Fidelity National Information Services, Inc.

Previous wording

Security breaches, privacy breaches, cyberattacks, unintentional disclosures of confidential information, third-party breaches, service outages, or a failure to comply with information security laws or regulations, contractual provisions, or industry security requirements by us, our vendors, clients, or technology partners could harm our business by disrupting delivery of services, exposing sensitive or confidential information, or damaging our reputation, any of which could result in a breach of one or more client contracts or regulatory investigations, enforcement actions, fines or litigation.

Current wording

Security breaches, privacy breaches, cyberattacks, unintentional disclosures of confidential information, breaches of third party service providers, service outages, or a failure to comply with information security laws or regulations, contractual provisions, or industry security requirements by us, our vendors, clients, or technology partners could harm our business by disrupting delivery of services, exposing sensitive or confidential information, or damaging our reputation, any of which could result in a breach of one or more client contracts or regulatory investigations, enforcement actions, fines or litigation.

Previous wording

Cybersecurity is fundamental to our complex, global business. We and our vendors, service providers, technology partners, and clients electronically receive, process, store and transmit sensitive and confidential information of our business partners, clients and such clients' customers. We collect consumer personal data, such as names and addresses, Social Security Numbers, driver’s license numbers, financial account numbers, transactional history, cardholder data and payment history records. Such information is necessary to support our clients' transaction processing and to conduct our check authorization and collection businesses. We also collect personal data from our employees and contractors as necessary to support those relationships, comply with legal obligations, manage our workforce, and provide compensation and benefits. Our information systems and networks are dependent upon hardware, software, communication infrastructure and other technological components that are both developed by us and provided by third parties. These components sometimes require patches, updates, or remediation of known or potential vulnerabilities. Implementation challenges in timely completing these tasks can lead to security vulnerabilities that expose us, our systems and data to potential compromise or interruption. Our information systems are also vulnerable to human error as well as malicious insider threats. Finally, the systems we rely on, which include hardware and software manufactured, developed or operated by third-party vendors and service providers, have in the past been subject to, and may in the future be subject to, cyber attacks or security incidents due to employee error or malfeasance, software bugs, hardware malfunctions or other security vulnerabilities.

Current wording

Cybersecurity is fundamental to our complex, global business. We and our vendors, service providers, technology partners, and clients electronically receive, process, store and transmit sensitive and confidential information of our business partners, clients and such clients' customers. We collect consumer personal data, such as names and addresses, Social Security Numbers, driver’s license numbers, financial account numbers, transactional history, cardholder data and payment history records. Such information is necessary to support our clients' transaction processing and to conduct our check authorization and collection businesses. We also collect personal data from our employees and contractors as necessary to support those relationships, comply with legal obligations, manage our workforce, and provide compensation and benefits. Our information systems and networks are dependent upon hardware, software, communication infrastructure and other technological components and services that are developed and managed by us or provided by third parties. These components require regular monitoring, patches, updates, or remediation of known or potential vulnerabilities. Implementation challenges in timely completing these tasks can lead to security vulnerabilities that expose us, our systems and data to potential compromise or interruption. Our information systems are also vulnerable to human error, including employees sending information to inadvertent recipients as well as employees inappropriately using AI tools, as well as malicious insider threats. Finally, the systems we rely on, which include hardware and software manufactured, developed or operated by third-party vendors and service providers, have in the past been subject to, and may in the future be subject to, cyberattacks or other security incidents due to employee error or malfeasance, software bugs, hardware malfunctions or other security vulnerabilities.

Previous wording

The uninterrupted operation of information systems operated by us, our vendors and service providers, and other third parties, as well as the confidentiality of the customer or consumer information that resides on such systems, is critical to the successful operation of our Company. For that reason, security or privacy breaches are some of the principal operational risks we face as a provider of services to financial institutions and businesses. Like other such providers, we are a regular target of attempts to identify and exploit system vulnerabilities and/or penetrate or bypass our security measures to gain unauthorized access to our networks and systems. If we fail to maintain an adequate security infrastructure, adapt to emerging security threats (such as the use of artificial intelligence by threat actors in furtherance of cyber attacks), regularly identify security vulnerabilities, prevent unauthorized access, identity theft or other cybersecurity risks (e.g., distributed denial of service, ransomware, and other cyber attacks), manage vendor or supply chain cybersecurity risks, adequately train users of our information systems, or implement sufficient security standards and technology to protect against security or privacy breaches, then the confidentiality, integrity or availability of the information we secure could be compromised. Unauthorized access to, or abuse of authorized access to, our computer systems or databases or our vendors' computer systems or databases could result in the theft or publication of confidential information and personal data, the deletion or modification of records, disruption of service delivery, installation of malware, and the potential need to pay ransom or otherwise cause interruptions in our operations. These issues could give rise to legal actions from clients and/or such clients' customers, regulatory investigations or enforcement activity, losses and expenses associated with such events, and damage to our reputation. Because we serve a diverse client base with different technology and service needs, we must continue to enhance our ability to manage the risks from the resulting diversity in potential security attacks.

Current wording

The uninterrupted trustworthy operation of information systems operated by us, our vendors and service providers, and other third parties, as well as the confidentiality of the customer or consumer information that resides on such systems, is critical to the successful operation of our Company. For that reason, compromises to the confidentiality, integrity or availability of our information systems or information are some of the principal operational risks we face as a provider of services to financial institutions and businesses. Like other such providers, we are a regular target of attempts to identify and exploit system vulnerabilities and/or penetrate or bypass our security measures to gain unauthorized access to our networks and systems. If we fail to maintain an adequate security infrastructure, adapt to emerging security threats (such as the use of AI by threat actors in furtherance of cyberattacks), the targeting of vendors who serve large numbers of customers for supply chain attacks, and business email compromises seeking fraudulent wire transfers regularly identify security vulnerabilities, prevent unauthorized access, identity theft or other cybersecurity risks (e.g., distributed denial of service, ransomware, and other cyberattacks), manage vendor or supply chain cybersecurity risks, adequately train users of our information systems, or implement sufficient security standards and technology to protect against security or privacy breaches, then the confidentiality, integrity or availability of the information we secure could be compromised. Unauthorized access to, or abuse of authorized access to, our computer systems or databases or our vendors' computer systems or databases could result in the theft or publication of confidential information and personal data, the deletion or modification of records, disruption of service delivery, installation of malware, and the potential need to pay ransom or otherwise cause interruptions in our operations. These issues could give rise to legal actions from clients and/or such clients' customers, regulatory investigations or enforcement activity, losses and expenses associated with such events, and damage to our reputation. Because we serve a diverse client base with different technology and service needs, we must continue to enhance our ability to manage the risks from the resulting diversity in potential security attacks.

Previous wording

As a provider of services to financial institutions and businesses, we are bound by many of the same limitations on disclosure of the information we receive from clients that apply to the clients themselves. If we fail to comply with these regulations and industry security requirements, including those imposed by the payment card industry through its digital security standards and other rules, we could be exposed to damages from legal actions from clients and/or their customers, governmental proceedings, public disclosure and consumer notification requirements, and the imposition of significant fines or prohibitions on providing services. We operate in a highly regulated environment and are subject to a myriad of complex, evolving regulations and standards, including cybersecurity and privacy laws, regulations and industry standards. In addition, if more restrictive privacy laws, data protection rules or industry security requirements are adopted in the future on the federal or state level, or by a non-U.S. jurisdiction in or from which we serve clients, or by a specific industry body, those changes could have an adverse impact on our Company through increased costs or by imposing changes or inefficiencies on business processes.

Current wording

As a provider of services to financial institutions and businesses, we are bound by many of the same limitations on disclosure of the information we receive from clients that apply to the clients themselves. If we fail to comply with these regulations and industry security requirements, including those imposed by the payment card industry through its digital security standards and other rules, we could be exposed to damages from legal actions from clients and/or their customers, governmental proceedings, public disclosure and consumer notification requirements, and the imposition of significant fines or prohibitions on providing services. We operate in a highly regulated environment and are subject to a myriad of complex, evolving regulations and standards, including cybersecurity and privacy laws, regulations and industry standards. This environment imposes comprehensive data privacy compliance obligations in relation to our collection and use of data relating to an identifiable living individual or "personal data," including a principle of accountability and the obligation to demonstrate compliance through policies, procedures, training and audit, as well as regulating cross-border transfers of personal data. In addition, if more restrictive privacy laws, data protection rules or industry security requirements are adopted in the future on the federal or state level, or by a non-U.S. jurisdiction in or from which we serve clients, or by a specific industry body, those changes could have an adverse impact on our Company through increased costs or by imposing changes or inefficiencies on business processes.

Previous wording

A material privacy or security incident would trigger SEC disclosure obligations and could trigger other applicable disclosure requirements, or be disclosed publicly, even if there is no legally required disclosure. Incident disclosure may increase the risks of private lawsuits or government enforcement action related to incidents, increase attention from malicious actors, and lead to greater regulatory scrutiny. The occurrence of any such incidents, and the related responses (if any) by regulators or third parties, may result in adverse publicity and reputational harm to us.

Current wording

A material privacy or security incident would trigger SEC disclosure obligations and could trigger other applicable disclosure requirements under state-level or non-U.S. laws or regulations, or be disclosed publicly, even if there is no legally required disclosure. Incident disclosure may increase the risks of private lawsuits or government enforcement action related to incidents, increase attention from malicious actors, and lead to greater regulatory scrutiny. The occurrence of any such incidents, and the related responses (if any) by regulators or third parties, may result in adverse publicity and reputational harm to us.

Previous wording

If we are unable, or appears to be unable, to prevent cybersecurity or privacy breaches, we risk reputational damage. Our existing clients could lose confidence in our information systems and consequently choose to terminate their agreements with us. Such reputational harm could also inhibit our ability to attract new clients; potentially increase government, regulatory, or media scrutiny; or give rise to new regulatory requirements that adversely affect our ability to do business in one or more parts of the world.

Current wording

If we are unable, or appear to be unable, to prevent cybersecurity or privacy breaches, we risk reputational damage. Our existing clients could lose confidence in our information systems and consequently choose to terminate their agreements with us. Such reputational harm could also inhibit our ability to attract new clients; potentially increase government, regulatory, or media scrutiny; or give rise to new regulatory requirements that adversely affect our ability to do business in one or more parts of the world.

Previous wording

The markets for our solutions are characterized by constant technological changes, frequent introductions of new solutions and evolving industry standards. Our future success will be significantly affected by our ability to enhance our current solutions and develop and introduce new solutions and services that address the increasingly sophisticated needs of our clients and their customers. In addition, as more of our revenue and market demand shifts to software as a service ("SaaS"), business process as a service ("BPaaS"), cloud, and new emerging technologies, the need to keep pace with rapid technology changes becomes more acute. These initiatives carry the risks associated with any new solution development effort, including cost overruns, delays in delivery and implementation, and performance issues. There can be no assurance that we will be successful in developing, marketing and selling new solutions or enhancements that meet these changing demands. If we are not successful in these efforts, we could lose clients, or our clients could lose customers, and we could have difficulty attracting new clients for our solutions. Any of these developments could have an adverse impact on our future revenue and/or business prospects.

Current wording

The markets for our solutions are characterized by constant technological changes, frequent introductions of new solutions and evolving industry expectations. Our future success will be significantly affected by our ability to enhance our current solutions and develop and introduce new solutions and services that address the increasingly sophisticated needs of our clients and their customers. In addition, as more of our revenue and market demand shifts to software as a service ("SaaS"), business process as a service ("BPaaS"), cloud, and new emerging technologies, the need to keep pace with rapid technology changes becomes more acute. These initiatives carry the risks associated with any new solution development effort, including cost overruns, delays in delivery and implementation, and performance issues. There can be no assurance that we will be successful in developing, marketing and selling new solutions or enhancements that meet these changing demands. If we are not successful in these efforts, we could lose clients, or our clients could lose customers, and we could have difficulty attracting new clients for our solutions. Any of these developments could have an adverse impact on our future revenue and/or business prospects.

Previous wording

A significant portion of our revenue is derived from transaction processing fees. The global transaction processing industries depend heavily upon the overall level of consumer, business and government spending. Any change in economic factors, including a sustained deterioration in general economic conditions or consumer confidence, particularly in the U.S., or inflation and increases in interest rates in key countries in which we operate may adversely affect consumer spending, consumer debt levels and credit and debit card usage, and as a result, adversely affect our financial performance by reducing the number or average purchase amount of transactions that we service. In addition, the direct and indirect effects of geopolitical conflicts, such as the Russia-Ukraine war and conflicts in the Middle East, have adversely affected global economic activity and transaction processing volumes (particularly in our former Merchant segment). Worsening, or future, geopolitical conflicts could materially adversely affect global economic activity and our transaction volumes in the future.

Current wording

A significant portion of our revenue is derived from transaction processing fees. The global transaction processing industries depend heavily upon the overall level of consumer, business and government spending. Any change in economic factors, including a sustained deterioration in general economic conditions or consumer confidence, particularly in the U.S., or inflation and increases in interest rates in key countries in which we operate may adversely affect consumer spending, consumer debt levels and payment card usage, and as a result, adversely affect our financial performance by reducing the number or average purchase amount of transactions that we service. In addition, the direct and indirect effects of geopolitical conflicts, such as the Russia-Ukraine war and conflicts in the Middle East, have adversely affected global economic activity and transaction processing volumes. Worsening, or future, geopolitical conflicts could materially adversely affect global economic activity and our transaction volumes in the future.

Previous wording

When there is a slowdown or downturn in the economy, a drop in stock market levels or trading volumes, or an event that disrupts the financial markets, our business, financial condition or results of operations may suffer for a number of reasons. Customers may react to worsening conditions by reducing or delaying their capital expenditures in general or by specifically reducing or delaying their information technology spending. In addition, customers may seek to curtail trading operations or to lower their costs by renegotiating vendor contracts. Moreover, competitors may respond to market conditions and attempt to lure away our customers by lowering prices on existing solutions or by offering new, lower-cost solutions. Any further protective trade policies or actions taken by the U.S. may also result in other countries reducing, or making more expensive, services permitted to be provided by U.S.-based companies. If any of these circumstances remain in effect for an extended period of time, there could be a material adverse effect on our business, financial condition or results of operations.

Current wording

When there is a slowdown or downturn in the economy, a drop in stock market levels or trading volumes, or an event that disrupts the financial markets, our business, financial condition or results of operations may suffer for a number of reasons. Customers may react to worsening conditions by reducing or delaying their capital expenditures in general or by specifically reducing or delaying their information technology spending. Additionally, credit card issuers may reduce credit limits and become more selective in their card issuance practices, which would lower purchase volumes. In addition, customers may seek to curtail trading operations or to lower their costs by renegotiating vendor contracts. Moreover, competitors may respond to market conditions and attempt to lure away our customers by lowering prices on existing solutions or by offering new, lower-cost solutions. Any further protective trade policies or actions taken by the U.S. may also result in other countries reducing, or making more expensive, services permitted to be provided by U.S.-based companies. If any of these circumstances remain in effect for an extended period of time, there could be a material adverse effect on our business, financial condition or results of operations.

Previous wording

Our business, financial condition or results of operations could be adversely affected by business interruptions, errors or failures in connection with our or third-party information technology and communication systems and other software and hardware used in connection with our business, or by design errors in the software solutions we offer, or more generally, by the unavailability of third-party vendors' services that we need to operate our business effectively.

Current wording

Our business, financial condition or results of operations could be adversely affected by business interruptions, errors or failures in connection with our or third-party information technology and communication systems and other software and hardware used in connection with our business, or by design errors in the software solutions we offer, or more generally, by the unavailability of third-party services that we need to operate our business effectively.

Previous wording

Many of our services are based on sophisticated software and computing systems, and we may encounter delays when developing new technology solutions and services. Further, the technology solutions underlying our services have occasionally contained, and may in the future contain, undetected errors or defects when first introduced or when new versions are released. In addition, we may experience difficulties in installing or integrating our technologies on platforms used by our clients, or our clients may cancel a project after we have expended significant effort and resources to complete an installation. Finally, our systems and operations have been, and in the future could be, exposed to damage or interruption from fire, floods, severe weather events, natural disasters, power loss, telecommunications failure, unauthorized entry and computer viruses. Defects in our technology solutions or those of our third-party partners or elsewhere in the global cyber environment, errors or delays in the processing of electronic transactions, or other difficulties have resulted, and in the future could result, in (i) interruption of business operations; (ii) delay in market acceptance; (iii) additional development and remediation costs; (iv) diversion of technical and other resources; (v) loss of clients; (vi) negative publicity; or (vii) exposure to liability claims. Any one or more of the foregoing could have an adverse effect on our business, financial condition or results of operations. We cannot be certain that control measures, including system redundancies, security controls, and application development and testing controls, will be successful in preventing disruption or limiting our exposure.

Current wording

Many of our services are based on sophisticated software and computing systems, and we may encounter delays when developing new technology solutions and services. Further, the technology solutions underlying our services have occasionally contained, and may in the future contain, undetected errors or defects when first introduced or when new versions are released. In addition, we may experience difficulties in installing or integrating our technologies on platforms used by our clients, or our clients may cancel a project after we have expended significant effort and resources to complete an installation. Finally, our systems and operations have been, and in the future could be, exposed to damage or interruption from fire, floods, severe weather events, natural disasters, power loss, telecommunications failure, unauthorized entry and computer viruses. Defects in our technology solutions or those of our third-party partners or elsewhere in the global cyber environment, errors or delays in the processing of electronic transactions, or other difficulties have resulted, and in the future could result, in (i) interruption of business operations; (ii) delay in market acceptance;

Previous wording

In addition, we generally depend on a number of third parties, both in the United States and internationally, to supply elements of our systems, computers, research and market data, connectivity, communication network infrastructure, other equipment and related support and maintenance. We cannot be certain that any of these third parties will be able to continue providing these services to meet our evolving needs effectively. If our vendors, or in certain cases vendors of our customers, fail to meet their obligations, provide poor or untimely service or suffer operational disruptions, and we are unable to make alternative arrangements for the provision of these services, then we may in turn fail to provide our services or to meet our obligations to our customers, and our business, financial condition or results of operations could be adversely affected.

Current wording

In addition, we generally depend on a number of third parties, both in the United States and internationally, to supply elements of our systems, computers, research and market data, connectivity, communication network infrastructure, other equipment and related support and maintenance. We cannot be certain that any of these third parties will be able to continue providing these services to meet our evolving needs effectively. If our vendors, or in certain cases vendors of our customers, fail to meet their obligations, provide poor or untimely service or suffer operational disruptions, and we are unable to make alternative arrangements for the provision of these services, then we may in turn fail to provide our services or to meet our obligations to our customers, and our business, financial condition or results of operations could be adversely affected. In addition, we rely on various financial institutions to provide treasury services in support of funds settlement for certain of our solutions. An inability to obtain such treasury services in the future could have a material adverse effect on our business, financial condition or results of operations.

Previous wording

There has been, and may continue to be, substantial consolidation activity in the banking and financial services industry. In addition, certain financial institutions that experienced negative operating results, including some of our clients, have failed, leading to further consolidation. These consolidations, including those spurred by failures, reduce our number of potential clients and may reduce our number of existing clients, which could adversely affect our revenue, even if the events do not reduce the aggregate activities of the consolidated entities. Further, if our clients or our partners across any of our businesses fail, merge with or are acquired by other entities that are not our clients or our partners, or that use fewer of our services, they may discontinue or reduce use of our services. It is also possible that larger financial institutions resulting from consolidations would have greater leverage in negotiating terms or could decide to perform in-house some or all of the services we currently provide or could provide. Any of these developments could have an adverse effect on our business, financial condition or results of operations.

Current wording

There has been, and may continue to be, consolidation activity in the banking and financial services industry. In addition, certain financial institutions that experienced negative operating results, including some of our clients, have failed, leading to further consolidation. These consolidations, including those spurred by failures, reduce our number of potential clients and may reduce our number of existing clients, which could adversely affect our revenue, even if the events do not reduce the aggregate activities of the consolidated entities. Further, if our clients or our partners across any of our businesses fail, merge with or are acquired by other entities that are not our clients or our partners, or that use fewer of our services, they may discontinue or reduce use of our services. It is also possible that larger financial institutions resulting from consolidations would have greater leverage in negotiating terms or could decide to perform in-house some or all of the services we currently provide or could provide. Any of these developments could have an adverse effect on our business, financial condition or results of operations.

Previous wording

The Consumer Financial Protection Bureau ("CFPB") continues to establish rules and regulations for regulating financial and non-financial institutions and providers to those institutions to ensure adequate protection of consumer privacy and to ensure consumers are not impacted by deceptive business practices, as well as to provide examination and supervisory authority over consumer reporting agencies, including ChexSystems. These rules and regulations govern our clients or potential clients and also govern certain of our businesses. These regulations have resulted, and may further result, in the need for us to make capital investments to modify our solutions to facilitate our clients' and potential clients' compliance, as well as to deploy additional processes or reporting to comply with these regulations. In the future, we may need to incur additional expenses to ensure continued compliance with applicable laws and regulations and to investigate, defend and/or remedy actual or alleged violations. Further, requirements of these regulations have resulted, and could further result, in changes in our business practices, our clients' business practices and those of other marketplace participants that may alter the delivery of services to consumers, which have impacted, and could further impact, the demand for our solutions and services, as well as alter the types or volume of transactions that we process on behalf of our clients. As a result, these requirements, or proposed or future requirements, could have an adverse impact on our financial condition, revenue, results of operations, prospects for future growth and overall business.

Current wording

The Consumer Financial Protection Bureau ("CFPB") continues to update and enforce rules and regulations for regulating financial and non-financial institutions and providers to those institutions to ensure adequate protection of consumer privacy and to ensure consumers are not impacted by deceptive business practices, as well as to provide examination and supervisory authority over consumer reporting agencies, including ChexSystems. These rules and regulations govern our clients or potential clients and also govern certain of our businesses. These regulations have resulted, and may further result, in the need for us to make capital investments to modify our solutions to facilitate our clients' and potential clients' compliance, as well as to deploy additional processes or reporting to comply with these regulations. In the future, we may need to incur additional expenses to ensure continued compliance with applicable laws and regulations and to investigate, defend and/or remedy actual or alleged violations. Further, requirements of these regulations have resulted, and could further result, in changes in our business practices, our clients' business practices and those of other marketplace participants that may alter the delivery of services to consumers, which have impacted, and could further impact, the demand for our solutions and services, as well as alter the types or volume of transactions that we process on behalf of our clients. As a result, these requirements, or proposed or future requirements, could have an adverse impact on our financial condition, revenue, results of operations, prospects for future growth and overall business.

Previous wording

Moreover, the legislative and regulatory landscape continues to evolve, and we expect that it may cover alternative payment types, including digital and crypto currencies. Any failure to comply with such laws and regulations could expose us to liability, regulatory scrutiny and/or reputational damage. Financial crimes laws may be interpreted and applied inconsistently from country to country and may impose inconsistent or conflicting requirements. Complying with varying jurisdictional requirements could increase the costs and complexity of compliance, including associated recordkeeping costs, or could require us to change our business practices in a manner adverse to our business.

Current wording

Moreover, the legislative and regulatory landscape continues to evolve, and we expect that it may cover alternative payment types, including digital and crypto currencies. The regulatory environment for crypto assets, stablecoins, and digital currencies is rapidly evolving, with increased oversight from U.S. agencies such as the SEC, CFTC, and FinCEN, as well as global counterparts. Recent developments, including the European Union’s Markets in Crypto-Assets (MiCA) regulation, U.S. legislation such as the GENIUS Act, and other legislative initiatives, signal a trend toward increased oversight, more robust compliance obligations, and a move toward harmonized global standards. FIS closely monitors regulatory changes, to ensure any existing or new business models, product offerings, and risk and compliance programs adapt to new regulatory requirements. Any failure to comply with such laws and regulations could expose us to liability, regulatory scrutiny and/or reputational damage. Financial crimes laws may be interpreted and applied inconsistently from country to country and may impose inconsistent or conflicting requirements. Complying with varying jurisdictional requirements could increase the costs and complexity of compliance, including associated recordkeeping costs, or could require us to change our business practices in a manner adverse to our business.

Previous wording

Further, our business may be constrained by current and future laws and regulations governing the development, use and deployment of artificial intelligence (including machine learning) ("AI") technologies. These laws and regulations are continuously and rapidly evolving, and there is no single global regulatory framework for AI, creating further uncertainties regarding compliance with such laws and regulations. As a result, our ability to leverage AI could be restricted by burdensome and costly regulatory requirements.

Current wording

Further, our business may be constrained by current and future laws and regulations governing the development, use and deployment of AI (including machine learning) technologies. These laws and regulations are continuously and rapidly evolving, and there is no single global regulatory framework for AI, creating further uncertainties regarding compliance with such laws and regulations. As a result, our ability to leverage AI could be restricted by burdensome and costly regulatory requirements.

Previous wording

Additionally, in some markets in which we operate, our clients will require us to support them in achieving compliance with increasingly complex and prescriptive regulatory requirements relating to digital operational resilience. For example, under DORA, our E.U. financial entity clients will require us, as a third-party provider of information and communication technology services, to contract with and manage our relationships with such clients (and, where applicable, our relationships with critical third-party technology vendors in our supply chain) in accordance with the requirements of DORA. Failure to support our clients in achieving compliance with DORA and similar global regulatory regimes may cause us to lose revenue, clients, and/or result in damage to our reputation, and may also attract scrutiny from regulators.

Current wording

Additionally, in some markets in which we operate, our clients require us to support them in achieving compliance with increasingly complex and prescriptive regulatory requirements relating to digital operational resilience. For example, under DORA, our E.U. financial entity clients require us, as a designated Critical Third-Party Provider of information and communication technology services, to contract with and manage our relationships with such clients (and, where applicable, our relationships with other critical third-party technology vendors in our supply chain) in accordance with the requirements of DORA. Failure to support our clients in achieving compliance with DORA and similar global regulatory regimes may cause us to lose revenue, clients, and/or result in damage to our reputation, and may also attract scrutiny from regulators.

Previous wording

The Company is subject to numerous global privacy, data protection, cybersecurity, cyber resilience, and AI laws and regulations, which are continuing to change in ways that impose increasingly complex and costly compliance obligations on us and that have had, and are expected to continue to have, a significant impact on our operations. Failure to comply with new and evolving laws and regulations in these areas could result in significant penalties, damage to our reputation, and loss of business. We have incurred, and will continue to incur, costs to comply with these new laws and regulations. There are also several additional laws being considered by state legislatures, the U.S. Congress, and governments around the world. As a result, we expect that a more substantial compliance effort with varying regimes in different jurisdictions will continue to be necessary in the future, which has the potential to further increase the cost and complexity of our business. Moreover, privacy, data protection, cybersecurity, cyber resilience, and AI laws may be interpreted and applied inconsistently from country to country and may impose inconsistent or conflicting requirements. Complying with varying jurisdictional requirements could increase the costs and complexity of compliance and associated recordkeeping costs or require us to change our business practices in a manner adverse to our business and to incur additional costs. Data localization requirements in evolving privacy, data protection, cybersecurity, cyber resilience, and AI laws could also increase the cost and alter the approach to housing data around the world. In addition, our businesses are increasingly subject to laws and regulations relating to digital transformation, surveillance, encryption, and data onshoring in the jurisdictions in which we operate. For example, under DORA, E.U. regulators are increasingly seeking to mitigate cyber threats and enhance digital resilience within the financial system through new regulations targeting the provision of critical third-party technology services. Compliance with these laws and regulations may require us to change our technology for information security, operational infrastructure, policies, and procedures, which could be time-consuming and costly and may result in additional regulatory burdens for the Company. Furthermore, compliance with these laws and regulations may indirectly impact us in circumstances where we act as a third-party service provider to clients, who are themselves subject to these laws and regulations and who will expect us to take appropriate steps to support them in achieving compliance.

