VEEV · CIK 1393052
What Veeva Systems Inc. told the SEC could break it.
Almost everything Veeva flagged flows from its tight focus on one industry. Nearly all of its sales are to life sciences customers, and its revenue is somewhat concentrated within that base — its top 10 customers were 28% of total revenue in each of the last three fiscal years — so a downturn, funding cut or regulatory shift in that single sector hits demand directly. The regulatory exposures are sector-specific too: changes to pharmaceutical advertising rules, such as limits on direct-to-consumer ads, could dent offerings like its Crossix business, and a 2025 DOJ rule restricting cross-border transfers of U.S.-persons' personal data to China and other designated countries constrains how it handles data.
4 self-disclosed vulnerabilities, pulled from its own filings — each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Regulatory & policy
- life sciences advertising / DTC pharma rulesmedium
Regulatory changes to life sciences advertising — e.g., limits on or elimination of pharmaceutical direct-to-consumer advertising — could negatively impact Veeva offerings including its Crossix business.
“For example, regulatory changes with respect to life sciences advertising, such as limitations on or the elimination of the ability of pharmaceutical companies to engage in direct-to-consumer advertising, could negatively impact certain of our product offerings, including our Crossix business.”
SEC filing →As of 2026 - DOJ bulk personal-data cross-border transfer rulemedium
A 2025 DOJ final rule limits or prohibits certain transfers of and access to U.S.-persons' personal data by entities in China and other designated countries, constraining Veeva's cross-border data handling.
“In 2025, the U.S. Department of Justice issued a final rule that places limitations, and in some cases prohibitions, on certain transfers of and access to certain personal data of U.S. persons by persons and entities located in China (and other designated countries) or controlled by a person or entity located in China”
SEC filing →As of 2026
Customer concentration
- top 10 customersmedium
Revenue is relatively concentrated: the top 10 customers accounted for 28% of total revenues in each of FY2026, FY2025 and FY2024; loss or non-renewal of a key customer could slow or reverse revenue growth.
“In each of our fiscal years ended January 31, 2026, 2025, and 2024, our top 10 customers accounted for 28% of our total revenues.”
SEC filing →As of 2026
Other disclosures
- single-industry (life sciences) customer dependencemedium
Nearly all sales are to the life sciences industry, so any downturn, funding cut, or regulatory shift affecting that single sector directly affects Veeva's demand.
“Nearly all of our sales are to customers in the life sciences industry.”
SEC filing →As of 2026
The hidden graph
Who it depends on, and who depends on it.
Relationships surfaced from filings — including ones disclosed by the other side, which is how the non-obvious ones come to light.
Its suppliers
“For Veeva CRM and certain of our multichannel CRM applications, we currently utilize the hosting infrastructure provided by Salesforce.”
Cited →Amazon Web Services (Amazon.com, Inc.)
“For our Veeva Vault applications, including Vault CRM, and certain other Veeva Commercial Cloud applications, we utilize Amazon Web Services.”
Cited →
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch