APPIAN CORP
For the period ended Dec 31, 2024. Filed Feb 19, 2025.
View on SEC.govAbout this filing
A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.
FY2024 · Filed Feb 19, 2025
What changed in Risk Factors?
Read the current filingPrevious report: 10-K
Period ended 2023-12-31; filed 2024-02-15.
0001441683-24-000016
Item 1A. Risk FactorsCurrent report: 10-K
Period ended 2024-12-31; filed 2025-02-19.
0001441683-25-000017
Item 1A. Risk FactorsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 221 previous paragraphs and 230 current paragraphs.
177 unchanged; 42 reworded; 3 added; 2 removed; 0 previous and 8 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (3)
Current report
•Changes in the administration and their priorities in terms of public sector budgets and funding;
Current report
On September 15, 2022, Pegasystems filed a notice of appeal to the Court of Appeals of Virginia. On July 30, 2024, the Court of Appeals of Virginia issued a decision reversing the judgment against Pegasystems and remanding for a new trial. On August 29, 2024, Appian submitted a petition to the Supreme Court of Virginia seeking to reverse the Court of Appeals decision and reinstate the full judgment against Pegasystems. Pegasystems filed an opposition to the petition and cross-issues for appeal on October 21, 2024. Appian’s petition was heard on February 11, 2025. While we are seeking to reinstate the judgment in full or proceed to a remanded re-trial if necessary, we cannot guarantee the outcome of any legal proceedings.
Current report
•An acquisition may negatively affect our financial results because it may require us to incur charges or assume substantial debt or other liabilities, cause adverse tax consequences or unfavorable accounting treatment, expose us to claims and disputes by third parties, including intellectual property claims and disputes, or not generate sufficient financial return to offset additional costs and expenses related to the acquisition;
Removed paragraphs (2)
Previous report
As the use of AI becomes more prevalent, including in the industries in which we operate, we anticipate that AI will continue to present new or unanticipated ethical, reputational, technical, operational, legal, competitive, and regulatory issues, among others. We expect that our incorporation of AI in our business will require additional resources, including the incurrence of additional costs, to develop and maintain our AI-related products and services, to minimize potentially harmful or unintended consequences, to comply with applicable and emerging laws and regulations, to maintain or extend our competitive position, and to address any ethical, reputational, technical, operational, legal, competitive or regulatory issues which may arise as a result of any of the foregoing. As a result, the challenges presented with our use of AI could adversely affect our business, financial condition and results of operations.
Previous report
While the U.K., following Brexit, is currently considered to hold adequacy for the purposes of data transfers from the EEA, proposed changes to U.K. privacy legislation may impact the U.K.’s adequacy standing. The UK’s Data Protection Act of 2018 as supplemented by the GDPR and as implemented into UK law (collectively, “UK GDPR”) imposes similar, stringent data protection requirements to the GDPR. While the UK GDPR currently imposes substantially the same obligations as the GDPR, the UK GDPR will not automatically incorporate changes to the GDPR going forward (which would need to be specifically incorporated by the UK government). Moreover, the UK government has publicly announced plans to reform the UK GDPR in ways that, if formalized, are likely to deviate from the GDPR, all of which creates a risk of divergent parallel regimes and related uncertainty, along with the potential for increased compliance costs and risks for affected businesses.
Reworded paragraphs (42)
Previous wording
We have experienced revenue growth with revenue of $545.4 million, $468.0 million, and $369.3 million in 2023, 2022, and 2021, respectively. Although we have experienced rapid revenue growth historically, we may not continue to grow as rapidly in the future, and our revenue growth rates may decline. Any success we may experience in the future will depend in large part on our ability to, among other things:
Current wording
We have experienced revenue growth with revenue of $617.0 million, $545.4 million, and $468.0 million in 2024, 2023, and 2022, respectively. Although we have experienced rapid revenue growth historically, we may not continue to grow as rapidly in the future, and our revenue growth rates may decline. Any success we may experience in the future will depend in large part on our ability to, among other things:
Previous wording
•The market for low-code solutions not continuing to grow or growing more slowly than we expect;
Current wording
•The market for process automation solutions not continuing to grow or growing more slowly than we expect;
Previous wording
Market adoption of low-code platforms to drive digital transformation is new and unproven and may not grow as we expect, which may harm our business and prospects.
Current wording
Market adoption of process automation platforms to drive process automation may not grow as we expect, which may harm our business and prospects.
Previous wording
We believe our future success will depend in large part on growth in the demand for low-code platforms to drive software-enabled digital transformation. It is difficult to predict customer demand for our platform, renewal rates, the rate at which existing customers expand their subscriptions, the size and growth rate of the market for our platform, the entry of competitive products, or the success of existing competitive products. The utilization of low-code software to drive digital transformation is still relatively new. Any expansion in our addressable market depends on a number of factors, including businesses continuing to desire to differentiate themselves through software-enabled digital transformation, increasing their reliance on low-code solutions, changes in the competitive landscape, technological changes, including due to advancements in AI, budgetary constraints of our customers, and changes in economic conditions. If our platform does not achieve widespread adoption or there is a reduction in demand for low-code solutions caused by these factors, it could result in reduced customer purchases, reduced renewal rates, and decreased revenue, any of which will adversely affect our business, operating results, and financial condition.
Current wording
We believe our future success will depend in large part on growth in the demand for process automation platforms to drive software-enabled process automation. It is difficult to predict customer demand for our platform, renewal rates, the rate at which existing customers expand their subscriptions, the size and growth rate of the market for our platform, the entry of competitive products, or the success of existing competitive products. Any expansion in our addressable market depends on a number of factors, including businesses continuing to desire to differentiate themselves through software-enabled process automation, increasing their reliance on process automation solutions, changes in the competitive landscape, technological changes, including due to advancements in AI, budgetary constraints of our customers, and changes in economic conditions. If our platform does not achieve widespread adoption or there is a reduction in demand for process automation solutions caused by these factors, it could result in reduced customer purchases, reduced renewal rates, and decreased revenue, any of which will adversely affect our business, operating results, and financial condition.
Previous wording
The markets for low-code platforms, business process management, case management software, and custom software are highly competitive, rapidly evolving, and have relatively low barriers to entry. The principal competitive factors in our market include the following: platform features, reliability, performance, and effectiveness; ease of use and speed; data fabric; utilization of AI; platform extensibility and ability to integrate with other technology infrastructures; deployment flexibility; robustness of professional services and customer support; price and total cost of ownership; strength of platform security and adherence to industry standards and certifications; strength of sales and marketing efforts; and brand awareness and reputation. If we fail to compete effectively with respect to any of these competitive factors, we may fail to attract new customers or lose or fail to renew existing customers, which would cause our operating results to suffer.
Current wording
The markets for process automation platforms, business process management, case management software, and custom software are highly competitive, rapidly evolving, and have relatively low barriers to entry. The principal competitive factors in our market include the following: platform features, reliability, performance, and effectiveness; ease of use and speed; data fabric; utilization of AI; platform extensibility and ability to integrate with other technology infrastructures; deployment flexibility; robustness of professional services and customer support; price and total cost of ownership; strength of platform security and adherence to industry standards and certifications; strength of sales and marketing efforts; and brand awareness and reputation. If we fail to compete effectively with respect to any of these competitive factors, we may fail to attract new customers or lose or fail to renew existing customers, which would cause our operating results to suffer.
Previous wording
Our main competitors fall into three categories: (1) providers of custom software and customer software solutions that address, or are developed to address, some of the use cases that can be addressed by applications developed on our platform; (2) providers of low-code development platforms; and (3) providers of one or more automation technologies, including BPM, case management, process mining, and RPA.
Current wording
Our main competitors fall into four categories: (1) providers of custom software and customer software solutions that address, or are developed to address, some of the use cases that can be addressed by applications developed on our platform; (2) providers of low-code development platforms; and (3) providers of one or more automation technologies, including BPM, case management, process mining, and RPA and (4) potential customers using their own internal technology departments to develop, build, and modify their own proprietary systems.
Previous wording
Our recent growth may not be indicative of our future growth and, if we continue to grow, we may not be able to manage our growth effectively.
Current wording
Our recent corporate growth may not be indicative of our future growth and, if we continue to grow, we may not be able to manage our growth effectively.
Previous wording
We have focused on scaling our operations and growing our headcount in line with our growth plan and size of our customer base, which we have significantly increased over the last several years. While we have expanded our operations and headcount in prior periods, it is not indicative of our future growth and we may modify our pace of hiring to align with our growth plans. Our growth has placed, and any future growth will place, a significant strain on our management, administrative, operational, and financial infrastructure. Our success will depend in part on our ability to manage this growth effectively and we will need to continue to improve our operational, financial, and management controls and our reporting systems and procedures. Failure to effectively manage our growth could result in difficulty or delays in deploying our platform to customers, declines in quality or customer satisfaction, increases in costs, difficulties in introducing new features, or other operational difficulties. Any of these difficulties could adversely impact our business performance and results of operations.
Current wording
We have focused on scaling our operations and headcount to ensure they remain in line with our growth plan and the size of our customer base, which we have significantly increased over the last several years. While we have expanded our operations and headcount in prior periods, such measures are not indicative of our future growth, and are subject to reversal in the other direction, as we have done at various times in the past. Our growth has placed, and any future growth will place, a significant strain on our management, administrative, operational, and financial infrastructure. Our success will depend in part on our ability to manage this growth effectively, and we will need to continue to improve our operational, financial, and management controls and our reporting systems and procedures. Failure to effectively manage our growth could result in difficulty or delays in deploying our platform to customers, decreased efficiency, declines in quality or customer satisfaction, increases in costs, difficulties in introducing new features, or other operational difficulties. Any of these difficulties could adversely impact our business performance and results of operations.
Previous wording
Our platform, which can be deployed in the cloud or on-premises, allows for the storage and transmission of our customers’ proprietary or confidential information, which may include trade secrets, personally identifiable information, personal health information, and payment card information. Any actual or perceived unauthorized access to, or security incidents affecting, our platform or the information stored on or transmitted by our platform, including through unauthorized and/or malicious activity by one of our employees, could result in the loss of information, litigation, regulatory investigations, penalties, indemnity obligations and other costs, expenses, and liabilities, which could exceed our existing insurance coverage and could result in a substantial financial loss. While we have security measures in place designed to protect customer information and prevent data loss and other security breaches, there can be no assurance these measures will be effective in protecting against malicious unauthorized access to our platform or our customers’ information. Similarly, if cyber incidents such as phishing attacks, viruses, denial of service attacks, supply chain attacks, malware installation, ransomware attacks, server malfunction, software or hardware failures, loss of data or other computer assets, adware, or other similar issues impair the integrity or availability of our systems by affecting our data or reducing access to or shutting down one or more of our computing systems or our IT network, we may be subject to negative treatment by our customers, our business partners, the press, and the public at large. Further, even though we have security measures in place that are tested and verified by third parties, because the techniques used to obtain unauthorized access or sabotage systems change frequently and generally are not identified until they are launched against a target, we may be unable to anticipate these techniques or to implement adequate preventative measures. Additionally, we may be subject to attacks on our networks or systems or attempts to gain unauthorized access to our proprietary or confidential information or other data we or our vendors maintain such as data about our employees. Such attacks and other breaches of security may occur as a result of malicious attacks, human error, social engineering, or other causes. Any of the foregoing risks may be heightened by our use of AI, and the use of AI may enhance the effectiveness of any of the foregoing threat actors or their attempts to gain unauthorized access to our platform or our or our customers’ confidential, proprietary, or personal information. Any actual or perceived breach of our security measures or failure to adequately protect our customers’ or our confidential, proprietary, or personal information could negatively affect our ability to attract new customers, cause existing customers to elect to not renew their subscriptions to our software, or result in reputati…
Excerpt shortened here; the source contains the full paragraph.
Current wording
Our platform, which can be deployed in the cloud or on-premises, allows for the storage and transmission of our customers’ proprietary or confidential information, which may include trade secrets, personally identifiable information, personal health information, and payment card information. Any actual or perceived unauthorized access to, or security incidents affecting, our platform or the information stored on or transmitted by our platform, including through unauthorized and/or malicious activity by one of our employees, could result in the loss of information, litigation, regulatory investigations, penalties, indemnity obligations and other costs, expenses, and liabilities, which could exceed our existing insurance coverage and could result in a substantial financial loss. While we have security measures in place designed to protect customer information and prevent data loss and other security breaches, there can be no assurance these measures will be completely effective in protecting against malicious unauthorized access to our platform or our customers’ information. Similarly, if cyber incidents such as phishing attacks, viruses, denial of service attacks, supply chain attacks, malware installation, ransomware attacks, server malfunction, software or hardware failures, loss of data or other computer assets, adware, or other similar issues impair the integrity or availability of our systems by affecting our data or reducing access to or shutting down one or more of our computing systems or our IT network, we may be subject to negative treatment by our customers, our business partners, the press, and the public at large. Further, even though we have security measures in place that are tested and verified by third parties, because the techniques used to obtain unauthorized access or sabotage systems change frequently and generally are not identified until they are launched against a target, we may be unable to anticipate these techniques or to implement adequate preventative measures. Additionally, we may be subject to attacks on our networks or systems or attempts to gain unauthorized access to our proprietary or confidential information or other data we or our vendors maintain, such as data about our employees. Such attacks and other breaches of security may occur as a result of malicious attacks, human error, social engineering, or other causes. Any of the foregoing risks may be heightened by our use of AI, and the use of AI may enhance the effectiveness of any of the foregoing threat actors or their attempts to gain unauthorized access to our platform or our customers’ confidential, proprietary, or personal information. Any actual or perceived breach of our security measures or failure to adequately protect our customers’ or our confidential, proprietary, or personal information could negatively affect our ability to attract new customers, cause existing customers to elect not to renew their subscriptions to our software, or result in rep…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
Further, security compromises experienced by our customers with respect to data hosted on our platform, even if caused by the customer’s own misuse or negligence, may lead to public disclosures, which could harm our reputation, erode customer confidence in the effectiveness of our security measures, negatively impact our ability to attract new customers, or cause existing customers to elect not to renew their subscriptions with us. We may be subjected to indemnity demands, regulatory proceedings, audits, penalties, or litigation based on our customers’ misuse of our platform with respect to such sensitive information and defending against such litigation and otherwise addressing such matters may be expensive, cause distraction, and may result in us incurring liability, all of which may affect our operating results.
Current wording
Further, security compromises experienced by our customers with respect to data hosted on our platform, even if caused by the customer’s own misuse or negligence, may lead to public disclosures, which could harm our reputation, erode customer confidence in the effectiveness of our security measures, negatively impact our ability to attract new customers, or cause existing customers to elect not to renew their subscriptions with us. We may be subjected to indemnity demands, regulatory proceedings, audits, penalties, or litigation based on our customers’ misuse of our platform with respect to such sensitive information. Defending against such litigation and otherwise addressing such matters may be expensive, cause distraction, and may result in us incurring liability, all of which may affect our operating results.
Previous wording
Our customer base is concentrated. For example, during the years ended December 31, 2023, 2022, and 2021, revenue from U.S. federal government agencies represented 21.3%, 19.2%, and 19.6% of our total revenue, respectively, and the top three U.S. federal government customers generated 4.2%, 4.5%, and 5.6% of our total revenue for the years ended December 31, 2023, 2022, and 2021, respectively. Further, nearly 12% of our subscription customers spent more than $1 million on our software in 2023. If we were to lose one or more of our significant customers, our revenue would significantly decline. In addition, revenue from significant customers may vary from period to period depending on the timing of renewing existing agreements or entering into new agreements. The loss of one or more of our significant customers could materially and adversely affect our business, results of operations, and financial condition.
Current wording
Our customer base is concentrated. For example, during the years ended December 31, 2024, 2023, and 2022, revenue from U.S. federal government agencies represented 23.9%, 21.3%, and 19.2% of our total revenue, respectively, and the top three U.S. federal government customers generated 4.0%, 4.2%, and 4.5% of our total revenue for the years ended December 31, 2024, 2023, and 2022, respectively. Changes in the administration and their priorities may impact public sector budgets and funding for federal government agencies. Further, nearly 12% of our subscription customers spent more than $1 million on our software in 2024. If we were to lose one or more of our significant customers and we were unable to recover the revenue from that customer from other customers, our revenue would significantly decline. In addition, revenue from significant customers may vary from period to period depending on the timing of renewing existing agreements or entering into new agreements. The loss of one or more of our significant customers could materially and adversely affect our business, results of operations, and financial condition.
Previous wording
A significant portion of our revenue is generated from subscriptions sold to governmental entities, both in the United States and internationally. Additionally, many of our current and prospective customers such as those in the financial services, life sciences, insurance, and healthcare industries are highly regulated and may be required to comply with more stringent regulations in connection with subscribing to and implementing our platform. Selling subscriptions to these entities can be highly competitive, expensive, and time-consuming, often requiring significant upfront time and expense without any assurance we will successfully complete a sale. In addition, if our software does not meet the standards of new or existing regulations, we may be in breach of our contracts with our customers, allowing them to terminate their agreements.
Current wording
A significant portion of our revenue is generated from subscriptions sold to governmental entities, both in the United States and internationally. Additionally, many of our current and prospective customers such as those in the financial services, life sciences, insurance, and healthcare industries are highly regulated and may be required to comply with more stringent regulations in connection with subscribing to and implementing our platform. Selling subscriptions to these entities can be highly competitive, expensive, and time-consuming, often requiring significant upfront time and expense without any assurance we will successfully complete a sale. In addition, if our software or personnel do not meet the standards of new or existing regulations, we may be in breach of our contracts with our customers, allowing them to terminate their agreements.
Previous wording
Governmental demand and payment for our platform may also be impacted by public sector budgetary cycles and funding authorizations, with funding reductions or delays adversely affecting public sector demand for our platform. The United States has previously experienced lapses in federal appropriations, and any such future lapses could negatively affect our business, results of operations, and financial condition. In addition, governmental and highly regulated entities impose compliance requirements that are complicated, make pricing readily available, subject continued business to unpredictable competitive processes, or are otherwise time-consuming and expensive to satisfy. In the United States, applicable federal contracting regulations change frequently, and the President may issue executive orders requiring federal contractors to adhere to new compliance requirements after a contract is signed. If we commit to meeting special standards or requirements and do not meet them, we could be subject to significant liability from our customers or regulators. Even if we do meet these special standards or requirements, the additional costs associated with providing our platform to government and highly regulated customers could harm our operating results. Moreover, changes in the underlying statutory and regulatory conditions that affect these types of customers could compromise our ability to efficiently provide them access to our platform and to grow or maintain our customer base. In addition, engaging in sales activities to foreign governments introduces additional compliance risks specific to the U.S. Foreign Corrupt Practices Act, the U.K. Bribery Act, and other similar statutory requirements prohibiting bribery and corruption in the jurisdictions in which we operate.
Current wording
Governmental demand and payment for our platform may also be impacted by public sector budgetary cycles and funding authorizations, with funding reductions or delays adversely affecting public sector demand for our platform. In addition, changes in the administration and their priorities could also affect public sector budgets and funding. The United States has previously experienced lapses in federal appropriations, and any such future lapses could negatively affect our business, results of operations, and financial condition. In addition, governmental and highly regulated entities impose compliance requirements that are complicated, make pricing readily available, subject continued business to unpredictable competitive processes, or are otherwise time-consuming and expensive to satisfy. In the United States, applicable federal contracting regulations change frequently, and the President may issue executive orders requiring federal contractors to adhere to new compliance requirements after a contract is signed. If we commit to meeting special standards or requirements and do not meet them, we could be subject to significant liability from our customers or regulators. Even if we do meet these special standards or requirements, the additional costs associated with providing our platform to government and highly regulated customers could harm our operating results. Moreover, changes in the underlying statutory and regulatory conditions that affect these types of customers could compromise our ability to efficiently provide them access to our platform and to grow or maintain our customer base. In addition, engaging in sales activities to foreign governments introduces additional compliance risks specific to the U.S. Foreign Corrupt Practices Act, the U.K. Bribery Act, and other similar statutory requirements prohibiting bribery and corruption in the jurisdictions in which we operate.
Previous wording
We generated net losses of $111.4 million, $150.9 million, and $88.6 million in 2023, 2022, and 2021, respectively. As of December 31, 2023, we had an accumulated deficit of $519.9 million. We will need to generate and sustain increased revenue levels in future periods in order to achieve or sustain profitability in the future. We also expect our costs to increase in future periods, which could negatively affect our future operating results if our revenue does not increase commensurately. For example, we intend to continue to expend significant funds to expand our sales and marketing operations, develop and enhance our platform, and expand into new markets. Our efforts to grow our business may be more costly than we expect, and we may not be able to increase our revenue enough to offset our higher operating expenses. We may incur significant losses in the future for a number of reasons, including the other risks described in this Annual Report on Form 10-K, and unforeseen expenses, difficulties, complications and delays, and other unknown events. If we are unable to achieve and sustain profitability, our stock price may significantly decrease.
Current wording
We generated GAAP net losses of $92.3 million, $111.4 million, and $150.9 million in 2024, 2023, and 2022, respectively. As of December 31, 2024, we had an accumulated deficit of $612.2 million. We will need to generate and sustain increased revenue levels in future periods in order to achieve or sustain profitability in the future. We also expect our costs to increase in future periods, which could negatively affect our future operating results if our revenue does not increase commensurately. For example, we intend to continue to expend funds to expand our sales and marketing operations, develop and enhance our platform, and expand into new markets. Our efforts to grow our business may be more costly than we expect, and we may not be able to increase our revenue enough to offset our higher operating expenses. We may incur significant losses in the future for a number of reasons, including the other risks described in this Annual Report on Form 10-K, unforeseen expenses, difficulties, complications or delays, and other unknown events. If we are unable to achieve and sustain profitability, our stock price may significantly decrease.
Previous wording
The emerging technologies described as AI, which include machine learning, application of large language models, generative AI, machine learning models, and similar means of algorithm self-generation and other AI tools have the ability to affect the market for our software by directing what are now human-orchestrated processes into machine-orchestrated processes. In recent years, AI technologies have been the subject of great interest to our customers and to followers of our markets, and these technologies have been showcased and subject to substantial interest among our customer base. To the extent that we incorporate or will in the future incorporate AI into our software platform, either directly or through integration with AI technologies, we could benefit greatly from the speed and accuracy presented by those technologies, and it could improve our market position relative to our competitors. On the other hand, should we either fail to adopt or integrate with AI technologies that show benefits to our customers, or should AI technologies for code generation or application development reduce the demand for our process automation platform, we could struggle to continue to grow our business or lose business with existing customers to such technologies, and this could negatively impact our business performance and results of operations.
Current wording
The emerging technologies described as AI, which include machine learning, application of large language models, generative AI, and similar means of algorithm self-generation have the ability to affect the market for our software by directing what are now human-orchestrated processes into machine-orchestrated processes. In recent years, AI technologies have been the subject of great interest to our customers and to followers of our markets, and these technologies have been showcased and subject to substantial interest among our customer base. Should we either fail to adopt or integrate with emerging AI technologies that show benefits to our customers or AI technologies for code generation or application development reduce the demand for our process automation platform, we could struggle to continue to grow our business or lose business with existing customers to such technologies.
