Autodesk, Inc.
For the period ended Jan 31, 2026. Filed Mar 3, 2026.
View on SEC.govAbout this filing
A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.
FY2026 · Filed Mar 3, 2026
What changed in Risk Factors?
Read the current filingPrevious report: 10-K
Period ended 2025-01-31; filed 2025-03-06.
0000769397-25-000019
Item 1A. Risk FactorsCurrent report: 10-K
Period ended 2026-01-31; filed 2026-03-03.
0000769397-26-000015
Item 1A. Risk FactorsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 238 previous paragraphs and 236 current paragraphs.
199 unchanged; 32 reworded; 2 added; 6 removed; 1 previous and 3 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (2)
Current report
In addition, we generally recognize subscription revenue over the term of the respective contracts, which typically range from 1-year to 3-years. As a result, most of the revenue we report in each quarter is the result of subscriptions entered into during previous quarters. Consequently, a decline in new or renewed subscriptions in any one quarter may not be reflected in our revenue results for that quarter but will negatively impact our revenue in future quarters. Accordingly, the effect of significant downturns in sales and market acceptance of our services, and changes in our attrition rate, may not be fully reflected in our results of operations until future periods.
Current report
Many laws and regulations relating to privacy and data protection impose restrictions on cross-border transfers of personal data. Available data transfer mechanisms impose obligations on us and other companies that engage in cross-border personal data transfers and are complex, uncertain, and subject to active litigation and enforcement actions in a number of jurisdictions around the world. Data transfer mechanisms may be challenged, revoked, or otherwise modified. Numerous jurisdictions also have imposed data localization requirements, and we have faced, and expect to continue to face, customer requirements to maintain data in particular jurisdictions. We may, in addition to other impacts in connection with personal data transfer mechanisms or data localization requirements, be required to expend significant time and resources to update contractual arrangements and to comply with new and evolving obligations, experience additional costs associated with increased compliance burdens, and find it necessary or appropriate to stop using certain service providers, engage in new contract negotiations, localize certain personal data, or make other operational changes, all of which may impact our business, financial condition, and results of operations. Further, we face exposure to regulatory complaints, actions, and other proceedings, and the potential for substantial fines, other liabilities, and injunctions or other imposed requirements, in connection with transfers of personal data and data localization requirements.
Removed paragraphs (6)
Previous report
We rely significantly upon major distributors and resellers in both the U.S. and international regions. Of our distributors, TD Synnex accounted for 33% and 39% of our total net revenue for fiscal 2025 and 2024, respectively, and Ingram Micro, Inc. (“Ingram Micro”) accounted for 5% and 7% of our total net revenue for fiscal 2025 and 2024, respectively. During October 2022, we entered into a transition agreements with each of TD Synnex and Ingram Micro to provide transition distribution activities for a one-to-two-year period, with potential extensions. In connection with such transition agreements, we intend to increase our selling efforts with resellers and agents. During the transition period, we believe the resellers and end users who currently purchase our products through TD Synnex and Ingram Micro will be able to continue to do so, and following the transition period, we believe such end users will be able to continue to purchase our products from certain resellers or directly from Autodesk, in each case under substantially the same terms and without substantial disruption to our revenue. However, if during the transition period, TD Synnex or Ingram Micro were to experience a significant business disruption or if our relationship with either were to significantly deteriorate, it is possible that our ability to sell to end users would, at least temporarily, be negatively impacted. Also, if any of our assumptions about our end users, resellers, distributors, or agents or our direct selling capabilities proves incorrect, these changes could harm our business. This could, in turn, negatively impact our financial results.
Previous report
In addition, there is continued instability of international personal data transfer legal mechanisms that are complex, uncertain, and subject to active litigation and enforcement actions in a number of jurisdictions around the world. For example, on June 4, 2021, the European Commission published a new set of modular standard contractual clause (“SCCs”), which became effective on June 29, 2021. The SCCs impose on companies obligations relating to personal data transfers, including the obligation to conduct a transfer impact assessment and, depending on a party’s role in the transfer, to implement additional security measures and to update internal privacy practices. We may, in addition to other impacts, be required to expend significant time and resources to update our contractual arrangements and to comply with new obligations, and we face exposure to regulatory actions, substantial fines and injunctions in connection with transfers of personal data from the EU or other regions.
Previous report
In addition, the United Kingdom’s (“UK”) exit from the EU, and ongoing developments in the UK, have created uncertainty with regard to data protection regulation in the UK. Personal data processing in the UK is governed by the UK General Data Protection Regulation and supplemented by other domestic data protection laws, such as the UK Data Protection Act 2018, which authorizes fines of up to £17.5 million or 4% of annual global revenue, whichever is higher. We are also exposed to potentially divergent enforcement actions for certain violations. Furthermore, the new SCCs apply only to the transfer of personal data outside the EU and not the UK. Although the European Commission adopted an adequacy decision for the UK on June 28, 2021, allowing the continued flow of personal data from the EU to the UK, this decision will be regularly reviewed going forward and may be revoked if the UK diverges from its current adequate data protection laws following its exit from the EU. On February 2, 2022, the UK’s Information Commissioner’s Office issued new standard contractual clauses to support personal data transfers out of the UK (“UK SCCs”), which became effective March 21, 2022. Following issuance of a U.S. executive order, a new framework, the EU-U.S. Data Privacy Framework (“DPF”) was created. Following an adequacy decision issued by the European Commission on July 10, 2023, the DPF, along with a UK extension to the DPF that allows the transfer of personal data from the UK to the U.S. (the “UK DPF Extension”) and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”), are available for companies to make use of to legitimize personal data transfers to the U.S. from the European Economic Area, Switzerland, and UK. We have certified to the U.S. Department of Commerce that we adhere to the DPF, UK DPF Extension, and Swiss-U.S. DPF. However, the DPF has been subject to a legal challenge, and it, the UK DPF Extension, and the Swiss-U.S. DPF may be subject to legal challenges in the future from privacy advocacy groups or others. Further, the European Commission’s adequacy decision regarding the EU-U.S. DPF provides that the EU-U.S. DPF will be subject to future reviews and may be subject to suspension, amendment, repeal, or limitations to its scope by the European Commission. We may, in addition to other impacts, experience additional costs associated with increased compliance burdens and be required to engage in new contract negotiations with third parties that aid in processing personal data on our behalf or localize certain personal data.
Previous report
Further, several European data protection authorities have indicated that the use of Google Analytics by European website operators involves the unlawful transfer of personal data to the United States. As the enforcement landscape further develops, and depending on the impacts of these rulings and other developments with respect to cross-border data transfer, we could suffer additional costs, complaints and/or regulatory investigations or fines, have to stop using certain tools and vendors, and make other operational changes.
Previous report
Several other countries, including China, Australia, New Zealand, Brazil, and Japan, have also established specific legal requirements for cross-border data transfers. There is also an increasing trend towards data localization policies. For example, China and India have introduced localization requirements for certain data. Other countries also are considering data localization requirements. If this trend continues, and countries implement more restrictive regulations for cross-border personal data transfers (or do not permit personal data to leave the country of origin), it could affect the manner in which we provide our services, the geographical location or segregation of our relevant systems and operations, and our business, financial condition, and results of operations in those jurisdictions could be impacted.
Previous report
In the EU and the UK, regulators are increasingly focusing on compliance with requirements in the online behavioral advertising ecosystem, and current national laws that implement the ePrivacy Directive are likely to be replaced by an EU regulation known as the ePrivacy Regulation, which is expected to significantly increase fines for non-compliance. While the text of the ePrivacy Regulation is under development, recent European case law and regulators’ recent guidance are driving increased attention to cookies and tracking technologies. This could lead to substantial costs, require significant system changes, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, adversely affect our margins, increase costs, and subject us to additional liabilities. Regulation of cookies and similar technologies, and any decline of cookies or similar online tracking technologies as a means to identify and potentially target users, may lead to broader restrictions and impairments on our marketing and personalization activities and may negatively impact our efforts to understand our customers.
Reworded paragraphs (32)
Previous wording
•Our strategy and expectations regarding the expected benefits, timing and costs associated with our restructuring plan.
Current wording
•Our strategy and expectations regarding the expected benefits, timing and costs associated with our restructuring plans.
Previous wording
•Increasing regulatory focus on privacy, data protection, and information security issues and expanding laws.
Current wording
•Increasing regulatory focus on privacy, data protection, and cybersecurity issues and expanding laws.
Previous wording
The software industry is characterized by rapid technological changes as well as changes in customer requirements and preferences. In recent years, the industry has undergone a transition from developing and selling perpetual licenses and on-premises products to subscriptions and cloud-enabled technologies. Both new and existing customers are also reconsidering how they purchase software products, which requires us to constantly evaluate our business model and strategy. In response, we are focused on providing solutions to enable our customers to be more agile and collaborative on their projects. We devote significant resources to the development of new technologies. If we are unable to provide new features, enhancements to user experience, and modifications in a timely and cost-effective manner that achieve market acceptance, align with customer expectations, and that keep pace with rapid technological developments and changing regulatory landscapes, our business and operating results could be adversely affected. For example, AI and machine learning are propelling advancements in technology, but if they are not widely adopted and accepted or fail to operate as expected, our business and reputation may be harmed.
Current wording
The software industry is characterized by rapid technological changes as well as changes in customer requirements and preferences. In recent years, the industry has undergone a transition from developing and selling perpetual licenses and on-premises products to subscriptions and cloud-enabled technologies. Both new and existing customers are also reconsidering how they purchase software products, which requires us to constantly evaluate our business model and strategy. In response, we are focused on providing solutions to enable our customers to be more agile and collaborative on their projects. We devote significant resources to the development of new technologies, including AI features. If we are unable to provide new features, enhancements to user experience, and modifications in a timely and cost-effective manner that achieve market acceptance, align with customer expectations, and that keep pace with rapid technological developments and changing regulatory landscapes, our business and operating results could be adversely affected. For example, AI and machine learning are propelling advancements in technology, but if they are not widely adopted and accepted or fail to operate as expected, our business and reputation may be harmed.
Previous wording
The software industry has limited barriers to entry, and the availability of computing devices with continually expanding performance at progressively lower prices contributes to the ease of market entry. The industry has undergone a transition from developing and selling perpetual licenses and on-premises products tosubscriptions and cloud-enabled technologies. This shift further lowers barriers to entry and poses a disruptive challenge to established software companies. The markets in which we operate are characterized by vigorous competition, both by entrants with innovative technologies and by consolidation of companies with complementary offerings and technologies. Some of our competitors have greater financial, technical, sales and marketing, and other resources. Our competitors may also be able to develop and market new technologies that render our existing or future products less competitive. For example, disruptive technologies such as machine learning and other AI technologies may significantly alter the market for our products in unpredictable ways and reduce customer demand. Furthermore, a reduction in the number and availability of compatible third-party applications or our inability to rapidly adapt to technological and customer preference changes, including those related to cloud computing, mobile devices, and new computing platforms, may adversely affect the sale of our solutions. Because of these and other factors, competitive conditions in the industry are likely to intensify in the future. Increased competition could result in price reductions, reduced net revenue and profit margins, and loss of market share, any of which would likely harm our business.
Current wording
The software industry has limited barriers to entry, and the availability of computing devices with continually expanding performance at progressively lower prices contributes to the ease of market entry. The industry has undergone a transition from developing and selling perpetual licenses and on-premises products to subscriptions and cloud-enabled technologies. This shift further lowers barriers to entry and poses a disruptive challenge to established software companies. The markets in which we operate are characterized by vigorous competition, both by entrants with innovative technologies and by consolidation of companies with complementary offerings and technologies. Some of our competitors have greater financial, technical, sales and marketing, and other resources. Our competitors and new entrants may also be able to develop and market new technologies that render our existing or future products less competitive. For example, disruptive technologies such as machine learning and other AI technologies may significantly alter the market for our products in unpredictable ways and reduce customer demand. The market may also react to these disruptive technologies in unpredictable ways inconsistent with our financial condition and results of operation.
Previous wording
Our overall performance depends largely upon domestic and worldwide economic and political conditions. The United States and other countries’ economies have experienced cyclical downturns, in which economic activity was impacted by falling demand for a variety of goods and services, restricted credit, poor liquidity, decreased government spending, reduced corporate profitability, volatility in credit, equity, and foreign exchange markets, inflationary pressures and higher interest rates, bankruptcies, and overall uncertainty. These economic conditions can occur abruptly. For example, current geopolitical and global macro-economic challenges have caused uncertainty in the global economy, and an economic downturn or recession in the United States or in other countries may occur or has already occurred and may continue. The extent to which these challenges will impact our financial condition or results of operations is still uncertain and will continue to depend on developments such as the impact of these challenges on our customers, vendors, distributors, and resellers, such as the supply chain disruption and resulting inflationary pressures and global labor shortage that we have seen recently, material scarcity, as well as other factors; actions taken by governments, businesses, and consumers in response to these challenges; speed and timing of economic recovery, including in specific geographies; our billings and renewal rates, including new business close rates, rate of multi-year contracts, pace of closing larger transactions, and new unit volume growth; wars and armed conflicts, including the ongoing wars between Ukraine and Russia and between Israel and Hamas; foreign exchange rate fluctuations; and the effect of these challenges on margins and cash flow. All of these factors continue to evolve and remain uncertain at this time, and some of these factors are not within our control. If economic growth in countries where we do business slows or if such countries experience further economic recessions, customers may delay or reduce technology purchases. Our customers include government entities, including the U.S. federal government, and if spending cuts impede the ability of governments to purchase our products and services, our revenue could decline. In addition, a number of our customers rely, directly and indirectly, on government spending.
Current wording
Our overall performance depends largely upon domestic and worldwide economic and political conditions. The United States and other countries’ economies have experienced cyclical downturns, in which economic activity was impacted by falling demand for a variety of goods and services, restricted credit, poor liquidity, decreased government spending, reduced corporate profitability, volatility in credit, equity, and foreign exchange markets, inflationary pressures and higher interest rates, bankruptcies, and overall uncertainty. These economic conditions can occur abruptly. For example, current geopolitical and global macro-economic challenges, most recently regarding tariffs and trade protectionism, have caused uncertainty in the global economy, and an economic downturn or recession in the United States or in other countries may occur or has already occurred and may continue. The extent to which these challenges will impact our financial condition or results of operations is still uncertain and will continue to depend on developments such as the impact of these challenges on our customers, vendors, distributors, and resellers, such as the supply chain disruption and resulting inflationary pressures and global labor shortage that we have seen recently, material scarcity, as well as other factors; actions taken by governments, businesses, and consumers in response to these challenges; speed and timing of economic recovery, including in specific geographies; our billings and renewal rates, including new business close rates, rate of multi-year contracts, pace of closing larger transactions, and new unit volume growth; wars and armed conflicts, including the ongoing wars between Ukraine and Russia and conflicts in the Middle East; foreign exchange rate fluctuations; and the effect of these challenges on margins and cash flow. All of these factors continue to evolve and remain uncertain at this time, and some of these factors are not within our control. If economic growth in countries where we do business slows or if such countries experience further economic recessions, customers may delay or reduce technology purchases. Our customers include government entities, including the U.S. federal government, and if spending cuts impede the ability of governments to purchase our products and services, our revenue could decline. In addition, a number of our customers rely, directly and indirectly, on government spending.
Previous wording
As described elsewhere in these risk factors, we are dependent on international revenue and operations and are subject to related risks of conducting business globally. Trends toward nationalism and protectionism and the weakening or dissolution of international trade pacts may increase the cost of, or otherwise interfere with, conducting business. These trends have increased political and economic unpredictability globally and may increase the volatility of global financial markets, and the impact of such developments on the global economy remains uncertain. Political instability or adverse political developments in any of the countries in which we do business could harm our business, results of operations, and financial condition. A financial sector credit crisis could impair credit availability and the financial stability of our customers, including our distribution partners and channels. A disruption in the financial markets may also have an effect on our derivative counter-parties and could also impair our banking partners, on which we rely for operating cash management. War, geopolitical conflicts, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy, could also affect our business. Any of these events could harm our business, results of operations, and financial condition.
Current wording
As described elsewhere in these risk factors, we are dependent on international revenue and operations and are subject to related risks of conducting business globally. Trends toward nationalism and protectionism, including imposition of tariffs and related trade wars, and the weakening or dissolution of international trade pacts may increase the cost of, or otherwise interfere with, conducting business. These trends have increased political and economic unpredictability globally and may increase the volatility of global financial markets, and the impact of such developments on the global economy remains uncertain. Political instability or adverse political developments in any of the countries in which we do business could harm our business, results of operations, and financial condition. A financial sector credit crisis could impair credit availability and the financial stability of our customers, including our distribution partners and channels. A disruption in the financial markets may also have an effect on our derivative counter-parties and could also impair our banking partners, on which we rely for operating cash management. War, geopolitical conflicts, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy, could also affect our business. Any of these events could harm our business, results of operations, and financial condition.
Previous wording
We regularly acquire or invest in businesses, software solutions, and technologies that are complementary to our business through acquisitions, strategic alliances, or equity or debt investments, including several transactions in fiscal 2024 and 2025. The risks associated with such acquisitions include the difficulty of integrating solutions, operations, and personnel; inheriting liabilities such as intellectual property infringement claims; failure to realize anticipated revenue and cost projections and expected synergies; the requirement to test and assimilate the internal control processes of the acquired business in accordance with the requirements of Section 404 of the Sarbanes-Oxley Act of 2002; and diversion of management's time and attention. In addition, such acquisitions and investments involve other risks such as:
Current wording
We regularly acquire or invest in businesses, software solutions, and technologies that are complementary to our business through acquisitions, strategic alliances, or equity or debt investments, including several transactions in fiscal 2025 and fiscal 2026. The risks associated with such acquisitions include the difficulty of integrating solutions, operations, and personnel; inheriting liabilities such as intellectual property infringement claims; failure to realize anticipated revenue and cost projections and expected synergies; the requirement to test and assimilate the internal control processes of the acquired business in accordance with the requirements of Section 404 of the Sarbanes-Oxley Act of 2002; and diversion of management's time and attention. In addition, such acquisitions and investments involve other risks such as:
Previous wording
•the potential that acquired businesses or businesses that we invest in may not have adequate controls, processes, and procedures to ensure compliance with laws and regulations, including with respect to data privacy, data protection, and data security, as well as anti-bribery and anti-corruption laws, export controls, sanctions and industry-specific-regulation;
Current wording
•the potential that acquired businesses or businesses that we invest in may not have adequate controls, processes, and procedures to ensure compliance with laws and regulations, including with respect to data privacy, data protection, and cybersecurity, as well as anti-bribery and anti-corruption laws, export controls, sanctions and industry-specific-regulation;
Previous wording
In addition, in recent years, the United States has instituted or proposed changes to foreign trade policy, including the negotiation or termination of trade agreements, the imposition of tariffs on products imported from certain countries, economic sanctions on individuals, corporations, or countries, and other government regulations affecting trade between the United States and other countries in which we do business. For example, the United States and other global actors have imposed sanctions as a result of the war against Ukraine launched by Russia and the ongoing war between Israel and Hamas. Additionally, recent executive actions and executive branch policies in the United States, such as those communicated in a February 2025 memorandum regarding a change in U.S. policy with respect to the negotiation and imposition of digital services taxes and regulations by other countries, suggest a broader purview for changes in U.S. trade policy as a component of U.S. foreign policy. New or increased tariffs and other changes in U.S. trade policy, including new sanctions, could trigger retaliatory actions by affected countries, including Russia. In addition, certain foreign governments, including the Chinese government, have instituted, considered, or are considering imposing tariffs and other trade sanctions on certain U.S.-manufactured goods. The escalation of protectionist or retaliatory trade measures in either the United States or any other countries in which we do business, such as announcing sanctions, a change in tariff structures, export compliance, or other trade policies, may increase the cost of, or otherwise interfere with, the conduct of our business, and could have a material adverse effect on our operations and business outlook.
Current wording
In addition, in recent years, the United States has instituted or proposed changes to foreign trade policy, including the negotiation or termination of trade agreements, the imposition of new or increased tariffs on products imported from certain countries; economic sanctions on individuals, corporations, or countries; and other government regulations affecting trade between the United States and other countries in which we do business. For example, the United States and other global actors have continued to increase sanctions and export restrictions as a result of the war against Ukraine launched by Russia, the geopolitical landscape with respect to China, ongoing conflicts in the Middle East, and other risks. Additionally, recent executive actions and executive branch policies in the United States, such as those communicated in a February 2025 memorandum regarding a change in U.S. policy with respect to the negotiation and imposition of digital services taxes and regulations by other countries, suggest a broader purview for changes in U.S. trade policy as a component of U.S. foreign policy. For example, since March 2025 the United States has imposed additional Section 232 tariffs on various commodities, including steel, aluminum, passenger vehicles and trucks (and components for such vehicles), and other industry-specific targets. Between February 2025 and February 2026, the United States placed additional fentanyl-related tariffs on most goods from China, Canada and Mexico (with an exception for goods that qualify for duty-free treatment under the U.S.-Mexico-Canada Agreement); and between April 2025 and February 2026 placed additional reciprocal tariffs on most imports from U.S. trading partners other than Canada, Mexico, Russia, Belarus, Cuba, and North Korea. These additional U.S. tariffs were implemented under authorities asserted in the International Emergency Economic Powers Act (“IEEPA”) and rescinded on February 24, 2026, following a Supreme Court decision invalidating the use of IEEPA to authorize these tariffs. The availability, timing, and amount of any related refunds associated with payments of these duties remain uncertain and subject to further legal, regulatory, and administrative action. Beginning February 24, 2026, the U.S. government implemented a new, global “temporary import surcharge” of 10% on many of the same products affected by the prior reciprocal tariffs, under authorities provided for in Section 122 of the Trade Act of 1974, supplementing existing non-IEEPA measures. Additional trade-related investigations by the U.S. government are in progress and could result in the imposition of additional tariffs.
Previous wording
•general market, economic, business, and political conditions in Europe, APAC, and emerging economies, including from an economic downturn or recession in the United States or other countries;
Current wording
•general market, economic, business, and political conditions in Europe and APAC including from an economic downturn or recession in the United States or other countries, as well as economic and regulatory uncertainty;
Previous wording
We derive a substantial portion of our net revenue from sales of subscriptions of a limited number of our offerings, including AutoCAD software, solutions based on AutoCAD, which include our collections that serve specific markets, and products that are interoperable with AutoCAD. Any factor adversely affecting sales of these subscriptions, including the product release cycle, market acceptance, product competition, performance and reliability, reputation, price competition, economic and market conditions, and the availability of third-party applications, would likely harm our financial results. During fiscal 2025 and 2024, combined revenue from our AutoCAD and AutoCAD LT family products, not including collections having AutoCAD or AutoCAD LT as a component, represented 26% and 27% of our total net revenue, respectively.
Current wording
We derive a substantial portion of our net revenue from sales of subscriptions of a limited number of our offerings, including AutoCAD software, solutions based on AutoCAD, which include our collections that serve specific markets, and products that are interoperable with AutoCAD. Any factor adversely affecting sales of these subscriptions, including the product release cycle, market acceptance, product competition, performance and reliability, reputation, price competition, economic and market conditions, and the availability of third-party applications, would likely harm our financial results. During fiscal 2026 and 2025, combined revenue from our AutoCAD and AutoCAD LT family products, not including collections having AutoCAD or AutoCAD LT as a component, represented 25% and 26% of our total net revenue, respectively.
Previous wording
During the first quarter of fiscal 2026, we initiated a restructuring plan (the “2026 Plan”), to support Autodesk's initiatives to optimize its go-to-market organization and, at the same time, to reallocate resources to Autodesk’s strategic priorities such as investments in cloud, platform, and artificial intelligence. These measures are intended to address our short and long-term objectives and are based on our current estimates, assumptions, and forecasts, which are subject to known and unknown risks and uncertainties. Implementation of these and any other initiatives may not achieve our expected benefits, may be disruptive to our business, the expected costs and charges may be greater than we have forecasted, and the estimated cost savings may be lower than we have forecasted. In addition, our 2026 Plan could result in personnel attrition beyond our planned reduction in headcount or could reduce employee morale, which could in turn adversely impact productivity, including through a loss of continuity, loss of accumulated knowledge and/or inefficiency during transitional periods, could affect our ability to attract highly skilled employees, or may otherwise adversely affect our business.
Current wording
During the first quarter of fiscal 2026, we initiated a restructuring plan (the “2026 Plan”), to support Autodesk's initiatives to optimize its go-to-market organization and, at the same time, to reallocate resources to Autodesk’s strategic priorities such as investments in cloud, platform, and artificial intelligence. During the fourth quarter of fiscal 2026, we initiated another restructuring plan (the "January 2026 Plan") that marks the final phase of our sales and marketing optimization program. These measures are intended to address our short and long-term objectives and are based on our current estimates, assumptions, and forecasts, which are subject to known and unknown risks and uncertainties. Implementation of these and any other initiatives may not achieve our expected benefits, may be disruptive to our business, the expected costs and charges may be greater than we have forecasted, and the estimated cost savings may be lower than we have forecasted. In addition, our 2026 Plan and January 2026 Plan could result in personnel attrition beyond our planned reduction in headcount or could reduce employee morale, which could in turn adversely impact productivity, including through a loss of continuity, loss of accumulated knowledge and/or inefficiency during transitional periods, could affect our ability to attract highly skilled employees, or may otherwise adversely affect our business.
Previous wording
•general socioeconomic, political, or market conditions, including from an economic downturn or recession in the United States or in other countries;
Current wording
•general socioeconomic, political, or market conditions, including from an economic downturn or recession in the United States or in other countries, as well as economic and regulatory uncertainty;
Previous wording
•announcements of new offerings or enhancements by us or our competitors;
Current wording
•announcements of new offerings or enhancements by us or our competitors as well as market perception of disruptive technologies such as machine learning and other AI technologies;
Previous wording
We are increasingly building AI into many of our offerings. We expect to rely on AI technologies to help drive future growth in our business, but there can be no assurance that we will realize the desired or anticipated benefits from AI or at all. We may also fail to properly implement or market our AI offerings. As with many innovations, AI presents risks and challenges that could affect its adoption, and therefore our business. Our competitors or other third parties may incorporate AI into their products more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations. Additionally, our offerings based on AI may expose us to additional lawsuits and regulatory investigations and other proceedings and subject us to legal liability as well as brand and reputational harm. For example, if the content, analyses, or recommendations that AI applications assist in producing are or are alleged to be deficient, inaccurate, or biased, our business, financial condition, and results of operations may be adversely affected. The use of AI applications has resulted in, and may in the future result in, cybersecurity incidents that implicate the personal data of end users of such applications. Any such cybersecurity incidents related to our use of AI applications could adversely affect our reputation and results of operations.
Current wording
We are increasingly building AI into many of our offerings. We expect to rely on AI technologies to help drive future growth in our business, but there can be no assurance that we will realize the desired or anticipated benefits from AI or at all. We may also fail to properly implement or market our AI offerings. As with many innovations, AI presents risks and challenges that could affect its adoption, and therefore our business. Our competitors or other third parties may incorporate AI into their products more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations. Additionally, our offerings based on or otherwise leveraging AI may expose us to additional lawsuits and regulatory investigations and other proceedings and subject us to legal liability as well as brand and reputational harm. For example, if the content, analyses, or recommendations that AI applications assist in producing are or are alleged to be deficient, inaccurate, or biased, our business, financial condition, and results of operations may be adversely affected. The use of AI applications has resulted in, and may in the future result in, cybersecurity incidents that implicate the personal data of end users of such applications. Any such cybersecurity incidents related to our use of AI applications could adversely affect our reputation and results of operations.
Previous wording
Social and ethical issues relating to the use of new and evolving technologies such as AI in our offerings, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. AI presents emerging ethical issues and if we enable or offer solutions that draw controversy due to their perceived or actual impact on society, we may experience brand or reputational harm, competitive harm, or legal liability. Government regulation addressing AI ethics or other aspects of the development or use of AI may also increase the burden and cost of research and development in this area, subjecting us to brand or reputational harm, competitive harm, or legal liability. For example, the European Union’s Artificial Intelligence Act (the “AI Act”), which achieved approval by the European Council on February 2, 2024, and the European Parliament on March 13, 2024, will impose obligations on providers and users of artificial intelligence technologies. Some U.S. states have proposed, and in certain cases enacted, laws addressing aspects of the development and use of AI. Failure to address AI ethical and regulatory issues by us or others in our industry could undermine public confidence in
Current wording
Social and ethical issues relating to the use of new and evolving technologies such as AI in our offerings, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. AI presents emerging ethical issues and if we enable or offer solutions that draw controversy due to their perceived or actual impact on society, we may experience brand or reputational harm, competitive harm, or legal liability. Government regulation addressing AI ethics, transparency requirements, or other aspects of the development, or use, or deployment of AI may also increase the burden and cost of research, development, and other activities, which may increase our costs, limit our ability to leverage AI, and subject us to brand or reputational harm, competitive harm, or legal liability. For example, the European Union’s Artificial Intelligence Act (the “AI Act”), which achieved approval by the European Council on February 2, 2024, and the European Parliament on March 13, 2024, imposes obligations on providers and users of AI technologies. Some U.S. states have proposed, and in certain cases enacted, laws addressing aspects of the development and use of AI. Failure to address AI ethical and regulatory issues by us or others in our industry could undermine public confidence in AI, slow adoption of AI in our products and services, and subject us to claims, demands, and proceedings from private actors, regulatory investigations and other proceedings by regulatory authorities, and fines, penalties, and other liabilities.
Previous wording
Autodesk voluntarily contacted the Securities and Exchange Commission (the “SEC”) to advise it that an internal investigation was ongoing. Autodesk is cooperating with the SEC’s investigation. Furthermore, if the SEC commences legal action, we could be required to pay significant penalties and become subject to injunctions, a cease and desist order and other equitable remedies. In addition, the United States Attorney’s Office for the Northern District of California contacted us regarding the Audit Committee investigation. We cannot guarantee that we will not receive inquiries from other regulatory authorities regarding the investigation, or that we will not be subject to future claims, investigations or proceedings. Any future inquiries from the SEC or other regulatory authorities, or future claims or proceedings or any related regulatory investigation will, regardless of the outcome, likely consume a significant amount of our internal resources and result in additional legal and accounting costs. We can provide no assurances as to the outcome of any governmental investigation.
Current wording
Autodesk voluntarily contacted the Securities and Exchange Commission (“SEC”) to advise it that an internal investigation was ongoing. In addition, the United States Attorney’s Office for the Northern District of California (“USAO”) contacted us regarding the Audit Committee investigation. We cooperated with the SEC and USAO, including by providing certain documents and information. On August 19, 2025, the SEC notified us that it was closing its matter. On August 21, 2025, the USAO notified us that it was closing its matter as well. We cannot guarantee that we will not receive inquiries from other regulatory authorities regarding the investigation, or that we will not be subject to future claims, investigations or proceedings. Any future inquiries from the SEC or other regulatory authorities, or future claims or proceedings or any related regulatory investigation will, regardless of the outcome, likely consume a significant amount of our internal resources and result in additional legal and accounting costs. We can provide no assurances as to the outcome of any governmental investigation.
Previous wording
Hackers regularly have targeted our systems, offerings, services, and applications, and we expect them to do so in the future. To date, we have not considered any such identified security events as material to us, including to our reputation or business operations, or had a material financial impact, but there can be no assurance that future cyberattacks will not be material or otherwise significant. Security breaches or incidents disrupt the proper functioning of our systems, solutions, offerings, applications, or services; cause errors in the output of our customers’ work; allow unauthorized access to or unauthorized use, disclosure, modification, loss, unavailability, or destruction of, sensitive data or intellectual property, including proprietary or confidential information of ours or our customers; or cause other destructive or disruptive outcomes. The risk of a security incident, particularly through cyber-attack or cyber intrusion, including by computer hackers, foreign governments, and cyber terrorists, has increased as the number, intensity, and sophistication of attempted attacks and intrusions from around the world have increased. These threats include, among others, identity theft, unauthorized access, DNS attacks, wireless network attacks, viruses and worms, malware, bugs, vulnerabilities, advanced persistent threats, application-centric attacks, peer-to-peer attacks, social engineering, phishing, credential stuffing, malicious file uploads, backdoor trojans, supply chain attacks, ransomware attacks, and distributed denial of service attacks. In addition, third parties may attempt to fraudulently induce our employees, vendors, partners, customers, or users to disclose information to gain access to our data or our customers’ or users’ data and there is the risk of employee, contractor, or vendor error or malfeasance. These existing risks are compounded given the shift in recent years to work-from-home arrangements for a large population of employees and contractors, as well as employees and contractors of our third-party technology providers and vendors, and the risks could also be elevated in connection with the ongoing wars between Ukraine and Russia and between Israel and Hamas as we and our third-party technology providers and vendors are vulnerable to a heightened risk of cyberattacks from or affiliated with nation-state actors, including retaliatory attacks from Russian actors against U.S.-based companies. Additionally, these threats continue to evolve in sophistication and volume and are difficult to detect and predict due to advances in electronic warfare techniques, advances in cryptography and other technologies, including AI and machine learning. Our use of AI may also increase our risks of being subject to a security breach or incident. Despite our significant efforts to create security barriers to such threats, we cannot entirely mitigate these risks, and there is no guarantee that inadvertent or unauthorized use or disc…
Excerpt shortened here; the source contains the full paragraph.
Current wording
Hackers regularly have targeted our systems, offerings, services, and applications, and we expect them to do so in the future. To date, we have not considered any such identified security events as material to us, including to our reputation or business operations, or had a material financial impact, but there can be no assurance that future cyberattacks will not be material or otherwise significant. Security breaches or incidents disrupt the proper functioning of our systems, solutions, offerings, applications, or services; cause errors in the output of our customers’ work; allow unauthorized access to or unauthorized use, disclosure, modification, loss, unavailability, or destruction of, sensitive data or intellectual property, including proprietary or confidential information of ours or our customers; or cause other destructive or disruptive outcomes. The risk of a security incident, particularly through cyber-attack or cyber intrusion, including by computer hackers, foreign governments, and cyber terrorists, has increased as the number, intensity, and sophistication of attempted attacks and intrusions from around the world have increased. These threats include, among others, identity theft, unauthorized access, DNS attacks, wireless network attacks, viruses and worms, malware, bugs, vulnerabilities, advanced persistent threats, application-centric attacks, peer-to-peer attacks, social engineering, phishing, credential stuffing, malicious file uploads, backdoor trojans, supply chain attacks, ransomware attacks, and distributed denial of service attacks. In addition, third parties may attempt to fraudulently induce our employees, vendors, partners, customers, or users to disclose information to gain access to our data or our customers’ or users’ data and there is the risk of employee, contractor, or vendor error or malfeasance. These existing risks are compounded given the shift in recent years to work-from-home arrangements for a large population of employees and contractors, as well as employees and contractors of our third-party technology providers and vendors, and the risks could also be elevated in connection with the ongoing wars between Ukraine and Russia and conflicts in the Middle East as we and our third-party technology providers and vendors are vulnerable to a heightened risk of cyberattacks from or affiliated with nation-state actors, including retaliatory attacks from Russian actors against U.S.-based companies. Additionally, these threats continue to evolve in sophistication and volume and are difficult to detect and predict due to advances in electronic warfare techniques, advances in cryptography and other technologies, including AI and machine learning. Our use of AI may also increase our risks of being subject to a security breach or incident. Despite our significant efforts to create security barriers to such threats, we cannot entirely mitigate these risks, and there is no guarantee that inadvertent or unauthorized use or …
Excerpt shortened here; the source contains the full paragraph.
Previous wording
From time to time, we may rely on a single or limited number of suppliers, or upon suppliers in a single country, for the provision of services and materials that we use in the operation of our business and production of our solutions. Inability of such third parties to satisfy our requirements could disrupt our operations or make it more difficult for us to implement our strategy. If any of these situations were to occur, our reputation could be harmed, we could be subject to third-party liability, including under laws relating to privacy, data protection, and information security in certain jurisdictions, and our financial results could be negatively impacted.
Current wording
From time to time, we may rely on a single or limited number of suppliers, or upon suppliers in a single country, for the provision of services and materials that we use in the operation of our business and production of our solutions. Inability of such third parties to satisfy our requirements could disrupt our operations or make it more difficult for us to implement our strategy. If any of these situations were to occur, our reputation could be harmed, we could be subject to third-party liability, including under laws relating to privacy, data protection, and cybersecurity in certain jurisdictions, and our financial results could be negatively impacted.
Previous wording
We sell our software products both directly to end users and through a network of distributors and resellers. For fiscal 2025 and 2024, approximately 58% and 63%, respectively, of our revenue was derived from indirect channel sales primarily through distributors and resellers. Our ability to effectively distribute our solutions depends in part upon the financial and business condition of our distributor and reseller network. Computer software distributors and resellers typically are not highly capitalized, and have previously experienced difficulties during times of economic contraction as well as during the past several years. We have processes to ensure that we assess the creditworthiness of distributors and resellers prior to our sales to them. In the past we have taken steps to support them, and may take additional steps in the future, such as extending credit terms and adjusting our incentives. These steps, if taken, could harm our financial results. If our distributors and resellers were to become insolvent, they would not be able to maintain their business and sales or provide customer support services, which would negatively impact our business and revenue.
Current wording
We sell our software products both directly to end users and through a network of distributors and resellers. For fiscal 2026 and 2025, approximately 37% and 58%, respectively, of our revenue was derived from indirect channel sales primarily through distributors and resellers. Our distributor, TD Synnex accounted for 14% and 33% of our total net revenue for fiscal 2026 and 2025, respectively. We anticipate that our revenue by direct sales channel will continue to increase as a percentage of total net revenue. We expect our indirect channel will continue to transact and support a considerable portion of our customers, particularly in emerging regions. Our ability to effectively distribute our solutions depends in part upon the financial and business condition of our distributor and reseller network. Computer software distributors and resellers typically are not highly capitalized, and have previously experienced difficulties during times of economic contraction as well as during the past several years. We have processes to ensure that we assess the creditworthiness of distributors and resellers prior to our sales to them. In the past we have taken steps to support them, and may take additional steps in the future, such as extending credit terms and adjusting our incentives. These steps, if taken, could harm our financial results. If our distributors and resellers were to become insolvent, they would not be able to maintain their business and sales or provide customer support services, which would negatively impact our business and revenue.
Previous wording
Over time, we have modified and especially during the transition process noted above, will continue to modify aspects of our relationship with our distributors and resellers, such as their incentive programs, pricing to them, and our distribution model to motivate and reward them for aligning their businesses with our strategy and business objectives. Changes in these relationships and underlying programs could negatively impact their business and harm our business. Further, our distributors and resellers may lose confidence in our business, move to competitive products, or not have the skills or ability to support customers. The loss of or a significant reduction in business with those distributors or resellers could harm our business. In particular, if one or more of such distributors or resellers were unable to meet their obligations with respect to accounts payable to us, we could be forced to write off such accounts and may be required to delay the recognition of revenue on future sales to these customers. These events could have a material adverse effect on our financial results.
Current wording
Over time, we have modified and continue to modify aspects of our relationship with our distributors and resellers, such as their incentive programs, pricing to them, and our distribution model to motivate and reward them for aligning their businesses with our strategy and business objectives. Further, our distributors and resellers may lose confidence in our business, move to competitive products, or not have the skills or ability to support customers. In particular, if one or more of such distributors or resellers were unable to meet their obligations with respect to accounts payable to us, we could be forced to write off such accounts and may be required to delay the recognition of revenue on future sales to these customers. These events could have a material adverse effect on our financial results.
Previous wording
Increasing regulatory focus on privacy, data protection, and information security issues and new and expanding laws may impact our business and expose us to increased liability.
Current wording
Increasing regulatory focus on privacy, data protection, and cybersecurity issues, as well as new and expanding laws and regulations, and customer requirements, addressing AI, data localization and sovereignty, and the collection and processing of data and information, may impact our business and expose us to increased liability.
Previous wording
Our strategy to digitize Autodesk involves increasing our use of cloud- and web-based technologies and applications to leverage customer data to improve our offerings for the benefit of our customers. To accomplish this strategy, we must collect and otherwise process customer data, which may include personal data and personal information of users from different jurisdictions globally. We also collect and otherwise process personal data and personal information of our employees and contractors. As a result, federal, state, and global laws relating to privacy, data protection, and information security apply to Autodesk’s personal data and personal information processing activities. The scope of these laws and regulations is rapidly evolving, subject to differing interpretations, may be inconsistent among jurisdictions, or conflict with other rules and is likely to remain uncertain for the foreseeable future. We also expect that there will continue to be new laws, regulations, and industry standards concerning privacy, data protection, and information security proposed and enacted in various jurisdictions. Globally, laws such as the General Data Protection Regulation (EU) 2016/679 (“GDPR”) in the European Union (“EU”) and the Personal Information Protection Law (“PIPL”) in China have been enacted, and numerous other countries have proposed or have enacted laws concerning privacy, data protection, and information security. In addition, new and emerging state laws in the United States governing privacy, data protection, and information security, such as the California Consumer Privacy Act (“CCPA”), the California Privacy Rights Act (“CPRA”), and numerous laws in other states, many of which provide for obligations similar to the CCPA and CPRA, have been enacted. These laws and regulations, as well as industry self-regulatory codes, industry standards, and other actual and asserted obligations to which we are or may be asserted to be subject, create new compliance obligations and substantially expand the scope of potential liability and provide greater penalties for non-compliance. For example, the GDPR provides for penalties of up to €20 million or 4% of a company’s annual global revenue, whichever is greater, the PIPL provides for penalties of up to 50 million renminbi or 5% of a company's annual revenue and disgorgement of all illegal gains, whichever is greater, and the CCPA provides for penalties of up to $7,500 per violation. These laws, regulations, and codes may also impact our innovation and business drivers in developing new and emerging technologies (e.g., AI and machine learning). These requirements, among others, may impact demand for our offerings and force us to bear the burden of expanded obligations in our contracts.
Current wording
Our strategy to digitize Autodesk involves increasing our use of cloud- and web-based technologies and applications to leverage customer data to improve our offerings for the benefit of our customers. To accomplish this strategy, we must collect and otherwise process customer data, which may include personal data and personal information of users from different jurisdictions globally. We also collect and otherwise process personal data and personal information of our employees and contractors. As a result, numerous federal, state, and global laws and regulations relating to privacy, data protection, cybersecurity, and the collection, use, security, and other processing of personal data, personal information, and other data and information, apply to our data and information processing activities. The scope of these laws and regulations is rapidly evolving, subject to differing interpretations, may be inconsistent among jurisdictions, or conflict with other rules and is likely to remain uncertain for the foreseeable future. We also expect that there will continue to be new laws, regulations, and industry standards concerning these matters proposed and enacted in various jurisdictions. Globally, laws such as the General Data Protection Regulation (“EU”) 2016/679 (“GDPR”) in the European Union and the Personal Information Protection Law (“PIPL”) in China have been enacted, and numerous other countries have proposed or have enacted laws concerning these matters, and we expect new laws, regulations, and industry standards concerning these matters to be proposed and enacted in various jurisdictions. In addition, new and emerging laws and regulations in the United States governing privacy, data protection, and cybersecurity, such as the California Consumer Privacy Act (“CCPA”), the California Privacy Rights Act (“CPRA”), other laws and regulations in other states, and numerous laws and regulations at the U.S. federal level, have been enacted or otherwise promulgated. These laws and regulations, as well as industry self-regulatory codes, industry standards, and other actual and asserted obligations to which we are or may be asserted to be subject, create new compliance obligations and substantially expand the scope of potential liability and provide greater penalties for non-compliance. For example, the GDPR provides for penalties of up to €20 million or 4% of a company’s annual global revenue, whichever is greater, the PIPL provides for penalties of up to 50 million renminbi or 5% of a company's annual revenue and disgorgement of all illegal gains, whichever is greater, and the CCPA provides for penalties of up to $7,500 per violation. These laws, regulations, and codes may also impact our innovation and business drivers in developing new and emerging technologies (e.g., AI and machine learning). These requirements, among others, may impact demand for our offerings and force us to bear the burden of expanded obligations in our contracts.
Previous wording
In addition, the CPRA and many other new state laws addressing privacy and information security, including those that have become or will become effective in 2025, provide for additional obligations such as data minimization and storage limitations, granting additional rights to consumers such as correction of personal information and additional opt-out rights. The CPRA also created a new agency to implement and enforce the law. These new state laws have required us to modify our data processing practices and policies and may cause us to make additional modifications, and to incur substantial costs and expenses, in our efforts to comply. Laws in all 50 states, and some of our contracts, require us to provide notice under certain circumstances to customers whose personal information has been disclosed as a result of a data breach. Also, if third parties we work with, such as suppliers, violate applicable data protection laws or regulations, such violations may also put our users’ information at risk and could materially adversely affect our business, financial condition, results of operations, and prospects. Additionally, in addition to government activity, privacy advocacy groups and technology and other industries are considering various new, additional, or different self-regulatory standards that may place, or be asserted to place, additional burdens on us. Evolving legislation and the interplay of federal and state laws may be subject to varying interpretations by courts and government agencies, creating complex compliance issues and have and may cause variation in requirements, increase restrictions and potential legal risk and impact strategies and the availability of previously useful data, potentially exposing us to additional expense, adverse publicity, and liability.
Current wording
In addition, the CPRA and many other recently enacted state laws addressing privacy and cybersecurity provide for additional obligations and grant additional rights to consumers such as correction of personal information and additional opt-out rights. These laws have required us to modify our data processing practices and policies and may cause us to make additional modifications, and to incur substantial costs and expenses, in our efforts to comply. Additionally, privacy advocacy groups and technology and other industries are considering various new, additional, or different self-regulatory standards that may place, or be asserted to place, additional burdens on us.
Previous wording
Governments, regulators, plaintiffs’ attorneys, and privacy advocates have increased their focus on how companies collect, use, store, share, transmit, and otherwise process personal data and personal information. Any perception of our practices, products, offerings, or services as a violation of individual privacy or data protection rights may subject us to public criticism, lawsuits, reputational harm, or investigations, claims, demands, or other proceedings by regulators, industry groups or other third parties, all of which could disrupt or adversely impact our business and expose us to fines, penalties, and other liabilities. Moreover, because the interpretation and application of many laws, regulations, and other actual and asserted obligations relating to privacy, data protection, and cybersecurity are uncertain, it is possible that these laws, regulations, and obligations may be interpreted and applied in a manner that is inconsistent with our practices or the features of our products, offerings, and services. We could be required to fundamentally change our business activities and practices or modify our offerings and services, any of which could require significant additional expense and adversely affect our business, including impacting our ability to innovate, delaying our development roadmap and adversely affecting our relationships with customers and our ability to compete. If we are obligated to fundamentally change our business activities and practices or modify our products, offerings, or services, we may be unable to make such changes and modifications in a commercially reasonable manner, or at all, and our ability to develop new products, offerings, and services could be limited.
Current wording
Governments, regulators, plaintiffs’ attorneys, and privacy advocates have increased their focus on how companies collect, use, store, share, transmit, and otherwise process personal data, personal information, and certain other data and information. Any perception of our practices, products, offerings, or services as violating of individual privacy or data protection rights, or failing to comply with obligations under laws or regulations relating to privacy, data protection, or cybersecurity, may subject us to public criticism, lawsuits, reputational harm, or investigations, claims, demands, or other proceedings by regulators, industry groups or other third parties, all of which could disrupt or adversely impact our business and expose us to fines, penalties, and other liabilities. Moreover, because the interpretation and application of many laws, regulations, and other actual and asserted obligations relating to privacy, data protection, cybersecurity, and the collection, use, security, and other processing of data and information are uncertain, it is possible that these laws, regulations, and obligations may be interpreted and applied in a manner that is inconsistent with our practices or the features of our products, offerings, and services. We could be required to fundamentally change our business activities and practices or modify our products, offerings, and services, any of which could require significant additional expense and adversely affect our business and results of operations, including impacting our ability to innovate, delaying our development roadmap, negatively impacting our efforts to understand our customers, limiting the effectiveness of our marketing activities, adversely affecting our relationships with customers and our ability to compete, harming our margins, and subjecting us to additional liabilities. If we are obligated to fundamentally change our business activities and practices or modify our products, offerings, or services, we may be unable to make such changes and modifications in a commercially reasonable manner, or at all, and our ability to develop new products, offerings, and services could be limited.
Previous wording
Our offerings are subject to export controls and economic sanctions laws and regulations that prohibit the delivery of certain solutions and services without the required export authorizations or the export to locations, governments, and persons targeted by applicable sanctions. While we have processes to prevent our offerings from being exported in violation of these laws, including obtaining authorizations as appropriate and screening against U.S. government and international lists of restricted and prohibited persons, we cannot guarantee that these processes will prevent all violations of export controls and sanctions laws and regulations.
Current wording
Our offerings are subject to export controls and economic sanctions laws and regulations that prohibit the delivery of certain solutions and services or the export of these solutions and services to locations, governments, and persons targeted by applicable sanctions without the required export authorizations. While we have processes to prevent our offerings from being exported in violation of these laws, including obtaining authorizations as appropriate and screening against U.S. government and applicable international lists of restricted and prohibited persons, we cannot guarantee that these processes will prevent all violations of export controls and sanctions laws and regulations.
Previous wording
We have $2.30 billion of principal debt, consisting of notes due at various times from June 2025 to December 2031, as of January 31, 2025, as described in Part II, Item 8. We also entered into a credit agreement that provides for an unsecured revolving loan facility in the aggregate principal amount of $1.5 billion, with an option to be increased up to $2.0 billion, as described in Part II, Item 8. Maintenance of our indebtedness, contractual restrictions, and additional issuances of indebtedness could:
Current wording
We have $2.50 billion of principal debt, consisting of notes due at various times from June 2027 to June 2035, as of January 31, 2026, as described in Part II, Item 8. In May 2025, we also entered into the 2025 Credit Agreement, which provides for an unsecured revolving loan facility in the aggregate principal amount of $1.5 billion, with an option to be increased up to $2 billion, subject to receipt of additional commitments and other customary conditions, as described in Part II, Item 8. Maintenance of our indebtedness, contractual restrictions, and additional issuances of indebtedness could:
Previous wording
We are required to comply with the covenants set forth in our credit agreement. If we breach any of the covenants and do not obtain a waiver from the note holders or lenders, then, subject to applicable cure periods, we would not be able to incur additional indebtedness under the credit agreement described in Part II, Item 8, and any outstanding indebtedness under the credit agreement may be declared immediately due and payable. In addition, changes by any rating agency to our credit rating may negatively impact the value and liquidity of our securities. Under certain circumstances, if our credit ratings are downgraded or other negative action is taken, the interest rate payable by us under our credit agreement could increase. Downgrades in our credit ratings could also restrict our ability to obtain additional financing in the future and could affect the terms of any such financing.
Current wording
We are required to comply with the covenants set forth in the 2025 Credit Agreement. If we breach any of the covenants and do not obtain a waiver from the lenders, then, subject to applicable cure periods, we would not be able to incur additional indebtedness under the 2025 Credit Agreement, and the lenders under the 2025 Credit Agreement could declare any outstanding indebtedness under the 2025 Credit Agreement immediately due and payable, which declaration could also lead to a default under agreements governing our outstanding senior notes and any future indebtedness. In addition, changes by any rating agency to our credit rating may negatively impact the value and liquidity of our securities. Under certain circumstances, if our credit ratings are downgraded or other negative action is taken, the interest rate payable by us under the 2025 Credit Agreement could increase. Downgrades in our credit ratings could also restrict our ability to obtain additional financing in the future and could affect the terms of any such financing.
Previous wording
We are a U.S.-based multinational company subject to tax in multiple U.S. and foreign tax jurisdictions. Our effective tax rate is primarily based on our geographic mix of earnings; statutory rates; stock-based compensation; intercompany arrangements, including the manner we develop, value, and license our intellectual property; and enacted tax rules. Significant judgment is required in determining our effective tax rate and in evaluating our tax positions on a worldwide basis. While we believe our tax positions, including intercompany transfer pricing policies, are consistent with the tax laws in the jurisdictions in which we conduct our business, it is possible that these positions may be challenged by tax authorities and, if our positions are not sustained, may have a significant impact on our effective tax rate and cash taxes.
Current wording
We are a U.S.-based multinational company subject to tax in multiple U.S. and foreign tax jurisdictions. Our effective tax rate is primarily based on our geographic mix of earnings; statutory rates; stock-based compensation; intercompany arrangements, including the manner in which we develop, value, and license our intellectual property; and enacted tax rules. Significant judgment is required in determining our effective tax rate and in evaluating our tax positions on a worldwide basis. While we believe our tax positions, including intercompany transfer pricing policies, are consistent with the tax laws in the jurisdictions in which we conduct our business, it is possible that these positions may be challenged by tax authorities and, if our positions are not sustained, may have a significant impact on our effective tax rate and cash taxes.
Previous wording
Increasingly, tax authorities are reviewing existing corporate tax regulatory and legal regimes. Many countries are actively considering or implementing new taxing regimes and changes to existing tax laws. This could include U.S. and foreign tax law developments related to changes to long-standing tax principles arising from proposals made by the Organisation for Economic Co-operation and Development that seek to allocate greater taxing rights to countries where customers are located and establish a global minimum tax rate of 15%. If U.S. or foreign tax authorities change applicable tax laws or successfully challenge how or where our profits are currently recognized, our overall taxes could increase, and our business, financial condition, or results of operations may be adversely impacted.
Current wording
Increasingly, tax authorities are reviewing existing corporate tax regulatory and legal regimes. Many countries are actively considering or implementing new taxing regimes and changes to existing tax laws. This could include U.S. and foreign tax law developments related to changes to long-standing tax principles arising from proposals made by the Organization for Economic Co-operation and Development (the “OECD”) that seek to allocate greater taxing rights to countries where customers are located and establish a global minimum tax rate of 15% (“Pillar Two”). On January 5, 2026, the OECD announced a“side-by-side” elective safe harbor that exempts U.S.-parented multinational entities from certain provisions of Pillar Two for fiscal years beginning on or after January 1, 2026. If U.S. or foreign tax authorities change applicable tax laws or successfully challenge how or where our profits are currently recognized, our overall taxes could increase, and our business, financial condition, or results of operations may be adversely impacted.
Previous wording
Our business is highly automated and relies extensively on the availability of our network and data center infrastructure, our internal technology systems, and our websites. We also rely on hosted computer services from third parties for services that we provide to our customers and computer operations for our internal use. The failure of our systems or hosted computer services due to a catastrophic event, such as an earthquake, fire, flood, tsunami, weather event, other climate-related events (such as drought, water security, heat waves, cold waves, and poor air quality), telecommunications failure, power failure, cyber-attack, terrorism or war (including the ongoing wars between Ukraine and Russia and between Israel and Hamas, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy), or business interruption from epidemics or pandemics, or the fear of such events, could adversely impact our business, financial results, and financial condition. For example, our corporate headquarters and executive offices are located near major seismic faults in the San Francisco Bay Area and face annual periods of wildfire danger, which increase the probability of power outages and may impact employees’ abilities to commute to work or to work from home. We have developed disaster recovery plans and maintain backup systems in order to reduce the potential impact of a catastrophic event; however, there can be no assurance that these plans and systems would enable us to return to normal business operations. In addition, any such event could negatively impact a country or region in which we sell our products. This could in turn decrease that country’s or region’s demand for our products, negatively impacting our financial results.
Current wording
Our business is highly automated and relies extensively on the availability of our network and data center infrastructure, our internal technology systems, and our websites. We also rely on hosted computer services from third parties for services that we provide to our customers and computer operations for our internal use. The failure of our systems or hosted computer services due to a catastrophic event, such as an earthquake, fire, flood, tsunami, weather event, other climate-related events (such as drought, water security, heat waves, cold waves, and poor air quality), telecommunications failure, power failure, cyber-attack, terrorism or war (including the ongoing wars between Ukraine and Russia and conflicts in the Middle East, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy), or business interruption from epidemics or pandemics, or the fear of such events, could adversely impact our business, financial results, and financial condition. For example, our corporate headquarters and executive offices are located near major seismic faults in the San Francisco Bay Area and face annual periods of wildfire danger, which increase the probability of power outages and may impact employees’ abilities to commute to work or to work from home. We have developed disaster recovery plans and maintain backup systems in order to reduce the potential impact of a catastrophic event; however, there can be no assurance that these plans and systems would enable us to return to normal business operations. In addition, any such event could negatively impact a country or region in which we sell our products. This could in turn decrease that country’s or region’s demand for our products, negatively impacting our financial results.
Previous wording
We make assumptions, judgments, and estimates for a number of items, including revenue recognition for product subscriptions and enterprise business arrangements (“EBAs”), the determination of the fair value of acquired assets and liabilities, goodwill, financial instruments including strategic investments, long-lived assets, and intangible assets, the realizability of deferred tax assets, and the fair value of stock awards. We also make assumptions, judgments, and estimates in determining the accruals for uncertain tax positions, variable compensation, partner incentive programs, allowances for credit losses, asset retirement obligations, legal contingencies, and operating lease liabilities. These assumptions, judgments, and estimates are drawn from historical experience and various other factors that we believe are reasonable under the circumstances as of the date of the consolidated financial statements. Actual results could differ materially from our estimates, and such differences could significantly impact our financial results.
Current wording
We make assumptions, judgments, and estimates for a number of items, including revenue recognition for product subscriptions and enterprise business agreements (“EBAs”), the determination of the fair value of acquired assets and liabilities, and the realizability of deferred tax assets. We also make assumptions, judgments, and estimates in determining the accruals for uncertain tax positions, variable compensation, partner incentive programs, loss contingencies, and operating lease liabilities. These assumptions, judgments, and estimates are drawn from historical experience and various other factors that we believe are reasonable under the circumstances as of the date of the consolidated financial statements. Actual results could differ materially from our estimates, and such differences could significantly impact our financial results.
Rearranged current paragraphs (3)
Current report — wording carried from elsewhere
Furthermore, a reduction in the number and availability of compatible third-party applications or our inability to rapidly adapt to technological and customer preference changes, including those related to cloud computing, mobile devices, and new computing platforms, may adversely affect the sale of our solutions. Because of these and other factors, competitive conditions in the industry are likely to intensify in the future. Increased competition could result in price reductions, reduced net revenue and profit margins, and loss of market share, any of which would likely harm our business.
Current report — wording carried from elsewhere
There is currently significant uncertainty about the future relationship between the United States and its trading partners with respect to trade policies, tariffs, taxes, and similar policies affecting cross-border operations. These new or increased tariffs and other changes in U.S. trade policy, including new sanctions and increased export restrictions, have triggered and could continue to trigger retaliatory actions by affected countries, including Canada, China, Russia, and others, that have instituted, considered, or are considering imposing new or increased tariffs, export controls, and other trade sanctions targeting certain U.S. persons or U.S.-manufactured goods. These retaliatory measures could include responses such as the imposition of new or increased digital services taxes. The escalation of protectionist or retaliatory trade measures in either the United States or any other countries in which we do business, such as additional sanctions, a change in tariff structures, increased export controls, or other trade policies, may increase the cost of, or otherwise interfere with, the conduct of our business, and could have a material adverse effect on our financial condition, operations, and business outlook.
Current report — wording carried from elsewhere
Evolving legislation and the interplay of federal and state laws may be subject to varying interpretations by courts and government agencies, creating complex compliance issues. These, as well as conflicting obligations imposed by laws and regulations in various jurisdictions around the world, have caused and may cause variation in requirements, increase restrictions and potential legal risk and impact strategies and the availability of, and our ability to process, previously useful data, potentially exposing us to additional expense, adverse publicity, and liability.
Rearranged previous paragraphs (1)
Previous report — wording carried elsewhere
AI, slow adoption of AI in our products and services, and subject us to claims, demands, and proceedings from private actors, regulatory investigations and other proceedings by regulatory authorities, and fines, penalties, and other liabilities.