Skip to main content

COMMVAULT SYSTEMS INC

For the period ended Mar 31, 2025. Filed May 5, 2025.

View on SEC.gov

About this filing

A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.

FY2025 · Filed May 5, 2025

CVLT$158.36+0.5%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-K

Period ended 2024-03-31; filed 2024-05-13.

0001169561-24-000039

Item 1A. Risk Factors

Current report: 10-K

Period ended 2025-03-31; filed 2025-05-05.

0001169561-25-000034

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 165 previous paragraphs and 157 current paragraphs.

101 unchanged; 42 reworded; 11 added; 14 removed; 8 previous and 3 current paragraphs rearranged.

Tables are not compared: 1 previous and 1 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (11)

Current report

We are preparing to migrate a significant amount of customers from Red Hat environments, and any disruption, delay, or failure in executing this transition effectively could have a material adverse impact on our business operations and customer relationships.

Current report

Any delays or issues in the execution of this migration may expose us to financial and operational risks. Additionally, ongoing support and coordination during the transition may result in higher operating costs. If we are unable to successfully complete the migration, our operations and reputation could be materially adversely affected.

Current report

•adverse effects in economic conditions in the countries in which we operate, particularly related to the ongoing Russia-Ukraine conflict and the regional conflict in the Middle East;

Current report

Additionally, due to political uncertainty, our third-party service providers are vulnerable to heightened risks of cybersecurity incidents and security and privacy breaches and incidents caused or initiated by nation-state or affiliated actors, including attacks that could materially disrupt our systems, operations and services, or impact our customers systems, operations, and services. For example, in February and April 2025, Microsoft notified the Company about unauthorized activity within our Azure environment by a suspected nation-state threat actor. As part of the ongoing investigation regarding this activity, the Company immediately activated its incident response plan, issued security advisories, and implemented several advanced security measures, including enhanced rotation of credentials and strengthened security monitoring, among other proactive measures. Similarly, supply chain attacks have increased in frequency and severity, and there have been high-profile incidents of third-party service providers causing widespread disruptions to their customers’ infrastructure due to errors in their SaaS offerings. We cannot guarantee that third parties and infrastructure in our supply chain have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our Commvault Cloud platform, systems and network or the systems and networks of third parties that support us and our business. Moreover, we may have limited remedies against third-party providers in the event of a service disruption.

Current report

Our success depends on our technology partners. We rely on Microsoft’s products and services, including Azure, and other third parties to support certain of our products, services, customers, and business operations. Any errors, disruptions, performance problems, cybersecurity incidents, or failures in such third parties’ operational infrastructure could adversely affect our business, brand, financial conditions and results of operations.

Current report

We rely on the technology, infrastructure, and software applications, including software-as-a-service offerings, of certain third parties, such as Microsoft Azure, in order to host or operate certain of our products, services and operational infrastructure. We do not have control over such third parties’ operations. Therefore, we depend on these third parties to protect their infrastructure and operations against damage or interruption from cybersecurity incidents, natural disasters, power or telecommunications failures, criminal acts, and similar events.

Current report

If any of these third-parties’ experience errors, disruptions, cybersecurity incidents, or other performance deficiencies, if their products and services are updated such that our products and services become incompatible, if their products and services fail or become unavailable due to extended outages, interruptions, defects, or otherwise, or if they are no longer available on commercially reasonable terms or prices (or at all), such events may cause errors or failures in our products and services, damages to our reputation or brand, or decline to our revenue and margins. As a result, we could be exposed to legal or contractual liability, our expenses could increase, our ability to manage our operations could be interrupted, and our operational processes could be impaired until equivalent services or technology, if available, are identified, procured, and implemented, all of which may take significant time and resources, increase our costs, and could adversely affect our business.

Current report

Many of these third-party providers impose limitations on their liability for such errors, disruptions, defects, performance deficiencies, or failures. Any renegotiation or renewal of our agreements with these third parties, or a new agreement with another provider, may be on terms that are significantly less favorable to us than our current agreements. Microsoft and other cloud platform providers may furthermore introduce functionality that competes with our products and services, as a result of an acquisition, or their own development.

Current report

Risks Related to Financial, Accounting, Regulatory, Tax, and Other Legal Matters

Current report

Changes in tax laws or tax rulings could materially affect our financial position, results of operations, and cash flows.

Current report

The tax regimes in which we are subject or under which we operate are constantly facing changes in tax laws, regulations, or rulings, or changes in interpretations of existing laws and regulations, and could materially affect our financial position and results of operations. In addition, our tax obligations and effective tax rate in the jurisdictions in which we conduct business could increase in the future, including as a result of the Base Erosion and Profit Shifting ("BEPS") Project that is being led by the Organization for Economic Co-operation and Development ("OECD"), commonly referred to as “BEPS 2.0”. Due to our international business activities, these types of changes to the taxation of our activities could increase our worldwide effective tax rate, the amount of taxes imposed on our business, and our compliance costs, and harm our financial position. We continue to monitor the impact of new global and U.S. legislation on our effective tax rate.
Removed paragraphs (14)

Previous report

Some of our resellers may, either independently or jointly with our competitors, develop and market solutions that compete with our offerings. If this were to occur, these resellers might discontinue marketing and distributing our solutions. In addition, these resellers would have an advantage over us when marketing their competing products and related services because of their existing customer relationships. The occurrence of any of these events could have a material adverse effect on our revenues and results of operations.

Previous report

•our customers’ budgetary constraints;

Previous report

We rely on third-party hosting providers to deliver our SaaS offerings. Therefore, any disruption or interference with our use of these services could adversely affect our business.

Previous report

Our use of third-party hosting facilities requires us to rely on the functionality and availability of the third parties’ services, as well as their data security, which despite our due diligence, may be or become inadequate. Our continued growth depends in part on the ability of our existing and potential customers to use and access our cloud services or our website to download our software within an acceptable amount of time. Third-party service providers operate platforms that we access, and we are vulnerable to their service interruptions. We may experience interruptions, delays, and outages in service and availability due to problems with our third-party service providers’ infrastructure. This infrastructure’s lack of availability could be due to many potential causes, including technical failures, power shortages, natural disasters, fraud, terrorism, or security attacks that we cannot predict or prevent. Such outages could trigger our service level agreements and the issuance of credits to our customers, which may impact our business and consolidated financial statements.

