CALIX, INC

Previous wording

•The imposition of new duties, tariffs, trade barriers and retaliatory countermeasures implemented by the U.S. and other governments and resulting impact on customer demand may have a material adverse effect on our business, financial condition and results of operations.

Current wording

•The imposition of new duties, tariffs (and uncertainty related to the enforceability thereof), trade barriers and retaliatory countermeasures implemented by the U.S. and other governments and resulting impact on customer demand may have a material adverse effect on our business, financial condition and results of operations.

Previous wording

•We have a history of fluctuations in our gross margin and operating results, which can make it difficult to predict our future performance and could cause the market price of our stock to decline.

Current wording

•We have a history of fluctuations in our gross margin and operating results, and we expect continued fluctuations as memory component costs, advance-purchased supply depletion, surcharge recovery, customer and product mix, and cloud costs evolve, which can make it difficult to predict our future performance and could cause the market price of our stock to decline.

Previous wording

Actual or perceived failure to comply with applicable data privacy, security and platform and technology regulation laws, regulations and standards could impact our business, operations, and expose us to increased liability.

Current wording

•Actual or perceived failure to comply with applicable data privacy, security and platform and technology laws, regulations, rules and industry standards and other requirements relating to the processing of personal information could impact our business, operations, and expose us to increased liability.

Previous wording

We materially depend upon third-party vendors for our complex global supply-chain operations, including for services to develop, design and source components and materials as well as manufacture, transport and deliver our products. If any of these vendors stop providing their services, for any reason, we would have to obtain similar services from other sources, which may not be available on commercially reasonable terms, if at all. We also have limited control over disruptions that may occur at the facilities of those providers, such as supply interruptions, labor shortages, strikes, shipping backlogs at ports and similar disruptions to transportation infrastructure, design and manufacturing failures, quality control issues, systems failures or facility closures arising from pandemics, natural disasters, terrorist attacks or acts of war. In addition, switching development firms or manufacturers could delay the manufacture and availability of products and/or require us to re-qualify our products with our customers, which would be costly and time-consuming. Any interruption in the development, supply or distribution of our products would adversely affect our ability to meet scheduled product deliveries to our customers and could result in lost revenue or higher costs, which would negatively impact our gross margin and operating results and harm our business.

Current wording

We materially depend upon third-party vendors for our complex global supply-chain operations, including for services to develop, design and source components and materials as well as manufacture, transport and deliver our products. If any of these vendors stop providing their services, for any reason, we would have to obtain similar services from other sources, which may not be available on commercially reasonable terms, if at all. We also have limited control over disruptions that may occur at the facilities of those providers, such as supply interruptions, labor shortages, strikes, shipping backlogs at ports and similar disruptions to transportation infrastructure, design and manufacturing failures, quality control issues, systems failures or facility closures arising from pandemics, natural disasters, terrorist attacks or acts of war. In addition, switching development firms or manufacturers could delay the manufacture and availability of products and/or require us to re-qualify our products with our customers, which would be costly and time-consuming.

Previous wording

•Manufacturing constraints, shortages and other disruptions. We do not have internal manufacturing capabilities and we rely solely on a small number of contract manufacturers, or CMs, and original design manufacturers, or ODMs, to manufacture and supply our products. Our business operations and ability to supply our products are highly dependent upon our ability to secure adequate third-party manufacturing capabilities and capacity and to effectively manage those third parties to meet our business needs. Our dependence solely on third-party manufacturers makes us vulnerable to possible supply and capacity constraints and reduces our control over manufacturing disruptions due to component availability, extended lead times, delivery schedules, quality, manufacturing yields and increased costs. Some of these risks occur from time to time in our business. If these disruptions and constraints are prolonged, or if these manufacturers do not have the ability or business continuity plans to fulfill their obligations to us, our business could be disrupted. If we cannot effectively manage our vendors or if we fail to invest adequate resources to manage our supply chain operations, our ability to meet customer orders and generate revenue may be negatively impacted. A substantial portion of our manufacturing is done at facilities outside of the U.S., largely in Asia, which presents increased supply risk, including the risk of supply interruptions, delays, shortages or reductions in manufacturing quality or controls. In addition, these supply interruptions, delays and shortages could impair our ability to meet our customer requirements, require us to pay higher prices or incur expedite fees, which would harm our business and negatively impact our gross margin and results of operations. Our international manufacturing also creates risks and uncertainties associated with regulatory changes or government actions such as local business requirements, trade restrictions and tariffs, economic sanctions or related legislation, which may complicate our export and import activities, be disruptive to the operations of our manufacturers and logistics partners or result in higher product and shipping costs and variability of supply. Manufacturing in Asia further heightens our risk of meeting customer delivery requirements as we rely upon third-party logistics companies to transport and import significant volumes of products to the U.S. where we generate a substantial majority of our revenue. These supply chain risks are further increased by periodic shipping backlogs at ports and similar disruptions to transportation infrastructure.

