ORCL · CIK 1341439
What Oracle Corporation told the SEC could break it.
Oracle's disclosures converge on its hardware supply chain. It relies on third-party manufacturing partners located outside the U.S. to build and distribute most of its hardware, and on sole sources for certain components — with some cloud-infrastructure technologies available from only a single vendor — so production problems or delays could mean lost sales and higher cloud and license costs. Those dependencies sit in geopolitically sensitive places: it flags component constraints, tariffs and customs controls, and political unrest such as China–Taiwan tensions and shipping disruptions in the countries where its single-source vendors operate.
3 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Geographic concentration
- outsourced hardware manufacturing concentrated with partners outside the U.S.medium
Oracle relies on third-party manufacturing partners located outside the U.S. to produce and distribute most of its hardware products; their production problems, delays, or trade-control impacts could cause lost sales and higher costs affecting cloud and license margins.
“located outside the U.S. From time to time, these partners experience production problems or delays or cannot meet our demand for products on a timely or cost-effective basis, including as a result of changes to trade laws or regulations, tariffs, sanctions and export or import controls.”
SEC filing →As of 2025 - supply chain exposure to China–Taiwan tensions and trade controlsmedium
Oracle's supply-chain operations are affected by component constraints, political unrest such as China–Taiwan tensions, tariffs/customs controls, and shipping disruptions in the countries where its single-source component vendors are located or products are shipped.
“Our supply chain operations are affected by industry consolidation and component constraints or shortages, natural disasters, political unrest (such as the tensions between China and Taiwan), public health crises, changes to trade laws or regulations, tariffs and customs controls, port stoppages, shipping interrupti”
Sole-source dependency
- sole-source hardware components; single-vendor cloud-infrastructure technologiesmedium
Oracle relies on sole sources for certain hardware components, and some technologies/components for its cloud infrastructure can only be purchased from a single vendor due to price, quality, technology or availability constraints.
“However, we do rely on sole sources for certain hardware components.”
SEC filing →As of 2025
The hidden graph
Who it depends on, and who depends on it.
Relationships surfaced from filings, including ones disclosed by the other side, which is how the non-obvious ones come to light.
Its customers
“our VM-Series virtual firewalls are sold on Amazon's AWS Marketplace, Microsoft's Azure Marketplace, Alphabet's Google Cloud Marketplace, and Oracle Corporation's Ora[cle Cloud Marketplace]”
Cited →“Additionally, we host customer data within Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure data centers located in the United States.”
Cited →“the migration process and reliance on Oracle Cloud introduce substantial risks.”
Cited →
Its suppliers
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch