Editor's Note: Most compliance risks for Chinese tech enterprises going global stem not from ignorance of legal rules, but from misjudging whether their business activities fall within regulatory scope.
Many enterprises devote substantial effort during the early stages of going global to company registration, bank account opening, and overseas contract signing, while overlooking deeper structural issues: whether technology ownership is clear, whether authorization chains are complete, and whether cross-border flows are compliant. These issues are not readily apparent when business is operating normally, but they tend to surface in concentrated fashion once financing due diligence, M&A transactions, or IPO audits are initiated — what is the legal basis for the overseas company to provide technology to clients? Who owns the core technology? Through what legal arrangements are the R&D outcomes of the domestic team authorized for use by the overseas entity? If these issues are not addressed at the structuring stage, they are nearly impossible to remedy through last-minute supplementary documentation during due diligence.
This article, the second in the "Chinese Tech Enterprises Going Global" series, examines the technology compliance issues that enterprises tend to underestimate in their overseas expansion, covering technology ownership, cross-border technology flows, export controls, Singapore structuring, and financing and M&A due diligence.
Author: Chinalink Law Cross-Border Compliance Team
01. Using Domestic Technology Through Overseas Entities Requires First Resolving Ownership and Authorization
When Chinese tech enterprises go global, many first focus on export controls, sanctions compliance, and data protection. These are important, but they are not the starting point. The starting point is a more fundamental question: who owns the core technology, and does the overseas company have the right to use it.
Singapore is the top choice for many Chinese tech enterprises going global — it offers a stable legal system, a mature business environment, well-developed financial services, and convenient connectivity to Southeast Asian and international capital markets. Enterprises establish entities in Singapore, engage with clients, receive payments, and secure financing; the registration process is generally straightforward. However, bank account opening, ongoing collections, and subsequent KYC reviews still depend on whether the enterprise can explain its actual business, the source of funds, and the function of the entity.
But there is a fundamental difference between tech enterprises and ordinary trading enterprises. For trading enterprises going global, the focus is on the flow of goods, capital, tax, and contracts. For tech enterprises going global, the underlying issues also involve source code, algorithm models, R&D personnel, intellectual property, and ongoing technical services. The Singapore company stands at the front line interfacing with global clients and capital, but what truly supports the business is often the China-based team, the China-based R&D system, and the technology held by the Chinese company.
The four most common scenarios in practice:
- The Singapore company contracts and collects payments from clients, but has not obtained technology authorization from the Chinese company;
- The Chinese team continuously provides R&D and operational support to the Singapore company, but without a service agreement;
- Investors invest in the Singapore entity, but the core IP remains with the Chinese company or in the founder's personal name;
- The overseas company sub-licenses or further authorizes technology to third parties, but the domestic ownership chain is incomplete.
The common feature of these four scenarios is that the business model is already operational, but the corresponding ownership and authorization documents are absent from the legal relationships. During the normal course of business, before any external review is triggered, enterprises typically do not feel direct pressure. However, once financing due diligence, M&A transactions, IPO audits, major client supplier reviews, or regulatory inquiries are initiated, any one of these gaps can become a material obstacle to the transaction.
From a practical perspective, this can be understood as an "ownership mapping" problem: every cross-border use of technology, every IP right, and every output of R&D personnel requires a corresponding legal document to explain "who owns, who authorizes, who uses, and on what terms." Where the mapping is incomplete, it may not affect today's operations from a commercial standpoint, but from a legal standpoint, it means there is a gap in the chain of control over key assets.
Case Scenario: A Semiconductor Equipment Enterprise's Singapore Structuring Problem
A Chinese semiconductor equipment enterprise plans to establish a regional sales and service entity in Singapore, with the Singapore company signing sales and technical service contracts with Southeast Asian clients. During the project, it was discovered that the core software, control systems, and technical documentation were all developed and maintained by the Chinese R&D team. The Singapore company had neither obtained a clear software license nor signed a continuing technical service agreement with the Chinese R&D team.
If this structure were used directly for financing or major client due diligence, investors would typically ask: On what basis does the Singapore company sell and maintain the relevant technology? Does the core IP belong to the financing entity? How are the R&D and operational services provided by the Chinese team priced? Are the relevant technologies subject to export controls or cross-border data restrictions?
This is not a problem that can be solved by simply supplementing a basic authorization letter; it requires a coordinated review of IP ownership, technology licensing, R&D services, cost allocation, data access, and export control screening.
02. Cross-Border Technology Flows Are Becoming a Focus of Export Control and Regulatory Scrutiny
If technology ownership determines whether the overseas company "can use" the technology, export controls determine whether it "can provide" the technology.
