Vertex, Inc.
For the period ended Dec 31, 2025. Filed Feb 24, 2026.
View on SEC.govAbout this filing
A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.
FY2025 · Filed Feb 24, 2026
VERX$17.08-2.9%Stored close · as of Nov 6, 2026
What changed in Risk Factors?
Read the current filingPrevious report: 10-K
Period ended 2024-12-31; filed 2025-02-27.
0001558370-25-001820
Item 1A. Risk FactorsCurrent report: 10-K
Period ended 2025-12-31; filed 2026-02-24.
0001104659-26-019165
Item 1A. Risk FactorsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 113 previous paragraphs and 132 current paragraphs.
81 unchanged; 23 reworded; 21 added; 7 removed; 2 previous and 7 current paragraphs rearranged.
Tables are not compared: 36 previous and 78 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (21)
Current report
We are providing the following summary of the risk factors contained in this Form 10-K to enhance the readability and accessibility of our risk factor disclosures. We encourage our shareholders to carefully review the full risk factors contained in this Form 10-K in their entirety for additional information regarding the risks and uncertainties that could cause our actual results to vary materially from recent results or from our anticipated future results.
Current report
Risks Related to Technology and Intellectual Property
Current report
Risks Related to Our Tax, Legal, and Regulatory Environment
Current report
Risks Related to Technology and Intellectual Property
Current report
Expansion into e-invoicing services increases our dependency on government infrastructure and exposes us to operational disruptions.* *
Current report
In many jurisdictions, e-invoicing is becoming mandatory under "clearance" models, where an invoice must be validated by a government-designated platform before it is legally valid. If these government systems experience downtime or technical failure, our customers may be unable to legally transact, potentially leading to stalled supply chains and financial losses. We may face claims for damages if our API integrations or middleware fail to maintain connectivity with these critical government gateways.
Current report
To run our business, we rely heavily on our IT systems and those of many third-party service providers. In the ordinary course of business, customers provide us with information that our solutions store, some of which include confidential information about them or their financial transactions. We also store personal information about our employees and, to a lesser extent, those who purchase products or services from our customers. We face the risk of increasingly sophisticated cyber-attacks (including those that leverage AI), computer hacks, theft, viruses, malicious software (such as ransomware), phishing, employee error, denial-of-service attacks, known and unknown vulnerabilities in software and other security breaches that threaten our IT systems and confidential information (including personal data), as well as the performance of our software and expose us to potentially material financial and reputational harm. Such harm could result from the theft of our or our customers' confidential information, operational disruption that prevents or hinders our customers from accessing our systems, the re-routing of funds through fraudulent transactions, among other things.
Current report
We rely extensively on third-party providers, such as cloud and SaaS platforms, whose security safeguards are beyond our control. These third parties, including vendors that provide products and services for our operations area source of potentially significant security risk to our operations and business. Our network of ecosystem partners are also a source of risk to the extent their applications interface with ours and contain vulnerabilities. We do not review the software code included in third-party integrations in all instances.
Current report
Risks Related to Our Tax, Legal, and Regulatory Environment
Current report
Regulatory bodies are also increasingly implementing continuous transaction controls with uncoordinated technical standards and formats, such as Peppol, XML, and UBL. Future mandates, such as the EU's "VAT in the Digital Age" (ViDA) package scheduled for 2028, will require substantial R&D investment to ensure our platform remains compliant across fragmented markets. Failure to timely update our software to support evolving local formats could result in service outages, customer attrition, and regulatory sanctions.
Current report
Our share repurchase program may increase the volatility of the market price of our stock and adversely affect our liquidity. Further, we may not realize the anticipated long-term stockholder value of our share repurchase program.
Current report
On October 30, 2025, our Board of Directors (the “Board”) authorized a stock repurchase program for up to $150.0 million of the Company's outstanding shares of Class A common stock (the “Repurchase Program”). The authorization does not obligate us to repurchase any specific dollar amount or number of shares, there is no expiration date for the authorization, and the Repurchase Program may be modified, suspended, or terminated at any time and for any reason. Any future announcement of a termination or suspension of the Repurchase Program, or our decision not to utilize the full authorized repurchase amount under the Repurchase Program, may reduce investor confidence and/or result in a decrease in the market price of our shares. The existence of the Repurchase Program could cause our stock price to trade higher than it otherwise would and could potentially reduce the market liquidity for our stock. The Repurchase Program may not enhance long-term stockholder value because the market price of our common stock may decline below the levels at which we repurchased shares. Additionally, short-term stock price fluctuations could reduce the number or amount of shares we may ultimately repurchase pursuant to the Repurchase Program. Repurchasing our common stock will reduce the amount of cash we have available to fund working capital, repayment of debt, capital expenditures, strategic acquisitions or business opportunities, and other general corporate purposes. The actual timing, number, and value of shares repurchased will depend on various factors, including the market price of our common stock, trading volume, general market conditions, and other corporate and economic considerations.
Current report
If securities or industry analysts do not publish research or reports about our business, or publish negative reports about our business, or if they adversely change their recommendations regarding our Class A common stock, the market price of our Class A common stock and trading volume could decline.
Current report
The trading market for our Class A common stock is influenced by research and reports that securities or industry analysts publish about us, our business, and our market. We do not have any control over these analysts. If our financial performance fails to meet analyst estimates or one or more of the analysts who cover us downgrade our shares or change their opinion of our shares, our Class A common stock price will likely decline. If any of the analysts who cover us cease coverage of our company or fail to regularly publish reports on us, we could lose visibility in the financial markets, which in turn could cause the market price of our Class A common stock or trading volume to decline.
