Autodesk Inc

Previous wording

In addition, we frequently introduce new business models or methods that require a considerable investment of technical and financial resources, such as our introduction of flexible subscription and service offerings and our transition of multi-subscription plans to named-user plans. It is uncertain whether these strategies, including our product and pricing changes, will accurately reflect customer demand or be successful, or whether we will be able to develop the necessary infrastructure and business models more quickly than our competitors. We make such investments through further development and enhancement of our existing products and services, as well as through acquisitions. Such investments may not result in sufficient revenue generation to justify their costs and could result in decreased net revenue or profitability. If we are not able to meet customer requirements, either with respect to new customers or existing customers, and either with respect to our software or the manner in which we provide such products, or if we are not able to adapt our business model to meet our customers’ requirements, our business, financial condition, or results of operations may be adversely impacted.

Current wording

In addition, we frequently introduce new business models or methods that require a considerable investment of technical and financial resources, such as our introduction of flexible subscription and service offerings, our transition of multi-subscription plans to named-user plans and our new transaction model. It is uncertain whether these strategies, including our product and pricing changes, will accurately reflect customer demand or be successful, or whether we will be able to develop the necessary infrastructure and business models more quickly than our competitors. We make such investments through further development and enhancement of our existing products and services, as well as through acquisitions. Such investments may not result in sufficient revenue generation to justify their costs and could result in decreased net revenue or profitability. If we are not able to meet customer requirements, either with respect to new customers or existing customers, and either with respect to our software or the manner in which we provide such products, or if we are not able to adapt our business model to meet our customers’ requirements, our business, financial condition, or results of operations may be adversely impacted.

Previous wording

Our overall performance depends largely upon domestic and worldwide economic and political conditions. The United States and other countries’ economies have experienced cyclical downturns, in which economic activity was impacted by falling demand for a variety of goods and services, restricted credit, poor liquidity, decreased government spending, reduced corporate profitability, volatility in credit, equity, and foreign exchange markets, inflationary pressures and higher interest rates, bankruptcies, and overall uncertainty. These economic conditions can occur abruptly. For example, current geopolitical and global macro-economic challenges have caused uncertainty in the global economy, and an economic downturn or recession in the United States or in other countries may occur or has already occurred and may continue. The extent to which these challenges will impact our financial condition or results of operations is still uncertain and will continue to depend on developments such as the impact of these challenges on our customers, vendors, distributors, and resellers, such as the supply chain disruption and resulting inflationary pressures and global labor shortage that we have seen recently, material scarcity, as well as other factors; actions taken by governments, businesses, and consumers in response to these challenges; speed and timing of economic recovery, including in specific geographies; our billings and renewal rates, including new business close rates, rate of multi-year contracts, pace of closing larger transactions, and new unit volume growth; wars and armed conflicts, including the ongoing wars between the Ukraine and Russia and between Israel and Hamas; foreign exchange rate fluctuations; and the effect of these challenges on margins and cash flow. All of these factors continue to evolve and remain uncertain at this time, and some of these factors are not within our control. If economic growth in countries where we do business slows or if such countries experience further economic recessions, customers may delay or reduce technology purchases, which we have seen recently in certain countries including China. Our customers include government entities, including the U.S. federal government, and if spending cuts impede the ability of governments to purchase our products and services, our revenue could decline. In addition, a number of our customers rely, directly and indirectly, on government spending.

Current wording

Our overall performance depends largely upon domestic and worldwide economic and political conditions. The United States and other countries’ economies have experienced cyclical downturns, in which economic activity was impacted by falling demand for a variety of goods and services, restricted credit, poor liquidity, decreased government spending, reduced corporate profitability, volatility in credit, equity, and foreign exchange markets, inflationary pressures and higher interest rates, bankruptcies, and overall uncertainty. These economic conditions can occur abruptly. For example, current geopolitical and global macro-economic challenges have caused uncertainty in the global economy, and an economic downturn or recession in the United States or in other countries may occur or has already occurred and may continue. The extent to which these challenges will impact our financial condition or results of operations is still uncertain and will continue to depend on developments such as the impact of these challenges on our customers, vendors, distributors, and resellers, such as the supply chain disruption and resulting inflationary pressures and global labor shortage that we have seen recently, material scarcity, as well as other factors; actions taken by governments, businesses, and consumers in response to these challenges; speed and timing of economic recovery, including in specific geographies; our billings and renewal rates, including new business close rates, rate of multi-year contracts, pace of closing larger transactions, and new unit volume growth; wars and armed conflicts, including the ongoing wars between Ukraine and Russia and between Israel and Hamas; foreign exchange rate fluctuations; and the effect of these challenges on margins and cash flow. All of these factors continue to evolve and remain uncertain at this time, and some of these factors are not within our control. If economic growth in countries where we do business slows or if such countries experience further economic recessions, customers may delay or reduce technology purchases. Our customers include government entities, including the U.S. federal government, and if spending cuts impede the ability of governments to purchase our products and services, our revenue could decline. In addition, a number of our customers rely, directly and indirectly, on government spending.

Previous wording

As described elsewhere in these risk factors, we are dependent on international revenue and operations and are subject to related risks of conducting business globally. Trends toward nationalism and protectionism and the weakening or dissolution of international trade pacts may increase the cost of, or otherwise interfere with, conducting business. These trends have increased political and economic unpredictability globally and may increase the volatility of global financial markets, and the impact of such developments on the global economy remains uncertain. Political instability or adverse political developments in any of the countries in which we do business could harm our business, results of operations, and financial condition. A financial sector credit crisis could impair credit availability and the financial stability of our customers, including our distribution partners and channels. A disruption in the financial markets may also have an effect on our derivative counter-parties and could also impair our banking partners, on which we rely for operating cash management. War, including the ongoing wars between the Ukraine and Russia and between Israel and Hamas, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy, could also affect our business. Any of these events could harm our business, results of operations, and financial condition.

Current wording

As described elsewhere in these risk factors, we are dependent on international revenue and operations and are subject to related risks of conducting business globally. Trends toward nationalism and protectionism and the weakening or dissolution of international trade pacts may increase the cost of, or otherwise interfere with, conducting business. These trends have increased political and economic unpredictability globally and may increase the volatility of global financial markets, and the impact of such developments on the global economy remains uncertain. Political instability or adverse political developments in any of the countries in which we do business could harm our business, results of operations, and financial condition. A financial sector credit crisis could impair credit availability and the financial stability of our customers, including our distribution partners and channels. A disruption in the financial markets may also have an effect on our derivative counter-parties and could also impair our banking partners, on which we rely for operating cash management. War, geopolitical conflicts, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy, could also affect our business. Any of these events could harm our business, results of operations, and financial condition.

Previous wording

International net revenue represented 64% and 66% of our net revenue for fiscal 2024 and 2023, respectively. Our international revenue, some of which comes from emerging economies, is subject to economic and political conditions in foreign markets, including those resulting from economic and political conditions in the United States. For example, we have recently seen a deceleration in growth in certain geographies including China. Our total revenue is also impacted by the relative geographical and country mix of our revenue over time. Our dependency on international revenue makes us much more exposed to global economic and political trends, which can negatively impact our financial results even if our results in the United States are strong for a particular period.

Current wording

International net revenue represented 64% of our net revenue for both fiscal 2025 and 2024. Our international revenue, some of which comes from emerging economies, is subject to economic and political conditions in foreign markets, including those resulting from economic and political conditions in the United States. Our total revenue is also impacted by the relative geographical and country mix of our revenue over time. Our dependency on international revenue makes us much more exposed to global economic and political trends, which can negatively impact our financial results even if our results in the United States are strong for a particular period.

Previous wording

•tariffs, quotas, and other trade barriers and restrictions, including any political or economic responses and counter-responses or otherwise by various global actors to the ongoing wars between the Ukraine and Russia and between Israel and Hamas;

Current wording

•tariffs, quotas, and other trade barriers and restrictions, geopolitical conflicts, and any political or economic responses and counter-responses thereto by various global actors;

Previous wording

•other factors beyond our control, including popular uprisings, terrorism, war (including the ongoing wars between the Ukraine and Russia and between Israel and Hamas, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy), natural disasters, and diseases and pandemics, such as COVID-19.

Current wording

•other factors beyond our control, including popular uprisings, terrorism, war (including any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy), natural disasters, and diseases and pandemics.

Previous wording

In addition, in recent years, the United States has instituted or proposed changes to foreign trade policy, including the negotiation or termination of trade agreements, the imposition of tariffs on products imported from certain countries, economic sanctions on individuals, corporations, or countries, and other government regulations affecting trade between the United States and other countries in which we do business. More recently, the United States and other global actors have imposed sanctions as a result of the war against Ukraine launched by Russia, and the ongoing war between Israel and Hamas. New or increased tariffs and other changes in U.S. trade policy, including new sanctions, could trigger retaliatory actions by affected countries, including Russia. In addition, certain foreign governments, including the Chinese government, have instituted or considered imposing trade sanctions on certain U.S.-manufactured goods. The escalation of protectionist or retaliatory trade measures in either the United States or any other countries in which we do business, such as announcing sanctions, a change in tariff structures, export compliance, or other trade policies, may increase the cost of, or otherwise interfere with, the conduct of our business, and could have a material adverse effect on our operations and business outlook.

Current wording

In addition, in recent years, the United States has instituted or proposed changes to foreign trade policy, including the negotiation or termination of trade agreements, the imposition of tariffs on products imported from certain countries, economic sanctions on individuals, corporations, or countries, and other government regulations affecting trade between the United States and other countries in which we do business. For example, the United States and other global actors have imposed sanctions as a result of the war against Ukraine launched by Russia and the ongoing war between Israel and Hamas. Additionally, recent executive actions and executive branch policies in the United States, such as those communicated in a February 2025 memorandum regarding a change in U.S. policy with respect to the negotiation and imposition of digital services taxes and regulations by other countries, suggest a broader purview for changes in U.S. trade policy as a component of U.S. foreign policy. New or increased tariffs and other changes in U.S. trade policy, including new sanctions, could trigger retaliatory actions by affected countries, including Russia. In addition, certain foreign governments, including the Chinese government, have instituted, considered, or are considering imposing tariffs and other trade sanctions on certain U.S.-manufactured goods. The escalation of protectionist or retaliatory trade measures in either the United States or any other countries in which we do business, such as announcing sanctions, a change in tariff structures, export compliance, or other trade policies, may increase the cost of, or otherwise interfere with, the conduct of our business, and could have a material adverse effect on our operations and business outlook.

Previous wording

Our quarterly financial results, key metrics, and other operating metrics have fluctuated in the past and will continue to do so in the future. These fluctuations could cause our stock price to change significantly or experience declines. We also provide investors with quarterly and annual financial forward-looking guidance that could prove to be inaccurate as a result of these fluctuations. In addition to the other risks described in these risk factors, some of the factors that could cause our financial results, key metrics, and other operating metrics to fluctuate include:

Current wording

Our quarterly financial results, key metrics, and other operating metrics have fluctuated in the past and will continue to do so in the future. These fluctuations have in the past caused and could in the future cause our stock price to change significantly or experience declines. We also provide investors with quarterly and annual financial forward-looking guidance that could prove to be inaccurate as a result of these fluctuations. In addition to the other risks described in these risk factors, some of the factors that have in the past caused and could in the future cause our financial results, key metrics, and other operating metrics to fluctuate include:

Previous wording

•shift to named-user plans and annual billing of multi-year contracts, which impacted the timing of our billings and cash collections in fiscal year 2024 and which is expected to continue into fiscal year 2025;

Current wording

•shift to named-user plans and annual billing of multi-year contracts, which impacted the timing of our billings and cash collections in fiscal year 2024 and 2025 and which is expected to continue into fiscal year 2026;

Previous wording

•weak or negative growth in one or more of the industries we serve, including AEC, manufacturing, and digital media and entertainment markets;

Current wording

•weak or negative growth in one or more of the industries we serve, including AECO, manufacturing, and digital media and entertainment markets;

Previous wording

•catastrophic events, natural disasters, or public health events, such as pandemics and epidemics, including COVID-19;

Current wording

•catastrophic events, natural disasters, or public health events, such as pandemics and epidemics;

Previous wording

We have also experienced fluctuations in financial results in interim periods in certain geographic regions due to seasonality or regional economic or political conditions. In particular, our financial results, key metrics, or other operating metrics in Europe during our third quarter are usually affected by a slower summer period, and our APAC operations typically experience seasonal slowing in our fourth quarter. War, including the ongoing wars between the Ukraine and Russia and between Israel and Hamas, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy, could also affect our business.

Current wording

We have also experienced fluctuations in financial results in interim periods in certain geographic regions due to seasonality or regional economic or political conditions. In particular, our financial results, key metrics, or other operating metrics in Europe during our third quarter are usually affected by a slower summer period, and our APAC operations typically experience seasonal slowing in our fourth quarter. War, geopolitical conflicts, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy, could also affect our business.

Previous wording

We derive a substantial portion of our net revenue from sales of subscriptions of a limited number of our offerings, including AutoCAD software, solutions based on AutoCAD, which include our collections that serve specific markets, and products that are interoperable with AutoCAD. Any factor adversely affecting sales of these subscriptions, including the product release cycle, market acceptance, product competition, performance and reliability, reputation, price competition, economic and market conditions, and the availability of third-party applications, would likely harm our financial results.

Current wording

We derive a substantial portion of our net revenue from sales of subscriptions of a limited number of our offerings, including AutoCAD software, solutions based on AutoCAD, which include our collections that serve specific markets, and products that are interoperable with AutoCAD. Any factor adversely affecting sales of these subscriptions, including the product release cycle, market acceptance, product competition, performance and reliability, reputation, price competition, economic and market conditions, and the availability of third-party applications, would likely harm our financial results. During fiscal 2025 and 2024, combined revenue from our AutoCAD and AutoCAD LT family products, not including collections having AutoCAD or AutoCAD LT as a component, represented 26% and 27% of our total net revenue, respectively.

Previous wording

The market price for our common stock has experienced significant fluctuations and may continue to fluctuate significantly. The market price for our common stock may be affected by a number of factors, including the other risks described in these risk factors and the following:

Current wording

The market price for our common stock has experienced significant fluctuations and may continue to fluctuate significantly. The market price for our common stock has in the past been, and in the future may be, affected by a number of factors, including the other risks described in these risk factors and the following:

Previous wording

We are increasingly building AI into many of our offerings. We expect to rely on AI technologies to help drive future growth in our business, but there can be no assurance that we will realize the desired or anticipated benefits from AI or at all. We may also fail to properly implement or market our AI offerings. As with many innovations, AI presents risks and challenges that could affect its adoption, and therefore our business. Our competitors or other third parties may incorporate AI into their products more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations. Additionally, our offerings based on AI may expose us to additional lawsuits and regulatory investigations and subject us to legal liability as well as brand and reputational harm. For example, if the content, analyses, or recommendations that AI applications assist in producing are or are alleged to be deficient, inaccurate, or biased, our business, financial condition, and results of operations may be adversely affected. The use of AI applications has resulted in, and may in the future result in, cybersecurity incidents that implicate the personal data of end users of such applications. Any such cybersecurity incidents related to our use of AI applications could adversely affect our reputation and results of operations.

Current wording

We are increasingly building AI into many of our offerings. We expect to rely on AI technologies to help drive future growth in our business, but there can be no assurance that we will realize the desired or anticipated benefits from AI or at all. We may also fail to properly implement or market our AI offerings. As with many innovations, AI presents risks and challenges that could affect its adoption, and therefore our business. Our competitors or other third parties may incorporate AI into their products more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations. Additionally, our offerings based on AI may expose us to additional lawsuits and regulatory investigations and other proceedings and subject us to legal liability as well as brand and reputational harm. For example, if the content, analyses, or recommendations that AI applications assist in producing are or are alleged to be deficient, inaccurate, or biased, our business, financial condition, and results of operations may be adversely affected. The use of AI applications has resulted in, and may in the future result in, cybersecurity incidents that implicate the personal data of end users of such applications. Any such cybersecurity incidents related to our use of AI applications could adversely affect our reputation and results of operations.

Previous wording

Social and ethical issues relating to the use of new and evolving technologies such as AI in our offerings, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. AI presents emerging ethical issues and if we enable or offer solutions that draw controversy due to their perceived or actual impact on society, we may experience brand or reputational harm, competitive harm, or legal liability. Potential government regulation in the space of AI ethics may also increase the burden and cost of research and development in this area, subjecting us to brand or reputational harm, competitive harm, or legal liability. Failure to address AI ethics issues by us or others in our industry could undermine public confidence in AI and slow adoption of AI in our products and services.

Current wording

Social and ethical issues relating to the use of new and evolving technologies such as AI in our offerings, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. AI presents emerging ethical issues and if we enable or offer solutions that draw controversy due to their perceived or actual impact on society, we may experience brand or reputational harm, competitive harm, or legal liability. Government regulation addressing AI ethics or other aspects of the development or use of AI may also increase the burden and cost of research and development in this area, subjecting us to brand or reputational harm, competitive harm, or legal liability. For example, the European Union’s Artificial Intelligence Act (the “AI Act”), which achieved approval by the European Council on February 2, 2024, and the European Parliament on March 13, 2024, will impose obligations on providers and users of artificial intelligence technologies. Some U.S. states have proposed, and in certain cases enacted, laws addressing aspects of the development and use of AI. Failure to address AI ethical and regulatory issues by us or others in our industry could undermine public confidence in

Previous wording

The Audit Committee internal investigation has been time-consuming and expensive, has resulted in the filing of a class action lawsuit, and may result in additional expense and/or litigation.

Current wording

The Audit Committee internal investigation has been time-consuming and expensive, has resulted in the filing of lawsuits, and may result in additional expense and/or litigation.

Previous wording

We have incurred significant expenses, including audit, legal, consulting and other professional fees, in connection with the investigation, and we could be forced to incur additional time and expense as a result of the investigation. The incurrence of significant additional expense, or the requirement that management devote significant time that could reduce the time available to execute on our business strategies, could have an adverse effect on our business, results of operations and financial condition.

Current wording

We have incurred significant expenses, including audit, legal, consulting and other professional fees, in connection with the investigation, and we could be forced to incur significant additional time and expense as a result of the investigation. The incurrence of significant additional expense, or the requirement that management devote significant time that could reduce the time available to execute on our business strategies, could have an adverse effect on our business, results of operations and financial condition.

Previous wording

Autodesk voluntarily contacted the Securities and Exchange Commission (the “SEC”) to advise it that an internal investigation was ongoing. The Company intends to cooperate with the SEC’s investigation. Furthermore, if the SEC commences legal action, we could be required to pay significant penalties and become subject to injunctions, a cease and desist order and other equitable remedies. The completion of the Audit Committee investigation and filing of any delinquent periodic reports will not automatically resolve the SEC investigation. In addition, the United States Attorney’s Office for the Northern District of California contacted us regarding the Audit Committee investigation. We cannot guarantee that we will not receive inquiries from other regulatory authorities regarding the investigation, or that we will not be subject to future claims, investigations or proceedings. Any future inquiries from the SEC or other regulatory authorities, or future claims or proceedings or any related regulatory investigation will, regardless of the outcome, likely consume a significant amount of our internal resources and result in additional legal and accounting costs. We can provide no assurances as to the outcome of any governmental investigation.

Current wording

Autodesk voluntarily contacted the Securities and Exchange Commission (the “SEC”) to advise it that an internal investigation was ongoing. Autodesk is cooperating with the SEC’s investigation. Furthermore, if the SEC commences legal action, we could be required to pay significant penalties and become subject to injunctions, a cease and desist order and other equitable remedies. In addition, the United States Attorney’s Office for the Northern District of California contacted us regarding the Audit Committee investigation. We cannot guarantee that we will not receive inquiries from other regulatory authorities regarding the investigation, or that we will not be subject to future claims, investigations or proceedings. Any future inquiries from the SEC or other regulatory authorities, or future claims or proceedings or any related regulatory investigation will, regardless of the outcome, likely consume a significant amount of our internal resources and result in additional legal and accounting costs. We can provide no assurances as to the outcome of any governmental investigation.

Previous wording

In addition, we and certain of our officers and directors have been named in a purported shareholder class action arising out of our announcement of the investigation. For additional discussion, see Item 3. Legal Proceedings and Note 11 to our Consolidated Financial Statements. The pending litigation, and any future litigation, investigation or other actions that may be filed or initiated against us or our officers or directors, may be time consuming and expensive. We cannot predict what losses we may incur in these litigation matters, and contingencies related to our obligations under the federal and state securities laws, or in other legal proceedings or governmental investigations or proceedings related to these matters.

Current wording

In addition, we and certain of our officers and directors have been named in purported shareholder litigation arising out of our announcement of the investigation. For additional discussion, see Part I, Item 3. Legal Proceedings and Note 11 to our Consolidated Financial Statements. The pending litigation, and any future litigation, investigation or other actions that may be filed or initiated against us or our officers or directors, may be time consuming and expensive. We cannot predict what losses we may incur in these litigation matters, and contingencies related to our obligations under the federal and state securities laws, or in other legal proceedings or governmental investigations or proceedings related to these matters.

Previous wording

As we digitize Autodesk and use cloud- and web-based technologies to leverage customer data to deliver the total customer experience, we are exposed to increased security risks and the potential for unauthorized access to, or improper use, disclosure, or other processing of, our and our customers’ information. Like other software offerings and systems, ours are vulnerable to security breaches and incidents, including those from acquired companies. Also, our ability to mitigate the risk of security breaches and incidents may be impacted by our limited control over our customers or third-party technology providers and vendors, or the processing of data by third-party technology providers and vendors, which may not allow us to maintain the integrity or security of such transmissions or processing. We devote significant resources in an effort to maintain the security and integrity of our systems, offerings, services, and applications (online, mobile, and desktop). Despite these efforts, we may not prevent security breaches or incidents, and we may face delays or other difficulties in identifying, responding to, or remediating security breaches or incidents.

Current wording

As we digitize Autodesk and use cloud- and web-based technologies to leverage customer data to deliver the total customer experience, we are exposed to increased security risks and the potential for unauthorized access to, or improper use, disclosure, or other processing of, our and our customers’ information. Like other software offerings and systems, ours are vulnerable to security breaches and incidents, including those from acquired companies. Also, our ability to mitigate the risk of security breaches and incidents may be impacted by our limited control over our customers or third-party technology providers and vendors, or the processing of data by third-party technology providers and vendors, which may not allow us to maintain the integrity or security of such transmissions or processing. We devote significant resources in an effort to maintain the security and integrity of our systems, offerings, services, and applications (online, mobile, and desktop). Despite these efforts, we have been subject to security breaches and incidents, and we face the risks of them occurring in the future, as well as the risks of delays and other difficulties in identifying, responding to, or remediating security breaches or incidents.

Previous wording

Hackers regularly have targeted our systems, offerings, services, and applications, and we expect them to do so in the future. To date, such identified security events have not been material or significant to us or our customers, including to our reputation or business operations, or had a material financial impact, but there can be no assurance that future cyberattacks will not be material or significant. Security breaches or incidents could disrupt the proper functioning of our systems, solutions, offerings, applications, or services; cause errors in the output of our customers’ work; allow unauthorized access to or unauthorized use, disclosure, modification, loss, unavailability, or destruction of, sensitive data or intellectual property, including proprietary or confidential information of ours or our customers; or cause other destructive or disruptive outcomes. The risk of a security incident, particularly through cyber-attack or cyber intrusion, including by computer hackers, foreign governments, and cyber terrorists, has increased as the number, intensity, and sophistication of attempted attacks and intrusions from around the world have increased. These threats include, among others, identity theft, unauthorized access, DNS attacks, wireless network attacks, viruses and worms, malware, bugs, vulnerabilities, advanced persistent threats, application-centric attacks, peer-to-peer attacks, social engineering, phishing, credential stuffing, malicious file uploads, backdoor trojans, supply chain attacks, ransomware attacks, and distributed denial of service attacks. In addition, third parties may attempt to fraudulently induce our employees, vendors, partners, customers, or users to disclose information to gain access to our data or our customers’ or users’ data and there is the risk of employee, contractor, or vendor error or malfeasance. These existing risks are compounded given the shift in recent years to work-from-home arrangements for a large population of employees and contractors, as well as employees and contractors of our third-party technology providers and vendors, and the risks could also be elevated in connection with the ongoing war between Ukraine and Russia as we and our third-party technology providers and vendors are vulnerable to a heightened risk of cyberattacks from or affiliated with nation-state actors, including retaliatory attacks from Russian actors against U.S.-based companies. Despite our significant efforts to create security barriers to such threats, we cannot entirely mitigate these risks, and there is no guarantee that inadvertent or unauthorized use or disclosure of such information will not occur or that third parties will not gain unauthorized access to such information.

Current wording

Hackers regularly have targeted our systems, offerings, services, and applications, and we expect them to do so in the future. To date, we have not considered any such identified security events as material to us, including to our reputation or business operations, or had a material financial impact, but there can be no assurance that future cyberattacks will not be material or otherwise significant. Security breaches or incidents disrupt the proper functioning of our systems, solutions, offerings, applications, or services; cause errors in the output of our customers’ work; allow unauthorized access to or unauthorized use, disclosure, modification, loss, unavailability, or destruction of, sensitive data or intellectual property, including proprietary or confidential information of ours or our customers; or cause other destructive or disruptive outcomes. The risk of a security incident, particularly through cyber-attack or cyber intrusion, including by computer hackers, foreign governments, and cyber terrorists, has increased as the number, intensity, and sophistication of attempted attacks and intrusions from around the world have increased. These threats include, among others, identity theft, unauthorized access, DNS attacks, wireless network attacks, viruses and worms, malware, bugs, vulnerabilities, advanced persistent threats, application-centric attacks, peer-to-peer attacks, social engineering, phishing, credential stuffing, malicious file uploads, backdoor trojans, supply chain attacks, ransomware attacks, and distributed denial of service attacks. In addition, third parties may attempt to fraudulently induce our employees, vendors, partners, customers, or users to disclose information to gain access to our data or our customers’ or users’ data and there is the risk of employee, contractor, or vendor error or malfeasance. These existing risks are compounded given the shift in recent years to work-from-home arrangements for a large population of employees and contractors, as well as employees and contractors of our third-party technology providers and vendors, and the risks could also be elevated in connection with the ongoing wars between Ukraine and Russia and between Israel and Hamas as we and our third-party technology providers and vendors are vulnerable to a heightened risk of cyberattacks from or affiliated with nation-state actors, including retaliatory attacks from Russian actors against U.S.-based companies. Additionally, these threats continue to evolve in sophistication and volume and are difficult to detect and predict due to advances in electronic warfare techniques, advances in cryptography and other technologies, including AI and machine learning. Our use of AI may also increase our risks of being subject to a security breach or incident. Despite our significant efforts to create security barriers to such threats, we cannot entirely mitigate these risks, and there is no guarantee that inadvertent or unauthorized use or disc…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Many governments have enacted laws requiring companies to provide notice of security breaches or incidents involving certain types of personal data and personal information. We are also contractually required to notify certain customers of certain security breaches or incidents. Any security breach or incident suffered, or believed to have been suffered, by us or by our technology providers or vendors could result in harm to our reputation and competitive position, difficulty attracting new customers, retaining existing customers, and securing payment from customers, our expenditure of significant capital and other resources to evaluate and alleviate the security incident and to try to prevent further or additional incidents, and regulatory inquiries, investigations, and other proceedings, private claims, demands, and lawsuits, and other potential liability. We could incur significant costs and liabilities, including due to litigation, indemnity obligations, damages for contract breach, penalties for violation of applicable laws or regulations, and costs for remediation and other incentives offered to customers or other business partners in an effort to maintain business relationships after a security breach or incident, and our financial performance could be negatively impacted.

Current wording

Many governments have enacted laws requiring companies to provide notice of security breaches or incidents involving certain types of personal data and personal information. We are also contractually required to notify certain customers of certain security breaches or incidents. Any security breach or incident suffered, or believed to have been suffered, by us or by our technology providers or vendors could result in harm to our reputation and competitive position, difficulty attracting new customers (including government customers), retaining existing customers, and securing payment from customers, our expenditure of significant capital and other resources to evaluate and alleviate the security incident and to try to prevent further or additional incidents, and regulatory inquiries, investigations, and other proceedings, private claims, demands, lawsuits, potential liability, and the potential loss of our authorization under the Federal Risk and Authorization Management Program (“FedRAMP”). We could incur significant costs and liabilities, including due to litigation, indemnity obligations, damages for contract breach, penalties for violation of applicable laws or regulations, and costs for remediation and other incentives offered to customers or other business partners in an effort to maintain business relationships after a security breach or incident, and our financial performance could be negatively impacted.

Previous wording

We sell our software products both directly to end users and through a network of distributors and resellers. For fiscal 2024 and 2023, approximately 63% and 65%, respectively, of our revenue was derived from indirect channel sales through distributors and resellers, and we expect that the majority of our revenue will continue to be derived from indirect channel sales in the near future. Our ability to effectively distribute our solutions depends in part upon the financial and business condition of our distributor and reseller network. Computer software distributors and resellers typically are not highly capitalized, and have previously experienced difficulties during times of economic contraction as well as during the past several years. We have processes to ensure that we assess the creditworthiness of distributors and resellers prior to our sales to them. In the past we have taken steps to support them, and may take additional steps in the future, such as extending credit terms and adjusting our incentives. These steps, if taken, could harm our financial results. If our distributors and resellers were to become insolvent, they would not be able to maintain their business and sales or provide customer support services, which would negatively impact our business and revenue.

Current wording

We sell our software products both directly to end users and through a network of distributors and resellers. For fiscal 2025 and 2024, approximately 58% and 63%, respectively, of our revenue was derived from indirect channel sales primarily through distributors and resellers. Our ability to effectively distribute our solutions depends in part upon the financial and business condition of our distributor and reseller network. Computer software distributors and resellers typically are not highly capitalized, and have previously experienced difficulties during times of economic contraction as well as during the past several years. We have processes to ensure that we assess the creditworthiness of distributors and resellers prior to our sales to them. In the past we have taken steps to support them, and may take additional steps in the future, such as extending credit terms and adjusting our incentives. These steps, if taken, could harm our financial results. If our distributors and resellers were to become insolvent, they would not be able to maintain their business and sales or provide customer support services, which would negatively impact our business and revenue.

Previous wording

We rely significantly upon major distributors and resellers in both the U.S. and international regions. Of our distributors, TD Synnex accounted for 39% and 37% of our total net revenue for fiscal 2024 and 2023, respectively, and Ingram Micro accounted for 7% and 9% of our total net revenue for fiscal 2024 and 2023, respectively. During October 2022, we entered into a transition agreements with each of TD Synnex and Ingram Micro to provide transition distribution activities for a one-to-two-year period, with potential extensions. In connection with such transition agreements, we intend to increase our selling efforts with value-added resellers and agents. During the transition period, we believe the resellers and end users who currently purchase our products through TD Synnex and Ingram Micro will be able to continue to do so, and following the transition period, we believe such end users will be able to continue to purchase our products from certain value-added resellers or directly from Autodesk, in each case under substantially the same terms and without substantial disruption to our revenue. However, if during the transition period, TD Synnex or Ingram Micro were to experience a significant business disruption or if our relationship with either were to significantly deteriorate, it is possible that our ability to sell to end users would, at least temporarily, be negatively impacted. Also, if any of our assumptions about our end users, value added resellers, distributors, or agents or our direct selling capabilities proves incorrect, these changes could harm our business. This could, in turn, negatively impact our financial results.

Current wording

We rely significantly upon major distributors and resellers in both the U.S. and international regions. Of our distributors, TD Synnex accounted for 33% and 39% of our total net revenue for fiscal 2025 and 2024, respectively, and Ingram Micro, Inc. (“Ingram Micro”) accounted for 5% and 7% of our total net revenue for fiscal 2025 and 2024, respectively. During October 2022, we entered into a transition agreements with each of TD Synnex and Ingram Micro to provide transition distribution activities for a one-to-two-year period, with potential extensions. In connection with such transition agreements, we intend to increase our selling efforts with resellers and agents. During the transition period, we believe the resellers and end users who currently purchase our products through TD Synnex and Ingram Micro will be able to continue to do so, and following the transition period, we believe such end users will be able to continue to purchase our products from certain resellers or directly from Autodesk, in each case under substantially the same terms and without substantial disruption to our revenue. However, if during the transition period, TD Synnex or Ingram Micro were to experience a significant business disruption or if our relationship with either were to significantly deteriorate, it is possible that our ability to sell to end users would, at least temporarily, be negatively impacted. Also, if any of our assumptions about our end users, resellers, distributors, or agents or our direct selling capabilities proves incorrect, these changes could harm our business. This could, in turn, negatively impact our financial results.

Previous wording

Our success and ability to invest and grow depend largely on our ability to attract and retain highly skilled technical, professional, managerial, sales, and marketing personnel. Historically, competition for these key personnel has been intense. The loss of services of any of our key personnel, including key personnel joining our company through acquisitions, inability to retain and attract qualified employees in the future, or delays in hiring required personnel, particularly engineering and sales personnel, could make it difficult to meet key objectives, such as timely and effective product introductions and financial goals.

Current wording

Our success and ability to invest and grow depend largely on our ability to attract and retain highly skilled technical, professional, managerial, sales, and marketing personnel. Historically, competition for these key personnel has been intense. The loss of services of any of our key personnel, including key personnel joining our company through acquisitions, inability to retain and attract qualified employees in the future, or delays in hiring required personnel, particularly engineering and sales personnel, including sales leadership personnel, could make it difficult to meet key objectives, such as timely and effective product introductions and financial goals.

Previous wording

In addition, there is continued instability of international personal data transfer legal mechanisms that are complex, uncertain, and subject to active litigation and enforcement actions in a number of jurisdictions around the world. For example, on June 4, 2021, the European Commission published a new set of modular standard contractual clause (“SCCs”), providing for an 18-month implementation period, which became effective on June 29, 2021, and imposes on companies obligations relating to personal data transfers, including the obligation to conduct a transfer impact assessment and, depending on a party’s role in the transfer, to implement additional security measures and to update internal privacy practices. We may, in addition to other impacts, be required to expend significant time and resources to update our contractual arrangements and to comply with new obligations, and we face exposure to regulatory actions, substantial fines and injunctions in connection with transfers of personal data from the EU.

Current wording

In addition, there is continued instability of international personal data transfer legal mechanisms that are complex, uncertain, and subject to active litigation and enforcement actions in a number of jurisdictions around the world. For example, on June 4, 2021, the European Commission published a new set of modular standard contractual clause (“SCCs”), which became effective on June 29, 2021. The SCCs impose on companies obligations relating to personal data transfers, including the obligation to conduct a transfer impact assessment and, depending on a party’s role in the transfer, to implement additional security measures and to update internal privacy practices. We may, in addition to other impacts, be required to expend significant time and resources to update our contractual arrangements and to comply with new obligations, and we face exposure to regulatory actions, substantial fines and injunctions in connection with transfers of personal data from the EU or other regions.

Previous wording

In addition, the United Kingdom’s (“UK”) exit from the EU, and ongoing developments in the UK, have created uncertainty with regard to data protection regulation in the UK. Data processing in the UK is now governed by the UK General Data Protection Regulation and supplemented by other domestic data protection laws, such as the UK Data Protection Act 2018, which authorizes fines of up to £17.5 million or 4% of annual global revenue, whichever is higher. We are also exposed to potentially divergent enforcement actions for certain violations. Furthermore, the new SCCs apply only to the transfer of personal data outside the EU and not the UK. Although the European Commission adopted an adequacy decision for the UK on June 28, 2021, allowing the continued flow of personal data from the EU to the UK, this decision will be regularly reviewed going forward and may be revoked if the UK diverges from its current adequate data protection laws following its exit from the EU. On February 2, 2022, the UK’s Information Commissioner’s Office issued new standard contractual clauses to support personal data transfers out of the UK (“UK SCCs”), which became effective March 21, 2022. We may, in addition to other impacts, experience additional costs associated with increased compliance burdens and be required to engage in new contract negotiations with third parties that aid in processing personal data on our behalf or localize certain personal data. On March 25, 2022, the United States and EU announced an “agreement in principle” to replace the EU-U.S. Privacy Shield transfer framework with the Trans-Atlantic Data Privacy Framework (“EU-U.S. DPF”). On July 10, 2023, the European Commission adopted an adequacy decision in relation to the EU-U.S. DPF, allowing the EU-U.S. DPF to be utilized as a means of legitimizing EU-U.S. personal data transfers for participating entities. We are evaluating whether the EU-U.S. DPF will be appropriate for us to utilize. The EU-U.S. DPF may be subject to legal challenges from privacy advocacy groups or others, and the European Commission’s adequacy decision regarding the EU-U.S. DPF provides that the EU-U.S. DPF will be subject to future reviews and may be subject to suspension, amendment, repeal, or limitations to its scope by the European Commission.

Current wording

In addition, the United Kingdom’s (“UK”) exit from the EU, and ongoing developments in the UK, have created uncertainty with regard to data protection regulation in the UK. Personal data processing in the UK is governed by the UK General Data Protection Regulation and supplemented by other domestic data protection laws, such as the UK Data Protection Act 2018, which authorizes fines of up to £17.5 million or 4% of annual global revenue, whichever is higher. We are also exposed to potentially divergent enforcement actions for certain violations. Furthermore, the new SCCs apply only to the transfer of personal data outside the EU and not the UK. Although the European Commission adopted an adequacy decision for the UK on June 28, 2021, allowing the continued flow of personal data from the EU to the UK, this decision will be regularly reviewed going forward and may be revoked if the UK diverges from its current adequate data protection laws following its exit from the EU. On February 2, 2022, the UK’s Information Commissioner’s Office issued new standard contractual clauses to support personal data transfers out of the UK (“UK SCCs”), which became effective March 21, 2022. Following issuance of a U.S. executive order, a new framework, the EU-U.S. Data Privacy Framework (“DPF”) was created. Following an adequacy decision issued by the European Commission on July 10, 2023, the DPF, along with a UK extension to the DPF that allows the transfer of personal data from the UK to the U.S. (the “UK DPF Extension”) and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”), are available for companies to make use of to legitimize personal data transfers to the U.S. from the European Economic Area, Switzerland, and UK. We have certified to the U.S. Department of Commerce that we adhere to the DPF, UK DPF Extension, and Swiss-U.S. DPF. However, the DPF has been subject to a legal challenge, and it, the UK DPF Extension, and the Swiss-U.S. DPF may be subject to legal challenges in the future from privacy advocacy groups or others. Further, the European Commission’s adequacy decision regarding the EU-U.S. DPF provides that the EU-U.S. DPF will be subject to future reviews and may be subject to suspension, amendment, repeal, or limitations to its scope by the European Commission. We may, in addition to other impacts, experience additional costs associated with increased compliance burdens and be required to engage in new contract negotiations with third parties that aid in processing personal data on our behalf or localize certain personal data.

Previous wording

Further, several European data protection authorities recently indicated that the use of Google Analytics by European website operators involves the unlawful transfer of personal data to the United States. As the enforcement landscape further develops, and depending on the impacts of these rulings and other developments with respect to cross-border data transfer, we could suffer additional costs, complaints and/or regulatory investigations or fines, have to stop using certain tools and vendors, and make other operational changes.

Current wording

Further, several European data protection authorities have indicated that the use of Google Analytics by European website operators involves the unlawful transfer of personal data to the United States. As the enforcement landscape further develops, and depending on the impacts of these rulings and other developments with respect to cross-border data transfer, we could suffer additional costs, complaints and/or regulatory investigations or fines, have to stop using certain tools and vendors, and make other operational changes.

Previous wording

Several other countries, including China, Australia, New Zealand, Brazil, and Japan, have also established specific legal requirements for cross-border data transfers. There is also an increasing trend towards data localization policies. For example, in 2021, China introduced localization requirements for certain data. Other countries, such as India, also are considering data localization requirements. If this trend continues, and countries implement more restrictive regulations for cross-border personal data transfers (or do not permit personal data to leave the country of origin), it could affect the manner in which we provide our services, the geographical location or segregation of our relevant systems and operations, and our business, financial condition, and results of operations in those jurisdictions could be impacted.

Current wording

Several other countries, including China, Australia, New Zealand, Brazil, and Japan, have also established specific legal requirements for cross-border data transfers. There is also an increasing trend towards data localization policies. For example, China and India have introduced localization requirements for certain data. Other countries also are considering data localization requirements. If this trend continues, and countries implement more restrictive regulations for cross-border personal data transfers (or do not permit personal data to leave the country of origin), it could affect the manner in which we provide our services, the geographical location or segregation of our relevant systems and operations, and our business, financial condition, and results of operations in those jurisdictions could be impacted.

Previous wording

In addition, the CPRA and many of the other new state laws addressing privacy and information security, including those that have become or will become effective in 2023, provide for additional obligations such as data minimization and storage limitations, granting additional rights to consumers such as correction of personal information and additional opt-out rights. The CPRA also created a new agency to implement and enforce the law. These new state laws have required us to modify our data processing practices and policies and may cause us to make additional modifications, and to incur substantial costs and expenses, in our efforts to comply. Laws in all 50 states, and some of our contracts, require us to provide notice under certain circumstances to customers whose personal information has been disclosed as a result of a data breach. Also, if third parties we work with, such as suppliers, violate applicable data protection laws or regulations, such violations may also put our users’ information at risk and could materially adversely affect our business, financial condition, results of operations, and prospects. Additionally, in addition to government activity, privacy advocacy groups and technology and other industries are considering various new, additional, or different self-regulatory standards that may place, or be asserted to place, additional burdens on us. Evolving legislation and the interplay of federal and state laws may be subject to varying interpretations by courts and government agencies, creating complex compliance issues and have and may cause variation in requirements, increase restrictions and potential legal risk and impact strategies and the availability of previously useful data, potentially exposing us to additional expense, adverse publicity, and liability.

Current wording

In addition, the CPRA and many other new state laws addressing privacy and information security, including those that have become or will become effective in 2025, provide for additional obligations such as data minimization and storage limitations, granting additional rights to consumers such as correction of personal information and additional opt-out rights. The CPRA also created a new agency to implement and enforce the law. These new state laws have required us to modify our data processing practices and policies and may cause us to make additional modifications, and to incur substantial costs and expenses, in our efforts to comply. Laws in all 50 states, and some of our contracts, require us to provide notice under certain circumstances to customers whose personal information has been disclosed as a result of a data breach. Also, if third parties we work with, such as suppliers, violate applicable data protection laws or regulations, such violations may also put our users’ information at risk and could materially adversely affect our business, financial condition, results of operations, and prospects. Additionally, in addition to government activity, privacy advocacy groups and technology and other industries are considering various new, additional, or different self-regulatory standards that may place, or be asserted to place, additional burdens on us. Evolving legislation and the interplay of federal and state laws may be subject to varying interpretations by courts and government agencies, creating complex compliance issues and have and may cause variation in requirements, increase restrictions and potential legal risk and impact strategies and the availability of previously useful data, potentially exposing us to additional expense, adverse publicity, and liability.

Previous wording

Governments, regulators, plaintiffs’ attorneys, privacy advocates have increased their focus on how companies collect, process, use, store, share, and transmit personal data and personal information. Any perception of our practices, products, offerings, or services as a violation of individual privacy or data protection rights may subject us to public criticism, lawsuits, reputational harm, or investigations, claims, demands, or other proceedings by regulators, industry groups or other third parties, all of which could disrupt or adversely impact our business and expose us to increased liability. Moreover, because the interpretation and application of many laws, regulations, and other actual and asserted obligations relating to privacy, data protection, and information security are uncertain, it is possible that these laws, regulations, and obligations may be interpreted and applied in a manner that is inconsistent with our existing data management practices or the features of our products, offerings, and services. We could be required to fundamentally change our business activities and practices or modify our offerings and services, any of which could require significant additional expense and adversely affect our business, including impacting our ability to innovate, delaying our development roadmap and adversely affecting our relationships with customers and our ability to compete. If we are obligated to fundamentally change our business activities and practices or modify our products, offerings, or services, we may be unable to make such changes and modifications in a commercially reasonable manner, or at all, and our ability to develop new products, offerings, and services could be limited.

Current wording

Governments, regulators, plaintiffs’ attorneys, and privacy advocates have increased their focus on how companies collect, use, store, share, transmit, and otherwise process personal data and personal information. Any perception of our practices, products, offerings, or services as a violation of individual privacy or data protection rights may subject us to public criticism, lawsuits, reputational harm, or investigations, claims, demands, or other proceedings by regulators, industry groups or other third parties, all of which could disrupt or adversely impact our business and expose us to fines, penalties, and other liabilities. Moreover, because the interpretation and application of many laws, regulations, and other actual and asserted obligations relating to privacy, data protection, and cybersecurity are uncertain, it is possible that these laws, regulations, and obligations may be interpreted and applied in a manner that is inconsistent with our practices or the features of our products, offerings, and services. We could be required to fundamentally change our business activities and practices or modify our offerings and services, any of which could require significant additional expense and adversely affect our business, including impacting our ability to innovate, delaying our development roadmap and adversely affecting our relationships with customers and our ability to compete. If we are obligated to fundamentally change our business activities and practices or modify our products, offerings, or services, we may be unable to make such changes and modifications in a commercially reasonable manner, or at all, and our ability to develop new products, offerings, and services could be limited.

Previous wording

Our offerings are subject to export controls and economic sanctions laws and regulations that prohibit the delivery of certain solutions and services without the required export authorizations or export to locations, governments, and persons targeted by applicable sanctions. While we have processes to prevent our offerings from being exported in violation of these laws, including obtaining authorizations as appropriate and screening against U.S. government and international lists of restricted and prohibited persons, we cannot guarantee that these processes will prevent all violations of export control and sanctions laws.

Current wording

Our offerings are subject to export controls and economic sanctions laws and regulations that prohibit the delivery of certain solutions and services without the required export authorizations or the export to locations, governments, and persons targeted by applicable sanctions. While we have processes to prevent our offerings from being exported in violation of these laws, including obtaining authorizations as appropriate and screening against U.S. government and international lists of restricted and prohibited persons, we cannot guarantee that these processes will prevent all violations of export controls and sanctions laws and regulations.

Previous wording

If our channel partners fail to obtain appropriate import, export, or re-export licenses or permits, we may also be adversely affected, through reputational harm as well as other negative consequences including government investigations and penalties. We presently incorporate export control and sanctions compliance requirements in our channel partner agreements. Complying with export control and sanctions regulations for a particular sale may be time-consuming and may result in the delay or loss of sales opportunities. Violations of applicable sanctions or export control laws can result in fines or penalties.

Current wording

If our channel partners fail to obtain appropriate import, export, or re-export licenses or permits, we may also be adversely affected, through reputational harm as well as other negative consequences including government investigations and penalties. We presently incorporate export controls and sanctions compliance requirements in our channel partner agreements. Complying with export controls and sanctions laws and regulations for a particular sale may be time-consuming and may result in the delay or loss of sales opportunities. Violations of applicable sanctions or export control laws or regulations can result in fines or penalties.

Previous wording

We provide products and services, directly and indirectly, to a variety of government entities. Risks associated with licensing and selling products and services to government entities include extended sales and collection cycles, varying governmental budgeting processes, and adherence to complex procurement regulations and other government-specific contractual requirements. We may be subject to audits and investigations relating to our government contracts and any violations could result in civil and criminal penalties and administrative sanctions, including termination of contracts, payment of fines, and suspension or debarment from future government business, as well as harm to our reputation and financial results.

Current wording

We may be subject to audits and investigations relating to our government contracts and any violations could result in civil and criminal penalties and administrative sanctions, including termination of contracts, payment of fines, and suspension or debarment from future government business, as well as harm to our reputation and financial results.

Previous wording

In addition, global events, including the sudden and unexpected effects of the COVID-19 pandemic as well as geopolitical and economic developments, may contribute to volatility in foreign exchange markets, which we may not be able to effectively manage, and our financial results could be adversely impacted. Additionally, countries in which we operate may be classified as highly inflationary economies, requiring special accounting and financial reporting treatment for such operations, or such countries’ currencies may be devalued, or both, which may adversely impact our business operations and financial results.

Current wording

In addition, global events, including geopolitical and economic developments, may contribute to volatility in foreign exchange markets, which we may not be able to effectively manage, and our financial results could be adversely impacted. Additionally, countries in which we operate may be classified as highly inflationary economies, requiring special accounting and financial reporting treatment for such operations, or such countries’ currencies may be devalued, or both, which may adversely impact our business operations and financial results.

Previous wording

We are a U.S.-based multinational company subject to tax in multiple U.S. and foreign tax jurisdictions. Our effective tax rate is primarily based on our geographic mix of earnings; statutory rates; stock-based compensation; intercompany arrangements, including the manner we develop, value, and license our intellectual property; and enacted tax rules. Significant judgment is required in determining our effective tax rate and in evaluating our tax positions on a worldwide basis. While we believe our tax positions, including intercompany transfer pricing policies, are consistent with the tax laws in the jurisdictions in which we conduct our business, it is possible that these positions may be challenged by tax authorities and may have a significant impact on our effective tax rate and cash taxes.

Current wording

We are a U.S.-based multinational company subject to tax in multiple U.S. and foreign tax jurisdictions. Our effective tax rate is primarily based on our geographic mix of earnings; statutory rates; stock-based compensation; intercompany arrangements, including the manner we develop, value, and license our intellectual property; and enacted tax rules. Significant judgment is required in determining our effective tax rate and in evaluating our tax positions on a worldwide basis. While we believe our tax positions, including intercompany transfer pricing policies, are consistent with the tax laws in the jurisdictions in which we conduct our business, it is possible that these positions may be challenged by tax authorities and, if our positions are not sustained, may have a significant impact on our effective tax rate and cash taxes.

Previous wording

Tax laws in the United States and in foreign tax jurisdictions are dynamic and subject to change as new laws are passed and new interpretations of the law are issued or applied. For example, the U.S. government enacted significant tax law changes in December 2017, the Tax Act, which impacted our tax obligations and effective tax rate beginning in our fiscal 2018 tax year, and significant tax legislation was included in the March 2020 CARES Act and subsequent Consolidated Appropriations Act in December 2020. Due to the complexity and varying interpretations of the Tax Act and the CARES Act, the U.S. Department of Treasury and other standard-setting bodies have been issuing and will continue to issue regulations and interpretative guidance that could significantly impact how we will apply the law and the ultimate effect on our results of operations from both the Tax Act and the CARES Act, including for our prior tax years. In addition, increases in corporate tax rates, could increase our effective tax rate, cash taxes and have an adverse effect on our results from operations.

Current wording

Tax laws in the United States and in foreign tax jurisdictions are dynamic and subject to change as new laws are passed and new interpretations of the law are issued or applied. Due to the complexity and varying interpretations of new and existing tax laws, the U.S. Department of Treasury and other standard-setting bodies have issued and will continue to issue regulations and interpretative guidance that could significantly impact how we will apply the law and the ultimate effect on our results of operations, including for our prior tax years. In addition, increases in corporate tax rates, could increase our effective tax rate, cash taxes and have an adverse effect on our results from operations.

Previous wording

Increasingly, tax authorities are reviewing existing corporate tax regulatory and legal regimes. Many countries are actively considering or implementing new taxing regimes and changes to existing tax laws. This could include U.S. and foreign tax law developments related to changes to long-standing tax principles arising from proposals made by the Organization for Economic Co-operation and Development that seek to allocate greater taxing rights to countries where customers are located and establish a global minimum tax rate of 15%. If U.S. or foreign tax authorities change applicable tax laws or successfully challenge how or where our profits are currently recognized, our overall taxes could increase, and our business, financial condition, or results of operations may be adversely impacted.

Current wording

Increasingly, tax authorities are reviewing existing corporate tax regulatory and legal regimes. Many countries are actively considering or implementing new taxing regimes and changes to existing tax laws. This could include U.S. and foreign tax law developments related to changes to long-standing tax principles arising from proposals made by the Organisation for Economic Co-operation and Development that seek to allocate greater taxing rights to countries where customers are located and establish a global minimum tax rate of 15%. If U.S. or foreign tax authorities change applicable tax laws or successfully challenge how or where our profits are currently recognized, our overall taxes could increase, and our business, financial condition, or results of operations may be adversely impacted.

Previous wording

Our business is highly automated and relies extensively on the availability of our network and data center infrastructure, our internal technology systems, and our websites. We also rely on hosted computer services from third parties for services that we provide to our customers and computer operations for our internal use. The failure of our systems or hosted computer services due to a catastrophic event, such as an earthquake, fire, flood, tsunami, weather event, telecommunications failure, power failure, cyber attack, terrorism or war (including the ongoing wars between the Ukraine and Russia and between Israel and Hamas, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy), or business interruption from epidemics or pandemics, or the fear of such events, could adversely impact our business, financial results, and financial condition. For example, our corporate headquarters and executive offices are located near major seismic faults in the San Francisco Bay Area and face annual periods of wildfire danger, which increase the probability of power outages and may impact employees’ abilities to commute to work or to work from home. We have developed disaster recovery plans and maintain backup systems in order to reduce the potential impact of a catastrophic event; however, there can be no assurance that these plans and systems would enable us to return to normal business operations. In addition, any such event could negatively impact a country or region in which we sell our products. This could in turn decrease that country’s or region’s demand for our products, negatively impacting our financial results.

Current wording

Our business is highly automated and relies extensively on the availability of our network and data center infrastructure, our internal technology systems, and our websites. We also rely on hosted computer services from third parties for services that we provide to our customers and computer operations for our internal use. The failure of our systems or hosted computer services due to a catastrophic event, such as an earthquake, fire, flood, tsunami, weather event, other climate-related events (such as drought, water security, heat waves, cold waves, and poor air quality), telecommunications failure, power failure, cyber-attack, terrorism or war (including the ongoing wars between Ukraine and Russia and between Israel and Hamas, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy), or business interruption from epidemics or pandemics, or the fear of such events, could adversely impact our business, financial results, and financial condition. For example, our corporate headquarters and executive offices are located near major seismic faults in the San Francisco Bay Area and face annual periods of wildfire danger, which increase the probability of power outages and may impact employees’ abilities to commute to work or to work from home. We have developed disaster recovery plans and maintain backup systems in order to reduce the potential impact of a catastrophic event; however, there can be no assurance that these plans and systems would enable us to return to normal business operations. In addition, any such event could negatively impact a country or region in which we sell our products. This could in turn decrease that country’s or region’s demand for our products, negatively impacting our financial results.