LiveRamp Holdings Inc

Previous wording

To sustain or increase our revenue, we must regularly add new customers and encourage existing customers to maintain or increase their business with us. As the market matures and regulation increases, and as existing and new market participants produce new and different approaches to enable businesses to address their respective needs that compete with our offerings, we may be forced to reduce the prices we charge, may be unable to renew existing customer agreements, or enter into new customer agreements at the same prices and upon the same terms that we have historically obtained. If our new business and cross-selling efforts are unsuccessful or if our customers do not expand their use of our platform or adopt additional offerings and features, our operating results may suffer.

Current wording

To sustain or increase our subscription revenue, we must regularly add new customers and encourage existing customers to maintain or increase their business with us. As the market matures and regulation increases, and as existing and new market participants produce new and different approaches to enable businesses to address their respective needs that compete with our offerings, we may be forced to reduce the prices we charge, unable to renew existing customer agreements, or unable to enter into new customer agreements at the same prices and upon the same terms that we have historically obtained. If our efforts to add new customers are unsuccessful or if our existing customers do not maintain or expand their use of our platform, including by adopting additional offerings and features, our operating results may suffer.

Previous wording

Our existing customers have no obligation to renew their contracts upon expiration of their contractual subscription period and may not choose to renew their contracts for a variety of reasons. In the normal course of business, some customers have elected not to renew, and it is difficult to predict attrition rates. Our renewal rates may decline or fluctuate as a result of a number of factors, including customer satisfaction, pricing changes, the prices of services offered by our competitors, mergers and acquisitions affecting our customer base, regulatory changes such as in privacy, antitrust, or international relations, and reductions in our customers’ spending levels or other declines in customer activity. If our customers do not renew their contracts or decrease the amount they spend with us, our revenue would decline and our business would suffer.

Current wording

Our existing customers have no obligation to renew their subscription contracts upon expiration of their contractual subscription period and may not renew their subscription contracts for a variety of reasons. Some customers elect not to renew in the normal course of business, and it is difficult to predict renewal rates. Our renewal rates may decline or fluctuate as a result of a number of factors, including customer satisfaction, pricing changes by us or our competitors, new offerings by our competitors, mergers and acquisitions affecting our customer base, regulatory changes such as in privacy, antitrust, or international relations, and reductions in our existing customers’ spending levels or activity. If our existing customers do not renew their subscription contracts or otherwise decrease the amount they spend with us, our subscription revenue would decline and our business would suffer.

Previous wording

A decline in new or renewed subscriptions in any period may not be immediately reflected in our reported financial results for that period but may result in a decline in our revenue in future periods. If we were to experience significant downturns in subscription sales and renewal rates, our reported financial results might not reflect such downturns until future periods. Moreover, the conditions caused by other factors outside our control, such as macroeconomic growth and increasing global geopolitical tensions, have affected, and may affect, directly or indirectly, the rate of spending on advertising products and have and could continue to adversely affect our customers’ ability or willingness to purchase our offerings, delay prospective customers’ purchasing decisions, increase pressure for pricing discounts, lengthen payment terms, reduce the value or duration of their subscription contracts, or increase customer attrition rates, all of which could adversely affect our future sales, operating results and overall financial performance.

Current wording

A decline in new or renewed subscription contracts in any period may not be immediately reflected in our reported financial results for that period but may result in a decline in our subscription revenue in future periods. Moreover, the conditions caused by other factors outside our control, such as economic slowdowns, macroeconomic growth and increasing global geopolitical tensions, have affected, and may continue to affect, directly or indirectly, the rate of spending on advertising products and have adversely affected, and could continue to adversely affect, our existing and prospective customers’ ability or willingness to purchase our offerings, delay our existing and prospective customers’ purchasing decisions, increase pressure for pricing discounts, lengthen payment terms, reduce the value or duration of subscription contracts, or decrease customer renewal rates, all of which could adversely affect our future sales, operating results and overall financial performance.

Previous wording

Our ten largest customers represented approximately 27% of our revenues in fiscal year 2024. The loss of, or decrease in revenue from, any of our significant customers for any reason could have a material adverse effect on our revenue and operating results, which could be exacerbated by customer consolidation, changes in technologies or solutions used by our customers, changes in demand for our platform, legal or regulatory changes, market optics, customer bankruptcies or departures from their respective industries, pricing or product competition, or deviation from marketing and sales methods, any one of which may result in even fewer contractual relationships accounting for a high percentage of our revenue and reduced demand from any single significant customer.

Current wording

Our ten largest customers represented approximately 25% of our revenues in the twelve months ended March 31, 2025. Some of our significant customers have used, and may in the future use, their size and relative importance to our business to require that we enter into agreements with more favorable terms than we would otherwise agree to, to obtain price concessions, or to otherwise restrict our business. The loss of, or decrease in revenue from, any of our significant customers for any reason could have a material adverse effect on our revenue and operating results. The material adverse effect on our revenue and operating results may be exacerbated by customer consolidation, changes in technologies or solutions used by our customers, changes in demand for our platform, legal or regulatory changes, market optics, customer bankruptcies or departures from their respective industries, bans that prohibit certain customers from continuing to do business in the United States, pricing or product competition, or deviation from marketing and sales methods, any one of which may result in even fewer contractual relationships accounting for a high percentage of our revenue and reduced demand from any single significant customer.

Previous wording

Data suppliers may withdraw data that we have previously collected or withhold data from us in the future, leading to our inability to provide products and services to our customers, which could lead to a decrease in revenue and loss of customer confidence.

Current wording

Data suppliers may withdraw data that we have previously collected or withhold data from us in the future, which could lead to our inability to provide products and services to our customers and could result in a decrease in revenue and loss of customer confidence.

Previous wording

Much of the data that we use is either purchased or licensed from third-party data suppliers, and we are dependent upon our ability to obtain necessary data licenses on commercially reasonable terms. We could suffer material adverse consequences if our data suppliers were to withhold their data from us or materially limit our use of their data, which could occur for a variety of reasons, including because we fail to maintain sufficient relationships with the suppliers or because they decline to provide, or are prohibited from providing, such data to us due to legal, regulatory, contractual, privacy, competitive or other economic concerns. For example, data suppliers could withhold their data from us if there is a competitive reason to do so, if we breach our contract with a supplier, if we breach their expectations of our use of their data, if they are acquired by one of our competitors, if legislation is passed or regulations are adopted restricting or making too difficult the collection, use or dissemination of the data they provide, if market optics become negative regarding the sharing of their data with third parties or allowing the setting of cookies from their sites, if publishers change their privacy policies or user settings, including as a result of legal or regulatory actions, in a material manner that turns off or diminishes the volume of data we receive, or if judicial interpretations are issued restricting use of such data, or for other reasons. Further, definitions in enacted or proposed state-level data broker legislation apply to LiveRamp, potentially exposing the Company to negative perceptions and diminishing data available to it. Additionally, we could terminate relationships with our data suppliers if they fail to adhere to our data quality standards or their legal and/or other contractual commitments. If a substantial number of data suppliers were to withdraw or withhold their data from us or substantially limit our use of their data, or if we were to sever ties with our data suppliers based on their inability to meet appropriate data standards, our ability to provide products and services to our customers could be materially adversely impacted, which could result in decreased revenues and operating results.

Current wording

Much of the data that we use is either purchased or licensed from third-party data suppliers, and we are dependent upon our ability to purchase data or obtain necessary data licenses on commercially reasonable terms. We could suffer material adverse consequences if our data suppliers withhold their data from us or materially limit our use of their data, which could occur for a variety of reasons, including, but not limited to, because we fail to maintain sufficient relationships with the data suppliers or because they decline to provide, or are prohibited from providing, such data to us for any reason. For example, data suppliers could withhold their data from us if there is a competitive reason to do so, if we breach our contract with a data supplier, if we breach their expectations of our use of their data, if they are acquired by one of our competitors, if legislation is passed or regulations are adopted restricting or making too difficult the collection, use or dissemination of the data they provide, if market optics become negative regarding the sharing of their data with third parties or allowing the setting of cookies from their sites, if publishers change their privacy policies or user settings, including as a result of legal or regulatory actions, in a material manner that turns off or diminishes the volume of data we receive, or if judicial interpretations are issued restricting use of such data. Further, definitions in enacted or proposed state-level data broker legislation apply to us, potentially exposing the Company to negative perceptions and diminishing data available to it. Additionally, we could terminate relationships with our data suppliers if they fail to adhere to our data quality standards or their legal and/or other contractual commitments. If a substantial number of data suppliers were to withdraw or withhold their data from us or substantially limit our use of their data, or if we were to sever ties with our data suppliers, our ability to provide products and services to our customers could be materially adversely impacted, which could result in decreased revenues and operating results.

Previous wording

We operate in a highly competitive and rapidly changing industry. With the introduction of new technologies and the influx of new entrants to the market, we expect competition to persist and intensify in the future, which could harm our ability to increase revenue and operating results. In addition to existing competitors and intermediaries, we may also face competition from new companies entering the market, which may include large established companies, all of which currently offer, or may in the future offer, products and services that result in additional competition. These competitors may be in a better position to develop new products and pricing strategies that more quickly and effectively respond to changes in customer requirements in these markets. These competitors and new products and technologies may be disruptive to our existing platform offerings, resulting in operating inefficiencies and increased competitive pressure. Some of our competitors may choose to sell products or services competitive to ours at lower prices by accepting lower margins and profitability, or may be able to sell products or services competitive to ours at lower prices given proprietary ownership of data, technical superiority or economies of scale. Such introduction of competent, competitive products, pricing strategies or other technologies by our competitors that are superior to or that achieve greater market acceptance than our products and services could adversely affect our business. In such event, we could experience a decline in market share and revenues and be forced to reduce our prices, resulting in lower profit margins for the Company.

Current wording

We operate in a highly competitive and rapidly changing industry. With the introduction of new technologies and the influx of new entrants to the market, we expect competition to persist and intensify in the future, which could harm our ability to increase revenue and operating results. In addition to existing competitors and intermediaries, we may also face competition from new companies entering the market, including large established companies, all of which currently offer, or may in the future offer, products and services that result in additional competition. Our competitors may be in a better position to develop new products and pricing strategies that more quickly and effectively respond to changes in customer requirements in our markets, which may be disruptive to our existing platform offerings and result in operating inefficiencies and increased competitive pressure. Some of our competitors may choose to sell products or services competitive to ours at lower prices by accepting lower margins and profitability, or may be able to sell products or services competitive to ours at lower prices given proprietary ownership of data, technical superiority or economies of scale. Such introduction of competent, competitive products, pricing strategies or other technologies by our competitors that are superior to or that achieve greater market acceptance than our products and services could adversely affect our business. In such event, we could experience a decline in market share and revenues and be forced to reduce our prices, resulting in lower profit margins for the Company.

Previous wording

Our growth strategy and future success depends in large part on our ability to attract, recruit, onboard, motivate and retain technical, customer services, sales, consulting, research and development, marketing, administrative and management personnel. The complexity of our products, processing functionality, software systems and services requires highly trained professionals. While we presently have a sophisticated, dedicated and experienced team of executives and employees who have a deep understanding of our business, the labor market for these individuals has historically been very competitive due to the limited number of people available with the necessary technical skills and understanding. As our industry continues to become more technologically advanced, we anticipate increased competition for qualified personnel. In addition, many of the companies with which we compete for experienced personnel may be able to offer greater compensation and benefits packages and/or more flexible work alternatives. We may incur significant costs to attract and retain highly trained personnel and we may lose new employees to our competitors or other technology companies before we realize the benefit of our investment in recruiting and training them, and our succession plans may be insufficient to ensure business continuity if we are unable to retain key personnel. Further, volatility or lack of appreciation in our stock price may also affect our ability to attract and retain our key employees. The loss or prolonged absence of the services of highly trained personnel like our current team of executives and employees, or the inability to recruit, attract, onboard and retain additional, qualified employees, could have a material adverse effect on our business, financial position or operating results.

Current wording

Our growth strategy and future success depends in large part on our ability to attract, recruit, onboard, motivate and retain technical, customer services, sales, consulting, research and development, marketing, administrative and management personnel. The complexity of our products, processing functionality, software systems and services requires highly trained professionals. While we presently have a sophisticated, dedicated and experienced team of executives and employees who have a deep understanding of our business, the labor market for these individuals has historically been very competitive due to the limited number of people available with the necessary technical skills and understanding and the number of these individuals available could be diminished by changes in immigration regulations and other restrictions. As our industry continues to become more technologically advanced, we anticipate increased competition for qualified personnel. In addition, many of the companies with which we compete for experienced personnel may be able to offer greater compensation and benefits packages and/or more flexible work alternatives. We may incur significant costs to attract and retain highly trained personnel and we may lose new employees to our competitors or other technology companies before we realize the benefit of our investment in recruiting and training them, and our succession plans may be insufficient to ensure business continuity if we are unable to retain key personnel. Further, volatility or lack of appreciation in our stock price may also affect our ability to attract and retain our key employees. The loss or prolonged absence of the services of highly trained personnel like our current team of executives and employees, or the inability to recruit, attract, onboard and retain additional, qualified employees, could have a material adverse effect on our business, financial position or operating results.

Previous wording

We believe that a critical component to our success has been our company culture, which is based on transparency and personal autonomy. We have invested substantial time and resources in building our team within this company culture. Any failure to preserve our culture could negatively affect our ability to retain and recruit personnel and to proactively focus on and pursue our corporate objectives. The majority of our employees continue to work remotely. We have offered most of our employees the flexibility to determine the amount of time they work in the office, which may present operational challenges and risks, including negative employee morale and productivity, low employee retention, and increased compliance and tax obligations in a number of jurisdictions. If we fail to maintain our company culture, our business may be adversely impacted.

Current wording

We believe that a critical component to our success has been our company culture, which is based on transparency and personal autonomy. We have invested substantial time and resources in building our team within this company culture. Any failure to preserve our culture could negatively affect our ability to retain and recruit personnel and to proactively focus on and pursue our corporate objectives. We have offered most of our employees the flexibility to determine the amount of time they work in the office, and the majority of our employees continue to work remotely. Remote work may present operational challenges and risks, including negative employee morale and productivity, low employee retention, and increased compliance and tax obligations in a number of jurisdictions. If we fail to maintain our company culture, our business may be adversely impacted.

Previous wording

Historically, we have engaged in acquisitions to grow our business, such as the acquisition of Habu in January 2024. To the extent we find suitable and attractive acquisition candidates and business opportunities in the future, we may continue to acquire other complementary businesses, products and technologies and enter into joint ventures or similar strategic relationships. The pursuit of acquisitions may divert the attention of management, disrupt ongoing business, and cause us to incur various expenses in identifying, investigating, and pursuing suitable acquisitions, whether or not they are consummated. While we believe we will be able to successfully integrate newly acquired businesses (such as Habu) into our existing operations, there is no certainty that future acquisitions or alliances will be consummated on acceptable terms or that we will be able to successfully integrate the services, content, products and personnel of any such transaction into our operations. In addition, the pursuit of any future acquisitions, joint ventures or similar relationships may cause a disruption in our ongoing business and distract our management and cause us to incur various expenses in identifying, investigating, and pursuing suitable acquisitions, whether or not they are consummated. An acquisition may later be found to have a material legal or ethical issue that was not disclosed or discovered prior to acquisition. Further, we may be unable to realize the revenue improvements, cost savings and other intended benefits of any such transaction. The occurrence of any of these events could result in decreased revenues, net income and earnings per share.

Current wording

Historically, we have engaged in acquisitions to grow our business. To the extent we find suitable and attractive acquisition candidates and business opportunities in the future, we may continue to acquire other complementary businesses, products and technologies and enter into joint ventures or similar strategic relationships. The pursuit of acquisitions may divert the attention of management, disrupt ongoing business, and cause us to incur various expenses in identifying, investigating, and pursuing suitable acquisitions, whether or not they are consummated. While we believe we will be able to successfully integrate newly acquired businesses into our existing operations, there is no certainty that future acquisitions or alliances will be consummated on acceptable terms or that we will be able to successfully integrate the services, content, products and personnel of any such transaction into our operations. In addition, the pursuit of any future acquisitions, joint ventures or similar relationships may cause a disruption in our ongoing business and distract our management and cause us to incur various expenses in identifying, investigating, and pursuing suitable acquisitions, whether or not they are consummated. An acquisition may later be found to have a material legal or ethical issue that was not disclosed or discovered prior to acquisition. Further, we may be unable to realize the revenue improvements, cost savings and other intended benefits of any such transaction. The occurrence of any of these events could result in decreased revenues, net income and earnings per share.

Previous wording

During the last fiscal year, we received approximately 6% of our revenues from business outside the United States. In those non-U.S. locations where legislation restricting the collection and use of personal data currently exists, less data is available and at a much higher cost. In some foreign markets, the types of products and services we offer have not been generally available and thus are not fully understood by prospective customers. Upon entering these markets, we must educate and condition the markets, increasing the cost and difficulty of successfully executing our business plan in these markets. Additionally, each of our foreign locations is generally expected to fund its own operations and cash flows, although periodically funds may be loaned or invested from the United States to the foreign subsidiaries. Because of such loans or investments, exchange rate movements of foreign currencies may have an impact on our future costs of, or future cash flows from, foreign investments. We have not entered into any foreign currency forward exchange contracts or other derivative instruments to hedge the effects of adverse fluctuations in foreign currency exchange rates.

Current wording

During the twelve months ended March 31, 2025, we received approximately 5% of our revenues from business outside the United States. In those non-U.S. locations where legislation restricting the collection and use of personal data currently exists, less data is available and at a much higher cost. In some foreign markets, the types of products and services we offer have not been generally available and thus are not fully understood by prospective customers. Upon entering these markets, we must educate and condition the markets, increasing the cost and difficulty of successfully executing our business plan in these markets. Additionally, each of our foreign locations is generally expected to fund its own operations and cash flows, although periodically funds may be loaned or invested from the United States to the foreign subsidiaries. Because of such loans or investments, exchange rate movements of foreign currencies may have an impact on our future costs of, or future cash flows from, foreign investments. We have not entered into any foreign currency forward exchange contracts or other derivative instruments to hedge the effects of adverse fluctuations in foreign currency exchange rates.

