Salesforce, Inc.

Previous wording

•Any breaches in our security measures or those of our third-party data center hosting facilities, cloud computing platform providers or third-party service partners, or the underlying infrastructure of the Internet that cause unauthorized access to a customer’s data, our data or our IT systems, or the blockage or disablement of authorized access to our services.

Current wording

•Any breaches in our security measures or those of our third-party data center hosting facilities, cloud computing platform providers, customers or third-party service partners, or the underlying infrastructure of the Internet that cause unauthorized access to a customer’s data, our data or our IT systems, or the blockage or disablement of authorized access to our services.

Previous wording

If our security measures or those of our third-party data center hosting facilities, cloud computing platform providers or third-party service partners, or the underlying infrastructure of the Internet are breached, and unauthorized access is obtained to a customer’s data, our data or our IT systems, or authorized access is blocked or disabled, our services may be perceived as not being secure, customers may curtail or stop using our services, and we may incur significant reputational harm, legal exposure and liabilities, or a negative financial impact.

Current wording

If our security measures or those of our third-party data center hosting facilities, cloud computing platform providers, customers or third-party service partners, or the underlying infrastructure of the Internet are breached, and unauthorized access is obtained to a customer’s data, our data or our IT systems, or authorized access is blocked or disabled, our services may be perceived as not being secure, customers may curtail or stop using our services, and we may incur significant reputational harm, legal exposure and liabilities, or a negative financial impact.

Previous wording

•third-party attempts to fraudulently induce our employees, partners or customers to disclose sensitive information to gain access to our customers’ data or IT systems, or our data or our IT systems;

Current wording

•third-party attempts to fraudulently induce our employees or partners to disclose sensitive information to gain access to our customers’ data or IT systems, or our data or our IT systems;

Previous wording

•evolving techniques used to breach or sabotage IT systems and infrastructure, including as a result of the increased use of AI technologies by bad actors, which are generally not recognized until launched against a target, and could result in our being unable to anticipate or implement adequate measures to prevent such techniques;

Current wording

•evolving techniques used to breach or sabotage IT systems and infrastructure, including as a result of the increased use of AI technologies by bad actors, which are generally not recognized until launched against a target, and could result in our inability to anticipate or implement adequate measures to prevent such techniques;

Previous wording

In the normal course of business, we are and have been the target of malicious cyberattacks and have experienced other security incidents. Although, to date, such identified security events have not had a material financial impact, there can be no assurance that future cyberattacks will not be material or significant. Additionally, as our market presence grows, we may face increased risks of cyberattacks or security threats, and as AI technologies, including generative AI models, develop rapidly, threat actors are using these technologies to create new sophisticated attack methods that are increasingly automated, targeted and coordinated and more difficult to defend against.

Current wording

In the normal course of business, we and our customers are and have been the target of malicious cyberattacks and have experienced other security incidents. Although, to date, we have not identified any security events involving our systems that have had a material financial impact on us, there can be no assurance that future cyberattacks will not be material or significant. Additionally, as our market presence grows, we may face increased risks of cyberattacks or security threats, and as AI technologies, including generative AI models, develop rapidly, threat actors are using these technologies to create new sophisticated attack methods that are increasingly automated, targeted and coordinated and more difficult to defend against.

Previous wording

As we scale our operations, the amount and type of information transferred on our offerings continues to evolve, including as a result of the deployment of AI technologies, and our infrastructure capacity requirements, including network capacity, computing power and energy requirements, may increase as a result. If we do not accurately plan for our infrastructure capacity requirements and we experience significant strains on our data center capacity, our customers could experience performance degradation or service outages that may subject us to financial liabilities, result in customer losses and harm our reputation and business. As we add data centers and capacity and continue to move to cloud computing platform providers, we move or transfer our data and our customers’ data from time to time. Despite precautions taken during this process, any unsuccessful data transfers may impair the delivery of our services, which may damage our business.

Current wording

As we scale our operations, the amount and type of information transferred on our offerings continue to evolve, including as a result of the deployment of AI technologies, and our infrastructure capacity requirements, including network capacity, computing power and energy requirements, may increase as a result. Additionally, increased energy consumption, including as a result of AI-related growth, climate-related events, energy market volatility, and power grid disruptions, may increase the operational costs related to inputs across our value chain, including for data centers. If we experience significant strains on our data center capacity, whether due to insufficient infrastructure capacity or for other reasons outside of our control, our customers could experience performance degradation or service outages that may subject us to financial liabilities, result in customer losses, subject us to litigation and harm our reputation and business. As we add data centers and capacity and continue to move to cloud computing platform providers, we move or transfer our data and our customers’ data from time to time. Despite precautions taken during this process, any unsuccessful data transfers may impair the delivery of our services, which may damage our business.

Previous wording

As part of our business strategy, we periodically acquire complementary businesses, joint ventures, services and technologies and intellectual property rights. We continue to evaluate such opportunities and expect to make such acquisitions in the future.

Current wording

As part of our business strategy, we periodically acquire complementary businesses, joint ventures, services and technologies and intellectual property rights. We continue to evaluate such opportunities and expect to make such acquisitions in the future, such as the pending acquisition of Informatica announced in May 2025.

Previous wording

Any of these risks could harm our business or negatively impact our results of operations. In addition, to facilitate acquisitions, we may seek additional equity or debt financing, which may not be available on terms favorable to us or at all, which may affect our ability to complete subsequent acquisitions, and which may affect the risks of owning our common stock. For example, if we finance acquisitions by issuing equity or convertible or other debt securities or loans, our existing stockholders may be diluted, or we could face constraints related to the terms of, and repayment obligation related to, the incurrence of indebtedness that could affect the market price of our common stock.

Current wording

Any of these risks could harm our business or negatively impact our results of operations. In addition, to facilitate acquisitions, we may seek additional equity or debt financing, which may not be available on terms favorable to us or at all, which may affect our ability to complete subsequent acquisitions, and which may affect the risks of owning our common stock. If we finance acquisitions by issuing equity or convertible or other debt securities or taking out loans, our existing stockholders may be diluted, or we could face constraints related to the terms of, and repayment obligation related to, the incurrence of indebtedness that could affect the market price of our common stock. For example, in connection with our pending acquisition of Informatica, we entered into a 364-day Credit Agreement for up to $4.0 billion and a three-year Credit Agreement for up to $2.0 billion, both on an unsecured basis. For more information, see Note 8 “Debt” to the consolidated financial statements in Item I of Part 1.

Previous wording

We regularly upgrade or replace our various software systems and processes. If the implementations of these new applications are delayed, or if we encounter unforeseen problems with our new systems and processes or in migrating away from our existing systems and processes, our operations and our ability to manage our business could be negatively impacted.

Current wording

We regularly upgrade or replace our various software systems and processes. If the implementations of these new applications are delayed, or if we encounter unforeseen problems with our new systems and processes or in migrating away from our existing systems and processes, our operations and our ability to manage our business could be negatively impacted. For example, in the second quarter of fiscal 2026, we implemented a new enterprise resource planning system (“ERP”). Among other things, our ERP is essential to our financial planning, reporting, and compliance programs, and any unforeseen problems with our new ERP or in migrating away from previous systems and processes could harm our ability to manage our business.

Previous wording

The technology industry is subject to substantial and continuous competition for engineers with high levels of experience in designing, developing and managing software and technology services, as well as competition for sales executives, data scientists and operations personnel. We have experienced challenges with significant competition in talent recruitment and retention, and may not in the future be successful in recruiting or retaining such talent. We have experienced and expect to continue to experience difficulty in hiring, developing, integrating and retaining highly skilled employees with appropriate qualifications. These difficulties may be amplified by evolving restrictions on immigration, travel, or availability of visas for skilled technology workers. Additionally, our compensation arrangements and benefits may not always be successful in attracting new employees or retaining and motivating our existing personnel. If we fail to attract new personnel or fail to retain and motivate our current personnel, our business and future growth prospects could be severely harmed.

Current wording

The technology industry is subject to substantial and continuous competition for engineers with high levels of experience in designing, developing and managing software and technology services, as well as competition for sales executives, data scientists and operations personnel. We have experienced challenges with significant competition in talent recruitment and retention, particularly for engineers with experience in AI, and may not in the future be successful in recruiting or retaining such talent. We have experienced and expect to continue to experience difficulty in hiring, developing, integrating and retaining highly skilled employees with appropriate qualifications. These difficulties may be amplified by evolving restrictions on immigration, travel, or availability of visas for skilled technology workers. Additionally, our compensation arrangements and benefits may not always be successful in attracting new employees or retaining and motivating our existing personnel. If we fail to attract new personnel or fail to retain and motivate our current personnel, our business and future growth prospects could be severely harmed.

Previous wording

Although we monitor the regulatory, judicial and legislative environment and have invested in addressing these developments, these laws may require us to make additional changes to our practices and services to enable us or our customers to meet the new legal requirements, and may also increase our potential liability exposure through new or higher potential penalties for noncompliance, including as a result of penalties, fines and lawsuits related to data breaches. Furthermore, privacy laws and regulations are subject to differing interpretations and may be inconsistent among jurisdictions. These and other requirements are causing increased scrutiny among customers, particularly in the public sector and highly regulated industries, and may be perceived differently from customer to customer. These developments could reduce demand for our services, require us to take on more onerous obligations in our contracts, restrict our ability to store, transfer and process data or, in some cases, impact our ability or our customers’ ability to offer our services in certain locations, to deploy our solutions, to reach current and prospective customers, or to derive insights from customer data globally. For example, in July 2020, the Court of Justice of the European Union (“CJEU”) invalidated the EU-U.S. Privacy Shield Framework, one of the mechanisms that allowed companies, including us, to transfer personal data from the European Economic Area (“EEA”) to the United States. Even though the CJEU decision upheld the Standard Contractual Clauses (“SCCs”) as an adequate transfer mechanism, the decision created uncertainty around the validity of all EU-to-U.S. data transfers. While the EU and U.S. governments have since adopted the EU-U.S. Data Privacy Framework to foster EU-to-U.S. data transfers and address the concerns raised in the aforementioned CJEU decision, it is uncertain whether this framework will be overturned in court like the previous two EU-U.S. bilateral cross-border transfer frameworks. As a result, regulators may continue to be inclined to interpret the CJEU’s decision, and the logic behind it, as significantly restricting certain cross-border transfers and the cost and complexity of providing our services in certain markets may increase. Certain countries outside of the EEA have also passed or are considering passing laws requiring varying degrees of local data residency. By way of further example, statutory damages available through a private right of action for certain data breaches under the CCPA, may increase our and our customers’ potential liability and the demands our customers place on us.

Current wording

Although we monitor the regulatory, judicial and legislative environment and have invested in addressing these developments, these laws may require us to make additional changes to our practices and services to enable us or our customers to meet the new legal requirements, and may also increase our potential liability exposure through new or higher potential penalties for noncompliance, including as a result of penalties, fines and lawsuits related to data breaches. Furthermore, privacy laws and regulations are subject to differing interpretations and may be inconsistent among jurisdictions. These and other requirements are causing increased scrutiny among customers, particularly in the public sector and highly regulated industries, and may be perceived differently from customer to customer. In addition, we may be subject to increased liability exposure and scrutiny for the use of certain technology related to the collection and management of customer data, including the use of cookies. These developments could reduce demand for our services, require us to take on more onerous obligations in our contracts, restrict our ability to store, transfer and process data or, in some cases, impact our ability or our customers’ ability to offer our services in certain locations, to deploy our solutions, to reach current and prospective customers, or to derive insights from customer data globally. For example, statutory damages available through a private right of action for certain data breaches under the CCPA may increase our and our customers’ potential liability and the demands our customers place on us. In addition, in July 2020, the Court of Justice of the European Union (“CJEU”) invalidated the EU-U.S. Privacy Shield Framework, one of the mechanisms that allowed companies, including us, to transfer personal data from the European Economic Area (“EEA”) to the United States. Even though the CJEU decision upheld the Standard Contractual Clauses (“SCCs”) as an adequate transfer mechanism, the decision created uncertainty around the validity of all EU-to-U.S. data transfers. While the EU and U.S. governments have since adopted the EU-U.S. Data Privacy Framework to foster EU-to-U.S. data transfers and address the concerns raised in the aforementioned CJEU decision, it is uncertain whether this framework will be overturned in court like the previous two EU-U.S. bilateral cross-border transfer frameworks. As a result, regulators may continue to be inclined to interpret the CJEU’s decision, and the logic behind it, as significantly restricting certain cross-border transfers and the cost and complexity of providing our services in certain markets may increase. Certain countries outside of the EEA have also passed or are considering passing laws requiring varying degrees of local data residency. Additionally, recent government actions have increased the perceived risk that our services, particularly in the EU, could be disrupted, suspended, or terminated in resp…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Our customers and potential customers conduct business in a variety of industries, including financial services, the public sector, healthcare and telecommunications. Regulators in certain industries have adopted and may in the future adopt regulations or interpretive positions regarding the use of cloud computing, AI services and other outsourced services. The costs of compliance with, and other burdens imposed by, industry-specific laws, regulations and interpretive positions may limit our customers’ use and adoption of our services and reduce overall demand for our services. Compliance with these regulations may also require us to devote greater resources to support certain customers, which may increase costs and lengthen sales cycles. For example, some financial services regulators have imposed guidelines for use of cloud computing services that mandate specific controls or require financial services enterprises to obtain regulatory approval prior to outsourcing certain functions. If we are unable to comply with these guidelines or controls, or if our customers are unable to obtain regulatory approval to use our services where required, our business may be harmed. In addition, an inability to satisfy the standards of certain voluntary third-party certification bodies that our customers may expect, such as an attestation of compliance with the

Current wording

Our customers and potential customers conduct business in a variety of industries, including financial services, the public sector, healthcare and telecommunications. Regulators in certain industries have adopted and may in the future adopt regulations or interpretive positions regarding the use of cloud computing, AI services and other outsourced services. The costs of compliance with, and other burdens imposed by, industry-specific laws, regulations and interpretive positions may limit our customers’ use and adoption of our services and reduce overall demand for our services. Compliance with these regulations may also require us to devote greater resources to support certain customers, which may increase costs and lengthen sales cycles. For example, some financial services regulators have imposed guidelines for use of cloud computing services that mandate specific controls or require financial services enterprises to obtain regulatory approval prior to outsourcing certain functions. If we are unable to comply with these guidelines or controls, or if our customers are unable to obtain regulatory approval to use our services where required, our business may be harmed. In addition, an inability to satisfy the standards of certain voluntary third-party certification bodies that our customers may expect, such as an attestation of compliance with the Payment Card Industry Data Security Standards, may have an adverse impact on our business and results. Any inability in the future to achieve or maintain industry-specific certifications or other requirements or standards relevant to our customers may harm our business and adversely affect our results.

Previous wording

Further, countries and states are applying their data and consumer protection laws to AI, and particularly generative AI, and/or are enacting or considering legal frameworks on AI, such as the Utah Artificial Intelligence Policy Act, the Colorado Artificial Intelligence Act and the draft CCPA regulations on automated decision-making technology. Any failure or perceived failure by us to comply with such requirements could have an adverse impact on our business.

Current wording

Further, countries and states are applying their data and consumer protection laws to AI, and particularly generative AI, and/or are enacting or considering legal frameworks on AI, such as the EU’s AI Act, and the Utah Artificial Intelligence Policy Act, the Colorado Artificial Intelligence Act and the draft CCPA regulations on automated decision-making technology. Any failure or perceived failure by us to comply with such requirements could have an adverse impact on our business.

