Skip to main content

MARCHEX INC

For the period ended Dec 31, 2024. Filed Mar 14, 2025.

View on SEC.gov

About this filing

A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.

FY2024 · Filed Mar 14, 2025

MCHX$1.32+3.9%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-K

Period ended 2023-12-31; filed 2024-04-01.

0000950170-24-038807

Item 1A. RISK FACTORS

Current report: 10-K

Period ended 2024-12-31; filed 2025-03-14.

0000950170-25-039513

Item 1A. RISK FACTORS

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 110 previous paragraphs and 109 current paragraphs.

86 unchanged; 23 reworded; 0 added; 1 removed; 0 previous and 0 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Removed paragraphs (1)

Previous report

We rely upon third-party colocation providers to host a substantial set of our servers. If these providers are unable to handle current or higher volumes of use, experience any interruption in operations or cease operations for any reason or if we are unable to agree on satisfactory terms for continued hosting relationships, we would be forced to enter into a relationship with other service providers or assume hosting responsibilities ourselves. If we are forced to switch hosting facilities, we may not be successful in finding an alternative service provider on acceptable terms or in hosting the servers ourselves. We may also be limited in our remedies against these providers in the event of a failure of service. In the past, we have experienced short-term outages in the service maintained by one of our colocation providers.
Reworded paragraphs (23)

Previous wording

We had an accumulated deficit of $321.2 million as of December 31, 2023. Our net expenses may increase based on the initiatives we undertake which for instance, may include increasing our sales and marketing activities, hiring additional personnel, incurring additional costs as a result of being a public company, acquiring additional businesses and making additional equity grants to our employees. This may result in the reduction of our cash balances or the incurrence of debt.

Current wording

We had an accumulated deficit of $326.2 million as of December 31, 2024. Our net expenses may increase based on the initiatives we undertake which for instance, may include increasing our sales and marketing activities, hiring additional personnel, incurring additional costs as a result of being a public company, acquiring additional businesses and making additional equity grants to our employees. This may result in the reduction of our cash balances or the incurrence of debt.

Previous wording

We received approximately 34% of our revenue from our five largest customers for the year ended December 31, 2023, and the loss of one or more of these customers could adversely impact our results of operations and financial condition.

Current wording

We received approximately 33% of our revenue from our five largest customers for the year ended December 31, 2024, and the loss of one or more of these customers could adversely impact our results of operations and financial condition.

Previous wording

Our five largest customers accounted for approximately 34% of our total revenues for the year ended December 31, 2023. In particular, our customers in the automotive and related services sectors account for a significant portion of our revenue.

Current wording

Our five largest customers accounted for approximately 33% of our total revenues for the year ended December 31, 2024. In particular, our customers in the automotive and related services sectors account for a significant portion of our revenue.

Previous wording

Effective internal controls are necessary for us to provide reliable and accurate financial reports and effectively prevent fraud. We have devoted significant resources and time to comply with the internal control over financial reporting requirements of the Sarbanes-Oxley Act of 2002. In addition, Section 404 under the Sarbanes-Oxley Act of 2002 requires that we assess and in certain instances for our auditors to attest to the effectiveness of our controls over financial reporting. Our current and future compliance with the annual internal control report requirement will depend on the effectiveness of our financial reporting and data systems and controls across our operating subsidiaries. We expect these systems and controls to become increasingly complex to the extent that we integrate acquisitions and our business grows. To effectively manage this growth, we will need to continue to improve our operational, financial and management controls and our reporting systems and procedures. We cannot be certain that these measures will ensure that we design, implement, and maintain adequate controls over our financial processes and reporting in the future. Any failure to implement required new or improved controls, or difficulties encountered in their implementation or operation, could harm our operating results, or cause us to fail to meet our financial reporting obligations. Inadequate internal controls could also cause investors to lose confidence in our reported financial information, which could have a negative effect on the trading price of our stock and our access to capital.

Current wording

Effective internal controls are necessary for us to provide reliable and accurate financial reports and effectively prevent fraud. We have devoted significant resources and time to comply with the internal control over financial reporting requirements of the Sarbanes-Oxley ("SOX") Act of 2002. In addition, SOX Section 404 requires that we assess and in certain instances for our auditors to attest to the effectiveness of our controls over financial reporting. Our current and future compliance with the annual internal control report requirement will depend on the effectiveness of our financial reporting and data systems and controls across our operating subsidiaries. We expect these systems and controls to become increasingly complex to the extent that we integrate acquisitions and our business grows. To effectively manage this growth, we will need to continue to improve our operational, financial and management controls and our reporting systems and procedures. We cannot be certain that these measures will ensure that we design, implement, and maintain adequate controls over our financial processes and reporting in the future. Any failure to implement required new or improved controls, or difficulties encountered in their implementation or operation, could harm our operating results, or cause us to fail to meet our financial reporting obligations. Inadequate internal controls could also cause investors to lose confidence in our reported financial information, which could have a negative effect on the trading price of our stock and our access to capital.

Previous wording

There are a number of companies that offer or may develop products that compete in our targeted markets. We compete with call analytics technology providers such as Twilio and Invoca, as well as messaging platform providers such as EZ Texting. As we continue to advance our conversational analytics and related technologies, we anticipate facing increased competition from companies providing broader a broader range of products and solutions, such as Google (which offers Google Ads call tracking). The markets for our products and services are characterized by intense competition, evolving industry and regulatory standards, emerging business and distribution models, disruptive software and hardware technology developments, short product and service life cycles, price sensitivity on the part of customers, and frequent new product introductions. While we are developing and deploying features powered by artificial intelligence (AI) across our conversational analytics offerings, competitors may develop comparable or superior AI-powered features before we do, which could adversely affect our business. Current and potential competitors have established, or may establish, cooperative relationships among themselves or with third parties to increase the ability of their technologies to address the needs of our prospective customers. Furthermore, there has been a trend toward industry consolidation in our markets for several years. We expect this trend to continue as companies attempt to strengthen or hold their market positions.

Current wording

There are a number of companies that offer or may develop products that compete in our targeted markets. We compete with call analytics technology providers such as Twilio and Invoca, as well as messaging platform providers such as EZ Texting. As we continue to advance our conversational analytics and related technologies, we anticipate facing increased competition from companies providing broader a broader range of products and solutions, such as Google (which offers Google Ads call tracking). The markets for our products and services are characterized by intense competition, evolving industry and regulatory standards, emerging business and distribution models, disruptive software and hardware technology developments, short product and service life cycles, price sensitivity on the part of customers, and frequent new product introductions. While we are developing and deploying features powered by AI across our conversational analytics offerings, competitors may develop comparable or superior AI-powered features before we do, which could adversely affect our business. Current and potential competitors have established, or may establish, cooperative relationships among themselves or with third parties to increase the ability of their technologies to address the needs of our prospective customers. Furthermore, there has been a trend toward industry consolidation in our markets for several years. We expect this trend to continue as companies attempt to strengthen or hold their market positions.

Previous wording

We utilize phone numbers as part of a number of information and analytic services to our customers, such as our call and text analytics and communications. We secure a majority of our phone numbers through telecommunication carriers that we have contracted with and a smaller number through the 800 Service Management System, and such telecommunication carriers provide the underlying telephone service. Our telecommunications carriers and telephone number acquisition process are subject to the rules and guidelines established by the Federal Communications Commission. Furthermore, we may be directly subject to certain telecommunications-related regulations. The Federal Communications Commission and our telecommunication carriers may change the rules and guidelines for securing phone numbers or change the requirements for retaining the phone numbers we have already secured. As a result, we may not be able to secure or retain sufficient phone numbers needed for our services. We may also be limited in the number of available telecommunications carriers or vendors to provide such phone numbers and associated services to us in the event of any industry consolidations. In addition, mobile carriers in the United States and Canada have added, or are currently contemplating adding significant one-time and recurring registration requirements, including “10DLC” brand registration, and/or use limitations (e.g. messaging volume caps) for each phone number, and have imposed or are considering imposing significant additional fees as well as penalties for failure to register or certain use violations for registered numbers. Moreover, mobile carriers and our telecommunication service providers use various automated screening technologies on messaging content crossing their networks, which operate based on disparate and sometimes unpredictable sets of standards and restrictions. The application of such screening technologies to content transmitted by our customers through their use of our services may negatively impact our ability to provide services to certain customers deemed potentially problematic by carriers, subject us to financial penalties, and/or result in telecommunication service providers refusing to provide service to us. Any of the foregoing factors could result in a material adverse effect on our business, financial condition, and results of operations.

Current wording

We utilize phone numbers as part of a number of information and analytic services to our customers, such as our call and text analytics and communications. We secure a majority of our phone numbers through telecommunication carriers that we have contracted with and a smaller number through the 800 Service Management System, and such telecommunication carriers provide the underlying telephone service. Our telecommunications carriers and telephone number acquisition process are subject to the rules and guidelines established by the Federal Communications Commission ("FCC"). Furthermore, we may be directly subject to certain telecommunications-related regulations. The FCC and our telecommunication carriers may change the rules and guidelines for securing phone numbers or change the requirements for retaining the phone numbers we have already secured. As a result, we may not be able to secure or retain sufficient phone numbers needed for our services. We may also be limited in the number of available telecommunications carriers or vendors to provide such phone numbers and associated services to us in the event of any industry consolidations. In addition, mobile carriers in the United States and Canada have added, or are currently contemplating adding significant one-time and recurring registration requirements, including “10DLC” brand registration, and/or use limitations (e.g. messaging volume caps) for each phone number, and have imposed or are considering imposing significant additional fees as well as penalties for failure to register or certain use violations for registered numbers. Moreover, mobile carriers and our telecommunication service providers use various automated screening technologies on messaging content crossing their networks, which operate based on disparate and sometimes unpredictable sets of standards and restrictions. The application of such screening technologies to content transmitted by our customers through their use of our services may negatively impact our ability to provide services to certain customers deemed potentially problematic by carriers, subject us to financial penalties, and/or result in telecommunication service providers refusing to provide service to us. Any of the foregoing factors could result in a material adverse effect on our business, financial condition, and results of operations.

Previous wording

We rely upon third-party cloud providers to host certain of our products and services and this reliance is anticipated to increase over time. We may experience interruptions, delays and outages in service and availability from time to time as a result of problems with our third‑party cloud providers’ infrastructure. Lack of availability of this infrastructure could be due to a number of potential causes including technical failures, natural disasters, fraud or security breaches that we cannot predict or prevent. In addition, if our security, or that of any of these third‑party cloud providers, is compromised, or our products and services are rendered unavailable to our customers and cannot be restored within a reasonable amount of time or at all, then our business, results of operations and financial condition could be adversely affected.

Current wording

We rely upon third-party cloud providers to host our products and services. We may experience interruptions, delays and outages in service and availability from time to time as a result of problems with our third‑party cloud providers’ infrastructure. Lack of availability of this infrastructure could be due to a number of potential causes including technical failures, natural disasters, fraud or security breaches that we cannot predict or prevent. In addition, if our security, or that of any of these third‑party cloud providers, is compromised, or our products and services are rendered unavailable to our customers and cannot be restored within a reasonable amount of time or at all, then our business, results of operations and financial condition could be adversely affected.

Previous wording

We store and transmit data and information about our customers and their respective users. We also work with vendors and partners who may come into contact with certain data, such as carriers, colocation facilities, and data processing and storage providers. We deploy security measures to protect this data and information, as do the third parties we utilize to assist in data and information processing and storage. Our security measures and those of the third parties we partner with to assist in data and information processing and/or storage, as well as to assist in the delivery of services to our customers, may suffer breaches. Security breaches of our data storage systems or our third-party colocation and technology providers we utilize to process and store data and information relating to our customers and their respective users could expose us to significant potential liability. Similarly, security breaches of our vendors and partners, or ineffective data security by our vendors or partners, may result in similar significant liability. In addition, security breaches, actual or perceived, could result in legal liability, government fines, and the loss of customers that could potentially have an adverse effect on our business. Although we maintain cyber-liability insurance, our coverage may not be adequate to compensate us for all costs and liabilities that we may incur as a result of a security breach, and our insurers may not be able to compensate us for all losses that may occur or may decline to do so for a variety of reasons.

Current wording

We store and transmit data and information about our customers and their respective users. We also work with vendors and partners who may come into contact with certain data, such as carriers, and data processing and storage providers. We deploy security measures to protect this data and information, as do the third parties we utilize to assist in data and information processing and storage. Our security measures and those of the third parties we partner with to assist in data and information processing and/or storage, as well as to assist in the delivery of services to our customers, may suffer breaches. Security breaches of our data storage systems or our technology providers we utilize to process and store data and information relating to our customers and their respective users could expose us to significant potential liability. Similarly, security breaches of our vendors and partners, or ineffective data security by our vendors or partners, may result in similar significant liability. In addition, security breaches, actual or perceived, could result in legal liability, government fines, and the loss of customers that could potentially have an adverse effect on our business. Although we maintain cyber-liability insurance, our coverage may not be adequate to compensate us for all costs and liabilities that we may incur as a result of a security breach, and our insurers may not be able to compensate us for all losses that may occur or may decline to do so for a variety of reasons.

