Skip to main content

HUBSPOT INC

For the period ended Jun 30, 2025. Filed Aug 6, 2025.

View on SEC.gov

About this filing

A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.

Jun 30, 2025 · Filed Aug 6, 2025

HUBS$200.61-2.1%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 259 previous paragraphs and 257 current paragraphs.

227 unchanged; 20 reworded; 9 added; 11 removed; 1 previous and 1 current paragraphs rearranged.

Tables are not compared: 0 previous and 1 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (9)

Current report

Recently, plaintiffs’ attorneys have initiated a wave of demand letters, claims and class action lawsuits alleging companies’ use of online trackers, such as cookies and pixels, constitutes a violation of state wiretapping laws, primarily the California Invasion of Privacy Act (CIPA). So far, most of these claims have settled outside the courthouse, though a risk of costly litigation now exists for business practices that are very common.

Current report

Department of Justice regulations issued in December 2024, prohibits data brokerage transactions involving certain sensitive personal data categories to countries of concern. The regulations also restrict certain investment agreements, employment agreements and vendor agreements involving such data and countries of concern, absent specified cybersecurity controls. Actual or alleged violations of these regulations may be punishable by criminal and/or civil sanctions. The evolving complexity of privacy and data security legislation in the U.S. may complicate our compliance efforts and further increase our risk of regulatory enforcement, penalties and litigation.

Current report

Our vendors have in turn incorporated AI tools into their offerings, and the providers of these AI tools may not meet existing or rapidly evolving regulatory or industry standards, including with respect to privacy and data security. Further, bad actors around the world use increasingly sophisticated methods, including the use of AI, to engage in illegal activities involving the theft and misuse of personal information, confidential information and intellectual property. Any of these effects could damage our reputation, result in the loss of valuable property and information, cause us to breach applicable laws and regulations, and adversely impact our business.

Current report

We cannot guarantee that our share repurchase program will be fully consummated or will enhance long-term stockholder value, and share repurchases could increase the volatility of the trading price of our common stock and diminish our cash reserves.

Current report

In May 2025, our Board of Directors authorized a share repurchase program under which we are authorized to purchase up to $500.0 million of our common stock from time to time (the “2025 Share Repurchase Program”). As of the date of filing of this report, a total of $250.0 million remained available for repurchase under the share repurchase program. Repurchases under the 2025 Share Repurchase Program are made in the open market, through privately negotiated transactions or other means, including pursuant to 10b5-1 plans, and in compliance with applicable securities laws and other requirements. The timing, manner, price, and amount of the 2025 Share Repurchase Program is subject to the discretion of our management. The 2025 Share Repurchase Program does not obligate us to acquire a specified number of shares, and may be suspended, modified, or terminated at any time, without prior notice. There can be no assurance that we will repurchase shares at favorable prices. Further, our share repurchases could affect the trading price of our common stock, increase its volatility, reduce our cash reserves, and may be suspended or terminated at any time, which may result in a lower market valuation of our common stock.

Current report

Issuer Purchases of Equity Securities

Current report

Share repurchases of the Company’s common stock for the three months ended June 30, 2025 were as follows (in thousands, except share data):

Current report

(1) Average price paid per share includes costs associated with the repurchases.

Current report

(2) In May 2025, the Company’s Board of Directors authorized a share repurchase program for the repurchase of shares of the Company’s common stock, in an aggregate amount of up to $500 million over a period of up to 12 months. All repurchases under the program are made in the open market pursuant to 10b5-1 plans. Refer to Note 14 to the condensed consolidated financial statements contained within this Quarterly Report on Form 10-Q for additional information related to our share repurchases.
Removed paragraphs (11)

Previous report

Risks Related to Our Notes

Previous report

Servicing our debt may require a significant amount of cash. We may not have sufficient cash flow from our business to pay our indebtedness, and we may not have the ability to raise the funds necessary to settle for cash conversions of the Notes or to repurchase the Notes for cash upon a fundamental change, which could adversely affect our business and results of operations.

Previous report

In June 2020, we incurred indebtedness in the aggregate principal amount of $460.0 million in connection with the issuance of our 0.375% convertible senior notes due June 1, 2025 (the “2025 Notes”). While we expect to settle the principal amount of the 2025 Notes in cash in the first half of 2025 using our existing cash reserves, our ability to make scheduled payments of the principal of, to pay interest on or to refinance our indebtedness, including the Notes, and any future indebtedness will depend on our performance, which is subject to economic, financial, competitive and other factors beyond our control. Our business may not continue to generate cash flow from operations in the future sufficient to service our debt and make necessary capital expenditures. If we are unable to generate such cash flow, we may be required to adopt one or more alternatives, such as selling assets, restructuring debt or obtaining additional debt financing or equity capital on terms that may be onerous or highly dilutive. Our ability to refinance any future indebtedness will depend on the capital markets and our financial condition at such time. We may not be able to engage in any of these activities or engage in these activities on desirable terms, which could result in a default on our debt obligations. In addition, any of our future debt agreements may contain restrictive covenants that may prohibit us from adopting any of these alternatives. Our failure to comply with these covenants could result in an event of default which, if not cured or waived, could result in the acceleration of our debt.

