# Cellebrite DI Ltd. Form 20-F (FY2025) — export-control disclosures (DECA, encryption regime, Nov 2025 repeal order) > *Cellebrite's own most-current SEC annual report (Form 20-F for FY ended Dec 31, 2025). As a sworn public filing it is the authoritative primary source for how Cellebrite itself describes the export-control regimes governing its products: the Israeli Defense Export Controls Agency (DECA) within the Ministry of Defense, the Israeli "encryption control regime" under which Cellebrite currently holds its export license, the November 18, 2025 ministerial order repealing that regime and adopting a new one effective March 18, 2026, and the prospective shift of some products to the Israeli Defense Export Control Law, 5767-2007. It directly grounds the Arkansas investigation's Cellebrite cell: the very phone-extraction products sold to Arkansas LE agencies (e.g., LRPD) are exported under this Israeli DECA license architecture.* ## Source metadata - **Publisher:** Cellebrite DI Ltd. (Nasdaq: CLBT), Form 20-F FY2025, U.S. SEC EDGAR - **URL:** https://www.sec.gov/Archives/edgar/data/1854587/000162828026013790/cele-20251231.htm - **Archived:** 2026-06-07 via curl with declared User-Agent (SEC fair-access), HTML parsed to text - **Tier:** 2 (primary/official — audited corporate filing under U.S. securities law) ## Extract — verbatim (lightly cleaned) ### Risk Factors — "Risks Related to Legal Compliance and Regulatory Matters" "We are subject to Israeli export laws and our failure to obtain or comply with such laws or related licenses issued under these laws could negatively impact our business. The export of some of our products and our solutions is subject to Israeli export control laws and regulations which are administered primarily by the Israeli Defense Export Controls Agency ('DECA') within the Minister of Defense. We currently operate under an export license issued pursuant to the Israeli encryption control regime. Under this this regime our existing licenses prohibit us from exporting some of our products to customers in certain countries and requires us to obtain the consent of DECA to export some of our products to customers in certain other countries. Our failure to comply could subject us to financial penalties and restrictions on how we market and sell our products, each of which could materially adversely impact our revenue and profits, and harm our reputation." "On November 18, 2025, the Israeli Minister of Defense signed an order repealing the current encryption control regime and adopting a new regime. The new regime becomes effective on March 18, 2026. We believe that under this order our current license should remain valid until September 2027. The new regime strictly applied could have the effect of subjecting some of our exports to a licensing requirement from DECA and to a lesser extent from the Ministry of Economy. We are currently in discussions with representatives of DECA and the Ministry of Economy regarding the possibility of continuing our export activities consistent with our practices under our current license, however there is no certainty with respect to the results of such discussions." ### Business — "Regulations" / "Export Controls" "Export Controls The export of some of our products and solutions is subject to Israeli export control laws which are administered by the Israeli Defense Export Controls Agency ('DECA') within the Ministry of Defense. We currently operate under an export license issued pursuant to the Israeli encryption control regime. Israeli export control laws and regulations as well as the licenses granted to us by DECA prohibit us from exporting some of our products to customers in certain countries and require us to obtain the consent of DECA to export some of our products to customers in certain other countries. On November 18, 2025, the Israeli Minister of Defense signed an order repealing the current encryption control regime and adopting a new regime. The new regime becomes effective on March 18, 2026. We believe that under this order our current license will remain valid until September 2027 with respect to our existing products. Under the new regime, some of our solutions will become subject to the Wassenaar Arrangement. The Wassenaar Arrangement is a multilateral export control regime with 42 participating states." "Although Israel is not a party to the Wassenaar Arrangement, it has adopted the Wassenaar Arrangement List of Dual Use Goods and Technologies and the goods and technologies listed therein, which could be understood to include digital forensic technologies as well as the cryptographic capabilities in our products, are subject to Israeli export control laws and regulations. As a result, we expect that some of our products will be controlled primarily under the Israeli Defense Export Control Law, 5767-2007 administered primarily by DECA and, to a lesser extent, the Import and Export Order (Export Control over Dual Use Goods, Services and Technology), 5766-2006, administer primarily by the Ministry of the Economy, in each case, depending on the nature of the customer. This outcome will result in the imposition of new obligations on us. For example, under the Defense Export Control Law, 5767-2007, an Israeli company may not conduct 'defense marketing activity' without a defense marketing license from the Israeli Ministry of Defense and, subject to certain exceptions, is subject to a licensing requirement from the Israeli Ministry of Defense for the export of any controlled defense goods, services and/or know-how." ### Human-rights / end-use context "We have adopted policies and procedures intended to prevent sales to customers in countries that do not meet the standards we have set in our policies. As a result, we no longer sell our products to customers in China, Hong Kong, Russia, Belarus and certain other countries. Nevertheless, adverse media coverage and petitions relating to Bangladesh, Hong Kong, Russia, Serbia and Uganda have in the past negatively impacted, and may in the future negatively impact, our reputation..."