# Structural Entity Plan: TS Public Sector Holdings

The two-layer firewall sub-holding for Tier-1 government-facing entities, per [D17](../../notes/decisions.md). Singapore intermediate layer (TS Public Sector Holdings Pte Ltd, incorporated Q4 Y1) plus Vietnamese sub-holding (TS Public Sector Holdings Vietnam JSC, incorporated Q1 Y2 just-in-time for first Tier-1 entity launch).

Exists to contain blast radius when (not if) one Tier-1 entity gets investigated, frozen, or sanctioned — the rest of the TS portfolio stays insulated.

---

## Identity

| Field | Value |
|---|---|
| Entity name (Singapore) | TS Public Sector Holdings Pte Ltd |
| Entity name (Vietnam) | TS Public Sector Holdings Vietnam JSC |
| Group | Attached to parent (sub-holding firewall) |
| Target launch | Singapore: Year 1, Q4 / Vietnam JSC: Year 2, Q1 |
| Type | Sub-holding (legal-entity firewall) |
| Legal structure | Singapore Pte Ltd → Vietnamese JSC → operating entities (each its own Vietnam OpCo) |
| Vietnamese majority required | Vietnamese JSC: typically yes (51%+ Vietnamese ownership at sub-holding level for sector-regulated portfolios) |

---

## Charter

**Primary mission:** Provide a legal firewall between TS Holdings (Singapore parent) and Tier-1 operating entities so that contagion patterns of Vietnamese investigations (banking freezes, legal-rep criminal liability, tax cascade, license revocation, exit bans, reputational spread) stop at the sub-holding boundary rather than spreading to the rest of the TS portfolio.

**Internal customers:** Tier-1 operating entities (per D17 / D22 / D23):
- Blue Dot Technology (launches Y2)
- Vitrine (launches Y3 Q1 — separated from Signet per D17)
- **TS National AI (launches Y3 Q4 — split from TS Intel per D23; gov-facing applied AI)**
- Argus (launches Y4)
- TS Data Services Gov-Cloud arm (launches Y4 — split from commercial arm per D17)
- **TS Field (launches Y4 — drone + IoT + applied robotics in one entity per D22)**
- Future Tier-1 entities as identified

**External customers:** None. Pure structural entity.

**What this entity does NOT do:**
- Operate any business directly
- Make capital allocation decisions independently of TS Holdings parent (parent retains capital allocation rights via shareholder agreement)
- Run shared services (Shared Services serves Tier-1 entities the same as any other, with appropriate access controls for sensitive data)
- House non-Tier-1 entities (Tier-2 and Tier-3 entities stay in normal industry-group structure under TS Holdings parent direct ownership)

---

## Service catalog / Operational spec

**Sub-holding governance services:**

| Service | Description |
|---|---|
| **Legal entity for ownership** | Owns equity in each Tier-1 operating entity (typically 50–80% per entity, with remainder to Vietnamese strategic co-investor) |
| **Banking firewall** | Separate banking relationship at Vietcombank or BIDV (per D17 banking allocation); cash flows between Tier-1 entities and TS Holdings parent route via sub-holding rather than direct |
| **Legal representative governance** | Sub-holding has its own Người đại diện theo pháp luật — Vietnamese citizen, not the founder; manages incoming legal communications, regulatory inquiries, court processes for the Tier-1 cluster |
| **Vietnamese strategic co-investor coordination** | Engagement with SCIC, FPT, Viettel, VNPT, Vietcombank, BIDV as minority co-investors at the sub-holding or per-entity level |
| **Tier-1 specific compliance coordination** | Annual compliance audit across Tier-1 entities (state secrets, anti-corruption, PDPD, procurement); coordinates with Shared Services Compliance lead |
| **Tier-1 cash management** | Inter-entity cash movement strictly per D17 (no intercompany loans; cost-plus services only) — sub-holding monitors |

**Ownership chain (per D17):**

```
TS Holdings Pte Ltd (Singapore) — founder vehicle
    │
    └── TS Public Sector Holdings Pte Ltd (Singapore intermediate)
            │
            └── TS Public Sector Holdings Vietnam JSC (Vietnamese-majority where required)
                    │
                    ├── Blue Dot Technology (Y2 OpCo) — TS Public 60%, Vietnamese co-investor 25%, ESOP 15%
                    ├── Vitrine (Y3 OpCo) — TS Public 70%, ESOP 15%, external Series A investors 15%
                    ├── Argus (Y4 OpCo) — TS Public 51%, Vietnamese strategic 25%, operator-CEO 9%, ESOP 15%
                    └── TS Data Services Gov-Cloud (Y4 OpCo) — TS Public 49%, VNPT/Viettel co-investor 36%, ESOP 15%
```

Specific ownership % varies per entity based on sector regulation (some sectors require 51%+ Vietnamese ownership at operating-entity level, not just sub-holding).