Previous report

In addition, holders of the Notes have the right to require us to repurchase their Notes upon the occurrence of a fundamental change at a fundamental change repurchase price equal to 100% of the principal amount of the Notes to be repurchased, plus accrued and unpaid interest, if any. Upon conversion of the Notes, unless we elect to deliver solely shares of our common stock to settle such conversion (other than paying cash in lieu of delivering any fractional share), we will be required to make cash payments in respect of the Notes being converted. We may not have enough available cash or be able to obtain financing at the time we are required to make repurchases of Notes surrendered therefor or Notes being converted. In addition, our ability to repurchase the Notes or to pay cash upon conversions of the Notes may be limited by law, by regulatory authority or by agreements governing our future indebtedness. Our failure to repurchase Notes at a time when the repurchase is required by the indenture governing the notes or to pay any cash payable on future conversions of the Notes as required by such indenture would constitute a default under such indenture. A default under the indenture or the fundamental change itself could also lead to a default under agreements governing our future indebtedness. If the repayment of the related indebtedness were to be accelerated after any applicable notice or grace periods, we may not have sufficient funds to repay the indebtedness and repurchase the Notes or make cash payments upon conversions thereof.

Previous report

place us at a disadvantage compared to our competitors who have less debt; and

Previous report

Any of these factors could materially and adversely affect our business, financial condition and results of operations. In addition, if we incur additional indebtedness, the risks related to our business and our ability to service or repay our indebtedness would increase.

Previous report

On or after March 1, 2025 until the close of business on the second scheduled trading day immediately preceding the maturity date, holders may convert their 2025 Notes at any time. In the quarter ended March 31, 2025, the Company settled $89.8 million of the principal balance of the 2025 Notes in cash. Between March 31, 2025 and the date of filing this report, the Company settled $143.6 million of the principal balance of the 2025 Notes in cash in response to conversion notices received prior to March 31, 2025. If one or more holders elect to convert their Notes, unless we elect to satisfy our conversion obligation by delivering solely shares of our common stock (other than paying cash in lieu of delivering any fractional share), we would be required to settle a portion or all of our conversion obligation through the payment of cash, which could adversely affect our liquidity.

Previous report

We are subject to counterparty risk with respect to the Capped Call Options.

Previous report

In connection with the offering of the 2025 Notes, we purchased capped call options (“Capped Call Options”) with respect to our common stock for $50.6 million. The counterparties to the Capped Call Options are financial institutions, and we will be subject to the risk that one or more of the counterparties may default, fail to perform or exercise their termination rights under the Capped Call Options. Global economic conditions have, from time to time, resulted in the actual or perceived failure or financial difficulties of many financial institutions. If a counterparty to the Capped Call Options becomes subject to insolvency proceedings, we will become an unsecured creditor in those proceedings with a claim equal to our exposure at the time under such transaction. In addition, upon a default, failure to perform or a termination of the Capped Call Options by a counterparty, we may suffer more dilution than we currently anticipate with respect to our common stock. We can provide no assurances as to the financial stability or viability of the counterparties.

Previous report

provide for a classified board of directors whose members serve staggered three-year terms;
Reworded paragraphs (20)

Previous wording

We derive, and expect to continue to derive, a substantial portion of our revenue from the sale of subscriptions to our customer platform. The market for marketing, sales, service, operations, commerce and customer management products is still evolving, and competitive dynamics may cause pricing levels to change as the market matures and as existing and new market participants introduce new types of point applications and different approaches to enable businesses to address their respective needs. As a result, we may be forced to, or strategically choose to, reduce the prices we charge for our platform and may be unable to renew existing customer agreements or enter into new customer agreements at the same prices and upon the same terms that we have historically. In addition, our growth strategy involves a scalable pricing model (including freemium versions of our products and our recent seats-based pricing model changes) intended to provide opportunities to increase the value of our customer relationships over time, including as customers expand their use of our platform, or we sell to other parts of their organizations, cross-sell additional products and seats through touchless or low touch in product purchases, and upsell additional offerings and features. If our scalable pricing and cross-selling efforts are unsuccessful or if our existing customers do not expand their use of our platform or adopt additional offerings and features, or if the anticipated benefits from scalable pricing take longer to realize or are not realized at all, our revenue and operating results may suffer.

Current wording

We derive, and expect to continue to derive, a substantial portion of our revenue from the sale of subscriptions to our customer platform. The market for marketing, sales, service, operations, commerce and customer management products is still evolving, and competitive dynamics may cause pricing levels to change as the market matures and as existing and new market participants introduce new types of point applications and different approaches to enable businesses to address their respective needs. As a result, we may be forced to, or strategically choose to, reduce the prices we charge for our platform and may be unable to renew existing customer agreements or enter into new customer agreements at the same prices and upon the same terms that we have historically. In addition, our growth strategy involves a scalable pricing model (including freemium versions of our products and our recent seats-based and consumption-based pricing model changes) intended to provide opportunities to increase the value of our customer relationships over time, including as customers expand their use of our platform, or we sell to other parts of their organizations, cross-sell additional products and seats through touchless or low touch in product purchases, and upsell additional offerings and features. If our scalable pricing and cross-selling efforts are unsuccessful or if our existing customers do not expand their use of our platform or adopt additional offerings and features, or if the anticipated benefits from scalable pricing take longer to realize or are not realized at all, our revenue and operating results may suffer.

Previous wording

Our headcount and operations continue to grow. For example, we had 8,574 full-time employees as of March 31, 2025 and 8,246 as of December 31, 2024. To date, we have opened several international offices. This growth has placed, and will continue to place, a significant strain on our management, administrative, operational and financial infrastructure. We expect to continue to grow headcount and operations over the long-term. We anticipate future growth will be required over the long term to address increases in our product offerings and continued expansion. Our success will depend in part upon our ability to recruit, hire, train, manage and integrate qualified managers, technical personnel and employees in specialized roles within our company, including in technology, sales and marketing. Furthermore, as many of our employees work remotely from geographic areas across jurisdictions where we have offices pursuant to our hybrid workplace model, which provides our employees with the option to be fully remote, work full-time from one of our offices, or have the flexibility to work both in the office and remotely, we may need to reallocate our investment of resources and closely monitor a variety of local regulations and requirements, including local tax laws. We may experience unpredictability in our expenses and employee work culture. If we experience any of these effects in connection with future growth, if our new employees perform poorly, or if we are unsuccessful in recruiting, hiring, training, managing and integrating new employees, or retaining our existing employees, it could materially impair our ability to attract new customers, retain existing customers and expand their use of our platform, all of which would materially and adversely affect our business, financial condition and results of operations.

Current wording

Our headcount and operations continue to grow. For example, we had 8,723 full-time employees as of June 30, 2025 and 8,246 as of December 31, 2024. To date, we have opened several international offices. This growth has placed, and will continue to place, a significant strain on our management, administrative, operational and financial infrastructure. We expect to continue to grow headcount and operations over the long-term. We anticipate future growth will be required over the long term to address increases in our product offerings and continued expansion. Our success will depend in part upon our ability to recruit, hire, train, manage and integrate qualified managers, technical personnel and employees in specialized roles within our company, including in technology, sales and marketing. Furthermore, as many of our employees work remotely from geographic areas across jurisdictions where we have offices pursuant to our hybrid workplace model, which provides our employees with the option to be fully remote, work full-time from one of our offices, or have the flexibility to work both in the office and remotely, we may need to reallocate our investment of resources and closely monitor a variety of local regulations and requirements, including local tax laws. We may experience unpredictability in our expenses and employee work culture. If we experience any of these effects in connection with future growth, if our new employees perform poorly, or if we are unsuccessful in recruiting, hiring, training, managing and integrating new employees, or retaining our existing employees, it could materially impair our ability to attract new customers, retain existing customers and expand their use of our platform, all of which would materially and adversely affect our business, financial condition and results of operations.

Previous wording

We have in the past acquired, and we may in the future acquire or invest in, businesses, products or technologies that we believe could complement or expand our platform, enhance our technical capabilities or otherwise offer growth opportunities. For example, in December 2023, we acquired APIHub, Inc. d.b.a Clearbit (“Clearbit”), a B2B data provider, in October 2024, we acquired Cacheflow Inc. (“Cacheflow”), a B2B subscription billing management and CPQ solution, and in January 2025, we acquired Frame AI, an AI-powered conversation intelligence platform. We may not be able to fully realize the anticipated benefits of historical or any future acquisitions. The pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses related to identifying, investigating and pursuing suitable acquisitions, whether or not they are consummated.

Current wording

We have in the past acquired, and we may in the future acquire or invest in, businesses, products or technologies that we believe could complement or expand our platform, enhance our technical capabilities or otherwise offer growth opportunities. We may not be able to fully realize the anticipated benefits of historical or any future acquisitions. The pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses related to identifying, investigating and pursuing suitable acquisitions, whether or not they are consummated.

Previous wording

We anticipate future volatility in our consolidated statements of operations due to changes in market prices, observable price changes and impairments of our strategic investments. The resulting gains or losses could be material depending on market conditions and events, particularly in periods with economic uncertainty, inflation, geopolitical conflict, volatile public equity markets or unsettled global market conditions.

Current wording

We may experience future volatility in our consolidated statements of operations due to changes in market prices, observable price changes and impairments of our strategic investments. The resulting gains or losses could be material depending on market conditions and events, particularly in periods with economic uncertainty, inflation, geopolitical conflict, volatile public equity markets or unsettled global market conditions.

Previous wording

Further, the economies of countries in Europe have been experiencing weakness associated with high sovereign debt levels, weakness in the banking sector, uncertainty over the future of the Eurozone and volatility in the value of the pound sterling and the Euro and instability resulting from the ongoing conflict between Russia and Ukraine. The effect of the conflict between Russia and Ukraine, including any resulting sanctions, export controls or other restrictive actions that may be imposed against governmental or other entities in, for example, Russia, have in the past contributed and may in the future contribute to disruption, instability and volatility in the global markets. We have operations, as well as current and potential new customers, throughout Europe. If economic conditions in Europe and other key markets for our platform continue to remain uncertain or deteriorate further, it could adversely affect our customers’ ability or willingness to subscribe to our platform, delay prospective customers’ purchasing decisions, reduce the value or duration of their subscriptions or affect renewal rates, all of which could harm our operating results.

Current wording

Further, the economies of countries in Europe have been experiencing weakness associated with high sovereign debt levels, weakness in the banking sector, uncertainty over the future of the Eurozone and volatility in the value of the pound sterling and the Euro and instability resulting from the ongoing conflicts between Russia and Ukraine and in Israel, Gaza, and Iran. The effects of such conflicts, including any resulting sanctions, export controls or other restrictive actions that may be imposed against governmental or other entities in, for example, Russia, have in the past contributed and may in the future contribute to disruption, instability and volatility in the global markets. We have operations, as well as current and potential new customers, throughout Europe. If economic conditions in Europe and other key markets for our platform continue to remain uncertain or deteriorate further, it could adversely affect our customers’ ability or willingness to subscribe to our platform, delay prospective customers’ purchasing decisions, reduce the value or duration of their subscriptions or affect renewal rates, all of which could harm our operating results.

Previous wording

Any damage to, or failure of, the systems of our third-party providers could result in interruptions to our platform. Despite precautions taken at our data centers, the occurrence of spikes in usage volume, a natural disaster, such as earthquakes or hurricane, an act of terrorism, geopolitical conflict, vandalism or sabotage, a disruptive cyber attack, a decision to close a facility without adequate notice, power or telecommunications failures or other unanticipated problems at a facility could result in lengthy interruptions in the availability of our on-demand software. In the event that any of our third-party facilities arrangements is terminated, or if there is a lapse of service or damage to a facility, we could experience interruptions in our platform as well as delays and additional expenses in arranging new facilities and services. Even with current and planned disaster recovery arrangements, our business could be harmed. Also, in the event of damage or interruption, our insurance policies may not adequately compensate us for any losses that we may incur. These factors in turn could further reduce our revenue, subject us to liability and cause us to issue credits or cause customers to fail to renew their subscriptions, any of which could materially adversely affect our business.

Current wording

Any damage to, or failure of, the systems of our third-party providers could result in interruptions to our platform. Despite precautions taken at our data centers, the occurrence of spikes in usage volume, a natural disaster, such as earthquakes or hurricane, an act of terrorism, geopolitical conflict, vandalism or sabotage, a disruptive cyber attack, a decision to close a facility without adequate notice, power or telecommunications failures or other unanticipated problems at a facility could result in lengthy interruptions in the availability of our on-demand software. Similarly, security vulnerabilities or data breaches with our third-party providers could impact the security and availability of our platform. In the event that any of our third-party facilities arrangements is terminated, or if there is a lapse of service or damage to a facility, we could experience interruptions in our platform as well as delays and additional expenses in arranging new facilities and services. Even with current and planned disaster recovery arrangements, our business could be harmed. Also, in the event of damage or interruption, our insurance policies may not adequately compensate us for any losses that we may incur. These factors in turn could further reduce our revenue, subject us to liability and cause us to issue credits or cause customers to fail to renew their subscriptions, any of which could materially adversely affect our business.

