Skip to main content

Xometry Inc

For the period ended Dec 31, 2024. Filed Feb 25, 2025.

View on SEC.gov

About this filing

A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.

FY2024 · Filed Feb 25, 2025

XMTR$114.95+5.4%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-K

Period ended 2023-12-31; filed 2024-02-29.

0000950170-24-023214

Item 1A. Risk Factors

Current report: 10-K

Period ended 2024-12-31; filed 2025-02-25.

0000950170-25-026655

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 312 previous paragraphs and 315 current paragraphs.

255 unchanged; 51 reworded; 6 added; 5 removed; 1 previous and 3 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (6)

Current report

Changes in U.S. and international trade policies could adversely impact our business, results of operations and financial condition.

Current report

We employ a shared responsibility model where our customers are responsible for using, configuring and implementing security measures related to our platform, services and products in a manner that meets applicable cybersecurity standards, complies with laws, and addresses their information security risk. As part of this shared responsibility security model, we make certain security features available to our customers that can be implemented at our customers’ discretion, or identify security areas or measures for which our customers are responsible. For example, we support Multi-Factor Authentication (“MFA”) for users of the Xometry platform, but it is the customer's responsibility to enable it. In certain cases where our customers choose not to implement, or incorrectly implement, those features or measures, misuse our services, or otherwise experience their own vulnerabilities, policy violations, credential exposure or security incidents, even if we are not the cause of a resulting customer security issue or incident, our customer relationships reputation, and revenue may in the future may be adversely impacted.

Current report

Contractors outside of the U.S. performing business functions may be subject to agreements that require them to follow our standards, processes and procedures. Notwithstanding their contractual obligations, from time-to-time contractors may not comply with such standards, processes or procedures. Significant or continuing noncompliance with such standards, processes and procedures could harm our reputation and, as a result, could have an adverse effect on our sales and financial condition.

Current report

Changes in U.S. and international trade policies could adversely impact our business, results of operations and financial condition.

Current report

We derive the majority of our revenue from the sale of parts and assemblies to our customers on our marketplace. Our business is therefore dependent upon the availability and price of raw materials, tools and components for assembly in various countries around the world. To the extent that significant tariffs, sanctions or similar restrictions are placed on certain goods imported into the United States or tariffs and similar measures, including retaliatory measures, are imposed by foreign governments, we could also face significant challenges in maintaining our cost-effectiveness, and we and our network of suppliers may be required to raise prices, thereby making our marketplace less attractive to buyers. As our AI technology leverages its knowledge of buyer needs and preferences to provide competitive pricing and matching, an increase in our prices could result in the loss of customers and a decrease in buyer engagement on the platform. To the extent suppliers increase their costs and we are unable to sufficiently pass such price increases on to our customers, or if the level of demand for the products and services we offer decreases as a result of any price increases, we may not be able to achieve or maintain profitability. Furthermore, the imposition of such tariffs or sanctions could significantly reduce global trade and make it less attractive for our international suppliers to engage with U.S. businesses, further limiting our sourcing options and increasing our dependency on domestic suppliers. As a result of the foregoing factors, our business, financial condition and results of operations could be materially and adversely affected.

Current report

Under current law, U.S. federal net operating losses incurred in taxable years beginning after December 31, 2017 may be carried forward indefinitely, but the deductibility of such net operating losses is limited. It is uncertain whether various states will conform to federal tax laws. For state income tax purposes, there may be periods during which the use of net operating loss carryforwards is limited, which could accelerate or permanently increase state taxes owed.
Removed paragraphs (5)

Previous report

We may not realize all of the anticipated benefits from the acquisition of Thomas because of difficulties related to integration, the achievement of synergies, and other challenges.

Previous report

Most members of our management team have limited experience managing a publicly traded company, interacting with public company investors and complying with the increasingly complex laws pertaining to public companies in the United States. It is possible that our management team may experience challenges managing the significant regulatory oversight and reporting obligations under the U.S. federal securities laws and the continuous scrutiny of securities analysts and investors applicable to public companies. These obligations require significant attention from our senior management and could divert their attention away from the day-to-day management of our business, which could adversely affect our business, prospects, financial condition and results of operations.

Previous report

Under the Tax Act, as amended by the Coronavirus Aid, Relief, and Economic Security Act, or the CARES Act, net operating losses arising in taxable years beginning after December 31, 2017 and before January 1, 2021 may be carried back to each of the five taxable years preceding the tax year of such loss, but net operating losses arising in taxable years beginning after December 31, 2020 may not be carried back. Additionally, under the Tax Act, as modified by the CARES Act, net operating losses from tax years that began after December 31, 2017 may offset no more than 80% of current taxable income annually for taxable years beginning after December 31, 2020, but the 80% limitation on the use of net operating losses from tax years that began after December 31, 2017 does not apply for taxable income in tax years beginning before January 1, 2021. NOLs arising in tax years ending after December 31, 2017 can be carried forward indefinitely, but NOLs generated in tax years ending before January 1, 2018 will continue to have a two-year carryback and twenty-year carryforward period. As we maintain an almost full valuation allowance against our U.S. NOLs, these changes will not have a significant impact our balance sheet as of December 31, 2023. However, in future years, if and when a net deferred tax asset is recognized related to our NOLs, the changes in the carryforward and carryback periods as well as the new limitation on use of NOLs may significantly impact our valuation allowance assessments for NOLs generated after December 31, 2020.

Previous report

Our reported results of operations may be adversely affected by changes in GAAP.

Previous report

GAAP is subject to interpretation by the Financial Accounting Standards Board (“FASB”), the SEC, and various bodies formed to promulgate and interpret appropriate accounting principles. A change in these principles or interpretations could have a significant effect on our reported results of operations and could affect the reporting of transactions completed before the announcement of a change. It is difficult to predict the impact of future changes to accounting principles or our accounting policies, any of which could negatively affect our reported results of operations.
Reworded paragraphs (51)

Previous wording

We have incurred net losses since our inception in 2013. We incurred a net loss available to common stock holders of $67.5 million in 2023 and, as a result of these losses, we had an accumulated deficit of $319.9 million as of December 31, 2023. We expect to continue the development and expansion of our business, and we anticipate additional costs in connection with legal, accounting and other administrative expenses related to operating as a public company. If our revenue declines or fails to grow at a rate sufficient to offset increases in our operating expenses, we will not be able to achieve profitability in future periods or, if we do become profitable, sustain profitability. As a result, we may continue to generate net losses. We cannot ensure that we will achieve profitability in the future or that, if we do become profitable, we will be able to sustain profitability.

Current wording

We have incurred net losses since our inception in 2013. We incurred a net loss available to common stockholders of $50.4 million in 2024 and, as a result of these losses, we had an accumulated deficit of $370.3 million as of December 31, 2024. We expect to continue the development and expansion of our business. If our revenue declines or fails to grow at a rate sufficient to offset increases in our operating expenses, we will not be able to achieve profitability in future periods or, if we do become profitable, sustain profitability. As a result, we may continue to generate net losses. We cannot ensure that we will achieve profitability in the future or that, if we do become profitable, we will be able to sustain profitability.

Previous wording

We have grown rapidly over the last several years, but our recent revenue growth rate and financial performance should not be considered indicative of our future performance. During the years ended December 31, 2023, 2022, and 2021, our revenue was $463.4 million, $380.9 million and $218.3 million, respectively. We may also experience declines in our revenue growth rate as a result of a number of factors, including slowing demand for our platform, insufficient growth in the number of buyers and suppliers who transact on our marketplace, increasing competition, a decrease in the growth of our overall market, our failure to continue to capitalize on growth opportunities, failure to realize anticipated revenue growth from our supplier services and the maturation of our business, among others. You should not rely on our revenue or key operational and business metrics for any previous quarterly or annual period as any indication of our revenue, revenue growth, key business metrics, or key operational and business metrics growth in future periods. In particular, our revenue growth rate has fluctuated in prior periods. We expect our revenue growth rate to continue to fluctuate over the short term and decline in the long term. We also expect to continue to make investments in the development and expansion of our business, which may not result in increased revenue or growth. If our revenue growth rate declines, investors’ perceptions of our business and the trading price of our Class A common stock could be adversely affected.

Current wording

We have grown rapidly over the last several years, but our recent revenue growth rate and financial performance should not be considered indicative of our future performance. During the years ended December 31, 2024, 2023, and 2022, our revenue was $545.5 million, $463.4 million and $380.9 million, respectively. We have in the past and may in the future experience declines in our revenue growth rate as a result of a number of factors, including slowing demand for our platform, insufficient growth in the number of buyers and suppliers who transact on our marketplace, increasing competition, a decrease in the growth of our overall market, our failure to continue to capitalize on growth opportunities, failure to realize anticipated revenue growth from our supplier services and the maturation of our business, among others. You should not rely on our revenue or key operational and business metrics for any previous quarterly or annual period as any indication of our revenue, revenue growth, key business metrics, or key operational and business metrics growth in future periods. In particular, our revenue growth rate has fluctuated in prior periods. We expect our revenue growth rate to continue to fluctuate over the short term and decline in the long term. We also expect to continue to make investments in the development and expansion of our business, which may not result in increased revenue or growth. If our revenue growth rate declines, investors’ perceptions of our business and the trading price of our Class A common stock could be adversely affected.

Previous wording

We have experienced substantial growth in our operations, and we expect to experience continued substantial growth in our business. This growth has placed, and will continue to place, significant demands on our management and our operational infrastructure. Any growth that we experience in the future could require us to expand our sales and marketing personnel and general and administrative infrastructure. In addition to the need to scale our organization, future growth will impose significant added responsibilities on management, including the need to identify, recruit, train and integrate additional employees. We cannot assure you that any increases in scale, related improvements and quality assurance will be successfully implemented or that appropriate personnel will be available to facilitate the growth of our business. Rapid and significant growth may strain our administrative and operational infrastructure and could require significant capital expenditures that may divert financial resources from other projects, such as product development. Our ability to manage our business and growth will require us to continue to improve our operational, financial and management controls, and reporting systems and procedures. If we do not effectively manage our growth effectively, such as by failing to implement necessary procedures, transition to new processes or hire necessary personnel, it may be difficult for us to execute our business strategy and our business could be adversely affected.

Current wording

We have experienced substantial growth in our operations, and we expect to experience continued substantial growth in our business. This growth has placed, and will continue to place, significant demands on our management and our operational infrastructure. Any growth that we experience in the future could require us to expand our sales and marketing personnel and general and administrative infrastructure. In addition to the need to scale our organization, future growth will impose significant added responsibilities on management, including the need to identify, recruit, train and integrate additional employees. We cannot assure you that any increases in scale, related improvements and quality assurance will be successfully implemented or that appropriate personnel will be available to facilitate the growth of our business. Rapid and significant growth may strain our administrative and operational infrastructure and could require significant capital expenditures that may divert financial resources from other projects, such as product development. Our ability to manage our business and growth will require us to continue to improve our operational, financial and management controls, and reporting systems and procedures. If we do not effectively manage our growth, such as by failing to implement necessary procedures, transition to new processes or hire necessary personnel, it may be difficult for us to execute our business strategy and our business could be adversely affected.

Previous wording

the impact of holidays on purchase activity;

Current wording

the impact of holidays on purchasing and manufacturing activity;

Previous wording

changes in the common law, statutory, legislative, or regulatory environment, such as with respect to privacy and data protection, wage and hour regulations, worker classification (including classification of independent contractors or similar service providers and classification of employees as exempt or non-exempt), internet regulation, payment processing, import and export controls, global trade, or tax requirements;

Current wording

changes in the common law, statutory, legislative, or regulatory environment, such as with respect to privacy and data protection, wage and hour regulations, worker classification (including classification of independent contractors or similar service providers and classification of employees as exempt or non-exempt), internet regulation, payment processing, import and export controls, tariffs and global trade, or tax requirements;

Previous wording

uncertainties regarding the effect of general economic, business and market conditions, including inflationary pressures, general economic downturn or recession, market volatility, increasing interest rates and changes in monetary policy;

Current wording

uncertainties regarding the effect of general economic, business and market conditions, including inflationary pressures, general economic downturn or recession, market volatility, changes in interest rates and changes in monetary policy;

Previous wording

political unrest, changes and uncertainty associated with terrorism, hostilities and war, including the ongoing conflict between Russia and Ukraine and the ongoing conflict between Israel and Hamas, and sanctions imposed against Russia by the international community;

Current wording

political unrest, changes and uncertainty associated with terrorism, hostilities and war, including the ongoing conflict between Russia and Ukraine and related sanctions imposed against Russia by the international community, and conflict in the Middle East;

Previous wording

general economic and political conditions and government regulations in the countries where we currently have significant numbers of users, or where we currently operate or may expand in the future; and

Current wording

general economic and political conditions and government regulations in the countries where we currently have significant numbers of users or partners, or where we currently operate or may expand in the future; and

Previous wording

To satisfy both buyers and suppliers, we need to continue to improve their user experience as well as innovate and introduce features and services that users find useful and that cause them to use our platform and transact on our marketplace more frequently. This includes improving our technology to optimize pricing and lead-time tools, improving upon and introducing new supplier products and services, like our Thomasnet.com® platform, Xometry Pay, the Xometry Advance Card and Workcenter, improving upon and introducing new design guides, expanding the availability of suppliers to additional geographic and industry segments and improving the user-friendliness of our platform and our ability to provide high-quality support. Our buyers and suppliers depend on our support organization to resolve issues relating to our platform. Our ability to provide effective support is largely dependent on our ability to attract and retain employees who are well versed in our platform and the needs of buyers and suppliers transacting on our marketplace. As we continue to grow our international user base, our support organization will face additional challenges, including those associated with continuing to deliver support in languages other than English. Any failure to maintain high-quality support, or a market perception that we do not maintain high-quality support, could harm our reputation or adversely affect our ability to market the benefits of our platform and marketplace to existing and prospective users.

Current wording

To satisfy both buyers and suppliers, we need to continue to improve their user experience as well as innovate and introduce features and services that users find useful and that cause them to use our platform and transact on our marketplace more frequently. This includes improving our technology to optimize pricing and lead-time tools, improving upon and introducing new supplier products and services, like our Thomasnet.com® platform, Xometry Pay and Workcenter, improving upon and introducing new design guides, expanding the availability of suppliers to additional geographic and industry segments and improving the user-friendliness of our platform and our ability to provide high-quality support. Our buyers and suppliers depend on our support organization to resolve issues relating to our platform. Our ability to provide effective support is largely dependent on our ability to attract and retain employees who are well versed in our platform and the needs of buyers and suppliers transacting on our marketplace. As we continue to grow our international user base, our support organization will face additional challenges, including those associated with continuing to deliver support in languages other than English. Any failure to maintain high-quality support, or a market perception that we do not maintain high-quality support, could harm our reputation or adversely affect our ability to market the benefits of our platform and marketplace to existing and prospective users.

Previous wording

Customers, including large customers with substantial negotiating and purchasing power, may request that we use their internally-prepared purchase order forms or agree to terms and conditions for purchases that include terms that affect the amount or timing of or our ability to recognize revenue, increase our costs, increase our liability or are otherwise inconsistent with our standard documentation. If we are required to agree to these requests in order to do business with such customers, it may increase our cost to comply with such terms or we may not be able comply with such terms at all, in which case our relationship with the affected customer may be negatively impacted.

Current wording

Customers, including large customers with substantial negotiating and purchasing power, may require that we use their internally-prepared purchase order forms or agree to terms and conditions for purchases that include terms that affect the amount or timing of or our ability to recognize revenue, increase our costs, increase our liability or are otherwise inconsistent with our standard documentation. If we are required to agree to these terms in order to do business with such customers, it may increase our cost to comply with such terms or we may not be able to comply with such terms at all, in which case our relationship with the affected customer may be negatively impacted and our liability may be significantly increased.

