It is mentioned on page#40 of this AN available at this link:
Commonly, Cypress is asked if their VID can be used on a customer‘s end product. The answer to this question is ―"No". Cypress VIDs can be used in a development environment, but cannot be released in a production design. The main reason behind this is due to operating systems, such as Windows, remember the system files (inf file, driver, and so on) used by the device and loads them every time the device is attached. If our VID is used by our customers, then the possibility that another customer may use the same VID/PID for their product exists. In this case, as you can see, the end product may bind to a different driver and malfunction. Ultimately this causes trouble for the end customer.
You can contact local Cypress FAEs/distributors for further help