Previous wording

The U.S. federal and various state and foreign governments have adopted or proposed limitations on the collection, processing, distribution, use, storage and safeguarding of personal data. In the United States, the FTC and many state attorneys general are applying federal and state privacy and consumer protection laws to impose standards for the online collection, use and dissemination of personal and other data. However, these obligations may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another and may conflict with other requirements or our practices. Any failure or perceived failure by us to comply with privacy or data security laws, policies, legal obligations or industry standards or any security incident that results in the unauthorized, disclosure, release or transfer of personal data or other customer data may result in governmental enforcement actions, litigation, fines and penalties and/or adverse publicity, and could cause our customers to lose trust in us, which could have an adverse effect on our reputation and business.

Current wording

The U.S. federal and various state and foreign governments have adopted or proposed limitations on the collection, processing, distribution, use, storage and safeguarding of personal data. In the U.S., the FTC and many state attorneys general are applying federal and state privacy and consumer protection laws to impose standards for the online collection, use and dissemination of personal and other data. However, these obligations may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another and may conflict with other requirements or our practices. Any failure or perceived failure by us to comply with privacy or data security laws, policies, legal obligations or industry standards or any security incident that results in the unauthorized, disclosure, release or transfer of personal data or other customer data may result in governmental enforcement actions, litigation, fines and penalties and/or adverse publicity, and could cause our customers to lose trust in us, which could have an adverse effect on our reputation and business.

Previous wording

Laws and regulations governing privacy, data protection and cybersecurity are rapidly evolving, and changes to such laws and regulations could require us to change features of our platform or restrict our customers’ ability to collect and use email addresses, page viewing data and other personal data, which may reduce demand for our platform. Our failure to comply with federal, state and foreign privacy and cybersecurity laws and regulations could harm our ability to successfully operate our business and pursue our business goals.

Current wording

Laws and regulations governing privacy, data protection, cybersecurity, and online safety are rapidly evolving, and changes to such laws and regulations could require us to change features of our platform or restrict our customers’ ability to collect and use email addresses, page viewing data and other personal data, which may reduce demand for our platform or inhibit our improvement and development of our platform or its features, including AI models. Our failure to comply with federal, state and foreign privacy and cybersecurity laws and regulations could harm our ability to successfully operate our business and pursue our business goals.

Previous wording

For example, the California Consumer Privacy Act (the “CCPA”), as amended by the California Privacy Rights Act (the “CPRA”), among other things, requires covered companies to provide new disclosures to California residents and afford such individuals the ability to opt out of the sales or sharing of their personal data. In addition to increasing our potential exposure to regulatory enforcement, the CCPA also provides for violations and a limited private right of action, which may increase our exposure to civil litigation.

Current wording

For example, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collective, the “CCPA”), among other things, requires covered companies to provide disclosures to California residents and afford such individuals the ability to opt out of the sales or sharing of their personal data. New and proposed regulations implementing the CCPA continue to evolve the standards of protection required by the CCPA. In addition to increasing our potential exposure to regulatory enforcement, the CCPA also provides for violations and a limited private right of action, which may increase our exposure to civil litigation.

Previous wording

Numerous other states have passed comprehensive privacy and data security laws, which impose obligations on covered businesses similar – but not identical – to those under the CCPA. A number of other states have proposed similar or sector specific privacy legislation, and the U.S. Congress is considering legislation that may preempt some or all of such U.S. state privacy laws, providing a more robust private right of action. Through executive and legislative action, the federal government has also taken steps to restrict data transactions involving persons affiliated with China, Russia, and other countries of concern. The evolving complexity of privacy and data security legislation in the U.S. may complicate our compliance efforts and further increase our risk of regulatory enforcement, penalties and litigation.

Current wording

The landscape of privacy and cybersecurity regulation in the U.S. is increasingly complex. Numerous states have passed comprehensive privacy and data security laws, which impose obligations on covered businesses similar – but not identical – to those under the CCPA, and some states have passed privacy and cybersecurity laws governing specific sectors, technologies, or categories of personal data, such as laws regulating health data, children’s data, and online chatbots. Many of those states have also passed – or proposed to pass – laws and regulations that amend the standard of protection required by such laws. A number of other states have proposed similar privacy legislation, and the U.S. Congress has considered – and may reintroduce – federal privacy and cybersecurity legislation that may or may not preempt some or all of such U.S. state privacy laws, and may provide a private right of action. Through executive and legislative action, the federal government has also taken steps to restrict data transactions involving persons affiliated with China, Russia, Venezuela, and other countries of concern. For example, Executive Order 14117 on "Preventing Access to Americans' Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern" as implemented by

Previous wording

In connection with the operation of some of our business lines, such as business intelligence services, we collect, process and share business contact information or other personal data individuals make available in their professional capacity. We may be subject to additional requirements under privacy and data protection laws that could lead to additional compliance costs, regulatory scrutiny, and reputational risks that may affect our business. For example, we may be required to send notifications to individuals and respond to higher volumes of data privacy requests, which may require substantial costs and expenses, or reduce the potential value of our business intelligence services. We may also receive data from third-party vendors (e.g., data brokers) in connection with such services. While we have implemented certain contractual measures with such vendors to protect our interests, we are ultimately unable to verify with complete certainty the source of such data, how it was received, and that such information was collected and is being shared with us in compliance with all applicable data privacy laws. Furthermore, the uncertain and shifting regulatory environment and trust climate may cause concerns regarding data privacy and may cause our vendors, customers, users, or our customers’ customers to decline to provide the data necessary to allow us to offer some of our services to our customers and users effectively, or could prompt individuals to opt out of our collection of their personal data. Concern regarding our use of the personal data collected when performing our services could keep prospective customers from subscribing to our services.

Current wording

In connection with the operation of some of our business lines, such as business intelligence and AI services, we collect, process and share personal data, such as business contact information or other personal data individuals make available in their professional capacity. We may be subject to additional requirements under privacy and data protection laws that could lead to additional compliance costs, regulatory scrutiny, and reputational risks that may affect our business. For example, we may be required to send notifications to individuals and respond to higher volumes of data privacy requests, which may require substantial costs and expenses, or reduce the potential value of our business intelligence services. We may also receive data from third-party vendors (e.g., data brokers) in connection with such services. While we have implemented certain contractual measures with such vendors to protect our interests, we are ultimately unable to verify with complete certainty the source of such data, how it was received, and that such information was collected and is being shared with us in compliance with all applicable data privacy laws. Furthermore, the uncertain and shifting regulatory environment and trust climate may cause concerns regarding data privacy and may cause our vendors, customers, users, or our customers’ customers to decline to provide the data necessary to allow us to offer some of our services to our customers and users effectively, or could prompt individuals to opt out of our collection of their personal data. Concern regarding our use of the personal data collected when performing our services could keep prospective customers from subscribing to our services.

Previous wording

We currently use and integrate AI into our business processes. Use of this technology presents risks and challenges that could affect our business. If we enable or use solutions that draw controversy due to perceived or actual negative societal impact, we may experience brand or reputational harm, competitive harm or legal liability.

Current wording

We currently use and integrate AI technologies into our business processes and services. Development, use, and deployment of these technologies present risks and challenges that could affect our business. If we enable or use solutions that draw controversy due to perceived or actual negative societal impact or otherwise cause harm, we may experience brand or reputational harm, competitive harm, legal liability, and defensive costs and expenses.

Previous wording

A growing number of legislators and regulators are adopting laws and regulations and have focused enforcement efforts on the adoption of AI and use of such technologies in compliance with ethical standards and societal expectations. Several states, including Colorado and California, passed laws that will take effect in 2026 to regulate various uses of AI, including to make consequential decisions. It is possible that other new laws and regulations will be adopted in the near future, or that existing laws and regulations may be interpreted in ways that would affect our business and the ways in which we use AI and machine learning technology, our financial condition and our results of operations, including as a result of the cost to comply with such laws or regulations.

Current wording

A growing number of legislators and regulators are adopting laws and regulations addressing, and have focused enforcement efforts on the development and adoption of AI technologies and use of such technologies in compliance with ethical standards and societal expectations. Several states, including Colorado, California, and Texas passed laws that will take effect in 2026 to regulate various uses of AI, including to make consequential decisions, and to require companies to disclose sources of training data for AI technologies, among other requirements. In addition, U.S. states and the federal government have a wide variety of measures to regulate various facets of AI development, deployment, and use in recent years, and it is possible that new laws and regulations will be adopted in the near future, or that existing laws and regulations may be interpreted in ways that would affect our business and the ways in which we and our customers use our AI technologies, our financial condition and our results of operations, including as a result of the cost to comply with such laws or regulations. A proposed 10-year federal moratorium on the enforcement of certain state AI laws, which was included in the Trump Administration’s budget reconciliation bill was excluded from the One Big Beautiful Bill Act (“OBBBA”). This, in turn, may further stimulate AI regulation in the states, contributing to a complicated legislative patchwork.

Previous wording

In Europe, the EU’s Artificial Intelligence Act (“AI Act”) entered into force on August 1, 2024 and, with some exceptions, will begin to apply as of August 2, 2026. This legislation imposes significant obligations on providers and deployers of high-risk AI systems, and encourages providers and deployers of AI systems to account for EU ethical principles in their development and use of these systems. As we continue to develop and use AI systems that are governed by the AI Act or other emerging regulations, it may necessitate ensuring higher standards of data quality, transparency, and human oversight, as well as adhering to specific ethical, accountability, and administrative requirements, some of which may increase our costs and compliance obligations. Further, potential government regulation related to AI use and ethics may also increase the cost of research and development in this area, and failure to properly remediate AI usage or ethics issues may cause public confidence in AI to be undermined, which could slow adoption of AI in our products and services.

