OOMA · CIK 0001327688
What Ooma, Inc. told the SEC could break it.
Ooma's entire risk register is about a geographically exposed supply chain. Its contract manufacturers and component suppliers are largely in China, Vietnam, Taiwan, and other parts of Asia, and several components in its on-premise and end-point devices are single-sourced — so a disruption at those suppliers, or U.S. import tariffs on China- and Vietnam-sourced goods (including IEEPA tariffs partly struck down by the Supreme Court in February 2026), could raise costs and hit gross margin. Separately, it depends on third-party engineering and software-development contractors based in Russia, leaving that work exposed to sanctions and the fallout of Russia's invasion of Ukraine.
4 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Geographic concentration
- Russia-based engineering and software contractorsmedium
Ooma depends on third-party contractors in Russia for engineering and software development; sanctions and the Ukraine war could impair its ability to continue transacting with them.
“In particular, we depend on third-party contractors located in Russia for engineering and software development services. We cannot assure you that our ability to continue transacting with third-party contractors in Russia will not be impacted by the effects of Russia's ongoing invasion of Ukraine and resulting international sanctions.”
- Asia-concentrated contract manufacturing (China, Vietnam, Taiwan)medium
Ooma's third-party contract manufacturer and component supplier facilities are largely located in China, Vietnam, Taiwan and other Asian countries, exposing supply to regional disruption.
“occurrence of other events outside our control, such as public health crises, trade disputes, changes in trade policies, natural disasters or climate change, could impact our suppliers' facilities and component providers, many of which are located in China, Vietnam, Taiwan and other countries in Asia.”
Regulatory & policy
- U.S. import tariffs (IEEPA) on China/Vietnam-sourced goodsmedium
Tariffs on goods imported from China and Vietnam (where Ooma sources products and components), including IEEPA tariffs partly struck down by the Supreme Court in Feb 2026, could harm revenue and gross margin.
“For example, the current U.S. administration announced tariffs on goods imported from various countries, including from China and Vietnam where we source some of our products and components, under the International Emergency Economic Powers Act ("IEEPA"). In February 2026, the U.S. Supreme Court issued a ruling striking down certain tariffs previously imposed under IEEPA.”
Sole-source dependency
- single-sourced device componentsmedium
Several components in Ooma's on-premise and end-point devices are single-sourced; any interruption from those sole suppliers could disrupt operations.
“Additionally, several components used in our on-premise devices, end-point devices and new products are “single sourced” and any interruption in the suppliers of such components or other impacts related to such sole suppliers, such as an increase in tariffs on goods imported from outside the United States, could cause our business and operating results to suffer as we identify and establish alternative sources of components.”
SEC filing →As of 2026
The hidden graph
Who it depends on, and who depends on it.
Relationships surfaced from filings, including ones disclosed by the other side, which is how the non-obvious ones come to light.
Its customers
“We also have strategic partnerships with third parties, such as T-Mobile, which enable us to sell our services and products to certain of their customers.”
Cited →
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch