The decision by the National Development and Reform Commission (NDRC) to prohibit a major American technology corporation from acquiring the high-profile AI startup Manus represents a seismic shift in how cross-border digital assets are governed. In April 2026, this intervention sent shockwaves through the venture capital community, signaling that the era of using offshore shell companies and physical relocation to bypass national security oversight has effectively ended. Despite Manus having already dissolved its original Chinese entities, moved its primary engineering workforce to Singapore, and established a new holding structure in the Cayman Islands, Chinese regulators asserted that the technological “DNA” of the company remained within their jurisdiction. This $2 billion deal, which was poised to be a defining transaction for the AI agent sector, was abruptly halted by an enforcement mechanism that prioritizes the intellectual lineage of a technology over the current legal domicile of its parent corporation. This event marks the first high-profile application of a “substance over form” doctrine that both Beijing and Washington have increasingly adopted to protect their respective technological frontiers.
Redefining Jurisdictional Boundaries Through Technological Lineage
The concept of “jurisdictional origin” has emerged as the primary legal foundation for the NDRC’s intervention, moving the regulatory focus away from traditional corporate headquarters toward the birth of the underlying technology. In the case of Manus, the regulatory review delved deep into the company’s history, examining where the initial code for its proprietary large language models was written and identifying the specific talent pools that contributed to its development. Because the founders were educated in Chinese state-funded institutions and the early research and development (R&D) cycles relied on domestic infrastructure, the NDRC concluded that the intellectual property remained part of the national strategic reserve. This approach suggests that the act of “de-China-ing” a startup through legal restructuring is no longer a viable method for escaping oversight, as the historical footprint of innovation creates a permanent regulatory link to the country of origin that cannot be erased by simply moving a team to a third-party hub like Singapore.
This shift toward tracing intellectual lineage forces a complete re-evaluation of how international investors conduct technical due diligence. It is no longer sufficient to verify the current ownership of patents or the location of servers; instead, an archaeological study of the software’s development history is now required to assess long-term regulatory viability. If a technology was fostered within a specific ecosystem, that ecosystem’s regulators now claim a perpetual right to oversee its transfer to foreign competitors. For the broader industry, this means that the mobility of top-tier engineering talent and the portability of code are being severely restricted by geopolitical considerations. The Manus decision effectively creates a “look-through” standard that permits governments to ignore the complexities of Cayman holding structures and Singaporean management hubs, focusing instead on the fact that the core value of the entity was generated within a specific national framework that remains protective of its high-tech exports.
The Strategic Shift From Export Controls to Security Reviews
One of the most significant aspects of the block on the Manus acquisition was the NDRC’s reliance on the “Measures for the Security Review of Foreign Investment” rather than conventional export control lists. This tactical choice provided regulators with a level of flexibility that rigid, category-based export catalogs often lack in the fast-moving field of artificial intelligence. While export controls typically target specific goods or well-defined software classes, the security review mechanism is grounded in broad, discretionary principles such as “national economic security” and “important information technology.” This allowed the NDRC to intervene in a transaction involving AI agents—a nascent technology that might not yet be precisely categorized in standard customs or trade lists. By using a security-based framework, the government can adapt its enforcement priorities in real-time, ensuring that emerging innovations of high strategic value are captured before they can be absorbed by foreign rivals.
Furthermore, the security review mechanism carries a unique and potent enforcement capability: the power to mandate the unwinding of transactions that have already been finalized. Unlike a typical trade dispute that might result in fines or prospective bans, an investment security order can force the legal and operational reversal of a multi-billion-dollar merger, effectively compelling parties to restore the pre-deal state. This creates an atmosphere of extreme uncertainty for multinational corporations, as even a “closed” deal can be dismantled years later if it is found to compromise the national interest. For the NDRC, this tool serves three strategic goals: preserving domestic R&D resources that were built through years of state and social investment, ensuring that restructuring templates designed to evade oversight do not become industry standards, and establishing a form of regulatory reciprocity with the United States. This mirrored approach ensures that any aggressive investment screening conducted in Washington is met with a corresponding level of scrutiny in Beijing.
Enforcement Realities and Practical Leverage Over Global Entities
A central question surrounding the Manus block involves how a government can enforce its will on a company that has already physically and legally exited its borders. The answer lies not in traditional territorial law, but in the practical leverage that the Chinese state maintains over the various parties involved in such complex transactions. For a major US technology firm seeking to acquire a startup like Manus, the risks of defying a Chinese regulatory order are catastrophic. These large acquirers typically maintain extensive supply chains, massive manufacturing hubs, and significant revenue streams within the Chinese market. Any act of non-compliance regarding an AI acquisition could lead to retaliatory measures against these existing assets, ranging from tax audits to operational restrictions. The threat of losing access to the world’s second-largest economy often far outweighs the benefits of integrating a single startup, no matter how advanced its technology might be.
Beyond corporate pressure, the founders and leadership teams of these startups often retain deep personal, professional, and familial ties to their home country. Even when a team is physically located in Singapore or San Francisco, residual operational connections such as remote employees, data center contracts, or testing facilities within China provide additional points of contact for regulatory influence. The NDRC’s ability to reach across borders is amplified by the fact that many “offshore” teams still rely on the domestic ecosystem for talent recruitment or specialized hardware. Consequently, the risk of being barred from future domestic ventures or facing legal consequences for family members creates a powerful incentive for founders to comply with unwinding orders. This reality effectively turns the “nexus” between the individuals and their country of origin into a legal tether that remains taut regardless of where the corporation’s legal seat is located in the world.
