Share with your CISO
Beijing has effectively nationalized agentic AI by forcing Meta to unwind its completed $2 billion acquisition of Manus, the Chinese-founded AI agent startup, and is now guiding a domestic consortium led by Tencent to buy it back at the same valuation. The mechanism wasn’t a specific export control rule. China’s NDRC used a catch-all foreign investment security review, applying an “origin over domicile” principle that reached straight through Manus’s Singapore holding structure to the Chinese roots of its technology. No deal has been signed yet, but the regulatory signal is already irreversible.
What this means for your business
The vendor risk question here isn’t hypothetical, and it doesn’t belong in a future audit cycle. Manus is an AI agent, meaning software that holds persistent API connections into enterprise tools, such as CRM platforms, document repositories, financial systems, and competitive intelligence feeds, and executes multi-step tasks autonomously without per-step human approval. If Tencent’s stake closes, Manus becomes an enterprise AI vendor majority-owned by Chinese domestic investors, each of whom operates under China’s National Intelligence Law, which legally requires cooperation with government intelligence requests. The combination of that architecture and that ownership creates a specific risk profile, not a theoretical one.
The structural legal condition is worth stating plainly. China’s National Intelligence Law (Article 7) requires every Chinese organization to “support, assist, and cooperate with national intelligence work.” This isn’t a contested interpretation. It’s the statute. A Chinese-majority-owned AI agent with live access to a company’s internal systems isn’t analogous to a Chinese-made router sitting at the network perimeter. It’s a continuously running process with read and write access across business-critical data, accumulating context over time. The recurring failure mode in enterprise AI procurement is treating data exposure as a privacy compliance question when it’s actually a national security question. Those require different governance frameworks and different remediation options.
The Manus case also redraws due diligence permanently for any Chinese-origin AI vendor, regardless of where it’s incorporated. The NDRC’s ruling established that offshore redomiciliation, staff relocation, and IP transfer don’t reset Beijing’s jurisdictional claim if the technology’s origin is Chinese. That principle now applies prospectively. Any vendor assessment of a Chinese-founded AI company needs a political risk layer that sits above the standard SOC 2 and data processing agreement review, because no contractual provision eliminates an obligation that exists in the vendor’s home country’s law. The question to weigh now isn’t whether a specific data request has happened. It’s whether your current vendor agreements account for the possibility that one could.
The 40% voluntary withdrawal rate for foreign technology M&A deals in China involving algorithms and data in Q1 2026, compared with 5% for manufacturing, tells you the market has already priced in the new reality. What that number doesn’t tell you is how many enterprise procurement teams have updated their vendor governance frameworks to match it. If Manus is in your stack, or on your evaluation shortlist, the ownership change is the moment to reassess what data categories the agent is authorized to access, not after the deal closes.
Concept deep-dive: Agentic AI
An AI agent differs from a chatbot the way an employee with system access differs from a consultant who only answers questions. A chatbot receives a prompt and returns a response, stateless and contained. An agent receives a goal, maintains working memory across steps, calls external tools (APIs, databases, browsers), and executes consequential actions autonomously. That persistent, cross-system access is what makes agentic AI a different regulatory category for Beijing, and a different risk category for enterprise security teams.
Based on reporting from Tencent to Lead $2B Manus Buyback as Beijing Treats Agentic AI as Sovereign Asset, originally published 2026-07-11 07:38:00.
