Written and maintained by CASRAI Editorial Board
Last updated
Tip: try code CASRAI at checkout for 15% off, if the offer is currently active for this program — codes vary by vendor and aren’t guaranteed.
Yes. Foxit’s parent company, Fujian Foxit Software Development Joint Stock Co., Ltd., is headquartered in Fuzhou, China, and has traded on the Shanghai Stock Exchange since 2021 under ticker 688095. Foxit Software Inc., the entity most US customers actually deal with, is a subsidiary based in Fremont, California — but the parent company, its board, and its majority ownership sit in China. If your research office reached this page by searching “is Foxit a Chinese company,” that direct answer is the whole first half of what you need. The second half — what that ownership structure does and doesn’t mean for CUI handling, export-control obligations, and federally funded procurement — is the part worth reading before you sign a purchase order.
Who actually owns Foxit
Foxit was founded in Fuzhou, China in 2001 by Eugene Y. Xiong, who remains chairman and, per public filings, retains roughly 38% ownership. The company now operates as Fujian Foxit Software Development Joint Stock Co., Ltd., a publicly traded entity on the Shanghai Stock Exchange (SSE: 688095). It is not a small or obscure filing — Foxit is a genuinely large PDF software vendor, competing directly with Adobe Acrobat on feature depth, and its stock trades with normal public-market visibility (financial profiles are available through MarketScreener and similar exchange-data services).
The corporate structure that actually reaches most US and Canadian research-office desks is Foxit Software Inc., a US subsidiary headquartered in Fremont, California, which handles US sales, licensing, and (for many customers) support. That US-registered entity is real, and it’s the counterparty on a typical US purchase order or license agreement. But a subsidiary’s US address doesn’t change who sits above it in the ownership chain — the parent company, board, and controlling shareholders remain Chinese, and that parent is what’s publicly traded in Shanghai, not the Fremont subsidiary. (Background per Wikipedia’s Foxit Software entry, cross-checked against the exchange listing above.)
Why this question is suddenly being asked
The “is Foxit Chinese” search has spiked because of specific reporting, not because of an abstract concern. Fox News Digital reported that several US federal agencies — including the State Department, the Missile Defense Agency, the Department of Homeland Security, the FDA, and the Department of Justice — began distancing themselves from Foxit software after being asked directly about the company’s Chinese ownership and government contracts. According to that reporting, Foxit subsequently removed references to its federal government customers from its own website. A technology and telecommunications attorney quoted in the coverage raised a specific legal point: China’s National Intelligence Act of 2017 can compel Chinese companies and citizens to cooperate with state intelligence work if asked, which means a Chinese-parented vendor’s data-handling posture is a genuinely different regulatory question than a US- or EU-headquartered vendor’s, independent of whether that vendor has ever actually been asked to comply with anything.
It’s worth being precise about what that reporting did and didn’t establish. It did not report a confirmed data breach, a discovered backdoor, or an active investigation finding wrongdoing at Foxit. What it reported is a policy reaction — agencies choosing to reduce exposure to a Chinese-parented vendor as a precaution, and a legal risk that exists structurally because of where the parent company is domiciled and incorporated, not because of a specific incident. That distinction matters for how seriously your own office should weigh it.
What this does — and doesn’t — mean for CUI handling and federally funded procurement
This is the honest tradeoff, stated plainly: Chinese parentage is not automatically disqualifying, and our research turned up no evidence of an actual security incident, confirmed backdoor, or data-exfiltration finding involving Foxit’s products. Millions of users, including inside organizations with real security requirements, run Foxit PDF software daily without incident. If your only exposure is editing, annotating, and assembling ordinary manuscript or grant-application PDFs — nothing classified, nothing export-controlled, nothing containing Controlled Unclassified Information (CUI) — the corporate-nationality question is a due-diligence item to note, not necessarily a reason to switch tools.
Where it becomes a real question rather than a background fact, for a research office specifically:
- CUI handling. If your institution processes Controlled Unclassified Information under a federal contract or DFARS/NIST 800-171 obligation, procurement of any software touching that data — PDF tools included — typically has to go through your institution’s own information-security and export-control review, regardless of vendor nationality. A Chinese-parented vendor doesn’t automatically fail that review, but it is exactly the kind of fact that review exists to catch and evaluate, and skipping the review because “it’s just a PDF editor” is the actual risk, not the software itself.
