Oracle has agreed to pay a US$2 million penalty to settle charges of the U.S. Securities and Exchange Commission that it did not have proper controls to prevent employees at its Indian subsidiary from secretly setting aside funds from the company's books, SEC said on Thursday.
The funds were used to make unauthorized payments to phony vendors in the country, the agency said.
The Redwood Shores, California, enterprise software company has agreed to settle the SEC's charges without admitting or denying the allegations. It was charged with violating the Foreign Corrupt Practices Act (FCPA), but the SEC has not explicitly alleged bribery of foreign officials, though it said the use of the funds to pay recipients who were not on Oracle's approved local vendor list, and in some cases did not exist or were just storefronts "created a risk that they potentially could be used for illicit means, such as bribery or embezzlement."
In a complaint before a court in California, SEC alleged that from 2005 to 2007 certain employees of Oracle India secretly "parked" with distributors and kept off Oracle India's books about $2.2 million of the proceeds from certain sales to the Indian government.
In the typical business model used by Oracle at the time, purchase orders were placed by customers on the distributor who in turn bought software licenses and services directly from Oracle for sale to the customer for a margin, according to the complaint on Thursday.
On about 14 occasions related to eight different government contracts, certain Oracle India employees created extra margins between the distributor and end user price, and directed the distributors to hold the extra margin in side funds, SEC said in the filing to the U.S. District Court for the Northern District of California, San Francisco division.
The distributor then made payments at the direction of Oracle India employees from the side funds to third parties, purportedly for marketing and development expenses, according to SEC. Some of the recipients were not on Oracle's approved local vendor list, and in some cases did not exist or were just storefronts.
Between 2005 and 2007, government customers are said to have paid Oracle India's distributors at least $6.7 million on the sales, with Oracle receiving approximately $4.5 million in revenue, with the balance about $2.2 million parked with distributors.
Oracle for example booked only $2.1 million in revenue from a $3.9 million deal in May 2006 from India's Ministry of Information Technology and Communications. The balance was held by the distributor, who after keeping $151,000 for his services, was asked by Oracle India employees to park $1.7 million towards disbursement for "marketing development purposes," according to the complaint.
The amount was subsequently disbursed through eight invoices for payment to third-party vendors, which were later found to be fake, and none of the third-party vendors were approved by Oracle and were in fact just storefronts, SEC said in its complaint.
"As directed by the Oracle India employees, the distributor sent out the third party payments, which created the potential that they could be used for bribery or embezzlement," SEC said.
The FCPA makes it unlawful for certain classes of persons and entities to make payments to foreign government officials to assist in obtaining or retaining business. It also requires companies whose securities are listed in the U.S. to meet its accounting provisions, including requiring companies to devise and maintain an adequate system of internal controls.
Oracle failed to implement or maintain a system of effective internal accounting controls to prevent improper side funds, the SEC said in its complaint.
The SEC has not made explicit allegations of either bribery or embezzlement in this case, nor has it specified who actually received the secret payments.
Oracle could not be immediately reached for comment.
By November 2007, Oracle India's senior channel sales manager had resigned and left the company. Four other employees were sacked by Oracle after an internal investigation, according to the complaint.
The settlement takes into account Oracle's voluntary disclosure of the conduct in India and its cooperation with the SEC's investigation, as well as remedial measures taken by the company, including firing the employees involved in the misconduct and making significant enhancements to its FCPA compliance program, the agency said.
Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.