A significant number of enterprises hold a common misconception about "technology export": they believe it only concerns physical equipment leaving the country or military-industrial enterprises. Under the current regulatory framework, there is a significant gap between this assumption and enforcement practice.
According to incomplete statistics from publicly available legal databases and customs official website disclosures, approximately 331 export control-related administrative penalty cases were published by China's customs authorities nationwide in 2025, a notable increase from 2024. Among these, approximately 20 cases involved drones and related components, reflecting that drones, strategic minerals, graphite, and related dual-use items remain high-frequency areas of regulatory attention. Some cases indicate that export control risks may extend from administrative risks such as misdeclaration, classification errors, and insufficient end-use statements, to risks of smuggling or criminal investigation, although specific liability remains subject to the final determination of the competent authorities.
At the legal framework level, China's technology export control system is primarily built on three dimensions: the Export Control Law and the dual-use item control system; the Technology Import and Export Administration Regulations and the Catalogue of Technologies Prohibited or Restricted from Export, as revised by MOFCOM and MOST Announcement No. 28 of 2025; and the administrative penalty and criminal prosecution mechanisms at the customs level. This system is shifting from "formal review" to "penetrating review" — no longer merely checking whether an export contract has been signed or a declaration has been filed, but looking through to where the technology actually went, who is using it, and for what purpose.
On the Singapore side, enterprises likewise cannot focus exclusively on company registration and bank account opening. The Strategic Goods (Control) Act (SGCA) regulates not only physical exports but also intangible transfers of technology (ITT) — transmitting controlled technology out of Singapore via email, server downloads, cloud access, or similar means may require advance application for an ITT permit. According to publicly available Singapore Customs guidance, transferring strategic goods without a valid permit may, upon first conviction, result in a fine of up to S$100,000 or three times the value of the goods or technology, whichever is higher, or imprisonment of up to 2 years, or both; penalties are higher for repeat offenses. Enterprises involved in technology transactions, re-exports, resales, regional deliveries, or intangible technology transfers through Singapore entities should further assess permit requirements based on the specific goods and technologies involved.
In 2025, cases in Singapore involving high-end servers and chip flows drew market attention and brought greater scrutiny to end-use, end-user, and supply chain review in transactions relating to semiconductors, AI computing power, and high-performance computing. For Chinese tech enterprises, conducting regional transactions through Singapore entities does not mean they can bypass export controls and end-use or end-user review.
Singapore has also consistently emphasized in recent years that it does not wish to be used as a conduit for circumventing export controls. The updated Strategic Goods Control List (SGCO 2025), effective December 2025, further updates the scope of controlled strategic goods.
In practice, cross-border technology flows occur in approximately three ways:
First, direct delivery and deployment. Enterprises provide source code, algorithms, models, technical documentation, test data, or API capabilities to overseas clients or partners. Enterprises often understand this as "project delivery" and do not initially consider that it may involve dual-use item review.
Second, ongoing services and remote access. Chinese teams provide long-term R&D, system maintenance, model training, or cloud operations support to overseas entities. Overseas personnel may remotely access code repositories and testing systems in China. Such arrangements may also require compliance assessment in certain scenarios.
Third, changes in core technology rights in the context of financing and M&A. Pure equity transfers or group restructurings generally do not automatically trigger technology export reviews, but if the restructuring is accompanied by a permanent or exclusive technology license from the domestic entity to the overseas entity, ongoing remote technology delivery, or cross-border open access to core algorithms, it may fall within the scope of export control review.
These three approaches correspond to different risk stages: the first involves activities already undertaken but risks not yet identified; the second involves ongoing activities not yet taken seriously; and the third involves risks that will inevitably arise but for which preparation has not yet been made.
In addition, cross-border technology flows are often accompanied by cross-border data transfers. The storage and access controls for AI model training data, user behavior data, and customer materials should also be considered simultaneously in technology licensing, system deployment, and remote service arrangements.
03. Financing, M&A and IPO Due Diligence Will Centrally Test Whether the Technology Chain Forms a Closed Loop
In the due diligence phase of cross-border transactions, IP ownership is typically the area most susceptible to repeated questioning and most likely to expose structural deficiencies.
The four types of unclear ownership scenarios listed in Section 01 of this article generally do not constitute visible obstacles in the early stages of an enterprise. However, once the enterprise enters formal financing, M&A, or IPO preparation, IP ownership will almost inevitably become a core area of due diligence review.
Investors and counterparties typically ask the following questions during due diligence:
Who developed this technology, and is there a complete development record? Have employees, outsourced teams, and collaboration partners signed IP ownership and confidentiality documents? Is there a technology license or software license agreement between the Chinese company and the Singapore company, and are the scope, territory, term, and fees clearly defined? Does the overseas company have the right to sell externally, sub-license, or commercialize the technology? Are there any claims from former employers or collaboration partners? Can the core IP independently support future business plans? Does the overseas financing or M&A involve a material change in the underlying technology rights?
