HUBSPOT INC

Previous wording

We derive, and expect to continue to derive, a substantial portion of our revenue from the sale of subscriptions to our customer platform. The market for marketing, sales, service, operations, commerce and customer management products is still evolving, and competitive dynamics may cause pricing levels to change as the market matures and as existing and new market participants introduce new types of point applications and different approaches to enable businesses to address their respective needs. As a result, we may be forced to, or strategically choose to, reduce the prices we charge for our platform and may be unable to renew existing customer agreements or enter into new customer agreements at the same prices and upon the same terms that we have historically. In addition, our growth strategy involves a scalable pricing model (including freemium versions of our products and our recent seats-based and consumption-based pricing model changes) intended to provide opportunities to increase the value of our customer relationships over time, including as customers expand their use of our platform, or we sell to other parts of their organizations, cross-sell additional products and seats through touchless or low touch in product purchases, and upsell additional offerings and features. If our scalable pricing and cross-selling efforts are unsuccessful or if our existing customers do not expand their use of our platform or adopt additional offerings and features, or if the anticipated benefits from scalable pricing take longer to realize or are not realized at all, our revenue and operating results may suffer.

Current wording

We derive, and expect to continue to derive, a substantial portion of our revenue from the sale of subscriptions to our customer platform. The market for marketing, sales, service, operations, commerce and customer management products is still evolving, and competitive dynamics may cause pricing levels to change as the market matures and as existing and new market participants introduce new types of point applications and different approaches to enable businesses to address their respective needs. As a result, we may be forced to, or strategically choose to, reduce the prices we charge for our platform and may be unable to renew existing customer agreements or enter into new customer agreements at the same prices and upon the same terms that we have historically. In addition, our growth strategy involves a scalable pricing model (including freemium versions of our products and our recent seats-based and consumption-based pricing model changes) intended to provide opportunities to increase the value of our customer relationships over time, including as customers expand their use of our platform, or we sell to other parts of their organizations, cross-sell additional products and seats through touchless or low touch in product purchases, and upsell additional offerings and features. Our consumption-based pricing strategies are novel and evolving. Due to customer flexibility in the timing of their use of our platform, we could have less predictability from our consumption-based products than we do for our subscription-based products, and there is a risk that customers could use our consumption-based products at lower levels than we expect. If our scalable pricing and cross-selling efforts are unsuccessful or if our existing customers do not expand their use of our platform or adopt additional offerings and features, or if the anticipated benefits from scalable pricing take longer to realize or are not realized at all, our revenue and operating results may suffer.

Previous wording

We face intense competition from other software companies in the market we operate that provide interactive marketing services. Competition could significantly impede our ability to sell subscriptions to our customer platform on terms favorable to us. Our current and potential competitors may develop and market new technologies including as a result of new or better use of evolving AI technologies that render our existing or future products less competitive, or obsolete. In addition, if these competitors develop products with similar or superior functionality to our platform, we may need to decrease the prices or accept less favorable terms for our platform subscriptions in order to remain competitive. If we are unable to maintain our pricing due to competitive pressures, our margins will be reduced and our operating results will be negatively affected.

Current wording

We face intense competition from other software companies in the market we operate that provide interactive marketing services. Competition could significantly impede our ability to sell subscriptions to our customer platform on terms favorable to us. Our current and potential competitors may develop and market new technologies including as a result of new or better use of evolving AI technologies, whether through greater investments in AI development, access to higher quality training datasets, or more advanced AI models, that render our existing or future products less competitive, or obsolete. We may also face greater competition from non-specialist solutions relying on generic large language models (“LLMs”), generative AI and general-purpose agents to address a broad range of business needs. As we attempt to sell our products and solutions to new and existing customers, we must convince them that our products and solutions are superior to other solutions available to their organizations, including generic LLMs, software created using natural language prompts and generative AI (referred to as vibe coding) and other emerging technologies. In addition, if these competitors develop products with similar or superior functionality to our platform, we may need to decrease the prices or accept less favorable terms for our platform subscriptions in order to remain competitive. If we are unable to maintain our pricing due to competitive pressures, our margins will be reduced and our operating results will be negatively affected.

Previous wording

We have experienced rapid growth and organizational change in recent periods and expect growth of headcount and operations over the long-term. If we fail to manage growth and organizational change effectively, we may be unable to execute our business plan, maintain high levels of service or address competitive challenges adequately.

Current wording

We have experienced significant growth and organizational change in prior periods and may continue to experience growth of headcount and operations over the long-term. Such historical trends, including growth rates, may not continue in the future, and if we fail to manage growth and organizational change effectively, we may be unable to execute our business plan, maintain high levels of service or address competitive challenges adequately.

Previous wording

Our headcount and operations continue to grow. For example, we had 8,824 full-time employees as of September 30, 2025 and 8,246 as of December 31, 2024. To date, we have opened several international offices. This growth has placed, and will continue to place, a significant strain on our management, administrative, operational and financial infrastructure. We expect to continue to grow headcount and operations over the long-term. We anticipate future growth will be required over the long term to address increases in our product offerings and continued expansion. Our success will depend in part upon our ability to recruit, hire, train, manage and integrate qualified managers, technical personnel and employees in specialized roles within our company, including in technology, sales and marketing. Furthermore, as many of our employees work remotely from geographic areas across jurisdictions where we have offices pursuant to our hybrid workplace model, which provides our employees with the option to be fully remote, work full-time from one of our offices, or have the flexibility to work both in the office and remotely, we may need to reallocate our investment of resources and closely monitor a variety of local regulations and requirements, including local tax laws. We may experience unpredictability in our expenses and employee work culture. If we experience any of these effects in connection with future growth, if our new employees perform poorly, or if we are unsuccessful in recruiting, hiring, training, managing and integrating new employees, or retaining our existing employees, it could materially impair our ability to attract new customers, retain existing customers and expand their use of our platform, all of which would materially and adversely affect our business, financial condition and results of operations.

Current wording

Our headcount and operations have grown and may continue to grow. For example, we had 9,021 full-time employees as of March 31, 2026 and 8,882 as of December 31, 2025. To date, we have opened several international offices. This growth has placed, and may continue to place, a significant strain on our management, administrative, operational and financial infrastructure. Although we have experienced significant growth in headcount and operations historically, we may not sustain our current growth rates, which could adversely affect our business performance and operating results. Our success will depend in part upon our ability to recruit, hire, train, manage and integrate qualified managers, technical personnel and employees in specialized roles within our company, including in technology, sales and marketing. Advances in automation and AI may also alter the skills required of our workforce and could reduce demand for certain roles, creating challenges in workforce management, employee relations, and reputational risk. We may be required to make significant investments in retraining and workforce transition programs, and failure to effectively manage these changes could impair our ability to attract and retain talent, disrupt operations, and adversely affect our business. Furthermore, as many of our employees work remotely from geographic areas across jurisdictions where we have offices pursuant to our hybrid workplace model, which provides our employees with the option to be fully remote, work full-time from one of our offices, or have the flexibility to work both in the office and remotely, we may need to reallocate our investment of resources and closely monitor a variety of local regulations and requirements, including local tax laws. We may experience unpredictability in our expenses and employee work culture. If we experience any of these effects in connection with future growth, if our new employees perform poorly, or if we are unsuccessful in recruiting, hiring, training, managing and integrating new employees, or retaining our existing employees, it could materially impair our ability to attract new customers, retain existing customers and expand their use of our platform, all of which would materially and adversely affect our business, financial condition and results of operations.

Previous wording

Our future success depends on our ability to adapt and innovate our customer platform. To attract new customers and increase revenue from existing customers, we need to continue to enhance and improve our offerings to meet customer needs at prices that our customers are willing to pay. Such efforts will require adding new functionality and responding to technological advancements, including AI and machine learning, which will increase our research and development costs. If we are unable to develop new applications that address our customers’ needs, or to enhance and improve our platform in a timely manner, we may not be able to maintain or increase market acceptance of our platform. Our ability to grow is also subject to the risk of future disruptive technologies. Access and use of our customer platform is provided via the cloud, which, itself, was disruptive to the previous enterprise software model. If new technologies emerge that are able to deliver marketing software and related applications at lower prices, more efficiently, more conveniently or more securely, such technologies could adversely affect our ability to compete.

Current wording

our products and services to customers. If we are unable to develop, license or acquire new applications that address our customers’ needs, or to enhance and improve our platform in a timely manner, we may not be able to maintain or increase market acceptance of our platform. Our ability to grow is also subject to the risk of future disruptive technologies. Access and use of our customer platform is provided via the cloud, which, itself, was disruptive to the previous enterprise software model. If new technologies emerge that are able to deliver marketing software and related applications at lower prices, more efficiently, more conveniently or more securely, such technologies could adversely affect our ability to compete.

Previous wording

To remain competitive, we must continue to develop new product offerings, applications, features and enhancements to our existing customer platform. Maintaining adequate research and development personnel and resources to meet the demands of the market is essential. If we are unable to develop our platform internally due to certain constraints, such as high employee turnover, lack of management ability or a lack of other research and development resources, we may miss market opportunities. Further, many of our competitors expend a considerably greater amount of funds on their research and development programs, and those that do not may be acquired by larger companies that would allocate greater resources to our competitors’ research and development programs. Our failure to maintain adequate research and development resources or to compete effectively with the research and development programs of our competitors could materially adversely affect our business.

Current wording

To remain competitive, we must continue to develop new product offerings, applications, features and enhancements to our existing customer platform. Maintaining adequate research and development personnel and resources to meet the demands of the market is essential. If we are unable to develop our platform internally due to certain constraints, such as high employee turnover, lack of management ability or a lack of other research and development resources, we may miss market opportunities. Further, many of our competitors expend a considerably greater amount of funds on their research and development programs, and those that do not may be acquired by larger companies that would allocate greater resources to our competitors’ research and development programs. Our failure to maintain adequate research and development resources, including recruiting and retaining highly qualified personnel, (particularly with AI and machine learning backgrounds), or to compete effectively with the research and development programs of our competitors could materially adversely affect our business.

Previous wording

The Company’s inability, for technological or other reasons, some of which may be beyond the Company’s control, to enhance, develop, introduce and monetize products and services in a timely manner, or at all, in response to changing market conditions or customer requirements could have a material adverse effect on the Company’s business, results of operations and financial condition or could result in its products and services not achieving market acceptance or becoming obsolete. In addition, if the Company fails to deliver a compelling customer experience or accurately predict emerging technological trends and the changing needs of customers and end users, or if the features of its new products and services do not meet the demands of its customers or are not sufficiently differentiated from those of its competitors, the Company’s business, results of operations and financial condition could be materially harmed.

Current wording

The Company’s inability, for technological, legal or other reasons, some of which may be beyond the Company’s control, to enhance, develop, introduce and monetize products and services in a timely manner, or at all, in response to changing market conditions or customer requirements could have a material adverse effect on the Company’s business, results of operations and financial condition or could result in its products and services not achieving market acceptance or becoming obsolete. In addition, if the Company fails to deliver a compelling customer experience or accurately predict emerging technological trends and the changing needs of customers and end users, or if the features of its new products and services do not meet the demands of its customers or are not sufficiently differentiated from those of its competitors, the Company’s business, results of operations and financial condition could be materially harmed.

Previous wording

Uncertainty around new and emerging AI applications such as generative AI content creation, including Breeze, may require additional investment in the development or acquisition of proprietary datasets, machine learning models and systems to test for accuracy, bias and other variables, which are often complex. Development of new approaches and processes to provide attribution or remuneration to content creators and building and/or integrating systems that enable creatives to have greater control over the use of their work in the development of AI may be costly and could impact our profit margin if we are unable to monetize such assets. In addition, AI technologies, including generative AI, may create content that appears correct but is factually inaccurate or flawed, or contains copyrighted or other protected material, and if our customers or others use this flawed content to their detriment, we may be exposed to brand or reputational harm, competitive harm, and/or legal liability. Developing, testing and deploying AI systems may also increase the cost profile of our offerings due to the nature of the computing costs involved in such systems.

Current wording

Uncertainty around new and emerging AI applications such as agentic AI technologies and generative AI content creation, including Breeze, may require additional investment in the development or acquisition of proprietary datasets, machine learning models and other AI systems to test for accuracy, bias and other variables, which are often complex. Development of new approaches and processes to provide attribution or remuneration to content creators and building and/or integrating systems that enable creatives to have greater control over the use of their work in the development of AI may be costly and could impact our profit margin if we are unable to monetize such assets. In addition, AI technologies, including agentic and generative AI tools, may create content, analyses or recommendations without human intervention that take or suggest actions based on incomplete or inaccurate data, “hallucinatory” inferences, or flawed training inputs, or contain copyrighted or other protected material, and if our customers or others use this flawed or protected content or materials to their detriment, we may be exposed to brand or reputational harm, competitive harm, and/or legal liability. Developing, testing and deploying AI systems may also increase the cost profile of our offerings due to the nature of the computing costs involved in such systems.

Previous wording

We have in the past acquired, and we may in the future acquire or invest in, businesses, products or technologies that we believe could complement or expand our platform, enhance our technical capabilities or otherwise offer growth opportunities. We may not be able to fully realize the anticipated benefits of historical or any future acquisitions. The pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses related to identifying, investigating and pursuing suitable acquisitions, whether or not they are consummated.

Current wording

We have in the past acquired, and we may in the future acquire or invest in, businesses, products or technologies that we believe could complement or expand our platform, enhance our technical capabilities or otherwise offer growth opportunities. For example, in April 2026, we acquired 100% of the membership interests of Futurepedia. We may not be able to fully realize the anticipated benefits of historical or any future acquisitions. The pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses related to identifying, investigating and pursuing suitable acquisitions, whether or not they are consummated.

Previous wording

There are inherent risks in integrating and managing acquisitions. If we acquire additional businesses, we may not be able to assimilate or integrate the acquired personnel, operations and technologies successfully or effectively manage the combined business following the acquisition and our management may be distracted from operating our business. We also may not achieve the anticipated benefits from the acquired business due to a number of factors, including: unanticipated costs or liabilities associated with the acquisition; incurrence of acquisition-related costs, which would be recognized as a current period expense; the inability to generate sufficient revenue to offset acquisition or investment costs; the inability to maintain relationships with customers and partners of the acquired business; the difficulty of incorporating acquired technology and rights into our platform and of maintaining quality and security standards consistent with our brand; delays in customer purchases due to uncertainty related to any acquisition; the need to integrate or implement additional controls, procedures and policies; challenges caused by distance, language and cultural differences; harm to our existing business relationships with business partners and customers as a result of the acquisition; the potential loss of key employees; use of resources that are needed in other parts of our business and diversion of management and employee resources; and use of substantial portions of our available cash or the incurrence of debt to consummate the acquisition. Acquisitions also increase the risk of unforeseen legal and compliance liabilities, including for potential violations of applicable law or industry rules and regulations, arising from prior or ongoing acts or omissions by the acquired businesses which are not discovered by due diligence during the acquisition process, including data handling and privacy violations. Generally, if an acquired business fails to meet our expectations, our operating results, business and financial condition may suffer. Acquisitions could also result in dilutive issuances of equity securities or the incurrence of debt, which could adversely affect our business, results of operations or financial condition.

Current wording

There are inherent risks in integrating and managing acquisitions. If we acquire additional businesses, we may not be able to assimilate or integrate the acquired personnel, operations and technologies successfully or effectively manage the combined business following the acquisition and our management may be distracted from operating our business. We also may not achieve the anticipated benefits from the acquired business due to a number of factors, including: unanticipated costs or liabilities associated with the acquisition; incurrence of acquisition-related costs, which would be recognized as a current period expense; the inability to generate sufficient revenue to offset acquisition or investment costs; the inability to maintain relationships with customers and partners of the acquired business; the difficulty of incorporating acquired technology and rights into our platform and of maintaining quality and security standards consistent with our brand; delays in customer purchases due to uncertainty related to any acquisition; the need to integrate or implement additional controls, procedures and policies; challenges caused by distance, language and cultural differences; harm to our existing business relationships with business partners and customers as a result of the acquisition; the potential loss of key employees; use of resources that are needed in other parts of our business and diversion of management and employee resources; and use of substantial portions of our available cash or the incurrence of debt to consummate the acquisition. Acquisitions also increase the risk of unforeseen legal and compliance liabilities, including for potential violations of applicable law or industry rules and regulations, arising from prior or ongoing acts or omissions by the acquired businesses which are not discovered by due diligence during the acquisition process, including data handling, cybersecurity risks and privacy violations. Generally, if an acquired business fails to meet our expectations, our operating results, business and financial condition may suffer. Acquisitions could also result in dilutive issuances of equity securities or the incurrence of debt, which could adversely affect our business, results of operations or financial condition.

Previous wording

international disputes, wars, political instability or terrorist activities and resulting economic instability;

Current wording

international disputes, wars, political instability or terrorist activities, including the conflict in Iran, the Russia-Ukraine conflict, the Israel-Hamas conflict and recent events in Venezuela, and resulting economic instability;

Previous wording

Social and ethical issues relating to the use of new and evolving technologies such as AI in our offerings, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. We are increasingly building AI into many of our offerings, including early-stage generative AI features. As with many innovations, AI presents risks and challenges that could affect its adoption, and therefore our business. If we enable or offer solutions that draw controversy due to their perceived or actual impact on human rights, privacy, employment, or in other social contexts, we may experience brand or reputational harm, competitive harm or legal liability. Potential government regulation related to AI use and ethics may also increase the burden and cost of research and development in this area, and failure to properly remediate AI usage or ethics issues may cause public confidence in AI to be undermined, which could slow adoption of AI in our products and services. The rapid evolution of AI will require the application of resources to develop, test and maintain our products and services to help ensure that AI is implemented ethically in order to minimize unintended, harmful impact.