Previous wording

The actual or perceived improper sending of text messages or voice calls may subject us to potential risks, including liabilities or claims relating to consumer protection laws and regulatory enforcement, including fines. For example, the Telephone Consumer Protection Act of 1991 restricts telemarketing and the sending of automatic SMS text messages without explicit customer consent. The scope and interpretation of the federal and state laws and regulations that are or may be applicable to the delivery of text messages or voice calls are continuously evolving and developing. If we do not comply with these laws or regulations or if we become liable under these laws or regulations due to the failure of our customers to comply with these laws by obtaining proper consent, we could face direct liability. We rely on contractual representations made to us by our customers that they will comply with our acceptable use restrictions and applicable law and regulations in using our services. We cannot predict whether our role in facilitating our customers’ or other users’ activities would expose us to liability under applicable law.

Current wording

The actual or perceived improper sending of text messages or voice calls may subject us to potential risks, including liabilities or claims relating to consumer protection laws and regulatory enforcement, including fines. For example, the Telephone Consumer Protection Act ("TCPA") of 1991 restricts telemarketing and the sending of automatic short message service ("SMS") text messages without explicit customer consent. The scope and interpretation of the federal and state laws and regulations that are or may be applicable to the delivery of text messages or voice calls are continuously evolving and developing. If we do not comply with these laws or regulations or if we become liable under these laws or regulations due to the failure of our customers to comply with these laws by obtaining proper consent, we could face direct liability. We rely on contractual representations made to us by our customers that they will comply with our acceptable use restrictions and applicable law and regulations in using our services. We cannot predict whether our role in facilitating our customers’ or other users’ activities would expose us to liability under applicable law.

Previous wording

Telecommunications laws and regulations (and interpretations thereof) are evolving in response to rapid changes in the telecommunications industry. If our carrier providers were to be subject to any changes in applicable law or regulation (or interpretations thereof), or additional taxes or surcharges, then we in turn may be subject to increased costs for their products and services or receive products and services that may be of less value to our customers, which in turn could adversely affect our business and operating results. Furthermore, our call recording and/or monitoring services may directly subject us to certain telecommunications-related regulations. Finally, in the event that any federal or state regulators were to expand the scope of applicable laws and regulations or their application to include certain end users and information service providers, then our business and operating results could also be adversely affected. The following existing and possible future federal and state laws could impact the growth and profitability of our business:

Current wording

Telecommunications laws and regulations (and interpretations thereof) are evolving in response to rapid changes in the telecommunications industry. If our carrier providers were to be subject to any changes in applicable law or regulation (or interpretations thereof), or additional taxes or surcharges, then we in turn may be subject to increased costs for their products and services or receive products and services that may be of less value to our customers, which in turn could adversely affect our business and operating results. Furthermore, our call recording and/or monitoring services may directly subject us to certain telecommunications-related laws and regulations. Finally, in the event that any federal or state regulators were to expand the scope of applicable laws and regulations or their application to include certain end users and information service providers, then our business and operating results could also be adversely affected. The following existing and possible future federal and state laws could impact the growth and profitability of our business:

Previous wording

The Communications Act of 1934, as amended by the Telecommunications Act of 1996 (the “Act”), and the regulations promulgated by the Federal Communications Commission under Title II of the Act, may impose federal licensing, reporting and other regulatory obligations on the Company. To the extent we contract with and use the networks of voice over IP service providers, new legislation or FCC regulation in this area could restrict our business, prevent us from offering service or increase our cost of doing business. There are an increasing number of regulations and rulings that specifically address access to commerce and communications services on the Internet, including IP telephony. We are unable to predict the impact, if any, that future legislation, legal decisions, or regulations concerning voice services offered via the Internet may have on our business, financial condition, and results of operations.

