EGAIN Corp

Previous wording

The global economic climate continues to influence our business. This includes items such as a general tightening in the credit markets, lower levels of liquidity, increases in the rates of default and bankruptcy, and extreme volatility in credit, equity and fixed income markets. These macroeconomic developments negatively affected, and could continue to negatively affect, our business, operating results or financial condition which, in turn, could adversely affect our stock price. A general weakening of, and related declining corporate confidence in, the global economy or the curtailment in government or corporate spending could cause current or potential customers to reduce their technology budgets or be unable to fund software or services purchases, which could cause customers to delay, decrease or cancel purchases of our products and services or cause customers to not pay us or to delay paying us for previously purchased products and services.

Current wording

The global economic climate continues to influence our business. This includes factors such as a general tightening in the credit markets, lower levels of liquidity, increases in the rates of default and bankruptcy, and extreme volatility in credit, equity and fixed income markets. These macroeconomic developments negatively affected, and could continue to negatively affect, our business, operating results or financial condition which, in turn, could adversely affect our stock price. A general weakening of, and related declining corporate confidence in, the global economy or the curtailment in government or corporate spending could cause current or potential customers to reduce their technology budgets or be unable to fund software or services purchases, which could cause customers to delay, decrease or cancel purchases of our products and services or cause customers to not pay us or to delay paying us for previously purchased products and services.

Previous wording

Because we recognize revenue when we have satisfied performance obligations to customers in connection with our sales contracts, most of our revenue each quarter results from recognition of deferred revenue related to agreements entered into during previous quarters. Consequently, declines in new or renewed subscription agreements and maintenance agreements that occur in one quarter will largely be felt in future quarters, both because we may be unable to generate sufficient new revenue to offset the decline and because we may be unable to adjust our operating costs and capital expenditures to align

Current wording

Because we recognize revenue when we have satisfied performance obligations to customers in connection with our sales contracts, most of our revenue each quarter results from recognition of deferred revenue related to agreements entered into during previous quarters. Consequently, declines in new or renewed subscription agreements that occur in one quarter will

Previous wording

with the changes in revenue. In addition, our subscription model makes it more difficult for us to increase our revenue rapidly in any period, because revenue from new customers must be recognized over the applicable subscription term. It is difficult to forecast the expediency of the transition of our license customers to our cloud delivery model. Accordingly, we believe that period-to-period comparisons of our results of operations should not be relied upon as definitive indicators of future performance.

Current wording

largely be felt in future quarters, both because we may be unable to generate sufficient new revenue to offset the decline and because we may be unable to adjust our operating costs and capital expenditures to align with the changes in revenue. In addition, our subscription model makes it more difficult for us to increase our revenue rapidly in any period, because revenue from new customers must be recognized over the applicable subscription term.

Previous wording

Our business is highly dependent on our ability to continue to expand our SaaS business and cloud operations, including keeping pace with the market transition to SaaS solutions.

Current wording

Our business is highly dependent on our ability to continue to expand our SaaS business and cloud operations, including keeping pace with the market transition to SaaS solutions. If customers choose not to renew, or reduce, their subscriptions, our operating results and financial results will suffer.

Previous wording

We allow our customers to elect not to renew their subscriptions for our service after the expiration of their initial subscription period, which is typically 12 to 36 months, and some customers have elected not to renew. In addition, our customers may choose to renew for fewer subscriptions (in quantity or products) or renew for shorter contract lengths. We cannot accurately predict renewal rates given our varied customer base of enterprise and small and medium size business customers and the number of multiyear subscription contracts. Our renewal rates may decline or fluctuate as a result of a number of factors, including customer dissatisfaction with our service, decreases in customers’ spending levels, decreases in the number of users at our customers, pricing changes and general economic conditions. If our customers do not renew their subscriptions for our service or reduce the number of paying subscriptions at the time of renewal, our revenue will decline, and our business will suffer.

Current wording

We allow our customers to elect not to renew their subscriptions for our service after the expiration of their initial subscription period, which is typically 12 to 36 months, and some customers have elected not to renew. In addition, our customers may choose to renew for fewer subscriptions (in quantity or products) or renew for shorter contract lengths. We cannot accurately predict renewal rates given our varied customer base of enterprise and the number of multiyear

Previous wording

The long sales cycle for our products may cause license and SaaS revenue and operating results to vary significantly from period to period. The sales cycle for our products can be six months or more and varies substantially from customer to customer. Because we sell complex and deeply integrated solutions, it can take many months of customer education to secure sales. Since our potential customers may evaluate our products before, if ever, executing definitive agreements, we may incur substantial expenses and spend significant management and legal effort in connection with a potential customer.

Current wording

The long sales cycle for our products may cause SaaS revenue and operating results to vary significantly from period to period. The sales cycle for our products can be six months or more and varies substantially from customer to customer. Because we sell complex and deeply integrated solutions, it can take many months of customer education to secure sales. Since our potential customers may evaluate our products before, if ever, executing definitive agreements, we may incur substantial expenses and spend significant management and legal effort in connection with a potential customer.

Previous wording

larger customer bases, broader brand recognition, and significantly greater financial, marketing and other resources. With more established and better-financed competitors, these companies may be able to undertake more extensive marketing campaigns, adopt more aggressive pricing policies, and make more attractive offers to businesses to induce them to use their products or services. If we are unable to compete successfully, our business will be adversely affected.