Current wording

Social and ethical issues relating to the use of new and evolving technologies such as AI in our offerings, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. We are increasingly building AI into many of our offerings, including early-stage agentic and generative AI features. As with many innovations, AI presents risks and challenges that could affect its adoption, and therefore our business. If we enable or offer solutions that draw controversy due to their perceived or actual impact on human rights, privacy, employment, or in other social contexts, we may experience brand or reputational harm, competitive harm or legal liability. Potential government regulation related to AI use and ethics may also increase the burden and cost of research and development in this area, and failure to properly remediate AI usage or ethics issues may cause public confidence in AI to be undermined, which could slow adoption of AI in our products and services. The rapid evolution of AI will require the application of resources to develop, test and maintain our products and services to help ensure that AI is implemented ethically in order to minimize unintended, harmful impact.

Previous wording

We believe that a critical component to our success has been our company culture, which is based on transparency and personal autonomy. We have invested substantial time and resources in building our team within this company culture. In 2020, we made the decision to permanently move to a hybrid workplace model, which means our employees have the option to be fully remote, work full-time from one of our offices, or work both in the office and remotely. Preservation of our corporate culture has been made more difficult as the majority of our workforce works from home. Any failure to preserve our culture could negatively affect our ability to retain and recruit personnel and to effectively focus on and pursue our corporate objectives. As we grow and continue to develop our company infrastructure, and experience organizational change, we may find it difficult to maintain these important aspects of our company culture and our business may be adversely impacted.

Current wording

We believe that a critical component to our success has been our company culture, which is based on transparency and personal autonomy. We have invested substantial time and resources in building our team within this company culture. We offer a hybrid workplace model, which means our employees have the option to be fully remote, work full-time from one of our offices, or work both in the office and remotely. Preservation of our corporate culture has been made more difficult as the majority of our workforce works from home. Any failure to preserve our culture could negatively affect our ability to retain and recruit personnel and to effectively focus on and pursue our corporate objectives. As we grow and continue to develop our company infrastructure, and experience organizational change, we may find it difficult to maintain these important aspects of our company culture and our business may be adversely impacted.

Previous wording

Our success and future growth depend upon the continued services of our management team, including our co-founders, Brian Halligan and Dharmesh Shah, our chief executive officer, Yamini Rangan, and other key employees in the areas of research and development, marketing, sales, services, operations, and general and administrative functions. From time to time, there may be changes in our management team resulting from the hiring or departure of executives, which could disrupt our business. We also are dependent on the continued service of our existing software engineers and information technology personnel because of the complexity of our platform, technologies and infrastructure. We may terminate any employee’s employment at any time, with or without cause, and any employee may resign at any time, with or without cause. We do not have employment agreements with any of our key personnel. The loss of one or more of our key employees could harm our business.

Current wording

Our success and future growth depend upon the continued services of our management team, including our co-founder, Dharmesh Shah, our chief executive officer, Yamini Rangan, and other key employees in the areas of research and development, marketing, sales, services, operations, and general and administrative functions. From time to time, there may be changes in our management team resulting from the hiring or departure of executives, which could disrupt our business. We also are dependent on the continued service of our existing software engineers and information technology personnel because of the complexity of our platform, technologies and infrastructure. We may terminate any employee’s employment at any time, with or without cause, and any employee may resign at any time, with or without cause. We do not have employment agreements with any of our key personnel. The loss of one or more of our key employees could harm our business.

Previous wording

To execute our business strategy, we must attract and retain highly qualified personnel. In particular, we compete with many other companies for software developers with high levels of experience in designing, developing and managing cloud-based software, as well as for skilled information technology, marketing, sales and operations professionals, and we may not be successful in attracting and retaining the professionals we need. Also, our customer platform domain experts are very important to our success and are difficult to replace. We have from time to time in the past experienced, and we expect to continue to experience in the future, difficulty in hiring and difficulty in retaining highly skilled employees with appropriate qualifications worldwide. Many of the companies with which we compete for experienced personnel have greater resources than we do. Other companies that continue to offer a remote or hybrid work environment may increase the competition for such employees from employers outside of our traditional office locations. In addition, if we choose to no longer offer a remote or hybrid work environment, we may face more difficulty in retaining our workforce. Further, labor is subject to external factors that are beyond our control, including our industry’s highly competitive market for skilled workers and leaders, cost inflation, and workforce participation rates. In addition, if our reputation were to be harmed, whether as a result of media, legislative, or regulatory scrutiny or otherwise, it could make it more difficult to attract and retain personnel that are critical to the success of our business.

Current wording

To execute our business strategy, we must attract and retain highly qualified personnel. In particular, we compete with many other companies for software developers with high levels of experience in designing, developing and managing cloud-based software, or with AI and machine learning backgrounds, as well as for skilled information technology, marketing, sales and operations professionals, and we may not be successful in attracting and retaining the professionals we need. Also, our customer platform domain experts are very important to our success and are difficult to replace. We have from time to time in the past experienced, and we expect to continue to experience in the future, difficulty in hiring and difficulty in retaining highly skilled employees with appropriate qualifications worldwide, particularly for engineers with experience in AI. Many of the companies with which we compete for experienced personnel have greater resources than we do. Other companies that continue to offer a remote or hybrid work environment may increase the competition for such employees from employers outside of our traditional office locations. In addition, if we choose to no longer offer a remote or hybrid work environment, we may face more difficulty in retaining our workforce. Further, labor is subject to external factors that are beyond our control, including our industry’s highly competitive market for skilled workers and leaders, cost inflation, and workforce participation rates. In addition, if our reputation were to be harmed, whether as a result of media, legislative, or regulatory scrutiny or otherwise, it could make it more difficult to attract and retain personnel that are critical to the success of our business.

Previous wording

We face exposure to movements in currency exchange rates, which may cause our revenue and operating results to differ materially from expectations. As we have expanded our international operations, our exposure to exchange rate fluctuations has increased. Fluctuations in the value of the U.S. dollar versus foreign currencies may impact our operating results when translated into U.S. dollars. Thus, our results of operations and cash flows are subject to fluctuations due to changes in foreign currency exchange rates and may be adversely affected in the future due to changes in foreign currency exchange rates. As exchange rates vary, revenue, cost of revenue, operating expenses and other operating results, when re-measured, may differ materially from expectations. In addition, our operating results are subject to fluctuation if our mix of U.S. and foreign currency denominated transactions and expenses changes in the future. In the first quarter of 2024, we implemented a hedging program intended to allow us to mitigate foreign exchange impacts, such as exposure to currency exchange rates in connection with significant transactions denominated in currencies other than the U.S. dollar, by entering into derivatives transactions such as foreign exchange forwards. We may also employ certain other strategies in the future to mitigate foreign currency risk. There can be no guarantee or assurance that such hedging program and the strategies we employ pursuant thereto will be effective to reduce or eliminate our exposure to foreign exchange rate fluctuations to the extent we anticipate, or at all. Furthermore, the hedging program and the derivatives transactions employed as part thereof involve costs and risks of their own, including ongoing management time and expertise, external costs to implement the programs and strategies, potential counterparty credit risk and liquidity risk, and potential accounting implications. Additionally, as we anticipate growing our business further outside of the United States, the effects of movements in currency exchange rates will increase as our transaction volume outside of the United States increases.

Current wording

U.S. dollars. Thus, our results of operations and cash flows are subject to fluctuations due to changes in foreign currency exchange rates and may be adversely affected in the future due to changes in foreign currency exchange rates. As exchange rates vary, revenue, cost of revenue, operating expenses and other operating results, when re-measured, may differ materially from expectations. In addition, our operating results are subject to fluctuation if our mix of U.S. and foreign currency denominated transactions and expenses changes in the future. In the first quarter of 2024, we implemented a hedging program intended to allow us to mitigate foreign exchange impacts, such as exposure to currency exchange rates in connection with significant transactions denominated in currencies other than the U.S. dollar, by entering into derivatives transactions such as foreign exchange forwards. We may also employ certain other strategies in the future to mitigate foreign currency risk. There can be no guarantee or assurance that such hedging program and the strategies we employ pursuant thereto will be effective to reduce or eliminate our exposure to foreign exchange rate fluctuations to the extent we anticipate, or at all. Furthermore, the hedging program and the derivatives transactions employed as part thereof involve costs and risks of their own, including ongoing management time and expertise, external costs to implement the programs and strategies, potential counterparty credit risk and liquidity risk, and potential accounting implications. Additionally, as we anticipate growing our business further outside of the United States, the effects of movements in currency exchange rates will increase as our transaction volume outside of the United States increases.

Previous wording

Our overall performance depends in part on worldwide economic conditions. Global financial developments and downturns seemingly unrelated to us or the software industry may harm us. The United States and other key international economies have been affected from time to time by falling demand for a variety of goods and services, restricted credit, poor liquidity, reduced corporate profitability, volatility in credit, equity and foreign exchange markets, volatility in the banking sector, changes in the labor market, supply chain disruptions, bankruptcies, inflation and overall uncertainty with respect to the economy, including with respect to trade issues, such as trade wars, tariffs or other trade restrictions or the threat of such actions. For example, on October 1, 2025, the U.S. federal government entered a shutdown suspending services deemed non-essential as a result of the failure by Congress to enact regular appropriations for the 2026 fiscal year. If the shutdown continues for a prolonged period of time, it could result in increased uncertainty and volatility in the global economy and financial markets which could have an adverse effect on our business. Weak economic conditions or significant uncertainty regarding the stability of financial markets related to stock market volatility, inflation, recession, changes in tariffs or other trade restrictions, trade agreements, trade wars or governmental fiscal, monetary and tax policies, among others, could adversely impact our business, financial condition and operating results. Further, weak market conditions have, and could in the future result in, impairment of our investments and long-lived assets.

Current wording

Our overall performance depends in part on worldwide economic conditions. Global financial developments and downturns seemingly unrelated to us or the software industry may harm us. The United States and other key international economies have been affected from time to time by falling demand for a variety of goods and services, restricted credit, poor liquidity, reduced corporate profitability, volatility in credit, equity and foreign exchange markets, volatility in the banking sector, changes in the labor market, supply chain disruptions, bankruptcies, inflation and overall uncertainty with respect to the economy, including with respect to trade issues, such as trade wars, tariffs or other trade restrictions or the threat of such actions. For example, on October 1, 2025, the U.S. federal government shut down through November 12, 2025, suspending services deemed non-essential as a result of the failure by Congress to enact regular appropriations for the 2026 fiscal year. If we experience another government shutdown, it could result in increased uncertainty and volatility in the global economy and financial markets which could have an adverse effect on our business. Weak economic conditions or significant uncertainty regarding the stability of financial markets related to stock market volatility, inflation, recession, changes in tariffs or other trade restrictions, trade agreements, trade wars or governmental fiscal, monetary and tax policies, among others, could adversely impact our business, financial condition and operating results. Further, weak market conditions have, and could in the future, result in impairment of our investments and long-lived assets.

Previous wording

Further, the economies of countries in Europe have been experiencing weakness associated with high sovereign debt levels, weakness in the banking sector, uncertainty over the future of the Eurozone and volatility in the value of the pound sterling and the Euro and instability resulting from the ongoing conflicts between Russia and Ukraine and in Israel, Gaza, and Iran. The effects of such conflicts, including any resulting sanctions, export controls or other restrictive actions that may be imposed against governmental or other entities in, for example, Russia, have in the past contributed and may in the future contribute to disruption, instability and volatility in the global markets. We have operations, as well as current and potential new customers, throughout Europe. If economic conditions in Europe and other key markets for our platform continue to remain uncertain or deteriorate further, it could adversely affect our customers’ ability or willingness to subscribe to our platform, delay prospective customers’ purchasing decisions, reduce the value or duration of their subscriptions or affect renewal rates, all of which could harm our operating results.

Current wording

Further, the economies of countries in Europe have been experiencing weakness associated with high sovereign debt levels, weakness in the banking sector, uncertainty over the future of the Eurozone and volatility in the value of the pound sterling and the Euro and instability resulting from the ongoing conflicts between Russia and Ukraine and in Israel, Gaza, Iran, and in Venezuela. The effects of such conflicts, including any resulting sanctions, export controls or other restrictive actions that may be imposed against governmental or other entities in, for example, Russia, have in the past contributed and may in the future contribute to disruption, instability and volatility in the global markets, including global supply chains and energy markets. We have operations, as well as current and potential new customers, throughout Europe. If economic conditions in Europe and other key markets for our platform continue to remain uncertain or deteriorate further, it could adversely affect our customers’ ability or willingness to subscribe to our platform, delay prospective customers’ purchasing decisions, reduce the value or duration of their subscriptions or affect renewal rates, all of which could harm our operating results.

Previous wording

Our customer platform and its underlying infrastructure are inherently complex and may contain material defects or errors. We release modifications, updates, bug fixes and other changes to our software several times per day, without traditional human-performed quality control reviews for each release. We have from time to time found defects in our software and may discover additional defects in the future. We may not be able to detect and correct defects or errors before customers begin to use our platform or its applications. Consequently, we or our customers may discover defects or errors after our platform has been implemented. Defects or errors could result in product outages and could also cause inaccuracies in the data we collect and process for our customers, or even the loss, damage or inadvertent release of such confidential data. We implement bug fixes and upgrades as part of our regular system maintenance, which may lead to system downtime. Even if we are able to implement the bug fixes and upgrades in a timely manner, any history of product outages, defects or inaccuracies in the data we collect for our customers, or the loss, damage or inadvertent release of confidential data could cause our reputation to be harmed, and customers may elect not to purchase or renew their agreements with us. Furthermore, these issues could subject us to service performance credits (whether offered by us or required by contract), warranty claims or increased insurance costs. The costs associated with product outages, any material defects or errors in our platform or other performance problems may be substantial and could materially adversely affect our operating results.

Current wording

Defects or errors could result in product outages and could also cause inaccuracies in the data we collect and process for our customers, or even the loss, damage or inadvertent release of such confidential data. We implement bug fixes and upgrades as part of our regular system maintenance, which may lead to system downtime. Even if we are able to implement the bug fixes and upgrades in a timely manner, any history of product outages, defects or inaccuracies in the data we collect for our customers, or the loss, damage or inadvertent release of confidential data could cause our reputation to be harmed, and customers may elect not to purchase or renew their agreements with us. Furthermore, these issues could subject us to service performance credits (whether offered by us or required by contract), warranty claims or increased insurance costs. The costs associated with product outages, any material defects or errors in our platform or other performance problems may be substantial and could materially adversely affect our operating results.

Previous wording

Additionally, our customers need to be able to access our platform at any time, without interruption or degradation of performance. AWS runs its own platform that we access, and we are, therefore, vulnerable to service interruptions at AWS. We have experienced, and expect that in the future we may experience interruptions, delays and outages in service and availability due to a variety of factors, including infrastructure changes, human or software errors, website hosting disruptions and capacity constraints. In some instances, including because we do not control our service providers, we may not be able to identify the cause or causes of these problems within a period of time acceptable to our customers. Additionally, as our business continues to grow, to the extent that we do not effectively address capacity constraints, through our providers of cloud infrastructure, our results of operations may be adversely affected. In addition, any changes in service levels from our service providers may adversely affect our ability to meet our customers’ requirements, result in negative publicity which could harm our reputation and brand and may adversely affect the usage of our platform.

Current wording

Additionally, our customers need to be able to access our platform at any time, without interruption or degradation of performance. AWS runs its own platform that we access, and we are, therefore, vulnerable to service interruptions at AWS. We have experienced, and expect that in the future we may experience interruptions, delays and outages in service and availability due to a variety of factors, including infrastructure changes, human or software errors, website hosting disruptions and capacity constraints. Moreover, as a result of the increasing use and deployment of AI technologies, infrastructure capacity requirements, including network capacity and, computing power and energy requirements, may increase which could lead to an increase in service interruptions we experience. In some instances, including because we do not control our service providers, we may not be able to identify the cause or causes of these problems within a period of time acceptable to our customers. Additionally, as our business continues to grow, to the extent that we do not effectively address capacity constraints, through our providers of cloud infrastructure, our results of operations may be adversely affected. In addition, any changes in service levels from our service providers may adversely affect our ability to meet our customers’ requirements, result in negative publicity which could harm our reputation and brand and may adversely affect the usage of our platform.