Previous wording

Additional risks inherent in our non-U.S. business activities generally include, among others, the costs and difficulties of managing international operations, potentially adverse tax consequences, and greater difficulty enforcing intellectual property rights. The various risks that are inherent in doing business in the United States are also generally applicable to doing business outside of the United States, but such risks may be exaggerated by factors normally associated with international operations, such as differences in culture, laws and regulations, especially restrictions on collection, management, aggregation, localizations, and use of information. Failure to effectively manage the risks facing our non-U.S. business activities could materially adversely affect our operating results. Also, our business is subject to weak international economic conditions, geopolitical developments, such as existing and potential trade wars, and other events outside of our control that could result in a reduced volume of business by our customers and prospective customers, and the demand for, and use of, our products and services may decline. For example, the military conflicts in Europe and the Middle East could result in regional instability and adversely impact financial markets as well as economic conditions.

Current wording

Additional risks inherent in our non-U.S. business activities generally include, among others, the costs and difficulties of managing international operations, potentially adverse tax consequences, and greater difficulty enforcing intellectual property rights. The various risks that are inherent in doing business in the United States are also generally applicable to doing business outside of the United States, but such risks may be exaggerated by factors normally associated with international operations, such as differences in culture, laws and regulations, especially restrictions on collection, management, aggregation, localizations, and use of information. Failure to effectively manage the risks facing our non-U.S. business activities could materially adversely affect our operating results. Also, our business is subject to weak international economic conditions, geopolitical developments, such as existing and potential trade wars, and other events outside of our control that could result in a reduced volume of business by our customers and prospective customers, and the demand for, and use of, our products and services may decline. For example, the military conflicts in Europe and the Middle East could result in regional instability and adversely impact financial markets as well as economic conditions, and any economic and political uncertainty caused by the U.S. tariffs imposed on goods from various countries, and any corresponding tariffs from those countries in response, could negatively impact financial markets and economic conditions.

Previous wording

The COVID-19 pandemic disrupted the flow of the economy and put unprecedented strains on governments, health care systems, educational institutions, businesses and individuals around the world, and future public health emergencies could result in the same. Similar to the COVID-19 pandemic, future public health emergencies could result in significant disruptions to the global financial markets and economic uncertainty, as well as regional quarantines, labor shortages or stoppages, changes in consumer purchasing patterns, disruptions to service providers to deliver data on a timely basis, or at all, and overall economic instability. Any future public health emergencies could materially and adversely affect our business, our operating results, financial condition and prospects, and the value of our common stock.

Current wording

The COVID-19 pandemic disrupted the flow of the economy and put unprecedented strains on governments, health care systems, educational institutions, businesses and individuals around the world, and future public health emergencies could result in the same. Future public health emergencies could result in significant disruptions to the global financial markets and economic uncertainty, as well as regional quarantines, labor shortages or stoppages, changes in consumer purchasing patterns, disruptions to service providers to deliver data on a timely basis, or at all, and overall economic instability. Any future public health emergencies could materially and adversely affect our business, our operating results, financial condition and prospects, and the value of our common stock.

Previous wording

Our business requires the storage, transmission and utilization of data, including personally identifiable information, much of which must be maintained on a confidential basis. These activities may make us a target of cyberattacks from malicious third parties seeking unauthorized access to the data we maintain, including our data and customer data, or to disrupt our ability to provide service. Any failure to prevent or mitigate security breaches and improper access to or disclosure of the data we maintain, including personal information, could result in the loss or misuse of such data, which could harm our business and reputation and diminish our competitive position. Our customers and suppliers are increasingly imposing more rigorous contractual obligations on us relating to data security protections. If we are unable to maintain protections and processes at a level equal to that required by our customers and suppliers, it could negatively affect our relationships with those customers and suppliers or increase our operating costs. In addition, computer malware, viruses, social engineering, ransomware, phishing and general hacking have become more prevalent, and events outside of our control, such as the military conflicts in Europe and the Middle East, could result in a further increase in such activities. As a result of the types and volume of personal data on our systems, we believe that we are a particularly attractive target for such breaches and attacks.

Current wording

Our business requires the storage, transmission and utilization of data, including personally identifiable information, much of which must be maintained on a confidential basis. These activities may make us a target of cyberattacks from malicious third parties seeking unauthorized access to the data we maintain, including our data and customer data, or to disrupt our ability to provide service. Any failure to prevent or mitigate security breaches and improper access to or disclosure of the data we maintain, including personal information, could result in the loss or misuse of such data, which could harm our business and reputation and diminish our competitive position. Our customers and suppliers are increasingly imposing more rigorous contractual obligations on us relating to data security protections. If we are unable to maintain protections and processes at a level equal to that required by our customers and suppliers, it could negatively affect our relationships with those customers and suppliers or increase our operating costs. In addition, computer malware, viruses, social engineering, ransomware, phishing and general hacking have become more prevalent, and events outside of our control, such as the military conflicts in Europe and the Middle East, and economic and political uncertainty caused by the U.S. tariffs could result in a further increase in such activities. As a result of the types and volume of personal data on our systems, we believe that we are a particularly attractive target for such breaches and attacks.

Previous wording

In recent years, the frequency, severity and sophistication of cyberattacks, computer malware, viruses, social engineering, ransomware, phishing and other intentional misconduct by computer hackers have significantly increased, including the ability to evade detection or obscure their activities, and government agencies and security experts have warned about the growing risks of hackers, cyber criminals and other potential attackers targeting information technology systems. Such third parties could attempt to gain entry to our systems for the purpose of stealing data or disrupting the systems. In addition, our security measures may also be breached due to employee error, malfeasance, system errors or vulnerabilities, including vulnerabilities of our vendors, suppliers, their products, or otherwise. Third parties may also attempt to fraudulently induce employees or customers into disclosing sensitive information such as usernames, passwords or other information to gain access to our customers’ data or our data, including intellectual property and other confidential business information. The COVID-19 pandemic generally increased opportunities available to hackers and cyber criminals as more companies and individuals work online from remote locations. We believe we have taken appropriate measures to protect our systems from intrusion, but we cannot be certain that advances in criminal capabilities, discovery of new or existing vulnerabilities in our systems and attempts to exploit those vulnerabilities, physical system or facility break-ins and data thefts or other developments will not compromise or breach the technology protecting our systems and the information we possess.

Current wording

In recent years, the frequency, severity and sophistication of cyberattacks, computer malware, viruses, social engineering, ransomware, phishing and other intentional misconduct by computer hackers have significantly increased, including the ability to evade detection or obscure their activities, and government agencies and security experts have warned about the growing risks of hackers, cyber criminals and other potential attackers targeting information technology systems. Such third parties could attempt to gain entry to our systems for the purpose of stealing data or disrupting the systems. In addition, our security measures may also be breached due to employee error, malfeasance, system errors or vulnerabilities, including vulnerabilities of our vendors, suppliers, their products, or otherwise. Third parties may also attempt to fraudulently induce employees or customers into disclosing sensitive information such as usernames, passwords or other information to gain access to our customers’ data or our data, including intellectual property and other confidential business information. The COVID-19 pandemic generally increased opportunities available to hackers and cyber criminals as more companies and individuals continue to work online from remote locations than prior to the pandemic. We believe we have taken appropriate measures to protect our systems from intrusion, but we cannot be certain that advances in criminal capabilities, discovery of new or existing vulnerabilities in our systems and attempts to exploit those vulnerabilities, physical system or facility break-ins and data thefts or other developments will not compromise or breach the technology protecting our systems and the information we possess.

Previous wording

Any damage to, or failure of, the systems of our third-party providers could result in interruptions to our platform. Despite precautions taken at our data centers, the occurrence of spikes in usage volume, a natural disaster, such as earthquakes or hurricanes, an act of terrorism, destruction, vandalism or sabotage, a decision to close a facility without adequate notice, or other unanticipated problems at a facility could result in lengthy interruptions in the availability of our platform. Even with current and planned disaster recovery arrangements, our business could be harmed, and no assurance can be provided that any interruptions would be remediated without significant cost or in a timely manner or at all. Also, in the event of damage or interruption, our insurance policies may not adequately compensate us for any losses that we may incur. These factors in turn could further reduce our revenue, subject us to liability and cause us to issue credits or cause customers to fail to renew their subscriptions, any of which could materially adversely affect our business.

Current wording

Any damage to, or failure of, the systems of our third-party providers could result in interruptions to our platform. Despite precautions taken at our data centers, the occurrence of spikes in usage volume, a natural disaster, such as earthquakes or hurricanes, an act of terrorism, destruction, vandalism or sabotage, a decision to close a facility without adequate notice, or other unanticipated problems at a facility could result in lengthy interruptions in the availability of our platform. Even with current and planned disaster recovery arrangements, our business could be harmed, and no assurance can be provided that any interruptions would be remediated without significant cost or in a timely manner or at all. Also, in the event of damage or interruption, our insurance policies may not adequately compensate us for any losses that we may incur. These factors in turn could further reduce our revenue by subjecting us to liability, causing us to issue credits or causing customers to fail to renew their subscriptions, any of which could materially adversely affect our business.

Previous wording

Cookies may be deleted or blocked by Internet users who do not want information to be collected about them. The most commonly used Internet browsers—Chrome, Firefox, Internet Explorer and Safari—allow Internet users to modify their browser settings to prevent cookies from being accepted by their browsers. In May 2023, Google announced it will continue with its previously announced timeline to end Chrome's support for third-party cookies in the second half of 2024 and in January 2024 started deprecating third-party cookies for 1% of its users globally. In April 2024, Google announced a delay to the end of Chrome's support for third-party cookies, noting it now expects deprecation to be completed in early 2025. Mobile devices allow users to opt out of the use of mobile device IDs for targeted advertising. Additionally, the Safari browser currently blocks some third-party cookies by default and has recently added controls that algorithmically block or limit some cookies. Other browsers have added similar controls. In addition, Internet users can delete cookies from their computers at any time. Some Internet users also download free or paid ad blocking software that not only prevents third-party cookies from being stored on a user’s computer, but also blocks all interaction with a third-party ad server. Google has introduced ad blocking software in its Chrome web browser that will block certain ads based on quality standards established under a multi-stakeholder coalition. Additionally, the DAA, NAI, their international counterparts, and our company have certain opt-out mechanisms for users to opt out of the collection of their information via cookies. If more Internet users adopt these settings or delete their cookies more frequently than they currently do, or restrictions are imposed by advertisers and publishers, there are changes in technology or new developments in laws, regulations or industry standards around cookies, our business could be harmed.

Current wording

Cookies may be deleted or blocked by Internet users who do not want information to be collected about them. The most commonly used Internet browsers—Chrome, Firefox, Internet Explorer and Safari—allow Internet users to modify their browser settings to prevent cookies from being accepted by their browsers. In January 2020, Google announced that at some point in the following 24 months the Chrome browser would block third-party cookies, and in April 2021, Google began releasing software updates to its Chrome browser with features intended to phase out third-party cookies. In May 2023, Google stated that it would deprecate third-party cookies by mid-2024 and in January 2024 started by deprecating third-party cookies for 1% of users globally. In April 2024, Google announced that the deprecation of third-party cookies will not be completed in 2024. In July 2024, Google announced that, instead of deprecating third-party cookies, it will introduce “a new experience in Chrome that lets people make an informed choice that applies across their web browsing,” however, in April 2025, Google announced that after further consideration it will not be rolling out a new standalone prompt for third-party cookies in Chrome and third-party cookies will remain with the current opt-out functionality. While Google has determined not to deprecate cookies or roll out a new standalone prompt for third-party cookies in Chrome at this time, it is possible that Google's ongoing efforts in this area may have a substantial impact on the ability to collect and use data from Internet users. Mobile devices allow users to opt out of the use of mobile device IDs for targeted advertising. Additionally, the Safari browser currently blocks some third-party cookies by default and has recently added controls that algorithmically block or limit some cookies. Other browsers have added similar controls. In addition, Internet users can delete cookies from their computers at any time. Some Internet users also download free or paid ad blocking software that not only prevents third-party cookies from being stored on a user’s computer, but also blocks all interaction with a third-party ad server. Google has introduced ad blocking software in its Chrome web browser that will block certain ads based on quality standards established under a multi-stakeholder coalition. Additionally, the DAA, NAI, their international counterparts, and our company have certain opt-out mechanisms for users to opt out of the collection of their information via cookies. If more Internet users adopt these settings or delete their cookies more frequently than they currently do, or restrictions are imposed by advertisers and publishers, there are changes in technology or new developments in laws, regulations or industry standards around cookies, our business could be harmed.