Removed paragraphs (7)
Previous report
We face risks of cyber-attacks, computer hacks, theft, viruses, malicious software, phishing, employee error, denial-of-service attacks and other security breaches that could jeopardize the performance of our software and expose us to financial and reputational harm. Any of these occurrences could create liability for us, put our reputation in jeopardy and harm our business. Such harm could be in the form of theft of our or our customers' confidential information, the inability of our customers to access our systems or the improper re-routing of customer funds through fraudulent transactions or other frauds perpetrated to obtain inappropriate payments. In some cases, we rely on the safeguards put in place by third parties to protect against security threats. These third parties, including vendors that provide products and services for our operations, could also be a source of security risk to us in the event of a failure or a security incident affecting their own
Previous report
Our business is dependent upon the proper functioning of our business processes and information systems, and modification or interruption of such systems may disrupt our business, processes and internal controls.
Previous report
We rely upon internal processes and information systems to support key business functions, including our assessment of internal controls over financial reporting as required by Section 404 of the Sarbanes-Oxley Act. The efficient operation of these processes and systems is critical, and these processes and systems need to be scalable to support our growth. Our ERP system integrates multiple business areas and other systems across the organization. Any issues, problems, and errors in the operation of the ERP system or the other connected systems may impact our continued ability to successfully operate our business or to timely and accurately report our financial results. In addition, failure of the controls governing the operation of our ERP system could harm our results of operations or cause us to fail to meet our reporting obligations.
Previous report
The accounting method for reflecting the Notes on our balance sheet, accruing interest expense for the Notes and reflecting the underlying shares of our Class A common stock in our reported diluted earnings per share may adversely affect our reported earnings and financial condition.
Previous report
In August 2020, the Financial Accounting Standards Board (“FASB”) published Accounting Standards Update (“ASU”) 2020-06, which simplifies certain of the accounting standards that apply to convertible notes. In accordance with ASU 2020-06, the Notes are reflected as a liability on our balance sheets, with the initial carrying amount equal to the principal amount of the Notes, net of issuance costs. The issuance costs are treated as a debt discount for accounting purposes, and are amortized into interest expense over the term of the Notes. As a result of this amortization, the interest expense that we recognize for the Notes for accounting purposes is greater than the cash interest payments we pay on the Notes, which results in lower reported income or higher reported loss.
Previous report
In addition, the shares underlying the Notes are reflected in our diluted earnings per share using the “if converted” method, in accordance with ASU 2020-06. Under that method, if the conversion value of the Notes exceeds their principal amount for a reporting period, then we calculate our diluted earnings per share assuming that all of the Notes were converted at the beginning of the reporting period and that we issued shares of our Class A common stock to settle the excess. However, if reflecting the Notes in diluted earnings per share in this manner is anti-dilutive, or if the conversion value of the Notes does not exceed their principal amount for a reporting period, then the shares underlying the Notes are not reflected in our diluted earnings per share. The application of the if-converted method may reduce our reported diluted earnings per share, and accounting standards may change in the future in a manner that may adversely affect our diluted earnings per share.
Previous report
Furthermore, if any of the conditions to the convertibility of the Notes is satisfied, then we may be required under applicable accounting standards to reclassify the liability carrying value of the Notes as a current, rather than a long-term, liability. This reclassification could be required even if no holders of the Notes convert their Notes and could materially reduce our reported working capital.
Reworded paragraphs (23)
Previous wording
Our business and success depend in part on our strategic relationships with third parties, including our partner ecosystem, and our business would be harmed if we fail to maintain or expand these relationships.
Current wording
Ourbusiness and success depend in part on our strategic relationships with third parties, including our partner ecosystem, and our business would be harmed if we fail to maintain or expand these relationships.
Previous wording
To improve the scalability, security, and efficiency of our solutions, and to support the expansion of our software into other tax types, we will need to continue making significant capital expenditures and also invest in additional software and infrastructure development. If we experience increasing demand in subscriptions, we may not be able to augment our infrastructure quickly enough to accommodate such increasing demand. In the event of decreases in subscription sales, certain of our fixed costs, such as for capital expenditures, may make it difficult for us to quickly adjust our expenses downward. Additionally, we are continually updating our software and content, which increases expenses for us. We may also need to review or revise our software architecture as we grow, which may require significant resources and investments. As a result, although we may have significant research and development expenditures, which may be incurred and certain of which may be capitalized, there is no guarantee our solutions will be accepted by the market. This could result in increased costs or an impairment of capitalized development costs with no resulting future revenue benefit.
Current wording
To improve the scalability, security, and efficiency of our solutions, and to support the expansion of our software into other tax types, we will need to continue making significant capital expenditures and also invest in additional software and infrastructure development, including investments in AI solutions. If we experience increasing demand in subscriptions, we may not be able to augment our infrastructure quickly enough to accommodate such increasing demand. In the event of decreases in subscription sales, certain of our fixed costs, such as for capital expenditures, may make it difficult for us to quickly adjust our expenses downward. Additionally, we are continually updating our software and content, which increases expenses for us. We may also need to review or revise our software architecture as we grow, which may require significant resources and investments. As a result, although we may have significant research and development expenditures, which may be incurred and certain of which may be capitalized, there is no guarantee our solutions will be accepted by the market. This could result in increased costs or an impairment of capitalized development costs with no resulting future revenue benefit.
Previous wording
We have experienced, and may continue to experience, growth in our headcount and operations, both domestically and internationally, which has placed, and may continue to place, significant demands on our management and our administrative, operational, and financial reporting resources. We have also experienced significant growth in the number of customers, number of transactions, and the amount of tax content that our platform and solutions support. Our growth will require us to hire additional employees and make significant expenditures, particularly in sales and marketing but also in our technology, professional services, finance and administration teams, as well as in our facilities and infrastructure. Our ability to effectively manage our growth will also require the allocation of valuable management and employee resources and improvements to our operational and financial controls and our reporting procedures and systems. In addition, as we seek to continue to expand internationally, we will likely encounter unexpected challenges and expenses due to unfamiliarity with local requirements, practices and markets. Our expenses may increase more than we plan, and we may fail to hire qualified personnel, expand our customer base, enhance our existing software, expand our tax content, develop new solutions, integrate any acquisitions, satisfy the requirements of our existing customers, respond to competitive challenges or otherwise execute our strategies. If we are unable to effectively manage our growth, our business, results of operations, financial condition and cash flows would likely be harmed.
Current wording
administrative, operational, and financial reporting resources. We have also experienced significant growth in the number of customers, number of transactions, and the amount of tax content that our platform and solutions support. Our growth will require us to hire additional employees and make significant expenditures, particularly in sales and marketing but also in our technology, professional services, finance and administration teams, as well as in our facilities and infrastructure. Our ability to effectively manage our growth will also require the allocation of valuable management and employee resources and improvements to our operational and financial controls and our reporting procedures and systems. In addition, as we seek to continue to expand internationally, we will likely encounter unexpected challenges and expenses due to unfamiliarity with local requirements, practices and markets. Our expenses may increase more than we plan, and we may fail to hire qualified personnel, expand our customer base, enhance our existing software, expand our tax content, develop new solutions, integrate any acquisitions, satisfy the requirements of our existing customers, respond to competitive challenges or otherwise execute our strategies. If we are unable to effectively manage our growth, our business, results of operations, financial condition and cash flows would likely be harmed.
Previous wording
Our quarterly and annual results of operations will fluctuate in future periods.
Current wording
Our quarterly and annual results of operations may fluctuate in future periods.
Previous wording
We will experience quarterly or annual fluctuations in our results of operations due to a number of factors, many of which are outside of our control. This makes our future results difficult to predict and could cause our results of operations to fall below expectations or our predictions. Factors that might cause quarterly or annual fluctuations in our results of operations include, but are not limited to:
Current wording
We may experience quarterly or annual fluctuations in our results of operations due to a number of factors, many of which are outside of our control. This makes our future results difficult to predict and could cause our results of operations to fall below expectations or our predictions. Factors that might cause quarterly or annual fluctuations in our results of operations include, but are not limited to:
Previous wording
We have a dynamic organization and routinely implement changes to our priorities and workforce in order to keep up with the constantly evolving market in which we operate. We expect these types of changes to continue for the foreseeable future. Our success is dependent on identifying, developing and retaining key employees to provide uninterrupted leadership and direction for our business. This includes developing organizational capabilities in key growth markets where the depth of skilled employees is limited and competition for these resources is intense. Further, business and organizational changes may result in more reliance on third parties for various services, and that reliance may increase reputational, operational and compliance risks.
Current wording
Our success is dependent on identifying, developing and retaining key employees to provide uninterrupted leadership and direction for our business. We have recently experienced workplace changes, including a new Chief Executive Officer, and we expect changes to continue for the foreseeable future. Unplanned departures or the failure to develop a robust leadership pipeline could upend our annual goals and erode investor confidence. We must aggressively recruit experts in all fields, particularly in the fields of AI and e-invoicing platforms, while retraining our existing workforce to adapt to automated, hybrid decision-making processes. This includes developing organizational capabilities in key growth markets where the depth of skilled employees is limited and competition for these resources is intense. Failure to manage this transition could lead to a loss of institutional knowledge, declining employee morale, and a weakened competitive position against digital-first entrants. Further, business and organizational changes may result in more reliance on third parties for various services, and that reliance may increase reputational, operational and compliance risks.
Previous wording
We intend to continue to make investments to support our business growth and may require additional funds, beyond those generated by our initial public offering or available under our existing credit facility, to respond to business challenges, including to better support and serve our customers, develop new software or enhance our existing solutions, expand our tax content, improve our operating and technology infrastructure or acquire complementary businesses and technologies. Accordingly, we may need to engage in public or private equity, equity-linked or debt financings to secure additional funds. If we raise additional funds through future issuances of equity or convertible debt securities, our existing stockholders could suffer significant dilution, and any new equity securities we issue could have rights, preferences and privileges superior to those of holders of our Class A common stock. Any debt financing that we secure in the future could involve restrictive covenants relating to our capital raising activities and other financial and operational matters, including the ability to pay dividends. This may make it more difficult for us to obtain additional capital and to pursue business opportunities, including potential acquisitions. We may not be able to obtain additional financing on terms favorable to us, if at all. If we are unable to obtain adequate financing on terms satisfactory to us when we require it, our ability to continue to support our business growth and respond to business challenges could be significantly impaired, and our business and prospects could be adversely affected.
Current wording
technologies. Accordingly, we have in the past and may in the future need to engage in public or private equity, equity-linked or debt financings to secure additional funds. If we raise additional funds through future issuances of equity or convertible debt securities, our existing stockholders could suffer significant dilution, and any new equity securities we issue could have rights, preferences and privileges superior to those of holders of our Class A common stock. Any debt financing that we secure in the future could involve restrictive covenants relating to our capital raising activities and other financial and operational matters, including the ability to pay dividends. This may make it more difficult for us to obtain additional capital and to pursue business opportunities, including potential acquisitions. We may not be able to obtain additional financing on terms favorable to us, if at all. If we are unable to obtain adequate financing on terms satisfactory to us when we require it, our ability to continue to support our business growth and respond to business challenges could be significantly impaired, and our business and prospects could be adversely affected.
Previous wording
The market for our solutions is characterized by rapid technological change, frequent new product and service introductions and enhancements, changing customer demands, and evolving industry standards. The introduction of software embodying new technologies can quickly make existing software obsolete and unmarketable. Software solutions are inherently complex, and it can take a long time and require significant research and development expenditures to develop and test new or enhanced solutions. The success of any enhancements or improvements to our software solutions or any new solutions and services depends on several factors, including timely completion, competitive pricing, adequate quality testing, integration with existing technologies, and our platform and overall market acceptance. We cannot be sure that we will succeed in developing, marketing, and delivering on a timely and cost-effective basis enhancements or improvements to our software or any new solutions and services that respond to technological change or new customer requirements, nor can we be sure that any enhancements or improvements to our software or any new solutions and services will be free of errors and defects or that they will achieve market acceptance. Moreover, even if we introduce new solutions, we would experience a decline in revenue of our existing solutions that is not offset by revenue from the new solutions. Customers may delay making purchases of new solutions to permit them to make a more thorough evaluation of these solutions or until industry and marketplace reviews become widely available. In addition, we may lose existing customers who choose a competitor's solutions rather than migrate to our new solutions. This could result in a temporary or permanent revenue shortfall and adversely affect our business.
Current wording
or any new solutions and services depends on several factors, including timely completion, competitive pricing, adequate quality testing, integration with existing technologies, and our platform and overall market acceptance. We cannot be sure that we will succeed in developing, marketing, and delivering on a timely and cost-effective basis enhancements or improvements to our software or any new solutions and services that respond to technological change or new customer requirements, nor can we be sure that any enhancements or improvements to our software or any new solutions and services will be free of errors and defects or that they will achieve market acceptance. Moreover, even if we introduce new solutions, we would experience a decline in revenue of our existing solutions that is not offset by revenue from the new solutions. Customers may delay making purchases of new solutions to permit them to make a more thorough evaluation of these solutions or until industry and marketplace reviews become widely available. In addition, we may lose existing customers who choose a competitor's solutions rather than migrate to our new solutions. This could result in a temporary or permanent revenue shortfall and adversely affect our business.
Previous wording
As a leader in our industry for over 40 years, our brand is one of our most valuable assets, and any failure to protect our brand could cause our business to suffer. In addition, the promotion of our brand requires us to make substantial expenditures, and we anticipate that the expenditures will increase as our market becomes more competitive and as we expand into new regions. The demand for and cost of online and traditional advertising have been increasing and may continue to increase. Our brand promotion efforts will require investment not just in our indirect tax solutions, but also in our full suite of software and services. To the extent that these activities yield increased revenue, this revenue may not offset the increased expenses we incur. If we do not successfully maintain and enhance our brand, our business may not grow, we may have reduced pricing power relative to competitors and we could lose customers or fail to attract potential new customers, all of which would adversely affect our business, results of operations, financial condition and cash flows.
Current wording
As a leader in our industry for over 45 years, our brand is one of our most valuable assets, and any failure to protect our brand could cause our business to suffer. In addition, the promotion of our brand requires us to make substantial expenditures, and we anticipate that the expenditures will increase as our market becomes more competitive and as we expand into new regions. The demand for and cost of online and traditional advertising have been increasing and may continue to increase. Our brand promotion efforts will require investment not just in our indirect tax solutions, but also in our full suite of software and services. To the extent that these activities yield increased revenue, this revenue may not offset the increased expenses we incur. If we do not successfully maintain and enhance our brand, our business may not grow, we may have reduced pricing power relative to competitors and we could lose customers or fail to attract potential new customers, all of which would adversely affect our business, results of operations, financial condition and cash flows.
Previous wording
We will be launching a product leveraging generative AI and may incorporate other AI solutions into our platform, offerings, and/or services, and these solutions may grow over time and become significant in our operations. If the content, analyses, or recommendations that our product leveraging generative AI assist in producing are or are alleged to be deficient, inaccurate, or biased, our business, operations, or financial condition may be adversely and materially affected. The use of AI applications have resulted in cybersecurity incidents that implicate the personal data of end users of such applications. Any such cybersecurity incidents related to our use of AI applications could adversely affect our reputation and operations. The legal and regulatory environment governing AI is evolving and creates uncertainty and new laws may cause us to modify our AI strategy or implementation of technology leveraging AI functionality. AI also presents emerging ethical issues and if our use of AI becomes controversial, we may experience brand or reputational harm, competitive harm, or legal liability.
Current wording
We have launched a product leveraging generative AI and expect to incorporate other AI solutions into our platform, offerings, and/or services, and these solutions may grow over time and become significant in our operations. We expect to incur significant costs related to our investment in AI solutions. However, if we are not effective in developing these solutions, or if we fail to generate sufficient usage of our products and services, we may not grow revenue in line with our investment in AI. In addition, if the content, analyses, or recommendations that our product leveraging generative AI assist in producing are or are alleged to be deficient, inaccurate, or biased, our business, operations, or financial condition may be adversely and materially affected. The use of AI applications has resulted in cybersecurity incidents that involve the personal data of end users of such applications. Any such cybersecurity incidents related to our use of AI applications could adversely affect our reputation and operations. Regulatory and investor scrutiny regarding hyperbolic or unsubstantiated claims about AI integration has increased, resulting in enforcement actions and litigation against companies who engage in this practice. If our public statements regarding "AI-powered" features, such as tax determination or predictive compliance capabilities, are deemed inaccurate or lack a reasonable basis, we may face claims under federal and state securities laws and significant civil penalties. The legal and regulatory environment governing AI is evolving, and new laws may cause us to modify our AI strategy or implementation of technology leveraging AI functionality. AI also presents emerging ethical issues and if our use of AI becomes controversial, we may experience brand or reputational harm, competitive harm, or legal liability.
Previous wording
We are exposed to cybersecurity and data privacy risks that, if realized, could expose us to legal liability, damage our reputation and harm our business.
Current wording
We are exposed to cybersecurity and data privacy risks that, if realized, could materially impact our reputation and business.
Previous wording
security systems and infrastructure. Our network of ecosystem partners could also be a source of vulnerability to the extent their applications interface with ours, whether unintentionally or through a malicious backdoor. We do not review the software code included in third-party integrations in all instances. Because the techniques used to obtain unauthorized access or to sabotage systems change frequently and generally are not recognized until launched against a target, we or these third parties may be unable to anticipate these techniques or to implement adequate preventative measures. We have internal controls designed to prevent cyber-related frauds related to authorizing the transfer of funds, but such internal controls may not be adequate. With the increasing frequency of cyber-related frauds to obtain inappropriate payments and other threats related to cyber-attacks, we may find it necessary to expend resources to remediate cyber-related incidents or to enhance and strengthen our cybersecurity. Our remediation efforts may not be successful and could result in interruptions, delays or cessation of service. Although we have insurance coverage for losses associated with cyber-attacks, as with all insurance policies, there are coverage exclusions and limitations, and our coverage may not be sufficient to cover all possible claims, and we may still suffer losses that could have a material adverse effect on our reputation and business.
Current wording
We and certain of our third-party providers regularly experience cyberattacks and other incidents, and we expect such attacks and incidents to continue in varying degrees. For example, we have experienced phishing attacks and incidents involving unauthorized access to confidential information. While to date no incidents have had a material impact on our operations or financial results, we cannot guarantee that material incidents will not occur in the future. Because the techniques used to obtain unauthorized access to data or to sabotage IT systems are increasingly sophisticated and leverage tools, such as artificial intelligence, we and our third party providers are unable to anticipate all techniques or to implement comprehensive preventative measures. With the increasing frequency of cyber-related frauds to obtain inappropriate payments and other threats related to cyber-attacks, we may find it necessary to expend resources to remediate cyber-related incidents or to enhance and strengthen our cybersecurity. Our remediation efforts may not be successful and could result in interruptions, delays or cessation of service. Although we have insurance coverage for losses associated with cyber-attacks, as with all insurance policies, there are coverage exclusions and limitations, and our coverage may not be sufficient to cover all possible claims, and we may still suffer losses that could have a material adverse effect on our reputation and business.
Previous wording
Our customers provide us with information that our solutions store, some of which may be confidential information about them or their financial transactions. In addition, we store personal information about our employees and, to a lesser extent, those who purchase products or services from our customers. We have security systems and information technology infrastructure designed to protect against unauthorized access to such information. The security systems and infrastructure we maintain may not be successful in protecting against all security breaches and cyber-attacks, social-engineering attacks, computer break-ins, theft and other improper activity. Threats to our information technology security can take various forms, including viruses, worms and other malicious software programs that attempt to attack our solutions or platform or to gain access to the data of our customers or their customers. Like other companies, we have on occasion and will continue to experience threats to our data and systems. Any significant data breach could result in the loss of business, litigation and regulatory investigations, loss of customers and fines and penalties that could damage our reputation and brand and adversely affect the growth of our business. To date, the Company has not experienced any material impact to the business or operations resulting from information or cybersecurity attacks; however, because of the frequently changing attack techniques, along with the increased volume and sophistication of the attacks, there is the potential for the Company to be adversely impacted.
Current wording
The security systems and infrastructure we maintain and use cannot guarantee protection against all security breaches and cyber-attacks, social-engineering attacks, computer break-ins, theft and other improper activity. A significant cyberattack or data breach could result in the loss of business, litigation and regulatory investigations, loss of customers and fines and penalties that could damage our reputation and brand and adversely affect the growth of our business. To date, the Company has not experienced any material impact to the business or operations resulting from information or cybersecurity attacks; however, because of the frequently changing attack techniques, along with the increased volume and sophistication of the attacks, there is the potential for the Company to be adversely impacted.
Previous wording
The increase in remote working arrangements by our employees, vendors, and other third parties also increases the risk of a data security compromise and the possible attack surfaces. Although we conduct training as part of our information security, cybersecurity, and data privacy efforts, that training cannot be completely effective in preventing those attacks from being successful. There can be no assurance that our cybersecurity risk management program and processes, including our policies, controls, or procedures, will be fully implemented, complied with or effective in protecting our systems and information.