Current wording

We believe that competition will continue to be fierce as current competitors increase the sophistication of their offerings and as new participants enter the market. Many of our current and potential competitors have longer operating histories, larger customer bases, broader brand recognition, and significantly greater financial, marketing and other resources. With more established and better-financed competitors, these companies may be able to undertake more extensive marketing campaigns, adopt more aggressive pricing policies, and make more attractive offers to businesses to induce them to use their products or services. If we are unable to compete successfully, our business will be adversely affected.

Previous wording

We are also investing in AI across the entire company and infusing generative AI capabilities into our product and service offerings. We expect AI technology and services to be a highly competitive and rapidly evolving market. We will bear significant development and operational costs to build and support the generative AI capabilities, products, and services necessary to meet the needs of our customers. To compete effectively, we must also be responsive to technological change, potential regulatory developments, and public scrutiny. Such competitive pressure may cause decreased sales volumes, price reductions, and/or increased operating costs, such as for research and development, marketing, and sales activities. This may lead to lower revenue, gross margins, and operating income. In addition, customers are currently assessing their AI utilization strategy, so it is difficult to estimate with any reasonable degree of precision the impact of generative AI product offerings on our future revenue or expected demand for our products.

Current wording

services necessary to meet the needs of our customers. To compete effectively, we must also be responsive to technological change, potential regulatory developments, and public scrutiny. Such competitive pressure may cause decreased sales volumes, price reductions, and/or increased operating costs, such as for research and development, marketing, and sales activities. This may lead to lower revenue, gross margins, and operating income. In addition, customers are currently assessing their AI utilization strategy, so it is difficult to estimate with any reasonable degree of precision the impact of generative AI product offerings on our future revenue, the expected timing or demand for our products and services, and the extent to which customer investment in AI-enabled solutions may displace or accelerate purchases of our existing offerings.

Previous wording

Expansion and growth of our business is dependent on our ability to expand our sales force and on the ability of our sales force to increase sales. If we are not able to effectively develop and maintain awareness of our products in a cost-effective manner, we may not achieve widespread acceptance of our existing and future products. This may result in a failure to expand and attract new customers and enhance relationships with existing customers. This may impede our efforts to improve operations in our other areas and may result in declines in the market price of our common stock.

Current wording

Expansion and growth of our business is dependent on our ability to expand our sales force and on the ability of our sales force to increase sales. For example, workforce reductions and turnover may limit our capacity to develop and maintain awareness of our products in a cost-effective manner, which could hinder widespread adoption of our existing and future products. This may result in a failure to expand and attract new customers and enhance relationships with existing customers. This may impede our efforts to improve operations in our other areas and may result in declines in the market price of our common stock.

Previous wording

We generally recognize revenue upon the transfer of control of promised services to our customers in the amount that is commensurate with the consideration that we expect to receive in exchange for those services. If an arrangement requires significant customization or implementation services from us, recognition of the associated subscription and service revenue could be delayed. The timing of the commencement and completion of these services is subject to factors that may be beyond our control, as this process may require access to the customers’ facilities and coordination with the customer’s personnel after delivery of the software obligations. In addition, customers could cancel or delay product implementations. Implementation typically involves working with sophisticated software, computing and communications systems. If we experience difficulties with implementation or do not meet project milestones in a timely manner, we could be obligated to devote more customer support, engineering and other resources to a particular project. Some customers may also require us to develop customized features or capabilities. If new or existing customers cancel or have difficulty deploying our products or require significant amounts of our professional services, support, or customized features, revenue recognition could be cancelled or further delayed and our costs could increase, causing increased variability in our operating results.

Current wording

be beyond our control, as this process may require access to the customers’ facilities and coordination with the customer’s personnel after delivery of the software obligations. In addition, customers could cancel or delay product implementations. Implementation typically involves working with sophisticated software, computing, and communications systems. If we experience difficulties with implementation or do not meet project milestones in a timely manner, we could be obligated to devote more customer support, engineering, and other resources to a particular project. Some customers may also require us to develop customized features or capabilities. If new or existing customers cancel or have difficulty deploying our products or require significant amounts of our professional services, support, or customized features, revenue recognition could be cancelled or further delayed and our costs could increase, causing increased variability in our operating results.

Previous wording

Revenue from EMEA sales remained consistent at 22% of our total revenue during the three months ended March 31, 2025 and 2024. Revenue from EMEA sales was 23% during the nine months ended March 31, 2025 of our total revenue compared to 21% during the nine months ended March 31, 2024. In addition to those discussed elsewhere in this section, our EMEA sales operations are subject to a number of specific risks, such as:

Current wording

We derived 19% and 25% of our revenue from EMEA sales during the three months ended September 30, 2025 and 2024. In addition to those discussed elsewhere in this section, our EMEA sales operations are subject to a number of specific risks, such as:

Previous wording

Any of the above risks could adversely affect our international operations, reduce our revenue from customers outside of the U.S. or increase our operating costs, each of which could adversely affect our business, results of operations, financial condition, and growth prospects.

Current wording

Any of the above risks could adversely affect our international operations, reduce our revenue from customers outside of the United States or increase our operating costs, each of which could adversely affect our business, results of operations, financial condition, and growth prospects.

Previous wording

motivated by cost cutting, the continued management of these remote operations requires significant management attention and financial resources that could adversely affect our operating performance. In addition, with the significant increase in the numbers of foreign businesses that have established operations in India, the competition to attract and retain employees there has increased significantly. As a result of the increased competition for skilled workers, we experienced increased compensation costs and expect these costs to increase in the future. Our reliance on our workforce in India makes us particularly susceptible to disruptions in the business environment in that region. In particular, sophisticated telecommunications links, high-speed data communications with other eGain offices and customers, and overall consistency and stability of our business infrastructure are vital to our day-to-day operations, and any impairment of such infrastructure will cause our financial condition and results to suffer. In addition, the maintenance of stable political relations between the U.S., the European Union (EU) and India are also of great importance to our operations.

Current wording

As of September 30, 2025, approximately 64% of our workforce was employed in India. Of our employees in India, 48% are allocated to research and development. Although the movement of certain operations internationally was principally motivated by cost cutting, the continued management of these remote operations requires significant management attention and financial resources that could adversely affect our operating performance. In addition, with the significant increase in the numbers of foreign businesses that have established operations in India, the competition to attract and retain employees there has increased significantly. As a result of the increased competition for skilled workers, we experienced increased compensation costs and expect these costs to increase in the future. Our reliance on our workforce in India makes us particularly susceptible to disruptions in the business environment in that region. In particular, sophisticated

Previous wording

Unplanned system interruptions, delays in service or inability to increase capacity, including internationally, at our third-party data center facilities could impair the use or functionality of our cloud operations and harm our business.

Current wording

Unplanned system interruptions, delays in service or inability to increase capacity, including internationally, at our third-party data center facilities or third-party Platform-as-a-Service (PaaS) providers could impair the use or functionality of our cloud operations and harm our business.

Previous wording

Our customers have in the past experienced some interruptions with our cloud operations. We believe that these interruptions will continue to occur from time to time. These interruptions could be due to hardware and operating system failures. As a result, our business will suffer if we experience frequent or long system interruptions that result in the unavailability or reduced performance of our hosted operations or reduce our ability to provide remote management services. We expect to experience occasional temporary capacity constraints due to sharply increased traffic or other Internet-wide disruptions, which may cause unanticipated system disruptions, slower response times, impaired quality, and degradation in levels of customer service. If this were to continue to happen, our business and reputation could be seriously harmed.

Current wording

Our customers have in the past experienced some interruptions with our cloud operations. We believe that these interruptions will continue to occur from time to time. These interruptions could be due to hardware and operating system failures, issues with third-party PaaS platforms, or other operational disruptions. As a result, our business will suffer if we experience frequent or long system interruptions that result in the unavailability or reduced performance of our hosted operations or reduce our ability to provide remote management services. We expect to experience occasional temporary capacity constraints due to sharply increased traffic or other Internet-wide disruptions, which may cause unanticipated system disruptions, slower response times, impaired quality, and degradation in levels of customer service. If this were to continue to happen, our business and reputation could be seriously harmed.

Previous wording

Our success largely depends on the efficient and uninterrupted operation of our computer and communications hardware and network systems. We currently serve our customers from third-party data center facilities operated by third parties in the U.S. and other international locations. Any damage to, or failure of, our systems generally could interrupt service or impair the use or functionality of our cloud operations. In addition, as we continue to increase the number of customers and users on our cloud operations, we will need to increase the capacity of our data center infrastructure. If we do not increase our capacity in a timely manner, customers could experience interruptions or delays in access to our cloud operations. Customer data that we store in third-party data centers may also be vulnerable to damage or interruption from floods, fires, earthquake, power loss, telecommunications failures and similar events. Any damage to, or failure of, our systems, or those of our third-party data centers, could result in impairment of or interruptions in our service. Impairment or interruptions in our service may reduce our revenue, cause us to issue credits, or pay penalties, or cause customers to terminate their subscriptions and adversely affect our renewal rate and our ability to attract new customers. Our business will also be harmed if our customers and potential customers believe our cloud operations are unreliable.

Current wording

Our success largely depends on the efficient and uninterrupted operation of our computer and communications hardware network systems, and third-party cloud platforms. We currently serve our customers from third-party data center facilities and third-party PaaS providers operated in the U.S. and other international locations. Any damage to, or failure of, our systems or those of our third-party providers generally could interrupt service or impair the use or functionality of our cloud operations. In addition, as we continue to increase the number of customers and users on our cloud operations, we will need to increase the capacity of our data center and PaaS infrastructure. If we do not increase our capacity in a timely manner, customers could experience interruptions or delays in access to our cloud operations. Customer data that we store in third-party data centers may also be vulnerable to damage or interruption from floods, fires, earthquake, power loss, telecommunications failures and similar events. Any damage to, or failure of, our systems, or those of our third-party providers, could result in impairment of, or interruptions in, our service. Impairment or interruptions in our service may reduce our revenue, cause us to issue credits, pay penalties, or cause customers to terminate their subscriptions and adversely affect our renewal rate and our ability to attract new customers. Our business will also be harmed if our customers and potential customers believe our cloud operations are unreliable.

Previous wording

We have entered into support obligations with our customers that require minimum performance standards, including standards regarding the response time of our support services. If we fail to meet these standards, our customers could terminate their relationships with us, and we could be subject to contractual refunds, and exposure to claims for losses by customers.

Current wording

We have entered into support obligations with our customers that require minimum performance standards, including standards regarding the response time of our support services. If we fail to meet these standards, our customers could terminate their relationships with us, and we could be subject to contractual refunds, and exposure to claims for losses from our customers.

Previous wording

Our solutions are based on complex software that may contain errors, or “bugs,” that could be costly to correct, harm our reputation and impair our ability to sell our solutions to new customers. Moreover, customers relying on our solutions may be more sensitive to such errors, and potential security vulnerabilities and business interruptions for these applications. If we incur substantial costs to correct any errors of this nature, our operating margins could be adversely affected. Because our customers depend on our solutions for critical business functions, any service interruptions could result in lost or delayed market acceptance and lost sales, higher service-level credits and warranty costs, diversion of development resources and product liability suits.

Current wording

may be more sensitive to such errors and potential security vulnerabilities and business interruptions for these applications. If we incur substantial costs to correct any errors of this nature, our operating margins could be adversely affected. Because our customers depend on our solutions for critical business functions, any service interruptions could result in lost or delayed market acceptance and lost sales, higher service-level credits and warranty costs, diversion of development resources, and product liability suits.

Previous wording

We depend on the widespread acceptance and use of our applications as an effective solution for businesses seeking to manage high volumes of customer interactions across multiple channels, including Web, phone, email, print and in-person. While we believe the potential to be very large, we cannot accurately estimate the size or growth rate of the potential market for such product and service offerings generally, and we do not know whether our products and services in particular will achieve broad market acceptance. The market for customer engagement software is rapidly evolving, and concerns over the security and reliability of online transactions, the privacy of users and quality of service or other issues may inhibit the growth of the Internet and commercial online services. If the market for our applications fails to grow or grows more slowly than we currently anticipate, our business will be seriously harmed.

Current wording

We depend on the widespread acceptance and use of our applications as an effective solution for businesses seeking to manage high volumes of customer interactions across multiple channels, including Web, phone, email, print, in-person and AI-enabled digital channels. While we believe the potential to be very large, we cannot accurately estimate the size or growth rate of the potential market for such product and service offerings generally, and we do not know whether our products and services in particular will achieve broad market acceptance. The market for customer engagement software is rapidly evolving, and concerns over the security and reliability of online transactions, the privacy of users and quality of service or other issues may inhibit the growth of the Internet and commercial online services. If the market for our applications fails to grow or grows more slowly than we currently anticipate, our business will be seriously harmed.

Previous wording

Furthermore, our business model is premised on business assumptions that are still evolving. Our business model assumes that both customers and companies will increasingly elect to communicate through multiple channels, as well as demand integration of the online channels into the traditional telephone-based call center. If any of these assumptions are incorrect or if customers and companies do not adopt digital technology in a timely manner, our business will be seriously harmed and our stock price will decline.

Current wording

Furthermore, our business model is premised on business assumptions that are still evolving. Our business model assumes that customers will increasingly elect to communicate through multiple channels, including AI-enabled digital channels, as well as demand integration of these channels into the traditional telephone-based call center. If any of these assumptions are incorrect or if customers and companies do not adopt digital and AI-enabled technologies in a timely manner, our business will be seriously harmed and our stock price will decline.

Previous wording

We may be unable to respond to the rapid technological change and changing customer preferences in the online sales, marketing, customer service, and/or online consumer services industries and this may cause our business to suffer.

Current wording

We may be unable to respond to the rapid technological change and changing customer preferences in digital customer engagement, marketing, and service and this may cause our business to suffer.

Previous wording

We employ third-party technologies for use in or with our platform and the inability to license such technologies on commercially reasonable terms or the inability to maintain these licenses or errors in the software we license could result in increased costs, or reduced service levels, which could adversely affect our business.

Current wording

We employ third-party technologies for use in or with our platform andthe inability to license such technologieson commercially reasonable terms or the inability tomaintain these licenses or errors in the software we license could result in increased costs, or reduced service levels, which could adversely affect our business.

Previous wording

from new technology sufficient to offset associated acquisition and maintenance costs. In the event that we are not able to maintain our licenses to third-party software, or cannot obtain licenses to new software as needed, or in the event third-party software used in conjunction with our platform contains errors or defects, our business, operating results, and financial condition may be adversely affected.

Current wording

Third-party licenses may expose us to increased risks, including risks associated with the integration of new technology, the diversion of resources from the development of our own proprietary technology, and our inability to generate revenue from new technology sufficient to offset associated acquisition and maintenance costs. In the event that we are not able to maintain our licenses to third-party software, or cannot obtain licenses to new software as needed, or in the event third-party software used in conjunction with our platform contains errors or defects, our business, operating results, and financial condition may be adversely affected.

