HUBSPOT INC

Previous wording

After the implementation of our Restructuring Plan in January 2023, our headcount and operations continued to grow. For example, we had 7,829 full-time employees as of March 31, 2024 and 7,663 as of December 31, 2023. To date, we have opened several international offices. This growth has placed, and will continue to place, a significant strain on our management, administrative, operational and financial infrastructure. We expect to continue to grow headcount and operations over the long-term. We anticipate future growth will be required over the long term to address increases in our product offerings and continued expansion. Our success will depend in part upon our ability to recruit, hire, train, manage and integrate qualified managers, technical personnel and employees in specialized roles within our company, including in technology, sales and marketing. Furthermore, as more of our employees work remotely from geographic areas across the globe on a permanent basis pursuant to our hybrid workplace model, which provides our employees with the option to be fully remote, work full-time from one of our offices, or have the flexibility to work both in the office and remotely, we may need to reallocate our investment of resources and closely monitor a variety of local regulations and requirements, including local tax laws. We may experience unpredictability in our expenses and employee work culture. If we experience any of these effects in connection with future growth, if our new employees perform poorly, or if we are unsuccessful in recruiting, hiring, training, managing and integrating new employees, or retaining our existing employees, it could materially impair our ability to attract new customers, retain existing customers and expand their use of our platform, all of which would materially and adversely affect our business, financial condition and results of operations.

Current wording

After the implementation of our Restructuring Plan in January 2023, our headcount and operations continued to grow. For example, we had 8,002 full-time employees as of June 30, 2024 and 7,663 as of December 31, 2023. To date, we have opened several international offices. This growth has placed, and will continue to place, a significant strain on our management, administrative, operational and financial infrastructure. We expect to continue to grow headcount and operations over the long-term. We anticipate future growth will be required over the long term to address increases in our product offerings and continued expansion. Our success will depend in part upon our ability to recruit, hire, train, manage and integrate qualified managers, technical personnel and employees in specialized roles within our company, including in technology, sales and marketing. Furthermore, as more of our employees work remotely from geographic areas across the globe on a permanent basis pursuant to our hybrid workplace model, which provides our employees with the option to be fully remote, work full-time from one of our offices, or have the flexibility to work both in the office and remotely, we may need to reallocate our investment of resources and closely monitor a variety of local regulations and requirements, including local tax laws. We may experience unpredictability in our expenses and employee work culture. If we experience any of these effects in connection with future growth, if our new employees perform poorly, or if we are unsuccessful in recruiting, hiring, training, managing and integrating new employees, or retaining our existing employees, it could materially impair our ability to attract new customers, retain existing customers and expand their use of our platform, all of which would materially and adversely affect our business, financial condition and results of operations.

Previous wording

Cyber-attacks, denial-of-service attacks, ransomware attacks, business email compromises, computer malware, viruses, and social engineering (including phishing) are prevalent in our industry, the industries of certain of our service providers and our customers' industries. Our internal computer systems and those of our current and any future strategic collaborators, vendors, and other contractors or consultants are vulnerable to damage from cyber-attacks, computer viruses, unauthorized access, natural disasters, cybersecurity threats, terrorism, geopolitical conflict, war and telecommunication and electrical failures. Accordingly, if our cybersecurity measures or those of our service providers fail to protect against unauthorized access, attacks (which may include sophisticated cyber-attacks), compromise or the mishandling of data by our employees and contractors, then our reputation, customer trust, business, results of operations and financial condition could be adversely affected. Cyber incidents have been increasing in sophistication and frequency and can include third parties gaining access to employee or customer data using stolen or inferred credentials, computer malware, viruses, spamming, phishing attacks, ransomware, card skimming code, and other deliberate attacks and attempts to gain unauthorized access. This risk is increased by the difficulty of balancing rapid vulnerability patching and system availability in a large and rapidly-changing production environment. At times, we may be unable to patch all of our systems in a manner that strictly adheres to our internally prescribed timelines. The techniques used to sabotage or to obtain unauthorized access to our platform, systems, networks, or physical facilities in which data is stored or through which data is transmitted change frequently, and we may be unable to implement adequate preventative measures or stop security breaches while they are occurring. Because the techniques used by threat actors who may attempt to penetrate and sabotage our computer systems change frequently and may not be recognized until launched against a target, we may be unable to anticipate these techniques. Additionally, as remote work and resource access expand, there is an increased risk that we may experience cybersecurity-related events such as phishing attacks, exploitation of any cybersecurity flaws that may exist, an increase in the number of cybersecurity threats or attacks, and other security challenges as a result of most of our employees and our service providers continuing to work remotely from non-corporate managed networks. There is also a risk of potential increase in such attacks due to cyberwarfare in connection with the ongoing global conflicts, and this could adversely affect our and our suppliers' ability to maintain or enhance key cybersecurity and data protection measures. We have previously been, and may in the future become, the target of cyber-attacks by third parties seeking unauth…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Cyber-attacks, denial-of-service attacks, ransomware attacks, business email compromises, computer malware, viruses, social engineering (including phishing), and other compromises are prevalent in our industry, the industries of certain of our service providers and our customers' industries. Our internal computer systems and those of our current and any future strategic collaborators, vendors, and other contractors or consultants are vulnerable to damage from cyber-attacks, computer viruses, unauthorized access, natural disasters, cybersecurity threats, terrorism, geopolitical conflict, war and telecommunication and electrical failures. Accordingly, if our cybersecurity measures or those of our service providers fail to protect against unauthorized access, attacks (which may include sophisticated cyber-attacks), compromise or the mishandling of data by our employees and contractors, then our reputation, customer trust, business, results of operations and financial condition could be adversely affected. Cyber incidents have been increasing in sophistication and frequency and can include third parties gaining access to employee or customer data using stolen or inferred credentials, computer malware, viruses, spamming, phishing attacks, ransomware, vulnerabilities in first- or third-party code, card skimming code, and other deliberate attacks and attempts to gain unauthorized access. This risk is increased by the difficulty of balancing rapid vulnerability patching and system availability in a large and rapidly-changing production environment. At times, we may be unable to patch all of our systems in a manner that strictly adheres to our internally prescribed timelines. The techniques used to sabotage or to obtain unauthorized access to our platform, systems, networks, or physical facilities in which data is stored or through which data is transmitted change frequently, and we may be unable to implement adequate preventative measures or stop security breaches while they are occurring. Because the techniques used by threat actors who may attempt to penetrate and sabotage our computer systems change frequently and may not be recognized until launched against a target, we may be unable to anticipate these techniques. Additionally, as remote work and resource access expand, there is an increased risk that we may experience cybersecurity-related events such as phishing attacks, exploitation of any cybersecurity flaws that may exist, an increase in the number of cybersecurity threats or attacks, and other security challenges as a result of most of our employees and our service providers continuing to work remotely from non-corporate managed networks. There is also a risk of potential increase in such attacks due to cyberwarfare in connection with the ongoing global conflicts, and this could adversely affect our and our suppliers' ability to maintain or enhance key cybersecurity and data protection measures. We have previously been, and may in the future b…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Recent cybersecurity incidents and compromises affecting large institutions, including an incident that affected us in 2022, suggest that the risk of such events is significant, even if privacy protection and security measures are implemented and enforced. A cyber-attack could result in a material disruption of our development programs and our business operations, whether due to a loss of our trade secrets or other proprietary information or other disruptions. These cyber-attacks could be carried out by threat actors of all types (including but not limited to nation states, organized crime, other criminal enterprises, individual actors and/or advanced persistent threat groups). In addition, we may experience intrusions on our physical premises by any of these threat actors. To the extent that any disruption or security breach were to result in a loss of, or damage to, our data or applications, or inappropriate disclosure of confidential or proprietary information, we could incur liability, incur significant costs associated with remediation and the implementation of additional security measures, including costs to deploy additional personnel and protection technologies, train employees, and engage third-party experts and consultants, and our competitive position could be harmed. Any breach, loss, or compromise of personal data may also subject us to civil fines and penalties, or claims for damages either under the General Data Protection Regulation (the “EU GDPR”), the EU GDPR as incorporated into United Kingdom law, and relevant member state law in the European Union, other foreign laws, and other relevant state and federal privacy laws in the United States.

Current wording

Recent cybersecurity incidents and compromises affecting large institutions, including an incident that affected us in 2024, suggest that the risk of such events is significant, even if privacy protection and security measures are implemented and enforced. A cyber-attack, incident, or compromise could result in a material disruption of our development programs and our business operations, whether due to a loss of our trade secrets or other proprietary information or other disruptions. These cyber-attacks could be carried out by threat actors of all types (including but not limited to nation states, organized crime, other criminal enterprises, individual actors and/or advanced persistent threat groups). In addition, we may experience intrusions on our physical premises by any of these threat actors. To the extent that any compromise, disruption or security breach were to result in a loss of, or damage to, our data or applications, or inappropriate disclosure of confidential or proprietary information, we could incur liability, incur significant costs associated with remediation and the implementation of additional security measures, including costs to deploy additional personnel and protection technologies, train employees, and engage third-party experts and consultants, and our competitive position could be harmed. Any breach, loss, or compromise of personal data may also subject us to civil fines and penalties, or claims for damages either under the General Data Protection Regulation (the “EU GDPR”), the EU GDPR as incorporated into United Kingdom law, and relevant member state law in the European Union, other foreign laws, and other relevant state and federal privacy laws in the United States.

Previous wording

Many governments have enacted laws requiring companies to notify individuals of data security incidents or unauthorized transfers involving certain types of personal data. In addition, the data processing agreement we execute with our customers contractually requires us to notify them of any personal data breach. Under payment card network rules and our contracts with our payment processors, if there is a data breach of payment resulting in the compromise of cardholder payment information that we store, or that is stored by our direct payment card processing vendors, we could be liable to the payment card issuing banks for their cost of issuing new cards and related expenses depending on the cause of such data breach. Data breaches and other data security compromises experienced by our competitors, by our customers or by us may lead to public disclosures, which may lead to widespread negative publicity. Any security compromise in our industry, whether actual or perceived, could harm our reputation, erode customer confidence in the effectiveness of our security measures, negatively impact our ability to attract new customers, cause existing customers to elect not to renew their subscriptions or subject us to third-party lawsuits, regulatory fines or other action or liability, which could materially and adversely affect our business and operating results.

Current wording

Many governments have enacted laws requiring companies to notify individuals of data security incidents or unauthorized transfers involving certain types of personal data. In addition, the data processing agreement we execute with our customers contractually requires us to notify them of any personal data breach. Under payment card network rules and our contracts with our payment processors, if there is a data breach of payment resulting in the compromise of cardholder payment information that is stored by our direct payment card processing vendors, we could be liable to the payment card issuing banks for their cost of issuing new cards and related expenses depending on the cause of such data breach. Data breaches and other data security compromises experienced by our competitors, by our customers or by us may lead to public disclosures, which may lead to widespread negative publicity. Any security compromise in our industry, whether actual or perceived, could harm our reputation, erode customer confidence in the effectiveness of our security measures, negatively impact our ability to attract new customers, cause existing customers to elect not to renew their subscriptions or subject us to third-party lawsuits, regulatory fines or other action or liability, which could materially and adversely affect our business and operating results.

Previous wording

The software industry is characterized by the existence of a large number of patents, copyrights, trademarks, trade secrets and other intellectual and proprietary rights. Companies in the software industry, including those in marketing software, are often required to defend against litigation claims based on allegations of infringement or other violations of intellectual property rights. Many of our competitors and other industry participants have been issued patents and/or have filed patent applications and may assert patent or other intellectual property rights within the industry. Moreover, in recent years, individuals and groups that are non-practicing entities, commonly referred to as “patent trolls,” have purchased patents and other intellectual property assets for the purpose of making claims of infringement in order to extract settlements. From time to time, we may receive threatening letters or notices or may be the subject of claims that our services and/or platform and underlying technology infringe or violate the intellectual property rights of others. Responding to such claims, regardless of their merit, can be time consuming, costly to defend in litigation, divert management’s attention and resources, damage our reputation and brand and cause us to incur significant expenses. Our technologies may not be able to withstand any third-party claims or rights against their use. Claims of intellectual property infringement might require us to redesign our application, delay releases, enter into costly settlement or license agreements or pay costly damage awards, or face a temporary or permanent injunction prohibiting us from marketing or selling our platform. If we cannot or do not license the infringed technology on reasonable terms or at all, or substitute similar technology from another source, our revenue and operating results could be adversely impacted. Additionally, our customers may not purchase our customer platform if they are concerned that they may infringe third-party intellectual property rights. The occurrence of any of these events may have a material adverse effect on our business.

