INTUIT INC.

Previous wording

Our businesses routinely encounter and address risks, many of which could cause our future results to be materially different than we presently anticipate. Below, we describe significant factors, events and uncertainties that make an investment in our securities risky, categorized solely for ease of reference as strategic, operational, legal and compliance, and financial risks. The following events and consequences could have a material adverse effect on our business, growth, prospects, financial condition, results of operations, cash flows, liquidity, reputation and credit rating, and the trading price of our common stock could decline. We could also be affected by other events, factors or uncertainties that are presently unknown to us or that we do not currently consider to present significant risks to our business. These risks may be amplified by the effects of global developments and conditions or events, including macroeconomic and geopolitical conditions, which have caused significant global economic instability and uncertainty.

Current wording

Our businesses routinely encounter and address risks, many of which could cause our future results to be materially different than we presently anticipate. Below, we describe material factors, events and uncertainties that make an investment in our securities speculative or risky, categorized solely for ease of reference as strategic, operational, legal and compliance, and financial risks, and which you should consider carefully in evaluating our business. The following events and consequences could have a material adverse effect on our business, growth, prospects, financial condition, results of operations, cash flows, liquidity, reputation and credit rating, and the trading price of our common stock could decline. Some of the factors, events, and uncertainties discussed below may have occurred in the past. However, these disclosures are not representations as to whether or not the factors, events or uncertainties have occurred in the past, instead they reflect our beliefs and opinions as to the factors, events or uncertainties that could materially and adversely affect us in the future. We could also be affected by other events, factors or uncertainties that are presently unknown to us or that we do not currently consider to present significant risks to our business. These risks may be amplified by the effects of global developments and conditions or events, including macroeconomic and geopolitical conditions, which have caused significant global economic instability and uncertainty. Therefore, you should not consider the following risks to be a complete statement of all the potential risks or uncertainties that we face.

Previous wording

We face intense competition in all of our businesses, and we expect competition to continue to intensify in the future. Our competitors and potential competitors range from large and established entities to emerging start-ups. Our competitors may introduce superior products and services, successfully use and deploy new technologies such as artificial intelligence (AI) that may reduce customer demand for our products or services, reduce prices, have greater technical, marketing and other resources, have greater name recognition, have larger installed bases of customers, have well-established relationships with our current and potential customers, advertise aggressively or beat us to market with new products and services. In addition, we face competition from existing companies with large established consumer user bases and broad-based platforms, who may change or expand the focus of their business strategies and marketing to target our customers, including small businesses, tax and personal financial management customers.

Current wording

We face intense competition in all of our businesses, and we expect competition to continue to intensify in the future. Our competitors and potential competitors range from large and established entities to emerging start-ups. Our competitors may introduce superior products and services, successfully use and deploy new technologies such as AI that may reduce customer demand for our products or services, reduce prices, have greater technical, marketing and other resources, have greater name recognition, have larger installed bases of customers, have well-established relationships with our current and potential customers and partners, advertise aggressively or beat us to market with new products and services. In addition, we face competition from existing companies with large established consumer user bases and broad-based platforms, who may change or expand the focus of their business strategies and marketing to target our customers, including small businesses, tax and personal financial management customers.

Previous wording

Our consumer tax business also faces significant, increasing competition from the public sector, where we face the risk of federal and state taxing authorities implementing revenue-raising strategies that involve developing and providing government tax software or other government return preparation systems at public expense. These or similar programs have been and may continue to be introduced or expanded in the future, which may change the voluntary compliance tax system in ways that could cause us to lose customers and revenue. For example, the IRS has stated that it will make a free direct filing system, which it piloted in 2024, a permanent option in 2025 and will explore ways to expand eligibility for the program, including partnering with more states. Additionally, the legacy IRS Free File Program enables the IRS to offer free commercial tax software directly to qualifying taxpayers, and taxpayer adoption of this program could expand with increased awareness of and government support for the program.

Current wording

Our consumer tax business also faces significant, increasing competition from the public sector, where we face the risk of federal and state taxing authorities implementing revenue-raising strategies that involve developing and providing government tax software or other government return preparation systems at public expense. These or similar programs have been and may continue to be introduced or expanded in the future, which may change the voluntary compliance tax system in ways that could cause us to lose customers and revenue. For example, the IRS made available a free direct filing system and has stated it will explore ways to expand eligibility for the program, including partnering with more states. Additionally, the legacy IRS Free File Program enables the IRS to offer free commercial tax software directly to qualifying taxpayers, and taxpayer adoption of this program could expand with increased awareness of and government support for the program.

Previous wording

enhance our ability to solve customer problems with emerging technologies, such as artificial intelligence. If we are not able to do this successfully, we may face a competitive disadvantage. We have and will continue to devote significant resources to continue to develop our skills, tools and capabilities to capitalize on existing and emerging technologies, including artificial intelligence. There can be no assurance that we or our customers will realize the expected benefits from these investments. Legislation or regulatory changes in these areas may mandate changes in our products that make them less attractive to users and hinder our ability to leverage emerging technologies and build out our platform capabilities.

Current wording

We operate in industries that are characterized by rapidly changing technology, evolving industry standards and frequent new product introductions. To meet the evolving needs and expectations of our customers and partners and attract and retain top technical talent, we must continue to innovate, develop and extend our platform, introduce new products, services, and features, and enhance our ability to anticipate and solve new and existing customer problems, including with emerging technologies, such as AI. If we are not able to do this successfully, we may face a competitive disadvantage and our business could be harmed. We have and will continue to devote significant resources to continue to develop our skills, tools and capabilities to capitalize on existing and emerging technologies, including AI. There can be no assurance that we or our customers will realize the expected benefits from these investments. Legislation or regulatory changes in these areas may mandate changes in our products that make them less attractive to users and hinder our ability to leverage emerging technologies and build out our platform capabilities.

Previous wording

Our consumer and professional tax businesses depend significantly on revenue from customers who return each year to use our updated tax preparation and filing software and services, including customers who use our free consumer tax products and whose tax scenarios evolve in subsequent years to require paid services. Encouraging customers to continue using our products in successive years can become more challenging unless new product releases provide features and functionality that have meaningful incremental value. As we continue to introduce and expand our new business models our customers may not perceive value in the additional benefits and services we offer and may choose not to pay for those additional benefits or we may be unsuccessful in increasing customer adoption of these offerings or our risk profile may change, resulting in loss of revenue.

Current wording

Our consumer and professional tax businesses depend significantly on revenue from customers who return each year to use our updated tax preparation and filing software and services. They include customers who use our free consumer tax products and whose tax scenarios evolve in subsequent years to require paid services. Encouraging continued use of our offerings in successive years can become increasingly difficult if customers do not perceive our offerings to provide continuing or meaningfully l incremental value. The growth of our business depends, in part, on our ability to successfully provide customers value in this way.

Previous wording

When customers consent to the use of their data across our platform, we work to provide additional benefits to them through our existing offerings and the creation of new products and services. The growth of our business depends, in part, on our ability to successfully provide customers value in this way. If we are unable to clearly demonstrate the value of these new or upgraded products or services, our ability to build new data-driven products and services may be limited and our revenues may be harmed.

Current wording

In addition, when customers consent to the use of their data across our platform, we work to provide additional benefits to them through our existing offerings and through the development of new offerings. Our inability to demonstrate value of any of these offerings to existing customers may negatively impact our ability to build new data-driven offerings and our revenue.

Previous wording

In some cases, we may expend a significant amount of resources and management attention on offerings that do not ultimately succeed in their markets. We have encountered difficulty in launching new products and services in the past. If we misjudge customer needs in the future, our new products and services may not succeed and our revenues and earnings may be harmed. We have also invested, and in the future, expect to invest in new business models, technologies, geographies, strategies and initiatives. Such endeavors may involve significant risks and uncertainties, including a rapidly changing regulatory environment, distraction of management from current operations, expenses associated with the initiatives, inadequate return on investments, and social or ethical scrutiny. Because these new initiatives are inherently risky, they may not be successful and may harm our financial condition, operating results, or reputation.

Current wording

We may expend a significant amount of resources and management attention on offerings that do not ultimately succeed in their markets. We have encountered difficulty in launching new offerings in the past. If we misjudge customer needs in the future, our new offerings may not succeed and our revenues and earnings may be harmed. We have also invested, and in the future, expect to invest in new business models, technologies, geographies, strategies and initiatives. Such endeavors may involve significant risks and uncertainties, including a rapidly changing regulatory environment, diversion of management's attention from current operations, expenses associated with the initiatives, inadequate return on investments, and social or ethical scrutiny. Because these new initiatives are inherently risky, they may not be successful and may harm our financial condition, operating results, or reputation.

Previous wording

Many of our products and services include our own intellectual property, as well as the intellectual property of third parties, which we license under agreements that may need to be renewed or renegotiated from time to time. We may not be able to obtain licenses to these third-party technologies or content on reasonable terms, or at all. If we are unable to obtain the rights necessary to use this intellectual property in our products and services, we may not be able to provide the affected offerings, and customers who are currently using the affected product may be disrupted, which may in turn harm our future financial results, damage our brand, and result in customer loss. Also, we and our customers have been and may continue to be subject to infringement claims as a result of the third-party intellectual property incorporated in our offerings, including through our use of AI. Although we try to mitigate this risk and we may not be ultimately liable for any potential infringement, pending claims require us to use significant resources, require management attention and could result in loss of customers.

Current wording

Many of our products and services utilize our own intellectual property, as well as the intellectual property of third parties, which we license under agreements that may need to be renewed or renegotiated from time to time. We may not be able to obtain licenses to these third-party technologies or content on reasonable terms, or at all, in the future. If we are unable to obtain the rights necessary to use certain intellectual property in our products and services, we may not be able to provide the affected offerings, and customers who are currently using the affected product may be disrupted, which may in turn harm our future financial results, damage our brand, and result in customer loss. Also, we and our customers have been and may continue to be subject to infringement claims as a result of the third-party intellectual property incorporated in our offerings, including through our use of AI. If an infringement claim is successfully asserted against us, it could require us to pay substantial damages or ongoing royalty payments, prevent us from offering our services, require us to change our products, technology, or business practices, or require our compliance with other unfavorable contractual terms. Even if we are not ultimately liable for any potential infringement, pending claims require us to use significant resources, require management attention and could result in loss of customers.

Previous wording

Some of our offerings include third-party software that is licensed under “open source” licenses, some of which may include a requirement that, under certain circumstances, we make available, or grant licenses to, any modifications or derivative works we create based upon the open source software. Although we have established internal review and approval processes to mitigate these risks, we cannot be sure that all open source software is submitted for approval prior to use in our products. Many of the risks associated with usage of open source may not be eliminated and, if not properly addressed, may harm our business.

Current wording

Some of our offerings include third-party software that is licensed under “open source” licenses, some of which may include a requirement that, under certain circumstances, we make available, or grant licenses to, any modifications or derivative works we create based upon the open source software. Our established internal review and approval processes may not mitigate these risks, and we cannot be sure that all open source software is submitted for approval prior to use in our products. Our inability to mitigate the risks associated with the usage of open source software may harm our business.

Previous wording

Our patents, trademarks, trade secrets, copyrights, domain names and other intellectual property rights are important assets for us. We aggressively protect our intellectual property rights by relying on federal, state and common law rights in the U.S. and internationally, as well as a variety of administrative procedures. We also rely on contractual restrictions to protect our proprietary rights in products and services. The efforts that we take to protect our proprietary rights may not always be sufficient or effective. In addition, there is uncertainty about the validity and enforceability of intellectual property rights that may result from our use of generative AI. Protecting our intellectual property rights is costly and time consuming and may not be successful in every location. Any significant impairment of our intellectual property rights could harm our business, our brand, and our ability to compete.

Current wording

Our patents, trademarks, trade secrets, copyrights, domain names and other intellectual property rights are important assets for us. We aggressively protect our intellectual property rights by relying on federal, state and common law rights in the U.S. and internationally, as well as a variety of administrative procedures and contractual restrictions. However, the efforts that we take to protect our proprietary rights, including through litigation, monitoring, and enforcement programs, may not always be sufficient or effective. We often observe unauthorized copies of our software being sold through online marketplaces, and despite our effort to implement technical countermeasures, we expect piracy to continue to remain a persistent problem that results in lost revenue and increased expenses. In addition, there is uncertainty about the validity and enforceability of intellectual property rights that may result from our use of GenAI. Protecting our intellectual property rights is costly and time consuming and may not be successful in every location. Any significant impairment of our intellectual property rights could harm our business, our brand, and our ability to compete.

Previous wording

Developing and maintaining awareness of our brands and platform strategy is critical to achieving widespread acceptance of our existing and future products and services and is an important element in attracting new customers and expanding our business with existing customers. Adverse publicity (whether or not justified) relating to events or activities attributed to us, members of our workforce, agents, third parties we rely on, or our users, may tarnish our reputation and reduce the value of our brands. Perceived social harm or unfairness of outcomes relating to the use of new and evolving technologies such as AI in our offerings, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. Our brand value also depends on our ability to provide secure and trustworthy products and services, as well as our ability to protect and use our customers’ data in a manner that meets their expectations. In addition, a security incident that results in unauthorized disclosure of our customers’ sensitive data could cause material reputational harm. Damage to our reputation and loss of brand equity may reduce demand for our products or services and thus have an adverse effect on our future financial results, as well as require additional resources to rebuild our reputation and restore the value of the brands and could also reduce our stock price.

Current wording

Developing and maintaining awareness of our brands and platform strategy is critical to achieving widespread acceptance of our existing and future products and services and is an important element in attracting new customers and expanding our business with existing customers. Adverse publicity (whether or not justified) relating to events, activities, or views attributed to us, members of our workforce or Board of Directors, agents, third parties we rely on, or our users, may tarnish our reputation and reduce the value of our brands. Perceived social harm or unfairness of outcomes relating to the use of new and evolving technologies such as AI in our offerings, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. Our brand value also depends on our ability to provide secure and trustworthy products and services, as well as our ability to protect and use our customers’ data in a manner that meets their expectations. In addition, a security incident that results in unauthorized disclosure of our customers’ sensitive data could cause material reputational harm. Damage to our reputation and loss of brand equity may reduce demand for our products or services and thus have an adverse effect on our future financial results, as well as require additional resources to rebuild our reputation and restore the value of the brands and could also reduce our stock price.

Previous wording

Our environmental, social and governance efforts are subject to numerous risks that may be outside of our control, including our ability to recruit, develop and retain the talent we need, evolving regulatory requirements, and the ability of our suppliers to meet our requirements and standards. In addition, standards for tracking and reporting these matters continue to evolve and we may not be able to implement new and changing standards in ways that meet the expectations of all of our stakeholders. Our failure or perceived failure to meet evolving stakeholder expectations could harm our reputation, adversely impact our ability to attract and retain employees or customers, and expose us to increased scrutiny from the investment community and enforcement authorities. Our reputation also may be harmed by negative perceptions that our customers, employees and other stakeholders may have about our action or inaction on social, ethical, or political issues.

Current wording

Environmental, social and governance matters continue to be an area of focus for shareholders, regulators, customers, employees, and other stakeholders. Our efforts and reporting on these matters expose us to risks that could adversely affect our reputation, operations, and performance. This could happen if we fail, or are perceived to fail, to meet evolving stakeholder expectations or varying state or federal regulatory requirements, or to uphold or achieve our public commitments. Standards and best practices for tracking and reporting these matters continue to evolve and we may not be able to implement new and changing standards and best practices in ways that meet the varied expectations of all of our stakeholders. Any of the foregoing may also expose us to increased scrutiny from stakeholders and negatively impact demand for our products, our ability to attract and retain talent or our relationships with customers, suppliers or other stakeholders.

Previous wording

In addition, any acquisition or divestiture that we announce may not be completed if closing conditions are not satisfied. Evolving regulatory expectations may make it more challenging to obtain any required regulatory approval. Because acquisitions and divestitures are inherently risky, our transactions may not be successful and may, in some cases, harm our operating results or financial condition. In particular, if we are unable to successfully operate together with any company that we acquire to achieve shared growth opportunities or combine reporting or other processes within the expected time frame or at all, there may be a material and adverse effect on the benefits that we expect to achieve as a result of the acquisition, and we could experience additional costs or loss of revenue. Moreover, adverse changes in market conditions and other factors, including those listed above, may cause an acquisition to be dilutive to Intuit’s operating earnings per share for a period of time. Any dilution of our non-GAAP diluted earnings per share could cause the price of shares of Intuit Common Stock to decline or grow at a reduced rate.

Current wording

In addition, any acquisition or divestiture that we announce may not be completed if closing conditions are not satisfied. Evolving regulatory expectations and changes in the political environment may make it more challenging to obtain any required regulatory approval. Because acquisitions and divestitures are inherently risky, our transactions may not be successful and may, in some cases, harm our operating results or financial condition. In particular, if we are unable to successfully operate together with any company that we acquire to achieve shared growth opportunities or combine reporting or other processes within the expected time frame or at all, there may be a material and adverse effect on the benefits that we expect to achieve as a result of the acquisition, and we could experience additional costs or loss of revenue. Moreover, adverse changes in market conditions and other factors, including those listed above, may cause an acquisition to be dilutive to Intuit’s operating earnings per share for a period of time. Any dilution of our non-GAAP diluted earnings per share could cause the price of shares of Intuit Common Stock to decline or grow at a reduced rate.

Previous wording

We host, collect, use and retain large amounts of sensitive and personal customer and workforce data, including credit card information, tax return information, bank account numbers, credit report information, login credentials and passwords, personal and business financial data and transactions data, social security numbers and payroll information, as well as our confidential, nonpublic business information. Although we expend significant resources to implement security protections designed to shield this data against potential theft and security incidents, such measures cannot provide absolute security.

Current wording

We host, collect, use and retain large amounts of sensitive and personal customer and workforce data, including credit card information, tax return information, bank account numbers, credit report information, login credentials and passwords, personal and business financial data, transaction records, social security numbers and payroll information, as well as our confidential, nonpublic business information. The significant resources we expend to implement security protections designed to shield this data against potential theft and security incidents cannot provide absolute security.

Previous wording

Our technologies, systems, and networks have been subject to, and are increasingly likely to continue to be the target of, cyberattacks, computer viruses, ransomware or other malware, worms, social engineering, malicious software programs, insider threats, denial-of-service attacks and other cybersecurity threats that have in the past, and could in the future, result in the unauthorized release, gathering, monitoring, use, loss or destruction of sensitive and personal data of our customers and our workforce, or Intuit's sensitive business data or cause temporary or sustained unavailability of our data, software, and systems. Cybersecurity incidents can be caused by malicious third parties, acting alone or in groups, or more sophisticated organizations, including nation-states or state-sponsored organizations, and the risks could be elevated in connection with significant armed conflicts, acts of war or terrorism. Customers who fail to update their systems, continue to run software that we no longer support, fail to install security patches on a timely basis or inadequately use security controls create vulnerabilities and make it more difficult for us to detect and prevent these kinds of attacks. We are increasingly incorporating open source software into our products, and there may be vulnerabilities in open source software that make it susceptible to cyberattacks. In addition, techniques used to obtain unauthorized access to sensitive information change frequently and, as technologies like AI develop rapidly, malicious third parties are using these technologies to create new sophisticated attack methods that are increasingly automated, targeted and coordinated and more difficult to defend against. We have and may in the future be a more frequent target of cyberattacks because cyber-criminals tend to focus their efforts on well-known offerings that are popular among customers and hold sensitive personal or financial information.

Current wording

Our technologies, systems, and networks have been subject to, and are increasingly likely to continue to be the target of, cyberattacks, computer viruses, ransomware or other malware, worms, social engineering, malicious software programs, insider threats, denial-of-service attacks and other cybersecurity threats that have in the past, and could in the future, result in the unauthorized release, gathering, monitoring, use, loss or destruction of sensitive and personal data of our customers and our workforce, or Intuit's sensitive business data or cause temporary or sustained unavailability of our data, software, and systems. Cybersecurity incidents can be caused by malicious third parties, acting alone or in groups, or more sophisticated organizations, including nation-states or state-sponsored organizations, and the risks could be elevated in connection with significant armed conflicts, acts of war or terrorism. Customers who fail to update their systems, continue to run software that we no longer support, fail to install security patches on a timely basis or inadequately use security controls create vulnerabilities and make it more difficult for us to detect and prevent these kinds of attacks. Further, we are increasingly incorporating open source software into our products, and there may be vulnerabilities in open source software that make it susceptible to cyberattacks. In addition, techniques used to obtain unauthorized access to sensitive information change frequently and, as technologies like AI develop rapidly, malicious third parties are using these technologies to create new sophisticated attack methods that are increasingly automated, targeted and coordinated and more difficult to defend against. We have been and may in the future be a more frequent target of cyberattacks because cyber-criminals tend to focus their efforts on well-known offerings that are popular among customers and hold sensitive personal or financial information.

Previous wording

Criminals may also use stolen identity information obtained outside of our systems to gain unauthorized access to our customers’ data. We have experienced such instances in the past and as the accessibility of stolen identity information increases, generally, we may experience further instances of unauthorized access to our systems through the use of stolen identity information of our customers or our workforce in the future. Further, our customers may choose to use the same login credentials across multiple products and services unrelated to our products. Such customers’ login credentials may be stolen from products offered by third-party service providers unrelated to us and the stolen identity information may be used by a malicious third party to access our products, which could result in disclosure of confidential information. In addition, our hybrid

Current wording

Criminals may also use stolen identity information obtained outside of our systems to gain unauthorized access to our customers’ data. We have experienced such instances in the past and as the broader accessibility of stolen identity information increases, we may experience further instances of unauthorized access to our systems through the use of stolen identity information of our customers or our workforce in the future. Further, our customers may choose to use the same login credentials across multiple products and services unrelated to our products. Such customers’ login credentials may be stolen from products offered by third-party service providers unrelated to us and the stolen identity information may be used by a malicious third party to access our products, which could result in disclosure of confidential information. In addition, our hybrid

Previous wording

workplace model, where our workforce spends a portion of their time working remotely, increases the potential attack surfaces and introduces operational complexity that exacerbates our security-related risks.

Current wording

workplace model, where our workforce spends a portion of their time working away from our offices, increases the potential for attacks and adds operational complexity that exacerbates our security-related risks.

Previous wording

Additionally, Credit Karma is subject to an order issued in 2014 by the Federal Trade Commission (FTC) that, among other things, requires maintenance of a comprehensive security program relating to the development and management of new and existing products and services and biennial independent security assessments for 20 years from the date of the order. Credit Karma’s failure to fulfill the requirements of the FTC’s order could result in fines, penalties, enforcement inquiries, investigations and claims, and negatively impact our business and reputation.

Current wording

Additionally, our use of Credit Karma member data is subject to an order issued in 2014 by the Federal Trade Commission (FTC) that, among other things, requires maintenance of a comprehensive security program relating to the development and management of new and existing products and services and biennial independent security assessments for 20 years from the date of the order. Our failure to fulfill the requirements of the FTC’s order could result in fines, penalties, enforcement inquiries, investigations and claims, and negatively impact our business and reputation.

Previous wording

While we conduct background checks of our workforce, conduct reviews of partners, developers and vendors and use commercially available technologies to limit access to systems and data, it is possible that malicious third parties may misrepresent their intended use of data or may circumvent our controls, resulting in accidental or intentional disclosure or misuse of our customer or workforce data. Further, while we conduct due diligence on the security and business controls of our third-party partners, we may not have the ability to effectively monitor or oversee the implementation of these control measures. Malicious third parties may be able to circumvent these security and business controls or exploit vulnerabilities that may exist in these controls, resulting in the disclosure or misuse of sensitive business and personal customer or workforce information and data. In addition, malicious actors may attempt to use the information technology supply chain to compromise our systems by, for example, introducing malware through software updates. This risk is exacerbated with the advancement of technologies like AI, which malicious third parties are using to create new, sophisticated and more frequent attacks on our third-party partners.

Current wording

It is possible that malicious third parties may misrepresent their intended use of data or may circumvent our controls, resulting in accidental or intentional disclosure or misuse of our customer or workforce data, despite our efforts to conduct background checks of our workforce, conduct reviews of partners, developers, and vendors and use commercially available technologies to limit access to systems and data. Further, while we conduct due diligence on the security and business controls of our third-party partners, we may not have the ability to effectively monitor or oversee the implementation of these control measures. Malicious third parties may be able to circumvent these security and business controls or exploit vulnerabilities that may exist in these controls, resulting in the disclosure or misuse of sensitive business and personal customer or workforce information and data. In addition, malicious actors may attempt to use the information technology supply chain to compromise our systems by, for example, introducing malware through software updates. This risk is exacerbated with the advancement of technologies like AI, which malicious third parties are using to create new, sophisticated and more frequent attacks on our third-party partners.

Previous wording

A security incident involving third parties we rely on may have serious negative consequences for our businesses, including disclosure of sensitive customer or workforce data, or confidential or competitively sensitive information regarding our business, including intellectual property and other proprietary data; make our products more vulnerable to fraudulent activity; cause temporary or sustained unavailability of our software and systems; result in possible litigation, fines, penalties and damages; result in loss of customer confidence; cause material harm to our reputation and brands; lead to further regulation and oversight by federal or state agencies; cause adverse financial condition; and result in a reduced stock price.

Current wording

A security incident involving third parties we rely on may have serious negative consequences for our businesses, including disclosure of sensitive customer or workforce data, or confidential or competitively sensitive information regarding our business, including intellectual property and other proprietary data; make our products more vulnerable to fraudulent activity; cause temporary or sustained unavailability of our software and systems; result in possible litigation, fines, penalties and damages; result in loss of customer confidence; cause material harm to our reputation and brands; lead to further regulation and oversight by federal or state agencies; result in an adverse financial condition; and result in a reduced stock price.

Previous wording

Concerns about the current cybersecurity environment, generally, could deter current and potential customers from adopting our products and services and damage our reputation.

Current wording

Concerns about the broader cybersecurity environment could deter current and potential customers from adopting our products and services and damage our reputation.

Previous wording

The continued occurrence of cybersecurity incidents affecting governments, businesses and consumers in general indicates that we operate in an external environment where cybersecurity incidents are becoming increasingly common. If the global cybersecurity environment worsens, and there are increased instances of security breaches of third-party offerings where consumers’ data and sensitive information is compromised, consumers may be less willing to use online offerings, particularly offerings like ours in which customers often share sensitive financial data. Additionally, political uncertainty and military actions may subject us and our service providers to heightened risks of security incidents. In addition, the increased availability of data obtained as a result of cybersecurity incidents affecting third-party offerings could make our own products more vulnerable to fraudulent activity. Even if our products are not affected directly by such incidents, any such incident could damage our reputation and deter current and potential customers from adopting our products and services or lead customers to cease using online and connected software products to transact financial business altogether.

Current wording

The continued occurrence of cybersecurity incidents affecting governments, businesses and consumers in general indicates that we operate in an external environment where cybersecurity incidents are increasingly more common and frequent. If the global cybersecurity environment worsens, and there are increased instances of security breaches of third-party offerings where consumers’ data and sensitive information is compromised, consumers may be less willing to use online offerings, particularly offerings like ours in which customers often share sensitive financial data. Additionally, political uncertainty and military actions may subject us and our service providers to heightened risks of security incidents. In addition, the increased availability of data obtained as a result of cybersecurity incidents affecting third-party offerings could make our own products more vulnerable to fraudulent activity. Even if our products are not affected directly by such incidents, any such incident could damage our reputation and deter current and potential customers from adopting our products and services or lead customers to cease using online and connected software products to transact financial business altogether.

Previous wording

Many of the industries in which we operate have been experiencing an increasing amount of fraudulent activities by malicious third parties, and those fraudulent activities are becoming increasingly sophisticated. We have been and may from time to time become targeted by such malicious third parties engaging in fraudulent activities. Any such fraudulent activities may adversely impact our tax, payroll, payments, lending, marketing automation and personal financial management businesses, and the risk is heightened when our workforce is working remotely under our hybrid work model. In addition to any losses that may result from such fraud, which may be substantial, a loss of confidence by our customers or by governmental agencies in our ability to prevent fraudulent activity may seriously harm our business and damage our brand. If we cannot adequately combat such fraudulent activity, governmental authorities may refuse to allow us to continue to offer the affected services, or these services may otherwise be adversely impacted, which could include federal or state tax authorities refusing to allow us to process our customers’ tax returns electronically, resulting in a significant adverse impact on our business, earnings, and revenue. As fraudulent activities become more pervasive and increasingly sophisticated, our fraud detection and prevention measures must become correspondingly more complex to combat them across the various industries in which we operate. Accordingly, we have implemented and may continue to implement risk control mechanisms that could make it more difficult for legitimate customers to obtain and use our products. These control mechanisms could result in lost revenue and negatively impact our earnings.

Current wording

Many of the industries in which we operate have been experiencing an increasing amount of fraudulent activities by malicious third parties, and those fraudulent activities are becoming increasingly sophisticated, including through the use of AI. We have been and may from time to time become targeted by such malicious third parties engaging in fraudulent activities. Any such fraudulent activities may adversely impact our business, and the risk is heightened when our workforce is working away from our offices under our hybrid work model. In addition to any losses that may result from such fraud, which may be substantial, a loss of confidence by our customers or by governmental agencies in our ability to prevent fraudulent activity may seriously harm our business and damage our brand. If we cannot adequately combat such fraudulent activity, governmental authorities may refuse to allow us to continue to offer the affected services, or these services may otherwise be adversely impacted, which could include federal or state tax authorities refusing to allow us to process our customers’ tax returns electronically, resulting in a significant adverse impact on our business, earnings, and revenue. As fraudulent activities become more pervasive and increasingly sophisticated, our fraud detection and prevention measures, and the teams that create and maintain them, must become correspondingly more sophisticated to combat them across the various industries in which we operate. Accordingly, we have implemented and may continue to implement risk control mechanisms that could make it more difficult for legitimate customers to obtain and use our products. These control mechanisms could result in lost revenue and negatively impact our earnings.

Previous wording

Our operations process a significant volume and dollar value of transactions on a daily basis, especially in our money and personal financial management businesses. Despite our efforts to ensure that effective processing systems and controls are in place to handle transactions appropriately, it is possible that we may make errors or that funds may be misappropriated due to fraud. The likelihood of any such error or misappropriation is magnified as we increase the volume and speed of the transactions we process. If we are unable to effectively manage our systems and processes, or if there is an error in our products, we may be unable to process customer data in an accurate, reliable and timely manner, which may harm our reputation, the willingness of customers to use our products, and our financial results. In our payments processing service business, if a disputed transaction between a merchant and its customer is not resolved in favor of the merchant, we may be required to pay those amounts to the payment or credit card network and these payments may exceed the amount of the customer reserves established to make such payments.

Current wording

Our operations process a significant volume and dollar value of transactions on a daily basis, especially in our money and personal financial management businesses. It is possible that we may make errors or that funds may be misappropriated due to fraud despite our efforts to ensure that effective processing systems and controls are in place to handle transactions appropriately. The likelihood of any such error or misappropriation is magnified as we increase the volume and speed of the transactions we process. If we are unable to effectively manage our systems and processes, or if there is an error in our products, we may be unable to process customer data in an accurate, reliable and timely manner, which may harm our reputation, the willingness of customers to use our products, and our financial results. In our payments processing service business, if a disputed transaction between a merchant and its customer is not resolved in favor of the merchant, we may be required to pay those amounts to the payment or credit card network and these payments may exceed the amount of the customer reserves established to make such payments.

Previous wording

Our business operations, information technology and communications systems are vulnerable to damage or interruption from natural disasters, effects of climate change, human error, malicious attacks, fire, power loss, telecommunications failures, computer viruses and malware, computer denial of service attacks, terrorist attacks, public health emergencies and other events beyond our control. For example, we operate under a hybrid workplace model where our workforce spends a portion of their time working in our offices and a portion of their time working remotely. This model has introduced risks of disruptions to our operations, which may impair our ability to perform critical functions or could make it considerably more difficult to develop, enhance and support our products and services.

Current wording

Our business operations, information technology and communications systems are vulnerable to damage or interruption from natural disasters, effects of climate change, human error, malicious attacks, fire, power loss, telecommunications failures, computer viruses and malware, computer denial of service attacks, terrorist attacks, public health emergencies and other events beyond our control. For example, we operate under a hybrid workplace model where our workforce spends a portion of their time working in our offices and a portion of their time working away from our offices. This model has introduced risks of disruptions to our operations, which may impair our ability to perform critical functions or could make it considerably more difficult to develop, enhance and support our products and services.

Previous wording

We rely on our network infrastructure, data hosting, public cloud and software-as-a-service providers, and internal technology systems for many of our development, marketing, operational, support, sales, accounting and financial reporting activities. We are continually investing resources to update and improve these systems and environments in order to meet existing needs, as well as the growing and changing requirements of our business and customers. If we experience prolonged delays or unforeseen difficulties in updating and upgrading our systems and architecture, we may experience outages, defects or other performance problems, and may not be able to deliver certain offerings and develop new offerings and enhancements that we need to remain competitive. Such improvements and upgrades are often complex, costly and time consuming. In addition, such improvements can be challenging to integrate with our existing technology systems, or may uncover problems with our existing technology systems. Unsuccessful implementation of hardware or software updates and improvements could result in outages, disruption in our business operations, loss of revenue or damage to our reputation.

Current wording

We rely on our network infrastructure, data hosting, public cloud, and software-as-a-service providers, and internal technology systems for many of our development, marketing, operational, support, sales, accounting, and financial reporting activities. We are continually investing resources to update and improve these systems and environments in order to meet existing needs, as well as the growing and changing requirements of our business and customers. If we experience prolonged delays or unforeseen difficulties in updating and upgrading our systems and architecture, we may experience outages, defects or other performance problems, and may not be able to deliver certain offerings or develop new offerings and enhancements that we need to remain competitive. Such improvements and upgrades are often complex, costly and time consuming. In addition, such improvements can be challenging to integrate with our existing technology systems, or may uncover problems with our existing technology systems. Unsuccessful implementation of hardware or software updates and improvements could result in outages, disruption in our business operations, loss of revenue, or damage to our reputation.

Previous wording

In particular, we have relationships with banks, credit unions and other financial institutions that support certain critical services we offer to our customers. If macroeconomic conditions or other factors cause any of these institutions to fail, consolidate, stop providing certain services or institute cost-cutting efforts, or give rise to speculation relating to such events, we may be unable to offer those services to our customers, in which case our business and financial results may suffer. For example, if one of the counterparty financial institutions with whom we have significant deposits were to become insolvent, placed into receivership, or file for bankruptcy, our ability to recover our assets from such counterparty may be limited, which could negatively impact our results of operations and financial condition.

Current wording

In particular, we have relationships with banks, credit unions and other financial institutions that support certain critical services we offer to our customers. If macroeconomic conditions or other factors cause any of these institutions to fail, consolidate, stop providing certain services, impose new or higher costs for certain services, or institute cost-cutting efforts, or give rise to speculation relating to such events, it may be more difficult to offer, if at all, those services to our customers, in which case our business and financial results may suffer. For example, if one of the counterparty financial institutions with whom we have significant deposits were to become insolvent, placed into receivership, or file for bankruptcy, our ability to recover our assets from such counterparty may be limited, which could negatively impact our results of operations and financial condition.

Previous wording

Additionally, the business operations of our third-party partners and the third-party partners who support them have been and could continue to be disrupted, including as a result of uncertain macroeconomic conditions and global health crises, such as pandemics and endemics. If our third-party partners are unable to help us operate our business or prevent us from delivering critical services to our customers or accepting and fulfilling customer orders, our business and financial results may be negatively impacted. The failure of third parties to provide acceptable and high quality products, services and technologies or to update their products, services and technologies may result in a disruption to our business operations and our customers, which may reduce our revenues and profits, cause us to lose customers and damage our reputation. Alternative arrangements and services may not be available to us on commercially reasonable terms or at all, or we may experience business interruptions upon a transition to an alternative partner.

Current wording

Additionally, the business operations of our third-party partners and the third-party partners who support them have been and could continue to be disrupted, including as a result of major technical outages, uncertain macroeconomic conditions, such as trade wars, and global health crises, such as pandemics and endemics. If our third-party partners are unable to help us operate our business or prevent us from delivering critical services to our customers or accepting and fulfilling customer orders, our business and financial results may be negatively impacted. The failure of third parties to provide acceptable and high quality products, services and technologies or to update their products, services and technologies may result in a disruption to our business operations and our customers, which may reduce our revenues and profits, cause us to lose customers and damage our reputation. Alternative arrangements and services may not be available to us on commercially reasonable terms or at all, or we may experience business interruptions upon a transition to an alternative partner.

Previous wording

Although we have strict standards for our suppliers and business partners to comply with the law and company policies regarding workplace and employment practices, data use and security, environmental compliance, intellectual property licensing and other applicable regulatory and compliance requirements, we cannot control their day-to-day practices. Any violation of laws or implementation of practices regarded as unethical could result in supply chain disruptions, canceled orders, terminations of or damage to key relationships, and damage to our reputation.

Current wording

As we cannot control the day-to-day practices of our suppliers and business partners, we cannot ensure their compliance with the law and our policies regarding workplace and employment practices, data use and security, environmental compliance, intellectual property licensing, and other applicable regulatory and compliance requirements. Any violation of laws or implementation of practices regarded as unethical could result in supply chain disruptions, canceled orders, terminations of or damage to key relationships, and damage to our reputation.

Previous wording

We increasingly utilize the distribution platforms of third parties like Apple’s App Store and Google’s Play Store for the distribution of certain of our product offerings. Although we benefit from the strong brand recognition and large user base of these distribution platforms to attract new customers, the platform owners have wide discretion to change the pricing

Current wording

We increasingly utilize the distribution platforms of third parties like Apple’s App Store and Google’s Play Store for the distribution of certain of our offerings, benefiting from the strong brand recognition and large user base of these distribution platforms to attract new customers. However, the platform owners have wide discretion to change the pricing structure, terms

Previous wording

structure, terms of service and other policies with respect to us and other developers. Any adverse changes by these third parties could adversely affect our financial results.

Current wording

of service and other policies with respect to us and other developers. Any adverse changes by these third parties could adversely affect our financial results.

Previous wording

Much of our future success depends on the continued service and availability of skilled employees, including members of our executive team, and those in technical and other key positions. Experienced individuals with skill sets in software as a service, financial technology, mobile technologies, data science, artificial intelligence and data security are in high demand and we have faced and will continue to face intense competition globally to attract and retain a diverse workforce with these and other skills that are critical to our success. This is especially the case in California and India where a significant number of our employees are located. The compensation and incentives we have available to attract, retain and motivate employees may not meet the expectations of current and prospective employees as the competition for talent intensifies. For example, our equity awards may become less effective if our stock price decreases or increases at a slower rate than our talent competitors. In addition, our ability to issue significant additional equity to attract or retain employees may be limited by the risks of dilution to our existing stockholders and the related increase in our expenses. We may experience higher compensation costs to retain and recruit senior management and highly-skilled employees that may not be offset by improved productivity or revenue. Other factors may make it more challenging for us to continue to successfully attract, retain and develop key employees.

Current wording

Much of our future success depends on the continued service and availability of skilled employees, including members of our executive team, and individuals in technical and other key positions. Experienced individuals with expertise in software as a service, financial technology, mobile technologies, data science, AI, and cybersecurity are in high demand. We have faced and will continue to face intense competition globally to attract and retain a diverse workforce with these and other skills that are critical to our success. This is especially the case in California and India where a significant number of our employees are located. In cases where existing employees cannot be effectively developed to meet evolving business needs, our ability to attract and retain top-tier talent becomes even more important. The compensation and incentives we have available to attract, retain and motivate employees may not meet the expectations of current and prospective employees as the competition for talent intensifies. For example, our equity awards may become less effective if our stock price decreases or increases at a slower rate than our talent competitors. In addition, our ability to issue significant additional equity to attract or retain employees may be limited by the risks of dilution to our existing stockholders and the related increase in our expenses. We may experience higher compensation costs to retain and recruit senior management and highly-skilled employees that may not be offset by improved productivity or revenue. Other factors may make it more challenging for us to continue to successfully attract, retain and develop key employees.

Previous wording

We continue to build and invest in systems and tools that incorporate AI technologies, including generative AI for customers, experts, and our workforce. We also use third parties to support this work. As with many innovations, AI presents risks, uncertainties, and challenges that could adversely impact our business. The development, adoption, and use for generative AI technologies are still in their early stages, and ineffective or inadequate AI development or deployment practices by Intuit or third-party developers or vendors could result in unintended consequences. For example, AI algorithms that we use may be flawed or may be based on datasets that are biased or insufficient. In addition, any latency, disruption, or failure in our AI systems or infrastructure could result in delays or errors in our offerings. Developing, testing, and deploying resource-intensive AI systems may require additional investment and increase our costs. There also may be real or perceived social harm, unfairness, or other outcomes that undermine public confidence in the use and deployment of AI. In addition, third parties may deploy AI technologies in a manner that reduces customer demand for our products and services. Any of the foregoing may result in decreased demand for our products or harm to our business, results of operations or reputation.

Current wording

We continue to build and invest in systems and tools that incorporate AI technologies, including GenAI for customers, experts, and our workforce. We also use third parties to support this work. As with many innovations, AI presents risks, uncertainties, and challenges that could adversely impact our business. The development, adoption, and use for GenAI technologies are still in their early stages, and ineffective or inadequate AI development or deployment practices by Intuit or third-party developers or vendors could result in unintended consequences. For example, AI algorithms that we use may be flawed or may be based on datasets that are biased or insufficient. In addition, any latency, disruption, or failure in our AI systems or infrastructure could result in delays or errors in our offerings. Developing, testing, and deploying resource-intensive AI systems may require additional investment and increase our costs. There also may be real or perceived social harm, unfairness, or other outcomes that undermine public confidence in the use and deployment of AI. In addition, third parties may deploy AI technologies in a manner that reduces customer demand for our products and services. Any of the foregoing may result in decreased demand for our products or harm to our business, results of operations or reputation.

Previous wording

Our customers rely on the accuracy of our offerings. All of our tax products and many of our non-tax products have rigid development timetables that increase the risk of errors in our products and the risk of launch delays. Our tax preparation software product development cycle is particularly challenging due to the need to incorporate unpredictable, ambiguous, and potentially late tax law and tax form changes each year and because our customers expect high levels of accuracy and a timely launch of these products to prepare and file their taxes by the tax filing deadline. Due to the complexity of our products and the condensed development cycles under which we operate, our products may contain errors that could unexpectedly interfere with the operation of the software or result in incorrect calculations. The complexity of the tax laws on which our products are based may also make it difficult for us to consistently deliver offerings that contain the features, functionality and level of accuracy that our customers expect. When we encounter problems, we may be required to modify our code, work with state tax administrators to communicate with affected customers, assist customers with amendments, distribute patches to customers who have already purchased the product and recall or repackage existing product inventory in our distribution channels. If we encounter development challenges or discover errors in our products either late in our development cycle or after release, it may cause us to delay our product launch date or suspend product availability until such issues can be fixed. Any major defects, launch delays or product suspensions may lead to loss of customers and revenue, negative publicity, customer and employee dissatisfaction, reduced retailer shelf space and promotions, and increased operating expenses, such as inventory replacement costs, legal fees or other payments, including those resulting from our accuracy guarantee in our tax preparation products. For example, an error in our tax products could cause a compliance error for taxpayers, including the over or underpayment of their federal or state tax liability. While our accuracy guarantee commits us to reimburse penalties and interest paid by customers due solely to calculation errors in our tax preparation products, such errors may result in additional burdens on third parties that we may need to address or that may cause us to suspend the availability of our products until such errors are addressed. This could also affect our reputation, the willingness of customers to use our products, and our financial results. Further, as we develop our platform to connect people to experts, such as connecting TurboTax customers with tax experts through our TurboTax Live offering, or connecting QuickBooks customers with

Current wording

Our customers rely on the accuracy of our offerings. All of our tax products and many of our non-tax products have rigid development timetables that increase the risk of errors in our products and the risk of launch delays. Our tax preparation software product development cycle is particularly challenging due to the need to incorporate unpredictable, ambiguous, and potentially late tax law and tax form changes each year and because our customers expect high levels of accuracy and a timely launch of these products to prepare and file their taxes by the tax filing deadline. Due to the complexity of our products and the condensed development cycles under which we operate, our products have in the past, and may contain in the future unexpected errors that could interfere with the operation of the software or result in incorrect calculations. The complexity of the tax laws on which our products are based may also make it difficult for us to consistently deliver offerings that contain the features, functionality and level of accuracy that our customers expect. When we encounter problems, we may be required to modify our code, work with state tax administrators to communicate with affected customers, assist customers with amendments, distribute patches to customers who have already purchased the product and recall or repackage existing product inventory in our distribution channels. If we encounter development challenges or discover errors in our products either late in our development cycle or after release, it may cause us to delay our product launch date or suspend product availability until such issues can be fixed. Any major defects, launch delays or product suspensions may lead to loss of customers and revenue, negative publicity, customer and employee dissatisfaction, reduced retailer shelf space and promotions, and increased operating expenses, such as inventory replacement costs, legal fees or other payments, including those resulting from our accuracy guarantee in our tax preparation products. For example, an error in our tax products could cause a compliance error for taxpayers, including the over or underpayment of their federal or state tax liability. While our accuracy guarantee commits us to reimburse penalties and interest paid by customers due solely to calculation errors in our tax preparation products, such errors may result in additional burdens on third parties that we may need to address or that may cause us to suspend the availability of our products until such errors are addressed. This could also affect our reputation, the

Previous wording

bookkeepers through our QuickBooks Live offering, we face the risk that these experts may provide advice that is erroneous, ineffective or otherwise unsuitable. Any such deficiency in the advice given by these experts may cause harm to our customers, a loss of customer confidence in our offerings or harm to our reputation or financial results. Moreover, as we continue to incorporate emerging technologies, like AI, into our offerings, they may not function as designed or have unintended consequences, any of which could subject us to new or enhanced competitive harm, legal liability, regulatory scrutiny or reputational harm.

Current wording

willingness of customers to use our products, and our financial results. Further, as we develop our platform to connect people to experts, such as connecting TurboTax customers with tax experts through our TurboTax Live offering, or connecting QuickBooks customers with bookkeepers through our QuickBooks Live offering, we face the risk that these experts may provide advice that is erroneous, ineffective or otherwise unsuitable. Any such deficiency in the advice given by these experts may cause harm to our customers, a loss of customer confidence in our offerings or harm to our reputation or financial results. Moreover, as we continue to incorporate emerging technologies, like AI, into our offerings, they may not function as designed or have unintended consequences, any of which could subject us to new or enhanced competitive harm, legal liability, regulatory scrutiny or reputational harm.

Previous wording

•geopolitical events, including natural disasters or severe weather events (including those caused or exacerbated by climate change), acts of war and terrorism (including the conflict in the Middle East) and any related military, political or economic responses, and public health emergencies, including divergent governmental responses thereto affecting the jurisdictions in which we operate or maintain a workforce or facilities;

Current wording

•geopolitical events and dynamics, including natural disasters or severe weather events (including those caused or exacerbated by climate change), acts of war and terrorism (including any conflicts in the Middle East) and any related military, political or economic responses, and public health emergencies, including divergent governmental responses thereto affecting the jurisdictions in which we operate or maintain a workforce or facilities;

Previous wording

Violations of the rapidly evolving and complex foreign and U.S. laws and regulations that apply to our international operations may result in fines, criminal actions or sanctions against us, our officers or our broader workforce, prohibitions on the conduct of our business and damage to our reputation. Although we have implemented policies and procedures designed to promote compliance with these laws, we cannot be sure that our workforce, contractors and agents are in compliance with our policies. These risks inherent in our international operations and expansion increase our costs of doing business internationally and may result in harm to our business, operating results, and financial condition.

Current wording

Violations of the rapidly evolving and complex foreign and U.S. laws and regulations that apply to our international operations may result in fines, criminal actions or sanctions against us, our officers or our broader workforce, prohibitions on the conduct of our business and damage to our reputation. Our policies and procedures designed to promote compliance with these laws cannot ensure that our workforce, contractors and agents are in compliance with our policies. These risks inherent in our international operations and expansion increase our costs of doing business internationally and may result in harm to our business, operating results, and financial condition.

Previous wording

While we seek to mitigate our business risks associated with climate change by establishing robust environmental programs and partnering with organizations that are also focused on mitigating their own climate-related risks, we recognize that there are inherent climate-related risks wherever business is conducted. Any of our primary workplace locations may be vulnerable to the adverse effects of climate change. For example, our offices globally have historically experienced, and are projected to continue to experience, climate-related events at an increasing frequency, including drought, water scarcity, heat waves, cold waves, wildfires and resultant air quality impacts and power shutoffs associated with wildfire prevention. Furthermore, it is more difficult to mitigate the impact of these events on our employees to the extent they work from home. Changing market dynamics, global policy developments and the increasing frequency and impact of extreme weather events on critical infrastructure in the U.S. and elsewhere have the potential to disrupt our business, the business of our third-party suppliers and the business of our customers, and may cause us to experience higher attrition, losses and additional costs to maintain or resume operations. We also expect to face increasing regulatory requirements and regulatory scrutiny related to climate matters, resulting in higher associated compliance costs. Additionally, failure to uphold, meet or make timely forward progress against our public commitments and goals related to climate action could adversely affect our reputation with suppliers and customers, financial performance or ability to recruit and retain talent.

Current wording

Our environmental programs and efforts to partner with organizations that are also focused on mitigating their own climate-related risks may not be sufficient to mitigate the business risks associated with climate change. Additionally, we recognize that there are inherent climate-related risks wherever business is conducted. Any of our primary workplace locations may be vulnerable to the adverse effects of climate change. For example, our offices globally have historically experienced, and are projected to continue to experience, climate-related events at an increasing frequency, including drought, water scarcity, heat waves, cold waves, extreme wind, wildfires and resultant air quality impacts and power shutoffs associated with wildfire prevention. Furthermore, it is more difficult to mitigate the impact of these events on our employees to the extent they work away from our offices. Changing market dynamics, global policy developments and the increasing frequency and impact of extreme weather events on critical infrastructure in the U.S. and elsewhere have the potential to disrupt our business, the business of our third-party suppliers and the business of our customers, and may cause us to experience higher attrition, losses and additional costs to maintain or resume operations. We also expect to face increasing regulatory requirements and regulatory scrutiny related to climate matters, resulting in higher associated compliance costs.

Previous wording

We are subject to an increasing number of local, state, federal, and international laws, regulations, and rules and standards. These relate to, without limitation, labor, advertising and marketing, tax, financial services, artificial intelligence, data privacy and security, electronic funds transfer, money transmission, lending, digital content, consumer protection, real estate, billing, e-commerce, promotions, quality of services, intellectual property ownership and infringement, import and export requirements, anti-bribery and anti-corruption, insurance, foreign exchange controls and cash repatriation restrictions, antitrust and competition, environmental, health and safety, and other regulated activities.

Current wording

We are subject to an increasing number of local, state, federal, and international laws, regulations, and rules and standards. These relate to, without limitation, labor, advertising and marketing, tax, financial services, AI, data privacy and security, electronic funds transfer, money transmission, lending, digital content, consumer protection, real estate, billing, e-commerce, promotions, quality of services, intellectual property ownership and infringement, import and export requirements, anti-bribery and anti-corruption, insurance, foreign exchange controls and cash repatriation restrictions, antitrust and competition, environmental, health and safety, and other regulated activities.

Previous wording

These laws and regulations are not consistent across jurisdictions and are subject to change and evolving interpretations, and new or amended laws, regulations, executive orders, directives, policies, and enforcement priorities may affect our business. As we expand our products and services and evolve our business models, we have, and may in the future, become subject to additional changing regulations and heightened regulatory scrutiny. Our ability to adopt emerging technologies, including AI, and to innovate for our customers and operate our business may be harmed by the uncertainty and complexity created by the evolving legal and regulatory environment. For example, in August 2024, the European Union's Artificial Intelligence Act (“AI Act”) went into force regulating AI systems that affect individuals located in the EU. Around the same time, California also enacted various laws relating to transparency, privacy, and fairness in the use and development of AI. Compliance with these laws, and similar emerging laws, may add significant costs to our business and may require us to change certain business practices to comply. In addition, some of our offerings, such as our lending and payments products, require licenses to operate. Our inability to obtain or maintain a license, or to comply with current or new license requirements, may materially harm our ability to operate in specific jurisdictions or subject us to regulatory fines or penalties.

Current wording

The legal and regulatory environment in which we operate is complex, varies across jurisdictions and is subject to frequent change and evolving interpretations. New or amended laws, regulations, executive orders, directives, policies, and enforcement priorities may also be introduced. These dynamics affect our business. As we expand our offerings and evolve our business models, we have, and may in the future, become subject to additional regulatory requirements and heightened regulatory scrutiny. Our ability to adopt emerging technologies, including AI, and to innovate for our customers and operate our business may be harmed by the uncertainty and complexity created by the evolving legal and regulatory environment. For example, in February 2025, the European Union's Artificial Intelligence Act (AI Act) went into force regulating AI systems that affect individuals located in the EU. Additionally, countries and states are applying their data and consumer protection laws to AI and/or enacting or considering legal frameworks on AI, including Utah, Colorado, and California. Compliance with these laws, and similar emerging laws, may add significant costs to our business and may require us to change certain business practices to comply. In addition, some of our offerings, such as our lending and payments products, require licenses to operate. Our inability to obtain or maintain a license, or to comply with current or new license requirements, may materially harm our ability to operate in specific jurisdictions or subject us to regulatory fines or penalties.