Previous wording

We assume a certain level of credit risk with our customers in order to do business. Conditions affecting any of our customers could cause them to become unable or unwilling to pay us in a timely manner, or at all, for products or services we have already provided them. In the past, we have experienced collection delays from certain customers, and we cannot predict whether we will continue to experience similar or more severe delays in the future. Although we have established a provision to cover losses due to delays or inability to pay, there can be no assurance that such reserves will be sufficient to cover our losses. If losses due to delays or inability to pay are greater than our reserves, it could harm our business, operating results and financial condition.

Current wording

We assume a certain level of credit risk with our customers in order to do business. Conditions affecting any of our customers could cause them to become unable or unwilling to pay us in a timely manner, or at all, for products or services we have already provided. In the past, we have experienced collection delays from certain customers, and we cannot predict whether we will continue to experience similar or more severe delays in the future. Although we have established a

Previous wording

As part of our business strategy, we periodically make investments in, or acquisitions of, complementary businesses, joint ventures, services and technologies and intellectual property rights, and we expect that we will continue to make such investments and acquisitions in the future. Acquisitions and investments involve numerous risks, including:

Current wording

As part of our business strategy, we may periodically make investments in, or acquisitions of, if any, complementary businesses, joint ventures, services and technologies and intellectual property rights, and we expect that we will continue to evaluate such investments and acquisitions in the future. Acquisitions and investments involve numerous risks, including:

Previous wording

platform providers such as us for the activities of users of their online platforms is often challenged in the U.S. and internationally. We may be unable to prevent users of our technology platforms from providing negligent, unlawful or inappropriate advice, information or content through our technology platforms, or from behaving in an unlawful manner, and we may be subject to allegations of civil or criminal liability for negligent, fraudulent, unlawful or inappropriate activities carried out by users of our technology platforms.

Current wording

Our technology platforms enable representatives of our customers as well as individual service providers to communicate with consumers and other persons seeking information or advice on the Internet. The law relating to the liability of online platform providers such as us for the activities of users of their online platforms is often challenged in the U.S. and internationally. We may be unable to prevent users of our technology platforms from providing negligent, unlawful or inappropriate advice, information or content through our technology platforms, or from behaving in an unlawful manner, and we may be subject to allegations of civil or criminal liability for negligent, fraudulent, unlawful or inappropriate activities carried out by users of our technology platforms.

Previous wording

If our cybersecurity systems or the systems of our vendors, partners and suppliers are breached and unauthorized access is obtained to a customer’s data or our data or IT systems, our service may be perceived as not being secure, customers may curtail or stop using our service and we may incur significant legal and financial exposure and liabilities.

Current wording

If our cybersecurity systems or the systems of our vendors, partners and suppliers are breached and unauthorized access is obtained to a customer’s data, our data or IT systems, our service may be perceived as not being secure, customers may curtail or stop using our service and we may incur significant legal and financial exposure and liabilities.

Previous wording

Security incidents have become more prevalent across industries and the methods and techniques used by threat actors continue to evolve at a rapid pace. These cyberattacks may occur on our systems and we may be unable to identify current attacks, anticipate these attacks or implement adequate security measures. Our service involves the storage and transmission of customers’ proprietary information, and security incidents could expose us to a risk of loss of this information, loss of access, litigation and possible liability. The techniques used to effect unauthorized penetration of computer systems are constantly evolving and have been increasing in sophistication. While we have security measures in place that are designed to protect customer information and prevent data loss and other security breaches, these security measures may be breached as a result of third-party action, including intentional misconduct by computer hackers (which may involve nation states and individuals sponsored by them), employee error, malfeasance or otherwise and result in someone obtaining unauthorized access to our customers’ data or our data, including our intellectual property and other confidential business information, or our IT systems. Additionally, third parties may attempt to fraudulently induce employees or customers into disclosing sensitive information such as usernames, passwords or other information in order to gain access to our customers’ data or our data or IT systems.

Current wording

Security incidents have become more prevalent across industries and the methods and techniques used by threat actors continue to evolve at a rapid pace. These cyberattacks may occur on our systems and we may be unable to identify current attacks, anticipate these attacks or implement adequate security measures. Our service involves the storage and transmission of customers’ proprietary information, and security incidents could expose us to a risk of loss of this information, loss of access, litigation and possible liability. The techniques used to effect unauthorized penetration of computer systems are constantly evolving and have been increasing in sophistication. While we have security measures in place that are designed to protect customer information and prevent data loss and other security breaches, these security measures may be breached as a result of third-party action, including intentional misconduct by computer hackers (which may involve nation states and individuals sponsored by them), employee error, malfeasance or otherwise and result in someone obtaining unauthorized access to our customers’ data or our data, including our intellectual property and other confidential business information, or our IT systems. Additionally, third-parties may attempt, through phishing, social engineering or otherwise, to fraudulently induce employees or customers into disclosing sensitive information such as usernames, passwords or other information in order to gain access to our customers’ data or our data or IT systems.

Previous wording

Cybersecurity attacks could require significant expenditures of our capital and diversion of our resources. If these attacks are successful, they could result in the theft of proprietary, personally identifiable, confidential and sensitive information of ours, our employees, our customers and our business partners, and could materially disrupt business for us, our customers and our business partners. A successful cybersecurity attack involving our data center, network or software products could also negatively impact the market perception of the effectiveness of our products or lead to contractual disputes, litigation or government regulatory action against us, any of which could materially adversely affect our business, reputation and resulting operations.

Current wording

Cybersecurity attacks could require significant expenditures of our capital and diversion of our resources. If these attacks are successful, they could result in the theft of proprietary, personally identifiable, confidential and sensitive information of ours, our employees, our customers and our business partners, and could materially disrupt business for us, our customers and our business partners. A successful cybersecurity attack involving our data center, network or software

Previous wording

Our platform involves the storage and transmission of our customers’ information, which may include their business and financial data. As a result, unauthorized access to customer data or security breaches could result in the loss, or unauthorized dissemination, of such data, which could seriously harm our or our customers’ businesses and reputations. Any of these security incidents could negatively affect our ability to attract new customers, cause existing customers to elect to not renew their subscriptions, result in reputational damage or subject us to third-party lawsuits, regulatory fines, or other action or liability, which could adversely affect our operating results. Any insurance coverage we may have related to security and privacy damages may not be adequate for liabilities actually incurred and we cannot be certain that insurance will continue to be available to us on economically reasonable terms, or at all. These risks are likely to increase as we continue to grow the scale and functionality of our platform and process, store, and transmit increasingly large amounts of our customers’ information and data, which may include proprietary or confidential data or personal or identifying information.

Current wording

Any security incidents could negatively affect our ability to attract new customers, cause existing customers to elect to not renew their subscriptions, result in reputational damage or subject us to third-party lawsuits, regulatory fines, or other action or liability, which could adversely affect our operating results. Any insurance coverage we may have related to security and privacy damages may not be adequate for liabilities actually incurred and we cannot be certain that insurance will continue to be available to us on economically reasonable terms, or at all. These risks are likely to increase as we continue to grow the scale and functionality of our platform and process, store, and transmit increasingly large amounts of our customers’ information and data, which may include proprietary or confidential data or personal or identifying information.

Previous wording

Changes in the European regulatory environment regarding privacy and data protection regulations, such as the GDPR, could expose us to risks of noncompliance and costs associated with compliance.

Current wording

Changes in privacy and data protection laws and regulations, including the European Union (such as the GDPR), the United Kingdom, and other jurisdictions in which we operate, could expose us to risks of noncompliance and costs associated with compliance.

Previous wording

We have in the past relied on adherence to the U.S. Department of Commerce’s Safe Harbor Privacy Principles, the U.S.- EU and U.S.-Swiss Safe Harbor Frameworks, and their successors, the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks, as agreed to and set forth by the U.S. Department of Commerce, and the EU and Switzerland, which established a means for legitimating the transfer of personally identifiable information (PII) by U.S. companies doing business in Europe from the European Economic Area (EEA) and Switzerland to the U.S. However, as a result of the October 6, 2015 EU Court of Justice (ECJ), opinion in Case C-362/14 (Schrems v. Data Protection Commissioner) regarding the adequacy of the U.S.-EU Safe Harbor Framework, and the July 16, 2020 ECJ judgment in Case C-311/18 (Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems) regarding the adequacy of the Privacy Shield Framework, both frameworks are no longer deemed to constitute a valid method of compliance with restrictions set forth in European law regarding the transfer of data outside of the EEA. The EJC also noted that standard contractual clauses (approved by the European Commission as an adequate personal data transfer mechanism) may not necessarily be relied upon in all circumstances. In addition to other mechanisms, in limited circumstances we may rely on Privacy Shield certifications of third parties (for example, vendors and partners). The European Commission and the United Kingdom’s Information Commissioner’s Office have published new standard contractual clauses that are required to be implemented. Following issuance of a U.S. Executive Order, a new framework, the EU-U.S. Data Privacy Framework (EU-U.S. DPF) was created as a successor to the Privacy Shield. Following an adequacy decision issued by the European Commission on July 10, 2023, the DPF, along with a UK extension to the EU-U.S. DPF that allows the transfer of personal data from the UK to the U.S. (UK DPF Extension), is available for companies as a lawful transfer mechanism for personal data transfers to the U.S. from the EEA and UK. The Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) also has been established, but has not yet been granted an adequacy decision by the Swiss Federal Data Protection and Information Commissioner. We have self-certified to the EU-U.S. DPF, the UK DPF Extension, and the Swiss-U.S. DPF. The EU-U.S. DPF already has been the subject of legal challenge, however, and more generally, these frameworks may be subject to legal challenges from privacy advocacy groups or others. Additionally, the European Commission's adequacy decision regarding the DPF provides that the DPF will be subject to future reviews and may be subject to suspension, amendment, repeal, or limitations in scope by the European Commission. These developments regarding cross-border data transfers have created uncertainty and increased the risk around our international operations and may require us to…

Excerpt shortened here; the source contains the full paragraph.

