BENTLEY SYSTEMS INC
For the period ended Dec 31, 2024. Filed Feb 26, 2025.
View on SEC.govAbout this filing
A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.
FY2024 · Filed Feb 26, 2025
What changed in Risk Factors?
Read the current filingPrevious report: 10-K
Period ended 2023-12-31; filed 2024-02-27.
0001031308-24-000002
Item 1A. Risk FactorsCurrent report: 10-K
Period ended 2024-12-31; filed 2025-02-26.
0001031308-25-000002
Item 1A. Risk FactorsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 109 previous paragraphs and 111 current paragraphs.
90 unchanged; 16 reworded; 5 added; 2 removed; 1 previous and 0 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (5)
Current report
We incorporate artificial intelligence and machine learning (collectively “AI” herein this item) into our software solutions and offerings, and challenges with properly managing its use could result in reputational harm, or liability, and adversely affect our operations.
Current report
As a global software and service provider, we are increasingly building AI into many of our software solutions and offerings. We expect to rely on the responsible use of AI technologies to help drive future growth in our business but there can be no assurance that we will realize the anticipated growth or benefits from AI. As with many innovations, there may be slow adoption, regulatory challenges, or we may fail to appropriately implement and market our AI solutions.
Current report
AI is becoming an increasingly regulated space with a number of jurisdictions having proposed or enacted laws concerning AI. Against this regulatory backdrop, our offerings based on AI may expose us to additional lawsuits and regulatory investigations and subject us to legal liability as well as brand and reputational harm. Further, research and development associated with our AI offerings may be impacted by the increasingly complex regulatory landscape by increasing the burdens and costs associated with research and development.
Current report
We are subject to governmental sanctions compliance, and export and import controls that could impair our ability to compete in international markets or subject us to liability if we violate the controls.
Current report
Servicing our debt requires a significant amount of cash, and we may not have sufficient cash flows from our business to pay our substantial debt.
Removed paragraphs (2)
Previous report
We are required to evaluate our internal control over financial reporting under Section 404 of the Sarbanes‑Oxley Act of 2002 and any adverse results from such evaluation could result in a loss of investor confidence in our financial reports and have an adverse effect on our stock price.
Previous report
Pursuant to Section 404 of the Sarbanes‑Oxley Act of 2002, we are required to furnish a report by our management on our internal control over financial reporting, including an assessment of the effectiveness of our internal control over financial reporting as of the end of our fiscal year. This assessment must include a statement as to whether or not our internal control over financial reporting is effective and disclosure of any material weaknesses in our internal control over financial reporting identified by management. If our management or independent registered public accounting firm identifies one or more material weaknesses in our internal control over financial reporting, we are unable to assert that our internal control over financial reporting is effective, or our independent registered public accounting firm is unable to express an opinion that our internal controls are effective, investors could lose confidence in the accuracy and completeness of our financial reports, which could have an adverse effect on our business and stock price.
Reworded paragraphs (16)
Previous wording
Approximately 58%, 58%, and 59% of our total revenues were from outside the U.S. for the years ended December 31, 2023, 2022, and 2021, respectively. We anticipate that revenues from accounts outside the U.S. will continue to comprise a majority of our total revenues for the foreseeable future.
Current wording
Approximately 58% of our total revenues were from outside the U.S. for the years ended December 31, 2024, 2023, and 2022. We anticipate that revenues from accounts outside the U.S. will continue to comprise a majority of our total revenues for the foreseeable future.
Previous wording
Our international revenues, including from emerging economies, are subject to general economic and political conditions in foreign markets and our revenues are impacted by the relative geographical and country mix of our revenues over time. These factors could adversely impact our international revenues and, consequently, our business. Our dependency on international revenues also makes us more exposed to global economic and political trends, which can negatively impact our financial results. Further, our operations outside the U.S. are subject to legal, regulatory, social, political, economic, and other risks inherent in international business operations, including, without limitation, local product preference and product requirements, trade protection measures, sanctions, quotas, embargoes, import and export licensing requirements, duties, tariffs or surcharges and more stringent regulations relating to privacy and data security and access to, or use of, commercial and personal information, such as the General Data Protection Regulation (the “GDPR”) applicable in the European Union (the “E.U.”), the Personal Information Protection Law (the “PIPL”) applicable in China, and Brazil’s General Data Protection Law (the “LGPD”).
Current wording
Our international revenues, including from emerging economies, are subject to general economic and political conditions in foreign markets and our revenues are impacted by the relative geographical and country mix of our revenues over time. These factors could adversely impact our international revenues and, consequently, our business. Our dependency on international revenues also makes us more exposed to global economic and political trends, which can negatively impact our financial results. Further, our operations outside the U.S. are subject to legal, regulatory, social, political, economic, and other risks inherent in international business operations, including, without limitation, local product preference and product requirements, trade protection measures, sanctions, quotas, embargoes, import and export licensing requirements, duties, tariffs or surcharges and more stringent regulations relating to privacy and data security and access to, or use of, commercial and personal information.
Previous wording
Approximately 18%, 18%, and 19% of our total revenues for the years ended December 31, 2023, 2022, and 2021 relate to infrastructure projects in APAC, including China. We cannot assure you that spending in these countries on infrastructure projects will continue at historical levels or increase in the future, or that demand for our software solutions in APAC in general will not be negatively affected by reductions in spending or other limitations.
Current wording
Approximately 18% of our total revenues for the years ended December 31, 2024, 2023, and 2022 relate to infrastructure projects in APAC, including China. We cannot assure you that spending in these countries on infrastructure projects will continue at historical levels or increase in the future, or that demand for our software solutions in APAC in general will not be negatively affected by reductions in spending or other limitations.
Previous wording
We sell our solutions in 194 countries, primarily through a direct sales force located throughout the world. Approximately 58%, 58%, and 59% of our total revenues were from outside the U.S. for the years ended December 31, 2023, 2022, and 2021, respectively. As we continue to expand our presence in international regions, the portion of our revenues, expenses, cash, accounts receivable, and payment obligations denominated in foreign currencies continues to increase. Further, we anticipate that revenues from accounts outside of the U.S. will continue to comprise the majority of our total revenues for the foreseeable future.
Current wording
We sell our solutions in 189 countries, primarily through a direct sales force located throughout the world. Approximately 58% of our total revenues were from outside the U.S. for the years ended December 31, 2024, 2023, and 2022. As we continue to expand our presence in international regions, the portion of our revenues, expenses, cash, accounts receivable, and payment obligations denominated in foreign currencies continues to increase. Further, we anticipate that revenues from accounts outside of the U.S. will continue to comprise the majority of our total revenues for the foreseeable future.
Previous wording
Because of our international activities, we have revenues, expenses, cash, accounts receivable and payment obligations denominated in foreign currencies. For the years ended December 31, 2023, 2022, and 2021, 35%, 36%, and 47%, respectively, of our total revenues were denominated in a currency other than the U.S. dollar. As a result, we are subject to currency exchange risk. Our revenues and results of operations are adversely affected when the U.S. dollar strengthens relative to other currencies and are positively affected when the U.S. dollar weakens. As a result, changes in currency exchange rates will affect our financial condition, results of operations, and cash flows. In the event that there are economic declines in countries in which we conduct transactions, the resulting changes in currency exchange rates may affect our financial condition, results of operations, and cash flows. We are most impacted by movements in and among the euro, British pound, Canadian dollar, Australian dollar, Chinese yuan renminbi, and New Zealand dollar. For example, the Chinese yuan renminbi has fluctuated against the U.S. dollar, at times significantly and unpredictably, due to changes in foreign exchange for a wide variety of reasons, including actions instituted by China. Because of changes in trade between the U.S. and China, and renminbi internationalization, China may in the future announce further changes to the exchange rate system, and we cannot assure you that the renminbi will not appreciate or depreciate significantly in value against the U.S. dollar in the future.
Current wording
Because of our international activities, we have revenues, expenses, cash, accounts receivable and payment obligations denominated in foreign currencies. For the years ended December 31, 2024, 2023, and 2022, 34%, 35%, and 36%, respectively, of our total revenues were denominated in a currency other than the U.S. dollar. As a result, we are subject to currency exchange risk. Our revenues and results of operations are adversely affected when the U.S. dollar strengthens relative to other currencies and are positively affected when the U.S. dollar weakens. As a result, changes in currency exchange rates will affect our financial condition, results of operations, and cash flows. In the event that there are economic declines in countries in which we conduct transactions, the resulting changes in currency exchange rates may affect our financial condition, results of operations, and cash flows. We are most impacted by movements in and among the euro, British pound, Canadian dollar, Australian dollar, Chinese yuan renminbi, and New Zealand dollar. For example, the Chinese yuan renminbi has fluctuated against the U.S. dollar, at times significantly and unpredictably, due to changes in foreign exchange for a wide variety of reasons, including actions instituted by China. Because of changes in trade between the U.S. and China, and renminbi internationalization, China may in the future announce further changes to the exchange rate system, and we cannot assure you that the renminbi will not appreciate or depreciate significantly in value against the U.S. dollar in the future.
Previous wording
Our cash and cash equivalents balances are concentrated in a few locations around the world, with approximately 95% of those balances held outside of the U.S. as of December 31, 2023 and 2022. Cash repatriation restrictions may limit our ability to repatriate cash held by our foreign subsidiaries. Additionally, the repatriation of cash held by our foreign subsidiaries may result in adverse tax consequences. Any repatriation of cash may be restricted or may result in our incurring substantial costs. As a result, we may be required to seek sources of cash to fund our operations, including through the issuance of equity securities, which may be dilutive to existing stockholders, or by incurring additional indebtedness. There can be no assurance that we will be able to secure sources of financing on terms favorable to us, or at all.
Current wording
Our cash and cash equivalents balances are concentrated in a few locations around the world, with approximately 96% and 95% of those balances held outside of the U.S. as of December 31, 2024 and 2023, respectively. Cash repatriation restrictions may limit our ability to repatriate cash held by our foreign subsidiaries. Additionally, the repatriation of cash held by our foreign subsidiaries may result in adverse tax consequences. Any repatriation of cash may be restricted or may result in our incurring substantial costs. As a result, we may be required to seek sources of cash to fund our operations, including through the issuance of equity securities, which may be dilutive to existing stockholders, or by incurring additional indebtedness. There can be no assurance that we will be able to secure sources of financing on terms favorable to us, or at all.
Previous wording
Sales through our global network of independent regional channel partners accounted for 8% of our total revenues for the years ended December 31, 2023, 2022, and 2021. These channel partners sell our software solutions in geographic regions where we do not have a meaningful presence, and in niche markets where they have specialized industry and technical knowledge. Where we rely on channel partners, we may have reduced contact with ultimate users that purchase through such channel partners, thereby making it more difficult to establish brand awareness, ensure proper installation, service ongoing requirements, estimate demand, and respond to the evolving needs of an account. Any of our channel partners may choose to terminate its relationship with us at any time. As a result, our ability to service the ultimate users who were interfacing with that channel partner may take time to develop as we divert resources to service those users directly or find a suitable alternative channel partner to continue the relationship. Any disruption in service may damage our reputation and business. In addition, our channel partners may be unable to meet their payment obligations to us, which would have a negative impact on our results of operations and revenues. Our channel partners may also not have loyalty to our brand and therefore may not be particularly motivated to sell our software solutions or services.
Current wording
Sales through our global network of independent regional channel partners accounted for 7%, 8%, and 8% of our total revenues for the years ended December 31, 2024, 2023, and 2022, respectively. These channel partners sell our software solutions in geographic regions where we do not have a meaningful presence, and in niche markets where they have specialized industry and technical knowledge. Where we rely on channel partners, we may have reduced contact with ultimate users that purchase through such channel partners, thereby making it more difficult to establish brand awareness, ensure proper installation, service ongoing requirements, estimate demand, and respond to the evolving needs of an account. Any of our channel partners may choose to terminate its relationship with us at any time. As a result, our ability to service the ultimate users who were interfacing with that channel partner may take time to develop as we divert resources to service those users directly or find a suitable alternative channel partner to continue the relationship. Any disruption in service may damage our reputation and business. In addition, our channel partners may be unable to meet their payment obligations to us, which would have a negative impact on our results of operations and revenues. Our channel partners may also not have loyalty to our brand and therefore may not be particularly motivated to sell our software solutions or services.
Previous wording
Increasingly stringent and growing data protection and privacy laws with respect to cloud computing, cross‑border data transfer restrictions, and other restrictions may apply to our business and non‑compliance with such rules may limit the use and adoption of our services, adversely affect our business, or expose us to increased liability.
