BOX INC

Previous wording

If we do not compete effectively, our customers do not renew their subscriptions or expand their use of our services, or if we are unable to attract new customers to our higher-tiered Enterprise Advanced plan or at rates that are consistent with our expectations, or if the market for cloud-based enterprise services declines or develops more slowly than we expect, our business could be adversely affected.

Current wording

If we do not compete effectively, our customers do not renew their subscriptions or expand their use of our services, or if we are unable to attract new customers or expand deployments with existing customers to our higher-tiered Enterprise Advanced plan or at rates that are consistent with our expectations, or if the market for cloud-based enterprise services declines or develops more slowly than we expect, our business could be adversely affected.

Previous wording

The market for cloud content management services is fragmented, rapidly evolving and highly competitive, with relatively low barriers to entry for certain applications and services. Many of our competitors and potential competitors are larger and have greater brand recognition, longer operating histories, and significantly greater resources than we do. Our primary competitors in the enterprise content management market include Microsoft (SharePoint) and OpenText (Documentum). In the enterprise file sync and share market, our primary competitors include Microsoft (OneDrive), Google (Drive) and, to a lesser extent, Dropbox. We also compete with companies in the e-signature, content collaboration, workflow automation, artificial intelligence, and security and governance markets. With the introduction of new technologies and market entrants, we expect competition to intensify in the future and our primary competitors may change. For example, disruptive technologies such as generative AI may fundamentally alter the market for our services in unpredictable ways, including reduced customer demand and increased costs of doing business. If we fail to compete effectively, our business will be harmed. Some of our competitors offer their products or services at lower prices or for free as part of a broader bundled product sale or enterprise license arrangement, which has placed pricing pressure on our business. If we are unable to achieve our target pricing levels, our operating results will be negatively impacted. For us to compete effectively, we need to introduce new products and services in a timely and cost-effective manner, meet customer expectations and needs at prices that customers are willing to pay, and continue to enhance the features and functionalities of our intelligent content management platform. In addition, pricing pressures and increased competition could result in reduced sales, lower margins, losses or the failure of our services to achieve or maintain widespread market acceptance, any of which could harm our business.

Current wording

With the introduction of new technologies and market entrants, we expect competition to intensify in the future and our primary competitors may change. For example, disruptive technologies such as generative AI may fundamentally alter the market for our services in unpredictable ways, including reduced customer demand and increased costs of doing business. As AI becomes increasingly integrated into our markets, competitors may be able to incorporate AI capabilities more efficiently or achieve faster adoption than we do, which could adversely affect demand for our offerings. If we fail to compete effectively, our business will be harmed. Some of our competitors offer their products or services at lower prices or for free as part of a broader bundled product sale or enterprise license arrangement, which has placed pricing pressure on our business. If we are unable to achieve our target pricing levels, our operating results will be negatively impacted. For us to compete effectively, we need to introduce new products and services in a timely and cost-effective manner, meet customer expectations and needs at prices that customers are willing to pay, and continue to enhance the features and functionalities of our intelligent content management platform. In addition, pricing pressures and increased competition could result in reduced sales, lower margins, losses or the failure of our services to achieve or maintain widespread market acceptance, any of which could harm our business.

Previous wording

Many of our competitors are able to devote greater resources to the development, promotion and sale of their products or services. In addition, many of our competitors have established marketing relationships and major distribution agreements with channel partners, consultants, system integrators and resellers. Competitors may offer products or services at lower prices or with greater depth than our services. Our competitors may be able to respond more quickly and effectively to new or changing opportunities, technologies, standards or customer requirements. Furthermore, some potential customers, particularly large enterprises, may elect to develop their own internal solutions. For any of these reasons, we may not be able to compete successfully against our competitors.

Current wording

Many of our competitors are able to devote greater resources to the development, promotion and sale of their products or services, including larger sales and customer support teams and broader distribution relationships with channel partners, consultants, system integrators, and resellers. Competitors may offer products or services at lower prices or with greater depth than our services. Our competitors may be able to respond more quickly and effectively to new or changing opportunities, technologies, standards or customer requirements. Furthermore, some potential customers, particularly large enterprises, may elect to develop their own internal solutions. To remain competitive, we must continue to invest in product development, go-to-market capabilities and technology upgrades, and we may need to allocate significant resources to address rapid technological change and frequent new product introductions. If we are unable to make these investments or otherwise compete effectively, our business and operating results could be harmed.

Previous wording

To improve our operating results, it is important that our customers renew their subscriptions with us when their existing subscription term expires. We cannot assure you that customers will renew their subscriptions upon expiration at the same or higher level of service, for the same number of seats or for the same duration of time, if at all. Our net retention rate has fluctuated from period to period and it may decrease again in the future if our customers do not renew their subscriptions with us or decrease their use of our services. Our net retention rate was approximately 104% and 102% as of October 31, 2025 and 2024, respectively.

Current wording

To improve our operating results, it is important that our customers renew their subscriptions with us when their existing subscription term expires. We cannot assure you that customers will renew their subscriptions upon expiration at the same or higher level of service, for the same number of seats or for the same duration of time, if at all. Our net retention rate has fluctuated from period to period and it may decrease again in the future if our customers do not renew their subscriptions with us or decrease their use of our services. Our net retention rate was approximately 105% and 102% as of April 30, 2026 and 2025, respectively.

Previous wording

If we are unable to attract new customers at rates that are consistent with our expectations, our future revenue and operating results could be adversely impacted.

Current wording

If we are unable to attract new customers, or expand deployments with existing customers, at rates that are consistent with our expectations, our future revenue and operating results could be adversely impacted.

Previous wording

To improve our operating results and continue growing our business, it is important that we continue to attract new customers and expand deployment of our solutions and products with existing customers. To the extent we are successful in increasing our customer base, we could incur increased losses because costs associated with new customers are generally incurred up front, while revenue is recognized ratably over the term of our subscription services. Alternatively, to the extent we are unsuccessful in increasing our customer base, we could also incur increased losses as costs associated with marketing programs and new products intended to attract new customers would not be offset by incremental revenue and cash flow. Changes in economic conditions may financially impact our existing and prospective customers and cause them to delay or reduce their technology spending, which may adversely affect our ability to attract new customers. For example, our business continues to be impacted by pressure from customers’ lower headcount growth and greater budget scrutiny on IT decisions. All of these factors could negatively impact our future revenue and operating results.

Current wording

To improve our operating results and continue growing our business, it is important that we continue to attract new customers and expand deployments of our solutions and products with existing customers. To the extent we are successful in increasing our customer base, we could incur increased losses because costs associated with new customers are generally incurred up front, while revenue is recognized ratably over the term of our subscription services. Alternatively, to the extent we are unsuccessful in increasing our customer base, we could also incur increased losses as costs associated with marketing programs and new products intended to attract new customers would not be offset by incremental revenue and cash flow. Changes in economic conditions may financially impact our existing and prospective customers and cause them to delay or reduce their technology spending, which may adversely affect our ability to attract new customers. For example, our business continues to be impacted by pressure from customers’ lower headcount growth and greater budget scrutiny on IT decisions. All of these factors could negatively impact our future revenue and operating results.

Previous wording

Our business depends on the overall demand for cloud content management services and on the economic health of our current and prospective customers. The U.S. and other key international economies have experienced cyclical downturns from time to time that have resulted in a significant weakening of the economy, more limited availability of credit, a reduction in business confidence and activity, and other difficulties that may affect the industries to which we sell our services. An economic downturn, recession, or uncertainty about economic conditions, including volatility in the credit, equity and foreign exchange markets, inflation, rising interest rates, tariffs, potential U.S. sovereign default, bank failures and financial instability, supply chain disruptions, unemployment trends, the adverse effects of pandemics and geopolitical issues, such as the ongoing Russia-Ukraine conflict and the conflict in the Middle East, could cause customers to delay or reduce their information technology spending. This has in the past and may in the future result in reduced sales, longer sales cycles, reduced renewal rates, slower adoption of new technologies, and increased price competition. Any of these events would likely have an adverse effect on our business, operating results and financial position. We continue to face challenges from customers scrutinizing deals more closely due to the economic environment. In addition, there can be no assurance that enterprise content management and collaboration spending levels will increase following any recovery.

Current wording

Our business depends on the overall demand for cloud content management services and on the economic health of our current and prospective customers. The U.S. and other key international economies have experienced cyclical downturns from time to time that have resulted in a significant weakening of the economy, more limited availability of credit, a reduction in business confidence and activity, and other difficulties that may affect the industries to which we sell our services. An economic downturn, recession, or uncertainty about economic conditions, including volatility in the credit, equity and foreign exchange markets, inflation, changing interest rates, tariffs, potential U.S. sovereign default, bank failures and financial instability, supply chain disruptions, poor liquidity, reduced corporate profitability, unemployment trends, the adverse effects of pandemics and geopolitical issues, such as the ongoing Russia-Ukraine conflict and conflicts in the Middle East, could cause customers to delay or reduce their information technology spending. This has in the past and may in the future result in reduced sales, longer sales cycles, reduced renewal rates, slower adoption of new technologies, and increased price competition. These conditions can arise suddenly and the full impact can be difficult to predict. Any of these events would likely have an adverse effect on our business, operating results and financial position. We continue to face challenges from customers scrutinizing deals more closely due to the economic environment. In addition, there can be no assurance that enterprise content management and collaboration spending levels will increase following any recovery.

Previous wording

Our industry is marked by rapid technological developments and new and enhanced applications and services. If we are unable to enhance our existing services or offer new services that achieve market acceptance or keep pace with rapid technological developments, our business could be adversely affected. The success of any new services or enhancements to our existing services, such as Box AI, Box Apps, Box Automate, Box Extract, Box Hubs, Box Doc Gen and Box Forms, depends on several factors, including their timely completion, introduction and market acceptance. We also may experience business or economic disruptions that could adversely affect the productivity of our employees and result in delays in our product development process. We maintain a hybrid workforce (with a mix of employees working from offices and others working remotely), which may lead to disruptions and decreased productivity that could result in delays in our product development process. Failure in this regard may significantly impair our revenue growth and our future financial results. Our product development efforts could also be impacted by our workforce location strategy as we hire an increasing number of our employees in international locations, such as Poland. In addition, because our services are designed to operate on a variety of systems, we must continuously modify and enhance our services to keep pace with changes in internet-related hardware, mobile operating systems, and other software, communication, browser and database technologies. We may not be successful in developing these modifications and enhancements or bringing them to market in a timely fashion, which may negatively impact our customer renewal rates, limit the market for our solutions, or impair our ability to attract new customers. Furthermore, modifications to existing platforms or technologies will increase our research and development expenses. Any failure of our services to operate effectively with existing or future network platforms and technologies could reduce the demand for our services, result in customer dissatisfaction and adversely affect our business.

Current wording

Our industry is marked by rapid technological developments and new and enhanced applications and services. If we are unable to enhance our existing services or offer new services that achieve market acceptance or keep pace with rapid technological developments, our business could be adversely affected. The success of any new services or enhancements to our existing services, such as Box AI, Box Apps, Box Automate, Box Extract, Box Shield Pro, Box Hubs, Box Doc Gen and Box Forms, depends on several factors, including their timely completion, introduction and market acceptance. We also may experience business or economic disruptions that could adversely affect the productivity of our employees and result in delays in our product development process. We maintain a hybrid workforce (with a mix of employees working from offices and others working remotely), which may lead to disruptions and decreased productivity that could result in delays in our product development process. Failure in this regard may significantly impair our revenue growth and our future financial results. Our product development efforts could also be impacted by our workforce location strategy as we hire an increasing number of our employees in international locations, such as Poland. In addition, because our services are designed to operate on a variety of systems, we must continuously modify and enhance our services to keep pace with changes in internet-related hardware, mobile operating systems, and other software, communication, browser and database technologies. We may not be successful in developing these modifications and enhancements or bringing them to market in a timely fashion, which may negatively impact our customer renewal rates, limit the market for our solutions, or impair our ability to attract new customers. Furthermore, modifications to existing platforms or technologies will increase our research and development expenses. Any failure of our services to operate effectively with existing or future network platforms and technologies could reduce the demand for our services, result in customer dissatisfaction and adversely affect our business.

Previous wording

Issues relating to the use of new and evolving technologies such as generative AI powered by large language models and machine learning that we integrate into our product offerings may cause us to experience brand or reputational harm, competitive harm, legal liability, new or enhanced governmental or regulatory scrutiny, and to incur additional costs to resolve such issues. As with many innovations, AI presents risks and challenges that could undermine or slow its adoption, and therefore harm our business. For example, perceived or actual technical, legal, compliance, privacy, security, ethical or other issues relating to the use of AI may cause public confidence in AI to be undermined, which could slow our customers’ adoption of our products and services that use AI. In addition, litigation or government regulation related to the use of AI may also adversely impact our and others’ abilities to develop and offer products that use AI, as well as increase the cost and complexity of doing so. For example, in May 2024, the European Council adopted the AI Act (the “EU AI Act”), which imposes significant obligations related to the use of AI systems and is anticipated to impact the entire AI ecosystem in the European Union. Additionally, as the EU AI Act is implemented, subsequent guidance, standards and regulations, as well as regulatory bodies within respective member states are expected, which may present unforeseen risks and related challenges. In January 2025, President Trump issued an Executive Order on AI that rescinded former President Biden’s Executive order on AI, and announced efforts to invest in AI infrastructure and innovation. In July 2025, the U.S. federal government released a policy roadmap and set of initiatives referred to as America’s AI Action Plan. With this shift in AI policy at the federal level, it is unclear the extent to which this may present opportunities or risks to Box in the adoption of AI, including integrating with AI systems developed outside the U.S. that may be, for example, more cost effective. Conversely, at the state level, states such as Arkansas, California, Colorado, Illinois, Maryland, Montana, New York, and Texas have enacted several AI-specific bills covering the deployment and regulation of AI technology, which may impact Box. Developing, testing, and deploying third-party AI systems may also increase the cost profile of our product offerings due to the nature of the computing costs involved in such systems, which could impact our margins and adversely affect our business and operating results. Our business may be disrupted if any of the third-party AI services we use become unavailable due to extended outages or interruptions or because they are no longer available on commercially reasonable terms or prices. Further, market demand and acceptance of AI technologies are uncertain, and we may be unsuccessful in our product development efforts.

Current wording

Issues relating to the use of new and evolving technologies such as generative AI powered by large language models and machine learning that we integrate into our product offerings may cause us to experience brand or reputational harm, competitive harm, legal liability, new or enhanced governmental or regulatory scrutiny, and to incur additional costs to resolve such issues. As with many innovations, AI presents risks and challenges that could undermine or slow its adoption, and therefore harm our business. For example, perceived or actual technical, legal, compliance, privacy, security, ethical or other issues relating to the use of AI, including risks related to accuracy, bias, toxicity, privacy and security, data provenance, and the adequacy of AI development, deployment, content labeling and governance, may cause public confidence in AI to be undermined, which could slow our customers’ adoption of our products and services that use AI. AI technologies, including generative AI, may produce outputs that appear correct but are factually inaccurate or flawed, and customers or others may rely on such outputs to their detriment, which could expose us to reputational harm, competitive harm, and/or legal liability. Generative AI may also produce content that includes copyrighted or other protected material, and if we or our customers use such content or rights holders seek to enforce their rights, we may be exposed to claims and associated costs. In addition, litigation or government regulation related to the use of AI may also adversely impact our and others’ abilities to develop and offer products that use AI, as well as increase the cost and complexity of doing so. For example, in May 2024, the European Council adopted the AI Act (the “EU AI Act”), which imposes significant obligations related to the use of AI systems and is anticipated to impact the entire AI ecosystem in the European Union. Additionally, as the EU AI Act is implemented, subsequent guidance, standards and regulations, as well as regulatory bodies within respective member states are expected, which may present unforeseen risks and related challenges. In January 2025, President Trump issued an Executive Order on AI that rescinded former President Biden’s Executive order on AI, and announced efforts to invest in AI infrastructure and innovation. In July 2025, the U.S. federal government released a policy roadmap and set of initiatives referred to as America’s AI Action Plan. With this shift in AI policy at the federal level, it is unclear the extent to which this may present opportunities or risks to Box in the adoption of AI, including integrating with AI systems developed outside the U.S. that may be, for example, more cost effective. Conversely, at the state level, states such as Arkansas, California, Colorado, Illinois, Maryland, Montana, New York, and Texas have enacted several AI-specific bills covering the deployment and regulation of AI technology, which may impact Box. Deve…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

A key element of our growth strategy is to expand our international operations and develop a worldwide customer base. In addition, we have opened, and may continue to open, international offices and hire employees to work at these offices in order to gain access to additional talent. We have continued to migrate a larger portion of our development to lower cost regions, and have entered into a long-term operating lease in Poland to support our growth. Operating in international markets requires significant resources and management attention and will subject us to regulatory, economic, geographic, social, and political risks that differ from those in the U.S. Because of significant differences between international and U.S. markets, we may not succeed in creating demand for our services outside of the U.S. or in effectively selling our services in all of the international markets we enter. In addition, we will face challenges in doing business internationally that could adversely affect our business, including:

Current wording

A key element of our growth strategy is to expand our international operations and develop a worldwide customer base. In addition, we have opened, and may continue to open, international offices and hire employees to work at these offices in order to gain access to additional talent. We have continued to migrate a larger portion of our development to lower cost regions to support our growth. Operating in international markets requires significant resources and management attention and will subject us to regulatory, economic, geographic, social, and political risks that differ from those in the U.S. Because of significant differences between international and U.S. markets, we may not succeed in creating demand for our services outside of the U.S. or in effectively selling our services in all of the international markets we enter. In addition, we will face challenges in doing business internationally that could adversely affect our business, including:

Previous wording

unstable regional, economic, social and political conditions, such as the Russia-Ukraine conflict and the conflict in the Middle East.

Current wording

unstable regional, economic, social and political conditions, such as the Russia-Ukraine conflict and conflicts in the Middle East.

Previous wording

We sell our services and incur operating expenses in various currencies. Therefore, fluctuations in the relative value of the U.S. dollar and foreign currencies, particularly the Japanese Yen, and to a lesser extent, the British pound and the Euro, may impact our operating results. For example, the Japanese Yen has experienced a decline in value vis-à-vis the U.S. dollar, which negatively affected our results of operations during the year ended January 31, 2025. We currently primarily manage our exchange rate risk by maintaining offsetting foreign currency assets and liabilities and by minimizing non-U.S. dollar cash balances, and we began implementing hedging programs in fiscal year 2025 to further mitigate the risk of exchange rate fluctuations. Such practices may not ultimately be available and/or effective at mitigating the foreign currency risk to which we are exposed. If we are unsuccessful in detecting material exposures in a timely manner, any hedging strategies we deploy are not effective, or there are no hedging strategies available for certain exposures that are prudent given the associated risks and the potential mitigation of the underlying exposure achieved, our operating results or financial position could be negatively affected in the future.

Current wording

We sell our services and incur operating expenses in various currencies. Fluctuations in the relative value of the U.S. dollar and foreign currencies, particularly the Japanese Yen, and to a lesser extent, the British Pound, the Euro, and the Polish Zloty, have in the past and may in the future negatively impact our operating results. We manage our exchange rate risk by maintaining offsetting foreign currency assets and liabilities, minimizing non-U.S. dollar cash balances, and through our foreign currency hedging programs that we began implementing in fiscal year 2025. Such practices may not ultimately be available and/or effective at mitigating the foreign currency risk to which we are exposed. If we are unsuccessful in detecting material exposures in a timely manner, any hedging strategies we deploy are not effective, or there are no hedging strategies available for certain exposures that are prudent given the associated risks and the potential mitigation of the underlying exposure achieved, our operating results or financial position could be negatively affected in the future.

Previous wording

general economic, industry and market conditions, including those caused by the Russia-Ukraine conflict and the conflict in the Middle East, and as a result of inflation, rising interest rates, tariffs, or bank failures and financial instability;

Current wording

general economic, industry and market conditions, including those caused by the Russia-Ukraine conflict and conflicts in the Middle East, and as a result of inflation, fluctuations in foreign currency exchange rates, fluctuations in interest rates, tariffs, or bank failures and financial instability;

Previous wording

We cannot guarantee that any security measures that we or third parties on which we have implemented will be completely effective against current or future security threats, or that our systems and networks or those of such third parties have not been breached or otherwise compromised, or that they and any software in our or their supply chains do not contain bugs, vulnerabilities, or compromised code that could result in a breach of or disruption to our systems and networks or the systems and networks of third parties that support us or our products or services. Given that our customers manage significant amounts of sensitive and proprietary information on our platform, and many of our customers are in heavily regulated industries where there may be a greater concentration of sensitive and proprietary data, our reputation and market position are particularly sensitive to impacts from actual or perceived security breaches or incidents, security vulnerabilities, or concerns regarding security. If our security measures or those of third parties on which we rely are or are believed to be inadequate or breached or otherwise compromised as a result of third-party action, employee negligence, error or malfeasance, product defects, social engineering techniques, improper user configuration or otherwise, and this results in, or is believed to result in, unauthorized access to or disclosure, modification, misuse, loss, corruption, unavailability, or destruction of our data or our customers’ data, or any other disruption of the confidentiality, integrity or availability of our data or our customers’ data, we could incur significant liability to various parties, including our customers and individuals or organizations whose information is stored by our customers, and our business, reputation or competitive position may be harmed. Techniques used to obtain unauthorized access to, or to sabotage, systems or networks, are constantly evolving and generally are not recognized until launched against a target. Therefore, we may be unable to anticipate these techniques, react in a timely manner, or implement adequate preventive measures, and we may face delays in our detection or remediation of, or other responses to, security breaches and other security-related incidents or vulnerabilities. We have observed increased levels of sophistication in the types of techniques, including social engineering techniques, that malicious third parties may use in an attempt to gain access to our or our users’ data. Due to the Russia-Ukraine conflict and the conflict in the Middle East, or other areas of geopolitical tension around the world, we and the third parties on which we rely are vulnerable to a heightened risk of cybersecurity attacks, social engineering attacks, viruses, malware, ransomware, hacking or similar breaches and incidents from nation-state and affiliated actors, including attacks that could materially disrupt our supply chain and our systems, operations and p…

Excerpt shortened here; the source contains the full paragraph.

Current wording

We cannot guarantee that any security measures that we or third parties on which we have implemented will be completely effective against current or future security threats, or that our systems and networks or those of such third parties have not been breached or otherwise compromised, or that they and any software in our or their supply chains do not contain bugs, vulnerabilities, or compromised code that could result in a breach of or disruption to our systems and networks or the systems and networks of third parties that support us or our products or services. Given that our customers manage significant amounts of sensitive and proprietary information on our platform, and many of our customers are in heavily regulated industries where there may be a greater concentration of sensitive and proprietary data, our reputation and market position are particularly sensitive to impacts from actual or perceived security breaches or incidents, security vulnerabilities, or concerns regarding security. If our security measures or those of third parties on which we rely are or are believed to be inadequate or breached or otherwise compromised as a result of third-party action, employee negligence, error or malfeasance, product defects, social engineering techniques, improper user configuration or otherwise, and this results in, or is believed to result in, unauthorized access to or disclosure, modification, misuse, loss, corruption, unavailability, or destruction of our data or our customers’ data, or any other disruption of the confidentiality, integrity or availability of our data or our customers’ data, we could incur significant liability to various parties, including our customers and individuals or organizations whose information is stored by our customers, and our business, reputation or competitive position may be harmed. Techniques used to obtain unauthorized access to, or to sabotage, systems or networks, are constantly evolving and generally are not recognized until launched against a target. Therefore, we may be unable to anticipate these techniques, react in a timely manner, or implement adequate preventive measures, and we may face delays in our detection or remediation of, or other responses to, security breaches and other security-related incidents or vulnerabilities. We have observed increased levels of sophistication in the types of techniques, including social engineering techniques, that malicious third parties may use in an attempt to gain access to our or our users’ data. Due to the Russia-Ukraine conflict and conflicts in the Middle East, or other areas of geopolitical tension around the world, we and the third parties on which we rely are vulnerable to a heightened risk of cybersecurity attacks, social engineering attacks, viruses, malware, ransomware, hacking or similar breaches and incidents from nation-state and affiliated actors, including attacks that could materially disrupt our supply chain and our systems, operations and plat…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

These laws and regulations, which may be enforceable by private parties and/or governmental entities, are constantly evolving and can be subject to significant change. A number of existing data protection and privacy laws, as well as new laws coming into effect and/or proposals pending before federal, state and foreign legislative and regulatory bodies could affect our business. For example, the European Union’s General Data Protection Regulation (GDPR) imposes significant obligations on companies regarding the handling of personal data and provides for penalties for noncompliance of up to the greater of 20 million Euros or four percent of a company’s global revenue. Further, local data protection authorities in Europe may adopt regulations and/or guidance more stringent than the GDPR, which may impose additional compliance costs or other burdens that impact our business. Additionally, developments relating to cross-border data transfer may result in the European Commission (EC), European Data Protection Board and/or other regulators applying differing standards for, and requiring ad hoc verification of, transfers of personal data across borders, including transfers from the European Economic Area (EEA), Switzerland, or the U.K. to the U.S. For example, revised standard contractual clauses were published by regulators in EEA, Switzerland and the U.K., which we adopted in our data processing addenda. However, we cannot guarantee that our relevant policies and measures will ensure compliance due to possible fluctuations in these laws and related frameworks and their interpretation and enforcement. Moreover, European governments and the U.S. government have cooperated to adopt the EU-U.S. Data Privacy Framework, the U.K. extension to the EU-U.S. Data Privacy Framework and Swiss-U.S. Data Privacy Framework (together, the “Data Privacy Framework”), replacing the EU-U.S. Privacy Shield Framework. While the Data Privacy Framework could benefit the industry as a whole, and we presently maintain self-certification under the Data Privacy Framework, maintaining compliance with the Data Privacy Framework could result in additional costs. The EU-U.S. Data Privacy Framework has also already faced legal challenges, and more generally, the Data Privacy Framework may be subject to future reviews, and subject to suspension, amendment, repeal, or limitations.

Current wording

These laws and regulations, which may be enforceable by private parties and/or governmental entities, are constantly evolving and can be subject to significant change. A number of existing data protection and privacy laws and regulations, as well as new laws and regulations coming into effect and/or proposals pending before federal, state and foreign legislative and regulatory bodies could affect our business. For example, the European Union’s General Data Protection Regulation (GDPR) imposes significant obligations on companies regarding the handling of personal data and provides for penalties for noncompliance of up to the greater of 20 million Euros or four percent of a company’s global revenue. Further, local data protection authorities in Europe may adopt regulations and/or guidance more stringent than the GDPR, which may impose additional compliance costs or other burdens that impact our business. Additionally, developments relating to cross-border data transfer may result in the European Commission (EC), European Data Protection Board and/or other regulators applying differing standards for, and requiring ad hoc verification of, transfers of personal data across borders, including transfers from the European Economic Area (EEA), Switzerland, or the U.K. to the U.S. For example, revised standard contractual clauses were published by regulators in EEA, Switzerland and the U.K., which we adopted in our data processing addenda. However, we cannot guarantee that our relevant policies and measures will ensure compliance due to possible fluctuations in these laws and regulations and related frameworks and their interpretation and enforcement. Moreover, European governments and the U.S. government have cooperated to adopt the EU-U.S. Data Privacy Framework, the U.K. extension to the EU-U.S. Data Privacy Framework and Swiss-U.S. Data Privacy Framework (together, the “Data Privacy Framework”), replacing the EU-U.S. Privacy Shield Framework. While the Data Privacy Framework could benefit the industry as a whole, and we presently maintain self-certification under the Data Privacy Framework, maintaining compliance with the Data Privacy Framework could result in additional costs. The EU-U.S. Data Privacy Framework has also already faced legal challenges, and more generally, the Data Privacy Framework may be subject to future reviews, and subject to suspension, amendment, repeal, or limitations.

Previous wording

The U.K. made targeted amendments to its data protection regime in the U.K. Data (Use and Access) Act, effective June 19, 2025. Among other impacts, these amendments may affect the EC’s determination that the U.K. provides an adequate level of data protection, which generally permits personal data transfers from the EEA to the U.K. Furthermore, additional or modified guidance regarding, or changes to, U.K. cross border data transfers and/or overall U.K. data protection laws and/or guidance could occur, which may require us to change our policies, practices and engage in additional contractual negotiations. Such legislative and regulatory changes may result in increased costs of compliance and limitations on our customers and us.

Current wording

The U.K. made targeted amendments to its data protection regime in the U.K. Data (Use and Access) Act, effective June 19, 2025. Furthermore, additional or modified guidance regarding, or changes to, U.K. cross border data transfers and/or overall U.K. data protection laws and/or guidance could occur. Any of these may require us to change our policies, practices and engage in additional contractual negotiations. Such legislative and regulatory changes may result in increased costs of compliance and limitations on our customers and us.

Previous wording

We may also become subject to new laws that regulate non-personal information. For example, the European Union’s Data Act (EU Data Act) imposes certain data and cloud service interoperability and switching obligations to enable users to switch between cloud service providers without undue delay or cost, as well as certain requirements concerning cross-border international transfers of, and governmental access to, non-personal information outside the European Economic Area. Depending on how the EU Data Act and any similar laws are implemented, interpreted and enforced, we may have to adapt our business practices, contractual arrangements, and services in the EEA to comply with such obligations, which could impact our regional revenue and results of operations.

Current wording

We may also be or become subject to new laws and regulations that regulate non-personal information. For example, the European Union’s Data Act (EU Data Act) imposes certain data and cloud service interoperability and switching obligations to enable users to switch between cloud service providers without undue delay or cost, as well as certain requirements concerning cross-border international transfers of, and governmental access to, non-personal information outside the European Economic Area. Depending on how the EU Data Act and any similar laws or regulations are implemented, interpreted and enforced, we may have to adapt our business practices, contractual arrangements, and services in the EEA to comply with such obligations, which could impact our regional revenue and results of operations.

Previous wording

In 2018, the State of California enacted the California Consumer Privacy Act (CCPA), which became operative on January 1, 2020. The CCPA requires covered companies to, among other things, provide new disclosures to California consumers and afford such consumers new abilities to opt-out of certain sales of personal information. Additionally, the California Privacy Rights Act (CPRA) was approved by California voters in November 2020 and amended and expanded the CCPA. The CPRA’s substantive provisions became effective on January 1, 2023, and the newly formed California Privacy Protection Agency began its rulemaking process to adopt proposed regulations, with an enforcement date of March 29, 2024. Our CPRA compliance efforts are subject to change and may result in continued uncertainty and require additional costs and expenses to ensure readiness, compliance and decrease risks. Further, other states have been considering, and in some cases enacting, laws relating to privacy and cybersecurity, many of which are comprehensive privacy statutes imposing obligations similar to the CCPA and CPRA. For example, laws enacted in Colorado, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia are currently effective. Additionally, laws enacted in Indiana, Kentucky and Rhode Island will become effective in 2026. Other U.S. states are anticipated to follow suit. Other states have also enacted privacy laws relating to particular subject matter, such as Washington's enactment of the My Health, My Data Act, which includes a private right of action. Efforts to comply with these laws and related fluctuations in laws relating to privacy and cybersecurity at the federal, state and local levels may impact readiness and compliance, along with the potential to incur additional costs. We cannot fully predict the impact of these laws and other proposed federal and state laws relating to privacy and cybersecurity on our business or operations, but they may require us to modify our data processing practices and policies and incur substantial costs and expenses in an effort to comply.

Current wording

In 2018, the State of California enacted the California Consumer Privacy Act (CCPA), which became operative on January 1, 2020. The CCPA requires covered companies to, among other things, provide new disclosures to California consumers and afford such consumers new abilities to opt-out of certain sales of personal information. Additionally, the California Privacy Rights Act (CPRA) was approved by California voters in November 2020 and amended and expanded the CCPA. The CPRA’s substantive provisions became effective on January 1, 2023, and the California Privacy Protection Agency has adopted regulations implementing the CPRA. Our CPRA compliance efforts are subject to change and may result in continued uncertainty and require additional costs and expenses to ensure readiness, compliance and decrease risks. Further, other states have been considering, and in some cases enacting, laws relating to privacy and cybersecurity, many of which are comprehensive privacy statutes imposing obligations similar to the CCPA and CPRA. For example, laws enacted in Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia are currently effective, and Alabama and Oklahoma have enacted such laws that are scheduled to become effective in 2027. Other U.S. states are anticipated to follow suit. Other states have also enacted privacy laws relating to particular subject matter, such as Washington's enactment of the My Health, My Data Act, which includes a private right of action. The U.S. Department of Justice has also issued regulations restricting, and imposing obligations in connection with, certain transfers of sensitive personal information. Efforts to comply with these laws and regulations and related fluctuations in laws and regulations relating to privacy and cybersecurity at the federal, state and local levels may impact readiness and compliance, along with the potential to incur additional costs. We cannot fully predict the impact of these laws and regulations and other proposed federal and state laws and regulations relating to privacy and cybersecurity on our business or operations, but they may require us to modify our data processing practices and policies and incur substantial costs and expenses in an effort to comply.

Previous wording

There are a number of data protection, security, privacy and other government- and industry-specific requirements, including those that require companies to notify individuals of data security incidents involving certain types of personal data. Security compromises experienced by our competitors, by our customers or by us may lead to public disclosures, which could harm our reputation, erode customer confidence in the effectiveness of our security measures, negatively impact our ability to attract new customers, or cause existing customers to elect not to renew their agreements with us. Our customers also expect, and in some instances require, us to meet voluntary certifications or adhere to guidelines or standards established by third parties, to offer particular controls, or otherwise support customer-specific requirements. Although we currently have certain certifications such as AICPA SOC 1, 2 and 3 reports, and ISO/IEC 27001, 27017, 27018, and 27701 we may not be successful in continuing to maintain these certifications or in obtaining other certifications or otherwise being able to adhere to or comply with all customer requirements. In addition, some of the industries and/or regions that we serve have specific requirements relating to security and regulatory standards, such as GxP, FedRAMP and StateRAMP, and those required by HIPAA, FINRA, the HITECH Act, the Data Privacy Framework and Asia-Pacific Economic Cooperation Privacy Recognition for Processors and Cross Border Privacy Rules. As we expand into new industries and regions, we will likely need to comply with these and other new requirements to compete effectively. We may not always be able to support or comply with all of these customer requirements. If we cannot adequately comply with these requirements, our growth could be adversely impacted, we may face a loss of customers or difficulty attracting new customers in impacted industries, and we could incur significant liability and our reputation and business could be significantly harmed. In addition, as regulations in the EU and the U.K. continue to shift, it could impact our ability to comply with and maintain EU and U.K. Processor and Controller Binding Corporate Rules.

Current wording

There are a number of data protection, security, privacy and other government- and industry-specific requirements, including those that require companies to notify individuals of data security incidents involving certain types of personal data. Security compromises experienced by our competitors, by our customers or by us may lead to public disclosures, which could harm our reputation, erode customer confidence in the effectiveness of our security measures, negatively impact our ability to attract new customers, or cause existing customers to elect not to renew their agreements with us. Our customers also expect, and in some instances require, us to meet voluntary certifications or adhere to guidelines or standards established by third parties, to offer particular controls, or otherwise support customer-specific requirements. Although we currently have certain certifications such as AICPA SOC 1, 2 and 3 reports, and ISO/IEC 27001, 27017, 27018, and 27701 we may not be successful in continuing to maintain these certifications or in obtaining other certifications or otherwise being able to adhere to or comply with all customer requirements. In addition, some of the industries and/or regions that we serve have specific requirements relating to security and regulatory standards, such as GxP, FedRAMP and StateRAMP, and those required by HIPAA, FINRA, the HITECH Act, the Data Privacy Framework and Asia-Pacific Economic Cooperation Privacy Recognition for Processors and Cross Border Privacy Rules. As we expand into new industries and regions, we will likely need to comply with these and other new requirements to compete effectively. We may not always be able to support or comply with all of these customer requirements. If we cannot adequately comply with these requirements, our growth could be adversely impacted, we may face a loss of customers or difficulty attracting new customers in impacted industries, and we could incur significant liability and our reputation and business could be significantly harmed. In addition, as regulations in the EU and the U.K. continue to shift, this could impact our ability to comply with and maintain EU and U.K. Processor and Controller Binding Corporate Rules.

Previous wording

We rely on third parties for certain essential financial and operational services. We receive many of these services on a subscription basis from various software-as-a-service companies that are smaller and have shorter operating histories than traditional software vendors. Moreover, these vendors provide their services to us via a cloud-based model instead of software that is installed on our premises. We depend upon these vendors to provide us with services that are always available and are free of errors or defects that could cause disruptions in our business processes, and any failure by these vendors to do so, or any disruptions in networks or the availability of the internet, would adversely affect our ability to operate and manage our operations.

Current wording

We rely on third parties for certain essential financial and operational services. We receive many of these services on a subscription basis from various SaaS companies that are smaller and have shorter operating histories than traditional software vendors. Moreover, these vendors provide their services to us via a cloud-based model instead of software that is installed on our premises. We depend upon these vendors to provide us with services that are always available and are free of errors or defects that could cause disruptions in our business processes, and any failure by these vendors to do so, or any disruptions in networks or the availability of the internet, would adversely affect our ability to operate and manage our operations.

Previous wording

To grow our business and to expand our reach in the market, we expect to be more dependent on our relationships with third parties, such as alliance partners, resellers, distributors, system integrators and developers. For example, we have entered into agreements with partners such as Adobe, Apple, Carahsoft, Cisco, Cloudflare, Google, Guidewire, IBM, Macnica, Microsoft, Mitsui Knowledge Industry, Okta, Oracle-Netsuite, Palo Alto Networks, Salesforce, ServiceNow, Slack, USDM, Zoom and Zscaler to market, resell, or integrate with our services. Identifying partners and resellers, and negotiating and documenting relationships with them, requires significant time and resources.

Current wording

To grow our business and to expand our reach in the market, we expect to be more dependent on our relationships with third parties, such as alliance partners, resellers, distributors, system integrators and developers. For example, we have entered into agreements with partners such as Adobe, Apple, Carahsoft, Cisco, CrowdStrike, Google, Guidewire, IBM, Macnica, Microsoft, Mitsui Knowledge Industry, Okta, Oracle-NetSuite, Palo Alto Networks, Salesforce, ServiceNow, Slack, USDM, Workday, and Zoom to market, resell, or integrate with our services. Identifying partners and resellers, and negotiating and documenting relationships with them, requires significant time and resources.