Current wording

We transfer personal data from the European Economic Area (EEA), the United Kingdom, and Switzerland to the U.S. Historically, these transfers relied on the U.S.-EU and U.S.-Swiss Safe Harbor Frameworks and their successors, the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks. However, EU Court of Justice (ECJ) rulings in 2015 (Schrems 1) and 2020 (Schrems II) invalidated both frameworks and standard contractual clauses (approved by the European Commission as an adequate personal data transfer mechanism) may not necessarily be relied upon in all circumstances. In addition to other mechanisms, in limited circumstances we may rely on Privacy Shield certifications of third parties (for example, vendors and partners). The European Commission and the United Kingdom’s Information Commissioner’s Office have published new standard contractual clauses that are required to be implemented. Following issuance of a U.S. Executive Order, a new framework, the EU-U.S. Data Privacy Framework (EU-U.S. DPF) was created as a successor to the Privacy Shield. Following an adequacy decision issued by the European Commission on July 10, 2023, the EU-U.S. DPF is available for companies as a lawful transfer mechanism for personal data transfers to the U.S. from the EEA. Further, following an adequacy regulation that came into force in the UK in October 2023 and an amendment to the Swiss Data Protection Ordinance that came into force in Switzerland in September 2024, a UK extension to the EU-U.S. DPF that allows the transfer of personal data from the UK to the U.S. (the UK DPF Extension) and a Swiss framework that allows for the transfer of personal data from Switzerland to the U.S. (the Swiss-U.S. DPF) are currently available. We have self-certified to the EU-U.S. DPF, the UK DPF Extension, and the Swiss-U.S. DPF. These mechanisms remain subject to legal challenges and future review, and the European Commission may suspend, amend, or limit their scope. These developments regarding cross-border data transfers have created uncertainty and increased the risk around our international operations and may require us to review and amend the legal mechanisms by which we make or receive personal data transfers to the U.S. and other jurisdictions. We may, among other things, be required to implement additional contractual and technical safeguards for any personal data transferred out of the EEA, Switzerland, the United Kingdom or other regions which may increase compliance costs, lead to increased regulatory scrutiny or liability, may require additional contractual negotiations, and may adversely impact our business, financial condition and operating results.

Previous wording

We may also experience hesitancy, reluctance, or refusal by European or multi-national customers to continue to use our services due to the potential risk exposure to such customers as a result of the international legal developments. We and our customers are at risk of enforcement actions taken by an EU or UK data protection authority until such point in time that we ensure that all data transfers to us from the EEA and UK are legitimized. We may find it necessary to establish systems to maintain EU/UK-origin data in the EEA or UK, which may involve substantial expense and distraction from other aspects of our business.

Current wording

We may also experience hesitancy, reluctance, or refusal by European or multi-national customers to use our services due to the potential risk exposure to such customers as a result of international legal developments, and we may need to maintain EU/UK-origin data locally, which may involve substantial expense and distraction from other aspects of our business.

Previous wording

We publicly post our privacy policies and practices concerning our processing, use and disclosure of PII. Our publication of our privacy policy and other public statements that provide promises and assurances about privacy and security can subject us to potential governmental action if they are found to be deceptive or misrepresentative of our practices. Further, the costs of compliance with, and other burdens imposed by, such laws, regulations and policies that are applicable to us may limit the use and adoption of our products and solutions and could have a material adverse impact on our results of operations.

Current wording

We publicly post our privacy policies and practices concerning our processing, use and disclosure of personal information. Our publication of our privacy policy and other public statements that provide promises and assurances about privacy and security can subject us to potential governmental action or reputational harm if they are found to be deceptive or misrepresentative of our practices. Further, the costs of compliance with, and other burdens imposed by, such laws,

Previous wording

Privacy concerns and laws, evolving regulation of cloud computing and other domestic or foreign regulations may limit the use and adoption of our solutions and adversely affect our business.

Current wording

Privacy concerns and laws, evolving regulation of cloud computing, AI and other domestic or foreign regulations may limit the use, functionality and adoption of our solutions and adversely affect our business.

Previous wording

purposes, such as the EU’s e-Privacy Directive (which is set to be replaced by a new EU e-Privacy Regulation which will have a “direct effect” in each EU Member State), and the country-specific regulations that implement that directive. These and other requirements could reduce demand for our solutions or restrict our ability to store and process data or, in some cases, impact our ability to offer our services and solutions in certain locations. Although we have implemented contracts, diligence programs, policies and procedures designed to address compliance with applicable laws and regulations, there can be no assurance that our employees, contractors, partners, suppliers, data providers or agents will not violate such laws and regulations or our contracts, policies and procedures. Additionally, public perception and standards related to the privacy of personal information can shift rapidly, in ways that may affect our reputation or influence regulators to enact regulations and laws that may limit our ability to provide certain products and services. For example, numerous jurisdictions, including the EU, are considering laws and regulations that would impose additional data privacy and other compliance requirements on the use of AI and could require us to adjust or limit our product offerings in such jurisdictions.

Current wording

We are subject to a growing number of federal, state and foreign laws, regulations and standards governing data privacy, cybersecurity and the collection, processing, storage, use and transfer of personal information. Regulatory requirements continue to expand globally, and unfavorable laws, regulations, or interpretations could limit demand for our services, increase compliance costs, or restrict our ability to offer our services and solutions in certain locations. Although we have implemented contracts, diligence programs, policies and procedures designed to address compliance with applicable laws and regulations, there can be no assurance that our employees, contractors, partners, suppliers, data providers or agents will not violate such laws and regulations or our contracts, policies and procedures. Additionally, public perception and standards related to the privacy of personal information can shift rapidly, in ways that may affect our reputation or influence legislator to enact regulations and laws, or regulators to enforce such laws or issue guidance, in each case that may limit our ability to provide certain products and services.

