP, as set forth in Annex B to the draft NSA circulated by CFIUS on November 3, 2023, defines the scope of information subject to TCP protections through the term "Controlled Technical Data." This definition is deliberately broad and encompasses multiple categories of sensitive information, reflecting CFIUS's intent to establish a

1. Physical Access Controls The TCP establishes a tiered framework for physical access controls at VPI's facilities, with the most restrictive controls applied to classified areas and progressively less restrictive controls applied to unclassified areas that nonetheless handle Controlled Technical Data. Classified Areas at the Albuquerque Fab. VPI's classified areas at the Albuquerque Fab — specifically, clean room S

2. Electronic Access Controls The TCP imposes rigorous electronic access controls designed to prevent unauthorized access to Controlled Technical Data through VPI's information technology systems. These requirements complement the cybersecurity provisions of NSA Annex D but are independently enforceable under the TCP. VPI's IT systems must be maintained on a completely separate network from HSAG's global IT infrastru

3. Personnel Controls The TCP establishes comprehensive personnel controls designed to ensure that all VPI personnel who have access to Controlled Technical Data are properly trained, vetted, and subject to ongoing compliance obligations. Training Requirements. All VPI employees with access to Controlled Technical Data must undergo TCP-specific training within thirty (30) days of the NSA effective date. Training must