Previous wording

Our operations involve the storage and transmission of data of our customers and their customers, including personal data. Our storage is typically the sole source of record for portions of our customers’ businesses and end user data, such as initial contact information and online interactions. Security incidents could result in unauthorized access to, loss of or unauthorized disclosure of this information, litigation, indemnity obligations and other possible liabilities, as well as negative publicity, which could damage our reputation, impair our sales and harm our customers and our business. Cyber-attacks and other malicious Internet-based activity continue to increase generally, and cloud-based platform providers of marketing services have been targeted. If our security measures, or those of our service providers, are compromised as a result of third-party action, employee or customer error, malfeasance, stolen or fraudulently obtained log-in credentials or otherwise, our reputation could be damaged, our business may be harmed and we could incur significant liability. Additionally, if third parties with whom we work, such as vendors or developers, violate applicable laws, our security policies or our acceptable use policy, such violations may also put our customers’ information at risk and could in turn have an adverse effect on our business. In addition, if the security measures of our customers or our service providers are compromised, even without any actual compromise of our own systems, we may face negative publicity or reputational harm if our customers or anyone else incorrectly attributes the blame for such security breaches to us or our systems. We may be unable to anticipate or prevent techniques used to obtain unauthorized access or to sabotage systems because they change frequently and generally are not detected until after an incident has occurred. As we increase our customer base and our brand becomes more widely known and recognized, we may become more of a target for third parties seeking to compromise our security systems or gain unauthorized access to our customers’ data. Additionally, we provide our employees with limited access restricted via just-in-time-access controls and least privilege access models to our databases, which store our customer data, and to our APIs to facilitate our rapid pace of product development and to support our customers. If such access, unauthorized access or our own operations, cause damage, destruction or loss (including, without limitation, because of actions by a bad actor, attempts to exfiltrate customer data which attempts we have experienced in the past and could experience in the future), our systems being compromised or unintentional or accidental disclosure, or destruction of our customers’ business data, their sales, lead generation, support and other business operations may be permanently harmed. As a result, our customers may bring claims against us for lost profits and other damages…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Our operations involve the storage and transmission of data of our customers and their customers, including personal data. Our storage is typically the sole source of record for portions of our customers’ businesses and end user data, such as initial contact information and online interactions. While we have security measures in place designed to protect our production and development environments and other systems, maintain the integrity of customer, company, and employee information, and prevent data loss, misappropriation and other security incidents and breaches, there can be no assurance that such security measures will be effective, security incidents or data breaches could result in unauthorized access to, loss of or unauthorized disclosure of this information, litigation, indemnity obligations and other possible liabilities, as well as negative publicity, which could damage our reputation, impair our sales and harm our customers and our business. Cyber-attacks and other malicious Internet-based activity continue to increase generally, and cloud-based platform providers of marketing services have been targeted. If our security measures, or those of our service providers, are compromised as a result of third-party action, employee, vendor or customer error or wrongful conduct, malfeasance, stolen or fraudulently obtained log-in credentials or otherwise, our reputation could be damaged, our business may be harmed and we could incur significant liability. Additionally, if third parties with whom we work, such as vendors or developers, violate applicable laws, our security policies or our acceptable use policy, such violations may also put our customers’ information at risk and could in turn have an adverse effect on our business. In addition, if the security measures of our customers or our service providers are compromised, even without any actual compromise of our own systems, we may face negative publicity or reputational harm if our customers or anyone else incorrectly attributes the blame for such security breaches to us or our systems. We may be unable to anticipate or prevent techniques used to obtain unauthorized access or to sabotage systems because they change frequently and generally are not detected until after an incident has occurred. As we increase our customer base and our brand becomes more widely known and recognized, we may become more of a target for third parties seeking to compromise our security systems or gain unauthorized access to our customers’ data. Additionally, we provide our employees with limited access restricted via just-in-time-access controls and least privilege access models to our databases, which store our customer data, and to our APIs to facilitate our rapid pace of product development and to support our customers. If such access, unauthorized access or our own operations, cause damage, destruction or loss (including, without limitation, because of actions by a bad actor, attempts to exfiltrate custome…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Cyber-attacks, denial-of-service attacks, ransomware attacks, supply chain attacks, business email compromises, computer malware, viruses, social engineering (including phishing), and other compromises are prevalent in our industry, the industries of certain of our service providers and our customers' industries. We have in the past experienced threats and security incidents related to our data and systems, and we may in the future experience other threats, compromises, breaches, or incidents. Our internal computer systems and those of our current and any future strategic collaborators, vendors, and other contractors or consultants are vulnerable to damage from cyber-attacks, computer viruses, unauthorized access, natural disasters, cybersecurity threats, terrorism, geopolitical conflict, war and telecommunication and electrical failures. Accordingly, if our cybersecurity measures or those of our service providers fail to protect against unauthorized access, attacks (which may include sophisticated cyber-attacks), compromise or the mishandling of data by our employees and contractors, then our reputation, customer trust, business, results of operations and financial condition could be adversely affected. Cyber incidents have been increasing in sophistication and frequency and can include third parties gaining access to employee or customer data using stolen or inferred credentials, computer malware, viruses, spamming, phishing attacks, ransomware, vulnerabilities in first- or third-party code, card skimming code, and other deliberate attacks and attempts to gain unauthorized access. This risk is increased by the difficulty of balancing rapid vulnerability patching and system availability in a large and rapidly-changing production environment. At times, we may be unable to patch all of our systems in a manner that strictly adheres to our internally prescribed timelines. The techniques used to sabotage or to obtain unauthorized access to our platform, systems, networks, or physical facilities in which data is stored or through which data is transmitted change frequently, and we may be unable to implement adequate preventative measures or stop security breaches while they are occurring. Because the techniques used by threat actors who may attempt to penetrate and sabotage our computer systems change frequently and may not be recognized until launched against a target, we may be unable to anticipate these techniques. Additionally, with the expansion of remote work and resource access, there is an increased risk that we may experience cybersecurity-related events such as phishing attacks, exploitation of any cybersecurity flaws that may exist, an increase in the number of cybersecurity threats or attacks, and other security challenges as a result of most of our employees and our service providers continuing to work remotely from non-corporate managed networks. There is also a risk of potential increase in such attacks due to cyberwarfare in connection…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Cyber-attacks, denial-of-service attacks, ransomware attacks, supply chain attacks, business email compromises, computer malware, viruses, wrongful intrusions, data breaches social engineering (including phishing), and other compromises are prevalent in our industry, the industries of certain of our service providers and our customers' industries. Like other companies in our industry, we and our third party vendors have in the past experienced threats and security incidents related to our data and systems, and we may in the future experience other threats, compromises, breaches, or incidents. Attempts to disrupt or gain unauthorized access to our and our third-party vendors’ information systems from malicious third parties or insider threats may incorporate widely varying and frequently changing tactics, which may be enhanced or facilitated by AI. Our internal computer systems and those of our current and any future strategic collaborators, vendors, and other contractors or consultants are vulnerable to damage from cyber-attacks, attacks enhanced or facilitated by AI, computer viruses, unauthorized access, natural disasters, cybersecurity threats, terrorism, geopolitical conflict, war and telecommunication and electrical failures. Accordingly, if our cybersecurity measures or those of our service providers fail to protect against unauthorized access, attacks (which may include sophisticated cyber-attacks), compromise or the mishandling of data by our employees and contractors, then our reputation, customer trust, business, results of operations and financial condition could be adversely affected. Cyber incidents have been increasing in sophistication and frequency and can include third parties gaining access to employee or customer data using stolen or inferred credentials, computer malware, viruses, spamming, phishing attacks, ransomware, vulnerabilities in first- or third-party code, card skimming code, and other deliberate attacks and attempts to gain unauthorized access. These attacks and activity are also being facilitated or enhanced by evolving technologies, including AI. This risk is increased by the difficulty of balancing rapid vulnerability patching and system availability in a large and rapidly-changing production environment. At times, we may be unable to patch all of our systems in a manner that strictly adheres to our internally prescribed timelines. The techniques used to sabotage or to obtain unauthorized access to our platform, systems, networks, or physical facilities in which data is stored or through which data is transmitted change frequently, and we may be unable to implement adequate preventative measures or stop security breaches while they are occurring. Because the techniques used by threat actors who may attempt to penetrate and sabotage our computer systems change frequently and may not be recognized until launched against a target, we may be unable to anticipate these techniques. Additionally, with the expansion of r…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Recent cybersecurity incidents and compromises affecting large institutions, including an incident that affected us in 2024, suggest that the risk of such events is significant, even if privacy protection and security measures are implemented and enforced. A cyber-attack, incident, or compromise could result in a material disruption of our development programs and our business operations, whether due to a loss of our trade secrets or other proprietary information or other disruptions. These cyber-attacks could be carried out by threat actors of all types (including but not limited to nation states, organized crime, other criminal enterprises, individual actors and/or advanced persistent threat groups). In addition, we may experience intrusions on our physical premises by any of these threat actors. To the extent that any compromise, disruption or security breach were to result in a loss of, or damage to, our data or applications, or inappropriate disclosure of confidential or proprietary information, we could incur liability, incur significant costs associated with remediation and the implementation of additional security measures, including costs to deploy additional personnel and protection technologies, train employees, and engage third-party experts and consultants, and our competitive position could be harmed. Any breach, loss, or compromise of personal data may also subject us to civil fines and penalties, or claims for damages either under the General Data Protection Regulation (the “EU GDPR”), the EU GDPR as incorporated into United Kingdom law, and relevant member state law in the European Union, other foreign laws, and other relevant state and federal privacy laws in the United States.

Current wording

Recent cybersecurity incidents and compromises affecting large institutions, including an incident that affected us in 2024, suggest that the risk of such events is significant, even if privacy protection and security measures are implemented and enforced. A cyber-attack, incident, or compromise could result in a material disruption of our development programs and our business operations, whether due to a loss of our trade secrets or other proprietary information or other disruptions. These cyber-attacks could be carried out by threat actors of all types (including but not limited to nation states, organized crime, other criminal enterprises, individual actors, malicious insiders, and/or advanced persistent threat groups). In addition, we may experience intrusions on our physical premises by any of these threat actors. To the extent that any compromise, disruption or security breach were to result in a loss of, or damage to, our data or applications, or inappropriate disclosure of confidential or proprietary information, we could incur liability, incur significant costs associated with remediation and the implementation of additional security measures, including costs to deploy additional personnel and protection technologies, train employees, and engage third-party experts and consultants, and our competitive position could be harmed. Any breach, loss, or compromise of personal data may also subject us to civil fines and penalties, or claims for damages either under the General Data Protection Regulation (the “EU GDPR”), the EU GDPR as incorporated into United Kingdom law, and relevant member state law in the European Union, other foreign laws, and other relevant state and federal privacy laws in the United States.

Previous wording

Our success is dependent, in part, upon protecting our proprietary technology. We rely on a combination of patents, copyrights, trademarks, service marks, trade secret laws and contractual restrictions to establish and protect our proprietary rights in our products and services. However, the steps we take to protect our intellectual property may be inadequate. We will not be able to protect our intellectual property if we are unable to enforce our rights or if we do not detect unauthorized use of our intellectual property. Any of our trademarks or other intellectual property rights may be challenged by others or invalidated through administrative process or litigation. Furthermore, legal standards relating to the validity, enforceability and scope of protection of intellectual property rights are uncertain. Additionally, the intellectual property ownership and license rights, including copyrights and patents surrounding AI technologies, which we are increasingly building into our product offerings, has not been fully addressed by U.S. courts or other federal or state laws or regulations, and the use or adoption of AI technologies in our products and services may expose us to copyright infringement or other intellectual property misappropriation claims. Despite our precautions, it may be possible for unauthorized third parties to copy our technology and use information that we regard as proprietary to create products and services that compete with ours. Some license provisions protecting against unauthorized use, copying, transfer and disclosure of our offerings may be unenforceable under the laws of certain jurisdictions and foreign countries. In addition, the laws of some countries do not protect proprietary rights to the same extent as the laws of the United States. To the extent we expand our international activities, our exposure to unauthorized copying and use of our technology and proprietary information may increase.

Current wording

Our success is dependent, in part, upon protecting our proprietary technology. We rely on a combination of patents, copyrights, trademarks, service marks, trade secret laws and contractual restrictions to establish and protect our proprietary rights in our products and services. However, the steps we take to protect our intellectual property may be inadequate. We will not be able to protect our intellectual property if we are unable to enforce our rights or if we do not detect unauthorized use of our intellectual property. Any of our trademarks or other intellectual property rights may be challenged by others or invalidated through administrative process or litigation. Furthermore, legal standards relating to the validity, enforceability and scope of protection of intellectual property rights are uncertain. Additionally, the intellectual property ownership and license rights surrounding AI technologies, which we are increasingly building into our product offerings, have not been fully addressed by U.S. courts or other federal, state or international laws or regulations, and the use or adoption of AI technologies in our products and services may expose us to claims of copyright infringement or other intellectual property infringement or misappropriation, violation of applicable laws or regulations, or breach of contractual obligations to which we are or may become subject. Despite our precautions, it may be possible for unauthorized third parties to copy our technology and use information that we regard as proprietary to create products and services that compete with ours. Some license provisions protecting against unauthorized use, copying, transfer and disclosure of our offerings may be unenforceable under the laws of certain jurisdictions and foreign countries. In addition, the laws of some countries do not protect proprietary rights to the same extent as the laws of the United States. To the extent we expand our international activities, our exposure to unauthorized copying and use of our technology and proprietary information may increase.

Previous wording

For example, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collective, the “CCPA”), among other things, requires covered companies to provide disclosures to California residents and afford such individuals the ability to opt out of the sales or sharing of their personal data. New and proposed regulations implementing the CCPA continue to evolve the standards of protection required by the CCPA. In addition to increasing our potential exposure to regulatory enforcement, the CCPA also provides for violations and a limited private right of action, which may increase our exposure to civil litigation.

Current wording

For example, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), among other things, requires covered companies to provide disclosures to California residents and afford such individuals the ability to opt out of the sales or sharing of their personal data. New and proposed regulations implementing the CCPA continue to evolve the standards of protection required by the CCPA. In addition to increasing our potential exposure to regulatory enforcement, the CCPA also provides for violations and a limited private right of action, which may increase our exposure to civil litigation.

Previous wording

The landscape of privacy and cybersecurity regulation in the U.S. is increasingly complex. Numerous states have passed comprehensive privacy and data security laws, which impose obligations on covered businesses similar – but not identical – to those under the CCPA, and some states have passed privacy and cybersecurity laws governing specific sectors, technologies, or categories of personal data, such as laws regulating health data, children’s data, and online chatbots. Many of those states have also passed – or proposed to pass – laws and regulations that amend the standard of protection required by such laws. A number of other states have proposed similar privacy legislation, and the U.S. Congress has considered – and may reintroduce – federal privacy and cybersecurity legislation that may or may not preempt some or all of such U.S. state privacy laws, and may provide a private right of action. Through executive and legislative action, the federal government has also taken steps to restrict data transactions involving persons affiliated with China, Russia, Venezuela, and other countries of concern. For example, Executive Order 14117 on "Preventing Access to Americans' Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern" as implemented by Department of Justice regulations issued in December 2024, prohibits data brokerage transactions involving certain sensitive personal data categories to countries of concern. The regulations also restrict certain investment agreements, employment agreements and vendor agreements involving such data and countries of concern, absent specified cybersecurity controls. Actual or alleged violations of these regulations may be punishable by criminal and/or civil sanctions. The evolving complexity of privacy and data security legislation in the U.S. may complicate our compliance efforts and further increase our risk of regulatory enforcement, penalties and litigation.

Current wording

The landscape of privacy and cybersecurity regulation in the U.S. is increasingly complex. Numerous states have passed comprehensive privacy and data security laws, which impose obligations on covered businesses similar – but not identical – to those under the CCPA, and some states have passed privacy and cybersecurity laws governing specific sectors, technologies, or categories of personal data, such as laws regulating health data, children’s data, and online chatbots. Many of those states have also passed – or proposed to pass – laws and regulations that amend the standard of protection required by such laws. A number of other states have proposed similar privacy legislation, and the U.S. Congress has considered – and may reintroduce – federal privacy and cybersecurity legislation that may or may not preempt some or all of such U.S. state privacy laws, and may provide a private right of action. Through executive and legislative action, the federal government has also taken steps to restrict data transactions involving persons affiliated with China, Russia, Venezuela, Iran, and other countries of concern. For example, the Department of Justice January 8, 2025 rule on "Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons,” prohibits the sharing of certain sensitive personal data categories to countries of concern. The regulations also restrict certain investment agreements, employment agreements and vendor agreements involving such data and countries of concern, absent specified cybersecurity controls. Actual or alleged violations of these regulations are punishable by criminal and/or civil sanctions. The evolving complexity of privacy and data security legislation in the U.S. may complicate our compliance efforts and further increase our risk of regulatory enforcement, penalties and litigation.

Previous wording

We currently use and integrate AI technologies into our business processes and services. Development, use, and deployment of these technologies present risks and challenges that could affect our business. If we enable or use solutions that draw controversy due to perceived or actual negative societal impact or otherwise cause harm, we may experience brand or reputational harm, competitive harm, legal liability, and defensive costs and expenses.

Current wording

We currently use and integrate AI technologies into our business processes and services. Development, use, and deployment of these technologies could pose cybersecurity, data privacy, IT, intellectual property, regulatory, legal, operational, competitive, reputational, and other risks and challenges that could affect our business. Specifically, risks related to bias, AI hallucinations, discrimination, harmful content, misinformation, fraud, scams, targeted attacks such as model poisoning or data poisoning, surveillance, data leakage, loss of consensus reality, inequality, environmental harms, and other harms may flow from our development, use, or deployment of AI technologies. If we enable or use solutions that draw controversy due to perceived or actual negative societal impact or otherwise cause harm, we may experience brand or reputational harm, competitive harm, legal liability, and defensive costs and expenses.

Previous wording

A growing number of legislators and regulators are adopting laws and regulations addressing, and have focused enforcement efforts on the development and adoption of AI technologies and use of such technologies in compliance with ethical standards and societal expectations. Several states, including Colorado, California, and Texas passed laws that will take effect in 2026 to regulate various uses of AI, from making consequential decisions to requiring companies to disclose sources of training data for AI technologies, among other requirements. In addition, U.S. states and the federal government have a wide variety of measures to regulate various facets of AI development, deployment, and use in recent years, and it is possible that new laws and regulations will be adopted in the near future, or that existing laws and regulations may be interpreted in ways that would affect our business and the ways in which we and our customers use our AI technologies, our financial condition and our results of operations, including as a result of the cost to comply with such laws or regulations. A proposed 10-year federal moratorium on the enforcement of certain state AI laws, which was included in the Trump Administration’s budget reconciliation bill, was excluded from the One Big Beautiful Bill Act (“OBBBA”). This, in turn, may further stimulate AI regulation in the states, contributing to a complicated legislative patchwork.

Current wording

A growing number of legislators and regulators are adopting laws and regulations addressing, and have focused enforcement efforts on the development and adoption of AI technologies and use of such technologies in compliance with ethical standards and societal expectations. Several states, including Colorado, California, and Texas passed laws that have taken or will take effect in 2026 to regulate various uses of AI, from making consequential decisions to requiring companies to disclose sources of training data for AI technologies, among other requirements. In addition, U.S. states and the federal government have a wide variety of measures to regulate various facets of AI development, deployment, and use in recent years, and it is possible that new laws and regulations will be adopted in the near future, or that existing laws and regulations may be interpreted in ways that would affect our business and the ways in which we and our customers use our AI technologies, our financial condition and our results of operations, including as a result of the cost to comply with such laws or regulations. The Trump Administration has endorsed a federal moratorium on the enforcement of certain state AI laws, including through a December 11, 2025 Executive Order on “Ensuring a National Policy Framework for Artificial Intelligence.” On March 20, 2026 the Trump Administration also issued a National Policy Framework setting forth non-binding policy priorities for federal AI regulation. So far, these efforts have not been successful in curtailing state action on AI regulation, contributing to a complicated legislative patchwork, which may be litigated in state and federal courts.

Previous wording

Outside the U.S., lawmaking and regulation relating to AI is proceeding at a similar pace. In Europe, for example, the EU’s Artificial Intelligence Act (“AI Act”) entered into force on August 1, 2024 and, with some exceptions, will begin to apply as of August 2, 2026. This legislation imposes significant obligations on providers and deployers of high-risk AI systems, and encourages providers and deployers of AI systems to account for EU ethical principles in their development and use of these systems. As we continue to develop and use AI systems that are governed by the AI Act or other emerging regulations, it may necessitate ensuring higher standards of data quality, transparency, and human oversight, as well as adhering to specific ethical, accountability, and administrative requirements, some of which may increase our costs and compliance obligations. Further, potential government regulation related to AI use and ethics may also increase the cost of research and development in this area, and failure to properly remediate AI usage or ethics issues may cause public confidence in AI to be undermined, which could slow adoption of AI in our products and services.

Current wording

Outside the U.S., lawmaking and regulation relating to AI is proceeding at a similar pace. In Europe, for example, the EU’s Artificial Intelligence Act (“AI Act”) entered into force on August 1, 2024 and, with some exceptions, and potentially evolving implementation timelines with the Digital Omnibus Regulation proposal, will begin to apply as of August 2, 2026. This legislation imposes significant obligations on providers and deployers of high-risk AI systems, and encourages providers and deployers of AI systems to account for EU ethical principles in their development and use of these systems. As we continue to develop and use AI systems, which may be governed by the AI Act or other emerging regulations, we may be required to ensure higher standards of data quality, transparency, and human oversight, as well as adhere to specific ethical, accountability, and administrative requirements, some of which may increase our costs and compliance obligations. Further, potential government regulation related to AI use and ethics may also increase the cost of research and development in this area, and failure to properly remediate AI usage or ethics issues may cause public confidence in AI to be undermined, which could slow adoption of AI in our products and services.

Previous wording

The rapid evolution of AI technologies and regulatory frameworks will require the application of significant resources to design, develop, test and maintain such systems to help ensure that AI is implemented in accordance with applicable law and regulation and in a socially responsible manner and to minimize any real or perceived unintended harmful impacts. The use of certain AI technologies can also give rise to intellectual property risks, including by disclosing or otherwise compromising our confidential or proprietary intellectual property, or by undermining our ability to assert or defend ownership rights in intellectual property created with the assistance of AI tools.

Current wording

The rapid evolution of AI technologies and regulatory frameworks will require the application of significant resources to design, develop, test and maintain such systems to help ensure that AI is implemented in accordance with applicable law and regulation and in a socially responsible manner and to minimize any real or perceived unintended harmful impacts. The use of certain AI technologies can also give rise to intellectual property risks, including the disclosure or compromise of our confidential information or other proprietary intellectual property through the use of agentic and generative AI tools, or the ability to assert or defend ownership rights in intellectual property created with the use of agentic and generative AI tools.

Previous wording

Our vendors have in turn incorporated AI tools into their offerings, and the providers of these AI tools may not meet existing or rapidly evolving regulatory or industry standards, including with respect to privacy and data security. Further, bad actors around the world use increasingly sophisticated methods, including the use of AI, to engage in illegal activities involving the theft and misuse of personal information, confidential information and intellectual property. Any of these effects could damage our reputation, result in the loss of valuable property and information, cause us to breach applicable laws and regulations, and adversely impact our business.

Current wording

Our vendors have in turn incorporated AI tools into their offerings, and the providers of these AI tools may not meet existing or rapidly evolving regulatory or industry standards, including with respect to privacy and data security. Further, bad actors around the world use increasingly sophisticated methods, including the use of AI, to engage in illegal activities involving the theft and misuse of personal information, confidential information and intellectual property. Use of generative AI models in our internal or third-party systems may create new attack surfaces or methods for adversaries, which could impact us and our vendors. The integration of AI systems, by us or by our vendors, may increase cybersecurity risk. Any of these effects could damage our reputation, result in the loss of valuable property and information, cause us to breach applicable laws and regulations, and adversely impact our business.

Previous wording

Certain aspects of how our customers utilize our platform are subject to regulations in the United States, European Union and elsewhere. In recent years, U.S. and European lawmakers and regulators have expressed concern over the use of third-party cookies or web beacons for online behavioral advertising, and legislation adopted recently in the European Union requires informed consent for the placement of a cookie on a user’s device. Regulation of cookies and web beacons may lead to restrictions on our activities, such as efforts to understand users’ Internet usage. New and expanding “Do Not Track” regulations have recently been enacted or proposed that protect users’ right to choose whether or not to be tracked online. Related regulations may restrict the use or disclosure of consumer information without sufficient consent. These regulations seek, among other things, to allow end users to have greater control over the use of private information collected online, to forbid the collection or use of online information, to demand a business to comply with their choice to opt out of such collection or use, and to place limits upon the disclosure of information to third-party websites. These policies could have a significant impact on the operation of our customer platform, impair our attractiveness to customers, and lead to claims or threatened claims, which would harm our business.

Current wording

Certain aspects of how our customers utilize our platform are subject to regulations in the United States, European Union and elsewhere. In recent years, U.S. and European lawmakers and regulators have expressed concern over the use of third-party cookies or web beacons for online behavioral advertising, and legislation adopted recently in the European Union requires informed consent for the placement of a cookie on a user’s device. Regulation of cookies and web beacons may lead to restrictions on our activities, such as efforts to understand users’ Internet usage. New and expanding “Do Not Track” regulations have recently been enacted or proposed that protect users’ right to choose whether or not to be tracked online. The entry into force of state law requirements to implement Universal Opt-Out Mechanisms (UOOMs) may require us to adapt our data collection, processing, and retention practices to ensure compliance with evolving privacy regulations. We are actively monitoring these developments and assessing the potential operational and financial impact of implementing the necessary technical and organizational measures to support UOOM functionality across our platforms.

Previous wording

Accordingly, these laws or significant new laws or regulations or changes in, or repeals of, existing laws, regulations or governmental policy may change the way these customers do business and may require us to implement additional features or offer additional contractual terms to satisfy customer and regulatory requirements, or could cause the demand for and sales of our customer platform to decrease and adversely impact our financial results.

Current wording

Many of our customers and potential customers in the healthcare, financial services and other industries are subject to substantial regulation regarding their collection, use and protection of data and may be the subject of further regulation in the future. Accordingly, these laws or significant new laws or regulations or changes in, or repeals of, existing laws, regulations or governmental policy may change the way these customers do business and may require us to implement additional features or offer additional contractual terms to satisfy customer and regulatory requirements, or could cause the demand for and sales of our customer platform to decrease and adversely impact our financial results.

Previous wording

New income, sales, use or other tax laws, statutes, rules, regulations or ordinances could be enacted at any time. Any new taxes could adversely affect our domestic and international business operations, and our business and financial performance. Further, existing tax laws, statutes, rules, regulations or ordinances could be interpreted, changed, modified or applied adversely to us. These events could require us or our customers to pay additional tax amounts on a prospective or retroactive basis, as well as require us or our customers to pay fines and/or penalties and interest for past amounts deemed to be due. Additionally, new, changed, modified or newly interpreted or applied tax laws could increase our customers’ and our compliance, operating and other costs, as well as the costs of our platform. Any or all of these events could adversely impact our business, cash flows and financial performance. Furthermore, as our employees continue to work remotely from geographic locations across the United States and internationally, we may become subject to additional taxes and our compliance burdens with respect to the tax laws of additional jurisdictions may increase.

Current wording

New income, sales, use or other tax laws, statutes, rules, regulations or ordinances could be enacted at any time. For example, on July 4, 2025, tax reform legislation included in the One Big Beautiful Bill Act was enacted in the United States. Key corporate tax provisions include the restoration of 100% bonus depreciation, allowing for the immediate expensing of domestic research and experimental expenditures, changes to Section 163(j) interest limitations, updates to Global Intangible Low-Taxed Income and Foreign-Derived Intangible Income rules, amendments to energy credits, and expanded aggregation requirements for the Section 162(m) limitation on executive compensation. Any new tax laws could adversely affect our current tax position, domestic and international business operations, and our business and financial performance. Further, existing tax laws, statutes, rules, regulations or ordinances could be interpreted, changed, modified or applied adversely to us. These events could require us or our customers to pay additional tax amounts on a prospective or retroactive basis, as well as require us or our customers to pay fines and/or penalties and interest for past amounts deemed to be due. Additionally, new, changed, modified or newly interpreted or applied tax laws could increase our customers’ and our compliance, operating and other costs, as well as the costs of our platform. Any or all of these events could adversely impact our business, cash flows and financial performance. Furthermore, as our employees continue to work remotely from geographic locations across the United States and internationally, we may become subject to additional taxes and our compliance burdens with respect to the tax laws of additional jurisdictions may increase.

Previous wording

As a multinational organization, we may be subject to taxation in several jurisdictions around the world with increasingly complex tax laws, the application of which can be uncertain. The amount of taxes we pay in these jurisdictions could increase substantially as a result of changes in the applicable tax principles, including increased tax rates, new tax laws or revised interpretations of existing tax laws and precedents, or challenges to our tax positions by tax authorities, any of which could have a material adverse effect on our liquidity, financial condition or operating results. We also may invest in companies located in jurisdictions outside the United States, and these investments may result in complex U.S. or non-U.S. tax consequences. New global tax developments may have a material impact to our business, cash flows, or financial results. Such developments, may include certain Organization for Economic Co-operation and Development's proposals including the implementation of global minimum tax under the Pillar Two model rules, the European Commission’s and certain major jurisdictions’ heightened interest in and taxation of companies participating in the digital economy. In addition, the authorities in these jurisdictions could review our tax returns and impose additional tax, interest and penalties, and the authorities could claim that various withholding requirements apply to us or our subsidiaries or assert that benefits of tax treaties are not available to us or our subsidiaries, or assert that we are subject to tax in a jurisdiction where we believe we have not established a taxable nexus, often referred to as a “permanent establishment” under international tax treaties, any of which could have a material impact on us, our financial condition or our operating results.

Current wording

As a multinational organization, we may be subject to taxation in several jurisdictions around the world with increasingly complex tax laws, the application of which can be uncertain. The amount of taxes we pay in these jurisdictions could increase substantially as a result of changes in the applicable tax principles, including increased tax rates, new tax laws or revised interpretations of existing tax laws and precedents, or challenges to our tax positions by tax authorities, any of which could have a material adverse effect on our liquidity, financial condition or operating results. We also may invest in companies located in jurisdictions outside the United States, and these investments may result in complex U.S. or non-U.S. tax consequences. New global tax developments may have a material impact to our business, cash flows, or financial results. Such developments, may include certain Organization for Economic Co-operation and Development's proposals including the implementation of global minimum tax under the Pillar Two model rules, and the European Commission’s and certain major jurisdictions’ heightened interest in and taxation of companies participating in the digital economy. In addition, the authorities in these jurisdictions could review our tax returns and impose additional tax, interest and penalties, and the authorities could claim that various withholding requirements apply to us or our subsidiaries or assert that benefits of tax treaties are not available to us or our subsidiaries, or assert that we are subject to tax in a jurisdiction where we believe we have not established a taxable nexus, often referred to as a “permanent establishment” under international tax treaties, any of which could have a material impact on us, our financial condition or our operating results.

Previous wording

As of December 31, 2024, we had $640.0 million of U.S. federal and $723.7 million of state net operating loss carryforwards. U.S. federal net operating losses generated in taxable years beginning after December 31, 2017 have an indefinite carryforward and state net operating losses begin to expire in 2027. The state net operating loss carryforwards could expire unused and be unavailable to offset future income tax liabilities, which could adversely affect our profitability. In addition, under Section 382 and Section 383 of the Internal Revenue Code of 1986, our ability to utilize net operating loss carryforwards or other tax attributes, such as research tax credits, in any taxable year may be further limited if we experience an “ownership change.” An ownership change generally occurs if one or more stockholders or groups of stockholders who own at least 5% of our stock increase their ownership by more than 50 percentage points over their lowest ownership percentage (by value) within a rolling three-year period. Similar rules may apply under state tax laws. We may have experienced an ownership change in the past, and future issuances of our stock or other transactions could cause an ownership change. It is possible that any such ownership change could have a material effect on the use of our net operating loss carryforwards or other tax attributes accrued prior to such ownership change, which could adversely affect our profitability.

Current wording

As of December 31, 2025, we had $1.1 billion of U.S. federal and $866.1 million of state net operating loss carryforwards. U.S. federal net operating losses generated in taxable years beginning after December 31, 2017 have an indefinite carryforward and may be used to offset up to 80% of taxable income. State net operating loss carryforwards are subject to varying carryforward periods with certain states beginning to expire as early as 2026 and others conforming to an indefinite carryforward period. A portion of our state net operating loss carryforwards could expire unused and be unavailable to offset future income tax liabilities, which could adversely affect our profitability. In addition, under Section 382 and Section 383 of the Internal Revenue Code of 1986, our ability to utilize net operating loss carryforwards or other tax attributes, such as research tax credits, in any taxable year may be further limited if we experience an “ownership change.” An ownership change generally occurs if one or more stockholders or groups of stockholders who own at least 5% of our stock increase their ownership by more than 50 percentage points over their lowest ownership percentage (by value) within a rolling three-year period. Similar rules may apply under state tax laws. We may have experienced an ownership change in the past, and future issuances of our stock or other transactions could cause an ownership change. It is possible that any such ownership change could have a material effect on the use of our net operating loss carryforwards or other tax attributes accrued prior to such ownership change, which could adversely affect our profitability.

Previous wording

We generated net losses of $8.5 million for the nine months ended September 30, 2025 and net losses of $0.4 million for the nine months ended September 30, 2024. As of September 30, 2025 we had an accumulated deficit of $808.3 million. We will need to generate and sustain increased revenue levels in future periods to become consistently profitable, and, even if we do, we may not be able to maintain or increase our level of profitability. We have spent and intend to continue to expend significant funds on our marketing, sales, customer service, and general and administrative operations, the development and enhancement of our customer platform, scaling our data center infrastructure and services capabilities and expanding into new markets. Our efforts to grow our business may be more costly than we expect, and we may not be able to increase our revenue enough to offset our higher operating expenses. We may incur significant losses in the future for a number of reasons, including the other risks described in this Quarterly

Current wording

We generated net income of $32.6 million for the three months ended March 31, 2026 and net losses of $21.8 million for the three months ended March 31, 2025. As of March 31, 2026 we had an accumulated deficit of $721.3 million. We will need to generate and sustain increased revenue levels in future periods to become consistently profitable, and, even if we do, we may not be able to maintain or increase our level of profitability. We have spent and intend to continue to expend significant funds on our marketing, sales, customer service, and general and administrative operations, the development and enhancement of our customer platform, scaling our data center infrastructure and services capabilities and expanding into new markets. Our efforts to grow our business may be more costly than we expect, and we may not be able to increase our revenue enough to offset our higher operating expenses. We may incur significant losses in the future for a number of reasons, including the other risks described in this Quarterly Report on Form 10-K, and unforeseen expenses, difficulties, complications and delays and other unknown events. If we are unable to achieve and sustain profitability, the market price of our common stock may decrease significantly.

Previous wording

From time to time, we may invest in social impact investment funds. As of September 30, 2025, we have invested $12.2 million in the Black Economic Development Fund and $7.5 million in support of Minority Depository Institutions to help close the racial wealth, health and opportunity gap. There is no guarantee as to the performance of this investment or any similar investments we make in the future. Depending on the performance of this investment and future investments we may make, we may not receive any return on our investment or we may lose our entire investment, which could have an adverse effect on our business.

Current wording

From time to time, we may invest in social impact investment funds. As of March 31, 2026, we have invested $12.2 million in the National Strategic Investments Impact Fund (f/k/a the Black Economic Development Fund) and $7.5 million in support of Minority Depository Institutions to help close the racial wealth, health and opportunity gap. There is no guarantee as to the performance of this investment or any similar investments we make in the future. Depending on the performance of this investment and future investments we may make, we may not receive any return on our investment or we may lose our entire investment, which could have an adverse effect on our business

Previous wording

The trading prices of the securities of technology companies, including providers of software via the cloud-based model, have been highly volatile. Since shares of our common stock were sold in our initial public offering in October 2014 at a price of $25.00 per share, our stock price has ranged from $25.79 to $866.00 through September 30, 2025. The market price of our common stock may fluctuate significantly in response to numerous factors, many of which are beyond our control, including:

Current wording

The trading prices of the securities of technology companies, including providers of software via the cloud-based model, have been highly volatile. Since shares of our common stock were sold in our initial public offering in October 2014 at a price of $25.00 per share, our stock price has ranged from $25.79 to $881.13 through March 31, 2026. The market price of our common stock may fluctuate significantly in response to numerous factors, many of which are beyond our control, including:

Previous wording

If adequate funds are not available on acceptable terms, we may be unable to invest in future growth opportunities, which could seriously harm our business and operating results. If we incur debt, the debt holders could have rights senior to common stockholders to make claims on our assets, and the terms of any debt could restrict our operations, including our ability to pay dividends on our common stock. Furthermore, if we issue equity securities, stockholders will experience dilution, and the new equity securities could have rights senior to those of our common stock. The Notes are and any additional equity or equity-linked financings would be dilutive to our stockholders. Because our decision to issue securities in any future offering will depend on market conditions and other factors beyond our control, we cannot predict or estimate the amount, timing or nature of our future offerings. As a result, our stockholders bear the risk of our future securities offerings reducing the market price of our common stock and diluting their interest.

Current wording

If adequate funds are not available on acceptable terms, we may be unable to invest in future growth opportunities, which could seriously harm our business and operating results. If we incur additional debt, including under the credit facility, the debt holders would have rights senior to common stockholders to make claims on our assets. Additionally, the credit facility restricts our operations, including our ability to pay dividends on our common stock. Furthermore, if we issue equity securities, stockholders will experience dilution, and the new equity securities could have rights senior to those of our common stock. The Notes are and any additional equity or equity-linked financings would be dilutive to our stockholders. Because our decision to issue securities in any future offering will depend on market conditions and other factors beyond our control, we cannot predict or estimate the amount, timing or nature of our future offerings. As a result, our stockholders bear the risk of our future securities offerings reducing the market price of our common stock and diluting their interest.