Previous wording

Furthermore, on August 11, 2023, India’s Digital Personal Data Protection Bill (DPDP) received presidential assent after passing both houses of India’s legislature but there has been no official slated implementation date. DPDP applies to personal data processed within India and personal data outside the territory of India if such processing is in connection with any activity related to offering of goods or services to data subjects. We will continue to monitor developments related to new privacy laws which will require us to incur additional costs and expenses in an effort to monitor and comply with such laws.

Current wording

Internationally, global “digital” regulations continue to develop and evolve, including the EU’s GDPR, ePrivacy Directive, Network and Information Systems 2 Directive, Digital Operational Resiliance Act, Data Act, and Digital Services Act. In addition, India’s Digital Personal Data Protection Bill (DPDP), published in 2023, but with an implementation timeline that remains uncertain, applies broadly to personal data processed within India and personal data outside the territory of India if such processing is in connection with any activity related to offering of goods or services to data subjects. We will continue to monitor developments related to existing and new “digital” laws which will require us to incur additional costs and expenses in an effort to monitor and comply with such laws. In addition to costs involved in monitoring and analyzing such laws to determine to what extent they apply, and costs involved in any compliance measures, there are also financial risks in the event of enforcement action, with many imposing obligations and penalties for noncompliance. Further, to the extent that any new laws may limit our ability to provide our solutions to customers.

Previous wording

In addition to government activity, privacy advocacy and other industry groups have established or may establish new self-regulatory standards that may place additional burdens on us. Our customers expect us to meet voluntary certification or other standards established by third parties, such as TRUSTe. If we are unable to maintain these certifications or meet

Current wording

In addition to government activity, privacy advocacy and other industry groups have established or may establish new self-regulatory standards that may place additional burdens on us. Our customers expect us to meet voluntary certification or other standards established by third parties, such as TRUSTe. If we are unable to maintain these certifications or meet these standards, it could adversely affect our ability to provide our solutions to certain customers and could harm our business.

Previous wording

We are integrating AI into several of our offerings, developed either by us or in collaboration with our strategic partner, OpenAI. We anticipate significant growth in this area. However, like many innovations, AI comes with risks and challenges that could impact its adoption and our business. Potential issues include flawed algorithms or training methods, inadequate or biased datasets, and harmful or illegal content generated by AI systems. Poor AI development or deployment practices could lead to incidents that hinder AI acceptance, cause harm, or result in our products not functioning as intended. Human oversight may be necessary for certain outputs. These challenges, along with other issues related to innovative technologies, could expose us to competitive harm, regulatory actions, legal liabilities (including under new AI regulations in the EU), and reputational damage. Some AI applications raise ethical concerns or have broad societal impacts. If our AI solutions lead to unintended consequences, misuse, or controversy due to their effects on human rights, privacy, employment, or other social, economic, or political issues, we may face reputational harm, negatively affecting our business and financial performance.

Current wording

We are integrating AI into several of our offerings and anticipate significant growth in this area. However, like many innovations, AI comes with risks and challenges that could impact its adoption and our business. These may include flawed algorithms or training methods, inadequate or biased datasets, concept drift, and harmful, misleading, or unlawful content that may be generated by AI systems. While eGain does not control or assume responsibility for such AI-generated outputs, their use by customers could nonetheless result in disputes, regulatory scrutiny, legal liability, or reputational harm that may indirectly affect us. In addition, poor development or deployment practices could undermine customer confidence, hinder AI acceptance, cause harm, or result in products not performing as intended.

Previous wording

Our customers and potential customers conduct business in a variety of industries, including financial services, the public sector, healthcare and telecommunications. Regulators in certain industries have adopted and may in the future adopt regulations or interpretive positions regarding the use of cloud computing and other outsourced services. The costs of compliance with, and other burdens imposed by, industry-specific laws, regulations and interpretive positions may limit customers’ use and adoption of our services and reduce overall demand for our services. For example, some financial services regulators have imposed guidelines for use of cloud computing services that mandate specific controls or require financial services enterprises to obtain regulatory approval prior to outsourcing certain functions. If we are unable to comply with these guidelines or controls, or if our customers are unable to obtain regulatory approval to use our service where required, our business may be harmed. In addition, an inability to satisfy the standards of certain voluntary third-

Current wording

Our customers and potential customers conduct business in a variety of industries, including financial services, the public sector, healthcare, telecommunications and other highly regulated industries. Regulators in certain industries have adopted and may in the future adopt regulations or interpretive positions regarding the use of cloud computing, AI and other outsourced services. The costs of compliance with, and other burdens imposed by, industry-specific laws, regulations and interpretive positions may limit customers’ use and adoption of our services and reduce overall demand for our services. For example, some financial services regulators have imposed guidelines for use of cloud computing services that mandate specific controls or require financial services enterprises to obtain regulatory approval prior to outsourcing certain functions. If we are unable to comply with these guidelines or controls, or if our customers are unable to obtain regulatory approval to use our service where required, our business may be harmed. Our business may also be affected by evolving regulatory frameworks, including those focused on AI, cybersecurity, outsourcing, and data governance, such as the AI