Previous wording
We have incorporated, and may continue to incorporate, AI in our products and services, and this incorporation of AI in our business and operations may become more significant over time. The use of generative AI, a relatively new and emerging technology in the early stages of commercial use, exposes us to additional risks, such as damage to our reputation, competitive position, and business, legal and regulatory risks and additional costs. For example, generative AI has been known to produce false or “hallucinatory” inferences or output, and certain generative AI uses machine learning and predictive analytics, which can create inaccurate, incomplete, or misleading content, unintended biases, and other discriminatory or unexpected results, errors or inadequacies, any of which may not be easily detectable by us or any of our related service providers. As a result, while generative AI may help provide more tailored or personalized experiences or output, if the content, analyses, or recommendations produced by any of our products or services that use or incorporate generative AI are, or are perceived to be, deficient, inaccurate, biased, unethical or otherwise flawed, our reputation, competitive position and business may be materially and adversely affected. In addition, new laws and regulations, or the interpretation of existing laws and regulations, in any of the jurisdictions we operate in may affect our ability to leverage AI in any of our products and services, and may expose us to government enforcement or civil suits. As the legal and regulatory framework encompassing AI matures, it may result in increases in our operational and development expenses that impact our ability to develop, earn revenue from or utilize any products or services incorporating AI. For more information on the legal and regulatory risks associated with the use of AI, please see our risk factor below at “—Regulatory and legislative developments related to the use of AI could adversely affect our use of such technologies in our products, services, and business.” Additionally, if any of our employees, contractors, vendors or service providers use any third-party software incorporating AI in connection with our business or the services they provide to us, it may lead to the inadvertent disclosure or incorporation of our confidential, sensitive or proprietary information into publicly available training sets which may impact our ability to realize the benefit of, or adequately maintain, protect and enforce our intellectual property or sensitive or confidential information, harming our competitive position and business. Our ability to mitigate risks associated with disclosure of our proprietary, sensitive or confidential information, including in connection with the use of AI, will depend on our implementation, maintenance, monitoring and enforcement of appropriate technical and administrative safeguards, policies and procedures governing the use of AI in our business. Additio…
Excerpt shortened here; the source contains the full paragraph.
Current wording
We have incorporated, and may continue to incorporate, AI in our products and services, and this incorporation of AI in our business and operations may become more significant over time. The use of generative AI, a technology that has evolved significantly over the years, exposes us to additional risks such as damage to our reputation, competitive position, business, legal, and regulatory risks, and additional costs. For example, generative AI has been known to produce false or “hallucinatory” inferences or output, and certain generative AI uses machine learning and predictive analytics, which can create inaccurate, incomplete, or misleading content, unintended biases, and other discriminatory or unexpected results, errors, or inadequacies, any of which may not be easily detectable by us or any of our related service providers. While we make efforts to implement and use AI products and services to improve the accuracy and reduce the chances of hallucinatory outputs, we cannot completely eliminate the chances of inaccurate or false outputs. Moreover, given we rely on third party providers for underlying large language model technology, as do many others in the software industry, we do not have full access to the underlying software code to address such issues. If the content, analyses, or recommendations produced by any of our products or services that use or incorporate generative AI are, or are perceived to be, deficient, inaccurate, biased, unethical or otherwise flawed, our reputation, competitive position and business may be materially and adversely affected.
Previous wording
We use AI, including machine learning and generative AI, throughout our business. As the regulatory framework for machine learning technology, generative AI and automated decision making evolves, our business, financial condition, and results of operations may be adversely affected. The regulatory framework for AI and similar technologies, and automated decision making, is changing rapidly. It is possible that new laws and regulations will be adopted in the United States and in non-U.S. jurisdictions, or that existing laws and regulations may be interpreted in ways that would affect the operation of our business, including our data analytics products and services and the way in which we use AI and similar technologies in our business. For example, the European Union’s proposed Artificial Intelligence Act, if enacted in its current form or any similar form, would have a material impact on the way AI is regulated in the EU, including significant fines for violations related to offering prohibited AI systems or data governance, high-risk AI systems and for supplying incorrect, incomplete, or misleading information to EU and member state authorities. We may not be able to adequately anticipate or respond to these evolving laws and regulations, and we may need to expend additional resources to adjust our products or services in certain jurisdictions if applicable legal frameworks are inconsistent across jurisdictions. In addition, because these technologies are themselves highly complex and rapidly developing, it is not possible to predict all of the legal or regulatory risks that may arise relating to our use of such technologies. Further, the cost to comply with such laws or regulations could be significant and would increase our operating expenses, which could adversely affect our business, financial condition and results of operations.
Current wording
As the regulatory framework for machine learning technology, generative AI and automated decision making evolves, our business, financial condition and results of operations may be adversely affected. The regulatory framework for AI and similar technologies, and automated decision making, is changing rapidly. It is possible that new laws and regulations will be adopted in the United States and in non-U.S. jurisdictions, or that existing laws and regulations may be interpreted in ways that would affect the operation of our business, including our data analytics products and services and the way in which we use AI and similar technologies in our business. For example, the European Union’s proposed Artificial Intelligence Act will likely have a material impact on the way AI is regulated in the EU, including significant fines for violations related to offering prohibited AI systems or data governance, high-risk AI systems and for supplying incorrect, incomplete, or misleading information to EU and member-state authorities.
Previous wording
•Variations in the revenue mix of our professional services and growth rates of our cloud subscription and professional services offerings, including the timing of subscriptions and sales offerings that include an on-premises software element for which the revenue allocated to that deliverable is recognized upfront;
Current wording
•Variations in the revenue mix of our professional services and growth rates of our cloud subscription and professional services offerings, as well as the timing of subscriptions and sales offerings that include an on-premises software element for which the revenue allocated to that deliverable is recognized upfront;
Previous wording
We have provided and may continue to provide guidance about our business, future operating results, and other business metrics. In developing this guidance, our management must make certain assumptions and judgments about our future performance. Furthermore, analysts and investors may develop and publish their own projections of our business, which may form a consensus about our future performance. Our business results may vary significantly from such guidance or that consensus due to a number of factors, many of which are outside of our control, including due to the global economic uncertainty and financial market conditions which could adversely affect our operations and operating results. Furthermore, if our publicly announced guidance of future operating results fails to meet our previously announced guidance or the expectations of securities analysts, investors, or other interested parties, the price of our common stock would decline.
Current wording
We have provided, and may continue to provide, guidance about our business, future operating results, and other business metrics. In developing this guidance, our management must make certain assumptions and judgments about our future performance. Furthermore, analysts and investors may develop and publish their own projections of our business, which may form a consensus about our future performance. Our business results may vary significantly from such guidance or consensus due to a number of factors, many of which are outside of our control, including due to global economic uncertainty and financial market conditions which could adversely affect our operations and operating results. Furthermore, if our publicly announced guidance of future operating results fails to meet our previously announced guidance or the expectations of securities analysts, investors, or other interested parties, the price of our common stock would decline.