Current wording

The Company is subject to numerous global privacy, data protection, cybersecurity, cyber resilience, and AI laws and regulations, which are continuing to change in ways that impose increasingly complex and costly compliance obligations on us and that have had, and are expected to continue to have, a significant impact on our operations. Failure to comply with applicable data protection laws, as well as new and evolving laws and regulations in these areas, could result in significant penalties, damage to our reputation, and loss of business. Additionally, a breach of applicable data protection laws may result in regulatory investigations, reputational damage, orders to cease or change our data processing activities, enforcement notices, assessment notices (for a compulsory audit) and/or civil claims (including class actions). We have incurred, and will continue to incur, costs to comply with these evolving laws and regulations. There are several additional laws being considered by state legislatures, the U.S. Congress, and governments around the world. As a result, we expect that a more substantial effort to comply with varying regimes in different jurisdictions will continue to be necessary in the future, which has the potential to further increase the cost and complexity of our business. Moreover, privacy, data protection, cybersecurity, cyber resilience, and AI laws may be interpreted and applied inconsistently from country to country and may impose inconsistent or conflicting requirements. Complying with varying jurisdictional requirements could increase the costs and complexity of compliance and associated recordkeeping costs or require us to change our business practices in a manner adverse to our business and to incur additional costs. Since we are subject to the supervision of relevant data protection authorities under multiple legal regimes, we could be fined under those regimes independently in respect of the same breach. Data localization requirements in evolving privacy, data protection, cybersecurity, cyber resilience, and AI laws could also increase the cost and alter the approach to housing data around the world. In addition, our businesses are increasingly subject to laws and regulations relating to digital transformation, surveillance, encryption, and data onshoring in the jurisdictions in which we operate. For example, through requirements established under DORA and Network and Information Security Directive 2, Directive (EU) 2022/2555, (NIS2), E.U. regulators are increasingly seeking to mitigate cyber threats and enhance digital resilience within the financial and technological ecosystem through new regulations targeting the provision of critical third-party technology services. Compliance with these laws and regulations may require us to change our technology for information security, operational infrastructure, policies, and procedures, which could be time-consuming and costly and may result in additional regulatory burdens fo…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Our ability to compete depends in some part upon our proprietary solutions and technology. Despite our efforts to protect our proprietary rights, unauthorized parties may attempt to copy aspects of our solutions or to obtain and use information that we regard as proprietary or challenge the validity of our patents with governmental authorities. Policing unauthorized use of our proprietary rights is difficult. We cannot make any assurances that the steps we have taken will prevent misappropriation of, or infringement upon, technology or that the agreements entered into for that purpose will be enforceable. Effective patent, trademark, service mark, copyright, and trade secret protection may not be available in every country in which our applications and services are made available. Misappropriation of our intellectual property or potential litigation concerning such matters could have an adverse effect on our business, financial condition or results of operations. As we increase our international business, we are subject to further risks of misappropriation of, or infringement on, our intellectual property in countries which have laws that are less protective of intellectual property or are enforced in a less protective manner.

Current wording

Our ability to compete depends in some part upon our proprietary solutions and technology. Despite our efforts to protect our proprietary rights, unauthorized parties may attempt to copy aspects of our solutions or to obtain and use information that we regard as proprietary or challenge the validity of our patents with governmental authorities. In addition, use of AI technologies may result in the release of confidential or proprietary information which could limit our ability to protect, or prevent us from protecting, our intellectual property rights. Policing unauthorized use of our proprietary rights is difficult. We cannot make any assurances that the steps we have taken will prevent misappropriation of, or infringement upon, technology or that the agreements entered into for that purpose will be enforceable. Effective patent, trademark, service mark, copyright, and trade secret protection may not be available in every country in which our applications and services are made available. Misappropriation of our intellectual property or potential litigation concerning such matters could have an adverse effect on our business, financial condition or results of operations. As we increase our international business, we are subject to further risks of misappropriation of, or infringement on, our intellectual property in countries which have laws that are less protective of intellectual property or are enforced in a less protective manner.

Previous wording

Incorporating AI technologies into our business offers significant potential to enhance the value of the solutions and services we provide to our clients. If we are unsuccessful in identifying opportunities to expand our portfolio with AI capabilities to strengthen or maintain our market position or enhance our customers' experiences, we may have a competitive disadvantage in developing new products and operating our business. However, AI algorithms may produce unfair, unintended, inaccurate, biased or discriminatory outcomes which could be difficult to detect or explain. Further, the training data underlying third-party AI models may also inadvertently breach intellectual property, privacy or other rights and result in the unauthorized use of confidential information. The integration of AI introduces a variety of risks and uncertainties that may harm our reputation, expose us to lawsuits from consumers or other third parties, introduce security vulnerabilities to our information systems, or have other unintended consequences if we are not successful in mitigating such risks. AI systems may have unintended societal impacts and negative outcomes, such as algorithmic errors that result in inadvertent discrimination or bias. Ensuring that our AI systems are used ethically and in a way that aligns with societal values is critical to maintaining trust with our clients, their customers, and regulators, and will likely be required under laws and regulations governing AI systems.

Current wording

Incorporating AI technologies into our business offers significant potential to enhance the value of the solutions and services we provide to our clients. If we are unsuccessful in identifying opportunities to expand our portfolio with AI capabilities to strengthen or maintain our market position or enhance our customers' experiences, we may have a competitive disadvantage in developing new products and operating our business. However, AI algorithms may produce unfair, unintended, inaccurate, biased or discriminatory outcomes which could be difficult to detect or explain. Further, the training data underlying third-party AI models may also inadvertently breach intellectual property, privacy or other rights and result in the unauthorized use of confidential information. The integration of AI introduces a variety of risks and uncertainties that may harm our reputation, expose us to lawsuits from consumers or other third parties, introduce security vulnerabilities to our information systems, or have other unintended consequences if we are not successful in mitigating such risks. AI systems may have unintended societal impacts and negative outcomes, such as algorithmic errors that result in inadvertent discrimination or bias. Ensuring that our AI systems are used ethically and in a way that aligns with societal values is critical to maintaining trust with our clients, their customers, and regulators, and will likely be required under laws and regulations governing AI systems. Additionally, AI systems, whether developed internally or integrated from third-party suppliers, may be susceptible to security vulnerabilities. If these systems are targeted or exploited by cyberattacks, we may face financial and operational costs related to recovery and remediation, required public disclosure, as well as potential reputational damage. The increased sophistication of bad actors raises the risk of significant disruptions, which could impact our operations, as well as customer trust.

Previous wording

The regulatory landscape surrounding AI is evolving quickly, and the jurisdictions in which we operate are increasingly implementing new, complex and sometimes conflicting compliance requirements. For instance, the E.U. AI Act imposes a number of requirements (some of which take effect in August 2025, August 2026 and August 2027) that differ depending on the type and use of a particular AI system, but which will at a minimum include extensive documentation and transparency requirements. These regulatory changes introduce additional risks, including the possibility of failing to meet compliance obligations, which could result in substantial fines, penalties or other regulatory actions.

Current wording

The regulatory landscape surrounding AI is evolving quickly, and the jurisdictions in which we operate are increasingly implementing new, complex and sometimes conflicting compliance requirements. For instance, the E.U. AI Act imposes a number of requirements (some of which took effect in August 2025 and will take effect in August 2026 and August 2027) that differ depending on the type and use of a particular AI system, but which will at a minimum include extensive documentation and transparency requirements. Meanwhile, several U.S. states have adopted AI-specific frameworks or are considering applying existing consumer and data protection laws to regulate AI. These regulatory changes introduce additional risks, including the possibility of failing to meet compliance obligations, which could result in substantial fines, penalties or other regulatory actions.

Previous wording

We settle funds on behalf of financial institutions, other businesses and consumers and receive funds from clients, card issuers, payment networks and consumers on a daily basis for a variety of transaction types. Transactions facilitated by us include debit card, credit card, electronic bill payment transactions, banking payments and check clearing that supports consumers, financial institutions and other businesses. These payment activities rely upon the technology infrastructure that facilitates the verification of activity with counterparties, the facilitation of the payment and the detection or prevention of fraudulent payments. A compromise of our continuity of operations, integrity of processing, or ability to detect or prevent fraudulent payments could result in a financial loss to us. In addition, we rely on various financial institutions to provide treasury services in support of funds settlement for certain of our solutions. An inability to obtain such treasury services in the future could have a material adverse effect on our business, financial condition or results of operations. Furthermore, if one of our clients, for which we facilitate settlement, defaults on settlement or suffers a fraudulent event due to a deficiency in their controls, then we may suffer a financial loss if the client does not have sufficient capital to cover the loss.