Previous wording

We have acquired, and may in the future acquire, other companies, employee teams, or technologies to complement or expand our services and grow our business. For example, in December 2023, we acquired Crooze Corporation, a provider of no-code enterprise content management applications built on the Box platform, and in August 2024, we acquired the intelligent document processing technology of Alphamoon. We may not be able to successfully complete or integrate identified acquisitions. Moreover, we may not successfully evaluate or utilize the acquired technology or personnel, or accurately forecast the financial impact of an acquisition. The risks we face in connection with acquisitions include:

Current wording

We have acquired, and may in the future acquire, other companies, employee teams, or technologies to complement or expand our services and grow our business. We may not be able to successfully complete or integrate identified acquisitions. Moreover, we may not successfully evaluate or utilize the acquired technology or personnel, or accurately forecast the financial impact of an acquisition. The risks we face in connection with acquisitions include:

Previous wording

On occasion, we may need additional financing for a variety of reasons, including servicing our liabilities, operating or growing our business, responding to business opportunities, undertaking acquisitions, funding stock repurchases, satisfying our dividend or share redemption obligations of our Series A Convertible Preferred Stock, or repaying and/or settling conversions of our 1.50% convertible senior notes due September 15, 2029 (the “2029 Convertible Notes”) or our 0.00% convertible senior notes due January 15, 2026 (the “2026 Convertible Notes” and together with the 2029 Convertible Notes, the “Convertible Notes”).

Current wording

On occasion, we may need additional financing for a variety of reasons, including servicing our liabilities, operating or growing our business, responding to business opportunities, undertaking acquisitions, funding stock repurchases, satisfying our dividend or share redemption obligations of our Series A Convertible Preferred Stock, or repaying and/or settling conversions of our 1.50% convertible senior notes due September 15, 2029.

Previous wording

For example, in September 2024, we issued $460.0 million aggregate principal amount of 2029 Convertible Notes, and in January 2021, we issued $345.0 million aggregate principal amount of 2026 Convertible Notes. We may require additional capital to satisfy our obligations to pay cash upon conversion or at maturity of the Convertible Notes or to repurchase the Convertible Notes in the event of a fundamental change. Additionally, in May 2021, we issued and sold 500,000 shares of our Series A Convertible Preferred Stock for an aggregate purchase price of $500 million. Our ability to refinance or obtain additional financing, if and when required, will depend on investor and lender demand, our operating performance, the condition of the capital markets and other factors. We cannot guarantee that additional financing will be available to us on favorable terms when required, or at all. If we raise additional funds through the issuance of equity, equity-linked or debt securities, those securities may have rights, preferences or privileges senior to the rights of our Class A common stock, and our existing stockholders may experience dilution. If we are unable to obtain adequate financing or financing on terms satisfactory to us when we require it, our ability to continue to support the operation or growth of our business could be significantly impaired and our operating results may be harmed. Rising interest rates may reduce our access to equity-linked or debt capital and increase our cost of borrowings, which could adversely impact our business, operating results and financial position.

Current wording

For example, in September 2024, we issued $460.0 million aggregate principal amount of 2029 Convertible Notes. We may require additional capital to satisfy our obligations to pay cash upon conversion or at maturity of the 2029 Convertible Notes or to repurchase the 2029 Convertible Notes in the event of a fundamental change. Additionally, in May 2021, we issued and sold 500,000 shares of our Series A Convertible Preferred Stock for an aggregate purchase price of $500 million. Our ability to refinance or obtain additional financing, if and when required, will depend on investor and lender demand, our operating performance, the condition of the capital markets and other factors. We cannot guarantee that additional financing will be available to us on favorable terms when required, or at all. If we raise additional funds through the issuance of equity, equity-linked or debt securities, those securities may have rights, preferences or privileges senior to the rights of our Class A common stock, and our existing stockholders may experience dilution. If we are unable to obtain adequate financing or financing on terms satisfactory to us when we require it, our ability to continue to support the operation or growth of our business could be significantly impaired and our operating results may be harmed. Rising interest rates may reduce our access to equity-linked or debt capital and increase our cost of borrowings, which could adversely impact our business, operating results and financial position.

Previous wording

Generally accepted accounting principles in the U.S. are subject to interpretation by the Financial Accounting Standards Board (FASB), the SEC and various bodies formed to promulgate and interpret appropriate accounting principles. A change in these principles or interpretations could have a significant effect on our reported financial results, and could affect the reporting of transactions completed before the announcement of a change. These or other changes in accounting principles could adversely affect our financial results. Any difficulties in implementing these pronouncements could cause us to fail to meet our financial reporting obligations, which could result in regulatory discipline and harm investors’ confidence in us.

Current wording

Generally accepted accounting principles in the U.S. are subject to interpretation by the FASB, the SEC and various bodies formed to promulgate and interpret appropriate accounting principles. A change in these principles or interpretations could have a significant effect on our reported financial results, and could affect the reporting of transactions completed before the announcement of a change. These or other changes in accounting principles could adversely affect our financial results. Any difficulties in implementing these pronouncements could cause us to fail to meet our financial reporting obligations, which could result in regulatory discipline and harm investors’ confidence in us.

Previous wording

Our future effective tax rates and results from operations could be unfavorably affected by changes in the tax rates in jurisdictions where our income is earned, by changes to limitations on our utilization of net operating losses, or by changes in the tax rules and regulations in the jurisdictions in which we do business. For example, on July 4, 2025, the U.S. enacted federal tax legislation commonly referred to as the One Big Beautiful Bill Act. This legislation extends and modifies provisions from the 2017 Tax Cuts and Jobs Act and introduces new tax measures affecting both businesses and individuals. We are continuing to evaluate the long-term implications of this legislation on us. The Inflation Reduction Act of 2022 also imposed a 1% excise tax on certain repurchases of stock and a 15% alternative minimum tax on adjusted financial statement income.

Current wording

Our future effective tax rates and results from operations could be unfavorably affected by changes in the tax rates in jurisdictions where our income is earned, by changes to limitations on our utilization of net operating losses, or by changes in the tax rules and regulations in the jurisdictions in which we do business. For example, on July 4, 2025, the U.S. enacted federal tax legislation commonly referred to as the One Big Beautiful Bill Act (OBBBA). This legislation extends and modifies provisions from the 2017 Tax Cuts and Jobs Act and introduces new tax measures affecting both businesses and individuals. We are continuing to evaluate the long-term implications of this legislation on us. The Inflation Reduction Act of 2022 also imposed a 1% excise tax on certain repurchases of stock and a 15% alternative minimum tax on adjusted financial statement income.

Previous wording

Further, in 2021, the Organization for Economic Cooperation and Development (OECD) introduced a framework, referred to as Pillar Two, which contemplates a global minimum effective tax rate of 15%. In 2023, Pillar Two was implemented by the Council of the European Union and its member states. Similar directives under Pillar Two are already adopted or expected to be adopted by taxing authorities in other countries where we do business, including the U.K. However, on June 28, 2025, the G7 released a joint statement announcing an understanding regarding a proposed “side-by-side” solution that would exempt U.S.-parented multinational businesses from certain provisions of Pillar Two; however, no agreement regarding implementation of the proposal has yet been reached. We have evaluated the impact of Pillar Two to our financial position and concluded it to be not material. We will continue to monitor developments to Pillar Two in countries where we do business. These enactments or amendments could adversely affect our tax rate and ultimately result in a negative impact on our operating results and cash flows.

Current wording

Further, in 2021, the Organization for Economic Cooperation and Development (OECD) introduced a framework, referred to as Pillar Two, which contemplates a global minimum effective tax rate of 15%. In 2023, Pillar Two was implemented by the Council of the European Union and its member states. Similar directives under Pillar Two are already adopted or expected to be adopted by taxing authorities in other countries where we do business, including the U.K. The OECD and participating jurisdictions have recently agreed to a “side-by-side” solution that would exempt U.S.-parented multinational businesses from certain provisions of Pillar Two for fiscal years beginning on or after January 1, 2026. We have evaluated the impact of the side-by-side solution to our financial position and concluded it to be not material. We will continue to monitor OECD-related developments to the side-by-side solution in countries where we do business. These enactments or amendments could adversely affect our tax rate and ultimately result in a negative impact on our operating results and cash flows.

Previous wording

As of January 31, 2025, we had U.S. federal net operating loss carryforwards of approximately $233.7 million, state net operating loss carryforwards of approximately $487.3 million, and foreign net operating loss carryforwards of approximately $268.5 million. Under Sections 382 and 383 of the Internal Revenue Code of 1986, as amended (the “Code”), if a corporation undergoes an “ownership change,” the corporation’s ability to use its pre-change net operating loss carryforwards and other pre-change tax attributes, such as research tax credits, to offset its post-change income and taxes may be limited. In general, an “ownership change” occurs if there is a cumulative change in our ownership by “5% shareholders” that exceeds 50 percentage points over a rolling three-year period. Similar rules may apply under state tax laws. If we experience ownership changes as a result of future transactions in our stock, then we may be further limited in our ability to use our net operating loss carryforwards and other tax assets to reduce taxes owed on the net taxable income that we earn. Any such limitations on the ability to use our net operating loss carryforwards and other tax assets could adversely impact our business, financial condition and operating results.

Current wording

As of January 31, 2026, we had U.S. federal net operating loss carryforwards of approximately $111.1 million, state net operating loss carryforwards of approximately $462.6 million, and foreign net operating loss carryforwards of approximately $239.9 million. Under Sections 382 and 383 of the Internal Revenue Code of 1986, as amended (the “Code”), if a corporation undergoes an “ownership change,” the corporation’s ability to use its pre-change net operating loss carryforwards and other pre-change tax attributes, such as research tax credits, to offset its post-change income and taxes may be limited. In general, an “ownership change” occurs if there is a cumulative change in our ownership by “5% shareholders” that exceeds 50 percentage points over a rolling three-year period. Similar rules may apply under state tax laws. If we experience ownership changes as a result of future transactions in our stock, then we may be further limited in our ability to use our net operating loss carryforwards and other tax assets to reduce taxes owed on the net taxable income that we earn. Any such limitations on the ability to use our net operating loss carryforwards and other tax assets could adversely impact our business, financial condition and operating results.

Previous wording

We repurchase shares of our Class A common stock in open market transactions from time to time pursuant to publicly announced stock repurchase program approved by our Board of Directors. During fiscal year 2025, we repurchased 7.6 million shares for a total amount of $211.5 million and during fiscal year 2024, we repurchased 6.6 million shares for a total amount of $177.0 million. For the nine months ended October 31, 2025, we repurchased 5.2 million shares for a total amount of $166.6 million. Any share repurchases remain subject to the circumstances in place at that time, including prevailing market prices, and we are not obligated to repurchase a specified number or dollar value of shares. As a result, there can be no guarantee around the timing or volume of our share repurchases or that we will have adequate cash flow to fund any repurchases. In addition, as part of the Inflation Reduction Act signed into law in August 2022, the U.S. implemented a 1% excise tax on the value of certain stock repurchases by publicly traded companies. This tax could increase the costs to us of any share repurchases. The stock repurchase program could affect the price of our Class A common stock, increase volatility and diminish our cash reserves. Our repurchase program may be suspended or terminated at any time and, even if fully implemented, may not enhance long-term stockholder value.

Current wording

We repurchase shares of our Class A common stock in open market transactions from time to time pursuant to publicly announced stock repurchase program approved by our Board of Directors. During fiscal year 2026, we repurchased 9.7 million shares for a total amount of $292.9 million and during fiscal year 2025, we repurchased 7.6 million shares for a total amount of $211.5 million. For the three months ended April 30, 2026, we repurchased 4.8 million shares for a total amount of $114.4 million. Any share repurchases remain subject to the circumstances in place at that time, including prevailing market prices, and we are not obligated to repurchase a specified number or dollar value of shares. As a result, there can be no guarantee around the timing or volume of our share repurchases or that we will have adequate cash flow to fund any repurchases. In addition, as part of the Inflation Reduction Act signed into law in August 2022, the U.S. implemented a 1% excise tax on the value of certain stock repurchases by publicly traded companies. This tax could increase the costs to us of any share repurchases. The stock repurchase program could affect the price of our Class A common stock, increase volatility and diminish our cash reserves. Our repurchase program may be suspended or terminated at any time and, even if fully implemented, may not enhance long-term stockholder value.

Previous wording

As of October 31, 2025, we had outstanding debt, including an aggregate principal amount of (i) $460.0 million issued under the 2029 Convertible Notes and (ii) $205.0 million issued under the 2026 Convertible Notes. During specified periods, the Convertible Notes are convertible at the option of the holders under certain conditions or upon occurrence of certain events as described in Note 9, Part II, Item 8 of our Annual Report on Form 10-K for the year ended January 31, 2025. If one or more holders of the Convertible Notes elect to convert their notes, we are required to settle the principal of the Convertible Notes in cash upon any conversion of such notes, which could adversely affect our liquidity. In addition, even if holders of the Convertible Notes do not elect to convert their Convertible Notes, we may be required under applicable accounting standards to reclassify the carrying value of the Convertible Notes as current, rather than long-term, if any of the conditions to the convertibility of the Convertible Notes are satisfied. This reclassification could materially reduce our reported working capital.

Current wording

As of April 30, 2026, we had outstanding debt, including an aggregate principal amount of $460.0 million issued under the 2029 Convertible Notes. During specified periods, the 2029 Convertible Notes are convertible at the option of the holders under certain conditions or upon occurrence of certain events as described in Note 9, Part II, Item 8 of our Annual Report on Form 10-K for the year ended January 31, 2026. If one or more holders of the 2029 Convertible Notes elect to convert their notes, we are required to settle the principal of the 2029 Convertible Notes in cash upon any conversion of such notes, which could adversely affect our liquidity. In addition, even if holders of the 2029 Convertible Notes do not elect to convert their notes, we may be required under applicable accounting standards to reclassify the carrying value of the 2029 Convertible Notes as current, rather than long-term, if any of the conditions to the convertibility of the 2029 Convertible Notes are satisfied. This reclassification could materially reduce our reported working capital.

Previous wording

Holders of the Convertible Notes also have the right to require us to repurchase all or a portion of their Convertible Notes upon the occurrence of a fundamental change (as defined in the indenture governing the applicable Convertible Notes) at a repurchase price equal to 100% of the principal amount of the Convertible Notes to be repurchased, plus accrued and unpaid special interest, if any. If the Convertible Notes have not previously been converted or repurchased, we will be required to repay the outstanding principal amount of the Convertible Notes, plus accrued and unpaid special interest, if any, in cash at maturity. The 2026 Convertible Notes and the 2029 Convertible Notes are scheduled to mature on January 15, 2026 and September 15, 2029, respectively.

Current wording

Holders of the 2029 Convertible Notes also have the right to require us to repurchase all or a portion of their notes upon the occurrence of a fundamental change (as defined in the indenture governing the 2029 Convertible Notes) at a repurchase price equal to 100% of the principal amount of the 2029 Convertible Notes to be repurchased, plus accrued and unpaid special interest, if any. If the 2029 Convertible Notes have not previously been converted or repurchased, we will be required to repay the outstanding principal amount of the 2029 Convertible Notes, plus accrued and unpaid special interest, if any, in cash at maturity. The 2029 Convertible Notes are scheduled to mature on September 15, 2029.

Previous wording

Our ability to make required cash payments in connection with conversions of the Convertible Notes, repurchase the Convertible Notes in the event of a fundamental change, or to repay or refinance the Convertible Notes will depend on market conditions and our past and expected future performance, which is subject to economic, financial, competitive, and other factors beyond our control. We also may not use the cash proceeds we raised through the issuance of the Convertible Notes in an optimally productive and profitable manner. Since inception, our business has generated net losses, and while we were profitable in fiscal years 2025, 2024 and 2023, we may incur significant losses in the future and may not maintain profitability on a consistent basis. As a result, we may not have enough available cash or be able to obtain financing, or financing at acceptable terms, at the time we are required to repurchase or repay the Convertible Notes or pay cash with respect to Convertible Notes being converted.

Current wording

Our ability to make required cash payments in connection with conversions of the 2029 Convertible Notes, repurchase the 2029 Convertible Notes in the event of a fundamental change, or to repay or refinance the 2029 Convertible Notes will depend on market conditions and our past and expected future performance, which is subject to economic, financial, competitive, and other factors beyond our control. We also may not use the cash proceeds we raised through the issuance of the 2029 Convertible Notes in an optimally productive and profitable manner. Since inception, our business has generated net losses, and while we were profitable in fiscal years 2026, 2025 and 2024, we may incur significant losses in the future and may not maintain profitability on a consistent basis. As a result, we may not have enough available cash or be able to obtain financing, or financing at acceptable terms, at the time we are required to repurchase or repay the 2029 Convertible Notes or pay cash with respect to 2029 Convertible Notes being converted.

Previous wording

In addition, our ability to repurchase or pay cash upon conversion or at maturity of the Convertible Notes may be limited by law or regulatory authority. Our ability to service our debt also depends on the operating results of our subsidiaries and upon the ability of such subsidiaries to provide us with cash generated by the subsidiaries. Any dividends, loans or other distributions to us from our subsidiaries may be subject to legal, contractual or other restrictions and are subject to other business and tax considerations. Our failure to repurchase Convertible Notes following a fundamental change or to pay cash upon conversion or at maturity of the Convertible Notes as required by the applicable indenture would constitute a default under such indenture. A default under the indentures or the fundamental change itself could also lead to a default under our senior credit facility, our other outstanding indebtedness, or agreements governing our future indebtedness and could have a material adverse effect on our business, results of operations, and financial condition. If the payment of the related indebtedness were to be accelerated after any applicable notice or grace periods, we may not have sufficient funds to repay the indebtedness and repurchase the Convertible Notes or to pay cash upon conversion or at maturity of the Convertible Notes.

Current wording

In addition, our ability to repurchase or pay cash upon conversion or at maturity of the 2029 Convertible Notes may be limited by law or regulatory authority. Our ability to service our debt also depends on the operating results of our subsidiaries and upon the ability of such subsidiaries to provide us with cash generated by the subsidiaries. Any dividends, loans or other distributions to us from our subsidiaries may be subject to legal, contractual or other restrictions and are subject to other business and tax considerations. Our failure to repurchase 2029 Convertible Notes following a fundamental change or to pay cash upon conversion or at maturity of the 2029 Convertible Notes as required by the indenture would constitute a default under such indenture. A default under the indenture or the fundamental change itself could also lead to a default under our senior credit facility, our other outstanding indebtedness, or agreements governing our future indebtedness and could have a material adverse effect on our business, results of operations, and financial condition. If the payment of the related indebtedness were to be accelerated after any applicable notice or grace periods, we may not have sufficient funds to repay the indebtedness and repurchase the 2029 Convertible Notes or to pay cash upon conversion or at maturity of the 2029 Convertible Notes.

Previous wording

The capped call transactions we entered into in connection with the issuance of the Convertible Notes may affect the value of our Class A common stock.

Current wording

The capped call transactions we entered into in connection with the issuance of the 2029 Convertible Notes may affect the value of our Class A common stock.

Previous wording

In connection with the issuance of each series of the Convertible Notes, we entered into capped call transactions with various counterparties (the “Capped Calls”). The Capped Calls cover, subject to customary adjustments, the number of shares of our Class A common stock initially underlying the applicable series of Convertible Notes. The Capped Calls are expected generally to reduce or offset the potential dilution to our Class A common stock upon any conversion of the applicable series of Convertible Notes with such reduction or offset, as the case may be, subject to a cap based on the cap price.

Current wording

In connection with the issuance of the 2029 Convertible Notes, we entered into capped call transactions with various counterparties. The 2029 Capped Calls cover, subject to customary adjustments, the number of shares of our Class A common stock initially underlying the 2029 Convertible Notes. The 2029 Capped Calls are expected generally to reduce or offset the potential dilution to our Class A common stock upon any conversion of the 2029 Convertible Notes with such reduction or offset, as the case may be, subject to a cap based on the cap price.

Previous wording

From time to time, the counterparties to the Capped Calls or their respective affiliates may modify their hedge positions by entering into or unwinding various derivatives with respect to our Class A common stock and/or purchasing or selling our Class A common stock or other securities of ours in secondary market transactions prior to the maturity of the applicable series of Convertible Notes. This activity could also cause or prevent an increase or a decrease in the market price of our Class A common stock.

Current wording

From time to time, the counterparties to the 2029 Capped Calls or their respective affiliates may modify their hedge positions by entering into or unwinding various derivatives with respect to our Class A common stock and/or purchasing or selling our Class A common stock or other securities of ours in secondary market transactions prior to the maturity of the 2029 Convertible Notes. This activity could also cause or prevent an increase or a decrease in the market price of our Class A common stock.

Previous wording

The counterparties to the Capped Calls that we entered into are financial institutions, and we will be subject to the risk that one or more of the counterparties may default or otherwise fail to perform, or may exercise certain rights to terminate, their obligations under the Capped Calls. Our exposure to the credit risk of the counterparties will not be secured by any collateral.

Current wording

The counterparties to the 2029 Capped Calls that we entered into are financial institutions, and we will be subject to the risk that one or more of the counterparties may default or otherwise fail to perform, or may exercise certain rights to terminate, their obligations under the 2029 Capped Calls. Our exposure to the credit risk of the counterparties will not be secured by any collateral.

Previous wording

Global economic conditions have in the past resulted in the actual or perceived failure or financial difficulties of many financial institutions. If a counterparty to one or more Capped Calls becomes subject to insolvency proceedings, we will become an unsecured creditor in those proceedings with a claim equal to our exposure at the time under such transaction. Our exposure will depend on many factors but, generally, our exposure will increase if the market price or the volatility of our Class A common stock increases. In addition, upon a default or other failure to perform, or a termination of obligations, by a counterparty, the counterparty may fail to deliver the consideration required to be delivered to us under the Capped Calls and we may experience more dilution than we currently anticipate with respect to our Class A common stock. We can provide no assurances as to the financial stability or viability of the counterparties.

Current wording

Global economic conditions have in the past resulted in the actual or perceived failure or financial difficulties of many financial institutions. If a counterparty to one or more 2029 Capped Calls becomes subject to insolvency proceedings, we will become an unsecured creditor in those proceedings with a claim equal to our exposure at the time under such transaction. Our exposure will depend on many factors but, generally, our exposure will increase if the market price or the volatility of our Class A common stock increases. In addition, upon a default or other failure to perform, or a termination of obligations, by a counterparty, the counterparty may fail to deliver the consideration required to be delivered to us under the 2029 Capped Calls and we may experience more dilution than we currently anticipate with respect to our Class A common stock. We can provide no assurances as to the financial stability or viability of the counterparties.

Previous wording

During the three months ended October 31, 2025, we repurchased 2.4 million shares at a weighted average price of $32.11 per share for a total amount of $76.8 million. We periodically enter into pre-set trading plans adopted in accordance with Rule 10b5-1 under the Exchange Act to effect such repurchases. On December 2, 2025, we announced that our Board of Directors authorized a $150 million expansion of the share repurchase plan. The authorized repurchase plan will expire on December 1, 2026.

Current wording

During the three months ended April 30, 2026, we repurchased 4.8 million shares at a weighted average price of $23.74 per share for a total amount of $114.4 million. We periodically enter into pre-set trading plans adopted in accordance with Rule 10b5-1 under the Exchange Act to effect such repurchases. On March 19, 2026, we announced that our Board of Directors authorized a $500 million expansion of the share repurchase plan. The authorized repurchase plan will expire on September 30, 2027.