Previous wording
Our ability to successfully pursue our growth strategy also depends on our ability to attract, motivate, and retain our personnel. Competition for highly-qualified employees in all aspects of our business, including sales personnel, professional services personnel, cloud engineering and support personnel, and software engineers, is intense. As a result of the COVID-19 pandemic, many more employers allowed remote work, which resulted in the market for employee talent becoming more national and some employees preferring remote work. As we have chosen to return to office-based work over time to benefit from the better culture and productivity we believe in-office work affords, we may not be able to attract and retain employees who would choose to work remotely, while we also still face hiring competition from companies with remote-based workforces who can hire without respect to office location. Our continued ability to compete effectively depends on our ability to attract new employees and to retain and motivate existing employees.
Current wording
Our ability to successfully pursue our growth strategy also depends on our ability to attract, motivate, and retain our personnel. Competition for highly-qualified employees in all aspects of our business is intense. As a result of the COVID-19 pandemic, many more employers allowed remote work, which resulted in the market for employee talent becoming more national and some employees preferring remote work. As we have chosen to return to office-based work over time to benefit from the better culture and productivity we believe in-office work affords, we may not be able to attract and retain employees who would choose to work remotely, while we also still face hiring competition from companies with remote-based workforces who can hire without respect to office location. Our continued ability to compete effectively depends on our ability to attract new employees and to retain and motivate existing employees.
Previous wording
We derive, and expect to increasingly derive in the future, a substantial portion of our revenue from the sale of software subscriptions. For 2023, 2022, and 2021, approximately 75.6%, 72.7%, and 71.4%, respectively, of our total revenue was subscriptions revenue. In order for us to improve our operating results, it is important our customers renew their subscriptions with us when their initial term expires, as well as purchase additional subscriptions from us. In general, our customers have no renewal obligation after their initial term expires, and we cannot provide assurance we will be able to renew subscriptions with any of our customers at the same or higher contract value.
Current wording
We derive, and expect to increasingly derive in the future, a substantial portion of our revenue from the sale of software subscriptions. For 2024, 2023, and 2022, approximately 79.5%, 75.6%, and 72.7%, respectively, of our total revenue was subscriptions revenue. In order for us to improve our operating results, it is important our customers renew their subscriptions with us when their initial term expires as well as purchase additional subscriptions from us. In general, our customers have no renewal obligation after their initial term expires, and we cannot provide assurance we will be able to renew subscriptions with any of our customers at the same or higher contract value.
Previous wording
Because of the large amount of data we collect and manage, it is possible hardware failures or errors in our systems could result in data loss or corruption or cause the information we collect to be incomplete or contain inaccuracies our customers regard as significant. Furthermore, the availability or performance of our platform could be adversely affected by a number of factors, including customers’ inability to access the internet, our customers’ increased usage of our cloud offering, the failure of our network or software systems, security breaches, or variability in user traffic for our services. For example, our cloud offering customers access our platform through their internet service providers. If a customer's service provider fails to provide sufficient capacity to support our platform or otherwise experiences service outages, such failure could interrupt our customers’ access to our platform, adversely affect their perception of our platform’s reliability, and reduce our revenue. In addition to potential liability, if we experience interruptions in the availability of our cloud offering, our reputation could be adversely affected, and we could lose customers.
Current wording
Because of the large amount of data we collect and manage, it is possible hardware failures or errors in our systems could result in data loss or corruption or cause the information we collect to be incomplete or contain inaccuracies our customers regard as significant. Furthermore, the availability or performance of our platform could be adversely affected by a number of factors, including customers’ inability to access the internet, our customers’ increased usage of our cloud offering, the failure of our network or software systems, security breaches, or variability in user traffic for our services. In addition to potential liability, if we experience interruptions in the availability of our cloud offering, our reputation could be adversely affected, and we could lose customers.
Previous wording
We outsource substantially all of the infrastructure relating to our cloud offering to AWS, which hosts our platform on our customers’ behalf. Customers of our cloud offering need to be able to access our platform at any time, without interruption or degradation of performance, and we provide them with service level commitments with respect to uptime. AWS runs its own platform we access, and we are, therefore, vulnerable to service interruptions at AWS. We may experience material interruptions, delays, and outages in service and availability from time to time as a result of problems with our AWS provided infrastructure, which could render our cloud offering inaccessible to customers. Additionally, AWS has suffered outages at specific customer locations in the past, rendering the customer unable to access our offering for periods of time. Lack of availability of our AWS infrastructure could be due to a number of potential causes including technical failures, natural disasters, fraud, or security attacks we cannot predict or prevent. Such outages could lead to the triggering of our service level agreements and the issuance of credits to our cloud offering customers, which may impact our operating results.
Current wording
We outsource substantially all of the infrastructure relating to our cloud offering to AWS, which hosts our platform on our customers’ behalf. Customers of our cloud offering need to be able to access our platform at any time, without interruption or degradation of performance, and we provide them with service level commitments with respect to uptime. AWS runs its own platform we access; therefore, we are vulnerable to service interruptions at AWS. We may experience material interruptions, delays, and outages in service and availability from time to time as a result of problems with our AWS provided infrastructure, which could render our cloud offering inaccessible to customers. Additionally, AWS has suffered outages at specific customer locations in the past, rendering the customer unable to access our offering for periods of time. Lack of availability of our AWS infrastructure could be due to a number of potential causes including technical failures, natural disasters, fraud, or security attacks we cannot predict or prevent. Such outages could lead to the triggering of our service level agreements and the issuance of credits to our cloud offering customers, which may impact our operating results.
