V-ECON Audit: Splunk Inc.

Audit Phase: V-ECON (Economic Forensics) Audit Date: 2026-05-01 Prepared By: Domain Audit — Research Synthesis Methodology Note: All findings are drawn exclusively from the research memo below. No new research was conducted. No scores, tiers, BRS values, or V-domain scores are assigned. Claims lacking sufficient URL-level sourcing are noted where applicable.

Supply Chain & Sourcing Relationships

Splunk Inc. is an enterprise software and data analytics company. Its core product — a platform for searching, monitoring, and analyzing machine-generated data — is entirely software-based and delivered primarily as a SaaS offering or on-premises software license. This business model has no analog in the physical goods supply chain.

• Direct supplier relationships with Israeli exporters: No commercial relationships between Splunk and Israeli agricultural exporters (Mehadrin, Hadiklaim, Galilee Export, Agrexco successors, or equivalent entities) have been identified in any public filing, trade database, NGO report, or news source. No public evidence identified.
• Importer of record structure: Splunk does not import physical goods and has no identified importer-of-record entity for goods originating from Israel or the occupied territories. No public evidence identified.
• Seasonal sourcing patterns: Not applicable to Splunk’s business model. No public evidence identified.
• Third-party and indirect sourcing: As a software company, Splunk does not engage intermediary physical goods brokers or third-party sourcing agents for merchandise supply chains. No public evidence identified.

Product Origin, Labeling & Regulatory Compliance

Splunk’s products are software licenses and cloud-delivered services. The company does not manufacture, import, export, or retail physical goods subject to country-of-origin labeling regimes.

• Settlement-origin products: Splunk holds no physical product inventory. Neither the Who Profits Research Center¹ nor the Corporate Occupation NGO database² identifies Splunk in connection with settlement-origin goods, settlement-linked infrastructure, or physical supply chain activity in the occupied territories. No public evidence identified.
• Labeling compliance obligations: Country-of-origin labeling requirements under frameworks such as EU Council Regulation 2016/1103 or equivalent regimes do not apply to software products. No regulatory citations, customs audits, or enforcement actions against Splunk on labeling grounds have been identified. No public evidence identified.
• Corporate labeling policy: No publicly stated corporate policy on the sourcing or labeling of goods from occupied or contested territories has been identified. This is consistent with the absence of any physical goods business at Splunk. No public evidence identified.

Investment, Capital & Financial Exposure

Foreign Direct Investment & R&D Presence

Splunk established and maintained an operational presence in Israel in the form of an R&D and engineering office in Tel Aviv³. This office was established in the pre-2020 period and was confirmed as ongoing through at least 2023 via active job postings listing Israel as a location⁴ and coverage in Israeli technology press⁵⁶. The investment takes the form of office lease and personnel costs constituting a cost-centre R&D operation; no factories, logistics hubs, manufacturing plants, or real estate holdings beyond standard office leases have been identified.

Live verification (June 2026): the Israeli legal entity is confirmed — Splunk Services Israel Ltd (Israeli company number 516040250, registered at Hamelacha 32, Netanya) appears in the Israeli companies registry⁷ and in Splunk Inc.’s own SEC Form 10-K subsidiary exhibits for FY2020–FY2023⁸, corroborating wholly-owned Israeli subsidiary status (registry seat Netanya; Tel Aviv references likely reflect office location rather than registered seat).

The Tel Aviv R&D centre focused on engineering and product development activity, particularly in core platform and security product lines⁴⁶. This is consistent with the broader pattern — well-documented in Israeli business press — of multinational technology companies establishing R&D centres in Israel to access local engineering talent.

Post-Acquisition Capital Structure

On 18 March 2024, Cisco Systems Inc. (NASDAQ: CSCO) completed its acquisition of Splunk for approximately $28 billion, at $157 per share in cash⁹¹⁰¹¹. The deal was announced on 21 September 2023¹⁰ and the acquisition intent was formalised via an 8-K filing with the SEC¹². Splunk’s common stock (ticker: SPLK) was subsequently delisted from NASDAQ¹³.

As a result of this transaction, all of Splunk’s assets — including its Tel Aviv R&D operations — became part of Cisco’s corporate structure. Cisco independently maintains a substantial and long-established Israel footprint, including the Cisco Israel R&D Center and operations acquired through prior Israeli technology acquisitions¹⁴. The Cisco-level Israel exposure is distinct from Splunk’s legacy independent footprint and is outside the direct scope of this Splunk-targeted audit, though it represents the relevant parent-entity exposure as of mid-2024 onward.

Beneficial Ownership (Pre-Acquisition)

Prior to the March 2024 acquisition, Splunk’s largest institutional shareholders were major U.S.-domiciled asset managers — including Vanguard Group, BlackRock, and T. Rowe Price — as documented in SEC beneficial ownership disclosures¹⁵¹⁶¹⁷. No controlling Israeli ownership stake in Splunk was identified in pre-acquisition shareholder records. There is no identified Israeli state sovereign wealth fund, Israeli-domiciled strategic investor, or Israeli institutional holder exercising governance influence over Splunk.

Portfolio and Fund Exposure

No publicly disclosed holdings in Israeli-domiciled companies, Israeli sovereign bonds, or Israel-focused investment funds by Splunk as an independent corporate entity have been identified in SEC filings through the FY2023 10-K¹⁵ or in the full EDGAR filings index¹⁸. No public evidence identified.

Operational Presence & Market Activity

Physical Footprint

Splunk’s primary operational presence in Israel consisted of a Tel Aviv office confirmed as active through at least 2023³⁴. This office was characterised in career materials and Israeli technology press as an R&D and engineering centre³⁴⁵⁶. No offices, warehouses, retail locations, or operational facilities in the occupied West Bank, Gaza Strip, or Golan Heights have been identified in any filing, NGO database¹², or news source.

Following the close of Cisco’s acquisition on 18 March 2024⁹, the Tel Aviv operation became subsumed into Cisco Israel’s existing structure¹⁴. Whether the office was subsequently retained, expanded, or consolidated into broader Cisco Israel operations post-acquisition is not confirmed in available training data (see Evidence Gaps).

Employment and Tax Contribution

Splunk did not disclose Israel-specific employee headcount in any of its public SEC filings¹⁵¹⁸. Data drawn from LinkedIn company page information and Glassdoor employee review profiles — as reflected in training data through 2023–2024 — suggests the Israel office employed a team in the range of tens to low hundreds of engineers as of 2022–2023¹⁹²⁰. These figures are directional estimates only and have not been independently verified through auditable sources.

As an entity registered to operate in Israel, Splunk would have been subject to Israeli corporate tax obligations on locally generated income. No specific Israeli tax authority filings, voluntary tax disclosures, or enforcement actions relating to Splunk’s Israeli operations have been identified in any public record²¹. No specific tax record publicly identified.

Market Positioning and Revenue

Splunk’s annual 10-K filings through FY2023 categorise international revenue in aggregate without isolating Israel as a named geographic market¹⁵²². Israel is not characterised as a “strategic growth market,” “regional hub,” or named revenue territory in any investor presentation, earnings call transcript, or press release identified in the research corpus. Career materials and technology blog content consistently frame Splunk’s Israel presence as an R&D engineering location rather than a primary sales or revenue-generating market³⁴. No Israel-specific revenue characterisation identified in investor materials.

Corporate Structure & Foundational Ties

Founding and Incorporation History

Splunk Inc. was founded in 2003 in San Francisco, California, by Erik Swan, Rob Das, and Michael Baum — all U.S.-based founders²⁰¹⁷. The company was incorporated in Delaware and maintained its operational headquarters in San Francisco, California¹⁵. Splunk is not an Israeli-founded company and does not have Israeli-origin operations, Israeli co-founders, or an Israeli-origin brand identity. No Israeli founding connection identified.

Headquarters and Legal Domicile

Splunk’s legal domicile is the State of Delaware (jurisdiction of incorporation); its operational headquarters was San Francisco, California¹⁵. It does not maintain, and has not historically maintained, dual or legacy headquarters in Israel. Post-acquisition, Splunk operates as a wholly owned subsidiary of Cisco Systems Inc., headquartered in San Jose, California⁹²³.

State and Institutional Linkages

No Israeli state ownership stake, Israeli government board appointees, or formal designation of Splunk as critical national infrastructure by the Israeli government has been identified in Splunk’s public record¹⁵¹². No Israeli government contracts held directly by Splunk (as distinct from potential end-user software licensing by Israeli government agencies, which is undocumented but not ruled out) have been identified in publicly accessible procurement records. No public evidence identified.

Structural Governance Features

No golden shares, founder control shares, charter restrictions, or governance provisions tying Splunk’s strategic decision-making to Israeli state policy objectives have been identified in Splunk’s IPO prospectus²⁰, subsequent SEC filings¹⁵¹⁸, or the merger agreement with Cisco¹². No public evidence identified.

Profit Repatriation & Economic Contribution

Revenue Attribution

Splunk’s SEC filings — including 10-K annual reports through FY2023 — disclose U.S. versus international revenue splits at an aggregate level but do not break out Israel as a standalone revenue geography¹⁵²². No investor presentation, earnings call transcript, or supplemental financial disclosure in the research corpus isolates Israel-derived revenue. No granular Israel-specific revenue data publicly identified.

Profit Flow Architecture

Prior to March 2024, Splunk was a U.S.-domiciled, NASDAQ-listed corporation (ticker: SPLK)¹³. Profits generated globally — including any revenue derived from Israeli customer contracts — flowed to the U.S. parent entity and were distributed to U.S.-registered institutional and retail shareholders¹⁵¹⁶¹⁷. No mechanism has been identified by which Splunk profits flowed into Israel through Israeli-domiciled ownership, profit-sharing arrangements, or Israeli state participation.

The Tel Aviv R&D centre operated as a cost centre drawing operational funding from U.S. headquarters, rather than as a profit-generating entity repatriating earnings to Israel¹⁵³. This is structurally consistent with the standard multinational R&D centre model: costs are borne by the parent; intellectual property developed at the centre is owned by the U.S. parent entity.

Following the close of Cisco’s acquisition⁹²³, all profit flows from Splunk’s operations — globally — are directed to Cisco Systems Inc. (U.S.), with Cisco reporting Splunk’s contribution as part of consolidated group financials disclosed to the SEC²⁴²³.

Economic Ecosystem Role

No Israeli government designation, industry authority report, or academic assessment characterising Splunk as a key employer, sector anchor, or critical infrastructure provider within the Israeli economy has been identified²¹. Splunk’s Israel presence is noted in Israeli technology press — including Calcalist⁶, Globes⁵, and TheMarker — as part of the broader multinational R&D centre phenomenon in Israel’s technology sector. These references do not assign Splunk any formal anchor-employer or strategic-sector designation. No formal public designation identified.

The BDS Movement has targeted Cisco broadly²⁵, and Cisco’s extensive Israel operations are documented¹⁴. However, no Splunk-specific BDS campaign material and no dedicated Splunk entries in the Who Profits¹ or Corporate Occupation² databases have been identified in training-data-accessible versions of those sources.

End Notes