Current wording

The Communications Act of 1934, as amended by the Telecommunications Act of 1996 (the “Act”), and the regulations promulgated by the FCC under Title II of the Act, may impose federal licensing, reporting and other regulatory obligations on the Company. To the extent we contract with and use the networks of VoIP service providers, new legislation or FCC regulation in this area could restrict our business, prevent us from offering service or increase our cost of doing business. There are an increasing number of regulations and rulings that specifically address access to commerce and communications services on the Internet, including internet protocol ("IP") telephony. We are unable to predict the impact, if any, that future legislation, legal decisions, or regulations concerning voice services offered via the Internet may have on our business, financial condition, and results of operations.

Previous wording

Federal and state telemarketing laws including the Telephone Consumer Protection Act (“TCPA”) which limits the use of autodialing systems, artificial or prerecorded voice messages, SMS text messages and fax machines, the Telemarketing Sales Rule, the Telemarketing Consumer Fraud and Abuse Prevention Act and the rules and regulations promulgated thereunder. In recent years, the TCPA has become a fertile source for both individual and class action lawsuits and regulatory actions. Specifically, the TCPA restricts telemarketing and the transmission of automatic SMS text messages without proper consent. The scope and interpretation of the laws and regulations that are or may be applicable to the delivery of text messages and/or to the allowable methods of obtaining proper consent are continuously evolving and developing. If we do not comply with these laws or regulations or if we become liable under these laws or regulations due to the failure of our customers to comply with these laws by obtaining proper consent, we could face liability. In addition, certain regulatory developments in this area may adversely impact the demand for some of our services (e.g. our text analytics and communications services) if some our customers become unable to obtain proper consents for their communications at historical volumes.

Current wording

Federal and state telemarketing laws including the TCPA which limits the use of autodialing systems, artificial or prerecorded voice messages, SMS text messages and fax machines, the Telemarketing Sales Rule, the Telemarketing Consumer Fraud and Abuse Prevention Act and the rules and regulations promulgated thereunder. In recent years, the TCPA has become a fertile source for both individual and class action lawsuits and regulatory actions. Specifically, the TCPA restricts telemarketing and the transmission of automatic SMS text messages without proper consent. The scope and interpretation of the laws and regulations that are or may be applicable to the delivery of text messages and/or to the allowable methods of obtaining proper consent are continuously evolving and developing. If we do not comply with these laws or regulations or if we become liable under these laws or regulations due to the failure of our customers to comply with these laws by obtaining proper consent, we could face liability. In addition, certain regulatory developments in this area may adversely impact the demand for some of our services (e.g. our text analytics and communications services) if some our customers become unable to obtain proper consents for their communications at historical volumes.

Previous wording

The Telephone Robocall Abuse Criminal Enforcement and Deterrence Act and the rules and regulations promulgated thereunder. The FCC has adopted an initial set of rules requiring originating and terminating voice service providers to implement the STIR/SHAKEN caller ID authentication framework to combat spoofed robocalls and is expected to adopt additional measures for that purpose. A number of our information services depend on integrations with voice service providers subject to these regulations. Some of these providers have taken the position that we must register in FCC’s Robocall Mitigation Database in order to continue doing business with them even though we are not a voice service provider. If we do not comply with our providers’ evolving requirements pertaining to these regulations or if future regulatory measures relative to the STIR/SHAKEN caller ID authentication framework result in unforeseen interoperability issues for our information services that we are unable to address in a timely and efficient manner, our business, financial condition, and results of operations could be negatively impacted and/or we could face liability.

Current wording

The Telephone Robocall Abuse Criminal Enforcement and Deterrence Act and the rules and regulations promulgated thereunder. The FCC has adopted rules requiring originating and terminating voice service providers to implement the STIR/SHAKEN caller identification ("ID") authentication framework to combat spoofed robocalls and is expected to adopt additional measures for that purpose. A number of our information services depend on integrations with voice service providers subject to these regulations. We maintain a registration in FCC’s Robocall Mitigation Database as a Non-Gateway Intermediate Provider. If we do not comply with our providers’ evolving requirements pertaining to these regulations or if future regulatory measures relative to the STIR/SHAKEN caller ID authentication framework result in unforeseen interoperability issues for our information services that we are unable to address in a timely and efficient manner, our business, financial condition, and results of operations could be negatively impacted and/or we could face liability.

Previous wording

Laws affecting telephone call recording and data protection, such as consent and personal data statutes. Under the federal Wiretap Act, at least one-party taking part in a call must be notified if the call is being recorded. Under this law, and most state laws, there is nothing illegal about one of the parties to a telephone call recording the conversation. However, a number of states (i.e., California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Montana, Nevada, New Hampshire, Pennsylvania, and Washington) require that all parties consent when one party wants to record a telephone conversation. The telephone recording laws in other states, like federal law, require only one party to be aware of the recording.

Current wording

Laws affecting telephone call recording and associated consent requirements. Under the Federal Wiretap Act, at least one party taking part in a call must be notified if the call is being recorded. Under this law, and most state laws, there is nothing illegal about one of the parties to a telephone call recording the conversation. However, a number of states (i.e. California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Montana, Nevada, New Hampshire, Pennsylvania, and Washington) require that all parties consent when one party wants to record a telephone conversation. The telephone recording laws in other states, like federal law, require only one party to be aware of the recording. The scope of the consent requirements under these laws may expand over time based on evolving case law in this area.

Previous wording

Under various Orders of the Federal Communications Commission, we may be required to make material retroactive and prospective contributions to funds intended to support Universal Service, Telecommunications Relay Service, Local Number Portability, the North American Numbering Plan and the budget of the Federal Communications Commission.

Current wording

Under various Orders of the FCC, we may be required to make material retroactive and prospective contributions to funds intended to support Universal Service, Telecommunications Relay Service, Local Number Portability, the North American Numbering Plan and the budget of the FCC.

Previous wording

We may also be subject to costs and liabilities with respect to privacy issues. Several companies have incurred penalties for failing to abide by the representations made in their public-facing privacy policies. In addition, several states have passed laws that require businesses and their service providers to implement and maintain reasonable security procedures and practices to protect personal information and to provide notice to consumers in the event of a security breach. For example, California enacted the California Consumer Privacy Act, which was subsequently amended by the California Privacy Rights Act of 2020 (collectively, “CPRA”), which went into effect on January 1, 2023. The CPRA gives California residents rights to access, correct, and delete their personal information, opt out of certain types of personal information sharing, limit the use of sensitive personal information as well as receive detailed information about how their personal information is retained and used. The CPRA and the regulations promulgated thereunder also include requirements for provisions to be included by businesses in their respective contracts with service providers, which limit the scope of permissible use for personal data processed as part of the services and give businesses certain rights to assess their service providers’ data processing operations. The CPRA provides for civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. Virginia has enacted the Virginia Consumer Data Protection Act (“VDCPA”), which also took effect on January 1, 2023 and several other states have enacted privacy-related legislation that took effect in 2023 (e.g. Connecticut, Colorado, and Utah) or is slated to take effect in the near-term (e.g. Montana, Texas, and Iowa ) and that each provide for consumer rights similar to the CPRA. Further, it is anticipated that additional federal and state privacy-related legislation may be enacted. Such legislation could negatively affect our business in various ways such as by increasing our and/or our customers’ costs of compliance. Finally, the majority of the aforementioned privacy laws and regulations do not apply to information historically regulated by certain industry-specific legislation and regulations such as the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and/or the Gramm-Leach-Bliley Act, each of which include separate sets of security standards for the processing of covered data and provide for significant civil and/or criminal penalties for violations. To the extent that we increase our market share of conversational analytics offerings for customers in the healthcare and/or financial services industries, our risk of possible costs and liabilities related to compliance with these additional laws increases as well.

Current wording

We may also be subject to costs and liabilities with respect to privacy issues. Several companies have incurred penalties for failing to abide by the representations made in their public-facing privacy policies. In addition, a significant number of U.S. states have enacted laws that require businesses and their service providers to implement and maintain reasonable security procedures and practices to protect personal information and to provide notice to consumers in the event of a security breach. For example, California enacted the California Consumer Privacy Act, which was subsequently amended by the California Privacy Rights Act of 2020 (collectively, “CPRA”), which went into effect on January 1, 2023. The CPRA gives California residents rights to access, correct, and delete their personal information, opt out of certain types of personal information sharing, limit the use of sensitive personal information as well as receive detailed information about how their personal information is retained and used. The CPRA and the regulations promulgated thereunder also include requirements for provisions to be included by businesses in their respective contracts with service providers, which limit the scope of permissible use for personal data processed as part of the services and give businesses certain rights to assess their service providers’ data processing operations. The CPRA provides for civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. Multiple other states have enacted privacy-related legislation that provides for consumer rights similar to the CPRA. Further, it is anticipated that additional federal and state privacy-related legislation may be enacted. Such legislation could negatively affect our business in various ways such as by increasing our and/or our customers’ costs of compliance. Finally, the majority of the aforementioned privacy laws and regulations do not apply to information historically regulated by certain industry-specific legislation and regulations such as the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and/or the Gramm-Leach-Bliley Act, each of which include separate sets of security standards for the processing of covered data and provide for significant civil and/or criminal penalties for violations. To the extent that we increase our market share of conversational analytics offerings for customers in the healthcare and/or financial services industries, our risk of possible costs and liabilities related to compliance with these additional laws increases as well.

Previous wording

Foreign countries may enact laws that could negatively impact our business and/or may prosecute us for violating existing laws. Such laws might include EU member country conforming legislation under applicable EU Privacy, eCommerce, Data Protection Directives (and similar legislation in other countries where we may have operations), the EU General Data Protection Regulation (“GDPR”), which is directly applicable to all member states and which has substantial compliance obligations and significant potential administrative fines for non-compliance, as well as the GDPR equivalent law retained by the United Kingdom and any successor legislation thereto. Any costs incurred in addressing foreign laws could negatively affect the viability of our business. Our exposure to this risk will increase to the extent we expand our operations internationally.

Current wording

Foreign countries may enact laws that could negatively impact our business and/or may prosecute us for violating existing laws. Such laws might include European Union ("EU") member country conforming legislation under applicable EU Privacy, eCommerce, Data Protection Directives (and similar legislation in other countries where we may have operations), the EU General Data Protection Regulation (“GDPR”), which is directly applicable to all member states and which has substantial compliance obligations and significant potential administrative fines for non-compliance, as well as the GDPR equivalent law retained by the United Kingdom and any successor legislation thereto. Any costs incurred in addressing foreign laws could negatively affect the viability of our business. Our exposure to this risk will increase to the extent we expand our operations internationally.

Previous wording

Furthermore, global political crises such as terrorism or war, and public health crises, such as disease outbreaks, epidemics, or pandemics (including COVID-19) and their resulting impacts on the U.S. and global economies, our markets and business locations, could negatively impact our operating results.

Current wording

Furthermore, global political crises such as terrorism or war, and public health crises, such as disease outbreaks, epidemics, or pandemics and their resulting impacts on the U.S. and global economies, our markets and business locations, could negatively impact our operating results.

Previous wording

It may be difficult for us to retain or attract qualified officers and directors, which could adversely affect our business and our ability to maintain the listing of our Class B common stock on the NASDAQ Global Select Market.

Current wording

It may be difficult for us to retain or attract qualified officers and directors, which could adversely affect our business and our ability to maintain the listing of our Class B common stock on the NASDAQ Stock Market.

Previous wording

We may be unable to attract and retain qualified officers, directors and members of board committees required to provide for our effective management as a result of changes in the rules and regulations which govern publicly-held companies, including, but not limited to, certifications from executive officers and requirements for financial experts on boards of directors. The perceived increased personal risk associated with these changes may deter qualified individuals from accepting these roles. Further, applicable rules and regulations of the Securities and Exchange Commission and the NASDAQ Stock Market heighten the requirements for board or committee membership, particularly with respect to an individual’s independence from the corporation and level of experience in finance and accounting matters along with evolving diversity requirements for board composition. We may have difficulty attracting and retaining directors with the requisite qualifications. If we are unable to attract and retain qualified officers and directors, our business and our ability to maintain the listing of our shares of Class B common stock on the NASDAQ Global Select Market could be adversely affected.

Current wording

We may be unable to attract and retain qualified officers, directors and members of board committees required to provide for our effective management as a result of changes in the rules and regulations which govern publicly-held companies, including, but not limited to, certifications from executive officers and requirements for financial experts on boards of directors. The perceived increased personal risk associated with these changes may deter qualified individuals from accepting these roles. Further, applicable rules and regulations of the SEC and the NASDAQ heighten the requirements for board or committee membership, particularly with respect to an individual’s independence from the corporation and level of experience in finance and accounting matters along with evolving diversity requirements for board composition. We may have difficulty attracting and retaining directors with the requisite qualifications. If we are unable to attract and retain qualified officers and directors, our business and our ability to maintain the listing of our shares of Class B common stock on the NASDAQ could be adversely affected.