Previous wording

Due to the unpredictability of future general economic and financial market conditions, including from the global economic impact of uncertainty regarding changes in trade policy, including the threat or imposition of tariffs or other trade restrictions, as well as retaliatory actions; ongoing conflicts, such as the war in Ukraine and the regional conflict in the Middle East; the pace of change and innovation in enterprise cloud computing services; the impact of foreign currency exchange rate fluctuations; changing interest rates and inflation; the growing complexity of our business, including the use of multiple pricing and packaging models and the increasing amount of revenue from term software license sales; and our increasing focus on enterprise cloud computing services, we may not be able to realize our projected revenue growth plans. We plan our expense and investment levels based on estimates of future revenue and future anticipated rate of growth. We may not be able to adjust our spending appropriately if the addition of new subscriptions or the renewals of existing subscriptions fall short of our expectations, and unanticipated events may cause us to incur expenses beyond what we anticipated. A portion of our expenses may also be fixed in nature for some minimum amount of time, such as with costs capitalized to obtain revenue contracts, data center and infrastructure service contracts or office leases, so it may not be possible to reduce costs in a timely manner, or at all, without the payment of fees to exit certain obligations early. Additionally, if sales through indirect channels or for consumption-based product offerings increase, this may lead to greater difficulty in forecasting revenue and anticipated rate of growth. As a result, our revenues, operating results and cash flows may fluctuate significantly on a quarterly basis and revenue growth rates may not be sustainable and may decline in the future. If we are not able to provide continued operating margin expansion, our business could be harmed and the market price of our common stock could decline.

Current wording

Due to the unpredictability of future general economic and financial market conditions, including from the global economic impact of uncertainty regarding changes in trade policy, including the threat or imposition of tariffs or other trade restrictions, as well as retaliatory actions; ongoing conflicts, such as the war in Ukraine and the regional conflict in the Middle East; the pace of change and innovation in enterprise cloud computing services; the impact of foreign currency exchange rate fluctuations; changing interest rates and inflation; the growing complexity of our business, including the use of multiple pricing and packaging models and fluctuations to the amount of revenue from term software license sales; and our increasing focus on enterprise cloud computing services, we may not be able to realize our projected revenue growth plans. We plan our expense and investment levels based on estimates of future revenue and future anticipated rate of growth. We may not be able to adjust our spending appropriately if the addition of new subscriptions or the renewals of existing subscriptions fall short of our expectations, and unanticipated events may cause us to incur expenses beyond what we anticipated. A portion of our expenses may also be fixed in nature for some minimum amount of time, such as with costs capitalized to obtain revenue contracts, data center and infrastructure service contracts or office leases, so it may not be possible to reduce costs in a timely manner, or at all, without the payment of fees to exit certain obligations early. Additionally, if sales through indirect channels or for consumption-based product offerings increase, this may lead to greater difficulty in forecasting revenue and anticipated rate of growth. As a result, our revenues, operating results and cash flows may fluctuate significantly on a quarterly basis and revenue growth rates may not be sustainable and may decline in the future. If we are not able to provide continued operating margin expansion, our business could be harmed and the market price of our common stock could decline.

Previous wording

We are subject to income taxes in the United States and various other jurisdictions. Significant judgment is often required in the determination of our worldwide provision for income taxes. Our effective tax rate could be impacted by changes in our earnings and losses in countries with differing statutory tax rates, changes in operations, changes in non-deductible expenses, changes in the tax effects of stock-based compensation expense, changes in the valuation of deferred tax assets and liabilities and our ability to utilize them, the applicability of withholding taxes, effects from acquisitions and changes in accounting principles and tax laws. Any changes, ambiguity or uncertainty in taxing jurisdictions’ administrative interpretations, decisions, policies and positions could also materially impact our income tax liabilities.

Current wording

We are subject to income taxes in the United States and various other jurisdictions. Significant judgment is often required in the determination of our worldwide provision for income taxes. Our effective tax rate could be impacted by changes in our earnings and losses in countries with differing statutory tax rates, changes in operations, changes in non-deductible expenses, changes in the tax effects of stock-based compensation expense, changes in the valuation of deferred tax assets and liabilities and our ability to utilize them, the applicability of withholding taxes, effects from acquisitions and changes in accounting principles and tax laws. Any changes, ambiguity or uncertainty in taxing jurisdictions’ administrative interpretations, decisions, policies and positions could also materially impact our income tax liabilities. For example, as a result of the recently enacted One Big Beautiful Bill Act (the “OBBBA”), we expect to be subject to Corporate Alternative Minimum Tax (“CAMT”). While certain changes brought forth by the OBBBA, notably, the immediate deduction of domestic research and development expenditures favorably impact our cash flows from operating activities, our tax provision may be adversely impacted to the extent additional clarification or interpretive guidance related to the OBBBA is released, or if there are changes to our valuation allowance assessment related to CAMT credits.

Previous wording

Global tax developments applicable to multinational businesses may have a material impact to our business, cash flows, or financial results. Such developments, for example, may include the proposed legislation in the United States, certain provisions introduced by the Organization for Economic Co-operation and Development’s proposals, and the European Commission’s and certain major jurisdictions’ heightened interest in and taxation of companies participating in the digital economy. Furthermore, governments’ responses to macroeconomic factors and tax revenue needs may lead to tax rule changes that could materially and adversely affect our cash flows and financial results.

Current wording

Global tax developments may have a material impact to our business, cash flows, or financial results. For example, heightened interest in multinationals participating in the digital economy led many countries to adopt Pillar Two, a 15% corporate minimum tax proposed by the Organization for Economic Cooperation and Development (“OECD”). However, in response to trade negotiations with the United States, the Group of Seven (“G7”) countries proposed to exempt US multinationals from Pillar Two by adopting a “side-by-side” system between Pillar Two and the existing US global minimum tax provisions. These ongoing negotiations and governments’ responses may lead to tax rule changes that could materially and adversely affect our cash flows and financial results.

Previous wording

The indentures governing our Senior Notes and the Revolving Loan Credit Agreement impose restrictions on us and require us to maintain compliance with specified covenants. Our ability to comply with these covenants may be affected by events beyond our control. A failure to comply with the covenants and other provisions of our outstanding debt could result in events of default under such instruments, which could permit acceleration of all of our debt and borrowings. Any required repayment of our debt as a result of a fundamental change or other acceleration would lower our current cash on hand such that we would not have those funds available for use in our business.

Current wording

The indentures governing our Senior Notes and the Revolving Loan Credit Agreement impose restrictions on us and require us to maintain compliance with specified covenants. Our ability to comply with these covenants may be affected by events beyond our control. A failure to comply with the covenants and other provisions of our outstanding debt could result in events of default under such instruments, which could permit acceleration of all of our debt and borrowings. Any required repayment of our debt as a result of a fundamental change or other acceleration would lower our current cash on our balance sheet such that we would not have those funds available for use in our business.

Previous wording

•expenses related to our real estate or changes in the nature or extent of our use of existing real estate, including our office leases and our data center capacity and expansion;

Current wording

•expenses related to our real estate or changes in the nature or extent of our use of existing real estate, including our office leases and data centers;