Previous wording

Any of our primary locations may be vulnerable to the adverse effects of climate change. For example, our offices and facilities in California have experienced, and are projected to continue to experience, climate-related events at an increasing frequency, including drought, water scarcity, heat waves, wildfires and resultant air quality impacts and power shutoffs associated with wildfire prevention. Furthermore, it may be more difficult to mitigate the impact of these events on our remote employees working from home. Changing market dynamics, global policy developments and the increasing frequency and impact of extreme weather events on critical infrastructure in the U.S. and elsewhere have the potential to disrupt our business, the business of our third-party suppliers and the business of our customers, and may cause us to experience higher churn, losses and additional costs to maintain or resume operations.

Current wording

Any of our primary locations may be vulnerable to the adverse effects of climate change. For example, our offices and facilities in California have experienced, and are projected to continue to experience, climate-related events at an increasing frequency, including drought, water scarcity, heat waves, wildfires and resultant air quality impacts and power shutoffs associated with wildfire prevention. Furthermore, it may be more difficult to mitigate the impact of these events on our remote employees working from home. Changing market dynamics, global policy developments and the increasing frequency and impact of extreme weather events on critical infrastructure in the United States and elsewhere have the potential to disrupt our business, the business of our third-party suppliers and the business of our customers, and may cause us to experience higher churn, losses and additional costs to maintain or resume operations.

Previous wording

The U.S. federal and various state and foreign governments have adopted or proposed limitations on the collection, distribution, use and storage of data relating to individuals, including the use of contact information and other data for marketing, advertising and other communications with individuals and businesses. In the U.S., various laws and regulations apply to the collection, processing, disclosure, and security of certain types of data. Additionally, the FTC and many state attorneys general are interpreting federal and state consumer protection laws as imposing standards for the online collection, use, dissemination and security of data. In addition, the European Union has been developing new requirements related to the use of data, including in the Digital Services Act, that may impose additional rules and restrictions on the use of the data.

Current wording

The United States federal and various state and foreign governments have adopted or proposed limitations on the collection, distribution, use and storage of data relating to individuals, including the use of contact information and other data for marketing, advertising and other communications with individuals and businesses. In the United States, various laws and regulations apply to the collection, processing, disclosure, and security of certain types of data. Additionally, the FTC and many state attorneys general are interpreting federal and state consumer protection laws as imposing standards for the online collection, use, dissemination and security of data. In addition, the European Union has been developing new requirements related to the use of data, including in the Digital Services Act, that may impose additional rules and restrictions on the use of the data.

Previous wording

The regulatory framework for data privacy issues worldwide is currently evolving and is likely to remain uncertain for the foreseeable future. For example, in the U.S., in August 2022 the FTC released an advance notice of proposed rulemaking concerning commercial surveillance and data security and sought comment on whether it should implement new trade regulation rules or other regulatory alternatives concerning the ways in which companies (1) collect, aggregate, protect, use, analyze, and retain consumer data, as well as (2) transfer, share, sell, or otherwise monetize that data in ways that are unfair or deceptive. In addition, a potential federal data privacy law remains the subject of active discussion, and, in April 2024, a bipartisan pair of lawmakers unveiled a draft bill that would substantially impact the online advertising ecosystem if passed. The occurrence of unanticipated events often rapidly drives the adoption of legislation or regulation affecting the use, collection or other processing of data and manners in which we conduct our business. Restrictions could be placed upon the collection, management, aggregation and use of information, which could result in a material increase in the cost of collecting or otherwise obtaining certain kinds of data and could limit the ways in which we may use or disclose information.

Current wording

The regulatory framework for data privacy issues worldwide is currently evolving and is likely to remain uncertain for the foreseeable future. For example, in the United States, in August 2022 the FTC released an advance notice of proposed rulemaking concerning commercial surveillance and data security and sought comment on whether it should implement new trade regulation rules or other regulatory alternatives concerning the ways in which companies (1) collect, aggregate, protect, use, analyze, and retain consumer data, as well as (2) transfer, share, sell, or otherwise monetize that data in ways that are unfair or deceptive. In addition, a potential federal data privacy law remains the subject of active discussion, and, in April 2024, a bipartisan pair of lawmakers unveiled a draft bill that would substantially impact the online advertising ecosystem if passed. The occurrence of unanticipated events often rapidly drives the adoption of legislation or regulation affecting the use, collection or other processing of data and manners in which we conduct our business. Restrictions could be placed upon the collection, management, aggregation and use of information, which could result in a material increase in the cost of collecting or otherwise obtaining certain kinds of data and could limit the ways in which we may use or disclose information.

Previous wording

In particular, interest-based advertising, or the use of data to draw inferences about a user’s interests and deliver relevant advertising to that user, and similar or related practices, such as cross-device data collection and aggregation, steps taken to de-identify or pseudonymize personal data and to use and distribute the resulting data, including for purposes of personalization and the targeting of advertisements, have come under increasing scrutiny by legislative, regulatory, and self-regulatory bodies in the U.S. and abroad that focus on consumer protection or data privacy. Much of this scrutiny has focused on the use of cookies and other technology to collect information about Internet users’ online browsing activity on web browsers, mobile devices, and other devices, to associate such data with user or device identifiers or pseudonymous identifiers across devices and channels. In addition, providers of Internet browsers have engaged in, or announced plans to continue or expand, efforts to provide increased visibility into, and certain controls over, cookies and similar technologies and the data collected using such technologies. For example, in January 2020 Google announced that at some point in the following 24 months the Chrome browser would block third-party cookies. In April 2021, Google began releasing software updates to its Chrome browser with features intended to phase out third-party cookies. In May 2023, Google stated that it would deprecate third-party cookies by mid-2024 and in January 2024 started by deprecating third-party cookies for 1% of users globally. In April 2024, Google announced that the deprecation of third-party cookies will not be completed in 2024. Because we, and our customers, rely upon data, including that collected through cookies and similar technologies, it is possible that Google's efforts may have a substantial impact on the ability to collect and use data from Internet users, and it is essential that we monitor developments in this area domestically and globally, and engage in responsible privacy practices, including providing consumers with notice of the types of data we collect and how we use that data to provide our services.