Previous wording

Cyber-attacks, malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive information and information technology systems, and those of the third parties upon which we rely. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. Some actors now engage and are expected to continue to engage in cyber-attacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we, the third parties upon which we rely and our customers may be vulnerable to a heightened risk of these attacks, including retaliatory cyber-attacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our goods and services.

Current wording

Cyber-attacks, malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive information and information technology systems, and those of the third parties with whom we work. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. Some actors now engage and are expected to continue to engage in cyber-attacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we, the third parties with whom we work and our customers may be vulnerable to a heightened risk of these attacks, including retaliatory cyber-attacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our goods and services.

Previous wording

We and the third parties upon which we rely are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, credential stuffing attacks, credential harvesting, personnel misconduct or error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, earthquakes, fires, floods, attacks enhanced or facilitated by AI, and other similar threats. In particular, severe ransomware attacks are becoming increasingly prevalent (particularly for companies engaged in critical manufacturing). Such attacks could lead to significant interruptions in our operations, loss of sensitive information, loss of revenue, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Because the techniques used to obtain unauthorized access, disable or degrade service, or sabotage systems change frequently and often are not foreseeable or recognized until launched against a target, we and our third-party partners and service providers may be unable to anticipate these techniques or implement adequate preventative measures. Further, we may need to expend significant resources to protect against, and to address issues created by, security breaches and other incidents.

Current wording

We and the third parties with whom we work are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, credential stuffing attacks, credential harvesting, personnel misconduct or error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, earthquakes, fires, floods, attacks enhanced or facilitated by AI, Internet of Things attacks, operational technology attacks, and other similar threats. In particular, severe ransomware attacks are becoming increasingly prevalent (particularly for companies engaged in critical manufacturing). Such attacks could lead to significant interruptions in our operations, loss of sensitive information, loss of revenue, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Because the techniques used to obtain unauthorized access, disable or degrade service, or sabotage systems change frequently and often are not foreseeable or recognized until launched against a target, we and our third-party partners and service providers may be unable to anticipate these techniques or implement adequate preventative measures. Further, we may need to expend significant resources to protect against, and to address issues created by, security breaches and other incidents.

Previous wording

Remote work has also become more common and has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers and devices outside our premises or network, including working at home, while in transit and in public locations. Future or past business transactions such as acquisitions or integrations, could also expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environments and security programs.

Current wording

Remote work has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers and devices outside our premises or network, including working at home, while in transit and in public locations. Future or past business transactions such as acquisitions or integrations, could also expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’

Previous wording

If an actual or perceived breach of security of our networks or systems or those of any of our third-party partners’ or service providers’ security occurs, our ability to provide our platform could be disrupted, public perception of the effectiveness of our security measures and brand could be severely harmed, and we could lose buyers, suppliers or third-party partners. Data security breaches and other cybersecurity incidents may also result from non-technical means, for example, intentional, accidental or negligent actions by employees or contractors. Any compromise of our or our third-party partners’ or service providers’ security could result in a violation of applicable security, privacy or data protection, consumer and other laws, regulatory or other governmental investigations, enforcement actions, additional reporting requirements or oversight, restrictions on processing sensitive information (including personal data), negative publicity, monetary fund diversions, and legal and financial exposure, including potential contractual liability (such as indemnification obligations), in all cases that may not always be covered by our insurance, in whole or in part. Any such compromise could also result in damage to our brand and a loss of confidence in our security and privacy or data protection measures, and any significant unavailability of our platforms due to attacks could cause buyers and suppliers to stop using our platforms and transacting on our marketplace. Further, we may need to expend significant resources to protect against, and to address issues created by, security breaches and other incidents, including, potentially, payments for investigations, forensic analyses, regulatory compliance, breach notification, legal advice, public relations advice, system repair or replacement, or other services. Certain data privacy and security obligations may require us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our information technology systems and sensitive information. Security breaches and other security incidents, including any breaches of our security measures or those of parties with which we have commercial relationships (e.g., third-party service providers who provide development or other services to us) that result in the unauthorized access of sensitive information, or the belief that any of these have occurred, could damage our reputation and expose us to a risk of loss or litigation and possible liability. Furthermore, applicable data privacy and security obligations may require us to notify relevant stakeholders of security incidents. Such disclosures are costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences.

Current wording

If an actual or perceived breach of security of our networks or systems or those of any of our third-party partners’ or service providers’ security occurs, our ability to provide our platform could be disrupted, public perception of the effectiveness of our security measures and brand could be severely harmed, and we could lose buyers, suppliers or third-party partners. Data security breaches and other cybersecurity incidents may also result from non-technical means, for example, intentional, accidental or negligent actions by employees or contractors. Any compromise of our or our third-party partners’ or service providers’ security could result in a violation of applicable security, privacy or data protection, consumer and other laws, regulatory or other governmental investigations, enforcement actions, additional reporting requirements or oversight, restrictions on processing sensitive information (including personal data), negative publicity, monetary fund diversions, and legal and financial exposure, including potential contractual liability (such as indemnification obligations), in all cases that may not always be covered by our insurance, in whole or in part. Any such compromise could also result in damage to our brand and a loss of confidence in our security and privacy or data protection measures, and any significant unavailability of our platforms due to attacks could cause buyers and suppliers to stop using our platforms and transacting on our marketplace. Further, we may need to expend significant resources to protect against, and to address issues created by, security breaches and other incidents, including, potentially, payments for investigations, forensic analyses, regulatory compliance, breach notification, legal advice, public relations advice, system repair or replacement, or other services. Certain data privacy and security obligations may require us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our information technology systems and sensitive information. Security breaches and other security incidents, including any breaches of our security measures or those of parties with which we have commercial relationships (e.g., third-party service providers who provide development or other services to us) that result in the unauthorized access of sensitive information, or the belief that any of these have occurred, could damage our reputation and expose us to a risk of loss or litigation and possible liability. Furthermore, applicable data privacy and security obligations may require us, or we may voluntarily choose, to notify relevant stakeholders, including affected individuals, customers, regulators, and investors, of security incidents, or to take other actions, such as providing credit monitoring and identity theft protection services. Such disclosures and related actions can be costly, and the disclosure or the failure to comply with such applicable requiremen…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

While we have implemented security measures designed to protect against security incidents, we cannot provide assurances that such measures will be effective in all cases. We take steps designed to detect and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties upon which we rely). We may not, however, detect and remediate all such vulnerabilities on a timely basis. Further, we may experience delays in developing and deploying remedial measures and patches designed to address identified vulnerabilities. Vulnerabilities could be exploited and result in a security incident.

Current wording

While we have implemented security measures designed to protect against security incidents, we cannot provide assurances that such measures will be effective in all cases. We take steps designed to detect and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties with whom we work). We may not, however, detect and remediate all such vulnerabilities on a timely basis. Further, we may experience delays in developing and deploying remedial measures and patches designed to address identified vulnerabilities. Vulnerabilities could be exploited and result in a security incident.

Previous wording

We rely on a third-party payment processor, Stripe, to process payments made by buyers and payments made to suppliers. We also rely on Stripe for certain financial service offerings, an integrated payment processing tool for suppliers available through our platform, and the Xometry Advance Card. Under our commercial agreements with Stripe, Stripe may terminate the relationship with 120 days’ advance notice. If Stripe terminates its relationship with us or refuses to renew its agreements with us on commercially reasonable terms, or at all, we would be required to find an alternate payment processor and may not be able to secure similar terms or replace such payment processor in an acceptable timeframe. Further, the software and services provided by Stripe may not meet our expectations, may contain errors or vulnerabilities, and could be compromised or experience outages. Any of these risks could cause us to lose our ability to accept online payments or other payment transactions, make timely payments to suppliers, or decrease the use of Xometry Pay or the Xometry Advance Card, any of which could disrupt our business for an extended period of time, make our platform less convenient, trustworthy and attractive to users, and adversely affect our ability to attract and retain qualified buyers and suppliers.

Current wording

Stripe terminates its relationship with us or refuses to renew its agreements with us on commercially reasonable terms, or at all, we would be required to find an alternate payment processor and may not be able to secure similar terms or replace such payment processor in an acceptable timeframe. Further, the software and services provided by Stripe may not meet our expectations, may contain errors or vulnerabilities, and could be compromised or experience outages. Any of these risks could cause us to lose our ability to accept online payments or other payment transactions, make timely payments to suppliers, or decrease the use of Xometry Pay, any of which could disrupt our business for an extended period of time, make our platform less convenient, trustworthy and attractive to users, and adversely affect our ability to attract and retain qualified buyers and suppliers.

Previous wording

The manufacturing market is fragmented and highly competitive. We compete for buyers with a wide variety of manufacturers. Some of our current and potential competitors include captive in-house product lines, parts manufacturers, and other marketplaces for manufacturing services. Moreover, some of our existing and potential competitors are researching, designing, developing and marketing new manufacturing technologies and capabilities that may compete with or provide alternatives to our platform or our marketplace. We also expect that future competition may arise from the development of technologies that are not encompassed by our patents, from the issuance of patents to other companies that may inhibit our ability to develop our capabilities and from improvements to existing technologies. Furthermore, our competitors may attempt to adopt and improve upon key aspects of our business model, such as development of technology that automates much of the manual labor conventionally required to quote and manufacture parts, implementation of interactive web-based and automated user interface and quoting systems and/or building scalable operating models specifically designed for efficient production. We may, from time to time, establish alliances or relationships with other competitors or potential competitors, and our competitors may also be suppliers transacting on our marketplace. To the extent companies terminate such relationships and establish alliances and relationships with our competitors, our business could be harmed.

Current wording

The manufacturing market is localized and highly fragmented and we compete for both buyers and suppliers. We compete for buyers with a wide variety of manufacturers. We compete for customers with vertically integrated service bureaus, the service bureau divisions of the additive original equipment manufacturing companies, independent machine shops and 3D printing service bureaus and digital manufacturing service companies. We compete for suppliers with brokers and listing services, as well as companies that sell software and services to suppliers, enabling them to sell from their own website or otherwise run their business independently of our platform. Some of our existing and potential competitors are researching, designing, developing and marketing new manufacturing technologies and capabilities that may compete with or provide alternatives to our platform or our marketplace. We also expect that future competition may arise from the development of technologies that are not encompassed by our patents, from the issuance of patents to other companies that may inhibit our ability to develop our capabilities and from improvements to existing technologies. Furthermore, our competitors may attempt to adopt and improve upon key aspects of our business model, such as development of technology that automates much of the manual labor conventionally required to quote and manufacture parts, implementation of interactive web-based and automated user interface and quoting systems and/or building scalable operating models specifically designed for efficient production. We may, from time to time, establish alliances or relationships with other competitors or potential competitors, and our competitors may also be suppliers transacting on our marketplace. To the extent companies terminate such relationships and establish alliances and relationships with our competitors, our business could be harmed.

Previous wording

political and economic instability, including that related to the conflict between Russia and Ukraine;

Current wording

political and economic instability, including that related to the conflict between Russia and Ukraine and the conflict in the Middle East;

Previous wording

We may be unable to keep current with changes in laws and regulations. Although we strive to comply with all applicable laws and regulations and are in the process of implementing policies and procedures designed to support compliance with such laws and regulations, there can be no assurance that we will always be in full compliance or that all of our employees, contractors, partners and agents will comply at all times. Any violations could result in enforcement actions, fines, civil and criminal penalties, damages, injunctions, or reputational harm. If we are unable comply with these laws and regulations or manage the complexity of our global operations successfully, our business, results of operations and financial condition could be materially and adversely affected.

Current wording

We may be unable to keep current with changes in laws and regulations. Although we strive to comply with all applicable laws and regulations and are in the process of implementing policies and procedures designed to support compliance with such laws and regulations, there can be no assurance that we will always be in full compliance or that all of our employees, contractors, partners and agents will comply at all times. Any violations could result in enforcement actions, fines, civil and criminal penalties, damages, injunctions, or reputational harm. If we are unable to comply with these laws and regulations or manage the complexity of our global operations successfully, our business, results of operations and financial condition could be materially and adversely affected.

Previous wording

We have contractors in Ukraine, Belarus and Russia. To the extent there are losses of life, disruptions to internet connectivity, or interruptions to banking payment systems, we and our employees could be adversely impacted.

Current wording

We have contractors in Ukraine, Belarus and Russia. To the extent there are losses of life, disruptions to internet connectivity, or interruptions to banking payment systems, we and our contractors could be adversely impacted.

Previous wording

The global economy, including credit and financial markets, has experienced volatility and disruptions, including diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in inflation rates, higher interest rates and uncertainty about economic stability. For example, Russia’s ongoing incursion into Ukraine and the conflict in Israel and Gaza have created volatility in the global capital markets and is expected to have further global economic consequences, including disruptions of the global supply chain and energy markets. In addition, rising inflation and other macroeconomic pressures in the United States and the global economy could exacerbate volatility in the global capital markets and heighten unstable market conditions. Any such volatility and disruptions may have adverse consequences on us or the third parties on whom we rely. If the equity and credit markets continue to deteriorate, including as a result of political unrest, war or a global or domestic recession or the fear thereof, it may make any necessary debt or equity financing more difficult to obtain in a timely manner or on favorable terms, more costly or more dilutive. Increased inflation rates can adversely affect us by increasing our costs, including labor and employee benefit costs. In addition, higher inflation also could increase our customers’ operating costs, which could result in reduced marketing budgets for our customers and potentially less demand for our platform. Any significant increases in inflation and related increase in interest rates could have a material adverse effect on our business, results of operations and financial condition.

Current wording

The global economy, including credit and financial markets, has experienced volatility and disruptions, including diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, fluctuations in inflation rates and interest rates and uncertainty about economic stability. For example, the conflict between Russia and Ukraine and the conflict in the Middle East have created volatility in the global capital markets and is expected to have further global economic consequences, including disruptions of the global supply chain and energy markets. In addition, rising inflation and other macroeconomic pressures in the United States and the global economy could exacerbate volatility in the global capital markets and heighten unstable market conditions. Any such volatility and disruptions may have adverse consequences on us or the third parties on whom we rely. If the equity and credit markets continue to deteriorate, including as a result of political unrest, war or a global or domestic recession or the fear thereof, it may make any necessary debt or equity financing more difficult to obtain in a timely manner or on favorable terms, more costly or more dilutive. Increased inflation rates can adversely affect us by increasing our costs, including labor and employee benefit costs. In addition, higher inflation also could increase our customers’ operating costs, which could result in reduced marketing budgets for our customers and potentially less demand for our platform. Any significant increases in inflation and related increase in interest rates could have a material adverse effect on our business, results of operations and financial condition.

Previous wording

We are subject to stringent and evolving laws and regulations relating to data privacy and data protection, and any actual or perceived failure by us to comply with such laws and regulations or our privacy policies could materially and adversely affect our business.

Current wording

We and the third parties with whom we work are subject to stringent and evolving U.S. and foreign laws, regulations, and rules, contractual obligations, industry standards, policies and other obligations related to data privacy and data protection, and any actual or perceived failure by us (or the third parties with whom we work) to comply with such obligations could materially and adversely affect our business.

Previous wording

GDPR”), the United Kingdom’s GDPR (“UK GDPR”) (collectively, EU and UK GDPR, “GDPR”), Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”), and China’s Personal Information Protection Law (“PIPL”) impose strict requirements for processing personal data. The GDPR created new compliance obligations applicable to our business and users, including obligations and restrictions concerning the consent and rights of individuals to whom the personal data relates, security breach notifications and the security and confidentiality of personal data. Under the GDPR, companies may face temporary or definitive bans on data processing and other corrective actions; significant financial penalties for noncompliance (including possible fines of up to €20 million under the EU GDPR, 17.5 million pounds sterling under the UK GDPR, or, in each case, 4% of global annual turnover for the preceding financial year for the most serious violations (whichever is greater), as well as the right to compensation for financial or non-financial damages claimed by any individuals. If our efforts to comply with GDPR are not successful, or are perceived to be unsuccessful, it could adversely affect our business. We also target customers in Asia and have operations in China and may be subject to new and emerging data privacy regimes in Asia, including China’s Personal Information Protection Law.

Current wording

We expect that there will continue to be new laws, regulations and industry standards concerning privacy, data protection and information security proposed and enacted in various jurisdictions. For example, the EU’s General Data Protection Regulation (”EU GDPR”), the United Kingdom’s GDPR (“UK GDPR”) (collectively, EU and UK GDPR, “GDPR”), Canada’s Personal Information Protection and Electronic Documents Act, and China’s Personal Information Protection Law impose strict requirements for processing personal data. The GDPR created new compliance obligations applicable to our business and users, including obligations and restrictions concerning the consent and rights of individuals to whom the personal data relates, security breach notifications and the security and confidentiality of personal data. Under the GDPR, companies may face temporary or definitive bans on data processing and other corrective actions; significant financial penalties for noncompliance (including possible fines of up to €20 million under the EU GDPR, 17.5 million pounds sterling under the UK GDPR, or, in each case, 4% of global annual turnover for the preceding financial year for the most serious violations (whichever is greater), as well as the right to compensation for financial or non-financial damages claimed by any individuals. If our efforts to comply with GDPR are not successful, or are perceived to be unsuccessful, it could adversely affect our business. We also target customers in Asia and have operations in China and may be subject to new and emerging data privacy regimes in Asia, including China’s Personal Information Protection Law.

Previous wording

In the United States, federal, state, and local governments have enacted numerous data privacy and security laws, including data breach notification laws, personal data privacy laws, consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws (e.g., wiretapping laws). For example, the Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003 ("CAN-SPAM”) and the Telephone Consumer Protection Act of 1991 (“TCPA”) impose specific requirements on communications with customers. To illustrate, the TCPA imposes various consumer consent requirements and other restrictions on certain telemarketing activity and other communications with consumers by phone, fax or text message. TCPA violations can result in significant financial penalties, including penalties or criminal fines imposed by the Federal Communications Commission or fines of up to $1,500 per violation imposed through private litigation or by state authorities. We may also be subject to the Fair Credit Reporting Act (“FCRA”), which imposes specific obligations on certain data processing activities.

Current wording

In the United States, federal, state, and local governments have enacted numerous data privacy and security laws, including data breach notification laws, personal data privacy laws, consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws (e.g., wiretapping laws). For example, the Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003 and the Telephone Consumer Protection Act of 1991 (“TCPA”) impose specific requirements on communications with customers. To illustrate, the TCPA imposes various consumer consent requirements and other restrictions on certain telemarketing activity and other communications with consumers by phone, fax or text message. TCPA violations can result in significant financial penalties, including penalties or criminal fines imposed by the Federal Communications Commission or fines of up to $1,500 per violation imposed through private litigation or by state authorities. We may also be subject to the Fair Credit Reporting Act, which imposes specific obligations on certain data processing activities.

Previous wording

As another example, California passed the California Consumer Privacy Act (“CCPA”), which became effective on January 1, 2020. The CCPA provides data privacy rights for consumers and operational requirements for companies and applies to personal information of consumers, business representatives, and employees who are California residents. Specifically, the CCPA mandates that covered companies provide new disclosures to California residents and afford such residents new data privacy rights that include, among other things, the right to request a copy from a covered company of the personal information collected about them and the right to request deletion of such personal information. The CCPA provides for fines of up to $7,500 per intentional violation and a private right of action for certain data breaches that is expected to increase data breach litigation. Additionally, the California Privacy Rights Act (“CPRA”), effective on January 1, 2023, modifies the CCPA, including by expanding consumers’ rights with respect to certain personal information and creating a new state agency to oversee implementation and enforcement efforts, potentially resulting in further uncertainty and requiring us to incur additional costs and expenses in an effort to comply. The CPRA will, among other things, give California residents the ability to limit use of certain sensitive personal information, further restrict the use of cross-contextual advertising, establish restrictions on the retention of personal information, expand the types of data breaches subject to the CCPA’s private right of action and provide for increased penalties for CPRA violations concerning California residents under the age of 16. Other states, such as Virginia and Colorado, have also passed comprehensive privacy laws, and similar laws are being considered in several other states, as well as at the federal and local levels. Additionally, the CCPA, CPRA and other legal and regulatory changes are making it easier for certain individuals to opt out of having their personal data processed and disclosed to third parties through various opt-out mechanisms, which could result in an increase to our operational costs to ensure compliance with such legal and regulatory changes. In recent years, there has also been an increase in attention to and regulation of data protection and data privacy across the globe, including in the United States with the increasingly active approach of the Federal Trade Commission (“FTC”) and other agencies with respect to data privacy issues, including under Section 5 of the FTC Act’s unfair and deceptive acts framework, as well as contemplated data privacy statutes and regulations in many states as well as at the federal level. Current pending or future proposed legislation may result in changes to the current regulatory landscape, including enforcement measures and sanctions.

Current wording

Numerous U.S. states have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal data. As applicable, such rights may include the right to access, correct, or delete certain personal data, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services. Certain states also impose stricter requirements for processing certain personal data, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for statutory fines for noncompliance. For example, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, “CCPA”) applies to personal information of consumers, business representatives, and employees who are California residents, and mandates that covered companies provide specific disclosures to California residents and honor requests of such residents to exercise certain privacy rights. The CCPA provides for fines of up to $7,500 per intentional violation and a private right of action for certain data breaches. Similar laws are being considered in several other states, as well as at the federal and local levels, and we expect more states to pass similar laws in the future. Additionally, U.S. state comprehensive privacy laws and other legal and regulatory changes are making it easier for certain individuals to opt out of having their personal data processed and disclosed to third parties through various opt-out mechanisms, which could result in an increase to our operational costs to ensure compliance with such legal and regulatory changes. In recent years, there has also been an increase in attention to and regulation of data protection and data privacy across the globe, including in the United States with the increasingly active approach of the Federal Trade Commission (“FTC”) and other agencies with respect to data privacy issues, including under Section 5 of the FTC Act’s unfair and deceptive acts framework, as well as contemplated data privacy statutes and regulations in many states as well as at the federal level. Current pending or future proposed legislation may result in changes to the current regulatory landscape, including enforcement measures and sanctions.

Previous wording

Our employees and personnel may use generative artificial intelligence (“AI”) technologies to perform their work, and the disclosure and use of personal information in generative AI technologies is subject to various privacy laws and other privacy obligations. Governments have passed and are likely to pass additional laws regulating generative AI. Our use of this technology could result in additional compliance costs, regulatory investigations and actions, and consumer lawsuits. If we are unable to use generative AI, it could make our business less efficient and result in competitive disadvantages. We also use AI and machine learning (“ML”) technologies in our platform services (collectively, “AI/ML” technologies). The development and use of AI/ML present various privacy and security risks that may impact our business. AI/ML are subject to privacy and data security laws, as well as increasing regulation and scrutiny. Several jurisdictions around the globe, including Europe and certain U.S. states, have proposed or enacted laws governing AI/ML, such as the EU’s AI Act. We expect other jurisdictions will adopt similar laws. Additionally, in the United Kingdom, the government has published a White Paper calling for existing regulators to implement certain specific principles to guide and inform the responsible development and use of AI/ML. Moreover, certain privacy laws extend rights to consumers (such as the right to delete certain personal data) and regulate automated decision making, which may be incompatible with our use of AI/ML. These obligations may make it harder for us to conduct our business using AI/ML, lead to regulatory fines or penalties, require us to change our business practices, retrain our AI/ML, or prevent or limit our use of AI/ML. For example, the FTC has required other companies to turn over (or disgorge) valuable insights or trainings generated through the use of AI/ML where they allege the company has violated privacy and consumer protection laws. If we cannot use AI/ML or that use is restricted, our business may be less efficient, or we may be at a competitive disadvantage.

Current wording

Our employees and personnel use generative AI technologies to perform their work, and the disclosure and use of personal information in generative AI technologies is subject to various privacy laws and other privacy obligations. Governments have passed and are likely to pass additional laws regulating generative AI. Our use of this technology could result in additional compliance costs, regulatory investigations and actions, and consumer lawsuits. If we are unable to use generative AI, it could make our business less efficient and result in competitive disadvantages. We also use AI and machine learning (“ML”) technologies in our platform services (collectively, “AI/ML” technologies). The development and use of AI/ML present various privacy and security risks that may impact our business. AI/ML are subject to privacy and data security laws, as well as increasing regulation and scrutiny. Several jurisdictions around the globe, including Europe and certain U.S. states, have proposed or enacted laws governing AI/ML, such as the EU’s Artificial Intelligence Act. We expect other jurisdictions will adopt similar laws. Additionally, in the United Kingdom, the government has published a White Paper calling for existing regulators to implement certain specific principles to guide and inform the responsible development and use of AI/ML. Moreover, certain privacy laws extend rights to consumers (such as the right to delete certain personal data) and regulate automated decision making, which may be incompatible with our use of AI/ML. These obligations may make it harder for us to conduct our business using AI/ML, lead to regulatory fines or penalties, require us to change our business practices, retrain our AI/ML, or prevent or limit our use of AI/ML. For example, the FTC has required other companies to turn over (or disgorge) valuable insights or trainings generated through the use of AI/ML where they allege the company has violated privacy and consumer protection laws. If we cannot use AI/ML or that use is restricted, our business may be less efficient, or we may be at a competitive disadvantage.

Previous wording

Additionally, under various privacy laws and other obligations, we may be required to obtain certain consents to process personal data. For example, some of our data processing practices may be challenged under wiretapping laws, if we obtain consumer information from third parties through various methods, including chatbot and session replay providers, or via third-party marketing pixels. These practices may be subject to increased challenges by class action plaintiffs. Our inability or failure to obtain consent for these practices could result in adverse consequences, including class action litigation and mass arbitration demands.

Current wording

Additionally, under various privacy laws and other obligations, we may be required to obtain certain consents to process personal data. For example, some of our data processing practices have and may in the future be challenged under wiretapping laws, if we obtain consumer information from third parties through various methods, including chatbot and session replay providers, or via third-party marketing pixels. These practices may be subject to increased challenges by class action plaintiffs. Our inability or failure to obtain consent for these practices could result in adverse consequences, including class action litigation and mass arbitration demands.

Previous wording

In addition to data privacy and security laws, we are contractually subject to industry standards adopted by industry groups and, we are, or may become subject to such obligations in the future. We are also bound by contractual obligations related to data privacy and security, and our efforts to comply with such obligations may not be successful. For example, certain privacy laws, such as the GDPR and the CCPA, require our customers to impose specific contractual restrictions on their service providers. We also publish privacy policies, marketing materials and other statements. If these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators or other adverse consequences.

Current wording

In addition to data privacy and security laws, we are contractually subject to industry standards adopted by industry groups and, we are, or may become subject to such obligations in the future. We are also bound by contractual obligations related to data privacy and security, and our efforts to comply with such obligations may not be successful. For example, certain privacy laws, such as the GDPR and the CCPA, require our customers to impose specific contractual restrictions on their service providers. We also publish privacy policies, marketing materials, whitepapers, and other statements concerning data privacy and security. Regulators in the United States are increasingly scrutinizing these statements, and if these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, misleading, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators or other adverse consequences.

Previous wording

Our business is materially reliant on revenue from behavioral, interest-based, or tailored advertising (collectively, “targeted advertising”), but delivering targeted advertisements is becoming increasingly difficult due to changes to our ability to gather information about user behavior through third party platforms, new laws and regulations, and consumer resistance. Major technology platforms on which we rely to gather information about consumers have adopted or proposed measures to provide consumers with additional control over the collection, use, and sharing of their personal data for targeted advertising purposes. In addition, legislative proposals and present laws and regulations regulate the use of cookies and other tracking technologies, electronic communications, and marketing. For example, in the EEA and the UK, regulators are increasingly focusing on compliance with requirements related to the targeted advertising ecosystem. European regulators have issued significant fines in certain circumstances where the regulators alleged that appropriate consent was not obtained in connection with targeted advertising activities. It is anticipated that the ePrivacy Regulation and national implementing laws will replace the current national laws implementing the ePrivacy Directive, which may require us to make significant operational changes. In the United States, the CCPA, for example, grants California residents the right to opt-out of a company’s sharing of personal data for advertising purposes in exchange for money or other valuable consideration, and requires covered businesses to honor user-enabled browser signals from the Global Privacy Control.

Current wording

Our business is materially reliant on revenue from behavioral, interest-based, or tailored advertising (collectively, “targeted advertising”), but delivering targeted advertisements is becoming increasingly difficult due to changes to our ability to gather information about user behavior through third party platforms, new laws and regulations, and consumer resistance. Major technology platforms on which we rely to gather information about consumers have adopted or proposed measures to provide consumers with additional control over the collection, use, and sharing of their personal data for targeted advertising purposes. In addition, legislative proposals and present laws and regulations regulate the use of cookies and other tracking technologies, electronic communications, and marketing. For example, in the EEA and the UK, regulators are increasingly focusing on compliance with requirements related to the targeted advertising ecosystem. European regulators have issued significant fines in certain circumstances where the regulators alleged that appropriate consent was not obtained in connection with targeted advertising activities. It is anticipated that the ePrivacy Regulation and national implementing laws will replace the current national laws implementing the ePrivacy Directive, which may require us to make significant operational changes. In the United States, the CCPA, for example, grants California residents the right to opt-out of a company’s sharing of personal data for targeted advertising purposes and other disclosures of personal data for advertising purposes in exchange for money or other valuable consideration, and requires covered businesses to honor user-enabled browser signals from the Global Privacy Control.

Previous wording

We may at times fail (or are perceived to have failed) in our efforts to comply with our data privacy and security obligations. Moreover, despite our efforts, our personnel or third parties on whom we rely may fail to comply with such obligations, which could negatively impact our business operations. If we or the third parties on which we rely fail, or are perceived to have failed, to address or comply with applicable data privacy and security obligations, we could face significant consequences, including but not limited to governmental enforcement actions (e.g., investigations, fines, penalties, audits, inspections, and similar), litigation, claims (including class-action claims) and mass arbitration demands; additional reporting requirements and/or oversight; bans on processing personal data; orders to destroy or not use personal data; or public statements against us by consumer advocacy groups or others. In particular, plaintiffs have become increasingly more active in bringing privacy-related claims against companies, including class claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations. Any of these events could result in material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; inability to process personal data or to operate in certain jurisdictions; limited ability to develop or commercialize our products; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes to our business model or operations.

Current wording

We may at times fail (or are perceived to have failed) in our efforts to comply with our data privacy and security obligations. Moreover, despite our efforts, our personnel or third parties with whom we work may fail to comply with such obligations, which could negatively impact our business operations. If we or the third parties with whom we work fail, or are perceived to have failed, to address or comply with applicable data privacy and security obligations, we could face significant consequences, including but not limited to governmental enforcement actions (e.g., investigations, fines, penalties, audits, inspections, and similar), litigation, claims (including class-action claims) and mass arbitration demands; additional reporting requirements and/or oversight; bans on processing personal data; orders to destroy or not use personal data; or public statements against us by consumer advocacy groups or others. In particular, plaintiffs have become increasingly more active in bringing privacy-related claims against companies, including class claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations. Any of these events could result in a material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; inability to process personal data or to operate in certain jurisdictions; limited ability to develop or commercialize our products; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes to our business model or operations.

Previous wording

Whether merited or not, we may face claims of intellectual property infringement allegations and claims from individuals or companies, including such parties who have acquired or developed patents in the fields of injection molding, CNC machining, 3D printing, sheet metal fabrication, or other manufacturing processes for products manufactured by suppliers transacting on our marketplace, or technologies for automatically calculating pricing information for products manufactured according to such techniques. We may also be subject to claims from individuals or companies asserting that we are liable for alleged violations of intellectual property rights associated with parts created for buyers. Any claims that such products, processes or parts infringe, misappropriate or otherwise violate the intellectual property rights of others, regardless of the merit or resolution of such claims, could cause us to incur significant costs in responding to, defending and resolving such claims, and as a result, could have a material and adverse effect on our business.

Current wording

Whether merited or not, we may face intellectual property infringement allegations and claims from individuals or companies, including such parties who have acquired or developed patents in the fields of injection molding, CNC machining, 3D printing, sheet metal fabrication, or other manufacturing processes for products manufactured by suppliers transacting on our marketplace, or technologies for automatically calculating pricing information for products manufactured according to such techniques. We may also be subject to claims from individuals or companies asserting that we are liable for alleged violations of intellectual property rights associated with parts created for buyers. Any claims that such products, processes or parts infringe, misappropriate or otherwise violate the intellectual property rights of others, regardless of the merit or resolution of such claims, could cause us to incur significant costs in responding to, defending and resolving such claims, and as a result, could have a material and adverse effect on our business.

Previous wording

Additionally, in recent years, individuals and groups have begun purchasing intellectual property assets for the purpose of making claims of infringement, misappropriation or other violation and attempting to extract settlements from companies like ours. We may also face allegations that our employees have infringed, misappropriated or otherwise violated the intellectual property or proprietary rights of their former employers or other third parties. It may be necessary for us to initiate litigation to defend ourselves in order to determine the scope, enforceability and validity of third-party intellectual property or proprietary rights, or to establish our respective rights. Regardless of whether claims that we are infringing, misappropriating or otherwise violating patents or other intellectual property or proprietary rights have merit, such claims can be time-consuming, divert management’s attention and financial resources and can be costly to evaluate and defend. Results of any such litigation are difficult to predict and may require us to stop commercializing or using our products or technology, obtain licenses, modify our services and technology while we develop non-infringing substitutes or incur substantial damages, settlement costs or face a temporary or permanent injunction prohibiting us from marketing or providing the affected products and services. If we require a third-party license, it may not be available on reasonable terms or at all, and we may have to pay substantial royalties, upfront fees or grant cross-licenses to intellectual property rights for our products and services. We may also have to redesign our products or services so they do not infringe, misappropriate or otherwise violate third-party intellectual property or other proprietary rights, which may not be possible or may require substantial monetary expenditures and time, during which our technology and products may not be available for commercialization or use. Even if we have an agreement to indemnify us against such costs, the indemnifying party may be unable to uphold its contractual obligations. If we cannot or do not obtain a third-party license to the infringed, misappropriated or otherwise violated technology, license the technology on reasonable terms or obtain similar technology from another source, our revenue and earnings could be adversely impacted.

Current wording

Additionally, in recent years, individuals and groups have begun purchasing intellectual property assets for the purpose of making claims of infringement, misappropriation or other violations and attempting to extract settlements from companies like ours. We may also face allegations that our employees have infringed, misappropriated or otherwise violated the intellectual property or proprietary rights of their former employers or other third parties. It may be necessary for us to initiate litigation to defend ourselves in order to determine the scope, enforceability and validity of third-party intellectual property or proprietary rights, or to establish our respective rights. Regardless of whether claims that we are infringing, misappropriating or otherwise violating patents or other intellectual property or proprietary rights have merit, such claims can be time-consuming, divert management’s attention and financial resources and can be costly to evaluate and defend. Results of any such litigation are difficult to predict and may require us to stop commercializing or using our products or technology, obtain licenses, modify our services and technology while we develop non-infringing substitutes or incur substantial damages, settlement costs or face a temporary or permanent injunction prohibiting us from marketing or providing the affected products and services. If we require a third-party license, it may not be available on reasonable terms or at all, and we may have to pay substantial royalties, upfront fees or grant cross-licenses to intellectual property rights for our products and services. We may also have to redesign our products or services so they do not infringe, misappropriate or otherwise violate third-party intellectual property or other proprietary rights, which may not be possible or may require substantial monetary expenditures and time, during which our technology and products may not be available for commercialization or use. Even if we have an agreement to indemnify us against such costs, the indemnifying party may be unable to uphold its contractual obligations. If we cannot or do not obtain a third-party license to the infringed, misappropriated or otherwise violated technology, license the technology on reasonable terms or obtain similar technology from another source, our revenue and earnings could be adversely impacted.

Previous wording

We may not be able to successfully execute future acquisitions or efficiently manage any acquired business.

Current wording

We may not be able to successfully execute future acquisitions or efficiently manage any acquired businesses.

Previous wording

As of December 31, 2023, we have net operating loss (“NOL”) carryforwards for U.S. federal income tax purposes, and similar state amounts, of approximately $228.6 million available to reduce future income subject to income taxes before limitations. Of the total loss carryforward available, approximately $57.2 million of net operating losses were attributable to the acquisition of Thomas. Under Section 382 and Section 383 of the Internal Revenue Code of 1986, as amended, or the Code, if a corporation undergoes an “ownership change,” the corporation’s ability to use its pre-change NOLs and other tax attributes, including R&D tax credits, to offset its post-change income may be limited. In general, an “ownership change” will occur if there is a cumulative change in our ownership by “5 percent stockholders” that exceeds 50 percentage points over a rolling three-year period. Similar rules may apply under state tax laws. During 2022, management completed its evaluation of any limitations on the ability of the Company to utilize the Thomas net operating loss carryforward. As a result of this evaluation, management has determined that the annual limitation, as determined under Section 382 of the Internal Revenue Code, would not prevent the Company from utilizing the net operating losses before expiration to the extent the Company is able to generate sufficient future taxable income.

Current wording

As of December 31, 2024, we have net operating loss (“NOL”) carryforwards for U.S. federal income tax purposes, and similar state amounts, of approximately $250.8 million available to reduce future income subject to income taxes before limitations. Of the total loss carryforward available, approximately $57.2 million of net operating losses were attributable to the acquisition of Thomas. Under Section 382 and Section 383 of the Internal Revenue Code of 1986, as amended, or the Code, if a corporation undergoes an “ownership change,” the corporation’s ability to use its pre-change NOLs and other tax attributes, including R&D tax credits, to offset its post-change income may be limited. In general, an “ownership change” will occur if there is a 50% change, by value, in our ownership over a three-year period. Similar rules may apply under state tax laws. Similar rules may apply under state tax laws.

Previous wording

There is also a risk that due to regulatory changes, such as suspensions on the use of NOLs and tax credits by certain jurisdictions, including in order to raise additional revenue to help counter the fiscal impact from the COVID-19 pandemic, possibly with retroactive effect, or other unforeseen reasons, our existing NOLs and tax credits could expire or otherwise be unavailable to offset future income tax liabilities. A temporary suspension of the use of certain NOLs and tax credits has been enacted in California, and other states may enact suspensions as well. For these reasons, we may not be able to realize a tax benefit from the use of our NOLs and tax credits.

Current wording

For these reasons, we may not be able to realize a tax benefit from the use of our NOLs and tax credits.

Previous wording

Our performance is in part subject to economic conditions and their impact on levels of consumer spending, as consumer spending impacts buyers and suppliers transacting on our marketplace. Some of the factors having an impact on consumer spending include general economic conditions, unemployment, consumer debt, reductions in net worth, residential real estate and mortgage markets, taxation, energy prices, interest rates, consumer confidence, and other macroeconomic factors. Consumer purchases generally decline during recessionary periods and other periods in which disposable income is adversely affected, contributing to small business closures. Economic conditions in certain regions may also be affected by natural disasters, such as earthquakes, hurricanes, wildfires, and threats to public health, such as the recent COVID-19 pandemic and other health crises. Further, small businesses that do not have substantial resources, like some of the buyers and suppliers transacting on our marketplace, tend to be more adversely affected by poor economic conditions than large businesses. If buyers or suppliers on our platform were to cease operations, temporarily or permanently, or face financial distress or other business disruption, our business, financial condition, and results of operation may be materially and adversely affected.

Current wording

Our performance is in part subject to economic conditions and their impact on levels of consumer spending, as consumer spending impacts buyers and suppliers transacting on our marketplace. Some of the factors having an impact on consumer spending include general economic conditions, unemployment, consumer debt, reductions in net worth, residential real estate and mortgage markets, taxation, energy prices, interest rates, consumer confidence, and other macroeconomic factors. Consumer purchases generally decline during recessionary periods and other periods in which disposable income is adversely affected, contributing to small business closures. Economic conditions in certain regions may also be affected by natural disasters, such as earthquakes, hurricanes, wildfires, and public health pandemics or other health crises. Further, small businesses that do not have substantial resources, like some of the buyers and suppliers transacting on our marketplace, tend to be more adversely affected by poor economic conditions than large businesses. If buyers or suppliers on our platform were to cease operations, temporarily or permanently, or face financial distress or other business disruption, our business, financial condition, and results of operation may be materially and adversely affected.

Previous wording

We report our financial results in U.S. dollars. We collect our revenue primarily in U.S. dollars. A portion of our revenue, cost of revenue, sales and marketing, operations and support, product development and general and administrative expenses are in jurisdictions outside the United States are incurred in foreign currencies. As a result, we are exposed to exchange rate risks that may materially and adversely affect our financial results. If the foreign currency appreciates against the U.S. dollar or if the value of the foreign currency declines against the U.S. dollar at a time when the rate of inflation in the cost of goods and services in such jurisdictions exceeds the rate of decline in the relative value of the applicable foreign currency, then the U.S. dollar cost of our operations in non-U.S. jurisdictions would increase and our results of operations could be materially and adversely affected. For example, there has been and may continue to be volatility in currency exchange rates as a result of the conflict in Ukraine. We do not currently enter into hedging transactions and our business, financial condition and results of operations could be materially and adversely affected if we are unable to effectively hedge against currency fluctuations in the future.

Current wording

We report our financial results in U.S. dollars. We collect our revenue primarily in U.S. dollars. A portion of our revenue, cost of revenue, sales and marketing, operations and support, product development and general and administrative expenses are in jurisdictions outside the United States and are incurred in foreign currencies. As a result, we are exposed to exchange rate risks that may materially and adversely affect our financial results. If the foreign currency appreciates against the U.S. dollar or if the value of the foreign currency declines against the U.S. dollar at a time when the rate of inflation in the cost of goods and services in such jurisdictions exceeds the rate of decline in the relative value of the applicable foreign currency, then the U.S. dollar cost of our operations in non-U.S. jurisdictions would increase and our results of operations could be materially and adversely affected. For example, there has been and may continue to be volatility in currency exchange rates as a result of the conflict in Ukraine. We do not currently enter into hedging transactions and our business, financial condition and results of operations could be materially and adversely affected if we are unable to effectively hedge against currency fluctuations in the future.

Previous wording

The market for technology stocks or and the stock market in general have recently experienced significant price and volume fluctuations that have affected and continue to affect the market prices of equity securities of many companies, including our own. These fluctuations have often been unrelated or disproportionate to the operating performance of these companies. Broad market and industry fluctuations, as well as general economic, political, regulatory and market conditions, may continue to negatively impact investor confidence and the market price of equity securities, including our Class A common stock. Broad market and industry fluctuations, as well as general economic, political, regulatory, and market conditions, may also negatively impact the market price of our Class A common stock. In addition, technology stocks have historically experienced high levels of volatility. In the past, companies that have experienced volatility in the market price of their securities have been subject to securities class action litigation. We may be the target of this type of litigation in the future, which could result in substantial expenses and divert our management’s attention.

Current wording

The market for technology stocks and the stock market in general have recently experienced significant price and volume fluctuations that have affected and continue to affect the market prices of equity securities of many companies, including our own. These fluctuations have often been unrelated or disproportionate to the operating performance of these companies. Broad market and industry fluctuations, as well as general economic, political, regulatory and market conditions, may continue to negatively impact investor confidence and the market price of equity securities, including our Class A common stock. Broad market and industry fluctuations, as well as general economic, political, regulatory, and market conditions, may also negatively impact the market price of our Class A common stock. In addition, technology stocks have historically experienced high levels of volatility. In the past, companies that have experienced volatility in the market price of their securities have been subject to securities class action litigation. We may be the target of this type of litigation in the future, which could result in substantial expenses and divert our management’s attention.

Previous wording

Our stock price and trading volume is heavily influenced by the way analysts and investors interpret our financial information and other disclosures. Securities and industry analysts do not currently, and may never, publish research on our business. We do not have control over these analysts. If few securities analysts commence coverage of us, or if industry analysts cease coverage of us, our stock price would be negatively affected. If securities or industry analysts do not publish research or reports about our business, downgrade our Class A common stock, or publish negative reports about our business, our stock price would likely decline. If one or more of these analysts cease coverage of us or fail to publish reports on us regularly, demand for our Class A common stock could decrease, which might cause our stock price to decline and could decrease the trading volume of our Class A common stock.

Current wording

Our stock price and trading volume is heavily influenced by the way analysts and investors interpret our financial information and other disclosures. We do not have control over these analysts. If securities or industry analysts cease coverage of us, downgrade our Class A common stock, or publish negative reports about our business, our stock price would likely decline. If one or more of these analysts cease coverage of us or fail to publish reports on us regularly, demand for our Class A common stock could decrease, which might cause our stock price to decline and could decrease the trading volume of our Class A common stock.

Previous wording

As of December 31, 2023, we had $268.8 million in cash and cash equivalents and marketable securities. While we believe our existing cash and cash equivalents and marketable securities, will be sufficient to meet our anticipated cash needs for at least twelve months, we cannot assure you that we will be able to generate sufficient liquidity as and when needed, or that our revenue will be adequate to fund our operating needs or achieve or sustain profitability. We have based this estimate on assumptions that may prove to be wrong, and we could use our capital resources sooner than we currently expect. Changing circumstances, some of which may be beyond our control, could cause us to consume capital significantly faster than we currently anticipate, and we may need to seek additional funds sooner than planned.

Current wording

As of December 31, 2024, we had $239.8 million in cash and cash equivalents and marketable securities. While we believe our existing cash and cash equivalents and marketable securities will be sufficient to meet our anticipated cash needs for at least twelve months, we cannot assure you that we will be able to generate sufficient liquidity as and when needed, or that our revenue will be adequate to fund our operating needs or achieve or sustain profitability. We have based this estimate on assumptions that may prove to be wrong, and we could use our capital resources sooner than we currently expect. Changing circumstances, some of which may be beyond our control, could cause us to consume capital significantly faster than we currently anticipate, and we may need to seek additional funds sooner than planned.

Showing the first 40 of 51 pairs. Open the source sections for the rest.

Rearranged current paragraphs (3)

Current report — wording carried from elsewhere

systems and technologies. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environments and security programs.

Current report — wording carried from elsewhere

We rely on a third-party payment processor, Stripe, to process payments made by buyers and payments made to suppliers. We also rely on Stripe for certain financial service offerings, an integrated payment processing tool for suppliers available through our platform. Under our commercial agreements with Stripe, Stripe may terminate the relationship with 120 days’ advance notice. If

Current report — wording carried from elsewhere

Economic Security Act (“CARES Act”) has already modified certain provisions of the Tax Act. In addition, it is uncertain if and to what extent various states will conform to the Tax Act, the CARES Act or any newly enacted federal tax legislation.
Rearranged previous paragraphs (1)

Previous report — wording carried elsewhere

We expect that there will continue to be new laws, regulations and industry standards concerning privacy, data protection and information security proposed and enacted in various jurisdictions. For example, the EU’s General Data Protection Regulation (”EU