Current wording

Outside the U.S., lawmaking and regulation relating to AI is proceeding at a similar pace. In Europe, for example, the EU’s Artificial Intelligence Act (“AI Act”) entered into force on August 1, 2024 and, with some exceptions, will begin to apply as of August 2, 2026. This legislation imposes significant obligations on providers and deployers of high-risk AI systems, and encourages providers and deployers of AI systems to account for EU ethical principles in their development and use of these systems. As we continue to develop and use AI systems that are governed by the AI Act or other emerging regulations, it may necessitate ensuring higher standards of data quality, transparency, and human oversight, as well as adhering to specific ethical, accountability, and administrative requirements, some of which may increase our costs and compliance obligations. Further, potential government regulation related to AI use and ethics may also increase the cost of research and development in this area, and failure to properly remediate AI usage or ethics issues may cause public confidence in AI to be undermined, which could slow adoption of AI in our products and services.

Previous wording

The rapid evolution of AI will require the application of significant resources to design, develop, test and maintain such systems to help ensure that AI is implemented in accordance with applicable law and regulation and in a socially responsible manner and to minimize any real or perceived unintended harmful impacts. The use of certain AI technologies can also give rise to intellectual property risks, including by disclosing or otherwise compromising our confidential or proprietary intellectual property, or by undermining our ability to assert or defend ownership rights in intellectual property created with the assistance of AI tools.

Current wording

The rapid evolution of AI technologies and regulatory frameworks will require the application of significant resources to design, develop, test and maintain such systems to help ensure that AI is implemented in accordance with applicable law and regulation and in a socially responsible manner and to minimize any real or perceived unintended harmful impacts. The use of certain AI technologies can also give rise to intellectual property risks, including by disclosing or otherwise compromising our confidential or proprietary intellectual property, or by undermining our ability to assert or defend ownership rights in intellectual property created with the assistance of AI tools.

Previous wording

New income, sales, use or other tax laws, statutes, rules, regulations or ordinances could be enacted at any time. Any new taxes could adversely affect our domestic and international business operations, and our business and financial performance. Further, existing tax laws, statutes, rules, regulations or ordinances could be interpreted, changed, modified or applied adversely to us. These events could require us or our customers to pay additional tax amounts on a prospective or retroactive basis, as well as require us or our customers to pay fines and/or penalties and interest for past amounts deemed to be due. Additionally, new, changed, modified or newly interpreted or applied tax laws could increase our customers’ and our compliance, operating and other costs, as well as the costs of our platform. Any or all of these events could adversely impact our business, cash flows and financial performance. Furthermore, as our employees continue to work remotely from geographic locations across the United States and internationally, we may become subject to additional taxes and our compliance burdens with respect to the tax laws of additional jurisdictions may increase.

Current wording

New income, sales, use or other tax laws, statutes, rules, regulations or ordinances could be enacted at any time. For example, on July 4, 2025, President Donald Trump signed the OBBBA into law. Key tax provisions include the restoration of 100% bonus depreciation, immediate expensing for domestic research and experimental expenditures, changes to the Section 163(j) interest limitations, updates to GILTI and FDII rules, amendments to energy credits, and expanded Section 162(m) aggregation requirements. The Company is currently evaluating the impact of these and other provisions of the OBBBA on the Company’s business. Any new taxes could adversely affect our domestic and international business operations, and our business and financial performance. Further, existing tax laws, statutes, rules, regulations or ordinances could be interpreted, changed, modified or applied adversely to us. These events could require us or our customers to pay additional tax amounts on a prospective or retroactive basis, as well as require us or our customers to pay fines and/or penalties and interest for past amounts deemed to be due. Additionally, new, changed, modified or newly interpreted or applied tax laws could increase our customers’ and our compliance, operating and other costs, as well as the costs of our platform. Any or all of these events could adversely impact our business, cash flows and financial performance. Furthermore, as our employees continue to work remotely from geographic locations across the United States and internationally, we may become subject to additional taxes and our compliance burdens with respect to the tax laws of additional jurisdictions may increase.