---

## Cost / billing model

**Funding:**
- Singapore Pte Ltd (Y1 Q4): $55K founder capital (~$40K incorporation/paid-up + ~$15K cross-border legal)
- Vietnamese JSC (Y2 Q1): VND 2–5bn (~$80–200K) initial chartered capital from TS Holdings via Singapore intermediate layer; increased per-entity as Tier-1 entities incorporate beneath

**Operating cost:**
- Annual: $50–120K (legal entity maintenance, accounting, compliance)
- Largely absorbed into Shared Services billing
- Sub-holding doesn't bill operating entities directly for "firewall services" — service is intrinsic to the structure

**Revenue (back to TS Holdings parent):**
- Dividends from Tier-1 entities flow up through sub-holding (Vietnam JSC declares dividends to Singapore intermediate to Singapore parent)
- Vietnamese withholding tax (5% on dividends under Singapore-Vietnam DTA per D2)
- No royalty/markup at sub-holding level (would create transfer-pricing complications)

---

## Team

**Dedicated headcount:** Minimal. Sub-holding is governed rather than operated.

**Year 1 (Singapore Pte Ltd only):**
- 1 part-time corporate secretary (Singapore — outsourced via Acclime or comparable)
- No dedicated FTEs

**Year 2 (Vietnamese JSC live):**
- 1 Người đại diện theo pháp luật (Vietnamese citizen; full-time but small operational scope — handles regulatory communications, compliance coordination, board operations)
- 1 part-time corporate secretary (Vietnam — outsourced)
- Banking and finance handled via Shared Services Finance Director

**Year 3+ (multiple Tier-1 entities):**
- 1 Sub-Holding General Manager (Vietnamese citizen, coordinates across Tier-1 entities)
- 1 Compliance coordinator (works with each Tier-1 entity's Independent Compliance Officer)
- Possibly 1 GR coordinator if ministry relationships scale beyond Shared Services GR capacity

---

## Governance

**Reports to:** TS Holdings parent board (Singapore intermediate); Singapore intermediate's board governs Vietnamese JSC.

**Board composition (Vietnamese JSC):**
- Vietnamese-citizen Chairman (often Vietnamese strategic co-investor's designee)
- Founder representative (TS Holdings designee)
- Vietnamese-citizen General Manager
- Vietnamese strategic co-investor designee
- Minimum 1 independent director Vietnamese national from Y3+

**Key policies owned:**
- Tier-1 entity tier classification (which entities sit here vs. elsewhere)
- Vietnamese strategic co-investor selection and management
- Inter-Tier-1 entity governance (separation; no data co-mingling; no shared back-office at entity level — Shared Services provides services with access controls)
- State-secret handling coordination
- Crisis communications protocol (when one Tier-1 entity has a regulatory issue)

**External advisors:**
- Vietnamese government-affairs counsel (specialist firm with ministry-level relationships)
- Vietnamese tax advisor (specialist in transfer pricing for related-party Vietnamese JSC structures)
- Big 4 auditor (Vietnamese JSC needs annual audit per Vietnamese standards)
- Specialist Vietnamese counsel for state-secret compliance (Y3+ if state-secret exposure materializes per individual Tier-1 entity)

---

## Dependencies

**Internal dependencies:**
- TS Holdings parent for initial capitalization
- Shared Services for finance, compliance, GR coordination
- Tier-1 entities to actually exist (sub-holding has no purpose without them)

**External dependencies:**
- Vietnamese strategic co-investor commitments (specific to each Tier-1 entity)
- Vietnamese FDI registration (Investment Registration Certificate from MPI)
- Vietnamese banking (Vietcombank or BIDV)
- Vietnamese legal counsel (Tilleke & Gibbins, Vision Associates, YKVN, or specialist gov-counsel firm)

**Regulatory:**
- Vietnamese Investment Registration Certificate (IRC) — required for FDI structures
- Vietnamese Enterprise Registration Certificate (ERC)
- Singapore Pte Ltd: ACRA, IRAS
- Vietnamese JSC: Tổng cục Thuế, MPI provincial office
- Sector-specific regulators per individual Tier-1 entity (MoPS for Argus, MIC for TS Data Services Gov-Cloud, etc.)

---

## Risks

1. **Singapore intermediate layer disregarded for tax purposes** — Vietnamese tax authority could argue the Singapore intermediate is a shell with no substance, attempting to reach through to TS Holdings parent.
   - **Mitigation:** Maintain real substance at Singapore intermediate — board meetings in Singapore, books in Singapore, dedicated counsel, separate banking, defensible economic purpose (the firewall is the economic purpose, well-documented).

2. **Vietnamese strategic co-investor conflict** — Co-investors at sub-holding or per-entity level may pursue interests divergent from TS Holdings (e.g., favor their parent corporation in customer deals, push for early exit, block strategic moves).
   - **Mitigation:** Shareholder agreements with explicit drag-along, tag-along, deadlock resolution, and reserved-matters provisions; minority stakes (10–25%) limit blocking power; multiple co-investors across Tier-1 entities reduce single-relationship risk.

