University of California, Berkeley

United States · owned by The Regents of the University of California (United States) · berkeley.edu · 23 vendors

The University of California, Berkeley is a world-renowned public research university located in Berkeley, California. It offers instruction across 184 academic departments and programs, spanning undergraduate, graduate, and professional education. UC Berkeley is governed by the UC Regents and is widely recognized for its contributions to science, technology, public policy, and the arts.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-15 · revision 9

22 direct vendors, 225 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

UC Berkeley faces significant hurdles in migration readiness. The stated "High" vendor lock-in risk due to "few vendors" indicates that transitioning away from existing critical service providers could be complex and costly. The regulatory landscape is a major impediment, with a multitude of "Partially Compliant" regulations (GDPR, HIPAA, FERPA, CCPA/CPRA, FISMA/NIST SP 800-171, ITAR/EAR, ADA) that impose strict requirements on data handling, security, and privacy. Each of these regulations would necessitate careful planning and validation during any migration to ensure continuous compliance. Moreover, extensive data residency requirements, particularly for federal research data (NIST SP 800-171, CMMC), export-controlled data (ITAR/EAR), and HIPAA-protected health information, mandate US-based or US-controlled infrastructure, severely limiting options for cloud providers and international data transfers. The lack of public evidence for GDPR's EU-US Data Privacy Framework self-certification also adds complexity for EU data transfers. The internal tech stack, while incorporating some cloud services, also includes traditional CMS platforms (Drupal, WordPress), suggesting a mixed environment that would require a complex, multi-faceted migration strategy rather than a straightforward lift-and-shift. On the positive side, UC Berkeley's strong financial stability, with consistent revenue growth, provides the necessary funding capacity to undertake a large-scale migration project. The existing use of major cloud services like Google Workspace, Box, and ServiceNow, along with the utilization of commercial cloud providers for research computing, indicates a degree of organizational familiarity and technical expertise with cloud environments, which could facilitate aspects of a migration.

Compliance

11 in-scope frameworks identified; showing 3.

HIPAA (source) — Compliant

HIPAA applies to specific units at UC Berkeley that are designated as "covered entities," including University Health Services and the Optometry Clinic. It also applies to research that uses PHI from these entities.

While the scope is limited to specific campus units, any breach of Protected Health Information (PHI) could result in significant fines and reputational damage. The risk is medium as the core functions of the university are not healthcare.

Evidence: https://cphs.berkeley.edu/hipaa/hipaa.html, https://cphs.berkeley.edu/hipaa.pdf, https://researchdataportal.berkeley.edu/planning/data-privacy, https://morgantonseniors.com/privacy-hipaa-policy/

Animal Welfare Act — Compliant

UC Berkeley uses vertebrate animals for research and instruction and receives Public Health Service (PHS) funding, making it subject to the AWA and PHS Policy.

Failure to comply can result in civil or criminal prosecution, suspension of animal research activities, and termination of PHS support (including NIH funds), which would severely impact the university's research mission.

Evidence: https://acuc.berkeley.edu/about.html, https://newsarchive.berkeley.edu/news/extras/2000/16_anim.html, https://acuc.berkeley.edu/policies/Animal%20Care%20Use%20Program%20Policy.pdf, https://acuc.berkeley.edu/faqs.html, https://acuc.berkeley.edu/assuranceaccreditation.html, https://chancellor.berkeley.edu/clery-act-compliance

SOC 2 (source) — Assessment Required

SOC 2 is an assurance framework relevant for service organizations that handle customer data. It is not directly applicable to the core educational and research functions of a university.

SOC 2 is not a typical framework for a public university. The risk is low as it is not a regulatory requirement, and there is no market or customer expectation for UC Berkeley to hold such a report.

Financials

Three-year financials

Financial Resilience Score: 7/10

UC Berkeley demonstrates solid financial resilience as part of the University of California system, which carries strong credit ratings (Aa2/AA/AA with stable outlooks) on its General Revenue Bonds. The campus benefits from highly diversified revenue streams including tuition, federal grants, state appropriations, private philanthropy, and auxiliary enterprises. Berkeley's revenue has nearly doubled over 15 years from ~$2B in FY10 to ~$4B in FY25, and its endowment base (roughly $5.1B University-held plus $3.8B foundation-held) provides substantial financial cushion, with the General Endowment Pool returning 12.2% in FY2025. However, Berkeley faces meaningful structural challenges. The state's share of revenue has fallen from 50% to about 14% over 30 years, and the FY26 budget projects a $33M deficit (improved from an original $150M+ gap). The 2025 California Budget Act deferred $240.8M in Compact-related base funding increases. At the system level, unrestricted net position remains negative due to $11.9B net pension liability and $19.8B retiree health benefits liability, and total system debt has grown to $40.8B. Additionally, federal policy risk emerged as a material subsequent event, with the federal government suspending 800+ grants at UCLA and pursuing a $1B+ settlement, creating precedent risk for Berkeley's ~$490M federal grants portfolio.

Key strengths: Diversified revenue base across tuition, grants, state, philanthropy, and auxiliaries, Strong credit ratings: Aa2/AA/AA with stable outlooks on system bonds, Large endowment base (~$8.9B combined University and Foundation), Strong endowment returns (GEP: 12.2% FY25, 11.7% FY24, 8.2% FY23), Revenue growth from ~$2B (FY10) to ~$4B (FY25), Improving pension funding (net pension liability down from $20.4B to $11.9B), System-level change in net position of +$5.72B in FY2025

Risk factors: Declining state funding share (50% historically to 14% today), Projected $33M campus deficit in FY26 (improved from $150M+), State deferred $240.8M in Compact-related base funding increases, Federal policy/grant suspension risk (UCLA precedent: 800+ grants, $584M at risk), $19.8B net retiree health benefits liability at system level, $11.9B net pension liability at system level, Negative unrestricted net position due to pension/OPEB obligations, Rising system debt ($40.8B in FY25 vs $36.3B in FY23), No medical center revenue (unlike other major UC campuses)

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report