Previous wording

Our stock prices may fluctuate in response to a number of events and factors, which may be the result of our business strategy or events beyond our control, including: actual or anticipated fluctuations in our operating results; developments concerning proprietary rights, including patents, by us or a competitor; announcements by us or our competitors of significant contracts, acquisitions, financings, commercial relationships, joint ventures or capital commitments; loss of senior management or other key personnel; registration of additional shares of Class B common stock in connection with acquisitions; lawsuits initiated against us or lawsuits initiated by us; announcements of acquisitions or technical innovations; potential loss or reduced contributions from customers and reseller partners; significant volatility in the market price and trading volume of technology companies in general and of companies in our industry in particular; changes in growth or earnings estimates or recommendations by analysts; changes in the market valuations of similar companies; changes in our industry and the overall economic environment, including but not limited to uncertainty attributable to public health crises, such as disease outbreaks, epidemics or pandemics; volume of shares of Class B common stock available for public sale, including upon conversion of Class A common stock or upon exercise of stock options; Class B common stock repurchases under our share repurchase program; sales and purchases of stock by us or by our stockholders, including sales by certain of our executive officers and directors pursuant to written pre-determined selling and purchase plans under Rule 10b5-1 of the Securities Exchange Act of 1934, as amended (the “Exchange Act”); short sales, hedging and other derivative transactions on shares of our Class B common stock; and an adverse impact on us from any of the other risks cited in this Risk Factors section.

Current wording

Our stock prices may fluctuate in response to a number of events and factors, which may be the result of our business strategy or events beyond our control, including: actual or anticipated fluctuations in our operating results; developments concerning proprietary rights, including patents, by us or a competitor; announcements by us or our competitors of significant contracts, acquisitions, financings, commercial relationships, joint ventures or capital commitments; loss of senior management or other key personnel; registration of additional shares of Class B common stock in connection with acquisitions; lawsuits initiated against us or lawsuits initiated by us; announcements of acquisitions or technical innovations; potential loss or reduced contributions from customers and reseller partners; significant volatility in the market price and trading volume of technology companies in general and of companies in our industry in particular; changes in growth or earnings estimates or recommendations by analysts; changes in the market valuations of similar companies; changes in our industry and the overall economic environment, including but not limited to uncertainty attributable to public health crises, such as disease outbreaks, epidemics or pandemics; volume of shares of Class B common stock available for public sale, including upon conversion of Class A common stock or upon exercise of stock options; Class B common stock repurchases under our share repurchase program; sales and purchases of stock by us or by our stockholders, including sales by certain of our executive officers and directors pursuant to written pre-determined selling and purchase plans under Rule 10b5-1 of the Securities Exchange Act of 1934, as amended; short sales, hedging and other derivative transactions on shares of our Class B common stock; and an adverse impact on us from any of the other risks cited in this Risk Factors section.

Previous wording

In addition, the stock market in general, and the NASDAQ Global Select Market and the market for technology companies in particular, have experienced significant price and volume fluctuations that have often been unrelated or disproportionate to the operating performance of the listed companies. These broad market and industry factors may seriously harm the market price of our Class B common stock, regardless of our operating performance. In the past, following periods of volatility in the market, securities class action litigation has often been instituted against these companies.

Current wording

In addition, the stock market in general, and the NASDAQ, the market for technology companies in particular, have experienced significant price and volume fluctuations that have often been unrelated or disproportionate to the operating performance of the listed companies. These broad market and industry factors may seriously harm the market price of our Class B common stock, regardless of our operating performance. In the past, following periods of volatility in the market, securities class action litigation has often been instituted against these companies.

Previous wording

We are also subject to Section 203 of the Delaware General Corporation Law, which provides, subject to enumerated exceptions, that if a person acquires 15% or more of our voting stock, the person is an “interested stockholder” and may not engage in “business combinations” with us for a period of three years from the time the person acquired 15% or more of our voting stock. The application of Section 203 of the Delaware General Corporation Law could have the effect of delaying or preventing a change of control of our company.

Current wording

We are also subject to Section 203 of the Delaware General Corporation Law ("DGCL"), which provides, subject to enumerated exceptions, that if a person acquires 15% or more of our voting stock, the person is an “interested stockholder” and may not engage in “business combinations” with us for a period of three years from the time the person acquired 15% or more of our voting stock. The application of the DGCL could have the effect of delaying or preventing a change of control of our company.