- Foreign-ownership and export-control disclosure rules. Some federal grant mechanisms and some institutional research-security policies (increasingly common post-2020 across NIH, NSF, and DoD-funded research) require disclosing foreign-owned or foreign-influenced vendors used in specific workflows, or restrict foreign-owned tools from touching export-controlled technical data (ITAR/EAR-covered research). If your grant or contract carries that kind of clause, this is a fact your compliance office needs on record before — not after — the tool touches covered data.
- General institutional or departmental use with no regulated data. For the large majority of research-office use cases — redacting a consent form before deposit, marking up a manuscript draft, assembling supplementary files for a journal submission — there’s no CUI, no export-controlled technical data, and no disclosure trigger. That’s a materially different risk posture than the bullet above, and it’s the actual situation most individual researchers and departments are in.
The responsible move isn’t to treat “Chinese-owned” as a blanket disqualifier, and it isn’t to treat the Fremont, CA subsidiary’s address as settling the question either. It’s to raise the ownership structure with your own institution’s compliance, research-security, or export-control office and let them apply your specific data-handling and grant-clause obligations to it — because those obligations vary by institution, funder, and project in ways a generic guide like this one can’t adjudicate for you.
Check current Foxit PDF Editor pricing →
If your compliance review clears it: what Foxit PDF Editor actually offers
Assuming your institution’s review doesn’t flag a blocker — which, for the ordinary redaction/markup/assembly use case most research offices actually have, it usually won’t — Foxit PDF Editor is a well-regarded, feature-complete Adobe Acrobat alternative, generally priced below Acrobat for comparable functionality. CASRAI has covered the product itself in depth elsewhere: see our hands-on review of Foxit for research redaction, markup, and assembly workflows, our breakdown of Foxit PDF Editor pricing on a grant budget, and our comparison of license vs. subscription purchasing options for grant-funded software. Those pages assume the product is a candidate worth evaluating on its merits; this page exists specifically to answer the ownership question those pages don’t cover, so read both before you decide.
A quick checklist before you buy
- Does this purchase touch CUI, ITAR/EAR-controlled technical data, or a federal contract with an information-security clause? If yes, loop in your research-security or export-control office before purchasing, not after.
- Does your funder or institution have a foreign-ownership vendor-disclosure requirement on this specific grant or contract? Check the award terms, not just general institutional policy.
- Is this ordinary departmental or personal use — manuscripts, consent forms, grant paperwork — with no regulated data involved? If so, the corporate-nationality fact is worth knowing but is unlikely to be a blocker on its own.
- Whichever way it lands, document that you asked the question. A compliance officer who finds out later that nobody checked is a bigger institutional problem than the answer itself, in either direction.
Frequently asked questions
Is Foxit Software the same company as Foxit Software Inc.?
Not quite. Foxit Software Inc. is the US subsidiary, based in Fremont, California, that most American and Canadian customers actually contract with. The parent company — Fujian Foxit Software Development Joint Stock Co., Ltd. — is the Shanghai-listed entity headquartered in Fuzhou, China, that owns and controls the subsidiary. Both names refer to parts of the same overall corporate group.
Has Foxit had a confirmed security breach or backdoor found in its software?
Not that our research found. The reporting driving current attention is about federal agencies proactively distancing themselves from a Chinese-owned vendor as a precaution, and about the legal exposure created by China’s National Intelligence Act — not about a discovered vulnerability, breach, or backdoor specific to Foxit’s products. Treat that distinction as material: a policy-driven precaution and a confirmed incident are different levels of concern, and conflating them overstates what’s actually been established.
Should my university stop using Foxit because of this?
Not automatically, and this page can’t make that call for your institution — it depends on what the software touches. Ordinary document editing with no regulated data is a different situation from a workflow touching CUI or export-controlled technical data. Raise it with your compliance or research-security office and let them weigh it against your specific grant terms and data-handling obligations.
Is there a US-owned alternative if my institution wants to avoid this question entirely?
Adobe Acrobat (US-headquartered) is the most direct comparison point on features, at a higher price point. If avoiding foreign-owned vendors entirely is a hard institutional requirement for a specific workflow, that’s worth confirming explicitly with your procurement office, since the requirement (if one exists) usually applies to a defined data category, not to all software purchases uniformly.
Where can I verify these ownership facts myself?
The Shanghai Stock Exchange listing (ticker 688095) is documented on public financial-data services such as MarketScreener and Yahoo Finance; the corporate history is summarized on Wikipedia’s Foxit Software entry; and the federal-agency reporting is Fox News Digital’s coverage of agencies removing references to Foxit government contracts from the company’s website. None of this requires taking CASRAI’s word for it — check the primary listings and reporting directly.