Current wording

The software industry is characterized by the existence of a large number of patents, copyrights, trademarks, trade secrets and other intellectual and proprietary rights. Companies in the software industry are often required to defend against litigation claims based on allegations of infringement or other violations of intellectual property rights. Many of our competitors and other industry participants have been issued patents and/or have filed patent applications and may assert patent or other intellectual property rights within the industry. Moreover, in recent years, individuals and groups that are non-practicing entities, commonly referred to as “patent trolls,” have purchased patents and other intellectual property assets for the purpose of making claims of infringement in order to extract settlements. From time to time, we may receive threatening letters or notices or may be the subject of claims that our services and/or platform and underlying technology infringe or violate the intellectual property rights of others. Responding to such claims, regardless of their merit, can be time consuming, costly to defend in litigation, divert management’s attention and resources, damage our reputation and brand and cause us to incur significant expenses. Our technologies may not be able to withstand any third-party claims or rights against their use. Claims of intellectual property infringement might require us to redesign our application, delay releases, enter into costly settlement or license agreements or pay costly damage awards, or face a temporary or permanent injunction prohibiting us from marketing or selling our platform. If we cannot or do not license the infringed technology on reasonable terms or at all, or substitute similar technology from another source, our revenue and operating results could be adversely impacted. Additionally, our customers may not purchase our customer platform if they are concerned that they may infringe third-party intellectual property rights. The occurrence of any of these events may have a material adverse effect on our business.

Previous wording

Our success is dependent, in part, upon protecting our proprietary technology. We rely on a combination of patents, copyrights, trademarks, service marks, trade secret laws and contractual restrictions to establish and protect our proprietary rights in our products and services. However, the steps we take to protect our intellectual property may be inadequate. We will not be able to protect our intellectual property if we are unable to enforce our rights or if we do not detect unauthorized use of our intellectual property. Any of our trademarks or other intellectual property rights may be challenged by others or invalidated through administrative process or litigation. Furthermore, legal standards relating to the validity, enforceability and scope of protection of intellectual property rights are uncertain. Additionally, the intellectual property ownership and license rights, including copyright, surrounding AI technologies, which we are increasingly building into our product offerings, has not been fully addressed by U.S. courts or other federal or state laws or regulations, and the use or adoption of AI technologies in our products and services may expose us to copyright infringement or other intellectual property misappropriation claims. Despite our precautions, it may be possible for unauthorized third parties to copy our technology and use information that we regard as proprietary to create products and services that compete with ours. Some license provisions protecting against unauthorized use, copying, transfer and disclosure of our offerings may be unenforceable under the laws of certain jurisdictions and foreign countries. In addition, the laws of some countries do not protect proprietary rights to the same extent as the laws of the United States. To the extent we expand our international activities, our exposure to unauthorized copying and use of our technology and proprietary information may increase.

Current wording

Our success is dependent, in part, upon protecting our proprietary technology. We rely on a combination of patents, copyrights, trademarks, service marks, trade secret laws and contractual restrictions to establish and protect our proprietary rights in our products and services. However, the steps we take to protect our intellectual property may be inadequate. We will not be able to protect our intellectual property if we are unable to enforce our rights or if we do not detect unauthorized use of our intellectual property. Any of our trademarks or other intellectual property rights may be challenged by others or invalidated through administrative process or litigation. Furthermore, legal standards relating to the validity, enforceability and scope of protection of intellectual property rights are uncertain. Additionally, the intellectual property ownership and license rights, including copyrights and patents surrounding AI technologies, which we are increasingly building into our product offerings, has not been fully addressed by U.S. courts or other federal or state laws or regulations, and the use or adoption of AI technologies in our products and services may expose us to copyright infringement or other intellectual property misappropriation claims. Despite our precautions, it may be possible for unauthorized third parties to copy our technology and use information that we regard as proprietary to create products and services that compete with ours. Some license provisions protecting against unauthorized use, copying, transfer and disclosure of our offerings may be unenforceable under the laws of certain jurisdictions and foreign countries. In addition, the laws of some countries do not protect proprietary rights to the same extent as the laws of the United States. To the extent we expand our international activities, our exposure to unauthorized copying and use of our technology and proprietary information may increase.

Previous wording

Other states, including Virginia, Colorado, Utah, Connecticut, Iowa, Indiana, Montana, Tennessee, and Texas, among others, have passed comprehensive privacy and data security laws, which impose obligations on covered businesses similar – but not identical – to those under the CCPA. Some of these laws entered into force in 2023, and others will enter into force in 2024 and beyond. A number of other states have proposed similar or sector specific privacy legislation, and the U.S. Congress is considering legislation that may preempt some or all of such U.S. state privacy laws, providing a more robust private right of action. The evolving complexity of privacy and data security legislation in the U.S. may complicate our compliance efforts and further increase our risk of regulatory enforcement, penalties and litigation.

Current wording

Numerous other states have passed comprehensive privacy and data security laws, which impose obligations on covered businesses similar – but not identical – to those under the CCPA. Some of these laws entered into force in 2023, and others will enter into force in 2024 and beyond. A number of other states have proposed similar or sector specific privacy legislation, and the U.S. Congress is considering legislation that may preempt some or all of such U.S. state privacy laws, providing a more robust private right of action. Through executive and legislative action, the federal government has also taken steps to restrict data transactions involving persons affiliated with China, Russia, and other countries of concern. The evolving complexity of privacy and data security legislation in the U.S. may complicate our compliance efforts and further increase our risk of regulatory enforcement, penalties and litigation.

Previous wording

In connection with the operation of some of our business lines, such as business intelligence services, we collect, process and share business contact information or other personal data individuals make available in their professional capacity. We may be subject to additional requirements under privacy and data protection laws that could lead to additional compliance costs, regulatory scrutiny, and reputational risks that may affect our business. For example, we may be required to send notifications to individuals and respond to higher volumes of data privacy requests, which may require substantial costs and expenses, or reduce the potential value of our business intelligence services. We may also receive data from third-party vendors (e.g., data brokers) in connection with such services. While we have implemented certain contractual measures with such vendors to protect our interests, we are ultimately unable to verify with complete certainty the source of such data, how it was received, and that such information was collected and is being shared with us in compliance with all applicable data privacy laws. Furthermore, the uncertain and shifting regulatory environment and trust climate may cause concerns regarding data privacy and may cause our vendors, customers, users, or our customers’

Current wording

In connection with the operation of some of our business lines, such as business intelligence services, we collect, process and share business contact information or other personal data individuals make available in their professional capacity. We may be subject to additional requirements under privacy and data protection laws that could lead to additional compliance costs, regulatory scrutiny, and reputational risks that may affect our business. For example, we may be required to send notifications to individuals and respond to higher volumes of data privacy requests, which may require substantial costs and expenses, or reduce the potential value of our business intelligence services. We may also receive data from third-party vendors (e.g., data brokers) in connection with such services. While we have implemented certain contractual measures with such vendors to protect our interests, we are ultimately unable to verify with complete certainty the source of such data, how it was received, and that such information was collected and is being shared with us in compliance with all applicable data privacy laws. Furthermore, the uncertain and shifting regulatory environment and trust climate may cause concerns regarding data privacy and may cause our vendors, customers, users, or our customers’ customers to decline to provide the data necessary to allow us to offer some of our services to our customers and users effectively, or could prompt individuals to opt out of our collection of their personal data. Concern regarding our use of the personal data collected when performing our services could keep prospective customers from subscribing to our services.

Previous wording

Separately, as the regulatory framework for machine learning technology and AI evolves, it is possible that new laws and regulations will be adopted, or that existing laws and regulations may be interpreted in ways that would affect our business and the ways in which we use AI and machine learning technology, our financial condition and our results of operations, including as a result of the cost to comply with such laws or regulations. For example, the EU’s Artificial Intelligence Act (“AI Act”) - the world’s first comprehensive AI law - is anticipated to enter into force in Spring 2024 and, with some exceptions, become effective 24 months thereafter. This legislation imposes significant obligations on providers and deployers of high-risk artificial intelligence systems, and encourages providers and deployers of artificial intelligence systems to account for EU ethical principles in their development and use of these systems. If we develop or use AI systems that are governed by the AI Act, it may necessitate ensuring higher standards of data quality, transparency, and human oversight, as well as adhering to specific ethical, accountability, and administrative requirements, some of which may increase our costs and compliance obligations. Further, potential government regulation related to AI use and ethics may also increase the cost of research and development in this area, and failure to properly remediate AI usage or ethics issues may cause public confidence in AI to be undermined, which could slow adoption of AI in our products and services.

Current wording

Separately, as the regulatory framework for machine learning technology and AI evolves, it is possible that new laws and regulations will be adopted, or that existing laws and regulations may be interpreted in ways that would affect our business and the ways in which we use AI and machine learning technology, our financial condition and our results of operations, including as a result of the cost to comply with such laws or regulations. For example, the EU’s Artificial Intelligence Act (“AI Act”) - the world’s first comprehensive AI law - is anticipated to enter into force in Summer 2024 and, with some exceptions, become effective 24 months thereafter. This legislation imposes significant obligations on providers and deployers of high-risk artificial intelligence systems, and encourages providers and deployers of artificial intelligence systems to account for EU ethical principles in their development and use of these systems. If we develop or use AI systems that are governed by the AI Act, it may necessitate ensuring higher standards of data quality, transparency, and human oversight, as well as adhering to specific ethical, accountability, and administrative requirements, some of which may increase our costs and compliance obligations. Further, potential government regulation related to AI use and ethics may also increase the cost of research and development in this area, and failure to properly remediate AI usage or ethics issues may cause public confidence in AI to be undermined, which could slow adoption of AI in our products and services.

Previous wording

Additionally, Payments, our end-to-end payment solution built within Commerce Hub, are susceptible to potentially illegal or improper uses, including money laundering, terrorist financing, fraudulent or illegal sales of goods or services, piracy of software, movies, music, and other copyrighted or trademarked information, bank fraud, securities fraud, pyramid or ponzi schemes, or the facilitation of other illegal or improper activity. While we engage a third party as our registered payment facilitator, the use of Payments for illegal or improper uses may subject us to claims (including claims brought by our third-party payment processor), government and regulatory requests, inquiries, or investigations that could result in liability, and harm our reputation. Moreover, certain activity that may be legal in one jurisdiction may be illegal in another jurisdiction, and a merchant may be found responsible for intentionally or inadvertently importing or exporting illegal goods, resulting in liability for us. Owners of intellectual property rights or government authorities may seek to bring legal action against providers of payments solutions, including Payments, that are peripherally involved in the sale of infringing or allegedly infringing items. Any threatened or resulting claims could result in reputational harm, and any resulting liabilities, loss of transaction volume, or increased costs could harm our business.

Current wording

Additionally, HubSpot payments, our end-to-end payment solution as well as our Stripe payment processing integration (together with HubSpot payments, the “Payments” offering), are both built within Commerce Hub and are susceptible to potentially illegal or improper uses, including money laundering, terrorist financing, fraudulent or illegal sales of goods or services, piracy of software, movies, music, and other copyrighted or trademarked information, bank fraud, securities fraud, pyramid or ponzi schemes, or the facilitation of other illegal or improper activity. While we engage a third party as our registered payment facilitator, the use of Payments for illegal or improper uses may subject us to claims (including claims brought by our third-party payment processor), government and regulatory requests, inquiries, or investigations that could result in liability, and harm our reputation. Moreover, certain activity that may be legal in one jurisdiction may be illegal in another jurisdiction, and a merchant may be found responsible for intentionally or inadvertently importing or exporting illegal goods, resulting in liability for us. Owners of intellectual property rights or government authorities may seek to bring legal action against providers of payments solutions, including Payments, that are peripherally involved in the sale of infringing or allegedly infringing items. Any threatened or resulting claims could result in reputational harm, and any resulting liabilities, loss of transaction volume, or increased costs could harm our business.

Previous wording

Our business activities are subject to various restrictions under U.S. export controls and trade and economic sanctions laws, including the U.S. Commerce Department’s Export Administration Regulations and economic and trade sanctions regulations maintained by the U.S. Treasury Department’s Office of Foreign Assets Control. If we fail to comply with these laws and regulations, we and certain of our employees could be subject to civil or criminal penalties and reputational harm. Obtaining the necessary authorizations, including any required license, for a particular transaction may be time-consuming, is not guaranteed, and may result in the delay or loss of sales opportunities. Furthermore, U.S. export control laws and economic sanctions laws prohibit certain transactions with U.S. embargoed or sanctioned countries, governments, persons and entities. These sanctions laws with which we must comply may also change rapidly from time to time as a result of geopolitical events, such as the recent imposition of sanctions on Russia as a result of the conflict between Russia and Ukraine. Although we take precautions to prevent transactions with U.S. sanction targets, the possibility exists that we could inadvertently provide our solutions to persons prohibited by U.S. sanctions. This could result in negative consequences to us, including government investigations, penalties and reputational harm.

Current wording

Our business activities are subject to various restrictions under U.S. and other global export controls and trade and economic sanctions laws, including the U.S. Commerce Department’s Export Administration Regulations and economic and trade sanctions regulations maintained by the U.S. Treasury Department’s Office of Foreign Assets Control. If we fail to comply with these laws and regulations, we and certain of our employees could be subject to civil or criminal penalties and reputational harm. Obtaining the necessary authorizations, including any required license(s), for a particular transaction may be time-consuming, is not guaranteed, and may result in the delay or loss of sales opportunities. Furthermore, export control laws and economic sanctions laws prohibit certain transactions with embargoed or sanctioned countries, governments, persons and entities. These sanctions laws with which we must comply may also change rapidly from time to time as a result of geopolitical events, such as the imposition of sanctions on Russia as a result of the conflict between Russia and Ukraine. Although we take precautions to prevent unlawful transactions and business relationships with sanction targets, the possibility exists that we could inadvertently provide our products and services to persons or entities prohibited by U.S and other global sanctions regimes. This could result in negative consequences to us, including government investigations, enforcement actions resulting in civil and/or criminal penalties and reputational harm.

Previous wording

We generated net income of $5.9 million for the three months ended March 31, 2024 and net losses of $36.7 million for the three months ended March 31, 2023. As of March 31, 2024, we had an accumulated deficit of $798.5 million. While we generated a profit for the three months ended March 31, 2024, primarily due to a non-recurring gain on investment, we do not expect to continue to be profitable in the near term and will need to generate and sustain increased revenue levels in future periods to become consistently profitable, and, even if we do, we may not be able to maintain or increase our level of profitability. We have spent and intend to continue to expend significant funds on our marketing, sales, customer service, operations, and content management operations, develop and enhance our customer platform, scale our data center infrastructure and services capabilities and expand into new markets. Our efforts to grow our business may be more costly than we expect, and we may not be able to increase our revenue enough to offset our higher operating expenses. We may incur significant losses in the future for a number of reasons, including the other risks described in this Quarterly Report on Form 10-Q, and unforeseen expenses, difficulties, complications and delays and other unknown events. If we are unable to achieve and sustain profitability, the market price of our common stock may significantly decrease.

Current wording

We generated net losses of $8.5 million for the six months ended June 30, 2024 and net losses of $148.5 million for the six months ended June 30, 2023. As of June 30, 2024, we had an accumulated deficit of $812.9 million. We will need to generate and sustain increased revenue levels in future periods to become consistently profitable, and, even if we do, we may not be able to maintain or increase our level of profitability. We have spent and intend to continue to expend significant funds on our marketing, sales, customer service, operations, and content management operations, develop and enhance our customer platform, scale our data center infrastructure and services capabilities and expand into new markets. Our efforts to grow our business may be more costly than we expect, and we may not be able to increase our revenue enough to offset our higher operating expenses. We may incur significant losses in the future for a number of reasons, including the other risks described in this Quarterly Report on Form 10-Q, and unforeseen expenses, difficulties, complications and delays and other unknown events. If we are unable to achieve and sustain profitability, the market price of our common stock may significantly decrease.

Previous wording

In the event the conditional conversion feature of the 2025 Notes is triggered, the holders thereof will be entitled to convert the 2025 Notes at any time during specified periods at their option. Because the last reported sale price of the Company’s common stock for at least 20 trading days during the period of 30 consecutive trading days ending on the last trading day of the calendar quarter ended March 31, 2024 was equal to or greater than 130% of the applicable conversion price on each applicable trading day, the 2025 Notes are convertible at the option of the holders thereof during the calendar quarter ending June 30, 2024. As of May 3, 2024, the Company has not received any material conversion notices with respect to the 2025 Notes. Whether the Notes that remain outstanding will be convertible following the calendar quarter ended March 31, 2024 will depend on the continued satisfaction of this condition or another conversion condition in the future. If one or more holders elect to convert their Notes, unless we elect to satisfy our conversion obligation by delivering solely shares of our common stock (other than paying cash in lieu of delivering any fractional share), we would be required to settle a portion or all of our conversion obligation through the payment of cash, which could adversely affect our liquidity. In addition, even if holders do not elect to convert their Notes, we could be required under applicable accounting rules to reclassify all or a portion of the outstanding principal of the Notes as a current rather than long-term liability, which would result in a material reduction of our net working capital.

Current wording

In the event the conditional conversion feature of the 2025 Notes is triggered, the holders thereof will be entitled to convert the 2025 Notes at any time during specified periods at their option. Because the last reported sale price of the Company’s common stock for at least 20 trading days during the period of 30 consecutive trading days ending on the last trading day of the calendar quarter ended June 30, 2024 was equal to or greater than 130% of the applicable conversion price on each applicable trading day, the 2025 Notes are convertible at the option of the holders thereof during the calendar quarter ending September 30, 2024. As of August 2, 2024, the Company has not received any material conversion notices with respect to the 2025 Notes. Whether the Notes that remain outstanding will be convertible following the calendar quarter ended June 30, 2024 will depend on the continued satisfaction of this condition or another conversion condition in the future. If one or more holders elect to convert their Notes, unless we elect to satisfy our conversion obligation by delivering solely shares of our common stock (other than paying cash in lieu of delivering any fractional share), we would be required to settle a portion or all of our conversion obligation through the payment of cash, which could adversely affect our liquidity.

Previous wording

While we seek to partner with organizations that mitigate their business risks associated with climate change, we recognize that there are inherent risks wherever business is conducted. Any of our primary locations may be vulnerable to the adverse effects of climate change. For example, our offices globally may experience climate-related events at an increasing frequency, including drought, water scarcity, heat waves, cold waves, wildfires and resultant air quality impacts and power shutoffs associated with wildfire prevention. While this danger has a low-assessed risk of disrupting normal business operations, it has the potential to disrupt employees’ abilities to commute to work or to work from home and stay connected effectively. Furthermore, it is more difficult to mitigate the impact of these events on our employees to the extent they work from home. Climate-related events, including the increasing frequency of extreme weather events and their impact on the U.S.’s, Europe’s and other major regions’ critical infrastructure, have the potential to disrupt our business, our third-party suppliers and/or the business of our customers, and may cause us to experience higher attrition, losses and additional costs to maintain or resume operations. Regulatory developments, changing market dynamics and stakeholder expectations regarding climate change may impact our business, financial condition and results of operations. To inform our disclosures and take potential action as appropriate, we are working to align our reporting with emerging disclosure and accounting standards such as the Financial Stability Board’s Task Force on Climate-Related Financial Disclosures, the Sustainability Accounting Standards Board and the Global Reporting Initiative as well as new disclosure requirements from regulators, including requirements recently adopted by the SEC that will be applicable to us beginning with our annual report for the fiscal year ended December 31, 2025.

Current wording

While we seek to partner with organizations that mitigate their business risks associated with climate change, we recognize that there are inherent risks wherever business is conducted. Any of our primary locations may be vulnerable to the adverse effects of climate change. For example, our offices globally may experience climate-related events at an increasing frequency, including drought, water scarcity, heat waves, cold waves, wildfires and resultant air quality impacts and power shutoffs associated with wildfire prevention. While this danger has a low-assessed risk of disrupting normal business operations, it has the potential to disrupt employees’ abilities to commute to work or to work from home and stay connected effectively. Furthermore, it is more difficult to mitigate the impact of these events on our employees to the extent they work from home. Climate-related events, including the increasing frequency of extreme weather events and their impact on the U.S.’s, Europe’s and other major regions’ critical infrastructure, have the potential to disrupt our business, our third-party suppliers and/or the business of our customers, and may cause us to experience higher attrition, losses and additional costs to maintain or resume operations. Regulatory developments, changing market dynamics and stakeholder expectations regarding climate change may impact our business, financial condition and results of operations. To inform our disclosures and take potential action as appropriate, we are working to align our reporting with emerging disclosure and accounting standards such as the Financial Stability Board’s Task Force on Climate-Related Financial Disclosures, the Sustainability Accounting Standards Board and the Global Reporting Initiative, as well as new disclosure requirements from regulators.