JFrog Ltd

Previous wording

The impact of the war between Israel and Hamas, the regional conflict in the Middle East, the war between Russia and Ukraine, and other areas of geopolitical tension around the world, including the related global economic disruptions, remains uncertain at this time, and could harm or continue to harm our business and results of operations.

Current wording

The impact of the war between Israel, Hamas and Hezbollah, the regional conflict in the Middle East, the war between Russia and Ukraine, and other areas of geopolitical tension around the world, including the related global economic disruptions, remains uncertain at this time, and could harm or continue to harm our business and results of operations.

Previous wording

Our total revenue for the three months ended June 30, 2024 and 2023 was $103.0 million and $84.2 million, respectively, representing 22% growth, and $203.4 million and $164.0 million for the six months ended June 30, 2024 and 2023, respectively, representing 24% growth. You should not rely on the revenue growth of any prior quarterly or annual period as an indication of our future performance. Even if our revenue continues to increase, we expect our revenue growth rate to decline in future periods. For example, we experienced slowed growth during the COVID-19 pandemic. Many factors may contribute to declines in our growth rate, including greater market penetration, increased competition, slowing demand for our platform, a failure by us to continue capitalizing on growth opportunities, the maturation of our business, the protracted conflict in the Middle East, and global economic downturn, among others. If our growth rate declines, investors’ perceptions of our business and the market price of our ordinary shares could be adversely affected.

Current wording

Our total revenue for the three months ended September 30, 2024 and 2023 was $109.1 million and $88.6 million, respectively, representing 23% growth, and $312.4 million and $252.6 million for the nine months ended September 30, 2024 and 2023, respectively, representing 24% growth. You should not rely on the revenue growth of any prior quarterly or annual period as an indication of our future performance. Even if our revenue continues to increase, we expect our revenue growth rate to decline in future periods. For example, we experienced slowed growth during the COVID-19 pandemic. Many factors may contribute to declines in our growth rate, including greater market penetration, increased competition, slowing demand for our platform, a failure by us to continue capitalizing on growth opportunities, the maturation of our business, the protracted conflict in the Middle East, and global economic downturn, among others. If our growth rate declines, investors’ perceptions of our business and the market price of our ordinary shares could be adversely affected.

Previous wording

the impact of political uncertainty or unrest, including the Russia-Ukraine war, and the Israel-Hamas war, other areas of geopolitical tension around the world, or the worsening of such conflicts or tensions and any related global economic disruptions;

Current wording

the impact of political uncertainty or unrest, including the Russia-Ukraine war, the war between Israel, Hamas and Hezbollah, other areas of geopolitical tension around the world, or the worsening of such conflicts or tensions and any related global economic disruptions;

Previous wording

We outsource substantially all of the infrastructure relating to our cloud products to third-party cloud providers chosen by our customers. Customers of our SaaS offerings need to be able to access our platform at any time, without interruption or degradation of performance, and we provide them with service-level commitments with respect to uptime. Third-party cloud providers run their own platforms that we access, and we are, therefore, vulnerable to their service interruptions and any changes in their product offerings. Any limitation on the capacity of our third-party hosting services could impede our ability to onboard new customers or expand the usage of our existing customers, which could adversely affect our business, financial condition, and results of operations. In addition, any incident affecting our third-party hosting services’ infrastructure that may be caused by cyber-attacks, natural disasters, fire, flood, severe storm, earthquake, power loss, telecommunications failures, terrorist or other attacks, protests or riots, and other similar events beyond our control could negatively affect our cloud-based and multi-cloud hybrid products. These risks may be heightened in connection with the war between Israel and Hamas, the war between Russia and Ukraine, and associated geopolitical tensions and regional instability. It is also possible that our customers and regulators would seek to hold us accountable for any breach of security affecting a third-party cloud provider’s infrastructure and we may incur significant liability in investigating such an incident and responding to any claims, investigations, or proceedings made or initiated by those customers, regulators, and other third parties. We may not be able to recover a material portion of such liabilities from any of our third-party cloud providers. It may also become increasingly difficult to maintain and improve our performance, especially during peak usage times, as our software becomes more complex and the usage of our software increases. Moreover, our insurance may not be adequate to cover such liability and may be subject to exclusions. Any of the above circumstances or events may harm our business, results of operations, and financial condition.

Current wording

We outsource substantially all of the infrastructure relating to our cloud products to third-party cloud providers chosen by our customers. Customers of our SaaS offerings need to be able to access our platform at any time, without interruption or degradation of performance, and we provide them with service-level commitments with respect to uptime. Third-party cloud providers run their own platforms that we access, and we are, therefore, vulnerable to their service interruptions and any changes in their product offerings. Any limitation on the capacity of our third-party hosting services could impede our ability to onboard new customers or expand the usage of our existing customers, which could adversely affect our business, financial condition, and results of operations. In addition, any incident affecting our third-party hosting services’ infrastructure that may be caused by cyber-attacks, natural disasters, fire, flood, severe storm, earthquake, power loss, telecommunications failures, terrorist or other attacks, protests or riots, and other similar events beyond our control could negatively affect our cloud-based and multi-cloud hybrid products. These risks may be heightened in connection with the war between Israel, Hamas and Hezbollah, the war between Russia and Ukraine, and associated geopolitical tensions and regional instability. It is also possible that our customers and regulators would seek to hold us accountable for any breach of security affecting a third-party cloud provider’s infrastructure and we may incur significant liability in investigating such an incident and responding to any claims, investigations, or proceedings made or initiated by those customers, regulators, and other third parties. We may not be able to recover a material portion of such liabilities from any of our third-party cloud providers. It may also become increasingly difficult to maintain and improve our performance, especially during peak usage times, as our software becomes more complex and the usage of our software increases. Moreover, our insurance may not be adequate to cover such liability and may be subject to exclusions. Any of the above circumstances or events may harm our business, results of operations, and financial condition.

Previous wording

Our future success depends, in part, on our ability to continue to attract and retain highly skilled personnel. The loss of the services of any of our key personnel, the inability to attract or retain qualified personnel, or delays in hiring required personnel, particularly in engineering and sales, may seriously harm our business, financial condition, and results of operations. For example, following the departure of our Chief Financial Officer in the last twelve months, we have hired both a new Chief Financial Officer and Chief Legal Officer, and our Chief Data Scientist has recently transitioned to a consulting role. Although we have entered into employment agreements with our key personnel, employment in the U.S. is generally for no specific duration and constitutes at-will employment. We are also substantially dependent on the continued service of our existing engineering personnel because of the complexity of our products.

Current wording

Our future success depends, in part, on our ability to continue to attract and retain highly skilled personnel. The loss of the services of any of our key personnel, the inability to attract or retain qualified personnel, or delays in hiring required personnel, particularly in engineering and sales, may seriously harm our business, financial condition, and results of operations. Although we have entered into employment agreements with our key personnel, employment in the U.S. is generally for no specific duration and constitutes at-will employment. We are also substantially dependent on the continued service of our existing engineering personnel because of the complexity of our products.

Previous wording

For example, we are currently operating in a period of economic uncertainty and the U.S. has experienced high levels of inflation and rising interest rates, which has led to increased costs of labor, capital, employee compensation, and other similar effects. If unfavorable conditions in the national and global economy persist, or worsen, our current and potential customers’ operating costs will likely increase, which could result in reduced operating and information technology budgets. To the extent our products are perceived by customers and potential customers as discretionary, our revenue may be disproportionately affected by delays or reductions in general information technology spending. Such delays or reductions in technology spending are often associated with enhanced budget scrutiny by our customers including additional levels of approvals, cloud optimization efforts, and additional time to evaluate and test our products, which can lead to long and unpredictable sales cycles. We have recently experienced longer sales cycles for certain products and enhanced budget scrutiny by our customers, and expect to continue to experience these challenges given the current macroeconomic environment. Also, customers may choose to develop in-house software as an alternative to using our products, and competitors may respond to such negative conditions in the general economy by lowering prices, any of which could adversely affect demand for our products and limit our ability to grow our business.

Current wording

For example, we are currently operating in a period of economic uncertainty. While interest rates have begun to decline and inflation is significantly lower than in past quarters, the U.S. has experienced increased costs of labor, capital, employee compensation, and other similar effects in the recent past. If conditions in the national and global economy do not continue to improve or instead worsen, our current and potential customers’ operating costs will likely increase, which could result in reduced operating and information technology budgets. To the extent our products are perceived by customers and potential customers as discretionary, our revenue may be disproportionately affected by delays or reductions in general information technology spending. Such delays or reductions in technology spending are often associated with enhanced budget scrutiny by our customers including additional levels of approvals, cloud optimization efforts, and additional time to evaluate and test our products, which can lead to long and unpredictable sales cycles. We have recently experienced longer sales cycles for certain products and enhanced budget scrutiny by our customers, and expect to continue to experience these challenges given the current macroeconomic environment. Also, customers may choose to develop in-house software as an alternative to using our products, and competitors may respond to such negative conditions in the general economy by lowering prices, any of which could adversely affect demand for our products and limit our ability to grow our business.

Previous wording

We have incorporated machine learning and AI technologies in our offerings and business, including developing new product features using AI technologies. AI technology may become more important to our operations or to our future growth over time. We may fail to properly implement or market our use of AI technology. Our products and systems may become targets for abuse powered by AI, and our support for MLOps may fall behind existing standards which are changing rapidly. Our competitors or other third parties may incorporate AI technology into their products, offerings, and solutions more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations.

Current wording

We have deployed machine learning and AI technologies in our offerings and business, including developing new product features utilizing AI technologies. AI technology may become more important to our operations or to our future growth over time. We may fail to properly implement or market our use of AI technology. Our products and systems may become targets for abuse powered by AI, and our support for MLOps may fall behind existing standards which are changing rapidly. Our competitors or other third parties may incorporate AI technology into their products, offerings, and solutions more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations.

Previous wording

AI technology also may be the subject of new or modified legal and regulatory obligations. For example, the EU AI Act (the “AI Act”) will impose obligations on providers and users of artificial intelligence. Under the AI Act, fines can reach up to €35 million or 7% of global income. The AI Act may impact the incorporation of AI technologies into our offerings and business in Europe. Other countries, including the U.S. at both the state and federal level, are increasingly looking to regulate AI. For example, on October 30, 2023, the Biden Administration issued an Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence, and several AI bills have been introduced in Congress. Other countries, including Brazil, China, Greece, India, Israel, and Thailand are contemplating laws regulating AI.

Current wording

AI technology also may be the subject of new or modified legal and regulatory obligations. For example, the EU AI Act (the “AI Act”) which entered into force on August 1, 2024, will impose obligations on providers and users of AI. Under the AI Act, fines can reach up to €35 million or 7% of global income. The AI Act may impact the incorporation of AI technologies into our offerings and business in Europe. Other countries, including the U.S. at both the state and federal level, are increasingly looking to regulate AI. For example, on October 30, 2023, the Biden Administration issued an Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence, and several AI bills have been introduced in Congress. A significant number of other countries are contemplating laws regulating AI. and numerous U.S. states have proposed, and in certain cases enacted, legislation relating to AI.

Previous wording

In recent years, there has been significant litigation involving patents and other intellectual property rights in the software industry. We do not currently have a large patent portfolio, which could prevent us from deterring patent infringement claims through our own patent portfolio, and our competitors and others may now and in the future have significantly larger and more mature patent portfolios than we have. The intellectual property ownership and license rights, including copyright, surrounding AI technologies has not yet been fully addressed by lawmakers or courts, and the use of third party AI in our products offerings may result in exposure to claims of copyright infringement or other intellectual property misappropriation. We could incur substantial costs in prosecuting or defending any intellectual property litigation. If we sue to enforce our rights or are sued by a third party that claims that our products infringe, misappropriate, or violate their rights, the litigation could be expensive and could divert our management resources.

Current wording

In recent years, there has been significant litigation involving patents and other intellectual property rights in the software industry. We do not currently have a large patent portfolio, which could prevent us from deterring patent infringement claims through our own patent portfolio, and our competitors and others may now and in the future have significantly larger and more mature patent portfolios than we have. The intellectual property ownership and license rights, including copyright, surrounding AI technologies has not yet been fully addressed by lawmakers or courts, and the use of third party AI in our products offerings may result in exposure to claims of copyright infringement or other intellectual property misappropriation. We could incur substantial costs in prosecuting or defending any intellectual property litigation. If we sue to enforce our rights or are sued by a third party that claims that our products infringe, misappropriate, or violate their rights, the litigation could be expensive, time-consuming and could divert our management and other employee resources.

Previous wording

Within the U.S., we anticipate increasing regulation of privacy, data protection, and data security, including the adoption of more stringent laws. For example, in June 2018, California passed the California Consumer Privacy Act (“CCPA”), which provides new data privacy rights for California consumers and new operational requirements for covered companies. The CCPA, among other things, provides that covered companies must provide new disclosures to California consumers and afford such consumers new data privacy rights that include the right to request a copy from a covered company of the personal information collected about them, the right to request deletion of such personal information, and the right to request to opt-out of certain sales of such personal information. The CCPA became operative on January 1, 2020. The California Attorney General can enforce the CCPA, including seeking an injunction and civil penalties for violations. The CCPA provides a private right of action for certain data breaches that is expected to increase data breach litigation. The CCPA has required us to modify our data practices and policies and to incur certain costs and expenses in an effort to comply. Additionally, a new privacy law, the California Privacy Rights Act (“CPRA”), was approved by California voters in November 2020. The CPRA modifies the CCPA significantly, potentially resulting in further uncertainty and requiring us to incur additional costs and expenses in an effort to comply. Additionally, other states have proposed or enacted privacy, data protection, and data security laws, including, for example, Washington’s My Health, My Data Act, and other laws similar to the CCPA such as in Virginia, Colorado, Utah, Connecticut, Iowa, Indiana, Montana, Tennessee, Oregon, Florida, Delaware, New Jersey, Texas, Kentucky, Maryland, Minnesota, New

Current wording

Within the U.S., we anticipate increasing regulation of privacy, data protection, and data security, including the adoption of more stringent laws. For example, in June 2018, California passed the California Consumer Privacy Act (“CCPA”), which provides new data privacy rights for California consumers and new operational requirements for covered companies. The CCPA, among other things, provides that covered companies must provide new disclosures to California consumers and afford such consumers new data privacy rights that include the right to request a copy from a covered company of the personal information collected about them, the right to request deletion of such personal information, and the right to request to opt-out of certain sales of such personal information. The CCPA became operative on January 1, 2020. The California Attorney General can enforce the CCPA, including seeking an injunction and civil penalties for violations. The CCPA provides a private right of action for certain data breaches that is expected to increase data breach litigation. The CCPA has required us to modify our data practices and policies and to incur certain costs and expenses in an effort to comply. Additionally, a new privacy law, the California Privacy Rights Act (“CPRA”), was approved by California voters in November 2020. The CPRA modifies the CCPA significantly, potentially resulting in further uncertainty and requiring us to incur additional costs and expenses in an effort to comply. Additionally, other states have proposed or enacted privacy, data protection, and data security laws, including, for example, Washington’s My Health, My Data Act, and other laws similar to the CCPA such as in Virginia, Colorado, Utah, Connecticut, Iowa, Indiana, Montana, Tennessee, Oregon, Delaware, New Jersey, Texas, Kentucky, Maryland, Minnesota, New Hampshire,

Previous wording

Hampshire, Nebraska, and Rhode Island. These newly proposed or enacted laws could increase our potential liability and adversely affect our business.

Current wording

Nebraska, and Rhode Island. These newly proposed or enacted laws could increase our potential liability and adversely affect our business.

Previous wording

Internationally, we also expect that there will continue to be new laws, regulations, and industry standards concerning privacy, data protection, information security, and AI proposed and enacted in various jurisdictions. For example, the data protection landscape in the European Union (“EU”) continues to evolve, resulting in possible significant operational costs for internal compliance and risks to our business. The EU adopted the General Data Protection Regulation (“GDPR”), which became effective in May 2018, and contains numerous requirements and changes from previously existing EU laws, including more robust obligations on data processors and heavier documentation requirements for data protection compliance programs by companies. Among other requirements, the GDPR regulates the transfer of personal data subject to the GDPR to third countries that have not been found to provide adequate protection to such personal data, including the U.S. Failure to comply with the GDPR could result in penalties for noncompliance (including possible fines of up to the greater of €20 million and 4% of our global annual turnover for the preceding financial year for the most serious violations, as well as the right to compensation for financial or non-financial damages claimed by individuals under Article 82 of the GDPR). Despite our efforts to attempt to comply with the GDPR, a regulator may determine that we have not done so and subject us to fines and public censure, which could harm our company.

Current wording

Internationally, we also expect that there will continue to be new laws, regulations, and industry standards concerning privacy, data protection, cybersecurity, and AI proposed and enacted in various jurisdictions. For example, the data protection and cybersecurity landscapes in the European Union (“EU”) continues to evolve, resulting in possible significant operational costs for internal compliance and risks to our business. The EU adopted the General Data Protection Regulation (“GDPR”), which became effective in May 2018, and contains numerous requirements and changes from previously existing EU laws, including more robust obligations on data processors and heavier documentation requirements for data protection compliance programs by companies. Among other requirements, the GDPR regulates the transfer of personal data subject to the GDPR to third countries that have not been found to provide adequate protection to such personal data, including the U.S. Failure to comply with the GDPR could result in penalties for noncompliance (including possible fines of up to the greater of €20 million and 4% of our global annual turnover for the preceding financial year for the most serious violations, as well as the right to compensation for financial or non-financial damages claimed by individuals under Article 82 of the GDPR). Despite our efforts to attempt to comply with the GDPR, a regulator may determine that we have not done so and subject us to fines and public censure, which could harm our company.

Previous wording

In addition to the GDPR, the European Commission has another draft regulation in the approval process that focuses on a person’s right to conduct a private life. The proposed legislation, known as the Regulation of Privacy and Electronic Communications (“ePrivacy Regulation”), would replace the current ePrivacy Directive. Originally planned to be adopted and implemented at the same time as the GDPR, the ePrivacy Regulation is still being negotiated. Most recently, on February 10, 2021, the Council of the EU agreed on its version of the draft ePrivacy Regulation. If adopted, ePrivacy Regulation is anticipated to have broad potential impacts on the use of internet-based services and tracking technologies, such as cookies. Aspects of the ePrivacy Regulation remain for negotiation between the European Commission and the Council. We expect to incur additional costs to comply with the requirements of the ePrivacy Regulation as it is finalized for implementation. Additionally, on January 13, 2022, the Austrian data protection authority published a decision ruling that the collection of personal data and transfer to the U.S. through Google Analytics and other analytics and tracking tools used by website operators violates the GDPR. On February 10, 2022, the French data protection authority issued a press release stating that the French data protection authority had issued a similar decision. On June 23, 2022, the Italian data protection authority adopted a similar decision, and on September 21, 2022, the Danish data protection authority adopted a similar decision. Other data protection authorities in the EU are increasingly focused on the use of online tracking tools and have indicated that they plan to issue similar rulings.

Current wording

In addition to the GDPR, the European Commission has another draft regulation in the approval process that focuses on a person’s right to conduct a private life. The proposed legislation, known as the Regulation of Privacy and Electronic Communications (“ePrivacy Regulation”), would replace the current ePrivacy Directive. Originally planned to be adopted and implemented at the same time as the GDPR, the ePrivacy Regulation is still being negotiated. Most recently, on February 10, 2021, the Council of the EU agreed on its version of the draft ePrivacy Regulation. If adopted, ePrivacy Regulation is anticipated to have broad potential impacts on the use of internet-based services and tracking technologies, such as cookies. Aspects of the ePrivacy Regulation remain for negotiation between the European Commission and the Council. We expect to incur additional costs to comply with the requirements of the ePrivacy Regulation as it is finalized for implementation. Additionally, on January 13, 2022, the Austrian data protection authority published a decision ruling that the collection of personal data and transfer to the U.S. through Google Analytics and other analytics and tracking tools used by website operators violates the GDPR. On February

Previous wording

Other countries are considering or have enacted legislation that could impact our compliance obligations, expose us to liability, and increase the cost and complexity of delivering our services. For example, failure to comply with the Israeli Privacy Protection Law 5741-1981, and its regulations as well as the guidelines of the Israeli Privacy Protection Authority, may expose us to administrative fines, civil claims (including class actions), and, in certain cases, criminal liability. Further, the Data Security Law of China (“DSL”), which took effect on September 1, 2021, and the Personal Information Protection Law of China (“PIPL”), which took effect on November 1, 2021, implement comprehensive regulation of data and personal data processing activities across all industries and operations such as collecting, utilizing, processing, sharing, and transferring data and personal information. The DSL and PIPL apply not only to the processing of data within China, but also seeks to regulate cross-border data transfers as well as certain activities outside of China. Limitations imposed by the DSL and PIPL and uncertainty regarding their application may impact us and may require us to make changes to our policies and practices in an effort to comply. We are also monitoring recent or pending legislation in India and Japan, among others, for further impacts on our compliance obligations, including requirements for local storage and processing of data that could increase the cost and complexity of delivering our services. Such current or pending legislation may also result in changes to current enforcement measures and sanctions.

Current wording

Other countries are considering or have enacted legislation that could impact our compliance obligations, expose us to liability, and increase the cost and complexity of delivering our services. In Israel, failure to meet the requirements of the Israeli Privacy Protection Law 5741-1981 and its regulations (the “Israeli Privacy Law”) can serve as basis for civil claims (including class actions), and, in certain cases, criminal liability, as well as exposing the Company to administrative fines. Recent amendment to the Privacy Law will enter effect in August 2025 and will introduce additional obligations that will apply to parties that process personal data and will significantly increase the sanctions that can be imposed in case of failure to comply with the requirements of the Israeli Privacy Law. Such monetary sanctions can, in certain cases, reach significant amounts of millions NIS. We are also monitoring recent or pending legislation in India and Japan, among others, for further impacts on our compliance obligations, including requirements for local storage and processing of data that could increase the cost and complexity of delivering our services. Such current or pending legislation may also result in changes to current enforcement measures and sanctions.

Previous wording

We also expect that there will continue to be changes in interpretations of existing laws and regulations, or new proposed laws and regulations concerning privacy, data security, and data protection. We cannot yet determine the impact these laws and regulations or changed interpretations may have on our business, but we anticipate that they could impair our or our customers’ ability to collect, use, or disclose information relating to consumers, which could decrease demand for our platform, increase our costs, and impair our ability to maintain and grow our customer base and increase our revenue. Moreover, because the interpretation and application of many laws and regulations relating to privacy, security, and data protection, along with mandatory industry standards, are uncertain, it is possible that these laws, regulations and standards, or contractual obligations to which we are or may become subject, may be interpreted and applied in a manner that is inconsistent with our existing or future data management practices or features of our platform and products. Any failure or perceived failure by us to comply with our posted privacy policies, our privacy-related obligations to users or other third parties, or any other actual or asserted legal obligations or regulatory requirements relating to privacy, data protection, or data security, may result in governmental investigations or enforcement actions, litigation, claims, or public statements against us by consumer advocacy groups or others and could result in significant liability, cause our users to lose trust in us, and otherwise materially and adversely affect our reputation and business. Furthermore, the costs of compliance with, and other burdens imposed by, the laws, regulations, other obligations, and policies that are applicable to the businesses of our users may limit the adoption and use of, and reduce the overall demand for, our platform. Additionally, if third parties we work with violate applicable laws, regulations, or contractual obligations, such violations may put our users’ data at risk, could result in governmental investigations or enforcement actions, fines, litigation, claims, or public statements against us by consumer advocacy groups or others, and could result in significant liability, cause our users to lose trust in us, and otherwise materially and adversely affect our reputation and business. Further, public scrutiny of, or complaints about, technology companies or their data handling or data protection practices, even if unrelated to our business, industry, or operations, may lead to increased scrutiny of technology companies, including us, and may cause government agencies to enact additional regulatory requirements, or to modify their enforcement or investigation activities, which may increase our costs and risks.

Current wording

We also expect that there will continue to be changes in interpretations of existing laws and regulations, or new proposed laws and regulations concerning privacy, data security, and data protection. We cannot yet determine the impact these laws and regulations or changed interpretations may have on our business, but we anticipate that they could impair our or our customers’ ability to collect, use, or disclose information relating to consumers, which could decrease demand for our platform, increase our costs, and impair our ability to maintain and grow our customer base and increase our revenue. Moreover, because the interpretation and application of many laws and regulations relating to privacy, security, and data protection, along with mandatory industry standards, are uncertain, it is possible that these laws, regulations and standards, or contractual obligations to which we are or may become subject, may be interpreted and applied in a manner that is inconsistent with our existing or future data management practices or features of our platform and products. Any failure or perceived failure by us to comply with our posted privacy notices, our privacy-related obligations to users or other third parties, or any other actual or asserted legal obligations or regulatory requirements relating to privacy, data protection, or data security, may result in governmental investigations or enforcement actions, litigation, claims, or public statements against us by privacy advocacy groups or others and could result in significant liability, cause our customers to lose trust in us, and otherwise materially and adversely affect our reputation and business. Furthermore, the costs of compliance with, and other burdens imposed by, the laws, regulations, other obligations, and policies that are applicable to the businesses of our users may limit the adoption and use of, and reduce the overall demand for, our platform. Additionally, if third parties we work with violate applicable laws, regulations, or contractual obligations, such violations may put our users’ data at risk, could result in governmental investigations or enforcement actions, fines, litigation, claims, or public statements against us by privacy advocacy groups or others, and could result in significant liability, cause our customers to lose trust in us, and otherwise materially and adversely affect our reputation and business. Further, public scrutiny of, or complaints about, technology companies or their data handling or data protection practices, even if unrelated to our business, industry, or operations, may lead to increased scrutiny of technology companies, including us, and may cause government agencies to enact additional regulatory requirements, or to modify their enforcement or investigation activities, which may increase our costs and risks.

Previous wording

Despite our efforts, our systems and those of our vendors, service providers, and strategic partners also are potentially vulnerable to computer malware, viruses, computer hacking, fraudulent use, social engineering attacks, phishing attacks, ransomware attacks, credential stuffing attacks, denial-of-service attacks, unauthorized access, exploitation of bugs, defects, and vulnerabilities, breakdowns, damage, interruptions, system malfunctions, power outages, terrorism, acts of vandalism, failures, security breaches and incidents, inadvertent or intentional actions by our employees, contractors, consultants, partners, and/or other third parties, and other real or perceived cyberattacks. Our risks of cyberattacks and other sources of security breaches and incidents, and those faced by our vendors, service providers, and strategic partners, may be heightened in connection with the war between Israel and Hamas, the war between Russia and Ukraine, and associated geopolitical tensions and regional instability. Any of these incidents or any compromise of our security or any unauthorized access to or breaches of the security of our or our service providers’ systems or data processing tools or processes, or of our platform and product offerings, as a result of third-party action, employee error, vulnerabilities, defects or bugs, malfeasance, or otherwise, could result in unauthorized or unlawful access to, misuse, disclosure, loss, acquisition, corruption, unavailability, alteration, modification, or destruction of our and our customers’ data, including sensitive and proprietary information, personal data and personal information, or a risk to the security of our or our customers’ systems.

Current wording

Despite our efforts, our systems and those of our vendors, service providers, and strategic partners also are potentially vulnerable to computer malware, viruses, computer hacking, fraudulent use, social engineering attacks, phishing attacks, ransomware attacks, credential stuffing attacks, denial-of-service attacks, unauthorized access, exploitation of bugs, defects, and vulnerabilities, breakdowns, damage, interruptions, system malfunctions, power outages, terrorism, acts of vandalism, failures, security breaches and incidents, inadvertent or intentional actions by our employees, contractors, consultants, partners, and/or other third parties, and other real or perceived cyberattacks. Our risks of cyberattacks and other sources of security breaches and incidents, and those faced by our vendors, service providers, and strategic partners, may be heightened in connection with the war between Israel, Hamas and Hezbollah, the war between Russia and Ukraine, and associated geopolitical tensions and regional instability. Any of these incidents or any compromise of our security or any unauthorized access to or breaches of the security of our or our service providers’ systems or data processing tools or processes, or of our platform and product offerings, as a result of third-party action, employee error, vulnerabilities, defects or bugs, malfeasance, or otherwise, could result in unauthorized or unlawful access to, misuse, disclosure, loss, acquisition, corruption, unavailability, alteration, modification, or destruction of our and our customers’ data, including sensitive and proprietary information, personal data and personal information, or a risk to the security of our or our customers’ systems.

Previous wording

different labor regulations, especially in the EU and India, where labor laws are generally more advantageous to employees as compared to the U.S., including differing hourly wages and overtime regulations in these locations;

Current wording

different labor regulations, especially in Israel, the EU and India, where labor laws are generally more advantageous to employees as compared to the U.S., including differing hourly wages and overtime regulations in these locations;

Previous wording

exposure to many stringent and potentially inconsistent laws and regulations relating to privacy, data protection, AI, and data security, particularly in the EU;

Current wording

exposure to many stringent and potentially inconsistent laws and regulations relating to privacy, data protection, AI, and data security, particularly in the EU and India;

Previous wording

changes in a specific country’s or region’s political or economic conditions, such as the war between Israel and Hamas and the war between Russia and Ukraine and the associated geopolitical tensions and regional instability, as well as economic sanctions the U.S., the EU, and other countries have imposed on Russia and certain of its allies and the impact of the foregoing on the global economy;

Current wording

changes in a specific country’s or region’s political or economic conditions, such as the war between Israel, Hamas and Hezbollah and the war between Russia and Ukraine and the associated geopolitical tensions and regional instability, as well as economic sanctions the U.S., the EU, and other countries have imposed on Russia and certain of its allies and the impact of the foregoing on the global economy;

Previous wording

We are currently expanding operations in China and may continue to increase our presence in China. Our operations in China are subject to a number of risks relating to China’s economic and political systems, including but not limited to:

Current wording

We currently conduct limited operations in China. Our operations in China are subject to a number of risks relating to China’s economic and political systems, including but not limited to:

Previous wording

We are eligible for certain tax benefits provided to a “Preferred Technology Enterprise” under the Israeli Law for the Encouragement of Capital Investments, 1959, referred to as the Investment Law. In order to remain eligible for the tax benefits for a Preferred Technology Enterprise, we must continue to meet certain conditions stipulated in the Investment Law and its regulations, as amended. If these tax benefits are reduced, canceled, or discontinued, our Israeli taxable income from the Preferred

Current wording

We are eligible for certain tax benefits provided to a “Preferred Technology Enterprise” under the Israeli Law for the Encouragement of Capital Investments, 1959, referred to as the Investment Law. In order to remain eligible for the tax benefits for a Preferred Technology Enterprise, we must continue to meet certain conditions stipulated in the Investment Law and its regulations, as amended. If these tax benefits are reduced, canceled, or discontinued, our Israeli taxable income from the Preferred Technology Enterprise would be subject to regular Israeli corporate tax rates. Additionally, if we increase our activities outside of Israel through acquisitions, for example, our expanded activities might not be eligible for inclusion in future Israeli tax benefit programs.

Previous wording

We collect sales, value added, and other similar taxes in a number of jurisdictions. One or more U.S. states or countries may seek to impose incremental or new sales, use, value added, digital services, or other tax collection obligations on us. Further, an increasing number of U.S. states have considered or adopted laws that attempt to impose tax collection obligations on out-of-state companies. Additionally, the U.S. Supreme Court ruled in South Dakota v. Wayfair, Inc. et al, (“Wayfair”), that online sellers can be required to collect sales and use tax despite not having a physical presence in the state of the customer. In response to Wayfair, or otherwise, U.S. states or local governments may adopt, or begin to enforce, laws requiring us to calculate, collect, and remit taxes on sales in their jurisdictions. A successful assertion by one or more U.S. states requiring us to collect taxes where we presently do not do so, or to collect more taxes in a jurisdiction in which we currently do collect some taxes, could result in substantial liabilities, including taxes on past sales, as well as interest and penalties. Furthermore, certain jurisdictions, such as the United Kingdom and France, introduced a digital services tax, which is generally a tax on gross revenue generated from users or customers located in those jurisdictions, and other jurisdictions have enacted or are considering enacting similar laws. A successful assertion by a U.S. state or local government, or other country or jurisdiction that we should have been or should be collecting additional sales, use, value added, digital services, or other similar taxes could, among other things, result in substantial tax payments, create significant administrative burdens for us, discourage potential customers from subscribing to our platform due to the incremental cost of any such sales or other related taxes, or otherwise harm our business.

Current wording

We collect sales, value added, and other similar taxes in a number of jurisdictions. One or more U.S. states or countries may seek to impose incremental or new sales, use, value added, digital services, or other tax collection obligations on us. Further, an increasing number of U.S. states have considered or adopted laws that attempt to impose tax collection obligations on out-of-state companies. Additionally, the U.S. Supreme Court ruled in South Dakota v. Wayfair, Inc. et al, (“Wayfair”), that online sellers can be required to collect sales and use tax despite not having a physical presence in the state of the customer. In response to Wayfair, or otherwise, many U.S. states or local governments have adopted, and may begin to enforce, laws requiring us to calculate, collect, and remit taxes on sales in their jurisdictions. A successful assertion by one or more U.S. states requiring us to collect taxes where we presently do not do so, or to collect more taxes in a jurisdiction in which we currently do collect some taxes, could result in substantial liabilities, including taxes on past sales, as well as interest and penalties. Furthermore, certain jurisdictions, such as the United Kingdom and France, introduced a digital services tax, which is generally a tax on gross revenue generated from users or customers located in those jurisdictions, and other jurisdictions have enacted or are considering enacting similar laws. A successful assertion by a U.S. state or local government, or other country or jurisdiction that we should have been or should be collecting additional sales, use, value added, digital services, or other similar taxes could, among other things, result in substantial tax payments, create significant administrative burdens for us, discourage potential customers from subscribing to our platform due to the incremental cost of any such sales or other related taxes, or otherwise harm our business.

Previous wording

As of December 31, 2023, we had net operating loss carryforwards of $138.8 million in Israel and U.S. state net operating loss carryforwards of $51.5 million, which may be utilized against future income taxes. Limitations imposed by the applicable jurisdictions on our ability to utilize net operating loss carryforwards, including with respect to the net operating loss carryforwards of companies that we have acquired or may acquire in the future, could cause income taxes to be paid earlier than would be paid if such limitations were not in effect and could cause such net operating loss carryforwards to expire unused, in each case reducing or eliminating the benefit of such net operating loss carryforwards. Furthermore, we may not be able to generate sufficient taxable income to utilize our net operating loss carryforwards before they expire. If any of these events occur, we may not derive some or all of the expected benefits from our net operating loss carryforwards.

Current wording

As of December 31, 2023, we had net operating loss carryforwards of $138.8 million in Israel and U.S. state net operating loss carryforwards of $51.5 million, which may be utilized against future taxable income. Limitations imposed by the applicable jurisdictions on our ability to utilize net operating loss carryforwards, including with respect to the net operating loss carryforwards of companies that we have acquired or may acquire in the future, could cause income taxes to be paid earlier than would be paid if such limitations were not in effect and could cause such net operating loss carryforwards to expire unused, in each case reducing or eliminating the benefit of such net operating loss carryforwards. Furthermore, we may not be able to generate sufficient taxable income to utilize our net operating loss carryforwards before they expire. If any of these events occur, we may not derive some or all of the expected benefits from our net operating loss carryforwards.

Previous wording

other events or factors, including those resulting from war, including the war between Israel and Hamas, incidents of terrorism or responses to these events.

Current wording

other events or factors, including those resulting from war, including the war between Israel, Hamas and Hezbollah, incidents of terrorism or responses to these events.

Previous wording

Although we believe this exclusive forum provision benefits us by providing increased consistency in the application of U.S. federal securities laws in the types of lawsuits to which they apply, the exclusive forum provision may limit a shareholder’s ability to bring a claim in a judicial forum of its choosing for disputes with us or any of our directors, shareholders, officers, or other employees, which may discourage lawsuits with respect to such claims against us and our current and former directors, shareholders, officers, or other employees. Our shareholders will not be deemed to have waived our compliance with the U.S.

Current wording

Although we believe this exclusive forum provision benefits us by providing increased consistency in the application of U.S. federal securities laws in the types of lawsuits to which they apply, the exclusive forum provision may limit a shareholder’s ability to bring a claim in a judicial forum of its choosing for disputes with us or any of our directors, shareholders, officers, or other employees, which may discourage lawsuits with respect to such claims against us and our current and former directors, shareholders, officers, or other employees. Our shareholders will not be deemed to have waived our compliance with the U.S. federal securities laws and the rules and regulations thereunder as a result of our exclusive forum provision. Further, in the event a court finds the exclusive forum provision contained in our amended and restated Articles of Association to be unenforceable or inapplicable in an action, we may incur additional costs associated with resolving such action in other jurisdictions, which could harm our results of operations.

Previous wording

In October 2023, Hamas militants and members of other terrorist organizations infiltrated Israel’s southern border from the Gaza Strip and conducted a series of terror attacks on civilian and military targets. Since the commencement of these events, there have been additional active hostilities, including with Hezbollah in Lebanon, the Houthi movement which controls parts of Yemen, and most recently with Iran. It is possible that these hostilities will escalate in the future into a greater regional conflict, and that additional terrorist organizations and countries will actively join the hostilities. The intensity and duration of Israel’s current war against Hamas and other terror organizations is difficult to predict, as are such war’s economic implications on the Company’s business and operations and on Israel's economy in general. These events may imply wider macroeconomic indications of a deterioration of Israel’s economic standing, which may have a material adverse effect on the Company and its ability to effectively conduct its operations.

Current wording

In October 2023, Hamas militants and members of other terrorist organizations infiltrated Israel’s southern border from the Gaza Strip and conducted a series of terror attacks on civilian and military targets. Since the commencement of these events, there have been additional active hostilities, including with Hezbollah in Lebanon, the Houthi movement which controls parts of Yemen, and most recently with Iran. It is possible that these hostilities will escalate in the future into a greater regional conflict, and that additional terrorist organizations and countries will actively join the hostilities. The intensity and duration of Israel’s current war against Hamas, Hezbollah, and other terror organizations is difficult to predict, as are such war’s economic implications on the Company’s business and operations and on Israel's economy in general. These events may imply wider macroeconomic indications of a deterioration of Israel’s economic standing (including as the result of a downgrade in Israel’s credit rating by certain credit rating agencies), which may have a material adverse effect on the Company and its ability to effectively conduct its operations.

Previous wording

Certain countries, companies and organizations participate in a boycott of Israeli companies. In addition, there have been increased efforts recently to cause companies and consumers to boycott Israeli goods and services. Any boycott, restrictive laws, policies, or practices directed towards Israel, Israeli businesses, or Israeli citizens could, individually or in the aggregate, have a material adverse effect on our business.

Current wording

Certain countries, companies and organizations participate in a boycott of Israeli companies. In addition, there have been increased efforts recently to cause companies and consumers to boycott Israeli goods and services. Any boycott, restrictive laws, policies, or practices directed towards Israel, Israeli businesses, or Israeli citizens could, individually or in the aggregate, have a material adverse effect on our business. In addition, in January 2024 the International Court of Justice, or ICJ, issued an interim ruling in a case filed by South Africa against Israel in December 2023, making allegations of genocide amid and in connection with the war in Gaza, and ordered Israel, among other things, to take measures to prevent genocidal acts, prevent and punish incitement to genocide, and take steps to provide basic services and humanitarian aid to civilians in Gaza. There are concerns that companies and businesses will terminate, and may have already terminated, certain commercial relationships with Israeli companies following the ICJ decision.

Previous wording

The impact of the war between Israel and Hamas, and regional conflict in the Middle East, the war between Russia and Ukraine, and other areas of geopolitical tension around the world, including the related global economic disruptions, remains uncertain at this time, and could harm or continue to harm our business and results of operations.

Current wording

The impact of the war between Israel, Hamas and Hezbollah, and regional conflict in the Middle East, the war between Russia and Ukraine, and other areas of geopolitical tension around the world, including the related global economic disruptions, remains uncertain at this time, and could harm or continue to harm our business and results of operations.

Previous wording

The war between Israel and Hamas, and regional conflict in the Middle East, the war between Russia and Ukraine, and other areas of geopolitical tension around the world continue to impact worldwide economic activity and financial markets. As a result of the war between Israel and Hamas, the regional conflict in the Middle East, the war between Russia and Ukraine, and related global economic disruptions, we could experience disruptions in our business or the business of our partners, customers, or the economy as a whole, any of which could adversely affect and could materially adversely impact our business, results of operations, and overall financial condition in future periods.

Current wording

The war between Israel, Hamas and Hezbollah, and regional conflict in the Middle East, the war between Russia and Ukraine, and other areas of geopolitical tension around the world continue to impact worldwide economic activity and financial markets. As a result of the war between Israel, Hamas and Hezbollah, the regional conflict in the Middle East, the war between Russia and Ukraine, and related global economic disruptions, we could experience disruptions in our business or the business of our partners, customers, or the economy as a whole, any of which could adversely affect and could materially adversely impact our business, results of operations, and overall financial condition in future periods.

Previous wording

The extent and continued impact of the Israel-Hamas war, the regional conflict in the Middle East, the Russia-Ukraine war, and related global economic disruptions on our operational and financial condition will depend on certain developments, including: government responses to the wars; the impact of the wars on our customers and our sales cycles; their impacts on customer, industry, or technology-based community events; and their effect on our partners, some of which are uncertain, difficult to predict, and not within our control. General economic conditions and disruptions in global markets due to the Israel-Hamas war, the regional conflict in the Middle East, the Russia-Ukraine war, and other areas of geopolitical tension around the world, and any actions taken by governmental authorities and other third parties in response may also affect our future performance.

Current wording

The extent and continued impact of the war between Israel, Hamas and Hezbollah, the regional conflict in the Middle East, the Russia-Ukraine war, and related global economic disruptions on our operational and financial condition will depend on certain developments, including: government responses to the wars; the impact of the wars on our customers and our sales cycles; their impacts on customer, industry, or technology-based community events; and their effect on our partners, some of which are uncertain, difficult to predict, and not within our control. General economic conditions and disruptions in global markets due to the war between Israel, Hamas and Hezbollah, the regional conflict in the Middle East, the Russia-Ukraine war, and other areas of geopolitical tension around the world, and any actions taken by governmental authorities and other third parties in response may also affect our future performance.

Previous wording

As of the date of this Quarterly Report on Form 10-Q, the full impact of the war between Israel and Hamas, the regional conflict in the Middle East, the war between Russia and Ukraine, and related global economic disruptions on our financial condition and results of operations remains uncertain. Furthermore, because of our subscription-based business model, the impact of these factors may not be fully reflected in our results of operations and overall financial condition until future periods, if at all.

Current wording

As of the date of this Quarterly Report on Form 10-Q, the full impact of the war between Israel, Hamas and Hezbollah, the regional conflict in the Middle East, the war between Russia and Ukraine, and related global economic disruptions on our financial condition and results of operations remains uncertain. Furthermore, because of our subscription-based business model, the impact of these factors may not be fully reflected in our results of operations and overall financial condition until future periods, if at all.