Current wording

•Manufacturing constraints, shortages and other disruptions. We do not have internal manufacturing capabilities and we rely solely on a small number of contract manufacturers, or CMs, and original design manufacturers, or ODMs, to manufacture and supply our products. Our business operations and ability to supply our products are highly dependent upon our ability to secure adequate third-party manufacturing capabilities and capacity and to effectively manage those third parties to meet our business needs. Our dependence solely on third-party manufacturers has made us in the past and continues to make us vulnerable to possible supply and capacity constraints and has reduced in the past and continues to reduce our control over manufacturing disruptions due to component availability, extended lead times, delivery schedules, quality, manufacturing yields and increased costs. Some of these risks occur from time to time in our business. If these disruptions and constraints are prolonged, or if these manufacturers do not have the ability or business continuity plans to fulfill their obligations to us, our business could be disrupted. If we cannot effectively manage our vendors or if we fail to invest adequate resources to manage our supply chain operations, our ability to meet customer orders and generate revenue may be negatively impacted. A substantial portion of our manufacturing is done at facilities outside of the U.S., largely in Asia, which presents increased supply risk, including the risk of supply interruptions, delays, shortages or reductions in manufacturing quality or controls. In addition, these supply interruptions, delays and shortages could impair our ability to meet our customer requirements or require us to pay higher prices or incur expedite fees, which would harm our business and negatively impact our gross margin and results of operations. Our international manufacturing also creates risks and uncertainties associated with regulatory changes or government actions such as local business requirements, trade restrictions and tariffs, economic sanctions or related legislation, which may complicate our export and import activities, be disruptive to the operations of our manufacturers and logistics partners or result in higher product and shipping costs and variability of supply. Manufacturing in Asia further heightens our risk of meeting customer delivery requirements as we rely upon third-party logistics companies to transport and import significant volumes of products to the U.S. where we generate a substantial majority of our revenue. These supply chain risks are further increased by periodic shipping backlogs at ports and similar disruptions to transportation infrastructure.

Previous wording

•Limited sources and sole-sourced supply. We are dependent upon sole-source or limited-source suppliers for some key product components such as chipsets, certain of our application-specific integrated circuit processors and memory and resistor components, including certain components sourced solely through suppliers located in China and other Asian countries. Any of these suppliers could stop producing our components, raise the prices they charge us, be subject to higher product tariffs, epidemics or other conditions that disrupt their operations, cease operations or enter into exclusive arrangements with our competitors, consequently affecting our operations and results. For example, the technology industry is currently experiencing significant supply constraints for memory components, driven in part by the reallocation of manufacturing capacity towards the global AI infrastructure build, which constraints may continue for years until new manufacturing capacity is built. These constraints have resulted in, and are expected to continue to result in, increased costs and extended lead times for the components used in our products. Being dependent upon a limited number of suppliers constrains our ability to mitigate these disruptions in our supply chain, particularly if such disruptions are prolonged. This may adversely affect our ability to obtain components and materials needed to manufacture our products at acceptable prices in a timely fashion, or at all. These risks would adversely affect our ability to meet scheduled product deliveries to our customers, increase costs and in turn harm our business and results of operations.

Current wording

•Limited sources and sole-sourced supply. We are dependent upon sole-source or limited-source suppliers for some key product components such as chipsets, certain of our application-specific integrated circuit processors and memory and resistor components, including certain components sourced solely through suppliers located in China and other Asian countries. Any of these suppliers could stop producing our components, raise the prices they charge us, be subject to higher product tariffs, epidemics or other conditions that disrupt their operations, cease operations or enter into exclusive arrangements with our competitors, consequently affecting our operations and results. For example, the technology industry is currently experiencing significant supply constraints for memory components, driven in part by the reallocation of manufacturing capacity towards the global AI infrastructure build, which constraints may continue for years until new manufacturing capacity is built. These constraints have contributed to elevated and volatile DDR memory and other memory component prices in the past, currently are contributing to elevated and volatile DDR memory and other memory component prices and may do so in the future, as a result, the impact on our gross margin may vary based on inventory timing, supply availability, and the effectiveness of surcharges or other pricing actions. These constraints have resulted in, and are expected to continue to result in, increased costs and extended lead times for the components used in our products. Being dependent upon a limited number of suppliers constrains our ability to mitigate these disruptions in our supply chain, particularly if such disruptions are prolonged. This may adversely affect our ability to obtain components and materials needed to manufacture our products at acceptable prices in a timely fashion, or at all, which would adversely affect our ability to meet scheduled product deliveries to our customers, increase costs and in turn harm our business and results of operations.

Previous wording

With respect to our products or services that incorporate AI Technologies, including agentic AI, the market for such products and services is rapidly evolving and unproven in many industries, including our own, and important assumptions about the characteristics of targeted markets, pricing, sales cycles, cost, performance, and perceived value associated with our services or products may be inaccurate. We cannot be sure that the market will continue to grow or that it will grow in ways we anticipate.

Current wording

With respect to our products or services that incorporate AI Technologies, including agentic AI, the market for such products and services is rapidly evolving and unproven in many industries, including our own, and important assumptions about the characteristics of targeted markets, pricing, sales cycles, cost, performance, and perceived value associated with our services or products may be inaccurate. We cannot be sure that the market will continue to grow or that it will grow in ways we anticipate. In addition, market acceptance and consumer perceptions of products and services that incorporate AI Technologies is uncertain. Our failure to successfully develop and commercialize our products or services involving AI Technologies could depress the market price of our stock and impair our ability to: raise capital; expand our business; provide, improve and diversify our product offerings; continue our operations and efficiently manage our operating expenses; and respond effectively to competitive developments.

