What is CFIUS Review?

Definition

CFIUS Review is a U.S. national security review of certain foreign investments in or acquisitions of U.S. businesses, assets, or real estate. CFIUS, the Committee on Foreign Investment in the United States, evaluates whether a transaction could create national security concerns and may recommend mitigation measures, require restructuring, or refer matters to the President.

For finance and transaction teams, a CFIUS review is an important part of evaluating acquisition feasibility, transaction timing, ownership structures, and regulatory exposure. It is particularly relevant when a foreign investor may obtain control, sensitive information, critical technology, or access to strategically important infrastructure.

Table of Contents

When a CFIUS Review Applies

CFIUS jurisdiction can extend beyond traditional acquisitions that give a foreign person control of a U.S. business. Certain non-controlling investments can also fall within its jurisdiction when they provide specified rights relating to sensitive personal data, critical technologies, or critical infrastructure. Covered real estate transactions may also be relevant in designated locations.

The review therefore begins with a transaction-specific assessment rather than simply asking whether a buyer is foreign. Teams typically examine the investor's ownership, voting rights, governance arrangements, access rights, target activities, data holdings, technology, facilities, and the nature of the proposed transaction.

How the CFIUS Review Process Works

A transaction team generally begins by identifying whether CFIUS has jurisdiction and whether filing is mandatory or voluntary. The parties then evaluate the transaction's national security profile and determine the appropriate filing strategy.

  • Transaction assessment: Identify foreign ownership, control rights, sensitive activities, assets, technologies, data, and facilities.
  • Filing strategy: Determine whether a declaration, notice, or other submission is appropriate based on the transaction and applicable rules.
  • Government review: CFIUS evaluates the transaction and may request additional information or conduct further investigation.
  • Mitigation: Where national security concerns can be addressed through safeguards, the parties may negotiate mitigation arrangements.
  • Resolution: The transaction may proceed, proceed subject to mitigation, be abandoned, or face further action under applicable authority.

Timing should be incorporated into the transaction timetable because regulatory review can affect signing, closing conditions, financing arrangements, and integration planning.

Key Areas Examined During Review

CFIUS analysis focuses on the characteristics of both the buyer and target. A sensitive target can require deeper analysis even when the commercial rationale for the transaction is straightforward. Important areas can include critical technologies, critical infrastructure, sensitive personal data, government contracts, export controls, foreign ownership, and access to facilities or systems.

Financial diligence should also connect regulatory findings with the transaction model. A potential mitigation agreement, delayed closing, restricted access arrangement, or divestiture requirement can affect projected cash flow, valuation assumptions, financing commitments, and the expected investment strategy.

Financial and Operational Preparation

Effective preparation requires transaction, legal, finance, security, tax, procurement, and operational teams to work from consistent information. A purchase order may provide useful evidence about supplier relationships and controlled spending, while accounting records can help establish how sensitive business activities are reflected financially.

Accounting teams may also use a chart of accounts to organize transaction-related expenses, acquisition costs, and business-unit reporting in a way that supports financial controls and auditability. A focused P L Review can further help management understand how the target's revenue sources, operating expenses, and customer concentration relate to the transaction.

CFIUS preparation often intersects with several other review disciplines. A Contract Review can identify government obligations, change-of-control provisions, confidentiality requirements, data-access restrictions, and other contractual terms relevant to the transaction.

A Coding Review can support consistent classification of transaction and operating data when finance teams need to trace expenses, business activities, or reporting categories. Maintaining reliable documentation is equally important because transaction teams may need to demonstrate how ownership, access, controls, and responsibilities were evaluated.

Where vendor management is part of the transaction, Audit Trails can document actions taken by humans or AI, providing transparency into vendor-management activity and supporting subsequent review.

Tax and Regulatory Considerations

CFIUS review is distinct from tax compliance, but transaction diligence should still consider tax obligations that can affect the overall deal assessment. For example, sales tax validation may require reviewing jurisdiction rules, nexus, exemptions, tax overcharges, and supporting certificates when the target operates across multiple jurisdictions.

Separating CFIUS considerations from other regulatory workstreams helps teams assign clear ownership while maintaining a unified transaction record. This approach can improve the quality of financial decisions and help executives evaluate the full implications of a proposed investment.

Best Practices for CFIUS Readiness

  • Identify potential CFIUS jurisdiction early in the transaction lifecycle.
  • Document ownership structures, voting rights, governance rights, and access arrangements.
  • Map sensitive data, technologies, infrastructure, facilities, and government relationships.
  • Coordinate legal, finance, tax, security, technology, and operational diligence.
  • Connect regulatory findings to valuation, financing, closing conditions, and integration plans.
  • Maintain organized evidence supporting representations made during the review process.

Summary

CFIUS Review is a critical transaction diligence process for qualifying foreign investments involving U.S. businesses, assets, or real estate. Understanding jurisdiction, preparing accurate transaction information, evaluating national security factors, and connecting regulatory findings to financial and operational planning can help buyers make informed investment decisions. Strong documentation and cross-functional coordination also support a clear record throughout the transaction lifecycle.