← All companies

CDNS · CIK 813672

What Cadence Design Systems, Inc. told the SEC could break it.

Cadence's most prominent disclosures center on U.S.-China export controls. In July 2025 it settled with BIS and the DOJ over 2015-2021 violations tied to a subsidiary's $45.3 million of sales to a China customer and the subsequent transfer of the technology, and in May 2025 BIS imposed (then rescinded) a license requirement for exporting its EDA software and technology to parties in China or Chinese military end users, with later Entity/Military-End-User-List restrictions extended to 50%-owned affiliates — leaving its access to the Chinese market and compliance posture as live exposures. Its other flagged risks are supply-side: it depends on a single or limited number of suppliers and on contract manufacturers for its emulation hardware, and it outsources substantially all of its infrastructure to third-party data-center providers.

4 self-disclosed vulnerabilities, pulled from its own filings — each in the company’s words, with the source. This is the risk register almost nobody reads.

In its own words

What could break it.

Litigation

  • BIS/DOJ export-control settlement (July 2025) — 2015-2021 violations, $45.3M China sales + tech transfermedium

    On July 27, 2025, Cadence settled with BIS and the DOJ over export-control violations that occurred 2015-2021, primarily involving a Cadence subsidiary's sales of products/services valued at $45.3 million to a China customer and subsequent transfer of the involved technology — illustrating material export-compliance exposure.

    on July 27, 2025, we reached a settlement with each of BIS and the U.S. Department of Justice ("DOJ") that resolved matters relating to export control violations that occurred between 2015 and 2021 primarily involving sales initiated by a Cadence subsidiary of products and services valued at $45.3 million in total over that period to a customer in China

    SEC filing →As of 2026

Regulatory & policy

  • China BIS EDA-software export controls (May 2025 license requirement ECCN 3D991/3E991; Entity/Military-End-User-List 50% rule)medium

    On May 23, 2025, BIS required a license for export/re-export/in-country transfer of Cadence's EDA software and technology (ECCNs 3D991/3E991) when a party is in China or a Chinese military end user (rescinded July 2, 2025); BIS later extended Entity/MEU-List restrictions to 50%-owned affiliates (Sept 29, 2025, with a one-year suspension), and China's 2030 semiconductor-leadership policy raises competitive and access risk.

    on May 23, 2025, BIS informed us that a license was required for the export, re-export or in-country transfer of EDA software and technology classified under Export Control Classification Numbers (ECCNs) 3D991 and 3E991 on the Commerce Control List (“EDA Software and Technology”) when a party to the transaction is located in China or is a Chinese "military end user"

Sole-source dependency

  • single/limited-supplier + contract-manufacturer dependence for hardware (emulation) componentsmedium

    Cadence depends on a single supplier or a limited number of suppliers for certain hardware components and on contract manufacturers to produce its hardware (emulation) products, making it vulnerable to supply disruption and price fluctuation.

    We depend on a single supplier or a limited number of suppliers for certain hardware components and contract manufacturers for production of our hardware products, making us vulnerable to supply disruption and price fluctuation.

    SEC filing →As of 2026

Supplier concentration

  • reliance on third-party data-center providers (substantially all infrastructure outsourced)medium

    Cadence outsources substantially all of its infrastructure and relies on third-party data-center providers; disruption in their operations, limitations on capacity, or interference with Cadence's use could adversely affect its cloud/IP services and business.

    We rely on third-party data center providers and any disruption in the operations of these third-party providers, limitations on capacity or interference with our use could adversely affect our business, financial condition and results of operations. We outsource substantially all of the infrastructure

    SEC filing →As of 2026

In the MyPRIA app, this is checked against the companies you actually own.

← World Watch