Current wording

We settle funds on behalf of financial institutions, other businesses and consumers and receive funds from clients, card issuers, payment networks and consumers on a daily basis for a variety of transaction types. Transactions facilitated by us include debit card, credit card, electronic bill payment transactions, banking payments and check clearing that supports consumers, financial institutions and other businesses. These payment activities rely upon the technology infrastructure that facilitates the verification of activity with counterparties, the facilitation of the payment and the detection or prevention of fraudulent payments. A compromise of our continuity of operations, integrity of processing, or ability to detect or prevent fraudulent payments has resulted, and could in the future result, in a financial loss to us. Furthermore, if one of our clients, for which we facilitate settlement, defaults on settlement or suffers a fraudulent event due to a deficiency in their controls, then we may suffer a financial loss if the client does not have sufficient capital to cover the loss.

Previous wording

Our international operations represented approximately 22% of our total 2024 revenue and are largely conducted in currencies other than the U.S. Dollar, including the British Pound Sterling, Euro, Brazilian Real, Australian Dollar, Swedish Krona, Swiss Franc and Indian Rupee. Our business, financial condition or results of operations could be adversely affected due to a variety of factors, including the following:

Current wording

Our international operations represented approximately 23% of our total 2025 revenue and are largely conducted in currencies other than the U.S. Dollar, including the British Pound Sterling, Euro, Swedish Krona, Australian Dollar, Brazilian Real, Swiss Franc, Canadian Dollar and Indian Rupee. Our business, financial condition or results of operations could be adversely affected due to a variety of factors, including the following:

Previous wording

In the event that we believe or have reason to believe that our employees, contractors or agents have or may have violated such laws, we may be required to investigate (or to have outside counsel investigate) the relevant facts and circumstances. Detecting, investigating and resolving actual or alleged violations can be an extensive process and require a significant diversion of time, resources and attention from senior management. Further, we cannot assure that any such investigation will successfully uncover all relevant facts and circumstances. Any violation of the FCPA, the U.K. Bribery Act or other applicable anti-bribery or anti-corruption laws could result in whistleblower complaints, adverse media coverage, investigations, loss of export privileges, and criminal or civil sanctions, penalties and fines, any of which could adversely affect our business, financial condition or results of operations.

Current wording

In the event that we believe or have reason to believe that our employees, contractors or agents have or may have violated such laws, we may be required to investigate (or to have outside counsel investigate) the relevant facts and circumstances. Although we maintain multiple reporting channels in which employees, contractors and other individuals can report concerns without retaliation, detecting, investigating and resolving actual or alleged violations can be an extensive process and require a significant diversion of time, resources and attention from senior management. Further, we cannot assure that any such investigation will successfully uncover all relevant facts and circumstances. Any violation of the FCPA, the U.K. Bribery Act or other applicable anti-bribery or anti-corruption laws could result in whistleblower complaints, adverse media coverage, investigations, loss of export privileges, and criminal or civil sanctions, penalties and fines, any of which could adversely affect our business, financial condition or results of operations.

Previous wording

Our global operations are susceptible to global events, including threats or acts of war, such as the Russia-Ukraine war and the Israel-Hamas conflict, threats or acts of terrorism, international conflicts, political instability, natural disasters, and power or communications failures. We are also susceptible to a widespread outbreak of an illness or other health issue, such as the COVID-19 pandemic. These events can spread to different locations across the globe and can have an adverse effect on the global economy, reducing consumer and corporate spending upon which our revenue depends. Individual employees can become ill, quarantined, or otherwise unable to work and/or travel due to health reasons or governmental restrictions. Some of our operations are in countries where the effects of a widespread illness could be magnified due to health care systems that are less well-developed than in the U.S. The occurrence of any of these events could have an adverse effect on our business, financial condition or results of operations.

Current wording

Our global operations are susceptible to global events, including threats or acts of war, such as the Russia-Ukraine war and conflicts or tensions in the Middle East, threats or acts of terrorism, international conflicts, political instability, natural disasters, and power or communications failures. We are also susceptible to a widespread outbreak of an illness or other health issue or pandemic. These events can spread to different locations across the globe and can have an adverse effect on the global economy, reducing consumer and corporate spending upon which our revenue depends. Individual employees can become ill, quarantined, or otherwise unable to work and/or travel due to health reasons or governmental restrictions. Some of our operations are in countries where the effects of a widespread illness could be magnified due to health care systems that are less well-developed than in the U.S. The occurrence of any of these events could have an adverse effect on our business, financial condition or results of operations.

Previous wording

We may be subject to increased costs, regulations, reporting or other requirements, standards or expectations regarding sustainability and climate change-driven impacts on our business. While we seek to mitigate our business risks associated with climate change, this may require us to incur substantial costs and some of these risks may persist. Changing market dynamics, global policy developments, heightened focus from governmental, media, community, industry and investor stakeholders, and increasing frequency and impact of extreme weather events all have the potential to disrupt our business or the businesses of our customers, vendors and technology partners. Further, there is increased scrutiny, including by governments, regulators, investors, employees, clients and other stakeholders, on sustainability matters, which has resulted in new or additional legal and regulatory requirements and may require increased compliance and operational costs. In addition, if we fail to comply with applicable legal requirements and maintain practices that meet our stakeholders' evolving expectations, it could harm our reputation, adversely affect our ability to attract and retain clients and expose us to increased scrutiny from investors and regulatory authorities. Any of these developments could adversely affect our business, financial condition or results of operations.

Current wording

We are subject to dynamic, and sometimes conflicting, laws, regulations and other directives that govern a wide array of issues related to sustainability and we may be subject to increased costs, regulations, reporting or other requirements, standards or expectations regarding sustainability and climate change-driven impacts on our business. While we seek to mitigate our business risks associated with climate change, this may require us to incur substantial costs and some of these risks may persist. Changing market dynamics, global and domestic policy developments, heightened focus from governmental, media, community, industry and other stakeholders, and increasing frequency and impact of extreme weather events, such as flooding or windstorms, all have the potential to disrupt our business or the businesses of our customers, vendors and technology partners. Further, there is increased scrutiny, including by governments, regulators, investors, employees, clients and other stakeholders, on sustainability matters, which has resulted in new or additional legal and regulatory requirements and may require increased compliance and operational costs. In addition, if we fail or are perceived to fail to comply with applicable legal requirements and maintain practices that meet our stakeholders' evolving and potentially divergent expectations, it could harm our reputation, adversely affect our ability to attract and retain clients and expose us to increased scrutiny from investors and regulatory authorities. Any of these developments could adversely affect our business, financial condition or results of operations.

Previous wording

We are involved in various litigation matters, including in some instances class-action cases and patent infringement litigation. If we are unsuccessful in our defense of litigation matters, we may be forced to pay damages and/or change our business practices, any of which could have an adverse effect on our business, financial condition or results of operations.

Current wording

We are involved in various litigation matters, including from time-to-time class-action cases and patent infringement litigation. If we are unsuccessful in our defense of litigation matters, we may be forced to pay damages and/or change our business practices, any of which could have an adverse effect on our business, financial condition or results of operations.