Previous report

If we are unable to renew our agreements with our cloud service providers on commercially reasonable terms, an agreement is prematurely terminated, or we need to add new cloud services providers to increase capacity and uptime, we could experience interruptions, downtime, delays, and additional expenses related to transferring to and providing support for these new platforms. Any of the above circumstances or events may harm our reputation and brand, reduce our platforms’ availability or usage, and impair our ability to attract new users, any of which could adversely affect our business, financial condition, and results of operations.

Previous report

Actual or threatened public health crises could adversely affect our business in a material way.

Previous report

As a global company, with employees and customers located around the world in a variety of industries, our performance may be impacted by public health crises, including the COVID-19 pandemic and its variants, which has caused global economic uncertainty. The emergence of a public health threat could pose the risk that our employees, partners, and customers may be prevented from conducting business activities at full capacity for an indefinite period, due to the spread of the disease or suggested or mandated by governmental authorities. Moreover, these conditions can affect the rate of information technology spending and may adversely affect our customers’ willingness to purchase our solutions, delay prospective customers’ purchasing decisions, reduce the value or duration of their contracts, cause our customers to request concessions including extended payment terms or better pricing, or affect attrition rates, all of which could adversely affect our future sales and operating results. The global spread of COVID-19 has created significant uncertainty, and economic disruption. We have undertaken measures to protect our employees, partners, and customers, including allowing our employees to work remotely; however, there can be no assurance that these measures will be sufficient or that we can implement them without adversely affecting our business operations.

Previous report

•adverse effects in economic conditions in the countries in which we operate related specifically to the wars in Israel and Ukraine, the COVID-19 pandemic and the governmental regulations put in place as a result of the virus, and the financial instability of banking institutions;

Previous report

Risks Related to Legal Matters

Previous report

Risks Related to Tax and Accounting

Previous report

Risks Related to our Common Stock

Previous report

We currently, and may in the future, have assets held at financial institutions that may exceed the insurance coverage offered by the Federal Deposit Insurance Corporation (“FDIC”), the loss of which would have a severe negative affect on our operations and liquidity.

Previous report

We may maintain our cash assets at financial institutions in the U.S. in amounts that may be in excess of the FDIC insurance limit of $250,000. Actual events involving limited liquidity, defaults, non-performance or other adverse developments that affect financial institutions, transactional counterparties or other companies in the financial services industry or the financial services industry generally, or concerns or rumors about any events of these kinds or other similar risks, have in the past and may in the future lead to market-wide liquidity problems. In the event of a failure or liquidity issues of or at any of the financial institutions where we maintain our deposits or other assets, we may incur a loss to the extent such loss exceeds the FDIC insurance limitation, which could have a material adverse effect upon our liquidity, financial condition and our results of operations.

Previous report

Similarly, if our customers or partners experience liquidity issues as a result of financial institution defaults or non-performance where they hold cash assets, their ability to pay us may become impaired and could have a material adverse effect on our results of operations, including the collection of accounts receivable and cash flows.
Reworded paragraphs (42)

Previous wording

Risks Related to Our Business

Current wording

Risks Related to Our Business and Industry

Previous wording

The cyber resiliency market is intensely competitive, highly fragmented and characterized by rapidly changing technology and evolving standards, changing customer requirements and frequent new product introductions. Competitors vary in size and in the scope and breadth of the products and services offered.

Current wording

The cyber resiliency market is intensely competitive, highly fragmented and characterized by rapidly changing technology and evolving standards, changing customer requirements and frequent new product introductions. Competitors vary in size and in the scope and breadth of the products and services offered. We must continually innovate to maintain our market position.

Previous wording

The principal competitive factors in our industry include product functionality and integration, platform coverage, ability to scale, price, worldwide sales infrastructure, global technical support, brand recognition and reputation. If we are unable to address these factors, our competitive position could weaken and we could experience a decline in revenues that could adversely affect our business.

Current wording

The principal competitive factors in our industry include product functionality and integration, platform coverage, ability to invest and scale, price, worldwide sales infrastructure, global technical support, brand recognition and reputation. If we are unable to address these factors, our competitive position could weaken and we could experience a decline in revenues that could adversely affect our business.

Previous wording

It is also costly and time-consuming to change data management systems. Most of our new customers have installed data management systems, which gives an incumbent competitor an advantage in retaining a customer because the incumbent already understands the network infrastructure, user demands and information technology needs of the customer, and because some customers are reluctant to invest the time and money necessary to change vendors.

Current wording

It is also costly and time-consuming to change cyber resilience systems. Most of our new customers previously adopted cyber resilience systems, which gives an incumbent competitor an advantage in retaining a customer because the incumbent already understands the network infrastructure, user demands and information technology needs of the customer, and because some customers are reluctant to invest the time and money necessary to change vendors. There are complexities involved in transitioning from traditional on-premises solutions to cloud-based services, including customer adoption rates and the need for scalable infrastructure. Commvault has substantially completed the transition from a perpetual licensing model to a subscription-based model delivered through either term based licenses or SaaS, whereas certain of our competitors are already fully cloud-native.

Previous wording

New competitors entering our markets can have a negative impact on our competitive positioning. In addition, we expect to encounter new competitors as we enter new markets. Furthermore, many of our existing competitors are broadening their operating systems platform coverage. We also expect increased competition from OEMs, including those we partner with, and from systems and network management companies, especially those that have historically focused on the mainframe computer market and have been making acquisitions and broadening their efforts to include data protection products. We expect that competition will increase as a result of future industry consolidation. Increased competition could harm our business by causing, among other things, price reductions of our products, reduced profitability and loss of market share.

Current wording

New competitors entering our markets may have a negative impact on our competitive positioning. As we enter new markets, we expect to encounter new competitors. Many of our existing competitors are broadening their product breadth and scope. We expect increased competition from OEMs, including those we partner with, and from systems and network management companies, especially those that have historically focused on the mainframe computer market and have been making acquisitions and broadening their efforts to include cyber resilience products. We expect that competition will increase as a result of future industry consolidation. Increased competition could harm our business by causing, among other things, price reductions of our products, reduced profitability and loss of market share. Additionally, attracting and retaining skilled professionals is a common challenge in the cyber resilience space, due to the intensely competitive nature of the industry.

Previous wording

We rely significantly on our value-added resellers, systems integrators and corporate resellers, which we collectively refer to as resellers, for the marketing and distribution of our products and services. Resellers are our most significant distribution channel. However, our agreements with resellers are generally not exclusive, are generally renewable annually, typically do not contain minimum sales requirements and in many cases may be terminated by either party without cause. Many of our resellers carry data protection solutions that compete with ours. These resellers may give a higher priority to other software or SaaS applications, including those of our competitors, or may not continue to carry data protection solutions. If a number of resellers were to discontinue or reduce the sales of our products, or were to promote our competitors’ products in lieu of our own, it could have a material adverse effect on our future revenues. Events or occurrences of this nature could seriously harm our sales and results of operations. If we fail to manage our resellers successfully, there may be conflicts between resellers or they could fail to perform as we anticipate, including required compliance with the terms and obligations of our agreement, either of which could reduce our sales or impact our reputation in the market. In addition, we expect that a portion of our sales growth will depend upon our ability to identify and attract new resellers. Our competitors also use reseller arrangements and may be more successful in attracting reseller partners and could enter into exclusive relationships with resellers that make it difficult to expand our reseller network. Any failure on our part to maintain and/or expand our network of resellers could impair our ability to grow revenues in the future.

Current wording

We rely significantly on our value-added resellers, systems integrators and corporate resellers, which we collectively refer to as resellers, for the marketing and distribution of our products and services. Resellers are our most significant distribution channel. However, our agreements with resellers are generally not exclusive, are generally renewable annually, typically do not contain minimum sales requirements and in many cases may be terminated by either party without cause. Many of our resellers carry data protection and cyber resilience solutions that compete with ours. These resellers may give a higher priority to other software or SaaS applications, including those of our competitors, or may not continue to carry data protection and cyber resilience solutions. If a number of resellers were to discontinue or reduce the sales of our products, or were to promote our competitors’ products in lieu of our own, it could have a material adverse effect on our future revenues. Events or occurrences of this nature could seriously harm our sales and results of operations. If we fail to manage our resellers successfully, there may be conflicts between resellers or they could fail to perform as we anticipate, including required compliance with the terms and conditions of our agreement, either of which could reduce our sales or impact our reputation in the market. In addition, we expect that a portion of our sales growth will depend upon our ability to identify and attract new resellers. Our competitors also use reseller arrangements and may be more successful in attracting resellers and could enter into exclusive relationships with resellers that make it difficult to expand our reseller network. Any failure on our part to maintain and/or expand our network of resellers could impair our ability to grow revenues in the future.

Previous wording

In addition, we have a non-exclusive distribution agreement with Arrow pursuant to which Arrow’s primary role is to enable a more efficient and effective distribution channel for our solutions by managing our resellers and leveraging their own industry experience. Arrow accounted for approximately 36% of our total revenues for fiscal 2024 and 37% of our total revenues in both fiscal 2023 and fiscal 2022. If Arrow were to discontinue or reduce the sales of our solutions or if our agreement with Arrow was terminated, and if we were unable to take back the management of our reseller channel or find another distributor to replace Arrow, there could be a material adverse effect on our future business.

Current wording

Further, we have a non-exclusive distribution agreement with Arrow pursuant to which Arrow’s primary role is to enable a more efficient and effective distribution channel for our solutions by managing our resellers and leveraging their own industry experience. Arrow accounted for approximately 35%, 36% and 37% of our total revenues for the years ended March 31, 2025, 2024 and 2023, respectively. If Arrow were to discontinue or reduce the sales of our solutions or if our agreement with Arrow was terminated, and if we were unable to take back the management of our reseller channel or find another distributor to replace Arrow, there could be a material adverse effect on our future business.

Previous wording

Our OEMs sell and integrate our solutions which represents a material portion of our revenues. We have no control over the shipping dates or volumes of systems these OEMs sell and they have no obligation to sell systems incorporating our solutions. They also have no obligation to recommend or offer our solutions exclusively or at all. They have no minimum sales requirements and can terminate our relationship at any time. These OEMs also could choose to develop their own data protection solutions. Our OEM partners compete with one another. If one of our OEM partners views our arrangement with another OEM as competing, it may decide to stop doing business with us. Any material decrease in the volume of sales generated by OEMs could have a material adverse effect on our revenues and results of operations in future periods.

Current wording

Our OEMs sell and integrate our solutions which represents a material portion of our revenues. We have no control over the shipping dates or volumes of systems these OEMs sell and they have no obligation to sell systems incorporating our solutions. They also have no obligation to recommend or offer our solutions exclusively or at all. They have no minimum sales requirements and can terminate our relationship at any time. These OEMs also could choose to develop their own data protection and cyber resilience solutions. Our OEM partners compete with one another. If one of our OEM partners views our arrangement with another OEM as competing, it may decide to stop doing business with us. Any material decrease in the volume of sales generated by OEMs could have a material adverse effect on our revenues and results of operations in the future.

Previous wording

We also sell our solutions via marketplace offerings which enable customers to purchase our solutions through online platforms, typically hosted by a cloud provider. The marketplace allows us to publish an offer which an end user can then purchase directly, or through the assistance of a partner. Similar to our resellers and OEMs, marketplace providers have no obligation to sell or recommend our solutions or offer our solutions exclusively or at all. Sales through the marketplace have not been material to date; however, we anticipate an increase in revenue through this channel. Failure to effectively compete in the marketplace could have a material adverse effect on our revenues and results of operations in future periods.

Current wording

We also sell our solutions via marketplace offerings which enable customers to purchase our solutions through online platforms, typically hosted by a cloud provider. The marketplace allows us to publish an offer which an end user can then purchase directly, or through the assistance of a partner. Similar to our resellers and OEMs, marketplace providers have no obligation to sell or recommend our solutions or offer our solutions exclusively or at all. Failure to effectively compete in the marketplace could have a material adverse effect on our revenues and results of operations in the future.

Previous wording

Most of our support and maintenance agreements are for a one-year term and thereafter, we pursue renewal thereof. Historically, such renewals have represented a significant portion of our total revenue. If our customers do not renew their annual maintenance and support agreements either at all, or on terms that are less favorable to us, our business and financial performance might be adversely impacted.

Current wording

Most of our support and maintenance agreements are for a one-year term and thereafter, we pursue renewal thereof. Historically, such renewals have represented a significant portion of our total revenues. If our customers do not renew their annual maintenance and support agreements, either at all or on terms that are less favorable to us, our business and financial performance might be adversely impacted.

Previous wording

Additionally, a significant amount of our revenues are from term-based software license and SaaS arrangements. The arrangements are typically one to three years in duration. If at the end of the initial term, customers elect to not renew, or they renew terms that are less favorable to us, our business and financial performance might be adversely impacted.

Current wording

Additionally, a significant amount of our revenues are from term-based software license and SaaS arrangements. Those arrangements are typically one to three years in duration. If at the end of the initial term, customers elect to not renew, or they renew on terms that are less favorable to us, our business and financial performance might be adversely impacted.

Previous wording

As a global company, we have become increasingly subject to the risks arising from adverse changes in domestic and global economic and political conditions. Uncertainty in the macroeconomic environment and associated global economic conditions have resulted in volatility in credit, equity, debt and foreign currency markets.

Current wording

As a global company, we have become increasingly subject to the risks arising from adverse changes in domestic and global economic and political conditions. Uncertainty in the macroeconomic environment and associated global economic conditions have in the past resulted in and may continue to result in volatility in credit, equity, debt and foreign currency markets. The U.S. government has and continues to make significant additional changes in U.S. trade policy and may continue to take future actions that could negatively impact U.S. trade. In addition, the U.S. government and certain foreign governments have recently announced new or increased tariffs on imported goods, and additional tariffs or increases in tariffs could be assessed in the future. The future actions of the U.S. administration and foreign governments with respect to tariffs or other international trade agreements and policies remain unclear. A trade war or other governmental action related to tariffs or international trade agreements or policies has the potential to disrupt our international operations and/or the United States or global economy or certain sectors thereof and, thus, could negatively impact our financial performance or business.

Previous wording

Our outstanding accounts receivables are generally not secured. Our standard terms and conditions permit payment within a specified number of days following the receipt of our solution. Volatile economic conditions, including those related to the wars in Israel and Ukraine and the global response to the conflicts, the COVID-19 pandemic and its variants, or the financial instability of banking institutions could result in our customers and resellers facing liquidity concerns leading to them not being able to satisfy their payment obligations to us, which would have a material adverse effect on our financial condition, operating results and cash flows.

Current wording

Our outstanding accounts receivables are generally not secured. Our standard terms and conditions permit payment within a specified number of days following the receipt of our solution. Volatile economic conditions, including those related to the ongoing Russia-Ukraine conflict, the conflicts in the Middle East and the global response to the conflicts, economic downturns, tariffs or the imposition of new tariffs, trade wars, barriers or restrictions, or threats of such actions, supply chain disruptions, or the financial instability of banking institutions could result in our customers and partners facing liquidity concerns leading to them not being able to satisfy their payment obligations to us, which would have a material adverse effect on our financial condition, operating results and cash flows.

Previous wording

In addition, we have transitioned a more significant percentage of our revenue to subscription, or term-based, arrangements. In these arrangements, our customers may pay for solutions over a period of several years. Due to the potential for extended period of collection, we may be exposed to more significant credit risk.

Current wording

In addition, a significant percentage of our revenue is from subscription, or term-based, arrangements. In these arrangements, our customers may pay for solutions over a period of several years. Due to the potential for extended period of collection, we may be exposed to more significant credit risk.

Previous wording

Our solutions operate primarily on the Windows, UNIX, Linux and Novell Netware operating systems; used in conjunction with Microsoft SQL; and on hardware devices of numerous manufacturers. When new or updated versions of these operating systems, solution applications, and hardware devices are introduced, it is often necessary for us to develop updated versions of our solution applications so that they interoperate properly with these systems and devices. We may not accomplish these development efforts quickly or cost-effectively, and it is not clear what the relative growth rates of these operating systems and hardware will be.

Current wording

Our solutions operate primarily on the Windows, UNIX, Linux and Novell Netware operating systems; used in conjunction with Microsoft SQL; and on hardware devices of numerous manufacturers. Our reliance on such hardware components exposes us to potential supply chain disruption, which can delay product deliveries and adversely affect customer satisfaction. When new or updated versions of these operating systems, solution applications, and hardware devices are introduced, it is often necessary for us to develop updated versions of our solution applications so that they interoperate properly with these systems and devices. We may not accomplish these development efforts quickly or cost-effectively, and it is not clear what the relative growth rates of these operating systems and hardware will be.

Previous wording

Potential or existing customers, particularly larger enterprise customers, generally commit significant resources to an evaluation of available solutions and require us to expend substantial time, effort and money educating them as to the value of our solutions. Sales often require an extensive education and marketing effort.

Current wording

Potential or existing customers, particularly government customers and larger enterprise customers, generally commit significant resources to an evaluation of available solutions and require us to expend substantial time, effort and money educating them as to the value of our solutions. Sales often require an extensive education and marketing effort.

Previous wording

We could expend significant funds and resources during a sales cycle and ultimately fail to win the customer. Our sales cycle for all of our products and services is subject to significant risks and delays over which we have little or no control, including:

Current wording

We could expend significant funds and resources during a sales cycle and ultimately fail to win the customer. Our sales cycle for all of our products and services is subject to significant risks and delays over which we have little or no control, including our customers’ budgetary constraints; the timing of our customers’ budget cycles and approval processes; our customers’ willingness to replace their current solutions; our need to educate potential customers about the uses and benefits of our solutions; and the timing of the expiration of our customers’ current agreements for similar solutions.

Previous wording

Demand for data protection and cyber resilience solutions is linked to growth in the amount of data generated and stored, demand for data retention and management (whether as a result of regulatory requirements or otherwise) demand for and adoption of new backup devices and networking technologies, and ability to respond to and recover from data breaches in a secure environment. Because our solutions are concentrated within the data protection and cyber resiliency market, if the demand for backup and data protection solutions devices declines, our sales, profitability and financial condition would be materially adversely affected.

Current wording

Demand for data protection and cyber resilience solutions is linked to growth in the amount of data generated and stored, demand for data retention and management (whether as a result of regulatory requirements or otherwise) demand for and adoption of new backup devices and networking technologies, and ability to respond to and recover from cyber incidents in a secure environment. Because our solutions are concentrated within the data protection and cyber resiliency market, if the demand for backup and data protection solutions devices declines, our sales, profitability and financial condition would be materially adversely affected.

Previous wording

In order to deliver our SaaS offerings via a cloud-based deployment, we have made and will continue to make capital investments and incur substantial costs to implement and maintain this business model. In addition, as we look to deliver new or different cloud-based services, we are making significant technology investments to deliver new capabilities and advance our software to deliver cloud-native customer experiences. Our revenues related to SaaS offerings have increased in recent years. If there is a reduction in demand for these services caused by a lack of customer acceptance, technological challenges, weakening economic or political conditions, security or privacy concerns, inability to properly manage such services, competing technologies and products, decreases in corporate spending or otherwise, our financial results and competitive position could suffer. If these investments do not yield the expected return, or we are unable to decrease the cost of delivering our cloud services, our gross margins, overall financial results, business model and competitive position could suffer.

Current wording

In order to deliver our SaaS offerings via a cloud-based deployment, we have made and will continue to make capital investments and incur substantial costs to implement and maintain this business model. In addition, as we look to deliver new or different cloud-based services, we are making significant technology investments to deliver new capabilities and advance our software to deliver cloud-native customer experiences. Our revenues related to SaaS offerings have increased in recent years. If there is a reduction in demand for these services caused by a lack of customer acceptance, technological challenges, weakening economic or political conditions, including as a result of tariffs or the imposition of new tariffs, trade wars, barriers or restrictions, or threats of such actions, security or privacy concerns, inability to properly manage such services, competing technologies and products, decreases in corporate spending or otherwise, our financial results and competitive position could suffer. If these investments do not yield the expected return, or we are unable to decrease the cost of delivering our cloud services, our gross margins, overall financial results, business model and competitive position could suffer.

Previous wording

Incorrect or improper implementation or use of our data security solutions could result in customer dissatisfaction and harm our business, financial condition, and results of operations.

Current wording

Incorrect or improper implementation or use of our cyber resilience solutions could result in customer dissatisfaction and harm our business, financial condition, and results of operations.

Previous wording

Developing software and technology is expensive, and the investment in product development may involve a long payback cycle. Our research and development expenses were $132.3 million, or 16% of our total revenues in fiscal 2024, $141.8 million, or 18% of our total revenues in fiscal 2023 and $153.6 million, or 20% of our total revenues in fiscal 2022. We believe that we must continue to dedicate a significant amount of resources to our research and development efforts to maintain our competitive position. However, we may not recognize significant revenues from these investments for several years, if at all.

Current wording

Developing software and technology is expensive, and the investment in product development may involve a long payback cycle. Our research and development expenses were $146.3 million, or 15%, of our total revenues in fiscal 2025, $132.3 million, or 16%, of our total revenues in fiscal 2024 and $141.8 million, or 18%, of our total revenues in fiscal 2023. We believe that we must continue to dedicate a significant amount of resources to our research and development efforts to maintain our competitive position. However, we may not recognize significant revenues from these investments for several years, if at all.

Previous wording

We implemented a restructuring plan in fiscal 2024, which we cannot guarantee will achieve its intended results.

Current wording

We completed a restructuring plan in fiscal 2025, which we cannot guarantee will achieve its intended results.

Previous wording

In fiscal 2024, we initiated a restructuring plan to enhance customer satisfaction, optimize operational efficiency, and align our customer experience functions with our strategic goals. We cannot guarantee the restructuring plan will achieve its intended results. Risks associated with this restructuring plan also include additional unexpected costs, adverse effects on employee morale and the failure to meet operation and growth targets due to the loss of key employees, any of which may impair our ability to achieve anticipated results of operations or otherwise harm our business.

Current wording

In fiscal 2024, we initiated a restructuring plan to enhance customer satisfaction, optimize operational efficiency, and align our customer experience functions with our strategic goals. This plan was completed in fiscal 2025. We cannot guarantee the restructuring plan will achieve its intended results. Risks associated with this restructuring plan also include additional unexpected costs, adverse effects on employee morale and the failure to meet operation and growth targets due to the loss of key employees, any of which may impair our ability to achieve anticipated results of operations or otherwise harm our business.

Previous wording

Selling to government entities can be highly competitive, expensive and time consuming, often requiring significant upfront time and expense without any assurance that we will successfully sell our solutions. Government entities may require contract terms that differ from our standard terms and conditions including termination rights favorable for the customer, audit rights, and maintenance of certain security clearances for facilities and employees which can entail administrative time and effort resulting in costs and delays. Government demand for our solutions may be more volatile as they are affected by stringent regulations, public sector budgetary cycles, funding authorizations, and the potential for funding reductions or delays, making the time to close such transactions more difficult to predict.

Current wording

Sales to global federal, state, and local governmental agencies account for a portion of our revenue, and we may in the future increase sales to government entities. This customer base experiences budgetary constraints or shifts in spending priorities regularly which may adversely affect sales of our solutions to government entities. Selling to government entities can be highly competitive, expensive and time consuming, often requiring significant upfront time and expense without any assurance that we will successfully sell our solutions. Government entities may require contract terms that differ from our standard terms and conditions including termination rights favorable for the customer, audit rights, and maintenance of certain security clearances for facilities and employees which can entail administrative time and effort resulting in costs and delays. Engagements with government contracts involve stringent compliance requirements and the potential for increased scrutiny, which could adversely impact operational flexibility.

Previous wording

We have a $100 million revolving credit facility. As of March 31, 2024, there were no borrowings under the credit facility. If we were to borrow substantially against this facility the indebtedness could have adverse consequences, including:

Current wording

We have a $100 million revolving credit facility. As of March 31, 2025, there were no borrowings under the credit facility. If we were to borrow substantially against this facility the indebtedness could have adverse consequences, including requiring us to devote a portion of our cash flow from operations to payments of indebtedness, which would reduce the availability of cash flow to fund working capital requirements, capital expenditures and other general purposes; limiting our flexibility in planning for, or reacting to, general adverse economic conditions or changes in our business and the industry in which we operate in; placing us at a competitive disadvantage compared to our competitors that have less debt; and limiting our ability to fund potential acquisitions.

Previous wording

Our India operations are a key factor to our success. We believe that our significant presence in India provides certain important advantages for our business, such as direct access to a large pool of skilled professionals and assistance in growing our business internationally. However, it also creates certain risks that we must effectively manage. As of March 31, 2024, we had 1,037 employees located in India. Wage costs differentiate depending on regions throughout the world. Wages in India are increasing at a faster rate than in the many other countries, including the United States. These increases could result in us incurring increased costs for technical professionals and reduced margins. There is intense competition in India for skilled technical professionals, and we expect such competition to increase. As a result, we may be unable to cost-effectively retain our current employee base in India or hire additional new talent. In addition, India has experienced significant inflation, low growth in gross domestic product and shortages of foreign exchange. India also has experienced civil unrest and has been involved in conflicts with neighboring countries. The occurrence of any of these circumstances could result in disruptions to our India operations, which, if continued for an extended period of time, could have a material adverse effect on our business.

Current wording

Our India operations are a key factor to our success. We believe that our significant presence in India provides certain important advantages for our business, such as direct access to a large pool of skilled professionals and assistance in growing our business internationally. However, it also creates certain risks that we must effectively manage. As of March 31, 2025, approximately 39% of our employees were located in India. Wage costs differentiate depending on regions throughout the world. Wages in India are increasing at a faster rate than in the many other countries, including the United States. These increases could result in us incurring increased costs for technical professionals and reduced margins. There is intense competition in India for skilled technical professionals, and we expect such competition to increase. As a result, we may be unable to cost-effectively retain our current employee base in India or hire additional new talent. In addition, India has experienced significant inflation, low growth in gross domestic product and shortages of foreign exchange. India also has experienced civil unrest and has been involved in conflicts with neighboring countries. The occurrence of any of these circumstances could result in disruptions to our India operations, which, if continued for an extended period of time, could have a material adverse effect on our business.

Previous wording

Our international sales are generally denominated in foreign currencies, and this revenue could be materially affected by currency fluctuations. Our primary exposure is to fluctuations in exchange rates for the U.S. dollar versus the Euro and, to a lesser extent, the Australian dollar, British pound sterling, Canadian dollar, Chinese yuan, Indian rupee, Korean won and Singapore dollar. Changes in currency exchange rates could adversely affect our reported revenues and could require us to reduce our prices to remain competitive in foreign markets, which could also have a material adverse effect on our results of operations. An unfavorable change in the exchange rate of foreign currencies against the U.S. dollar would result in lower revenues when translated into U.S. dollars, although operating expenditures would be lower as well.

Current wording

We derive almost half of our revenues from international markets. Our international sales are generally denominated in foreign currencies, and this revenue and related cash flow could be materially affected by currency fluctuations. Our primary exposure is to fluctuations in exchange rates for the U.S. dollar versus the Euro and, to a lesser extent, the Australian dollar, British pound sterling, Canadian dollar, Chinese yuan, Indian rupee, Korean won and Singapore dollar. Changes in currency exchange rates could adversely affect our reported revenues and could require us to reduce our prices to remain competitive in foreign markets, which could also have a material adverse effect on our results of operations. An unfavorable change in the exchange rate of foreign currencies against the

Previous wording

We have significant sales and services operations outside the United States and derive a substantial portion of our revenues from these operations. We generated approximately 48% and 47% of our revenues from outside the United States in fiscal 2024 and fiscal 2023, respectively. International revenue increased 9% in fiscal 2024 compared to fiscal 2023. Expansion of our international operations will require a significant amount of attention from our management and substantial financial resources and might require us to add qualified management in these markets.

Current wording

We have significant sales and services operations outside the United States and derive a substantial portion of our revenues from these operations. We generated approximately 46% and 48% of our revenues from outside the United States in fiscal 2025 and fiscal 2024, respectively. International revenue increased 15% in fiscal 2025 compared to fiscal 2024. Expansion of our international operations has and is expected to require a significant amount of attention from our management and substantial financial resources and might require us to add qualified management in these markets.

Previous wording

•general economic conditions in the countries in which we operate, including seasonal reductions in business activity in the summer months in Europe and in other periods in other countries, could have an adverse effect on our earnings from operations in those countries;

Current wording

•general economic conditions in the countries in which we operate, including seasonal reductions in business activity in the summer months in Europe and in other periods in other countries;

Previous wording

•imposition of, or unexpected adverse changes in, foreign laws or regulatory requirements may occur, including those pertaining to sanctions, export restrictions, privacy and data protection, trade and employment restrictions and intellectual property protections;

Current wording

•imposition of, or unexpected adverse changes in, foreign laws or regulatory requirements, including those pertaining to sanctions, export restrictions, privacy and data protection, trade and employment restrictions and intellectual property protections;

Previous wording

Bad actors regularly attempt to gain unauthorized access to our IT systems, and many such attempts are increasingly sophisticated. These attempts, which might be related to industrial, corporate or other espionage, criminal hackers or state-sponsored intrusions, include trying to covertly introduce malware or ransomware to our environments and impersonating authorized users.

Current wording

Bad actors regularly attempt to gain unauthorized access to our IT systems, and many such attempts are increasingly sophisticated and difficult to detect. These attempts, which might be related to industrial, corporate or other espionage, criminal hackers or nation-state and nation-state supported actors, include trying to covertly introduce malware or ransomware to our environments, impersonating authorized users, as well as other intrusions from nation-state actors and nation-state supported actors. In particular, cyber attacks, including those from organized criminal threat actors, nation-states and nation-state supported actors, are prevalent and severe and could lead to significant interruptions, delays, or outages in our operations, disruptions in our services, loss of data, loss of income, significant extra expense to restore data or systems, reputational loss and the diversion of funds. Cybercriminals are leveraging artificial intelligence (“AI”) to develop more sophisticated and targeted attacks, making detection and prevention increasingly challenging, resulting in heightened risks of security breaches and incidents. As cyberattacks, including AI-driven threats, become increasingly sophisticated, there is an omnipresent need to enhance security measures to protect our systems and data.

Previous wording

Third-party service providers that we may rely on to back up and process our confidential information may also be subject to similar threats. Such threats could result in the misappropriation, theft, misuse, disclosure, loss or destruction of the technology, intellectual property, or the proprietary, confidential or personal information, of us or our employees, customers, licensees, suppliers or partners, as well as damage to or disruptions in our IT systems. These threats are constantly evolving, increasing the difficulty of successfully defending against them or implementing adequate preventative measures. We seek to detect and investigate all cybersecurity incidents and to prevent their recurrence, but attempts to gain unauthorized access to our IT systems or other attacks may be successful, and in some cases, we might be unaware of an incident or its magnitude and effects.

Current wording

Third-party service providers that we may rely on to back up and process our confidential information may also be subject to similar threats. Such threats could result in the misappropriation, theft, misuse, disclosure, loss or destruction of the technology, intellectual property, or the proprietary, confidential or personal information, of us or our employees, customers, licensees, suppliers or partners, as well as damage to or disruptions in our IT systems. These threats are constantly evolving, increasing the difficulty of successfully defending against them or implementing adequate preventative measures. We seek to detect and investigate all cybersecurity breaches or incidents and to prevent their recurrence, but attempts to gain unauthorized access to our IT systems or other attacks may be successful, and in some cases, we might be unaware of an incident or its magnitude and effects.

Previous wording

In addition, any failure to successfully implement new information systems and technologies, or improvements or upgrades to existing information systems and technologies in a timely manner could adversely impact our business, internal controls, results of operations, and financial condition.

Current wording

In addition, any failure to successfully implement new information systems and technologies, or improvements or upgrades to existing information systems and technologies in a timely manner could adversely impact our business, internal controls, results of operations, reputation, and financial condition.

Previous wording

We may also market our own products as containing AI features. Some of our customers, especially those in highly regulated industries, may be reluctant or unwilling to adopt such AI features which could reduce or delay customer adoption.

Current wording

We market our own products as containing AI features. Some of our customers, especially those in highly regulated industries, may be reluctant or unwilling to adopt such AI features which could reduce or delay customer adoption.

Previous wording

From time to time, we may become involved in various other legal proceedings relating to matters incidental to the ordinary course of our business, including intellectual property, commercial, product liability, employment, class action, whistleblower and other litigation and claims, and governmental and other regulatory investigations and proceedings. Such matters can be time-consuming, divert management’s attention and resources and cause us to incur significant expenses. Furthermore, because litigation is inherently uncertain, there can be no assurance that the results of any of these actions will not have a material adverse effect on our business, results of operations or financial condition.

Current wording

From time to time, we may become involved in various legal proceedings relating to matters incidental to the ordinary course of our business, including intellectual property, commercial, product liability, employment, class action, whistleblower and other litigation and claims, and governmental and other regulatory investigations and proceedings. Such matters can be time-consuming, divert management’s attention and resources and cause us to incur significant expenses. Furthermore, because litigation is inherently uncertain, there can be no assurance that the results of any of these actions will not have a material adverse effect on our business, results of operations or financial condition.

Previous wording

Outside the United States, an increasing number of laws, regulations, and industry standards govern data privacy and security. For example, the European Union’s ("E.U.") General Data Protection Regulation ("E.U. GDPR"), and the United Kingdom’s ("U.K.") GDPR ("U.K. GDPR"), impose strict requirements for processing the personal data of individuals. Violations of these obligations carry significant potential consequences. For example, under the E.U. GDPR, government regulators may impose temporary or definitive bans on processing, as well as fines of up to €20 million or 4% of the annual global revenue, whichever is greater. Additionally, new and emerging data privacy regimes may be applicable in Asia, including India's Digital Personal Data Protection Act, China's Personal Information Protection Law, Japan's Act on the Protection of Personal Information, and Singapore's Personal Data Protection Act.

Current wording

Governments worldwide are implementing more stringent data protection regulations, requiring companies to invest heavily in compliance mechanisms to avoid substantial fines and reputational damage. Outside the United States, an increasing number of laws, regulations, and industry standards govern data privacy and security. For example, the European Union’s ("E.U.") General Data Protection Regulation ("E.U. GDPR") and the Digital Operational Resilience Act (“DORA”), and the United Kingdom’s ("U.K.") GDPR ("U.K. GDPR"), impose strict requirements for processing the personal data of individuals. Violations of these obligations carry significant potential consequences. For example, under the E.U. GDPR, government regulators may impose temporary or definitive bans on processing, as well as fines of up to €20 million or 4% of the annual global revenue, whichever is greater. Additionally, new and emerging data privacy regimes may be applicable in Asia, including India's Digital Personal Data Protection Act, China's Personal Information Protection Law, Japan's Act on the Protection of Personal Information, and Singapore's Personal Data Protection Act. Countries are enacting stricter data localization requirements, compelling companies to store data within specific jurisdictions, which complicates global operations and increases compliance costs.

Previous wording

At March 31, 2024, our goodwill was approximately $127.8 million, which represented approximately 14% of our total assets. We test goodwill for impairment at least annually at the reporting unit level, or more often if an event occurs or circumstances change that would more likely than not reduce the fair value of its carrying amount. This qualitative assessment requires us to assess and make judgments regarding a variety of factors which impact the fair value of the reporting unit or asset being tested, including business plans, anticipated future cash flows, economic projections and other market data. Because there are inherent uncertainties involved in these factors, significant differences between these estimates and actual results could result in future impairment charges and could materially impact our future financial results. For additional information on our goodwill impairment testing, see Note 2 of the notes to the consolidated financial statements. Any future impairment of this asset could have a material adverse effect on our results of operations, which may adversely affect the market price of our common stock.

Current wording

At March 31, 2025, our goodwill had a carrying value of approximately $185.3 million, which represented approximately 17% of our total assets. We test goodwill for impairment at least annually at the reporting unit level, or more often if an event occurs or circumstances change that would more likely than not reduce the fair value of its carrying amount. This qualitative assessment requires us to assess and make judgments regarding a variety of factors which impact the fair value of the reporting unit or asset being tested, including business plans, anticipated future cash flows, economic projections and other market data. Because there are inherent uncertainties involved in these factors, significant differences between these estimates and actual results could result in future impairment charges and could materially impact our future financial results. For additional information on our goodwill impairment testing, see Note 2 of the notes to the consolidated financial statements. Any future impairment of this asset could have a material adverse effect on our results of operations, which may adversely affect the market price of our common stock.

Previous wording

We review our long-lived assets for impairment whenever events or changes in circumstances indicate that the carrying amount of the assets may not be fully recoverable. In January 2023, we entered into an exclusive agreement to sell our owned corporate headquarters and reclassified the assets as held for sale. As a result, we evaluated the carrying value of our long-lived assets related to the property and determined that the carrying value of those assets may not be fully recoverable, and as such, recorded an impairment charge of $53.5 million in the fourth quarter of fiscal 2023. As of March 31, 2024, the sale has not yet been finalized and the exclusivity of the agreement has expired. We are continuing to market the building for sale and expect the transaction to be completed within calendar year 2024. While classified as held for sale, we may need to reassess the fair value of the building at each of our reporting periods and determine whether the carrying value is recoverable. If the carrying value is not deemed to be recoverable based on current market conditions, we may be required to record additional impairment charges in the future. In addition, if certain events or changes in circumstances arise, such as being unable to sell the building within a reasonable timeframe or if selling the building would result in a negative economic future state, we may need to reclassify the building from “assets held for sale” to “assets held and used,” and record a cumulative catch-up on the depreciable assets, which may have a material impact on our operating results and could impact the market price of our common stock. See Note 5 of the notes to the consolidated financial statements for additional information on our assets held for sale.

Current wording

While classified as held for sale, we may need to reassess the fair value of the building at each of our reporting periods and determine whether the carrying value is recoverable. If the carrying value is not deemed to be recoverable based on current market conditions, we may be required to record additional impairment charges in the future. In addition, if certain events or changes in circumstances arise, such as being unable to sell the building within a reasonable timeframe or if selling the building would result in a negative economic future state, we may need to reclassify the building from “assets held for sale” to “assets held and used,” and record a cumulative catch-up on the depreciable assets, which may have a material impact on our operating results and could impact the market price of our common stock. See Note 6 of the notes to the consolidated financial statements for additional information on our assets held for sale.

Previous wording

•the unpredictability of the timing and magnitude of orders for our solutions, particularly transactions greater than $100,000, as a majority of our quarterly revenues were earned and recorded near the end of each quarter;

Current wording

•the unpredictability of the timing and magnitude of orders for our solutions, particularly transactions greater than $100,000, as a majority of our quarterly revenues have been earned and recorded near the end of each quarter;

Previous wording

•broad market and industry factors, including financial instability of banking institutions; and

Current wording

•broad market and industry factors, including economic downturns and financial instability of banking institutions; and

Showing the first 40 of 42 pairs. Open the source sections for the rest.

Rearranged current paragraphs (3)

Current report — wording carried from elsewhere

Government demand for our solutions may be more volatile as they are affected by stringent regulations, public sector budgetary cycles, funding authorizations, and the potential for funding reductions or delays, making the time to close such transactions more difficult to predict. The current presidential administration intends to reduce overall government spending and has introduced the Department of Government Efficiency to operationalize this priority; a decline in government spending could negatively impact our revenues and profitability.

Current report — wording carried from elsewhere

U.S. dollar would result in lower revenues when translated into U.S. dollars, although operating expenditures would be lower as well.

Current report — wording carried from elsewhere

We review our long-lived assets for impairment whenever events or changes in circumstances indicate that the carrying amount of the assets may not be fully recoverable. In January 2023, we reclassified our owned corporate headquarters as assets held for sale. As a result, we evaluated the carrying value of our long-lived assets related to the property and determined that the carrying value of those assets may not be fully recoverable, and as such, recorded an impairment charge of $53.5 million in the fourth quarter of fiscal 2023. We recorded an additional $2.9 million impairment in fiscal 2025 related to changes in the estimated fair value less costs to sell. As of March 31, 2025, the sale has not yet been finalized.
Rearranged previous paragraphs (8)

Previous report — wording carried elsewhere

•the timing of our customers’ budget cycles and approval processes;

Previous report — wording carried elsewhere

•our customers’ willingness to replace their current solutions;

Previous report — wording carried elsewhere

•our need to educate potential customers about the uses and benefits of our solutions; and

Previous report — wording carried elsewhere

•the timing of the expiration of our customers’ current agreements for similar solutions.

Previous report — wording carried elsewhere

Sales to global federal, state, and local governmental agencies account for a portion of our revenue, and we may in the future increase sales to government entities. This customer base experiences budgetary constraints or shifts in spending priorities regularly which may adversely affect sales of our solutions to government entities.

Previous report — wording carried elsewhere

•requiring us to devote a portion of our cash flow from operations to payments of indebtedness, which would reduce the availability of cash flow to fund working capital requirements, capital expenditures and other general purposes;

Previous report — wording carried elsewhere

•limiting our flexibility in planning for, or reacting to, general adverse economic conditions or changes in our business and the industry in which we operate in;

Previous report — wording carried elsewhere

•limiting our ability to fund potential acquisitions.