Current wording
Increasingly regulatory focus on privacy, data protection, cross-border data flows, and information security issues, and new and expanding laws may apply to our business and non‑compliance with such rules may limit the use and adoption of our services, adversely affect our business, or expose us to increased liability.
Previous wording
As a global software and service provider, we collect and process personal data and other data from our users and prospective users. We use this information to provide solutions and applications to our accounts, to validate user identity, to fulfill contractual duties and administer billing and support, to expand and improve our business, and to communicate and recommend products and services through our marketing and advertising efforts. We may also share accounts’ personal data with certain third parties as described in the privacy policy provided to each account. We may also share accounts’ personal data with certain third parties as described in the privacy policy provided to each account. Further, we collect and otherwise process personal data of our global employees and contractors.
Current wording
As a global software and service provider, we collect and process personal data and other data from our users and prospective users. We use this information to provide solutions and applications to our accounts, to validate user identity, to fulfill contractual duties and administer billing and support, to expand and improve our business, and to communicate and recommend products and services through our marketing and advertising efforts. We may also share accounts’ personal data with certain third parties as described in the privacy statement provided to each account. We may also share accounts’ personal data with certain third parties as described in the privacy statement provided to each account. Further, we collect and otherwise process personal data of our global employees and contractors.
Previous wording
Personal Data Privacy and Online Monitoring have been enacted. These laws and regulations, as well as industry self-regulatory codes, create new compliance obligations and substantially expand the scope of potential liability and provide greater penalties for non-compliance. For example, the GDPR provides for penalties of up to €20 million or 4% of a company’s annual global revenue, whichever is greater, the PIPL provides for penalties of up to 50 million renminbi or 5% of a company's annual revenue and disgorgement of all illegal gains, whichever is greater, and the CCPA provides for penalties of up to $7,500 per violation.
Current wording
Globally, laws such as the General Data Protection Regulation (the “GDPR”) in the European Union (the “E.U.”) and the Personal Information Protection Law (the “PIPL”) in China have been enacted, and numerous other countries have proposed or have enacted laws concerning privacy, data protection, data sovereignty, and information security; these laws impose obligations directly on us as both a data controller and a data processor, as well as on many of our users. In addition, new and emerging state laws in the U.S. governing privacy, data protection, and information security, such as the California Consumer Privacy Act (“CCPA”), the California Privacy Rights Act (“CPRA”), and numerous laws in other states, many of which provide for obligations similar to the CCPA and CPRA, have been enacted. These laws and regulations, as well as industry self-regulatory codes, create new compliance obligations and substantially expand the scope of potential liability and provide greater penalties for non-compliance. For example, the GDPR provides for penalties of up to €20 million or 4% of a company’s annual global revenue, whichever is greater, the PIPL provides for penalties of up to 50 million renminbi or 5% of a company's annual revenue and disgorgement of all illegal gains, whichever is greater, and the CCPA provides for penalties of up to $7,500 per violation.
Previous wording
Although, we monitor the regulatory environment and have invested in addressing these developments, operating in an increasingly complex regulatory landscape may impact our innovation and business drivers in developing new and emerging technologies (e.g., artificial intelligence and machine learning). Globally, these and other requirements are causing increased scrutiny amongst users, particularly in the public sector and highly regulated industries, which could restrict the use and adoption of our solutions and applications (in particular cloud services). Further, these developments may require us to take on more onerous obligations in our contracts, restrict our ability to store, transfer and process data or, in some cases, impact our ability or our users’ ability to offer our services in certain locations, to deploy our solutions, or to derive insights from user data globally.
Current wording
Although, we monitor the regulatory environment and have invested in addressing these developments, operating in an increasingly complex regulatory landscape may impact our innovation and business drivers in developing new and emerging technologies (e.g., AI). Globally, these and other requirements are causing increased scrutiny amongst users, particularly in the public sector and highly regulated industries, which could restrict the use and adoption of our solutions and applications (in particular cloud services). Further, these developments may require us to take on more onerous obligations in our contracts, restrict our ability to store, transfer and process data or, in some cases, impact our ability or our users’ ability to offer our services in certain locations, to deploy our solutions, or to derive insights from user data globally.
Previous wording
Furthermore, concerns regarding privacy, data protection, and information security may cause our accounts’ customers to resist providing the data necessary to allow our accounts to use our services effectively. Even the perception that the privacy of data is not satisfactorily protected or does not meet regulatory requirements could inhibit sales of our software solutions or services, and could limit adoption of our cloud‑based solutions.
Current wording
Furthermore, concerns regarding privacy, data protection, cross-border data flows, and information security may cause our accounts’ customers to resist providing the data necessary to allow our accounts to use our services effectively. Even the perception that the privacy of data is not satisfactorily protected or does not meet regulatory requirements could inhibit sales of our software solutions or services, and could limit adoption of our cloud‑based solutions.
Previous wording
Our amended and restated credit agreement, entered into on December 19, 2017 (the “Credit Facility”), contains certain restrictive covenants that limit our ability to, among other things, incur indebtedness other than amounts under the Credit Facility and specified baskets, incur additional liens, merge or consolidate with other companies or consummate certain changes of control, enter into new lines of business, pay dividends to our stockholders, repurchase our common stock and outstanding indebtedness, make investments in and acquire other businesses, and transfer or dispose of assets. In certain circumstances, the agreement governing the Credit Facility may also limit our ability to transfer cash among our subsidiaries and between us and our subsidiaries, including our foreign subsidiaries. It also contains certain financial covenants, including a covenant requiring us not to permit the net leverage ratio to exceed 3.00 to 1.00 and a covenant requiring the fixed charge coverage ratio for any period of four consecutive fiscal quarters to not be less than 3.00 to 1.00, and financial reporting requirements. Borrowings under the Credit Facility are secured by a first priority security interest in substantially all of our U.S. assets and 65% of the stock of our foreign subsidiaries owned by a party to the agreement governing the Credit Facility.
Current wording
Our second amended and restated credit agreement, entered into on October 18, 2024 with a syndicate of banks (the “Credit Facility”), contains certain restrictive covenants that limit our ability to, among other things, incur indebtedness other than amounts under the Credit Facility and specified baskets, incur additional liens, merge or consolidate with other companies or consummate certain changes of control, enter into new lines of business, pay dividends to our stockholders, repurchase our common stock and outstanding indebtedness, make investments in and acquire other businesses, and transfer or dispose of assets. In certain circumstances, the agreement governing the Credit Facility may also limit our ability to transfer cash among our subsidiaries and between us and our subsidiaries, including our foreign subsidiaries. It also contains certain financial covenants, including a covenant requiring us not to permit the net senior secured leverage ratio to exceed 3.00 to 1.00 and a covenant requiring the fixed charge coverage ratio for any period of four consecutive fiscal quarters to not be less than 3.00 to 1.00, and financial reporting requirements. Borrowings under the Credit Facility are secured by a first priority security interest in substantially all of our U.S. assets and 65% of the stock of our and certain of our subsidiaries’ foreign subsidiaries.
Previous wording
In addition, there is no guarantee that we will be able to generate sufficient cash flow or revenues to meet these financial covenants or pay the principal and interest on any debt. Furthermore, there is no guarantee that future working capital, borrowings, or equity financing will be available to repay or refinance any debt. Any inability to make scheduled payments or meet the financial covenants in the agreement governing the Credit Facility would adversely affect our business.
Current wording
In addition, there is no guarantee that we will be able to generate sufficient cash flows or revenues to meet these financial covenants or pay the principal and interest on any debt. Furthermore, there is no guarantee that future working capital, borrowings, or equity financing will be available to repay or refinance any debt. Any inability to make scheduled payments or meet the financial covenants in the agreement governing the Credit Facility would adversely affect our business.
Previous wording
Our ability to make scheduled payments of the principal of, to pay interest on, or to refinance our indebtedness depends on our future performance, which is subject to economic, financial, competitive, and other factors beyond our control. Our business may not continue to generate cash flow from operations in the future sufficient to service our debt and make necessary capital expenditures. If we are unable to generate such cash flow, we may be required to adopt one or more alternatives, such as selling assets, restructuring debt, or obtaining additional equity capital on terms that may be onerous or highly dilutive. Our ability to refinance our indebtedness will depend on the capital markets and our financial condition at such time. We may not be able to engage in any of these activities or engage in these activities on desirable terms, which could result in a default on our debt obligations. In addition, any future indebtedness we may incur may contain financial and other restrictive covenants that limit our ability to operate our business, raise capital, or make payments under our other indebtedness. If we fail to comply with these covenants or to make payments under our indebtedness when due, then we would be in default under that indebtedness, which could, in turn, result in that and our other indebtedness becoming immediately payable in full.