Previous wording

Our tax returns and positions are subject to review and audit by federal, state, local and international taxing authorities. An unfavorable outcome to a tax audit could result in higher tax expense and could negatively impact our effective tax rate, financial position, results of operations and cash flows in the current and/or future periods. On December 15, 2022, the EU Member States formally adopted the EU’s Pillar Two Directive, which generally provides for a minimum effective tax rate of 15%, as established by the Organization for Economic Co-operation and Development Pillar Two Framework that was supported by over 130 countries worldwide. A significant number of countries are also implementing similar legislation. We are monitoring developments, including in countries that have enacted legislation, and do not currently expect a material adverse impact to the financial statements. We will continue to evaluate Pillar Two legislation and other future tax law changes that could result in negative impacts. In addition, tax-law amendments in the U.S. and other jurisdictions could significantly impact how U.S. multinational corporations are taxed. Although we cannot predict whether or in what form such legislation will pass, if enacted it could have an adverse effect on our business, financial condition or results of operations.

Current wording

Our tax returns and positions are subject to review and audit by federal, state, local and international taxing authorities. An unfavorable outcome to a tax audit could result in higher tax expense and could negatively impact our effective tax rate, financial position, results of operations and cash flows in the current and/or future periods. On December 15, 2022, the E.U. Member States formally adopted the E.U.’s Pillar Two Directive, which generally provides for a minimum effective tax rate of 15%, as established by the Organization for Economic Co-operation and Development Pillar Two Framework that was supported by over 130 countries worldwide. A significant number of countries are also implementing similar legislation. We are monitoring developments, including in countries that have enacted legislation, and do not currently expect a material adverse impact to the financial statements. We will continue to evaluate Pillar Two legislation and other future tax law changes that could result in negative impacts. In addition, tax-law amendments in the U.S. and other jurisdictions could significantly impact how U.S. multinational corporations are taxed. Although we cannot predict whether or in what form such legislation will pass, if enacted it could have an adverse effect on our business, financial condition or results of operations.

Previous wording

Strategic acquisitions and divestitures we have made in the past, and may make in the future, present significant risks and uncertainties that could adversely affect our business, financial condition, results of operations and cash flows. These risks include the following:

Current wording

Strategic acquisitions and divestitures we have made in the past (including the Issuer Solutions Acquisition and the 2026 Worldpay Minority Sale), and may make in the future, present significant risks and uncertainties that could adversely affect our business, financial condition, results of operations and cash flows. These risks include the following:

Previous wording

•difficulty in evaluating potential acquisitions, including the risk that our due diligence does not identify or fully assess valuation issues, potential liabilities or other acquisition risks;

Current wording

•difficulty in evaluating potential acquisitions, including the risk that our due diligence does not identify or fully assess valuation issues, potential liabilities, regulatory or legal non-compliance issues, or other acquisition risks;

Previous wording

•difficulty and expense in consolidating, integrating, and rationalizing IT infrastructure and integrating acquired software;

Current wording

•difficulty and expense in consolidating, integrating, and rationalizing IT infrastructure, integrating acquired software, and remediating regulatory or legal non-compliance in acquired entities;

Previous wording

•challenges in achieving strategic objectives, cost savings and other benefits expected from acquisitions;

Current wording

•challenges in achieving strategic objectives, cost savings, revenue growth, and other benefits expected from acquisitions on the time frame anticipated or at all;

Previous wording

•risk that acquired companies are subject to new regulatory regimes or oversight where we have limited experience, which may result in additional compliance costs and potential regulatory penalties;

Current wording

•risk that acquired companies are subject to new regulatory regimes or oversight where we have limited experience, which may result in additional compliance costs, remediation expenses, and potential regulatory penalties;

Previous wording

As of December 31, 2024, goodwill aggregated to $17.3 billion, or 51% of total assets, and intangible assets aggregated to $1.3 billion, or 4% of total assets. Current accounting rules require goodwill to be assessed for impairment at least annually or whenever changes in circumstances indicate potential impairment and require intangible assets with finite useful lives to be reviewed for impairment whenever events or changes in circumstances indicate that the carrying amount may not be recoverable. Factors that may be considered a change in circumstance include significant underperformance relative to historical or projected future operating results, a significant decline in our stock price and market capitalization, and negative industry or economic trends. If worldwide or U.S. economic conditions decline significantly with prolonged negative impacts to bank spending and consumer behavior, or if other business or market changes significantly impact our outlook, then the remaining carrying amount of our goodwill and other intangible assets may no longer be recoverable, and we may be required to record an impairment charge, which would have a negative impact on our results of operations. We will continue to monitor the fair value of our reporting units and other intangible assets as well as our market capitalization and the impact of any prolonged economic downturn on our business to determine the likelihood of impairment.

Current wording

As of December 31, 2025, goodwill aggregated to $17.8 billion, or 53% of total assets, and intangible assets aggregated to $1.0 billion, or 3% of total assets. Current accounting rules require goodwill to be assessed for impairment at least annually or whenever changes in circumstances indicate potential impairment and require intangible assets with finite useful lives to be reviewed for impairment whenever events or changes in circumstances indicate that the carrying amount may not be recoverable. Factors that may be considered a change in circumstance include significant underperformance relative to historical or projected future operating results, a significant decline in our stock price and market capitalization, and negative industry or economic trends. If worldwide or U.S. economic conditions decline significantly with prolonged negative impacts to bank spending and consumer behavior, or if other business or market changes significantly impact our outlook, then the remaining carrying amount of our goodwill and other intangible assets may no longer be recoverable, and we may be required to record an impairment charge, which would have a negative impact on our results of operations. We will continue to monitor the fair value of our reporting units and other intangible assets as well as our market capitalization and the impact of any prolonged economic downturn on our business to determine the likelihood of impairment.

Previous wording

As of December 31, 2024, we had total debt of approximately $11.3 billion. Our level of debt, or any increase in our debt level, could adversely affect our business, financial condition, operating results and operational flexibility, including as follows: (i) the debt level may cause us to have difficulty borrowing money in the future for working capital, capital expenditures, acquisitions or other purposes; (ii) our debt level may limit operational flexibility and our ability to pursue business opportunities and implement certain business strategies; (iii) some of our debt has a variable rate of interest, which exposes us to the risk of increased interest rates; (iv) we have a higher level of debt than some of our competitors or potential competitors, which may cause a competitive disadvantage and may reduce flexibility in responding to changing business and economic conditions, including increased competition and vulnerability to general adverse economic and industry conditions; (v) there are significant debt maturities or maturities that may need to be refinanced, potentially at higher rates; and (vi) failure to satisfy our obligations under our outstanding debt or failure to comply with the financial or other restrictive covenants contained in the indenture governing our senior notes or in our credit facility could result in an event of default that could cause all of our debt to become due and payable.

Current wording

As of December 31, 2025, we had total debt of approximately $13.1 billion. Our level of debt, or any increase in our debt level, could adversely affect our business, financial condition, operating results and operational flexibility, including as follows: (i) the debt level may cause us to have difficulty borrowing money in the future for working capital, capital expenditures, acquisitions or other purposes; (ii) our debt level may limit operational flexibility and our ability to pursue business opportunities and implement certain business strategies; (iii) some of our debt has a variable rate of interest, which exposes us to the risk of increased interest rates; (iv) we have a higher level of debt than some of our competitors or potential competitors, which may cause a competitive disadvantage and may reduce flexibility in responding to changing business and economic conditions, including increased competition and vulnerability to general adverse economic and industry conditions; (v) there are significant debt maturities or maturities that may need to be refinanced, potentially at higher rates; and (vi) failure to satisfy our obligations under our outstanding debt or failure to comply with the financial or other restrictive covenants contained in the indenture governing our senior notes or in our credit facilities could result in an event of default that could cause all of our debt to become due and payable, and cross-default provisions in our credit agreements could cause a default on one facility to trigger defaults across multiple financing arrangements, potentially accelerating repayment obligations beyond the initially defaulted facility.

