Last updated 5 days ago. Our resources are updated regularly but please keep in mind that links, programs, policies, and contact information do change.
A small federal committee called CFIUS has the power to reshape, delay, or kill Elon Musk’s $1.25 trillion merger between SpaceX and xAI based on national security concerns.
CFIUS has the power to block or reshape corporate deals when government agencies believe they threaten American security. The SpaceX-xAI merger will test whether that power extends to deals between two American companies that control technologies the Pentagon depends on.
Both companies are U.S.-controlled. Yet the merger triggers national security review because SpaceX operates classified contracts and runs Starlink, a satellite network that military and intelligence agencies depend on for communications. xAI develops advanced AI systems that could process or manipulate the data flowing through those satellites. The merged company could combine these capabilities in ways neither company alone could accomplish, creating vulnerabilities that adversaries could exploit.
CFIUS’s Expanded Authority
Congress passed a law in 2018 that dramatically expanded what CFIUS could review. The law created a new category of investments CFIUS can review, including small ownership stakes, board seats, or special access to company data when they involve “critical technologies,” “critical infrastructure,” or “sensitive personal data.”
Critical technologies are advanced systems the government won’t let companies sell abroad—like advanced AI or military satellites. Critical infrastructure includes telecommunications networks. SpaceX operates both.
The expansion meant CFIUS could now reach transactions involving U.S. companies and U.S. investors, not just foreign-controlled deals. This is how a combination of two American companies ends up under review by a committee with “Foreign Investment” in its name.
Filing Requirements and Voluntary Disclosure
SpaceX and xAI aren’t legally required to file with CFIUS because there’s no foreign buyer. Companies must file when a foreign buyer gets a large enough stake in a company producing critical technologies. That’s not happening here.
However, CFIUS can start its own investigation if member agencies believe it warrants scrutiny. Given SpaceX’s classified work and infrastructure designation, Treasury could start a review without the companies requesting it.
In practice, companies in this situation file voluntarily. The alternative is worse: CFIUS can force companies to undo deals years after they close. In 2020, a Chinese firm acquired Jupiter Systems, a video display technology company. Five years later, in January 2025, President Trump ordered the divestiture. The government decided retroactively that the deal threatened security.
SpaceX and xAI will almost certainly file. The risk of not filing—facing a forced breakup years later, after employees have been integrated and systems combined—is too high.
The Three-Part Security Assessment
CFIUS doesn’t publish a checklist for what makes a transaction dangerous. The law doesn’t define what counts as a national security threat, giving officials flexibility. Based on past decisions and government rules, CFIUS evaluates three things: threat, vulnerability, and consequence.
The threat assessment asks: what adversary poses a danger, and what do they want? The 2025 Annual Threat Assessment from the Office of the Director of National Intelligence identifies threats from China, Russia, Iran, and North Korea, though with different capabilities and objectives.
The vulnerability assessment asks: how could an adversary exploit this deal? CFIUS would examine whether foreign persons—through equity stakes, board seats, employment, or technical partnerships—could gain access to satellite control systems, AI training data, or the combined capabilities that emerge when both operate under one roof.
xAI has raised billions from outside investors, including venture capital firms with foreign limited partners. CFIUS would trace through those investment structures to identify any foreign persons who obtained special investment rights like board seats, veto power over decisions, or access to secret technical information.
Even if no single foreign investor reaches the ownership percentage that requires filing (typically 25% voting interest or certain special rights), CFIUS could still see the total foreign investment as a security risk. Venture capital fund structures complicate this because foreign government investment funds sometimes hold stakes in funds that hold board seats at portfolio companies. CFIUS must trace through multiple layers.
The consequence assessment asks: what happens if an adversary succeeds? Foreign access to satellite control systems could enable interception of military communications, disruption of GPS, or attacks on U.S. space assets. Foreign actors could leverage xAI’s AI capabilities to conduct sophisticated cyberattacks against Starlink or other critical infrastructure.
xAI’s AI capabilities combined with Starlink’s global data collection could enable surveillance operations at a scale that no single company has achieved before. Foreign governments could potentially access that capability through minority investment stakes or information-sharing agreements.
The CFIUS Review Process
If SpaceX and xAI file with CFIUS, they can file a brief form that starts a 30-day review, or a full “notice” that begins a more extensive process. For a transaction this size and sensitivity, the full notice is inevitable.
Companies typically submit a draft version 2-4 weeks after signing, giving CFIUS staff time to review and request revisions before the formal filing. Once the formal notice is submitted, CFIUS has about a week to determine whether the paperwork is complete.
During the initial review, any member agency can submit written questions, and parties must respond within three business days unless they get an extension. At the end of the initial review, CFIUS can approve the deal, request more information, or start a formal investigation. The investigation period lasts 45 days, potentially extending to 90 if CFIUS determines “extraordinary circumstances” exist. If CFIUS and the companies can’t reach agreement, the matter goes to the President, who has 15 additional days to approve, condition, suspend, or prohibit the deal.
If negotiations are slow, companies can pull their application and resubmit it with changes. This restarts the review period and gives them more time to negotiate.
If SpaceX and xAI file in February or March 2026, the process will likely take until mid-to-late 2026 or longer. This timeline matters because Musk has indicated SpaceX might pursue an IPO later in 2026. A pending CFIUS review complicates IPO planning because public investors want clarity about whether the merged entity will face operational restrictions or whether approval might be threatened.
Likely Conditions on Approval
The government rarely blocks deals completely. When conditions are imposed, they can be extensive.
For technology serving both civilian and military purposes, precedent suggests several categories of restrictions. First: keeping information separate. CFIUS would likely require strict separation between SpaceX’s satellite operations and xAI’s AI development, preventing employees from accessing both satellite secrets and AI system secrets simultaneously. xAI personnel could work with AI models and training data but couldn’t access satellite control systems or security codes. SpaceX personnel managing satellite operations couldn’t access xAI’s advanced AI models or computational infrastructure.
This separation would be enforced through computer systems, security checks, and regular audits. CFIUS frequently imposes such conditions when concerns relate to information access.
Second: government oversight and control. CFIUS often requires merged companies to create security committees with government-approved security officers overseeing implementation of conditions. For SpaceX-xAI, this might include: a security committee with representatives from both divisions, government-approved security officers for each division, rights for designated government representatives to attend certain board meetings as observers, and veto rights for government officials over hiring for sensitive jobs or moving data between divisions.
Past transactions have included requirements for board composition restrictions, special stock that gives the U.S. government veto power, and specific investment commitments.
CFIUS might require all communications between the two divisions about technology to be encrypted using government-approved protocols. Foreign employees couldn’t access satellite controls or advanced AI systems. The government would audit all data transfers between divisions, and the merged entity would maintain detailed records of all personnel access to sensitive systems.
The government’s penalty against Marlink, a satellite communications company, shows how seriously CFIUS takes access restrictions. In January 2026, the FCC and Department of Justice imposed a $175,000 penalty on Marlink for allowing 186 foreign-national employees to access U.S. communications infrastructure without required DOJ notification. CFIUS would likely impose similar notification requirements for SpaceX-xAI.
CFIUS increasingly requires companies to hire independent auditors who report directly to the government. These auditors can visit the company, interview employees, and review records. Monitoring costs hundreds of thousands to millions of dollars per year, paid by the merging parties.
Blocking the Deal
If CFIUS believed the deal would allow foreign countries to access the combined satellite-AI technology that couldn’t be adequately controlled, the President could block the deal. The question is whether the committee believes the separation rules and oversight systems would work, or whether the risks are so fundamental to the transaction structure that no amount of monitoring can address them.
It comes down to whether the government trusts a private company—even one run by an American citizen with extensive government contracts—to maintain separation between capabilities when the economic incentive is to integrate them.
Interagency Decision-Making
All agencies on CFIUS must agree, so disagreements can delay the decision. The committee includes Treasury (which chairs), Defense, State, Commerce, Energy, Justice, Homeland Security, and the U.S. Trade Representative.
For this deal, Defense would likely take the lead because of SpaceX’s secret government work. Treasury runs the process and is the main point of contact for the companies, but Defense’s concerns about satellite control, AI in weapons, or foreign access would heavily influence the decision.
State focuses on how the deal affects U.S. relationships with allies and whether it complicates selling technology overseas. If xAI’s funding sources or commercial relationships involve countries of concern, State would likely advocate for heightened scrutiny.
Commerce evaluates whether the deal helps or hurts America’s tech competitiveness. For an AI-satellite combination, Commerce would assess whether the merged entity’s capabilities create competitive advantages that U.S. allies need to access for their own security, or whether the combination makes it harder to control what technology gets sold abroad.
Justice often leads on enforcing the rules that CFIUS imposes. The Marlink penalty signals that Justice is actively monitoring and enforcing conditions on companies handling critical communications infrastructure.
Intelligence agencies provide threat assessments but don’t vote on the final decision. Intelligence assessments heavily shape how other agencies view the risks.
Precedent for Future Technology Deals
The decision here will shape how similar deals are built for years. If the government approves the deal with strict separation requirements, companies will have a model for combining critical technologies while maintaining government approval. If the government blocks or substantially restricts the deal, companies will avoid similar combinations.
More likely, CFIUS will approve the deal with conditions that cost the companies money but allow the combination to happen. That would establish a precedent that combinations serving both civilian and military purposes are possible but require substantial governance and operational controls.
As private companies increasingly develop technology that governments once controlled alone—satellite communications, artificial intelligence, advanced computing, biotechnology—the government faces a challenge: How can it benefit from private innovation while preventing adversaries from exploiting it?
CFIUS’s decision will largely determine whether American companies can combine their strengths and reduce costs necessary to compete with state-backed competitors from China and other rivals, or whether security requires keeping companies separate, even if it costs more.
Expected Timeline
If SpaceX and xAI file in February or March 2026, the draft review could finish by March, allowing the official filing by early April. CFIUS could approve the filing by mid-April, starting the official review. The initial review could conclude by late May or early June, after which CFIUS would decide whether to request additional information, start a formal investigation, or clear the transaction.
If CFIUS starts a formal investigation—which happens in most sensitive deals—that takes another 45 days, from late May through mid-July. If the companies and CFIUS can’t agree on conditions, the companies might pull their application and resubmit it, extending the process into August or September.
Treasury recently proposed new rules that would give companies only three business days to respond to government feedback. If those new rules take effect before the SpaceX-xAI review ends, it could significantly speed up negotiations.
SpaceX and xAI might suggest their own solutions to CFIUS’s concerns instead of waiting for CFIUS to demand them, showing they take security seriously and potentially speeding up the process. Talking to CFIUS staff before filing could help the companies understand which agencies are worried and what information or modifications might address them.
CFIUS moves slowly, especially for deals involving technology combinations it hasn’t reviewed before. SpaceX and xAI are creating a test case for how the government evaluates mergers involving technology that serves both civilian and military purposes, at a time when private companies control sensitive capabilities.
Our articles make government information more accessible. Please consult a qualified professional for financial, legal, or health advice specific to your circumstances.