Previous wording

We generated a net loss of $21.8 million for the three months ended March 31, 2025 and a net income of $5.9 million for the three months ended March 31, 2024. As of March 31, 2025 we had an accumulated deficit of $821.6 million. We will need to generate and sustain increased revenue levels in future periods to become consistently profitable, and, even if we do, we may not be able to maintain or increase our level of profitability. We have spent and intend to continue to expend significant funds on our marketing, sales, customer service, and general and administrative operations, the development and enhancement of our customer platform, scaling our data center infrastructure and services capabilities and expanding into new markets. Our efforts to grow our business may be more costly than we expect, and we may not be able to increase our revenue enough to offset our higher operating expenses. We may incur significant losses in the future for a number of reasons, including the other risks described in this Quarterly Report on Form 10-Q, and unforeseen expenses, difficulties, complications and delays and other unknown events. If we are unable to achieve and sustain profitability, the market price of our common stock may decrease significantly.

Current wording

We generated net losses of $25.1 million for the six months ended June 30, 2025 and net losses of $8.5 million for the six months ended June 30, 2024. As of June 30, 2025 we had an accumulated deficit of $824.9 million. We will need to generate and sustain increased revenue levels in future periods to become consistently profitable, and, even if we do, we may not be able to maintain or increase our level of profitability. We have spent and intend to continue to expend significant funds on our marketing, sales, customer service, and general and administrative operations, the development and enhancement of our customer platform, scaling our data center infrastructure and services capabilities and expanding into new markets. Our efforts to grow our business may be more costly than we expect, and we may not be able to increase our revenue enough to offset our higher operating expenses. We may incur significant losses in the future for a number of reasons, including the other risks described in this Quarterly Report on Form

Previous wording

From time to time, we may invest in social impact investment funds. As of March 31, 2025, we have invested $9.5 million in the Black Economic Development Fund and $7.5 million in support of Minority Depository Institutions to help close the racial wealth, health and opportunity gap. There is no guarantee as to the performance of this investment or any similar investments we make in the future. Depending on the performance of this investment and future investments we may make, we may not receive any return on our investment or we may lose our entire investment, which could have an adverse effect on our business.

Current wording

From time to time, we may invest in social impact investment funds. As of June 30, 2025, we have invested $10.3 million in the Black Economic Development Fund and $7.5 million in support of Minority Depository Institutions to help close the racial wealth, health and opportunity gap. There is no guarantee as to the performance of this investment or any similar investments we make in the future. Depending on the performance of this investment and future investments we may make, we may not receive any return on our investment or we may lose our entire investment, which could have an adverse effect on our business.

Previous wording

Sarbanes-Oxley Act (“Section 404”), requires us to perform system and process evaluation and testing of our internal control over financial reporting to allow management to report on, and our independent registered public accounting firm to attest to, the effectiveness of our internal control over financial reporting. Our compliance with applicable provisions of Section 404 requires that we incur substantial accounting expenses and expend significant management time on compliance-related issues as we implement additional corporate governance practices and comply with reporting requirements. Moreover, if we are not able to comply with the requirements of Section 404 applicable to us in a timely manner, or if we or our independent registered public accounting firm identifies deficiencies in our internal control over financial reporting that are deemed to be material weaknesses, the market price of our stock could decline and we could be subject to sanctions or investigations by the SEC or other regulatory authorities, which would require additional financial and management resources.

Current wording

The Sarbanes-Oxley Act requires, among other things, that we assess the effectiveness of our internal control over financial reporting annually and the effectiveness of our disclosure controls and procedures quarterly. In particular, Section 404 of the Sarbanes-Oxley Act (“Section 404”), requires us to perform system and process evaluation and testing of our internal control over financial reporting to allow management to report on, and our independent registered public accounting firm to attest to, the effectiveness of our internal control over financial reporting. Our compliance with applicable provisions of Section 404 requires that we incur substantial accounting expenses and expend significant management time on compliance-related issues as we implement additional corporate governance practices and comply with reporting requirements. Moreover, if we are not able to comply with the requirements of Section 404 applicable to us in a timely manner, or if we or our independent registered public accounting firm identifies deficiencies in our internal control over financial reporting that are deemed to be material weaknesses, the market price of our stock could decline and we could be subject to sanctions or investigations by the SEC or other regulatory authorities, which would require additional financial and management resources.

Previous wording

require supermajority votes of the holders of our common stock to amend specified provisions of our charter documents.

Current wording

require a majority vote of the holders of our outstanding common stock to amend specified provisions of our charter documents.
Rearranged current paragraphs (1)

Current report — wording carried from elsewhere

10-Q, and unforeseen expenses, difficulties, complications and delays and other unknown events. If we are unable to achieve and sustain profitability, the market price of our common stock may decrease significantly.
Rearranged previous paragraphs (1)

Previous report — wording carried elsewhere

The Sarbanes-Oxley Act requires, among other things, that we assess the effectiveness of our internal control over financial reporting annually and the effectiveness of our disclosure controls and procedures quarterly. In particular, Section 404 of the