Current wording

In particular, interest-based advertising, or the use of data to draw inferences about a user’s interests and deliver relevant advertising to that user, and similar or related practices, such as cross-device data collection and aggregation, steps taken to de-identify or pseudonymize personal data and to use and distribute the resulting data, including for purposes of personalization and the targeting of advertisements, have come under increasing scrutiny by legislative, regulatory, and self-regulatory bodies in the United States and abroad that focus on consumer protection or data privacy. Much of this scrutiny has focused on the use of cookies and other technology to collect information about Internet users’ online browsing activity on web browsers, mobile devices, and other devices, to associate such data with user or device identifiers or pseudonymous identifiers across devices and channels. In addition, providers of Internet browsers have engaged in, or announced plans to continue or expand, efforts to provide increased visibility into, and certain controls over, cookies and similar technologies and the data collected using such technologies. For example, in January 2020 Google announced that at some point in the following 24 months the Chrome browser would block third-party cookies and in April 2021, Google began releasing software updates to its Chrome browser with features intended to phase out third-party cookies. In May 2023, Google stated that it would deprecate third-party cookies by mid-2024 and in January 2024 started by deprecating third-party cookies for 1% of users globally. In April 2024, Google announced that the deprecation of third-party cookies will not be completed in 2024. In July 2024, Google announced that, instead of deprecating third-party cookies, it will introduce “a new experience in Chrome that lets people make an informed choice that applies across their web browsing,” however, in April 2025, Google announced that after further consideration it will not be rolling out a new standalone prompt for third-party cookies in Chrome and third-party cookies will remain with the current opt-out functionality. While Google has determined not to deprecate cookies or roll out a new standalone prompt for third-party cookies in Chrome at this time it is possible that Google's ongoing efforts in this area may have a substantial impact on the ability to collect and use data from Internet users, and it is essential that we monitor developments in this area domestically and globally, and engage in responsible privacy practices, including providing consumers with notice of the types of data we collect and how we use that data to provide our services.

Previous wording

In the U.S., the U.S. Congress and state legislatures, along with federal regulatory authorities have recently increased their attention on matters concerning the collection and use of consumer data. In the U.S., non-sensitive consumer data generally may be used under current rules and regulations, subject to certain restrictions, so long as the person does not affirmatively “opt-out” of the collection or use of such data. If an “opt-in” model were to be adopted in the U.S., less data would be available, and the cost of data would be higher. For example, California enacted legislation, the California Consumer Privacy Act (“CCPA”), that became operative on January 1, 2020 and came under California Attorney General ("AG") enforcement on July 1, 2020. The CCPA requires covered companies to, among other things, provide new disclosures to California consumers and afford such consumers new abilities to opt-out of certain sales of personal information, a concept that is defined broadly. The CCPA is the subject of regulations issued by the California AG. In November 2020 California voters also approved the ballot initiative known as the California Privacy Rights Act of 2020 (“CPRA”). Pursuant to the CPRA, effective January 1, 2023, the CCPA was amended by creating additional privacy rights for California consumers and additional obligations on businesses, which could subject us to additional compliance costs as well as possible fines, individual claims and commercial liabilities for certain compliance failures. Since the CCPA, sixteen other state legislatures so far have passed comprehensive privacy legislation, including Virginia, Colorado, Connecticut, Utah, Indiana, Iowa, Tennessee, Montana, Florida, Oregon, Texas, Delaware, Nebraska, New Hampshire, New Jersey and Kentucky and other states have passed sector or data-specific legislation, such as Illinois, Washington, Nevada and Maryland. Together with the CCPA and CPRA, these are referred to throughout as "State Consumer Privacy Acts." Each of these State Consumer Privacy Acts have gone, or will go, into effect on or before January 1, 2026. Many other states currently have comprehensive and/or sector or data-specific bills winding their way through their legislatures.

Current wording

In the United States, the U.S. Congress and state legislatures, along with federal regulatory authorities have recently increased their attention on matters concerning the collection and use of consumer data. In the United States, non-sensitive consumer data generally may be used under current rules and regulations, subject to certain restrictions, so long as the person does not affirmatively “opt-out” of the collection or use of such data. If an “opt-in” model were to be adopted in the United States, less data would be available, and the cost of data would be higher. For example, California enacted legislation, the California Consumer Privacy Act (“CCPA”), that became operative on January 1, 2020 and came under California Attorney General ("AG") enforcement on July 1, 2020. The CCPA requires covered companies to, among other things, provide new disclosures to California consumers and afford such consumers new abilities to opt-out of certain sales of personal information, a concept that is defined broadly. The CCPA is the subject of regulations issued by the California AG. In November 2020 California voters also approved the ballot initiative known as the California Privacy Rights Act of 2020 (“CPRA”). Pursuant to the CPRA, effective January 1, 2023, the CCPA was amended by creating additional privacy rights for California consumers and additional obligations on businesses, which could subject us to additional compliance costs as well as possible fines, individual claims and commercial liabilities for certain compliance failures. Since the CCPA, as of March 31, 2025 at least twenty-two other state legislatures have passed applicable comprehensive or sector-specific privacy legislation. Together with the CCPA and CPRA, these are referred to throughout as "State Consumer Privacy Acts." Each of these State Consumer Privacy Acts have gone, or will go, into effect on or before January 1, 2026. Many other states currently have comprehensive and/or sector or data-specific bills winding their way through their legislatures.

