Primary sources → BIS press release and DOJ resolution, Cadence Design Systems, 28 July 2025
If your understanding of U.S. export enforcement is “they go after companies that ship machines to China,” the Cadence settlement should change it. On 28 July 2025, Cadence Design Systems resolved parallel BIS and DOJ actions for selling chip-design software — EDA tools — to Chinese entities on the Entity List. The figures: a $95 million BIS civil penalty, plus a DOJ criminal resolution (a guilty plea to one count, an approximately $72 million criminal fine, and $45 million in forfeiture), bringing the aggregate cash to roughly $212 million. AMAT was about physical equipment. Cadence is about software. BIS enforcement has crossed into every layer of the semiconductor supply chain.
What the settlement established
Cadence sold EDA software to entities the BIS press release names directly — the National University of Defense Technology (NUDT) and Tianjin Phytium — parties tied to China’s supercomputing and military modernization, across 56 violations spanning roughly September 2015 to September 2020. (It is worth noting these entity names are in the BIS release itself, not merely in subsequent law-firm analysis — a detail that matters when you cite the case to a skeptical reader.)
The legal point underneath the dollars: providing EDA software or technology to an Entity-List party without the required license violates the Entity List controls (15 C.F.R. § 744.11), with the penalty provisions flowing from § 764.2. (A caution for anyone writing about this: do not describe the violation as a ”§ 734.3 controlled export.” Section 734.3 defines what is subject to the EAR — jurisdiction — not the licensing requirement that was breached. EDA software is subject to the EAR; the violation is the unlicensed transfer to a listed party.)
Two doctrines make this directly relevant to Korea:
- Software and technology are “exports.” Licensing or providing access to controlled software to a restricted party is the same category of controlled event as shipping a controlled good.
- “Deemed” exports and re-exports. Giving a Chinese national — say, an engineer at an Entity-listed firm — remote access to U.S.-origin EDA tools can itself be a controlled transfer, even if no software crosses a border. The control follows the person and the access, not just the shipment.
Why Korean design houses are now in the perimeter
Korea’s semiconductor strength is not only in memory and equipment. It includes a substantial layer of design-service bureaus, fabless IP vendors, and physical-design/layout houses — and almost all of them run on Cadence, Synopsys, or Siemens EDA tools. If any of that work is done for Chinese customers, or by engineers who could be deemed to be accessing controlled tools on behalf of a restricted party, those firms now sit in the same compliance perimeter as the equipment makers exposed by AMAT.
Most do not know this. The mental model in the design-service segment is that export controls are an equipment-and-materials problem — something for the fabs and the tool vendors to worry about. Cadence says otherwise: the software that designs the chips is squarely inside the controlled universe, and providing it to the wrong party is a major-enforcement-grade offense.
What to do
The remediation is not exotic; it is the same end-user discipline the hardware side already practices, applied to software and access:
- Screen the end-user before you license or grant access. Run Chinese customers and project sponsors against the Entity List (and the broader restricted-party lists) before EDA tools touch the project — not after.
- Treat remote access as an export. If a Chinese national or an Entity-listed firm’s personnel can access your EDA environment, analyze that as a potential deemed export/re-export and license it if required.
- Map your tool dependencies to your customer base. Which Chinese client projects run on which U.S.-origin EDA tools? That intersection is your exposure surface.
- Read the AMAT and Cadence cases as one pattern. Same structural risk — U.S.-origin content or technology reaching a restricted Chinese party — different product category. The compliance posture that protects an equipment maker protects a design house too.
The takeaway for a Korean design-services executive is uncomfortable but simple: the perimeter moved, and it now includes you. The firms that adjust their end-user screening to cover software and access before their next Chinese engagement are the ones that will not be writing a settlement check.
A Korean-language version follows on Brunch, adapted for Korean design-service and IP-vendor teams. Part of a series on Korea–China export-control exposure.