Citrix

Citrix provides funding to support fellowships for women in computer science, artificial intelligence (AI) and computational data science in India. The company is also committed to making technology accessible to everyone through its compliance with international guidelines and through accessibility features in its products.

No evidence was found of the company having leading practices in this area.

Citrix has a Technology, Data and Information Security Committee as well as a standalone security document that describes its security controls. It is among the few companies in the benchmark to make its ISO 27001 information security management certificate publicly available.

The company provides some support for open innovation by sharing source code and it discloses the locations of its research and development (R&D) facilities.

Little evidence was found that Citrix has activities aimed at providing universal and inclusive access to digital technologies. In addition to expanding efforts in this area, the company can also report how the economic value it generates is distributed among its stakeholders.

Little evidence was found that Citrix supports activities to develop digital skills at all levels. The company has an opportunity to increase its support for initiatives in this area.

While Citrix considers data privacy a material topic, it does not disclose details on data breaches and government requests for user data. Moreover, no evidence was found that the company has a commitment to child online safety.

Little evidence was found of the company’s activities relating to open, inclusive and ethical innovation. Citrix has an opportunity to report on initiatives in this area as well as improve its disclosure on sustainability.

There is significant room for Citrix to improve in the human rights pillar. The company lacks a public policy document stating a commitment to respect human rights, nor does it disclose a process to identify, assess and act on salient human rights risks in its operations and in its business relationships. Moreover, the company does not engage with stakeholders whose human rights could be impacted by its operations, and it does not have a grievance mechanism to raise human rights concerns and complaints available in all the countries where it operates.

Citrix commits to respecting worker health and safety. However, the company can disclose quantitative information on health and safety for its workers. In terms of workforce diversity, the company provides a breakdown of employees in different employee categories by gender and race/ethnicity, but it does not report employee breakdowns for any other indicators of diversity. Furthermore, Citrix is not explicit in stating that it does not require workers to work more than the regular and overtime hours.

Citrix provides a breakdown of the income taxes it pays in three categories – federal, state and foreign. However, it does not disclose its income tax payments for all of its individual tax jurisdictions. Further, Citrix lacks information in relation to its approach to lobbying and political engagement. It does disclose a policy prohibiting bribery and corruption, and it includes anti-bribery and anti-corruption clauses in its business relationship contracts.