Current wording
The increase in remote working arrangements by our employees, vendors, and other third parties also increases the risk of a data security compromise and the possible attack surfaces. We also have acquired and are likely to continue to acquire companies with cybersecurity vulnerabilities or unsophisticated security measures, which present potentially significant cybersecurity and integration risk to us. Although we conduct training as part of our information security, cybersecurity, and data privacy efforts, that training cannot be completely effective in preventing those attacks from being successful. There can be no assurance that our cybersecurity risk management program and processes, including our
Previous wording
We rely on data centers and other technologies and services provided by third parties in order to operate our business. If any of these services becomes unavailable or otherwise is unable to serve our requirements, there could be interruptions to our software and provision of services to our customers. Our business depends on our ability to protect the growing amount of information stored in data centers and related systems, offices and hosting facilities against damage from earthquakes, floods, fires, other extreme weather conditions, power loss, telecommunications failures, hardware failures, viruses, terrorist attacks, acts of war, unauthorized electronic or physical intrusion, overload conditions and other events. If our data centers or related systems fail to operate properly or become disabled even for a brief period of time, we could suffer financial loss, a disruption of our business, liability to customers or damage to our reputation. Our response to any type of disaster may not be successful in preventing the loss of customer data, service interruptions, disruptions to our operations or damage to our important facilities. Our data center providers have no obligations to renew their agreements with us on commercially reasonable terms, or at all, and it is possible that we will not be able to switch our operations to
Current wording
We rely on data centers and other technologies and services provided by third parties in order to operate our business. If any of these services becomes unavailable or otherwise is unable to serve our requirements, there could be interruptions to our software and provision of services to our customers. Our business depends on our ability to protect the growing amount of information stored in data centers and related systems, offices and hosting facilities against damage from earthquakes, floods, fires, other extreme weather conditions, power loss, telecommunications failures, hardware failures, viruses, terrorist attacks, acts of war, unauthorized electronic or physical intrusion, overload conditions and other events. If our data centers or related systems fail to operate properly or become disabled even for a brief period of time, we could suffer financial loss, a disruption of our business, liability to customers or damage to our reputation. Our response to any
Previous wording
another provider in a timely and cost-effective manner should the need arise. If we are unable to renew our agreements with these providers on commercially reasonable terms, or if in the future we add additional data center facility providers, we may face additional costs or expenses or downtime, which could harm our business.
Current wording
type of disaster may not be successful in preventing the loss of customer data, service interruptions, disruptions to our operations or damage to our important facilities. Our data center providers have no obligations to renew their agreements with us on commercially reasonable terms, or at all, and it is possible that we will not be able to switch our operations to another provider in a timely and cost-effective manner should the need arise. If we are unable to renew our agreements with these providers on commercially reasonable terms, or if in the future we add additional data center facility providers, we may face additional costs or expenses or downtime, which could harm our business.
Previous wording
In addition, third parties may claim infringement by us with respect to current or future solutions or other intellectual property rights. The software and technology industries are characterized by the existence of a large number of patents, trademarks and copyrights and by frequent litigation based on allegations of infringement or other violations of intellectual property rights. The outcome of any claims or litigation, regardless of the merits, is inherently uncertain. Any claims and lawsuits to enforce our intellectual property rights or to defend ourselves against claims of infringement of third-party intellectual property rights, and the disposition of such claims and lawsuits, whether through settlement or licensing discussions, or litigation, could be time-consuming and expensive to resolve, divert management attention from executing our strategies, result in efforts to enjoin our activities, lead to attempts on the part of other parties to pursue similar claims, and, in the case of intellectual property claims, require us to change our technology, change our business practices, pay monetary damages, or enter into short- or long-term royalty or licensing agreements. Any adverse determination related
Current wording
In addition, third parties may claim infringement by us with respect to current or future solutions or other intellectual property rights. The software and technology industries are characterized by the existence of a large number of patents, trademarks and copyrights and by frequent litigation based on allegations of infringement or other violations of intellectual property rights. The outcome of any claims or litigation, regardless of the merits, is inherently uncertain. Any claims and lawsuits to enforce our intellectual property rights or to defend ourselves against claims of infringement of third-party intellectual property rights, and the disposition of such claims and lawsuits, whether through settlement or licensing discussions, or litigation, could be time-consuming and expensive to resolve, divert management attention from executing our strategies, result in efforts to enjoin our activities, lead to attempts on the part of other parties to pursue similar claims, and, in the case of intellectual property claims, require us to change our technology, change our business practices, pay monetary damages, or enter into short- or long-term royalty or licensing agreements. Any adverse determination related to intellectual property claims or other litigation could prevent us from offering our solutions to others, could be material to our financial condition or cash flows, or both, or could otherwise harm our results of operations.
Previous wording
A number of states have considered or adopted laws that attempt to require out-of-state retailers to collect sales taxes on their behalf or to provide the jurisdiction with information enabling it to more easily collect use tax. On June 21, 2018, the U.S. Supreme Court issued its opinion inSouth Dakota v. Wayfair, Inc., upholding South Dakota's economic nexus law, which requires certain out-of-state retailers to collect and remit sales taxes on sales into South* *Dakota. Following the Supreme Court's decision, certain states with pre-existing economic nexus provisions announced that they would begin enforcing these provisions on out-of-state retailers and additional states have proceeded with similar efforts. There also has been consideration of federal legislation related to taxation of interstate sales, which, if enacted into law, would place guidelines or restrictions on states' authority to require online and other out of state merchants to collect and remit indirect tax on products and services that they may sell. Similar issues exist outside of the U.S., where the application of value-added taxes or other indirect taxes on online retailers is uncertain and evolving. The effect of changes in tax laws and regulations is uncertain and dependent on a number of factors. Depending on the content of any indirect tax legislation, the role of third-party compliance vendors may change, we may need to invest substantial amounts to modify our solutions or our business model, we could see a decrease in demand, we could see new competitors enter the market, or we could be negatively impacted by such legislation in a way not yet known.
Current wording
the U.S. Supreme Court issued its opinion inSouth Dakota v. Wayfair, Inc., upholding South Dakota's economic nexus law, which requires certain out-of-state retailers to collect and remit sales taxes on sales into South* *Dakota. Following the Supreme Court's decision, certain states with pre-existing economic nexus provisions announced that they would begin enforcing these provisions on out-of-state retailers and additional states have proceeded with similar efforts. There also has been consideration of federal legislation related to taxation of interstate sales, which, if enacted into law, would place guidelines or restrictions on states' authority to require online and other out of state merchants to collect and remit indirect tax on products and services that they may sell. Similar issues exist outside of the U.S., where the application of value-added taxes or other indirect taxes on online retailers is uncertain and evolving. The effect of changes in tax laws and regulations is uncertain and dependent on a number of factors. Depending on the content of any indirect tax legislation, the role of third-party compliance vendors may change, we may need to invest substantial amounts to modify our solutions or our business model, we could see a decrease in demand, we could see new competitors enter the market, or we could be negatively impacted by such legislation in a way not yet known.
Previous wording
We perform a number of critical business functions for our customers, including remittance of the taxes our customers owe to taxing authorities. Our electronic payment of customers' taxes may be subject to federal or state laws or regulations relating to money transmission. The Federal Bank Secrecy Act requires that financial institutions, of which money transmitters are a subset, register with the U.S. Department of Treasury's Financial Crimes Enforcement Network and maintain policies and procedures reasonably designed to monitor, identify, report and, where possible, avoid money laundering and criminal or terrorist financing by customers. Most U.S. states also have laws that apply to money transmitters, and impose various licensure, examination and bonding requirements on them. We believe these federal and state laws and regulations were not intended to cover the business activity of remitting transaction taxes that taxpayers owe to the various states and localities. However, if federal or state regulators were to apply these laws and regulations to this business activity, whether through expansion of enforcement activities, new interpretations of the scope of certain of these laws or regulations or of available exemptions, or if our activities are held by a court to be covered by such laws or regulations, we could be required to expend time, money and other resources to deal with enforcement actions and any penalties that might be asserted, to institute and maintain a compliance program specific to money transmission laws, and
Current wording
We perform a number of critical business functions for our customers, including remittance of the taxes our customers owe to taxing authorities. Our electronic payment of customers' taxes may be subject to federal or state laws or regulations relating to money transmission. The Federal Bank Secrecy Act requires that financial institutions, of which money transmitters are a subset, register with the U.S. Department of Treasury's Financial Crimes Enforcement Network and maintain policies and procedures reasonably designed to monitor, identify, report and, where possible, avoid money laundering and criminal or terrorist financing by customers. Most U.S. states also have laws that apply to money transmitters, and impose various licensure, examination and bonding requirements on them. We believe these federal and state laws and regulations were not intended to cover the business activity of remitting transaction taxes that taxpayers owe to the various states and localities. However, if federal or state regulators were to apply these laws and regulations to this business activity, whether through expansion of enforcement activities, new interpretations of the scope of certain of these laws or regulations or of available exemptions, or if our activities are held by a court to be covered by such laws or regulations, we could be required to expend time, money and other resources to deal with enforcement actions and any penalties that might be asserted, to institute and maintain a compliance program specific to money transmission laws, and possibly to change aspects of how we conduct our business to achieve compliance or minimize regulation. Application of these laws to our business could also make it more difficult or costly for us to maintain our banking relationships. Financial institutions may also be unwilling to provide banking services to us due to concerns about the large dollar volume moving in and out of our accounts on behalf of our customers in the ordinary course of our business. As we continue to expand the solutions we offer and the jurisdictions in which we offer them, we could become subject to other licensing, examination or regulatory requirements relating to financial services.
Previous wording
Determining the taxes owed by our customers involves providing solutions tailored to the types and prices of products our customers sell, as well as information regarding addresses that products are shipped from and delivered to. Numerous federal, state and local laws and regulations govern the collection, dissemination, use and safeguarding of personal information and other data, the scope of which is changing, subject to differing interpretations, and which may be costly to comply with, inconsistent between jurisdictions or conflicting with other rules. We may be subject to these laws in certain circumstances. Most states have also adopted laws that require notice be given to affected consumers in the event of a security breach. In the event of a security breach, our compliance with these laws may subject us to costs associated with notice and remediation, as well as potential investigations from federal regulatory agencies and state attorneys general. A failure on our part to safeguard consumer data adequately or to destroy data securely may subject us, depending on the personal information in question, to costs associated with notice and remediation, as well as to potential regulatory investigations or enforcement actions, and possibly to civil liability, under federal or state data security or unfair practices or consumer protection laws. If federal or state regulators were to expand their enforcement activities or change their interpretation of the applicability of these laws, or if new laws regarding privacy and protection of consumer data were to be adopted, the burdens and costs of complying with them could increase significantly, negatively affecting our results of operations and possibly the manner in which we conduct our business. For example, the European Union's General Data Protection Regulation requires certain operational changes for companies that receive or process personal data of residents of the EU and includes significant penalties for noncompliance. In addition, other governmental authorities around the world are considering implementing similar types of legislative and regulatory proposals concerning data protection. We may incur significant costs to comply with these mandatory privacy and security standards.
Current wording
federal, state and local laws and regulations govern the collection, dissemination, use and safeguarding of personal information and other data, the scope of which is changing, subject to differing interpretations, and which may be costly to comply with, inconsistent between jurisdictions or conflicting with other rules. We may be subject to these laws in certain circumstances. Most states have also adopted laws that require notice be given to affected consumers in the event of a security breach. In the event of a security breach, our compliance with these laws may subject us to costs associated with notice and remediation, as well as potential investigations from federal regulatory agencies and state attorneys general. A failure on our part to safeguard consumer data adequately or to destroy data securely may subject us, depending on the personal information in question, to costs associated with notice and remediation, as well as to potential regulatory investigations or enforcement actions, and possibly to civil liability, under federal or state data security or unfair practices or consumer protection laws. If federal or state regulators were to expand their enforcement activities or change their interpretation of the applicability of these laws, or if new laws regarding privacy and protection of consumer data were to be adopted, the burdens and costs of complying with them could increase significantly, negatively affecting our results of operations and possibly the manner in which we conduct our business. For example, the European Union's General Data Protection Regulation requires certain operational changes for companies that receive or process personal data of residents of the EU and includes significant penalties for noncompliance. In addition, other governmental authorities around the world are considering implementing similar types of legislative and regulatory proposals concerning data protection. We may incur significant costs to comply with these mandatory privacy and security standards.