Previous wording

While we seek to mitigate our business risks associated with climate change by establishing appropriate environmental programs and partnering with organizations who are also focused on mitigating their own climate-related risks, there are inherent climate-related risks where our business is conducted. Any of our primary locations may be vulnerable to the adverse effects of climate change. For example, our offices globally have historically experienced, and are projected to continue to experience, climate-related events at an increasing frequency, including drought, water scarcity, heat waves, cold waves, flooding, wildfires and resultant air quality impacts and power shutoffs associated with climate-related events. These events in turn have impacts on inflation risks, the cost and availability of insurance, food security, water security (including for water availability for data center cooling), energy security and on our employees’ health, productivity and well-being. Furthermore, it is more difficult to mitigate the impact of these events on our employees working remotely or at client sites. Changing market dynamics, global policy developments and the increasing frequency and impact of extreme weather events on critical infrastructure in the United States and elsewhere have the potential to disrupt our business, the business of companies we invest in, the business of third-party providers or suppliers that we rely on to conduct our business and the business of our customers, and may cause us to experience higher attrition, losses and additional costs to maintain or resume operations. In particular, increased energy consumption as a result of AI-related growth, climate-related events, energy market volatility, and power grid disruptions may increase the operational costs related to inputs across our value chain, including for data centers. Additionally, failure to uphold, meet or make timely forward progress against our public commitments and goals related to climate action could adversely impact the resilience of our business to the impacts of climate-related events.

Current wording

While we seek to mitigate our business risks associated with climate change by establishing appropriate environmental programs and partnering with organizations who are also focused on mitigating their own climate-related risks, there are inherent climate-related risks where our business is conducted. In particular, increased energy consumption, including as a result of AI-related growth, climate-related events, energy market volatility, and power grid disruptions, may increase the operational costs related to inputs across our value chain, including for data centers. Any of our primary locations may be vulnerable to the adverse effects of climate change. For example, our offices globally have historically experienced, and are projected to continue to experience, climate-related events at an increasing frequency, including drought, water scarcity, heat waves, cold waves, flooding, wildfires and resultant air quality impacts and power shutoffs associated with climate-related events. These events in turn have impacts on inflation risks, the cost and availability of insurance, food security, water security (including for water availability for data center cooling), energy security and on our employees’ health, productivity and well-being. Furthermore, it is more difficult to mitigate the impact of these events on our employees working remotely or at client sites. Changing market dynamics, global policy developments and the increasing frequency and impact of extreme weather events on critical infrastructure in the United States and elsewhere have the potential to disrupt our business, the business of companies we invest in, the business of third-party providers or suppliers that we rely on to conduct our business and the business of our customers, and may cause us to experience higher attrition, losses and additional costs to maintain or resume operations. Additionally, failure to uphold, meet or make timely forward progress against our public commitments and goals related to climate action could adversely impact the resilience of our business to the impacts of climate-related events.

Previous wording

(1) The Board authorized the Share Repurchase Program, which commenced in August 2022 and had additional authorizations approved by the Board in February 2023 and February 2024, for an aggregate total authorization of $30.0 billion. The Share Repurchase Program does not have a fixed expiration date and does not obligate the Company to acquire any specific number of shares. Under the Share Repurchase Program, shares of common stock may be repurchased using a variety of methods, including privately negotiated and/or open market transactions, including under plans complying with Rule 10b5-1 under the Exchange Act, as part of accelerated share repurchases and other methods. The timing, manner, price and amount of any repurchases are determined by the Company in its discretion and depend on a variety of factors, including legal requirements, price and economic and market conditions. All repurchases disclosed in the table were made pursuant to the publicly announced Share Repurchase Program.

Current wording

(1) The Board authorized the Share Repurchase Program, which commenced in August 2022 and had additional authorizations approved by the Board in February 2023 and February 2024, for an aggregate total authorization of $30.0 billion. In September 2025, the Board authorized an additional $20.0 billion in repurchases under the Share Repurchase Program, for an aggregate total authorized of $50.0 billion. The Share Repurchase Program does not have a fixed expiration date and does not obligate the Company to acquire any specific number of shares. Under the Share Repurchase Program, shares of common stock may be repurchased using a variety of methods, including privately negotiated and/or open market transactions, including under plans complying with Rule 10b5-1 under the Exchange Act, as part of accelerated share repurchases and other methods. The timing, manner, price and amount of any repurchases are determined by the Company in its discretion and depend on a variety of factors, including legal requirements, price and economic and market conditions. All repurchases disclosed in the table were made pursuant to the publicly announced Share Repurchase Program.