3. **Firewall fails in practice** — investigators successfully argue the sub-holding is a sham and reach into TS Holdings parent.
   - **Mitigation:** Real substance (above); separate legal representatives (founder never holds Người đại diện role anywhere in this chain per D17); banking separation (Tier-1 entities at Vietcombank/BIDV, rest of TS at Techcombank/VPBank/DBS); document retention demonstrating arm's-length operations; preempt regulatory inquiries through proactive GR engagement.

4. **Vietnamese strategic co-investor unavailability** — for Tier-1 entities requiring Vietnamese majority (Argus most acutely), if no acceptable Vietnamese strategic partner is identified, entity can't launch.
   - **Mitigation:** Pre-launch co-investor identification (per D17 — 6+ months before entity incorporation); multiple candidates per Tier-1 entity; willingness to decline sectors where no clean co-investor exists.

---

## Lifecycle and evolution

**Year 1 (Singapore intermediate only):** TS Public Sector Holdings Pte Ltd incorporated Q4; no Tier-1 entities yet; minimal operations; ~$55K total cost

**Year 2 (Vietnamese JSC live; first Tier-1 entity):** TS Public Sector Holdings Vietnam JSC incorporated Q1 with chartered capital VND 2–5bn; Blue Dot Technology incorporated under it Q4; Vietnamese co-investor for Blue Dot identified and committed

**Year 3 (multiple Tier-1 entities):** Vitrine incorporated under sub-holding; sub-holding scope expands; 1 dedicated Vietnamese GM hired

**Year 4 (peak Tier-1 cluster):** Argus and TS Data Services Gov-Cloud incorporated; Vietnamese majority structures for both; strategic co-investors (Viettel or VNPT for TS Data Services Gov-Cloud; ministry-relationship co-investor for Argus)

**Year 5+ (steady state):** Sub-holding houses 4–6 Tier-1 entities; mature operations; potentially adds international Tier-1 equivalents if entities in Indonesia/Thailand/Philippines have similar government-customer exposure

**Decommissioning trigger:** Never. Firewall is permanent structural infrastructure for as long as TS Holdings has any Tier-1 entity.

---

## Strategic co-investor strategy per entity (Y2–Y4 timeline)

Per D17 — for each Tier-1 entity, identify Vietnamese strategic minority co-investor:

| Entity | Target launch | Strategic co-investor candidates | Why |
|---|---|---|---|
| **Blue Dot Technology** | Y2 Q4 | SCIC (sovereign investor); Vietnamese environmental-data partner if exists | Environmental data sold to MoNRE; political-cover value of SOE investor |
| **Vitrine** | Y3 Q1 | SCIC; cultural-sector partner (rare); private Vietnamese family office | MoCST customer base; smaller capital need so co-investor selection optional but valuable |
| **Argus** | Y4 Q2 | FPT (politically aligned, technology-credible); Viettel (military-owned, natural cyber alignment) | Cybersecurity for state actors; Viettel is the most credible co-investor given military lineage |
| **TS Data Services Gov-Cloud** | Y4 Q2 | VNPT (telecom infrastructure peer); Viettel (military-owned, gov-cloud aligned) | Cloud infrastructure; competes with VNPT/Viettel for some customers — partnership defuses competition |

Pre-launch co-investor engagement begins 12–18 months before entity incorporation. Identifying and securing strategic co-investor is its own gating item alongside D18 four-gate framework.

---

## Crisis playbook (when a Tier-1 entity has an incident)

Brief operational protocol — fuller detail in [government-customer-compliance.md](../government-customer-compliance.md):

**Within 24 hours of incident:**
- Sub-holding General Manager activates external Vietnamese legal counsel
- Founder + Sub-holding Chairman briefed; press silence
- Whistleblower channel intake reviewed for any related earlier reports
- Banking team confirms whether asset preservation orders are likely

**Within 7 days:**
- Coordination with affected Tier-1 entity's CEO and legal rep
- External communications strategy (typically: minimal proactive comment; reactive only)
- Insurance carriers notified (D&O Vietnamese policy)
- Cross-Tier-1 entity protective measures (no one else from the cluster should engage publicly)

**Ongoing:**
- Weekly review with founder + Sub-holding Chairman + external counsel
- Documented protective measures preventing contagion to non-Tier-1 entities
- Strategic co-investor relationships managed personally by founder (these are political insurance worth preserving)

---

## Related documents

- [../aggressive-8-year-growth-plan.md](../aggressive-8-year-growth-plan.md) — Y1 Q4 sub-holding incorporation in deployment plan
- [../government-customer-compliance.md](../government-customer-compliance.md) — operating disciplines for Tier-1 entities
- [../../notes/decisions.md](../../notes/decisions.md) — D17 (the structural framework this entity operationalizes); D4 (groups as governance constructs — this is the documented exception); D7 (banking separation); D1 (Singapore parent structure)
- [ts-shared-services.md](ts-shared-services.md) — provides finance, compliance, GR support to Tier-1 entities via this sub-holding