Previous wording
In April 2024, we incurred $345.0 million aggregate principal amount of indebtedness as a result of the issuance of the Company’s 0.750% Convertible Senior Notes due 2029 (the “Notes”). As of December 31, 2024, we had approximately $923.4 million of indebtedness, excluding indebtedness of our subsidiaries and intercompany liabilities. We may also incur additional indebtedness to meet future financing needs. Our indebtedness could have significant negative consequences for our security holders and our business, results of operations and financial condition by, among other things:
Current wording
In April 2024, we incurred $345.0 million aggregate principal amount of indebtedness as a result of the issuance of the Company’s 0.750% Convertible Senior Notes due 2029 (the “Notes”). As of December 31, 2025, we had approximately $957.7 million of indebtedness, excluding indebtedness of our subsidiaries and intercompany liabilities. We may also incur additional indebtedness to meet future financing needs. Our indebtedness could have significant negative consequences for our security holders and our business, results of operations and financial condition by, among other things:
Previous wording
We and our subsidiaries may be able to incur substantial additional debt in the future, subject to the restrictions contained in our debt instruments, some of which may be secured debt. We will not be restricted under the terms of the indenture governing the Notes (the “Indenture”) from incurring additional debt, securing existing or future debt, recapitalizing our debt or taking a number of other actions that are not limited by the terms of the Indenture that could have the effect of diminishing our ability to make payments on our indebtedness when due. Each of our Line of Credit and Term Loan restricts our ability to incur additional indebtedness, including secured indebtedness, but if the respective facility matures or is repaid, we may not be subject to such restrictions under the terms of any subsequent indebtedness.
Current wording
We and our subsidiaries may be able to incur substantial additional debt in the future, subject to the restrictions contained in our debt instruments, some of which may be secured debt. We will not be restricted under the terms of the indenture governing the Notes (the “Indenture”) from incurring additional debt, securing existing or future debt, recapitalizing our debt or taking a number of other actions that are not limited by the terms of the Indenture that could have the effect of diminishing our ability to make payments on our indebtedness when due. Our Line of Credit restricts our ability to incur additional indebtedness, including secured indebtedness, but if the respective facility matures or is repaid, we may not be subject to such restrictions under the terms of any subsequent indebtedness.
Previous wording
The Option Counterparties or their respective affiliates may modify their hedge positions by entering into or unwinding various derivatives with respect to our Class A common stock and/or purchasing or selling our Class A common stock or other securities of ours in secondary market transactions from time to time prior to the maturity of the Notes (and are likely to do so during any observation period related to a conversion of Notes). This activity could also cause or avoid an increase or a decrease in the market price of our Class A common stock.
Current wording
stock or other securities of ours in secondary market transactions from time to time prior to the maturity of the Notes (and are likely to do so during any observation period related to a conversion of Notes). This activity could also cause or avoid an increase or a decrease in the market price of our Class A common stock.
Rearranged current paragraphs (7)
Current report — wording carried from elsewhere
We have experienced, and may continue to experience, growth in our headcount and operations, both domestically and internationally, which has placed, and may continue to place, significant demands on our management and our
Current report — wording carried from elsewhere
We intend to continue to make investments to support our business growth and may require additional funds, beyond those generated by our initial public offering or available under our existing credit facility, to respond to business challenges, including to better support and serve our customers, develop new software or enhance our existing solutions, expand our tax content, improve our operating and technology infrastructure or acquire complementary businesses and
Current report — wording carried from elsewhere
The market for our solutions is characterized by rapid technological change, frequent new product and service introductions and enhancements, changing customer demands, and evolving industry standards. The introduction of software embodying new technologies can quickly make existing software obsolete and unmarketable. Software solutions are inherently complex, and it can take a long time and require significant research and development expenditures to develop and test new or enhanced solutions. The success of any enhancements or improvements to our software solutions
Current report — wording carried from elsewhere
policies, controls, or procedures, will be fully implemented, complied with or effective in protecting our systems and information.
Current report — wording carried from elsewhere
A number of states have considered or adopted laws that attempt to require out-of-state retailers to collect sales taxes on their behalf or to provide the jurisdiction with information enabling it to more easily collect use tax. On June 21, 2018,
Current report — wording carried from elsewhere
Determining the taxes owed by our customers involves providing solutions tailored to the types and prices of products our customers sell, as well as information regarding addresses that products are shipped from and delivered to. Numerous
Current report — wording carried from elsewhere
The Option Counterparties or their respective affiliates may modify their hedge positions by entering into or unwinding various derivatives with respect to our Class A common stock and/or purchasing or selling our Class A common
Rearranged previous paragraphs (2)
Previous report — wording carried elsewhere
possibly to change aspects of how we conduct our business to achieve compliance or minimize regulation. Application of these laws to our business could also make it more difficult or costly for us to maintain our banking relationships. Financial institutions may also be unwilling to provide banking services to us due to concerns about the large dollar volume moving in and out of our accounts on behalf of our customers in the ordinary course of our business. As we continue to expand the solutions we offer and the jurisdictions in which we offer them, we could become subject to other licensing, examination or regulatory requirements relating to financial services.
Previous report — wording carried elsewhere
to intellectual property claims or other litigation could prevent us from offering our solutions to others, could be material to our financial condition or cash flows, or both, or could otherwise harm our results of operations.