Previous wording
A component of our growth strategy involves the further expansion of our operations and customer base internationally. In 2023, 2022, and 2021, revenue generated from customers outside the United States was 35.8%, 33.5%, and 34.0%, respectively, of our total revenue. We currently operate in Canada, Switzerland, the United Kingdom, France, Germany, the Netherlands, Italy, Australia, Spain, Singapore, Sweden, Japan, Mexico, India, and Portugal. In the future, we may expand to other international locations. Our current international operations and future initiatives will involve a variety of risks, including:
Current wording
A component of our growth strategy involves the further expansion of our operations and customer base internationally. In 2024, 2023, and 2022, revenue generated from customers outside the United States was 36.6%, 35.8%, and 33.5%, respectively, of our total revenue. We currently operate in Canada, Switzerland, the United Kingdom, France, Germany, the Netherlands, Italy, Australia, Spain, Singapore, Sweden, Japan, Mexico, India, and Portugal and sell through resellers into many additional countries. In the future, we may expand to other international locations. Our current international operations and future initiatives will involve a variety of risks, including:
Previous wording
•Unexpected changes in regulatory requirements, taxes, or trade laws;
Current wording
•Unexpected changes in regulatory requirements, taxes, tariffs, or trade laws;
Previous wording
We have obtained a substantial judgment against our competitor, Pegasystems, for willful and malicious trade secret misappropriation, and elements of our ability to obtain payment with respect to that judgment are subject to risk.
Current wording
We are seeking to reinstate a substantial judgment against our competitor, Pegasystems, for willful and malicious trade secret misappropriation, and elements of our ability to reinstate and ultimately obtain payment with respect to that judgment are subject to risk.
Previous wording
On May 9, 2022, a jury returned a verdict that Pegasystems, Inc., willfully and maliciously misappropriated trade secrets from us and awarded us $2.036 billion in damages for Pegasystems’ unjust enrichment for usage of our trade secrets. A judge entered a final judgment on that verdict on September 15, 2022 and further granted us $23.6 million in attorney’s fees as well as statutory post-judgment interest at an annual rate of 6%, or approximately $122.0 million per year. Pegasystems has appealed the final judgment to the Virginia Court of Appeals, and the appeal is pending. In September 2023, we obtained a judgment preservation insurance policy that would pay us up to $500.0 million in coverage to the extent the final judgment were reversed or reduced after all appeals and further litigation are exhausted. While we believe strongly the final judgment should be upheld, we cannot guarantee it will be upheld in its entirety or in part. In addition, while Pegasystems has made public assurances that it could raise the funds necessary to pay the judgment, it does not currently have the cash necessary to satisfy the full amount of the final judgment, and we would be at risk of having to collect a substantial judgment as a creditor if Pegasystems is unable to raise the necessary funds when and if the final judgment becomes enforceable. Finally, as with any insurance policy, our ability to collect judgment preservation insurance proceeds is subject to the financial soundness of the insurers underwriting our policy, as well as any denial of coverage under the policy. While we have not included any payment from Pegasystems or insurance proceeds in our financial statements or operational planning, any failure to collect on all or a portion of the judgment or the insurance proceeds may be viewed negatively and our stock price could decline.
Current wording
In September 2023, we obtained a judgment preservation insurance policy that would pay us up to $500.0 million in coverage to the extent the final judgment were reversed or reduced after all appeals and further litigation are exhausted. While we believe strongly the final judgment should be reinstated by the Virginia Supreme Court, we cannot guarantee it will be reinstated in its entirety or in part. In addition, while Pegasystems has made public assurances it could raise the funds necessary to pay the judgment, it does not currently have the cash necessary to satisfy the full amount of the final judgment, and we would be at risk of having to collect a substantial judgment as a creditor if Pegasystems is unable to raise the necessary funds when and if the final judgment becomes enforceable. Finally, as with any insurance policy, our ability to collect judgment preservation insurance proceeds is subject to the financial soundness of the insurers underwriting our policy, as well as any denial of coverage under the policy. While we have not included any payment from Pegasystems or insurance proceeds in our financial statements or operational planning, any failure to collect on all or a portion of the judgment or the insurance proceeds may be viewed negatively and our stock price could decline.
Previous wording
We regularly maintain domestic cash deposits in banks insured by the Federal Deposit Insurance Corporation (the “FDIC”) that exceed the FDIC insurance limits. Bank failures, events involving limited liquidity, defaults, non-performance or other adverse developments that affect financial institutions, or concerns or rumors about such events, may lead to liquidity constraints. For example, on March 10, 2023, Silicon Valley Bank (“SVB”) was closed by the California Department of Financial Protection and Innovation, and the FDIC was appointed receiver of SVB. If other banks and financial institutions enter receivership or become insolvent in the future due to financial conditions affecting the banking system and financial markets, our ability to access our cash, cash equivalents, and investments, including transferring funds, making payments, or receiving funds may be threatened and could have a material adverse effect on our business and financial condition. There can be no assurance our deposits in excess of the FDIC or other comparable insurance limits will be backstopped by the U.S. government or that any bank or financial institution with which we do business will be able to obtain needed liquidity from other banks, government institutions, or by acquisition in the event of a failure or liquidity crisis.
Current wording
We regularly maintain domestic cash deposits in banks insured by the Federal Deposit Insurance Corporation, or the FDIC, that exceed the FDIC insurance limits. Bank failures, events involving limited liquidity, defaults, non-performance or other adverse developments that affect financial institutions, or concerns or rumors about such events, may lead to liquidity constraints. For example, on March 10, 2023, Silicon Valley Bank, or SVB, was closed by the California Department of Financial Protection and Innovation, and the FDIC was appointed receiver. If other banks and financial institutions enter receivership or become insolvent in the future due to financial conditions affecting the banking system and financial markets, our ability to access our cash, cash equivalents, and investments, including transferring funds, making payments, or receiving funds may be threatened and could have a material adverse effect on our business and financial condition. There can be no assurance our deposits in excess of the FDIC or other comparable insurance limits will be backstopped by the U.S. government or that any bank or financial institution with which we do business will be able to obtain needed liquidity from other banks, government institutions, or by acquisition in the event of a failure or liquidity crisis.
Previous wording
We have a Senior Secured Credit Facilities Credit Agreement (as amended from time to time, the “Credit Agreement”) with the several banks and other financial institutions or entities from time to time parties to the Credit Agreement, as lenders, and First Citizen Bank & Trust Company, as administrative agent and collateral agent for the lenders, which as of December 31, 2023, provides for a five-year term loan facility in an aggregate principal amount of $150.0 million and up to $75.0 million for a revolving credit facility, including a letter of credit sub-facility in the aggregate availability amount of $15.0 million and a swingline sub-facility in the aggregate availability amount of $10.0 million (as a sublimit of the revolving loan facility). Our obligations under the Credit Agreement are secured by substantially all of our assets.