Current wording
Our ability to make scheduled payments of the principal of, to pay interest on, or to refinance our indebtedness depends on our future performance, which is subject to economic, financial, competitive, and other factors beyond our control. Our business may not continue to generate cash flows from operations in the future sufficient to service our debt and make necessary capital expenditures. If we are unable to generate such cash flows, we may be required to adopt one or more alternatives, such as selling assets, restructuring debt, or obtaining additional equity capital on terms that may be onerous or highly dilutive. Our ability to refinance our indebtedness will depend on the capital markets and our financial condition at such time. We may not be able to engage in any of these activities or engage in these activities on desirable terms, which could result in a default on our debt obligations. In addition, any future indebtedness we may incur may contain financial and other restrictive covenants that limit our ability to operate our business, raise capital, or make payments under our other indebtedness. If we fail to comply with these covenants or to make payments under our indebtedness when due, then we would be in default under that indebtedness, which could, in turn, result in that and our other indebtedness becoming immediately payable in full.
Previous wording
Our Class A common stock has 29 votes per share, and our Class B common stock, which is the class of common stock that is issuable upon conversion of the 2026 Notes and 2027 Notes, and is the only class that is publicly traded and listed, has one vote per share. The beneficial owners of our Class A common stock together hold approximately 54.0% of the voting power of our outstanding common stock as of December 31, 2023. Moreover, as a result of the 29 to one voting ratio between our Class A and Class B common stock, the Bentley Control Group controls and will continue to control a majority of the combined voting power of our common stock and therefore is able to control all matters submitted to our stockholders for approval, subject to the occurrence of certain events that would reduce the voting power of our Class A common stock or cause the conversion thereof. This concentrated control will limit or preclude stockholders’ ability to influence corporate matters for the foreseeable future and may have the effect of delaying, deferring or preventing a change in control, impeding a merger, consolidation, takeover, or other business combination involving us, or discouraging a potential acquirer from making a tender offer or otherwise attempting to obtain control of our business, even if such a transaction would benefit other stockholders. The Bentley Control Group may also have interests that differ from those of other stockholders and may vote in a way with which other stockholders disagree and which may be adverse to such other stockholders’ interests.
Current wording
Our Class A common stock has 29 votes per share, and our Class B common stock, which is the class of common stock that is issuable upon conversion of the 2026 Notes and 2027 Notes, and is the only class that is publicly traded and listed, has one vote per share. The beneficial owners of our Class A common stock together hold approximately 53.5% of the voting power of our outstanding common stock as of December 31, 2024. Moreover, as a result of the 29 to one voting ratio between our Class A and Class B common stock, the Bentley Control Group controls and will continue to control a majority of the combined voting power of our common stock and therefore is able to control all matters submitted to our stockholders for approval, subject to the occurrence of certain events that would reduce the voting power of our Class A common stock or cause the conversion thereof. This concentrated control will limit or preclude stockholders’ ability to influence corporate matters for the foreseeable future and may have the effect of delaying, deferring or preventing a change in control, impeding a merger, consolidation, takeover, or other business combination involving us, or discouraging a potential acquirer from making a tender offer or otherwise attempting to obtain control of our business, even if such a transaction would benefit other stockholders. The Bentley Control Group may also have interests that differ from those of other stockholders and may vote in a way with which other stockholders disagree and which may be adverse to such other stockholders’ interests.
Rearranged previous paragraphs (1)
Previous report — wording carried elsewhere
Globally, laws such as the GDPR in the European Economic Area, the LGPD in Brazil, and the PIPL in China, impose obligations directly on us as both a data controller and a data processor, as well as on many of our users. In addition, new and emerging state laws in the U.S. governing privacy, data protection, and information security, such as the California Consumer Privacy Act (“CCPA”), the California Privacy Rights Act, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Utah Consumer Privacy Act, and Connecticut’s Act Concerning