In practice, a significant proportion of cross-border transactions are blocked at the final stage, not because of an inability to agree on commercial terms, but because the due diligence process reveals that the historical structure cannot provide a clear explanation of ownership. Investors say the IP is not in the financing entity; the overseas company's revenue is genuine but the authorization chain is incomplete; the Chinese team contributed the main R&D outcomes, but without ownership and fee arrangements; the transaction documents appear to be an equity M&A, but in substance involve a transfer of key technology rights.
These issues reflect a systemic gap: when enterprises built their cross-border structures in the early stages, they focused on company registration, bank account opening, and business launch, while the ownership arrangements for technology, data, and IP were deferred. When financing or M&A is initiated, the deferred issues become front-line obstacles.
04. From Remedial Action to Proactive Design: Five Foundational Steps Before Going Global
In summary, Chinese tech enterprises face the same structural challenge in technology compliance: technology ownership, export control compliance, and financing due diligence preparation — these three elements need to shift from "remedial action" to "proactive design."
Specifically, before establishing an overseas company, transferring business, or accepting overseas financing, enterprises should at a minimum complete the following five worksheets:
Worksheet 1: Technology Asset Inventory. List the technologies, software, source code, algorithms, models, drawings, test data, and technical services to be provided, licensed, deployed, or made accessible to overseas entities, distinguishing between those independently developed by the Chinese company, those involving collaborative R&D, and those that may have sensitive attributes. This worksheet is not only an internal R&D management document but also foundational material for subsequent financing due diligence, client review, and regulatory consultation.
Worksheet 2: IP Ownership and Authorization Chain Table. Confirm item by item the ownership and authorization path for each core technology — who developed, who holds, who authorizes whom, on what terms, and within what scope. Service agreements, technology licenses, R&D outcome ownership arrangements, and cost allocation mechanisms between domestic and overseas entities should form an interlocking documentary system.
Worksheet 3: Technology Export Control Screening Table. Against the Dual-Use Items Export Control List and the Catalogue of Technologies Prohibited or Restricted from Export, as revised by MOFCOM and MOST Announcement No. 28 of 2025, determine whether the technologies to be provided cross-border fall within controlled scope, and whether they involve specific end-user or end-use risks. For Singapore entities involved in technology transactions, re-exports, or regional deliveries, also consider SGCA and ITT permit requirements.
Worksheet 4: Data Flow Map. Indicate where data is generated, who collects, who stores, who accesses, whether it is transmitted overseas, and what overseas teams can see. For AI enterprises, the sources of model training data, the handling of user behavior data, and the storage and access controls for client materials need to form an explainable compliance logic.
Worksheet 5: Financing/M&A Due Diligence Document Checklist. Assume that investors are entering today or a buyer is conducting due diligence — can the existing structure and documents explain the relationship between domestic and overseas entities, and the ownership and authorization chain for technology assets? If not, filling the gaps before the transaction occurs involves far lower cost and risk than supplementing materials on an emergency basis during due diligence.
Conclusion | Technology Provenance and Authorization Chains Determine Whether the Singapore Structure Can Truly Support the Business
The compliance focus for Chinese tech enterprises going global is undergoing a shift. In the past, enterprises focused on company establishment, bank account opening, and contract signing. Today, what truly distinguishes an enterprise's go-global capability is its ability to respond to the following questions:
Can the technology be provided to the overseas entity for use, and on what legal basis? Can data flow cross-border, and has a data flow map been drawn? Who owns the IP, and can it withstand due diligence at the time of financing and M&A? Are the relevant technologies, software, source code, or services subject to export controls — and the significant increase in export control enforcement in 2025 further illustrates that compliance in this area has shifted from "optional" to "prerequisite."
Singapore can be a very important international business platform. But its value lies not in the speed of registration, but in whether it can truly support overseas business. For tech enterprises, if a Singapore company is to contract externally, receive payments, secure financing, or license technology, it must be able to clearly explain technology provenance, authorization chains, data flows, and export control assessments. Only when these issues can be clearly explained is the Singapore structure not merely a formal overseas entity, but a business platform capable of withstanding scrutiny from clients, banks, investors, and regulators.
—END—
For further information on Chinese tech enterprises going global via Singapore, technology licensing, cross-border data flows, export controls, and related compliance arrangements, please contact the Chinalink Law professional team.
This article is compiled based on practical experience and publicly available legal analysis, for reference only, and does not constitute legal advice. Specific solutions should be assessed on a case-by-case basis, taking into account the enterprise's industry sector, technology type, data sources, shareholder structure, team distribution, counterparties, destination jurisdiction, and future transaction plans, with the advice of professional counsel.