Better Health for All

PDF Solutions' core products and services, which include yield improvement solutions and a big data analytics platform for the semiconductor industry, do not directly provide health benefits or address health needs. While semiconductors are essential components in medical devices, the company's impact on health is indirect.

The company's clean room facility does not produce off-gas or emissions, and its only reportable hazardous material, liquid nitrogen, is externally monitored. The company established a cross-functional advisory team at the onset of the COVID-19 pandemic to ensure employee health and safety, providing home office equipment support and implementing strict safety protocols at its clean room facility. It promotes a positive work-life balance and ethical culture, offering a Whistleblower Ethics Hotline. The company has Illness Prevention and Hazard Communication programs and an Emergency Action Plan for worker safety at its clean room facility. It has an information security program, including annual employee training, regular phishing simulations, and periodic network access penetration testing. In May 2021, it completed a Type II SOC 2 audit with no qualified findings and began the ISO 27001 certification process in February 2022.

Honest & Fair Business

The company has a formal whistleblower hotline (NAVEX 855-208-8579) where reports can be anonymous or identified.

It also has explicit prohibitions against bribery, complies with the FCPA and UK Bribery Act 2010, and includes third-party due diligence in its anti-corruption measures. The company adopted the Responsible Business Alliance (RBA) Code of Conduct to supplement its existing Code of Ethics.

Kind to Animals

PDF Solutions, Inc. has a 'No Animal Exploitation' policy.

Given the company's business model in semiconductor yield improvement solutions and services, it does not engage in activities such as animal testing, animal husbandry, or sourcing animal-derived products. Therefore, most animal welfare KPIs are not applicable to its operations.

No War, No Weapons

PDF Solutions reported that 66% of identified smelters and refiners in its supply chain were confirmed as Active or Conformant with the RMI RMAP standard for the period of January 1 to December 31, 2024.

The company also stated in its 2018 report that it was unable to determine with reasonable certainty the country of origin of conflict minerals used in its In-Scope Products.

Planet-Friendly Business

The company reported no environmental compliance violations in both its 2022 and 2023 ESG reports.

Water use is considered not material to its operations, with facilities located in low-stress areas, and water primarily used for kitchens and restrooms. The 2023 ESG report states that 100% of wood, metal, and recyclable plastic waste was recycled at headquarters, lab, and cleanroom facilities. The company's 2023 ESG report was prepared in alignment with TCFD disclosure topics, and its 2022 ESG Priority Assessment also used TCFD recommendations. However, the TCFD itself disbanded in October 2023, with the IFRS Foundation taking over monitoring.

Safe & Smart Tech

PDF Solutions has not identified any known cybersecurity threats or incidents that have materially impacted it for more than 5 years, incurring no penalties or settlements.

The company has successfully completed a SOC 2 Type II Audit and states compliance with GDPR and CCPA. It conducts annual cybersecurity training for employees and contractors with access to sensitive data, including incident management training and regular phishing simulations. The company maintains technologies for network and endpoint monitoring, regular vulnerability assessments, and annual penetration testing. Critical vulnerabilities are patched within 3-7 days on average. Management reports high-severity security incidents to the Audit Committee after discovery and provides quarterly summaries of all security incidents. PDF Solutions uses various third-party software testing products and services to assess the security of its software and engages a third-party security firm at least annually to conduct external and web penetration testing exercises on its corporate network and commercial SaaS service platform.