Previous wording

At December 31, 2024, the Company had outstanding approximately €4.0 billion aggregate principal amount of Euro-denominated senior notes and approximately €0.1 billion aggregate principal amount of Euro-denominated commercial paper, or the combined equivalent of approximately $4.3 billion aggregate principal amount. A vast majority of this EUR denominated indebtedness has been economically converted into USD through derivative instruments (see "Financial Instruments" in note 15 to the consolidated financial statements).

Current wording

At December 31, 2025, the Company had outstanding approximately €3.4 billion aggregate principal amount of Euro-denominated senior notes and approximately €0.1 billion aggregate principal amount of Euro-denominated commercial paper, or the combined equivalent of approximately $4.1 billion aggregate principal amount. A vast majority of this EUR denominated indebtedness has been economically converted into USD through derivative instruments (see "Financial Instruments" in note 15 to the consolidated financial statements).

Previous wording

If our cash flows generated in foreign currencies are insufficient to settle our foreign currency denominated indebtedness, then we may need to exchange U.S. Dollars or funds in other currencies to make such payments, which could result in increased costs to us in the event of adverse changes in currency exchange rates. We have utilized and expect to continue to utilize foreign currency forward contracts and other hedges in an effort to mitigate currency risk, but we cannot make assurances that such hedging arrangements will be effective or will remain available to us on acceptable terms, or at all. In addition, we cannot predict economic and market conditions (including prevailing interest rates and foreign currency exchange rates) at the applicable times when our various series of Euro-denominated indebtedness are scheduled to mature, nor can there be any assurance that we would be able to refinance any series of our Euro-denominated indebtedness on acceptable terms at any such time, all of which could have an adverse financial impact on us.

Current wording

If our cash flows generated in foreign currencies are insufficient to settle our foreign currency denominated indebtedness, then we may need to exchange U.S. Dollars or funds in other currencies to make such payments, which could result in increased costs to us in the event of adverse changes in currency exchange rates. We have utilized and expect to continue to utilize foreign currency forward contracts and other hedges in an effort to mitigate currency risk, but we cannot make assurances that such hedging arrangements will be effective or will remain available to us on acceptable terms, or at all. In addition, we cannot predict economic and market conditions (including prevailing interest rates and foreign currency exchange rates) at the applicable times when our various series of Euro-denominated indebtedness are scheduled to mature, nor can we predict the impact of governmental monetary, trade or tax policy changes that could cause disproportionate foreign exchange rate movements. We cannot provide any assurance that we would be able to refinance any series of our Euro-denominated indebtedness on acceptable terms at any such time, all of which could have an adverse financial impact on us.

Previous wording

Our exposure to market risk for changes in interest rates relates to our short-term commercial paper borrowings and Revolving Credit Facility. In the future, we may have additional borrowings under existing or new variable-rate debt. Increases in interest rates on variable-rate debt would increase our interest expense. A rising interest rate environment could increase the cost of refinancing existing debt and incurring new debt, which could have an adverse effect on our financing costs.

Current wording

Our exposure to market risk for changes in interest rates relates to our short-term commercial paper borrowings and revolving credit facilities. Interest rates have increased significantly from recent historical levels and may remain elevated for an extended period. In response to the current interest rate environment, we may need to rebalance our variable debt instruments, potentially increasing our reliance on certain facilities while reducing others. In the future, we may have additional borrowings under existing or new variable-rate debt. Increases in interest rates on variable-rate debt would increase our interest expense. A sustained higher interest rate environment could increase the cost of refinancing existing debt and incurring new debt, create challenges in accessing certain credit markets, and limit our flexibility in managing our debt portfolio composition, which could have an adverse effect on our financing costs and overall financial condition.

Previous wording

The Company maintains investment grade credit ratings from the major U.S. rating agencies on its senior unsecured debt (S&P BBB, Moody's Baa2, Fitch BBB), as well as its commercial paper program (S&P A-2, Moody's P-2, Fitch F2). Failure to maintain investment grade rating levels could adversely affect the Company's cost of funds and liquidity and access to certain capital markets but would not have an adverse effect on our ability to access our existing Revolving Credit Facility. Please note that a security rating is not a recommendation to buy, sell or hold securities, that it may be subject to revision or withdrawal at any time by the assigning rating organization, and that each rating should be evaluated independently of any other rating.

Current wording

The Company maintains investment grade credit ratings from the major U.S. rating agencies on its senior unsecured debt (S&P BBB, Moody's Baa2, Fitch BBB), as well as its commercial paper program (S&P A-2, Moody's P-2, Fitch F2). Failure to maintain investment grade rating levels could adversely affect the Company's cost of funds and liquidity and access to certain capital markets but would not have an adverse effect on our ability to access our existing revolving credit facilities. Please note that a security rating is not a recommendation to buy, sell or hold securities, that it may be subject to revision or withdrawal at any time by the assigning rating organization, and that each rating should be evaluated independently of any other rating.

Previous wording

The statements contained in this Form 10-K or in our other documents or in oral presentations or other management statements that are not purely historical are forward-looking statements within the meaning of the U.S. federal securities laws. Statements that are not historical facts, as well as other statements about our expectations, beliefs, intentions, or strategies regarding the future, or other characterizations of future events or circumstances, are forward-looking statements. Forward-looking statements include statements about anticipated financial outcomes, including any earnings outlook or projections, projected revenue or expense synergies or dis-synergies, business and market conditions, outlook, foreign currency exchange rates, deleveraging plans, expected dividends and share repurchases of the Company, the Company's sales pipeline and anticipated profitability and growth, plans, strategies and objectives for future operations, strategic value creation, risk profile and investment strategies, any statements regarding future economic conditions or performance and any statements with respect to the future impacts of the Worldpay Sale or any agreements or arrangements entered into in connection with such transaction. These statements may be identified by words such as "expect," "anticipate," "intend," "plan," "believe," "will," "should," "could," "would," "project," "continue," "likely," and similar expressions, and include statements reflecting future results or outlook, statements of outlook and various accruals and estimates. These statements relate to future events and our future results and involve a number of risks and uncertainties. Forward-looking statements are based on management's beliefs as well as assumptions made by, and information currently available to, management.

Current wording

The statements contained in this Form 10-K or in our other documents or in oral presentations or other management statements that are not purely historical are forward-looking statements within the meaning of the U.S. federal securities laws. Statements that are not historical facts, as well as other statements about our expectations, beliefs, intentions, or strategies regarding the future, or other characterizations of future events or circumstances, are forward-looking statements. Forward-looking statements include statements about anticipated financial outcomes, including any earnings outlook or projections, projected revenue or expense synergies or dis-synergies, business and market conditions, outlook, foreign currency exchange rates, deleveraging plans, expected dividends and share repurchases of the Company, the Company's sales pipeline and anticipated profitability and growth, plans, strategies and objectives for future operations, strategic value creation, risk profile and investment strategies, any statements regarding future economic conditions or performance and any statements with respect to the future impacts of the recently completed acquisition of the Issuer Solutions Business, which has been rebranded as FIS Total Issuing TM Solutions. These statements may be identified by words such as "expect," "anticipate," "intend," "plan," "believe," "will," "should," "could," "would," "project," "continue," "likely," and similar expressions, and include statements reflecting future results or outlook, statements of outlook and various accruals and estimates. These statements relate to future events and our future results and involve a number of risks and uncertainties.