Risk Sleuth
ORCL · 10-K filed 22 Jun 2026 · year to 31 May 2026

Oracle

30 named things its latest annual report says its results depend on, each in the company's own words. 21 of them are also named by other companies we've read.

Customers

U.S. federal government

earns fromnamed as a risk
For example, the U.S. federal government may terminate any of our government contracts and subcontracts at its convenience, or for default based on our performance.Risk factors (Item 1A)

Also named by ACN, ADSK, AKAM, AMRC, APG, CACI, CBRE, CI and 25 more

U.S. Department of War

earns fromnamed as a risk
Compliance with these cybersecurity requirements is complex and costly, and any failure or alleged failure to meet, or delays in meeting, the required security controls could result in liability, limit our ability to sell products and services, directly or indirectly, to the DoW and other federal and state government entities that implement similar cybersecurity requirements and adversely affect our reputation and sales.Risk factors (Item 1A)

Also named by AIR, BA, CACI, CDRE, CVLG, GD, HII, LHX and 4 more

Large OCI customers

concentrated innamed as a risk
In certain OCI offerings, we are more concentrated among a number of large customers, which could increase these risks.Risk factors (Item 1A)

Suppliers

Third-party data center providers

depends onnamed as a risk
In connection with these investments, we have entered, and expect to continue to enter, into long-term lease commitments with third-party data center providers and other significant commitments with suppliers of chips and other data center infrastructure.Risk factors (Item 1A)

Also named by CRWV, DOCN

Sole/single-source hardware component suppliers

depends onnamed as a risk
However, we do rely on sole and/or single sources for certain hardware components.Business (Item 1)

Third-party hardware manufacturing partners

depends onnamed as a risk
We rely on third-party manufacturing partners to produce most of our hardware products that we market and sell to customers and utilize internally to deliver Oracle Cloud offerings, and we distribute most of our hardware products from these partners’ facilities.Business (Item 1)

Partners and platforms

Amazon Web Services

competes withnamed as a risk
OCI’s multicloud services work with a number of our competitors’ products, including Microsoft Azure, Amazon Web Services and Google Cloud.Risk factors (Item 1A)

Also named by AAON, ABNB, ADSK, AIOT, BLK, CARR, CG, COF and 56 more

Microsoft Azure

competes withnamed as a risk
OCI’s multicloud services work with a number of our competitors’ products, including Microsoft Azure, Amazon Web Services and Google Cloud.Risk factors (Item 1A)

Also named by AIOT, AKAM, BLK, DDOG, DOCN, DOCU, EXTR, FFIV and 14 more

Google Cloud

competes withnamed as a risk
OCI’s multicloud services work with a number of our competitors’ products, including Microsoft Azure, Amazon Web Services and Google Cloud.Risk factors (Item 1A)

Also named by AAON, CME, DGX, ETSY, FTNT, GTLB, LBTYA, MSTR and 4 more

Oracle Partner Network

earns fromnamed as a risk
The companies that comprise our indirect channel network are members of the Oracle Partner Network.Business (Item 1)

Other companies

Oracle Cloud

earns from · 51%
The proportion of our cloud revenues relative to our total revenues has increased, and our cloud revenues represented 51%, 43% and 37% of our total revenues during fiscal 2026, 2025 and 2024, respectively.Business (Item 1)

Also named by ROP, ZM

Oracle Financial Services Software Limited

named as a risk
As the majority shareholder of Oracle Financial Services Software Limited, a publicly traded company in India, and Oracle Corporation Japan, a publicly traded company in Japan, we face several additional risks, including being subject to local securities regulations and being unable to exert full control that we would otherwise have if these entities were wholly-owned subsidiaries.Risk factors (Item 1A)

Competitors

SAP SE

competes with
Our enterprise cloud, software and hardware offerings compete directly with certain offerings from some of the largest and most competitive companies in the world, including Adobe Systems Incorporated, Alphabet Inc., Amazon.com, Inc., Cisco Systems, Inc., Intel Corporation, International Business Machines Corporation, Microsoft Corporation, Salesforce, Inc. and SAP SE, as well as other companies like Hewlett-Packard Enterprise and Workday, Inc.Business (Item 1)

Also named by TYL, WDAY

Epic Systems Corporation

competes with
For example, following our acquisition of Cerner Corporation, we also face competition from large healthcare IT providers such as Allscripts Healthcare Solutions, Inc., Arcadia Solutions, athenahealth, Inc., Epic Systems Corporation and InterSystems Corporation, among others.Business (Item 1)

Also named by CDNA

Places

Europe

earns fromnamed as a risk
political unrest, terrorism and war, including but not limited to the current Middle East conflicts and the Russia-Ukraine war and its potential economic and geopolitical impacts on Europe, where a material portion of our business is carried out;Risk factors (Item 1A)

Also named by ADSK, AME, AMRC, ATR, BCSF, BKNG, BMI, BMY and 60 more

China–Taiwan tensions

depends onnamed as a risk
Our supply chain operations are affected by industry consolidation and component constraints or shortages, natural disasters, political unrest (such as conflicts in the Middle East and the tensions between China and Taiwan), public health crises, changes to trade laws or regulations, tariffs and customs controls, port stoppages, shipping interruptions or other transportation disruptions or slowdowns, and other factors affecting the countries or regions where these single source component vendors are located or where the products are being shipped.Risk factors (Item 1A)

Also named by CLS, FTNT, IOT, MRVL, PANW, SYK, ZBRA

Commodities and inputs

Euro

exposed to its price · $(2,767) million earnings impact from 10% decrease in foreign currency exchange ratesnamed as a risk
Our principal currency exposures include the Australian Dollar, Brazilian Real, British Pound, Euro, Indian Rupee, Japanese Yen and Saudi Riyal.Market risk (Item 7A)

Also named by ABBV, ABNB, ABT, ADBE, ADI, AME, AMG, AMGN and 186 more

Graphics processing units (GPUs)

depends onnamed as a risk
For example, industry supply capacity for AI accelerators, including graphics processing units, as well as memory devices, is competitive, and we at times have to accept less favorable terms with suppliers to minimize supply constraints.Risk factors (Item 1A)

Also named by AMZN, HPE, MSFT, RDDT

Electricity for data centers

exposed to its pricenamed as a risk
In addition, power prices can be volatile, including due to extreme weather events and market structure in certain regions, and increases in energy costs can adversely affect our margins, particularly where customer pricing is fixed or committed.Risk factors (Item 1A)

Saudi Riyal

exposed to its pricenamed as a risk
Changes in the values of major foreign currencies, particularly the Australian Dollar, British Pound, Brazilian Real, Canadian Dollar, Euro, Indian Rupee, Japanese Yen and Saudi Riyal, relative to the U.S. Dollar can significantly affect our total assets, revenues, operating results and cash flows, which are reported in U.S. Dollars.Risk factors (Item 1A)

Regulators

U.S. Food and Drug Administration (FDA)

subject tonamed as a risk
We have medical devices registered with the U.S. Food and Drug Administration and other foreign medical device regulators, and certain other products and solutions may now or in the future be regulated under the Federal Food, Drug and Cosmetics Act, as amended, and other foreign medical device laws.Risk factors (Item 1A)

Also named by A, ABBV, ABT, AMGN, ARE, ARWR, ATR, AXGN and 112 more

Laws and programs

General Data Protection Regulation (GDPR)

subject to · up to €20 million, or up to 4% of an organization’s worldwide revenuenamed as a risk
The GDPR provides for monetary penalties of up to €20 million, or up to 4% of an organization’s worldwide revenue of the preceding financial year, whichever is greater.Risk factors (Item 1A)

Also named by A, AB, ABNB, ADBE, ADP, AGX, AIOT, AJG and 100 more

Medicare

subject tonamed as a risk
Certified electronic health record technology (CEHRT) requirements continue to evolve and remain necessary to participate in federal healthcare programs to receive reimbursement for health items and services provided by certain of our customers to Medicare and Medicaid beneficiaries.Risk factors (Item 1A)

Also named by ABT, ARWR, AXGN, BAX, BDX, BMY, BSX, CAH and 48 more

EU AI Act

subject tonamed as a risk
Additionally, obligations under the EU AI Act have gone into effect and will continue to be implemented in phases through 2030, and other jurisdictions have passed or are considering similarly focused legislation.Risk factors (Item 1A)

Also named by ACN, ADBE, AMD, AXON, CGNX, CRM, CRWD, CTSH and 36 more

FedRAMP

subject tonamed as a risk
For example, the U.S. government imposes evolving cybersecurity requirements, including the FedRAMP authorization process and the Department of War (DoW) Cybersecurity Maturity Model Certification.Risk factors (Item 1A)

Also named by ADSK, CRWD, DDOG, DOCU, FTNT, GTLB, MSTR, NET and 9 more

Anti-Kickback Statute

subject tonamed as a risk
Certain of our products and services may now, or in the future, be subject to the AKS, the federal False Claims Act (FCA) and other fraud and abuse laws.Risk factors (Item 1A)

Also named by BSX, CAH, HCA, LH, PROF, ZBH

U.S.–China trade relations

subject tonamed as a risk
the potential for worsening trade and economic relations between the U.S. and China, including the imposition of additional tariffs, export controls, sanctions, retaliatory measures or other trade restrictions;Risk factors (Item 1A)

Also named by HLIO, Q

21st Century Cures Act

subject tonamed as a risk
The 21st Century Cures Act, as amended, allows for penalties for stakeholders, including but not limited to, health IT developers and providers who do not comply with the act.Risk factors (Item 1A)

Also named by DVA

U.S. export controls on GPU-enabled cloud services

subject tonamed as a risk
Evolving restrictions and rules governing access to cloud-based infrastructure or GPU-enabled services by customers in certain jurisdictions, could require additional compliance controls or limit our ability to provide, lease, host or otherwise make available such resources to affected customers.Risk factors (Item 1A)

Data center construction moratoria

subject tonamed as a risk
Government-imposed limits or moratoria on data center construction in a given market could hinder our ability to execute our expansion plans or prevent us from completing planned data center projects.Risk factors (Item 1A)