The Pressure Chain and the Paradox of Offshore Relocation
The Manus decision was not an isolated event but rather a reaction to a “pressure chain” initiated by US outbound investment rules that came into full effect in 2025. These American regulations placed immense pressure on institutional allocators to reduce their exposure to Chinese-origin technology, which in turn forced venture capital funds to demand that their portfolio companies relocate. To secure late-stage funding or prepare for an eventual exit on a Western exchange, companies like Manus felt compelled to “de-China” themselves. This meant moving engineering teams, transferring intellectual property to foreign entities, and severing visible links to the domestic market. The goal was to present a clean, “non-Chinese” profile to the US Treasury Department to ensure that the company remained an attractive target for American acquirers and a safe bet for Western capital.
However, the very actions taken to satisfy American compliance requirements are what ultimately triggered the NDRC’s intervention. The process of moving a high-value engineering team and transferring intellectual property is viewed by Beijing as an attempt to “extract” national technology assets. This creates a regulatory paradox for startups: if they stay in China, they are cut off from global capital and the lucrative US market due to American restrictions; if they attempt to move, they are blocked by Chinese regulators for endangering national security. This stalemate suggests that for high-stakes sectors like artificial intelligence, there is no longer a middle ground or a “safe” way to restructure. The steps taken to appear compliant in one jurisdiction are interpreted as an act of defiance in the other, leaving startups trapped in a geopolitical tug-of-war that can lead to the total paralysis of their business operations and an eventual collapse of their valuation.
Failure of Contractual Safeguards in the Face of Dual Exposure
In the years leading up to the current crisis, investors relied heavily on complex contractual mechanisms to shield themselves from cross-border regulatory risks. These included regulatory trigger clauses that required a startup to repurchase an investor’s shares if a deal was blocked, as well as mandatory relocation requirements that tied funding milestones to the physical movement of the team. The Manus case has proven that these safeguards are often toothless in practice. If a company has already deployed its capital into intensive R&D, it may lack the liquidity to honor a repurchase clause, leaving investors with equity in a company that is legally prohibited from being sold. Similarly, forcing a team to move outside of China only serves to heighten the visibility of the company to the NDRC, effectively waving a red flag that invites the very scrutiny the relocation was intended to avoid.
This environment of “dual exposure” has fundamentally altered the risk profile of AI investments, as satisfying the demands of one regulator can now be used as evidence of non-compliance by another. For example, some firms have attempted to prove their independence from Chinese influence by proactively blocking Chinese IP addresses or publicly announcing the abandonment of the domestic market. While these moves are designed to appease US regulators, they provide the NDRC with clear proof of “coordinated technology extraction,” which can be used to justify an immediate block on the grounds of protecting the national interest. As a result, the contractual and strategic maneuvers that were once considered standard practice are now frequently counterproductive. Investors find themselves in a situation where the more they try to mitigate risk through legal engineering, the more they expose themselves to high-level intervention from both Washington and Beijing simultaneously.
Strategic Adaptation and the Rise of Archaeological Due Diligence
Moving forward, the global investment community must transition toward a much more sophisticated model of geopolitical risk assessment that prioritizes “archaeological” due diligence. Traditional financial and legal reviews are no longer sufficient to protect a multi-billion-dollar acquisition in the AI space. Instead, investors must investigate the deep history of a company’s code, identifying every institution, researcher, and lab that contributed to the initial development of the IP. If the technological foundation was laid within a protected national ecosystem, the asset must be priced as if it carries a permanent, non-removable regulatory burden. This requires a level of transparency that many startups may find difficult to provide, yet it is the only way for acquirers to avoid the catastrophic losses associated with an unwound deal or a blocked exit.
Beyond enhanced due diligence, the industry is likely to explore alternative structural arrangements that prioritize access over ownership. Licensing agreements, geographic ring-fencing, and the creation of entirely separate IP stacks for different regions may become the new standard for companies operating in sensitive sectors. These structures allow a company to leverage its innovation globally without the need for a full equity acquisition that would trigger a security review. Additionally, the use of convertible instruments that only execute upon reaching specific, pre-cleared regulatory milestones could provide a pathway for capital to flow while managing the risk of a government block. The Manus case demonstrated that the space for “frictionless” cross-border AI investment has vanished, replaced by a decade that will be defined by technological sovereignty and intense jurisdictional competition. Investors who successfully navigate this landscape will be those who integrate geopolitical strategy directly into their capital allocation process, treating regulatory risk as a core component of the AI asset class.
The final resolution of the Manus acquisition serves as a definitive case study in the limitations of global capital when confronted by the assertion of national technological sovereignty. To adapt to this new reality, stakeholders in the venture capital and strategic acquisition space should prioritize proactive engagement with regulators in both the source and target jurisdictions long before a deal is publicized. This involves a shift toward bilateral regulatory planning, where a transaction is designed from its inception to pass the scrutiny of both the NDRC and the Treasury Department simultaneously. Future success will depend on the ability to develop “neutral” technology stacks that can be independently verified as being free from the specific jurisdictional origins that trigger security concerns. By treating geopolitical compliance as a technical requirement rather than a legal hurdle, organizations can begin to build a more resilient framework for international collaboration in an increasingly fragmented digital world.
