CWAN · CIK 0001866368
What Clearwater Analytics Holdings, Inc. told the SEC could break it.
Clearwater's flagged risks are the structural dependencies of a global SaaS provider. A large share of its engineering and operations workforce sits in India — 1,118 of its 3,000-plus employees, nearly matching its U.S. headcount — concentrating exposure to that country's political, regulatory and labor conditions. Its platform also runs almost entirely on Amazon Web Services, so an outage or disruption there would hit its service directly, and because it collects and stores personal data on individuals across many countries, it is subject to a growing web of cross-border data-privacy laws and regulators.
3 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Geographic concentration
- workforce concentrated in US and Indiamedium
Of Clearwater's 3,000+ employees, 1,118 are in India (vs. 1,303 in the U.S.), concentrating its engineering/operations workforce in India and exposing it to local political, regulatory and labor risk.
“Of these employees, 1,303 were located in the United States, 1,118 were located in India, 319 were located in the United Kingdom, 153 were located within the European Union, and 109 based in other international locations.”
Regulatory & policy
- cross-border data-privacy / personal-data lawsmedium
Because Clearwater collects and stores personal information of individuals in many countries, it is subject to numerous and evolving data-protection/privacy laws and regulators, raising compliance cost and liability risk.
“we may collect and store the personal information of individuals who live in many different countries. Accordingly, we may be subject to those countries' privacy laws and the jurisdiction of such regulators by collecting or storing the”
SEC filing →As of 2026
Supplier concentration
- AWS hosts substantially all of CWAN's cloud servicemedium
Clearwater hosts substantially all of its SaaS platform on Amazon Web Services data centers; damage to, failure of, or interference with AWS would cause delays or outages and harm its business.
“We currently host substantially all of our cloud service from third-party data center facilities from several global locations operated by Amazon Web Services (“AWS”).”
SEC filing →As of 2026
The hidden graph
Who it depends on, and who depends on it.
Relationships surfaced from filings, including ones disclosed by the other side, which is how the non-obvious ones come to light.
Its suppliers
Amazon Web Services (Amazon.com, Inc.)
“We currently host substantially all of our cloud service from third-party data center facilities from several global locations operated by Amazon Web Services (“AWS”).”
Cited →
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch