HUBSPOT INC

Previous wording

An investment in our common stock involves a high degree of risk. You should carefully consider the risks described below and the other information in this Quarterly Report on Form 10-Q and in our other public filings before making an investment decision. Our business, prospects, financial condition, or operating results could be harmed by any of these risks, as well as other risks not currently known to us or that we currently consider immaterial. If any such risks and uncertainties actually occurs, our business, financial condition or operating results could differ materially from the plans, projections and other forward-looking statements included in the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and elsewhere in this Quarterly Report on Form 10-Q and in our other public filings. The trading price of our common stock could decline due to any of these risks, and, as a result, you may lose all or part of your investment.

Current wording

An investment in our common stock involves a high degree of risk. You should carefully consider the risks described below and the other information in this Quarterly Report on Form 10-Q and in our other public filings before making an investment decision. Our business, prospects, financial condition, or operating results could be harmed by any of these risks, as well as other risks not currently known to us or that we currently consider immaterial. If any such risks and uncertainties actually occur, our business, financial condition or operating results could differ materially from the plans, projections and other forward-looking statements included in the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and elsewhere in this Quarterly Report on Form 10-Q and in our other public filings. The trading price of our common stock could decline due to any of these risks, and, as a result, you may lose all or part of your investment.

Previous wording

We derive, and expect to continue to derive, a substantial portion of our revenue from the sale of subscriptions to our customer platform. The market for marketing, sales, service, operations, commerce and customer management products is still evolving, and competitive dynamics may cause pricing levels to change as the market matures and as existing and new market participants introduce new types of point applications and different approaches to enable businesses to address their respective needs. As a result, we may be forced to, or strategically choose to, reduce the prices we charge for our platform and may be unable to renew existing customer agreements or enter into new customer agreements at the same prices and upon the same terms that we have historically. In addition, our growth strategy involves a scalable pricing model (including freemium versions of our products and our recent seats-based and consumption-based pricing model changes) intended to provide opportunities to increase the value of our customer relationships over time, including as customers expand their use of our platform, or we sell to other parts of their organizations, cross-sell additional products and seats through touchless or low touch in product purchases, and upsell additional offerings and features. Our consumption-based pricing strategies are novel and evolving. Due to customer flexibility in the timing of their use of our platform, we could have less predictability from our consumption-based products than we do for our subscription-based products, and there is a risk that customers could use our consumption-based products at lower levels than we expect. If our scalable pricing and cross-selling efforts are unsuccessful or if our existing customers do not expand their use of our platform or adopt additional offerings and features, or if the anticipated benefits from scalable pricing take longer to realize or are not realized at all, our revenue and operating results may suffer.

Current wording

We derive, and expect to continue to derive, a substantial portion of our revenue from the sale of subscriptions to our customer platform. The market for marketing, sales, service, operations, revenue and customer management products is still evolving, and competitive dynamics may cause pricing levels to change as the market matures and as existing and new market participants introduce new types of point applications and different approaches to enable businesses to address their respective needs. As a result, we may be forced to, or strategically choose to, reduce the prices we charge for our platform and may be unable to renew existing customer agreements or enter into new customer agreements at the same prices and upon the same terms that we have historically. In addition, our growth strategy involves a scalable pricing model (including freemium versions of our products and our recent seats-based and consumption-based pricing model changes) intended to provide opportunities to increase the value of our customer relationships over time, including as customers expand their use of our platform, or we sell to other parts of their organizations, cross-sell additional products and seats through touchless or low touch in product purchases, and upsell additional offerings and features. Our consumption-based pricing strategies are novel and evolving. Due to customer flexibility in the timing of their use of our platform, we could have less predictability from our consumption-based products than we do for our subscription-based products, and there is a risk that customers could use our consumption-based products at lower levels than we expect. If our scalable pricing and cross-selling efforts are unsuccessful or if our existing customers do not expand their use of our platform or adopt additional offerings and features, or if the anticipated benefits from scalable pricing take longer to realize or are not realized at all, our revenue and operating results may suffer.

Previous wording

In addition, instead of using our platform, some prospective customers may elect to combine disparate point applications, such as content management, marketing automation, CRM, analytics and social media management. We expect that new competitors, such as enterprise software vendors that have traditionally focused on enterprise resource planning or other applications supporting back office functions, will develop and introduce applications serving customer-facing and other front office functions. This development could have an adverse effect on our business, operating results and financial condition. In addition, sales force automation and CRM vendors could acquire or develop applications that compete with our sales and CRM offerings. Some of these companies have acquired social media marketing and other marketing software providers to integrate with their broader offerings.

Current wording

In addition, instead of using our platform, some prospective customers may elect to combine disparate point applications, such as content management, marketing automation, CRM, analytics and social media management. We expect that new competitors, such as enterprise software vendors that have traditionally focused on enterprise resource planning or other applications supporting back office functions, will develop and introduce applications serving customer-facing and other front office functions. This development could have an adverse effect on our business, operating results and financial condition. In addition, sales force automation and CRM vendors could acquire or develop applications that compete with our sales and CRM offerings. Some of these companies have acquired social media marketing and other marketing software providers to integrate with their broader offerings. Customers may also defer purchasing decisions due to uncertainty about their AI investment priorities.

Previous wording

Our headcount and operations have grown and may continue to grow. For example, we had 9,021 full-time employees as of March 31, 2026 and 8,882 as of December 31, 2025. To date, we have opened several international offices. This growth has placed, and may continue to place, a significant strain on our management, administrative, operational and financial infrastructure. Although we have experienced significant growth in headcount and operations historically, we may not sustain our current growth rates, which could adversely affect our business performance and operating results. Our success will depend in part upon our ability to recruit, hire, train, manage and integrate qualified managers, technical personnel and employees in specialized roles within our company, including in technology, sales and marketing. Advances in automation and AI may also alter the skills required of our workforce and could reduce demand for certain roles, creating challenges in workforce management, employee relations, and reputational risk. We may be required to make significant investments in retraining and workforce transition programs, and failure to effectively manage these changes could impair our ability to attract and retain talent, disrupt operations, and adversely affect our business. Furthermore, as many of our employees work remotely from geographic areas across jurisdictions where we have offices pursuant to our hybrid workplace model, which provides our employees with the option to be fully remote, work full-time from one of our offices, or have the flexibility to work both in the office and remotely, we may need to reallocate our investment of resources and closely monitor a variety of local regulations and requirements, including local tax laws. We may experience unpredictability in our expenses and employee work culture. If we experience any of these effects in connection with future growth, if our new employees perform poorly, or if we are unsuccessful in recruiting, hiring, training, managing and integrating new employees, or retaining our existing employees, it could materially impair our ability to attract new customers, retain existing customers and expand their use of our platform, all of which would materially and adversely affect our business, financial condition and results of operations.

Current wording

Our headcount and operations have grown and may continue to grow. For example, we had 9,016 full-time employees as of June 30, 2026 and 8,882 as of December 31, 2025. To date, we have opened several international offices. This growth has placed, and may continue to place, a significant strain on our management, administrative, operational and financial infrastructure. Although we have experienced significant growth in headcount and operations historically, we may not sustain our current growth rates, which could adversely affect our business performance and operating results. Our success will depend in part upon our ability to recruit, hire, train, manage and integrate qualified managers, technical personnel and employees in specialized roles within our company, including in technology, sales and marketing. Advances in automation and AI may also alter the skills required of our workforce and could reduce demand for certain roles, creating challenges in workforce management, employee relations, and reputational risk. We may be required to make significant investments in retraining and workforce transition programs, and failure to effectively manage these changes could impair our ability to attract and retain talent, disrupt operations, and adversely affect our business. Furthermore, as many of our employees work remotely from geographic areas across jurisdictions where we have offices pursuant to our hybrid workplace model, which provides our employees with the option to be fully remote, work full-time from one of our offices, or have the flexibility to work both in the office and remotely, we may need to reallocate our investment of resources and closely monitor a variety of local regulations and requirements, including local tax laws. We may experience unpredictability in our expenses and employee work culture. If we experience any of these effects in connection with future growth, if our new employees perform poorly, or if we are unsuccessful in recruiting, hiring, training, managing and integrating new employees, or retaining our existing employees, it could materially impair our ability to attract new customers, retain existing customers and expand their use of our platform, all of which would materially and adversely affect our business, financial condition and results of operations.

Previous wording

To increase customers and achieve broader market acceptance of our customer platform, we will need to continue to expand our customer platform capabilities, including our sales force and third-party channel partners. We will continue to dedicate significant resources to sales and marketing programs. The effectiveness of our sales and marketing and third-party channel partners has varied over time and may vary in the future and depends on our ability to maintain and improve our customer platform including with respect to AI and machine learning. All of these efforts will require us to invest significant financial and other resources. Our business will be seriously harmed if our efforts do not generate a correspondingly significant increase in revenue. We may not achieve anticipated revenue growth from expanding our sales force if we are unable to hire, develop and retain talented sales personnel, if our new sales personnel are unable to achieve desired productivity levels in a reasonable period of time or if our sales and marketing programs are not effective.

Current wording

To increase customers and achieve broader market acceptance of our customer platform, we will need to continue to expand our customer platform capabilities, including our sales force and third-party channel partners. We will continue to dedicate significant resources to sales and marketing programs. The effectiveness of our sales and marketing and third-party channel partners has varied over time and may vary in the future and depends on our ability to maintain and improve our customer platform including with respect to AI and machine learning, and on adapting our go-to-market strategy and sales force to changing customer purchasing behaviors. All of these efforts will require us to invest significant financial and other resources. Our business will be seriously harmed if our efforts do not generate a correspondingly significant increase in revenue. We may not achieve anticipated revenue growth from expanding our sales force if we are unable to hire, develop and retain talented sales personnel, if our new sales personnel are unable to achieve desired productivity levels in a reasonable period of time or if our sales and marketing programs are not effective.

Previous wording

We believe that maintaining our thought leadership position in the customer platform space is an important element in attracting new customers. We devote significant resources to develop and maintain our thought leadership position, with a focus on identifying and interpreting emerging trends, shaping and guiding industry dialog and creating and sharing the best practices. Our activities related to developing and maintaining our thought leadership may not yield increased revenue, and even if they do, any increased revenue may not offset the expenses we incurred in such effort. We rely upon the continued services of our management and employees with domain expertise with marketing, sales, services, operations, commerce and content management, and the loss of any key employees in this area could harm our competitive position and reputation. If we fail to successfully grow and maintain our thought leadership position, we may not attract enough new customers or retain our existing customers, and our business could suffer.

Current wording

We believe that maintaining our thought leadership position in the customer platform space is an important element in attracting new customers. We devote significant resources to develop and maintain our thought leadership position, with a focus on identifying and interpreting emerging trends, shaping and guiding industry dialog and creating and sharing the best practices. Our activities related to developing and maintaining our thought leadership may not yield increased revenue, and even if they do, any increased revenue may not offset the expenses we incurred in such effort. We rely upon the continued services of our management and employees with domain expertise with marketing, sales, services, operations, revenue and content management, and the loss of any key employees in this area could harm our competitive position and reputation. If we fail to successfully grow and maintain our thought leadership position, we may not attract enough new customers or retain our existing customers, and our business could suffer.

Previous wording

The development of next-generation solutions that utilize new and advanced features, including AI and machine learning, such as Breeze, involves making predictions regarding the willingness of the market to adopt such technologies over legacy solutions. The Company may be required to commit significant resources to developing new products, software and services, such as Breeze, before knowing whether such investment will result in products or services that the market will accept.

Current wording

The development of next-generation solutions that utilize new and advanced features, including AI and machine learning, such as Breeze Assistant, involves making predictions regarding the willingness of the market to adopt such technologies over legacy solutions. The Company may be required to commit significant resources to developing new products, software and services, before knowing whether such investment will result in products or services that the market will accept.

Previous wording

Uncertainty around new and emerging AI applications such as agentic AI technologies and generative AI content creation, including Breeze, may require additional investment in the development or acquisition of proprietary datasets, machine learning models and other AI systems to test for accuracy, bias and other variables, which are often complex. Development of new approaches and processes to provide attribution or remuneration to content creators and building and/or integrating systems that enable creatives to have greater control over the use of their work in the development of AI may be costly and could impact our profit margin if we are unable to monetize such assets. In addition, AI technologies, including agentic and generative AI tools, may create content, analyses or recommendations without human intervention that take or suggest actions based on incomplete or inaccurate data, “hallucinatory” inferences, or flawed training inputs, or contain copyrighted or other protected material, and if our customers or others use this flawed or protected content or materials to their detriment, we may be exposed to brand or reputational harm, competitive harm, and/or legal liability. Developing, testing and deploying AI systems may also increase the cost profile of our offerings due to the nature of the computing costs involved in such systems.

Current wording

Uncertainty around new and emerging AI applications, such as agentic AI technologies and generative AI content creation, may require additional investment in the development or acquisition of proprietary datasets, machine learning models and other AI systems to test for accuracy, bias and other variables, which are often complex. Development of new approaches and processes to provide attribution or remuneration to content creators and building and/or integrating systems that enable creatives to have greater control over the use of their work in the development of AI may be costly and could impact our profit margin if we are unable to monetize such assets. In addition, AI technologies, including agentic and generative AI tools, may create content, analyses or recommendations without human intervention that take or suggest actions based on incomplete or inaccurate data, “hallucinatory” inferences, or flawed training inputs, or contain copyrighted or other protected material, and if our customers or others use this flawed or protected content or materials to their detriment, we may be exposed to brand or reputational harm, competitive harm, and/or legal liability. Developing, testing and deploying AI systems may also increase the cost profile of our offerings due to the nature of the computing costs involved in such systems.

Previous wording

We have in the past acquired, and we may in the future acquire or invest in, businesses, products or technologies that we believe could complement or expand our platform, enhance our technical capabilities or otherwise offer growth opportunities. For example, in April 2026, we acquired 100% of the membership interests of Futurepedia. We may not be able to fully realize the anticipated benefits of historical or any future acquisitions. The pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses related to identifying, investigating and pursuing suitable acquisitions, whether or not they are consummated.

Current wording

We have in the past acquired, and we may in the future acquire or invest in, businesses, products or technologies that we believe could complement or expand our platform, enhance our technical capabilities or otherwise offer growth opportunities. We may not be able to fully realize the anticipated benefits of historical or any future acquisitions. The pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses related to identifying, investigating and pursuing suitable acquisitions, whether or not they are consummated.

Previous wording

More recently, global inflation rates have increased to levels not seen in several decades, which may result in decreased demand for our products and services, increases in our operating costs, including our labor costs, constrained credit and liquidity, reduced government spending and volatility in financial markets. The Federal Reserve and other international government agencies have raised, and may again raise, interest rates in response to concerns over inflation risk. Increases in interest rates on credit and debt that would increase the cost of any borrowing that we may make from time to time and could impact our ability to access the capital markets. Increases in interest rates, especially if coupled with reduced government spending and volatility in financial markets, may have the effect of further increasing economic uncertainty and heightening these risks. In an inflationary environment, we may be unable to raise the sales prices of our products and services at or above the rate at which our costs increase, which could/would reduce our profit margins and have a material adverse effect on our financial results and net income. We also may experience lower than expected sales and potential adverse impacts on our competitive position if there is a decrease in consumer spending or a negative reaction to our pricing. A reduction in our revenue would be detrimental to our profitability and financial condition and could also have an adverse impact on our future growth.

Current wording

More recently, global inflation rates have increased to levels not seen in several decades, which may result in decreased demand for our products and services, increases in our operating costs, including our labor costs, constrained credit and liquidity, reduced government spending and volatility in financial markets. The Federal Reserve and other international government agencies have raised, and may again raise, interest rates in response to concerns over inflation risk. Increases in interest rates on credit and debt that would increase the cost of any borrowing that we may make from time to time and could impact our ability to access the capital markets. Increases in interest rates, especially if coupled with reduced government spending and volatility in financial markets, may have the effect of further increasing economic uncertainty and heightening these risks. In an inflationary environment, we may be unable to raise the sales prices of our products and services at or above the rate at which our costs increase, which would reduce our profit margins and could have a material adverse effect on our financial results and net income. We also may experience lower than expected sales and potential adverse impacts on our competitive position if there is a decrease in consumer spending or a negative reaction to our pricing. A reduction in our revenue would be detrimental to our profitability and financial condition and could also have an adverse impact on our future growth.

Previous wording

We are dependent on the continued availability of third-party data hosting and transmission services.

Current wording

We are dependent on the continued availability of third-party data hosting and transmission services and AI technologies developed by third parties.

Previous wording

A significant percentage of our customers choose to integrate our platform with certain capabilities provided by third-party application providers using application programming interfaces (“APIs”) published by these providers. The functionality and popularity of our customer platform depends, in part, on our ability to integrate our platform with third-party applications and platforms, including CRM, CMS, e-commerce, call center, analytics and social media sites that our customers use and from which they obtain data. Third-party providers of applications and APIs may change the features of their applications and platforms, restrict our access to their applications and platforms, or alter the terms governing use of their applications and APIs and access to those applications and platforms in an adverse manner. Such changes could functionally limit or terminate our ability to use these third-party applications and platforms in conjunction with our platform, which could negatively impact our offerings and harm our business. If we fail to integrate our platform with new third-party applications and platforms that our customers use for marketing, sales, services, operations, commerce, or content management purposes, or fail to renew existing relationships pursuant to which we currently provide such integration, we may not be able to offer the functionality that our customers need, which would negatively impact our ability to generate new revenue or maintain existing revenue and adversely impact our business.

Current wording

A significant percentage of our customers choose to integrate our platform with certain capabilities provided by third-party application providers using application programming interfaces (“APIs”) published by these providers. The functionality and popularity of our customer platform depends, in part, on our ability to integrate our platform with third-party applications and platforms, including CRM, CMS, e-commerce, call center, analytics and social media sites that our customers use and from which they obtain data. Third-party providers of applications and APIs may change the features of their applications and platforms, restrict our access to their applications and platforms, or alter the terms governing use of their applications and APIs and access to those applications and platforms in an adverse manner. Such changes could functionally limit or terminate our ability to use these third-party applications and platforms in conjunction with our platform, which could negatively impact our offerings and harm our business. If we fail to integrate our platform with new third-party applications and platforms that our customers use for marketing, sales, services, operations, revenue, or content management purposes, or fail to renew existing relationships pursuant to which we currently provide such integration, we may not be able to offer the functionality that our customers need, which would negatively impact our ability to generate new revenue or maintain existing revenue and adversely impact our business.

Previous wording

Cyber-attacks, denial-of-service attacks, ransomware attacks, supply chain attacks, business email compromises, computer malware, viruses, wrongful intrusions, data breaches social engineering (including phishing), and other compromises are prevalent in our industry, the industries of certain of our service providers and our customers' industries. Like other companies in our industry, we and our third party vendors have in the past experienced threats and security incidents related to our data and systems, and we may in the future experience other threats, compromises, breaches, or incidents. Attempts to disrupt or gain unauthorized access to our and our third-party vendors’ information systems from malicious third parties or insider threats may incorporate widely varying and frequently changing tactics, which may be enhanced or facilitated by AI. Our internal computer systems and those of our current and any future strategic collaborators, vendors, and other contractors or consultants are vulnerable to damage from cyber-attacks, attacks enhanced or facilitated by AI, computer viruses, unauthorized access, natural disasters, cybersecurity threats, terrorism, geopolitical conflict, war and telecommunication and electrical failures. Accordingly, if our cybersecurity measures or those of our service providers fail to protect against unauthorized access, attacks (which may include sophisticated cyber-attacks), compromise or the mishandling of data by our employees and contractors, then our reputation, customer trust, business, results of operations and financial condition could be adversely affected. Cyber incidents have been increasing in sophistication and frequency and can include third parties gaining access to employee or customer data using stolen or inferred credentials, computer malware, viruses, spamming, phishing attacks, ransomware, vulnerabilities in first- or third-party code, card skimming code, and other deliberate attacks and attempts to gain unauthorized access. These attacks and activity are also being facilitated or enhanced by evolving technologies, including AI. This risk is increased by the difficulty of balancing rapid vulnerability patching and system availability in a large and rapidly-changing production environment. At times, we may be unable to patch all of our systems in a manner that strictly adheres to our internally prescribed timelines. The techniques used to sabotage or to obtain unauthorized access to our platform, systems, networks, or physical facilities in which data is stored or through which data is transmitted change frequently, and we may be unable to implement adequate preventative measures or stop security breaches while they are occurring. Because the techniques used by threat actors who may attempt to penetrate and sabotage our computer systems change frequently and may not be recognized until launched against a target, we may be unable to anticipate these techniques. Additionally, with the expansion of r…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Cyber-attacks, denial-of-service attacks, ransomware attacks, supply chain attacks, business email compromises, computer malware, viruses, wrongful intrusions, data breaches social engineering (including phishing), and other compromises are prevalent in our industry, the industries of certain of our service providers and our customers' industries. Like other companies in our industry, we and our third-party vendors have in the past experienced threats and security incidents related to our data and systems, and we may in the future experience other threats, compromises, breaches, or incidents. Attempts to disrupt or gain unauthorized access to our and our third-party vendors’ information systems from malicious third parties or insider threats may incorporate widely varying and frequently changing tactics, which may be enhanced or facilitated by AI. Our internal computer systems and those of our current and any future strategic collaborators, vendors, and other contractors or consultants are vulnerable to damage from cyber-attacks, attacks enhanced or facilitated by AI, computer viruses, unauthorized access, natural disasters, cybersecurity threats, terrorism, geopolitical conflict, war and telecommunication and electrical failures. Accordingly, if our cybersecurity measures or those of our service providers fail to protect against unauthorized access, attacks (which may include sophisticated cyber-attacks), compromise or the mishandling of data by our employees and contractors, then our reputation, customer trust, business, results of operations and financial condition could be adversely affected. Cyber incidents have been increasing in sophistication and frequency and can include third parties gaining access to employee or customer data using stolen or inferred credentials, computer malware, viruses, spamming, phishing attacks, ransomware, vulnerabilities in first- or third-party code, card skimming code, and other deliberate attacks and attempts to gain unauthorized access. These attacks and activities are also being facilitated or enhanced by evolving technologies, including AI. This risk is increased by the difficulty of balancing rapid vulnerability patching and system availability in a large and rapidly-changing production environment. At times, we may be unable to patch all of our systems in a manner that strictly adheres to our internally prescribed timelines. The techniques used to sabotage or to obtain unauthorized access to our platform, systems, networks, or physical facilities in which data is stored or through which data is transmitted change frequently, and we may be unable to implement adequate preventative measures or stop security breaches while they are occurring. Because the techniques used by threat actors who may attempt to penetrate and sabotage our computer systems change frequently and may not be recognized until launched against a target, we may be unable to anticipate these techniques. Additionally, with the expansion of…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

The landscape of privacy and cybersecurity regulation in the U.S. is increasingly complex. Numerous states have passed comprehensive privacy and data security laws, which impose obligations on covered businesses similar – but not identical – to those under the CCPA, and some states have passed privacy and cybersecurity laws governing specific sectors, technologies, or categories of personal data, such as laws regulating health data, children’s data, and online chatbots. Many of those states have also passed – or proposed to pass – laws and regulations that amend the standard of protection required by such laws. A number of other states have proposed similar privacy legislation, and the U.S. Congress has considered – and may reintroduce – federal privacy and cybersecurity legislation that may or may not preempt some or all of such U.S. state privacy laws, and may provide a private right of action. Through executive and legislative action, the federal government has also taken steps to restrict data transactions involving persons affiliated with China, Russia, Venezuela, Iran, and other countries of concern. For example, the Department of Justice January 8, 2025 rule on "Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons,” prohibits the sharing of certain sensitive personal data categories to countries of concern. The regulations also restrict certain investment agreements, employment agreements and vendor agreements involving such data and countries of concern, absent specified cybersecurity controls. Actual or alleged violations of these regulations are punishable by criminal and/or civil sanctions. The evolving complexity of privacy and data security legislation in the U.S. may complicate our compliance efforts and further increase our risk of regulatory enforcement, penalties and litigation.

Current wording

The landscape of privacy and cybersecurity regulation in the U.S. is increasingly complex. Numerous states have passed comprehensive privacy and data security laws, which impose obligations on covered businesses similar – but not identical – to those under the CCPA, and some states have passed privacy and cybersecurity laws governing specific sectors, technologies, or categories of personal data, such as laws regulating health data, children’s data, and online chatbots. Many of those states have also passed – or proposed to pass – laws and regulations that amend the standard of protection required by such laws. A number of other states have proposed similar privacy legislation, and the U.S. Congress has considered – and may reintroduce – federal privacy and cybersecurity legislation that may or may not preempt some or all of such U.S. state privacy laws, and may provide a private right of action. Through executive and legislative action, the federal government has also taken steps to restrict data transactions involving persons affiliated with China, Russia, Venezuela, Iran, and other countries of concern. For example, the Department of Justice January 8, 2025 rule on "Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered

Previous wording

A growing number of legislators and regulators are adopting laws and regulations addressing, and have focused enforcement efforts on the development and adoption of AI technologies and use of such technologies in compliance with ethical standards and societal expectations. Several states, including Colorado, California, and Texas passed laws that have taken or will take effect in 2026 to regulate various uses of AI, from making consequential decisions to requiring companies to disclose sources of training data for AI technologies, among other requirements. In addition, U.S. states and the federal government have a wide variety of measures to regulate various facets of AI development, deployment, and use in recent years, and it is possible that new laws and regulations will be adopted in the near future, or that existing laws and regulations may be interpreted in ways that would affect our business and the ways in which we and our customers use our AI technologies, our financial condition and our results of operations, including as a result of the cost to comply with such laws or regulations. The Trump Administration has endorsed a federal moratorium on the enforcement of certain state AI laws, including through a December 11, 2025 Executive Order on “Ensuring a National Policy Framework for Artificial Intelligence.” On March 20, 2026 the Trump Administration also issued a National Policy Framework setting forth non-binding policy priorities for federal AI regulation. So far, these efforts have not been successful in curtailing state action on AI regulation, contributing to a complicated legislative patchwork, which may be litigated in state and federal courts.

Current wording

A growing number of legislators and regulators are adopting laws and regulations addressing, and have focused enforcement efforts on the development and adoption of AI technologies and use of such technologies in compliance with ethical standards and societal expectations. Several states have enacted laws regulating various uses of AI, ranging from automated or consequential decision-making to requiring companies to disclose the sources of data used to train AI technologies, among other requirements. For example, AI laws in California and Texas took effect in 2026, and Colorado enacted a comprehensive AI law that was subsequently amended to narrow its scope and delay its effective date to January 1, 2027. In addition, U.S. states and the federal government have a wide variety of measures to regulate various facets of AI development, deployment, and use in recent years, and it is possible that new laws and regulations will be adopted in the near future, or that existing laws and regulations may be interpreted in ways that would affect our business and the ways in which we and our customers use our AI technologies, our financial condition and our results of operations, including as a result of the cost to comply with such laws or regulations. The Trump Administration has endorsed a federal moratorium on the enforcement of certain state AI laws, including through a December 11, 2025 Executive Order on “Ensuring a National Policy Framework for Artificial Intelligence.” On March 20, 2026 the Trump Administration also issued a National Policy Framework setting forth non-binding policy priorities for federal AI regulation. So far, these efforts have not been successful in curtailing state action on AI regulation, contributing to a complicated legislative patchwork, which may be litigated in state and federal courts.

Previous wording

Outside the U.S., lawmaking and regulation relating to AI is proceeding at a similar pace. In Europe, for example, the EU’s Artificial Intelligence Act (“AI Act”) entered into force on August 1, 2024 and, with some exceptions, and potentially evolving implementation timelines with the Digital Omnibus Regulation proposal, will begin to apply as of August 2, 2026. This legislation imposes significant obligations on providers and deployers of high-risk AI systems, and encourages providers and deployers of AI systems to account for EU ethical principles in their development and use of these systems. As we continue to develop and use AI systems, which may be governed by the AI Act or other emerging regulations, we may be required to ensure higher standards of data quality, transparency, and human oversight, as well as adhere to specific ethical, accountability, and administrative requirements, some of which may increase our costs and compliance obligations. Further, potential government regulation related to AI use and ethics may also increase the cost of research and development in this area, and failure to properly remediate AI usage or ethics issues may cause public confidence in AI to be undermined, which could slow adoption of AI in our products and services.

Current wording

Outside the U.S., lawmaking and regulation relating to AI is proceeding at a similar pace. In Europe, for example, the EU’s Artificial Intelligence Act (“AI Act”) entered into force on August 1, 2024 and applies on a phased basis, with certain provisions already in effect. In May 2026, EU institutions reached agreement on a Digital Omnibus package that, among other things, defers the application of certain obligations for high-risk AI systems, with such obligations now expected to apply from December 2, 2027, for stand-alone high-risk systems and from August 2, 2028. for AI embedded in certain regulated products. The implementation timeline and scope of the AI Act remain subject to further change. This legislation imposes significant obligations on providers and deployers of high-risk AI systems, and encourages providers and deployers of AI systems to account for EU ethical principles in their development and use of these systems. As we continue to develop and use AI systems, which may be governed by the AI Act or other emerging regulations, we may be required to ensure higher standards of data quality, transparency, and human oversight, as well as adhere to specific ethical, accountability, and administrative requirements, some of which may increase our costs and compliance obligations. Further, potential government regulation related to AI use and ethics may also increase the cost of research and development in this area, and failure to properly remediate AI usage or ethics issues may cause public confidence in AI to be undermined, which could slow adoption of AI in our products and services.

Previous wording

Additionally, our end-to-end payment solution, as well as our Stripe payment processing integration (“Payments”), are both built within Commerce Hub and are susceptible to potentially illegal or improper uses, including money laundering, terrorist financing, fraudulent or illegal sales of goods or services, piracy of software, movies, music, and other copyrighted or trademarked information, bank fraud, securities fraud, pyramid or ponzi schemes, or the facilitation of other illegal or improper activity. While we engage a third party as our registered payment facilitator, the use of Payments for illegal or improper uses may subject us to claims (including claims brought by our third-party payment processor), government and regulatory requests, inquiries, or investigations that could result in liability, and harm our reputation. Moreover, certain activity that may be legal in one jurisdiction may be illegal in another jurisdiction, and a merchant may be found responsible for intentionally or inadvertently importing or exporting illegal goods, resulting in liability for us. Owners of intellectual property rights or government authorities may seek to bring legal action against providers of payments solutions, including Payments, that are peripherally involved in the sale of infringing or allegedly infringing items. Any threatened or resulting claims could result in reputational harm, and any resulting liabilities, loss of transaction volume, or increased costs could harm our business.

Current wording

Additionally, our end-to-end payment solution, as well as our Stripe payment processing integration (“Payments”), are both built within Revenue Hub and are susceptible to potentially illegal or improper uses, including money laundering, terrorist financing, fraudulent or illegal sales of goods or services, piracy of software, movies, music, and other copyrighted or trademarked information, bank fraud, securities fraud, pyramid or ponzi schemes, or the facilitation of other illegal or improper activity. While we engage a third party as our registered payment facilitator, the use of Payments for illegal or improper uses may subject us to claims (including claims brought by our third-party payment processor), government and regulatory requests, inquiries, or investigations that could result in liability, and harm our reputation. Moreover, certain activity that may be legal in one jurisdiction may be illegal in another jurisdiction, and a merchant may be found responsible for intentionally or inadvertently importing or exporting illegal goods, resulting in liability for us. Owners of intellectual property rights or government authorities may seek to bring legal action against providers of payments solutions, including Payments, that are peripherally involved in the sale of infringing or allegedly infringing items. Any threatened or resulting claims could result in reputational harm, and any resulting liabilities, loss of transaction volume, or increased costs could harm our business.

Previous wording

As a multinational organization, we may be subject to taxation in several jurisdictions around the world with increasingly complex tax laws, the application of which can be uncertain. The amount of taxes we pay in these jurisdictions could increase substantially as a result of changes in the applicable tax principles, including increased tax rates, new tax laws or revised interpretations of existing tax laws and precedents, or challenges to our tax positions by tax authorities, any of which could have a material adverse effect on our liquidity, financial condition or operating results. We also may invest in companies located in jurisdictions outside the United States, and these investments may result in complex U.S. or non-U.S. tax consequences. New global tax developments may have a material impact to our business, cash flows, or financial results. Such developments, may include certain Organization for Economic Co-operation and Development's proposals including the implementation of global minimum tax under the Pillar Two model rules, and the European Commission’s and certain major jurisdictions’ heightened interest in and taxation of companies participating in the digital economy. In addition, the authorities in these jurisdictions could review our tax returns and impose additional tax, interest and penalties, and the authorities could claim that various withholding requirements apply to us or our subsidiaries or assert that benefits of tax treaties are not available to us or our subsidiaries, or assert that we are subject to tax in a jurisdiction where we believe we have not established a taxable nexus, often referred to as a “permanent establishment” under international tax treaties, any of which could have a material impact on us, our financial condition or our operating results.

Current wording

As a multinational organization, we may be subject to taxation in several jurisdictions around the world with increasingly complex tax laws, the application of which can be uncertain. The amount of taxes we pay in these jurisdictions could increase substantially as a result of changes in the applicable tax principles, including increased tax rates, new tax laws or revised interpretations of existing tax laws and precedents, or challenges to our tax positions by tax authorities, any of which could have a material adverse effect on our liquidity, financial condition or operating results. We also may invest in companies located in jurisdictions outside the United States, and these investments may result in complex U.S. or non-U.S. tax consequences. New global tax developments may have a material impact to our business, cash flows, or financial results. Such developments, may include certain Organization for Economic Co-operation and Development's proposals including the implementation of global minimum tax under the Pillar Two model rules, and the European Commission’s and certain major jurisdictions’ heightened interest in and taxation of companies participating in the digital economy. In January 2026, the OECD introduced new guidance including a "side-by-side safe harbor" which, if elected, exempts U.S. parented groups from certain provisions of Pillar Two. However, the election does not relieve foreign subsidiaries from certain jurisdiction specific minimum taxes. In addition, the authorities in these jurisdictions could review our tax returns and impose additional tax, interest and penalties, and the authorities could claim that various withholding requirements apply to us or our subsidiaries or assert that benefits of tax treaties are not available to us or our subsidiaries, or assert that we are subject to tax in a jurisdiction where we believe we have not established a taxable nexus, often referred to as a “permanent establishment” under international tax treaties, any of which could have a material impact on us, our financial condition or our operating results.

Previous wording

We generated net income of $32.6 million for the three months ended March 31, 2026 and net losses of $21.8 million for the three months ended March 31, 2025. As of March 31, 2026 we had an accumulated deficit of $721.3 million. We will need to generate and sustain increased revenue levels in future periods to become consistently profitable, and, even if we do, we may not be able to maintain or increase our level of profitability. We have spent and intend to continue to expend significant funds on our marketing, sales, customer service, and general and administrative operations, the development and enhancement of our customer platform, scaling our data center infrastructure and services capabilities and expanding into new markets. Our efforts to grow our business may be more costly than we expect, and we may not be able to increase our revenue enough to offset our higher operating expenses. We may incur significant losses in the future for a number of reasons, including the other risks described in this Quarterly Report on Form 10-K, and unforeseen expenses, difficulties, complications and delays and other unknown events. If we are unable to achieve and sustain profitability, the market price of our common stock may decrease significantly.

Current wording

We generated net income of $75.9 million for the six months ended June 30, 2026 and net losses of $25.1 million for the six months ended June 30, 2025. As of June 30, 2026 we had an accumulated deficit of $678.0 million. We will need to generate and sustain increased revenue levels in future periods to become consistently profitable, and, even if we do, we may not be able to maintain or increase our level of profitability. We have spent and intend to continue to expend significant funds on our marketing, sales, customer service, and general and administrative operations, the development and enhancement of our customer platform, scaling our data center infrastructure and services capabilities and expanding into new markets. Our efforts to grow our business may be more costly than we expect, and we may not be able to increase our revenue enough to offset our higher operating expenses. We may incur significant losses in the future for a number of reasons, including the other risks described in this Quarterly Report on Form 10-Q, and unforeseen expenses, difficulties, complications and delays and other unknown events. If we are unable to achieve and sustain profitability, the market price of our common stock may decrease significantly.

Previous wording

sales of large blocks of our common stock or the dilutive effect of our Notes or any other equity or equity-linked financings;

Current wording

sales of large blocks of our common stock or the dilutive effect of any equity or equity-linked financings;

Previous wording

As a public company we are subject to the reporting requirements of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), the Sarbanes-Oxley Act of 2002 (the “Sarbanes-Oxley Act”), the Dodd-Frank Wall Street Reform and Consumer Protection Act (the “Dodd-Frank Act”), and the rules and regulations of the New York Stock Exchange (the “NYSE”). We expect that compliance with these rules and regulations will continue to increase our legal, accounting and financial compliance costs, make some activities more difficult, time consuming and costly, and place significant strain on our personnel, systems and resources.

Current wording

As a public company we are subject to the reporting requirements of the Exchange Act, the Sarbanes-Oxley Act of 2002 (the “Sarbanes-Oxley Act”), the Dodd-Frank Wall Street Reform and Consumer Protection Act (the “Dodd-Frank Act”), and the rules and regulations of the New York Stock Exchange (the “NYSE”). We expect that compliance with these rules and regulations will continue to increase our legal, accounting and financial compliance costs, make some activities more difficult, time-consuming and costly, and place significant strain on our personnel, systems and resources.

Previous wording

On February 7, 2026, our Board of Directors authorized a share repurchase program under which we are authorized to purchase up to $1.0 billion of our common stock from time to time (the “2026 Share Repurchase Program”). As of May 1, 2026, a total of $600.3 million remained available for repurchase under the share repurchase program. Repurchases under the 2026 Share Repurchase Program will be made in the open market, through privately negotiated transactions or other means, including pursuant to 10b5-1 plans, and in compliance with applicable securities laws and other requirements. The timing, manner, price, and amount of the 2026 Share Repurchase Program is subject to the discretion of our management. The 2026 Share Repurchase Program does not obligate us to acquire a specified number of shares, and may be suspended, modified, or terminated at any time, without prior notice. There can be no assurance that we will repurchase shares at favorable prices. Further, our share repurchases could affect the trading price of our common stock, increase its volatility, reduce our cash reserves, and may be suspended or terminated at any time, which may result in a lower market valuation of our common stock.

Current wording

On February 7, 2026, our Board of Directors authorized a share repurchase program under which we are authorized to purchase up to $1.0 billion of our common stock from time to time (the “February 2026 Share Repurchase Program”). As of the date of filing this report, a total of $257.1 million remained available for repurchase under the February 2026 Share Repurchase Program. On August 3, 2026, our Board of Directors authorized an additional share repurchase program under which we are authorized to purchase up to an additional $1.0 billion of our common stock from time to time (together with the February 2026 Share Repurchase Program, the “2026 Share Repurchase Programs”), all of which remained available for repurchase as of the date of this report. Repurchases under the 2026 Share Repurchase Programs will be made in the open market, through privately negotiated transactions or other means, including pursuant to 10b5-1 plans, and in compliance with applicable securities laws and other requirements. The timing, manner, price, and amount of the 2026 Share Repurchase Programs are subject to the discretion of our management. The 2026 Share Repurchase Programs do not obligate us to acquire a specified number of shares, and may be suspended, modified, or terminated at any time, without prior notice. There can be no assurance that we will repurchase shares at favorable prices. Further, our share repurchases could affect the trading price of our common stock, increase its volatility, reduce our cash reserves, and may be suspended or terminated at any time, which may result in a lower market valuation of our common stock.

Previous wording

If adequate funds are not available on acceptable terms, we may be unable to invest in future growth opportunities, which could seriously harm our business and operating results. If we incur additional debt, including under the credit facility, the debt holders would have rights senior to common stockholders to make claims on our assets. Additionally, the credit facility restricts our operations, including our ability to pay dividends on our common stock. Furthermore, if we issue equity securities, stockholders will experience dilution, and the new equity securities could have rights senior to those of our common stock. The Notes are and any additional equity or equity-linked financings would be dilutive to our stockholders. Because our decision to issue securities in any future offering will depend on market conditions and other factors beyond our control, we cannot predict or estimate the amount, timing or nature of our future offerings. As a result, our stockholders bear the risk of our future securities offerings reducing the market price of our common stock and diluting their interest.

Current wording

If adequate funds are not available on acceptable terms, we may be unable to invest in future growth opportunities, which could seriously harm our business and operating results. If we incur additional debt, including under the credit facility, the debt holders would have rights senior to common stockholders to make claims on our assets. Additionally, the credit facility restricts our operations, including our ability to pay dividends on our common stock. Furthermore, if we issue equity securities, stockholders will experience dilution, and the new equity securities could have rights senior to those of our common stock. Any additional equity or equity-linked financings would be dilutive to our stockholders. Because our decision to issue securities in any future offering will depend on market conditions and other factors beyond our control, we cannot predict or estimate the amount, timing or nature of our future offerings. As a result, our stockholders bear the risk of our future securities offerings reducing the market price of our common stock and diluting their interest.

Previous wording

(2) In February 2026, the Company's Board of Directors authorized the 2026 Share Repurchase Program for the repurchase of shares of the Company’s common stock, in an aggregate amount of up to $1 billion, over a period of 24 months. Refer to Note 14 to the consolidated financial statements contained within this Quarterly Report on Form 10-Q for additional information related to our share repurchases.

Current wording

(2) In February 2026, the Company's Board of Directors authorized the February 2026 Share Repurchase Program for the repurchase of shares of the Company’s common stock, in an aggregate amount of up to $1 billion, over a period of 24 months. In August 2026, the Company's Board of Directors authorized the August 2026 Share Repurchase Program for the repurchase of shares of the Company’s common stock, in an aggregate amount of up to $1 billion, over a period of 24 months. Refer to Note 14 and Note 17 to the consolidated financial statements contained within this Quarterly Report on Form 10-Q for additional information related to our share repurchases.