Previous wording

We are also subject to laws, regulations and other restrictions that dictate whether, how, and under what circumstances we can transfer, process and/or receive certain data that is critical to our operations, including data shared between countries or regions in which we operate, and data shared among our products and services. For example, in 2016, the European Union and the U.S. agreed to an alternative transfer framework for data transferred from the European Union to the U.S., called the Privacy Shield. On July 16, 2020, however, the European Court of Justice invalidated the Privacy Shield and companies may no longer rely on it as a valid mechanism to comply with European Union data protection requirements. In July 2023, the EU adopted an adequacy decision for the EU-U.S. Data Privacy Framework ("DPF"), allowing the DPF to facilitate the transfer of data from Europe to the U.S., and with the U.K. Extension, also from the U.K. to the U.S. In addition, the other bases upon which we rely to legitimize the transfer of such data, such as Standard Contractual Clauses, have been subjected to regulatory and judicial scrutiny. If any of the legal bases upon which we currently rely for transferring data from Europe to the U.S. are invalidated, if we are unable to transfer data between and among countries and regions in which we operate, or if we are prohibited from sharing data among our products and services, it could affect the manner in which we provide our services or adversely affect our financial results.

Current wording

We are also subject to laws, regulations and other restrictions that dictate whether, how, and under what circumstances we can transfer, process and/or receive certain data that is critical to our operations, including data shared between countries or regions in which we operate, and data shared among our products and services. For example, in 2016, the European Union and the United States agreed to an alternative transfer framework for data transferred from the European Union to the United States called the Privacy Shield. On July 16, 2020, however, the European Court of Justice invalidated the Privacy Shield and companies may no longer rely on it as a valid mechanism to comply with European Union data protection requirements. In July 2023, the EU adopted an adequacy decision for the EU-U.S. Data Privacy Framework ("DPF"), allowing the DPF to facilitate the transfer of data from Europe to the United States, and with the U.K. Extension, also from the U.K. to the United States. In addition, the other bases upon which we rely to legitimize the transfer of such data, such as Standard Contractual Clauses, have been subjected to regulatory and judicial scrutiny. If any of the legal bases upon which we currently rely for transferring data from Europe to the United States are invalidated, if we are unable to transfer data between and among countries and regions in which we operate, or if we are prohibited from sharing data among our products and services, it could affect the manner in which we provide our services or adversely affect our financial results.

Previous wording

New income, sales, use or other tax laws, statutes, rules, regulations or ordinances could be enacted at any time, which could affect the tax treatment of our domestic and foreign earnings and materially affect our financial position and results of operations. For example, in 2022 the United States passed the Inflation Reduction Act, which provides for a minimum tax equal to 15% of the adjusted financial statement income of certain large corporations, as well as a 1% excise tax on share repurchases, and the Organization for Economic Co-operation and Development issued proposals including the implementation of the global minimum tax under the Pillar Two model rule. Our existing corporate structure and intercompany arrangements have been implemented in a manner we believe is in compliance with current prevailing tax laws. However, due to economic and political conditions, tax rates and tax regimes in various jurisdictions may be subject to significant changes, and the tax benefits that we intend to eventually derive could be impacted by changing tax laws. Any new taxes could adversely affect our domestic and international business operations, and our business and financial performance. Further, existing tax laws, statutes, rules, regulations or ordinances could be interpreted, changed, modified or applied adversely to us, which could have a material adverse effect on our business, cash flow, financial condition or results of operations.

Current wording

New income, sales, use or other tax laws, statutes, rules, regulations or ordinances could be enacted at any time, which could affect the tax treatment of our domestic and foreign earnings and materially affect our financial position and results of operations. Our existing corporate structure and intercompany arrangements have been implemented in a manner we believe is in compliance with current prevailing tax laws. However, due to economic and political conditions, tax rates and tax regimes in various jurisdictions may be subject to significant changes, and the tax benefits that we intend to eventually derive could be impacted by changing tax laws. Any new taxes could adversely affect our domestic and international business operations, and our business and financial performance. Further, existing tax laws, statutes, rules, regulations or ordinances could be interpreted, changed, modified or applied adversely to us, which could have a material adverse effect on our business, cash flow, financial condition or results of operations.

Previous wording

As our business is focused on data-driven results and analytics, we rely heavily on proprietary information technology, processes and other protectable intellectual property rights. From time to time, third parties may claim that one or more of our products or services infringe their intellectual property rights. We analyze and take action in response to such claims on a case-by-case basis. Any dispute or litigation regarding patents or other intellectual property, whether they are with or without merit, could be costly and time-consuming due to the complexity of our technology and the uncertainty of intellectual property litigation, which could divert the attention of our management and key personnel away from our business operations, even if ultimately determined in our favor. A claim of intellectual property infringement could force us to enter into a costly or restrictive license or royalty agreement, which might not be available under acceptable terms or at all, could require us to pay significant damages (including attorneys’ fees), could subject us to an injunction against development and sale of certain of our products or services, could require us to expend additional development resources to redesign our technology and could require us to indemnify our partners and other third parties.

Current wording

As our business is focused on data-driven results and analytics, we rely heavily on proprietary information technology, processes and other protectable intellectual property rights. From time to time, third parties may claim that one or more of our products or services infringe their intellectual property rights. We analyze and take action in response to such claims on a case-by-case basis. Any dispute or litigation regarding patents or other intellectual property, whether they are with or without merit, could be costly and time-consuming due to the complexity of our technology and the uncertainty of intellectual property litigation, which could divert the attention of our management and key personnel away from our business operations, even if ultimately determined in our favor. A claim of intellectual property infringement could force us to enter into a costly or restrictive license or royalty agreement, which might not be available under acceptable terms or at all, could require us to pay significant damages (including attorneys’ fees), could subject us to an injunction against development and sale of certain of our products or services, could require us to expend additional development resources to redesign our technology and/or could require us to indemnify our partners and other third parties, any or all of which could have a material adverse effect on our business and results of operations. In addition, our proprietary portfolio consists of various intellectual property rights, including patents, copyrights, database rights, source code, trademarks, trade secrets, know-how, confidentiality provisions and licensing arrangements. The extent to which such rights can be protected varies from jurisdiction to jurisdiction. Our competitive position may suffer if we do not enforce our intellectual property rights vigorously and successfully and we may expand significant resources enforcing our intellectual property rights, either or both of which could harm our operating results.