Previous wording

Additionally, the regulatory framework for AI Technologies is rapidly evolving. Existing laws and regulations may be interpreted in ways that could affect the operation of our AI Technologies, and federal, state and foreign government bodies and agencies have introduced or are currently considering additional laws and regulations applicable to AI Technologies. For example, in the U.S., legislation related to AI Technologies has been introduced at the federal level and enacted or proposed by various states, including California, Colorado, Connecticut and Texas. Some enacted or proposed frameworks include requirements focused on transparency, risk-management and accountability for AI Technologies, while others focus on high-risk uses of AI or the use of automated decision-making. Collectively, these developments signal an emerging trend towards a patchwork of state-level governance of AI in the U.S. Furthermore, the Trump administration’s approach to investment in and regulation of AI technologies has and is expected to continue to deviate from that of the previous administration, and we will need to adapt to any changes that may result from such approach, including as the result of new or changing executive orders. For instance, the U.S. federal government may seek to pre-empt state laws when they seek to govern certain topics as evidenced by the Trump administration’s “Ensuring a National Policy Framework for Artificial Intelligence” Executive Order signed on December 11, 2025. This order calls for federal standards and legislation that would preempt conflicting state AI regulations and create a federal litigation task force focused on challenging state AI laws in court. In Europe, the EU Artificial Intelligence Act (“EU AI Act”) establishes a comprehensive, risk-based governance framework for AI in the European Union (“EU”) market. The majority of the substantive requirements will apply from August 2, 2026. The EU AI Act applies to companies that develop, use and/or provide AI in the EU, with specific requirements based on the relevant AI use cases. For example, in relation to our use of generative AI, we may be subject to certain disclosure and transparency obligations, with fines up to the greater of €15 million or 3% of global revenue.

Current wording

In Europe, the EU Artificial Intelligence Act (“EU AI Act”) establishes a comprehensive, risk-based governance framework for AI in the European Union (“EU”) market. The majority of the substantive requirements are expected to apply from August 2, 2026, though the European Commission has proposed an extension to December 2, 2027 (such extension is not yet finalized or effective). The EU AI Act applies to companies that develop, use and/or provide AI in the EU, with specific requirements based on the relevant AI use cases. For example, in relation to our use of generative AI, we may be subject to certain disclosure and transparency obligations, with fines up to the greater of €15 million or 3% of global revenue.

Previous wording

In addition, the revised EU Product Liability Directive, to be implemented into EU member state national law by December 2026, extends the EU’s existing strict product liability regime to AI and facilitates civil claims in respect of harm caused by AI. Once fully applicable, the EU AI Act and the EU Product Liability Directive, together with developing guidance and/or decisions in this area, will have a material impact on the way AI is regulated in the EU. The cost to comply with such laws, regulations, decisions and/or guidance interpreting existing laws, or to adjust our business plans based on changes to how such laws are enforced, could be significant and would increase our operating expenses (such as by imposing additional reporting obligations regarding our use of AI Technologies) or impact our ability to use, procure or commercialize AI Technologies. Such an increase in operating expenses, as well as any actual or perceived failure to comply with such laws and regulations, could adversely affect our business, financial condition and results of operations.

Current wording

In addition, the revised EU Product Liability Directive, to be implemented into EU member state national law by December 2026, extends the EU’s existing strict product liability regime to AI Technologies and AI-enabled products, and facilitates civil claims in respect of harm caused by AI. Once fully applicable, the EU AI Act and the EU Product Liability Directive, together with developing guidance and/or decisions in this area, will have a material impact on the way AI is regulated in the EU. It is possible that further new laws and regulations will be adopted in the United States and in other non-U.S. jurisdictions, or that existing laws and regulations, including competition, antitrust, data privacy and consumer protection laws, may be interpreted or enforced in ways that would limit our ability to use AI Technologies for our business, or require us to change the way we use AI Technologies in a manner that negatively affects the performance of our products, services, and business and the way in which we use AI Technologies. We may need to expend resources to adjust our products or services in certain jurisdictions if the laws, regulations, or decisions are not consistent across jurisdictions. Further, the cost to comply with such laws, regulations, decisions and/or guidance interpreting existing laws, or to adjust our business plans based on changes to how such laws are enforced, including adapting to loosened regulation to remain competitive, could be significant and would increase our operating expenses (such as by imposing additional reporting obligations regarding our use of AI Technologies) or impact our ability to use, procure or commercialize AI Technologies. Such an increase in operating expenses could adversely affect our business, financial condition and results of operations. In addition, if we fail or are perceived to fail to comply with these laws and regulations, we may face lawsuits (including class actions), investigations, enforcement actions, negative reputational impacts, and other penalties that materially impact our business.

Previous wording

The imposition of new duties, tariffs, trade barriers and retaliatory countermeasures implemented by the U.S. and other governments and resulting impact on customer demand may have a material adverse effect on our business, financial condition and results of operations.

Current wording

The imposition of new duties, tariffs (and uncertainty related to the enforceability thereof), trade barriers and retaliatory countermeasures implemented by the U.S. and other governments and resulting impact on customer demand may have a material adverse effect on our business, financial condition and results of operations.

Previous wording

The implementation of significant changes to U.S. trade policies, sanctions, legislation, treaties and tariffs, including, but not limited to, significant new tariffs on goods imported into the U.S., have introduced uncertainty to our business and will increase the cost of our U.S. manufactured products and components sourced outside of the U.S., which will result in an increase to our cost of revenue and may cause a reduction in our gross margin. In response, China announced additional tariffs on U.S. goods and new export control restrictions. The imposition of additional tariffs or other trade barriers by countries outside of the U.S may increase our costs in these markets, and to the extent these increased costs result in increased prices for our customers, the demand for our products may decrease as our customers seek alternative sourcing, making it more difficult for us to sell our products in some markets.

Current wording

The implementation of significant changes to U.S. trade policies, sanctions, legislation, treaties and tariffs, including, but not limited to, significant new tariffs on goods imported into the U.S.(and uncertainty related to the enforceability thereof), have introduced uncertainty to our business and will increase the cost of our U.S. manufactured products and components sourced outside of the U.S., which will result in an increase to our cost of revenue and may cause a reduction in our gross margin. In response, China announced additional tariffs on U.S. goods and new export control restrictions. The imposition of additional tariffs or other trade barriers by countries outside of the U.S may increase our costs in these markets, and to the extent these increased costs result in increased prices for our customers, the demand for our products may decrease as our customers seek alternative sourcing, making it more difficult for us to sell our products in some markets.

Previous wording

We face numerous and evolving cybersecurity risks that threaten the confidentiality, integrity and availability of our IT Systems and Confidential Information, including from diverse threat actors such as state-sponsored organizations, opportunistic hackers and hacktivists, as well as through diverse attack vectors such as social engineering/phishing, malware (including ransomware), malfeasance by insiders, human or technological error and, as a result of malicious code embedded in open-source software, bugs, misconfigurations or exploited vulnerabilities in software or hardware that is integrated into our (or our suppliers’ or service providers’) IT Systems, products or services. Threat actors could steal Confidential Information related to our business, products, employees, customers and our customers’ subscribers; hold data ransom; and/or disrupt our systems and services or those of our supply chain partners, vendors, customers or others. We expect cybersecurity attacks and security breaches to accelerate in the future, including sophisticated supply chain attacks. As we and our third-party providers continue to increase our reliance on virtual environments and communications systems and cloud-based solutions to support our work-from-anywhere culture and overall business needs, our exposures to third-party vulnerabilities and security risks also increase. Because threat actors are increasingly sophisticated and aggressive, our efforts may be inadequate to prevent, detect or recover from future attacks due, for example, to the increased use by attackers of tools and techniques (including artificial intelligence) that are specifically designed to circumvent controls, to avoid detection, and to remove or obfuscate forensic evidence. We may also experience security breaches that may remain undetected for an extended period.

Current wording

We face numerous and evolving cybersecurity risks that threaten the confidentiality, integrity and availability of our IT Systems and Confidential Information, including from diverse threat actors such as state-sponsored organizations, opportunistic hackers and hacktivists, as well as through diverse attack vectors such as social engineering/phishing, malware (including ransomware), malfeasance by insiders, human or technological error and, as a result of malicious code embedded in open-source software, bugs, misconfigurations or exploited vulnerabilities in software or hardware that is integrated into our (or our suppliers’ or service providers’) IT Systems, products or services. Threat actors could steal Confidential Information related to our business, products, employees, customers and our customers’ subscribers; hold data ransom; and/or disrupt our systems and services or those of our supply chain partners, vendors, customers or others. We expect cybersecurity attacks and security breaches to accelerate in the future, including sophisticated supply chain attacks. As we and our third-party providers continue to increase our reliance on virtual environments and communications systems and cloud-based solutions to support our work-from-anywhere culture and overall business needs, our exposures to third-party vulnerabilities and security risks also increase. Because threat actors are increasingly sophisticated and aggressive, our efforts may be inadequate to prevent, detect or recover from future attacks due, for example, to the increased use by attackers of tools and techniques (including artificial intelligence) that are specifically designed to circumvent controls, to avoid detection, and to remove or obfuscate forensic evidence. In addition, artificial intelligence-enabled products and technologies have enabled threat actors to perpetrate attacks at a speed, scale and complexity that was previously beyond their capabilities. As a result, we may be unable to detect, investigate, remediate or recover from future attacks or incidents, or to avoid a material adverse impact on our IT Systems, Confidential Information, or business. We may also experience security breaches that may remain undetected for an extended period.

Previous wording

We and certain of our third-party providers have been subject to cyberattacks and other security incidents, and we expect such attacks and incidents to continue in varying degrees. There can be no assurance that our cybersecurity risk management program and processes, including our policies, controls or procedures, will be fully implemented, complied with or effective in protecting our IT Systems and Confidential Information. Accordingly, while to date no cybersecurity incidents have had a material impact on our operations or financial results, we cannot guarantee that material incidents will not occur in the future. A cyberattack or incident that affects the confidentiality, integrity or availability of our IT Systems or Confidential Information could result in legal claims or proceedings (such as class actions), regulatory investigations and enforcement actions, fines and penalties, negative reputational impacts that cause us to lose existing or future customers, and/or significant incident response, system restoration or remediation and future compliance costs. Even if we and our third-party providers allocate, implement and manage reasonable security and data protection measures, we could still experience significant data loss, unauthorized data disclosure or a breach of our IT Systems, products or those of our third-party providers (for example, data centers) that materially impact our business. The continued growth of our cloud-based platform and managed services portfolio and increased reliance on third-party development partners and third-party software and cloud-based solutions increases the likely risks arising from security breaches or data loss. Any data loss or compromise of our systems that collect and process personal information (including personal information of our customers’ subscribers), or third-party data centers where that personal information is stored, could result in loss of confidence in the security of our offerings and loss of customers or customer goodwill. Further, security incidents could subject us to obligations under privacy and data security laws and regulations around the world (including to notify governmental authorities, regulatory bodies and/or affected individuals), lead to liability given the increasing development of such strict laws and regulations, increase the risk of litigation and governmental or regulatory investigation, require us to notify our customers or other counterparties in relation to such incidents, damage our reputation and adversely affect our business, financial condition, operating results and cash flows. Although we maintain insurance that may apply to cybersecurity risks and liabilities, there can be no guarantee that any or all costs or losses incurred will be partially or fully insured or that we will be able to procure applicable insurance in the future on reasonable terms or at all.

Current wording

We and certain of our third-party providers have been subject to cyberattacks and other security incidents, and we expect such attacks and incidents to continue in varying degrees. There can be no assurance that our cybersecurity risk management program and processes, including our policies, controls or procedures, will be fully implemented, complied with or effective in protecting our IT Systems and Confidential Information. Accordingly, while to date no cybersecurity incidents have had a material impact on our operations or financial results, we cannot guarantee that material incidents will not occur in the future. A cyberattack or incident that affects the confidentiality, integrity or availability of our IT Systems or Confidential Information could result in legal claims or proceedings (such as class actions), regulatory investigations and enforcement actions, fines and penalties, negative reputational impacts that cause us to lose existing or future customers, and/or significant incident response, system restoration or remediation and future compliance costs. Even if we and our third-party providers allocate, implement and manage reasonable security and data protection measures, we could still experience significant data loss, unauthorized data disclosure or a breach of our IT Systems, products or those of our third-party providers (for example, data centers) that materially impact our business. The continued growth of our cloud-based platform and managed services portfolio and increased reliance on third-party development partners and third-party software and cloud-based solutions increases the likely risks arising from security breaches or data loss. Any data loss or compromise of our systems that collect and process personal information (including personal information of our customers’ subscribers), or third-party data centers where that personal information is stored, could result in loss of confidence in the security of our offerings and loss of customers or customer goodwill. Further, security incidents could subject us to obligations under privacy and data security laws and regulations around the world (including to notify governmental authorities, regulatory bodies and/or affected individuals), lead to liability given the increasing development of such strict laws and regulations, increase the risk of litigation and governmental or regulatory investigation, require us to notify our customers or other counterparties in relation to such incidents, and damage our reputation. Any or all of the foregoing could materially and adversely affect our business, financial condition, operating results and cash flows. Although we maintain insurance that may apply to cybersecurity risks and liabilities, there can be no guarantee that any or all costs or losses incurred in relation to a cyberattack or security incident will be partially or fully insured by our existing policies or that we will be able to procure applicable insurance in the future on…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

In the ordinary course of business, we are subject to legal claims, litigation and regulatory proceedings related to disputes over commercial, competition, IP, labor and employment and other matters. Regardless of the merits of any such claims, litigation and regulatory proceedings are inherently uncertain, and can be costly, disruptive to our business and operations, harmful to our reputation and distracting to management. In particular, as a technology company, we are subject to IP claims asserting patent, copyright, trademark and/or other infringement claims that are costly to defend and could limit our ability to use some technologies in the future. The risk of such claims is heightened as we expand our products and services and rely on more technologies, including third-party IP rights that we license and incorporate into our products and services. Third parties from whom we license IP may be unable or unwilling to indemnify us for such claims or offer any other remedy to us. Patent infringement claims may be asserted by patent assertion entities and non-practicing entities (“NPEs”) that do not conduct business as an operating company and hold and own patents only for the purpose of aggressively pursuing royalties through infringement assertions or patent infringement litigation. Further, in our industry, the number of assertions by NPEs has continued to increase due in part to patent sales by operating companies to NPEs and availability of litigation financing. We have received and expect to continue to receive assertions from NPEs and other third parties alleging that we may be infringing their patents or other IP rights; offering licenses to such IP; and/or threatening litigation. If our products are found to infringe, these claims could also result in the suspension of our ability to import, market and sell our products and services, product shipment delays or requirements to modify our products or enter into costly settlements or licensing agreements. Such royalty or licensing agreements, if required, may not be available to us on acceptable terms, if at all. Furthermore, we may additionally be financially responsible for claims made against our customers, including costs of litigation and damages awarded, under indemnity obligations which could further negatively impact our results of operations. Protracted litigation could cause us to incur significant defense costs, which would negatively impact our results of operations.

Current wording

In the ordinary course of business, we are subject to legal claims, litigation and regulatory proceedings related to disputes over commercial, securities class action litigation, competition, IP, labor and employment and other matters. Regardless of the merits of any such claims, litigation and regulatory proceedings are inherently uncertain, and can be costly, disruptive to our business and operations, harmful to our reputation and distracting to management. In particular, as a technology company, we are subject to IP claims asserting patent, copyright, trademark and/or other infringement claims that are costly to defend and could limit our ability to use some technologies in the future. The risk of such claims is heightened as we expand our products and services and rely on more technologies, including third-party IP rights that we license and incorporate into our products and services. Third parties from whom we license IP may be unable or unwilling to indemnify us for such claims or offer any other remedy to us. Patent infringement claims may be asserted by patent assertion entities and non-practicing entities (“NPEs”) that do not conduct business as an operating company and hold and own patents only for the purpose of aggressively pursuing royalties through infringement assertions or patent infringement litigation. Further, in our industry, the number of assertions by NPEs has continued to increase due in part to patent sales by operating companies to NPEs and availability of litigation financing. We have received and expect to continue to receive assertions from NPEs and other third parties alleging that we may be infringing their patents or other IP rights; offering licenses to such IP; and/or threatening litigation. If our products are found to infringe, these claims could also result in the suspension of our ability to import, market and sell our products and services, product shipment delays or requirements to modify our products or enter into costly settlements or licensing agreements. Such royalty or licensing agreements, if required, may not be available to us on acceptable terms, if at all. Furthermore, we may additionally be financially responsible for claims made against our customers, including costs of litigation and damages awarded, under indemnity obligations which could further negatively impact our results of operations. Protracted litigation could cause us to incur significant defense costs, which would negatively impact our results of operations.

Previous wording

We have a history of fluctuations in our gross margin and operating results, which can make it difficult to predict our future performance and could cause the market price of our stock to decline.

Current wording

We have a history of fluctuations in our gross margin and operating results, and we expect continued fluctuations as memory component costs, advance-purchased supply depletion, surcharge recovery, customer and product mix, and cloud costs evolve, which can make it difficult to predict our future performance and could cause the market price of our stock to decline.

Previous wording

We have a history of fluctuations in our quarterly and annual gross margin and operating results, including fluctuations due to factors outside of our control. Factors that impact variability of our operating results include our ability to predict our revenue and reduce and control our costs, our ability to predict product functions and features desired by our customers, the impact of global economic and geopolitical events and conditions, including tariffs, trade controls, inflation, government shutdowns, market instability and economic downturns, our ability to effectively manage our global supply chain operations, our ability to effectively manage third parties upon whom we depend to conduct our business, our customers’ spending patterns and purchasing decisions, the impact of competition, customer adoption of our products, our ability to manage our legal, contractual and regulatory obligations and liabilities and other risk factors identified in “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and in this “Risk Factors” section. Our gross margin is further impacted by customer, geographic and product mix, the impact of competition on our prices, our ability to manage our costs associated with components and materials, excess and obsolescence, expedite fees and logistics-related activities, contractual commitments and other product costs. Fluctuating results make it difficult to predict our future performance and could cause the market price of our stock to decline. We expect to continue to incur significant expenses and cash outlays as we seek to expand our business and operations and target new customer opportunities. Given our growth objectives and the intense competitive pressures we face, our operating expenses may increase at unexpected levels, and we may be unable to maintain positive operating income. Comparing our operating results on a period-to-period basis may not be meaningful, and you should not rely on our past results as an indication of our future performance. If our revenue or operating results fall below the expectations of investors or securities analysts, or below any guidance we may provide to the market, the market price of our stock would likely decline.

Current wording

Factors that impact variability of our operating results include our ability to predict our revenue and reduce and control our costs; the level, timing, and effectiveness of advance purchasing of memory and other components; the rate at which advance-purchased inventory is depleted; the level and trajectory of memory and other component market prices, including DDR memory prices; the timing, scope, and effectiveness of memory surcharges and other pricing actions, which have in the past, currently do, and may in the future recover only a portion of increased costs and have not in the past, currently do not and may not in the future generate incremental gross profit; our ability to predict product functions and features desired by our customers, the impact of global economic and geopolitical events and conditions, including tariffs, trade controls, inflation, government shutdowns, market instability and economic downturns, our ability to effectively manage our global supply chain operations, our ability to effectively manage third parties upon whom we depend to conduct our business, our customers’ spending patterns and purchasing decisions, the impact of competition, customer adoption of our products, our ability to manage our legal, contractual and regulatory obligations and liabilities and other risk factors identified in “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and in this “Risk Factors” section.

Previous wording

Geopolitical issues such as armed conflicts, relations between the U.S. and China, tariff and trade policy changes and increasing potential of conflict involving countries in Asia that are critical to our supply-chain operations, such as Taiwan and China, have resulted in increasing global tensions and create uncertainty for global commerce. New or increased tariffs and other changes in U.S. trade policy, including new sanctions, have triggered and may continue to trigger retaliatory actions by affected countries or changes in demand from customers displeased with U.S. tariff and trade policy changes. U.S. executive orders have resulted in tariffs on imports from numerous countries, including China and other Asian countries where our sole-source or limited-source suppliers are located. Consequently, absent policy changes, these actions will increase our cost of revenue. To the extent dissatisfaction with U.S. government policy results in U.S.-based suppliers being disfavored over foreign-based alternatives, it may diminish demand for our products with such customers and cause them to find alternative sourcing or otherwise make it more difficult for us to sell more products to these customers. The imposition of additional tariffs or other trade barriers by countries other than the U.S., including China and other Asian countries, will increase our costs in these markets, and to the extent these increased costs result in increased prices for our customers, we expect the demand for products in these markets to decrease as some of our customers seek alternative sources, making it more difficult for us to sell our products in these markets. In addition, inflation in the U.S. has affected businesses across many industries, including ours, by increasing the costs of labor, employee healthcare, components and freight and shipping, which may further constrain our customers’ or prospective customers’ budgets. To the extent there is a sustained general economic downturn, and our platform and services are perceived by customers or potential customers as costly, or too difficult to deploy or migrate to, our revenue may be disproportionately affected by delays or reductions in spending. Sustained or worsening of global economic conditions and geopolitical issues may increase our cost of doing business, materially disrupt our supply chain operations, cause our customers to reduce or delay spending and intensify pricing pressures. We cannot predict the timing, strength or duration of any economic slowdown, instability or recovery, generally or within any particular industry. If the economic conditions of the general economy or markets in which we operate worsen from present levels, demand for our products, and our business, financial condition and results of operations, could be adversely affected.

Current wording

Geopolitical issues such as armed conflicts, relations between the U.S. and China, tariff and trade policy changes (and uncertainty related to the enforceability thereof) and increasing potential of conflict involving countries in Asia that are critical to our supply-chain operations, such as Taiwan and China, have resulted in increasing global tensions and create uncertainty for global commerce. New or increased tariffs and other changes in U.S. trade policy, including new sanctions, have triggered and may continue to trigger retaliatory actions by affected countries or changes in demand from customers displeased with U.S. tariff and trade policy changes. U.S. executive orders have resulted in tariffs on imports from numerous countries, including China and other Asian countries where our sole-source or limited-source suppliers are located. Consequently, absent policy changes, these actions will increase our cost of revenue. To the extent dissatisfaction with U.S. government policy results in U.S.-based suppliers being disfavored over foreign-based alternatives, it may diminish demand for our products with such customers and cause them to find alternative sourcing or otherwise make it more difficult for us to sell more products to these customers. The imposition of additional tariffs or other trade barriers by countries other than the U.S., including China and other Asian countries, will increase our costs in these markets, and to the extent these increased costs result in increased prices for our customers, we expect the demand for products in these markets to decrease as some of our customers seek alternative sources, making it more difficult for us to sell our products in these markets. In addition, inflation in the U.S. has affected businesses across many industries, including ours, by increasing the costs of labor, employee healthcare, components and freight and shipping, which may further constrain our customers’ or prospective customers’ budgets. To the extent there is a sustained general economic downturn, and our platform and services are perceived by customers or potential customers as costly, or too difficult to deploy or migrate to, our revenue may be disproportionately affected by delays or reductions in spending. Sustained or worsening of global economic conditions and geopolitical issues may increase our cost of doing business, materially disrupt our supply chain operations, cause our customers to reduce or delay spending and intensify pricing pressures. We cannot predict the timing, strength or duration of any economic slowdown, instability or recovery, generally or within any particular industry. If the economic conditions of the general economy or markets in which we operate worsen from present levels, demand for our products, and our business, financial condition and results of operations, could be adversely affected.

Previous wording

Although we have not had a greater-than-10%-of-revenue customer since 2020, a large portion of our sales has been, and in the future may be, to a limited number of customers. Changes in the broadband service provider market, such as financial difficulties, spending cuts or corporate consolidations that impact purchasing decisions by these customers have and may again negatively impact our revenue, and as a result, revenue from such customers may remain flat or decline. There are no assurances that the demand for our products will remain strong from our key customers, and any decrease or delay in purchases of any of our key customers, particularly if prolonged or sustained, or our inability to grow our sales with them, may have a material negative impact on our revenue and results of operations.

Current wording

Although we have not had a greater-than-10%-of-annual revenue customer since 2020, a large portion of our sales has been, and in the future may be, to a limited number of customers. Changes in the broadband service provider market, such as financial difficulties, spending cuts or corporate consolidations that impact purchasing decisions by these customers have and may again negatively impact our revenue, and as a result, revenue from such customers may remain flat or decline. There are no assurances that the demand for our products will remain strong from our key customers, and any decrease or delay in purchases of any of our key customers, particularly if prolonged or sustained, or our inability to grow our sales with them, may have a material negative impact on our revenue and results of operations.

Previous wording

•Actual or perceived failure to comply with applicable data privacy, security and platform and technology regulation laws, regulations and standards could impact our business, operations, and expose us to increased liability.

Current wording

Actual or perceived failure to comply with applicable data privacy, security and platform and technology laws, regulations, rules, industry standards, and other requirements related to the processing of personal information could impact our business, operations, and expose us to increased liability.

Previous wording

Government authorities in the U.S. and around the world have implemented and are continuing to implement broader and more stringent laws and regulations concerning data protection. The interpretation and application of these data protection laws and regulations are often uncertain and changing, and it is possible that they may be interpreted and applied in a manner that is inconsistent with our data practices.

Current wording

Government authorities in the U.S. and around the world have implemented and are continuing to implement broader and more stringent laws, rules, regulations, industry standards and other requirements concerning data protection, privacy, security and the processing of personal information, many of which we are subject to. The interpretation, application and amendment of these laws, regulations and other requirements are often uncertain and constantly changing, and it is possible that they may be interpreted and applied in a manner that is inconsistent with our data practices or that new laws, regulations and other requirements require us to incur significant costs, implement new processes, or change our processing of information and business operations.

Previous wording

For example, in the U.S., certain states have adopted or modified privacy and security laws and regulations which govern the privacy, processing and protection of personal information. Such laws and regulations will be subject to interpretation by various courts and other governmental authorities, thus creating potentially complex compliance issues for us and our future customers and strategic partners. For example, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the “CCPA”) requires covered businesses that process the personal information of California residents to, among other things: (i) provide certain disclosures to California residents regarding the business’s collection, use and disclosure of their personal information; (ii) receive and respond to requests from California residents to access, delete and correct their personal information or to opt out of certain disclosures of their personal information; and (iii) enter into specific contractual provisions with service providers that process California resident personal information on the business’s behalf. Additional compliance investment and potential business process changes may also be required. Similar laws have been passed in other states, and are continuing to be proposed at the state and federal level, reflecting a trend toward more stringent privacy legislation in the U.S. Most of the new or proposed laws include restrictions on processing consumer information for targeted advertising, which could negatively affect our marketing cloud products. The enactment of such laws could have potentially conflicting requirements that would make compliance challenging. If we are subject to or affected by the CCPA, or other domestic privacy and data protection laws, any liability from failure to comply with the requirements of these laws could adversely affect our financial condition.

Current wording

For example, in the U.S., certain states have adopted or modified privacy and security laws and regulations which govern the privacy, processing and protection of personal information. Such laws and regulations will be subject to interpretation by various courts and other governmental authorities, thus creating potentially complex compliance issues for us and our future customers and strategic partners. For example, the California Consumer Privacy Act (the “CCPA”) requires covered businesses that process the personal information of California residents to, among other things: (i) provide certain disclosures to California residents regarding the business’s collection, use and disclosure of their personal information; (ii) receive and respond to requests from California residents to access, delete and correct their personal information or to opt out of certain disclosures of their personal information; and (iii) enter into specific contractual provisions with service providers that process California resident personal information on the business’s behalf. Additional compliance investment and potential business process changes may also be required. Similar laws have been passed in other states, creating a patchwork of overlapping but different state laws, and are continuing to be proposed at the state and federal level, reflecting a trend toward more stringent privacy legislation in the U.S. Many of these laws include restrictions on processing consumer information for targeted advertising, which could negatively affect our marketing cloud products. The enactment of such laws could have potentially conflicting requirements that would make compliance challenging. If we are subject to or affected by the CCPA, or other domestic privacy and data protection laws, any liability from failure to comply with the requirements of these laws could adversely affect our financial condition.

Previous wording

In 2024, the National Security Division of the U.S. Department of Justice (“DOJ”) issued a new rule—referred to as the “Data Security Program” (“DSP”) aimed at preventing access to “bulk U.S. sensitive personal data” and “government-related data” by “countries of concern” (including China, Russia, Iran, North Korea, Cuba, and Venezuela) and “covered persons” (as all such terms are defined in the DSP). Effective as of April 8, 2025, and fully enforceable as of July 9, 2025, the DSP imposes stringent obligations on companies within its scope and prohibits or restricts “covered data transactions” that grant countries of concern or covered persons access to bulk U.S. sensitive personal data or any amount of government-related data. The DSP is new, complex and has yet to be enforced, and as such, there is a risk that our interpretation of its applicability, scope and requirements is incorrect, incomplete or misapplied.

Current wording

In 2024, the National Security Division of the U.S. Department of Justice (“DOJ”) issued a new rule—referred to as the “Data Security Program” (“DSP”) to implement Executive Order 14117, aimed at preventing access to “bulk U.S. sensitive personal data” and “government-related data” by “countries of concern” (including China, Russia, Iran, North Korea, Cuba, and Venezuela) and “covered persons” (as all such terms are defined in the DSP). Effective as of April 8, 2025, and fully enforceable as of July 9, 2025, the DSP imposes stringent obligations on companies within its scope and prohibits or restricts “covered data transactions” that grant countries of concern or covered persons access to bulk U.S. sensitive personal data or any amount of government-related data. The DSP is new, complex and has yet to be enforced, and as such, there is a risk that our interpretation of its applicability, scope and requirements is incorrect, incomplete or misapplied.

Previous wording

Complying with new and changing laws could cause us to incur substantial costs in order to market and sell our cloud-based solutions in the U.S. and internationally, deter customers from adopting our cloud-based solutions or require us to redesign our platform in order to meet customer requirements related to such laws. Regulatory actions or claims involving our practices in the collection, storage, processing, use or disclosure of consumer information or other personal data, even if unfounded, could damage our reputation and adversely affect our operating results. The failure or perceived failure to comply may result in government or civil proceedings or actions against us, or could cause us to lose customers, which could have an adverse effect on our business.

Current wording

Complying with new and changing laws could cause us to incur substantial costs in order to market and sell our cloud-based solutions in the U.S. and internationally, deter customers from adopting our cloud-based solutions or require us to redesign our platform in order to meet customer requirements related to such laws. Regulatory actions or claims involving our practices in the collection, storage, processing, use or disclosure of consumer information or other personal data, even if unfounded, could damage our reputation and adversely affect our operating results. The failure or perceived failure to comply with such laws, rules, regulations, industry standards and other requirements relating to data privacy, security or the processing of personal information may result in proceedings or actions against us, by individuals, consumer rights groups, government agencies or others, could cause us to incur significant costs in investigations and defending such claims, or could cause us to incur significant costs in investigations and defending such claims, pay significant damages or fines or be required to make changes to our business if found liable, lose customers and subject us to significant negative publicity and an erosion of trust, all of which could have an adverse effect on our business, results of operations and financial condition.

Previous wording

We have a common stock repurchase program of which $63.4 million was available as of March 28, 2026. Furthermore, our Board of Directors authorized a $100.0 million increase to our common stock repurchase program in April 2026. Under the repurchase program, repurchases can be made from time to time using a variety of methods, which may include open market purchases, privately negotiated transactions or otherwise, all in accordance with the rules of the SEC and other applicable legal requirements. The specific timing, price and size of the purchases will depend on prevailing stock prices, general economic and market conditions, and other considerations consistent with our capital allocation strategy. Stock repurchases could have an impact on our common stock trading prices, increase the volatility of the price of our common stock, or reduce our available cash balance such that we will be required to seek financing to support our operations. The repurchase program does not obligate us to acquire a particular amount of common stock, and the repurchase program may be suspended or discontinued at any time at our discretion, which may result in a decrease in the trading prices of our common stock. Even if our share repurchase program is fully implemented, it may not enhance long-term stockholder value.

Current wording

We have a common stock repurchase program of which $94.1 million was available as of June 27, 2026. Under the repurchase program, repurchases can be made from time to time using a variety of methods, which may include open market purchases, privately negotiated transactions or otherwise, all in accordance with the rules of the SEC and other applicable legal requirements. The specific timing, price and size of the purchases will depend on prevailing stock prices, general economic and market conditions, and other considerations consistent with our capital allocation strategy. Stock repurchases could have an impact on our common stock trading prices, increase the volatility of the price of our common stock, or reduce our available cash balance such that we will be required to seek financing to support our operations. The repurchase program does not obligate us to acquire a particular amount of common stock, and the repurchase program may be suspended or discontinued at any time at our discretion, which may result in a decrease in the trading prices of our common stock. Even if our share repurchase program is fully implemented, it may not enhance long-term stockholder value.