Current wording
We have a Senior Secured Credit Facilities Credit Agreement (as amended from time to time, the “Credit Agreement”) with First Citizens Bank & Trust Company, as administrative agent and collateral agent for the lenders thereto, which as of December 31, 2024, provides for a five-year term loan facility in an aggregate principal amount of $200.0 million and up to $100.0 million for a revolving credit facility, including a letter of credit sub-facility in the aggregate availability amount of $20.0 million and a swingline sub-facility in the aggregate availability amount of $10.0 million (as a sublimit of the revolving loan facility). Our obligations under the Credit Agreement are secured by substantially all of our assets.
Previous wording
In the United States, these include rules and regulations promulgated under the authority of the Federal Trade Commission, the Electronic Communications Privacy Act, the Computer Fraud and Abuse Act, the Health Insurance Portability and Accountability Act of 1996, the Gramm Leach Bliley Act, the California Consumer Privacy Act (as modified by the California Privacy Rights Act), or the CCPA, and other state laws relating to privacy and data security. The CCPA contains detailed requirements regarding collecting and processing personal information, imposes certain limitations on how such information may be used, and provides rights to consumers that have never before been available, all of which may be imposed on us by our customers. Further, the CCPA expands consumers’ rights with respect to certain sensitive personal information. Some state laws may be more stringent or broader in scope or offer greater individual rights with respect to confidential, sensitive, and personal information than federal, international, or other state laws, and such laws may differ from each other, which may complicate compliance efforts. New legislation proposed or enacted in various other states will continue to shape the data privacy environment nationally.
Current wording
In the United States, these include rules and regulations promulgated under the authority of the Federal Trade Commission, the Electronic Communications Privacy Act, the Computer Fraud and Abuse Act, the Health Insurance Portability and Accountability Act of 1996, the Gramm Leach Bliley Act, the California Consumer Privacy Act (as modified by the California Privacy Rights Act), or the CCPA, and other state laws relating to privacy and data security. The CCPA contains detailed requirements regarding collecting and processing personal information, imposes certain limitations on how such information may be used, and provides rights to consumers and employees that have never before been available, all of which may be imposed on us by our customers and oblige us to become more rigorous in how we treat our employees’ data. Further, the CCPA expands consumers’ rights with respect to certain sensitive personal information. Some state laws may be more stringent or broader in scope or offer greater individual rights with respect to confidential, sensitive, and personal information than federal, international, or other state laws, and such laws may differ from each other, which may complicate compliance efforts. New legislation proposed or enacted in various other states will continue to shape the data privacy environment nationally.
Previous wording
Internationally, the European Union has adopted a comprehensive and evolving general data protection regulation, or the GDPR, which contains numerous requirements related to rights of data subjects in their personal data, including more robust obligations on data processors and heavier documentation requirements for data protection compliance programs by companies in general. In addition, absent appropriate safeguards or other circumstances, the GDPR generally restricts the transfer of personal data to non-adequate countries and/or organizations outside of the European Economic Area, or EEA, such as India, Australia, and non-certified organizations in the United States, which the European Commission does not consider to provide an adequate level of data privacy and security. In July 2023, the new EU-US Data Privacy Framework (“EU-US DPF”), the replacement for the invalidated EU-US Privacy Shield, came into force, allowing U.S. businesses to become certified as adequate for the purposes of data transfers from the EEA, no longer always necessitating the signature of “Standard Contractual Clauses.” The EU-US DPF, however, still requires parties relying upon that legal mechanism to comply with obligations similar to those required under the Standard Contractual Clauses such as conducting transfer impact assessments to determine whether additional security measures are necessary to protect the at-issue personal data. Appian is currently certified under the new EU-US Data Privacy Framework. However, due to potential legal challenges, there exists some uncertainty regarding whether the new EU-US DPF or the Standard Contractual Clauses will remain a valid mechanism for transfers of personal data out of the EEA.
Current wording
Internationally, the GDPR continues to place robust obligations on data processors and controllers and heavier documentation requirements for data protection compliance programs by companies in general. In addition, absent appropriate safeguards or other circumstances, the GDPR generally restricts the transfer of personal data to non-adequate countries and/or organizations outside of the European Economic Area, or EEA, such as India, Australia, Mexico, and non-certified organizations in the United States, which the European Commission does not consider to provide an adequate level of data privacy and security. We are currently certified under the EU-US Data Privacy Framework (“EU-US DPF”). The EU-US DPF requires parties relying upon that legal mechanism to comply with obligations similar to those required under GDPR, such as conducting transfer impact assessments to determine whether additional security measures are necessary to protect the at-issue personal data. Due to potential legal challenges, however, there exists some uncertainty regarding whether the new EU-US DPF will remain a valid mechanism for transfers of personal data out of the EEA.
Previous wording
Certain of our customers use our platform to create applications that ensure secure communications given the nature of the content being distributed and associated applicable regulatory requirements. As attitudes towards privacy and data security evolve governmental and other customers may also require our platform to comply with certain privacy, security, and other certifications and standards that are specialized or industry-specific. Our cloud platform holds various security certifications from government agencies and industry organizations, including the Federal Risk and Authorization Management Program, or FedRAMP, compliance and HITRUST certification. It also meets the ISO 27001, Payment Card Industry Data Security Standard, or PCI DSS, and the various United States Health Insurance Portability and Accountability Act, or HIPAA, standards. Governments and industry organizations may also adopt new laws, regulations, or requirements or make changes to existing laws or regulations that could impact the demand for, or value of, our applications such as the European Banking Authority's regulations updated in September 2019 and the CCPA that took effect January 1, 2020. If we fail to maintain our current security certifications and/or to continue to meet security standards, or if we are unable to adapt our platform to changing legal and regulatory standards or other requirements in a timely manner, our customers may lose confidence in our platform, and our business could be negatively impacted.
Current wording
Federal Risk and Authorization Management Program, or FedRAMP, compliance and HITRUST certification. It also meets the ISO 27001, Payment Card Industry Data Security Standard, or PCI DSS, and the various United States Health Insurance Portability and Accountability Act, or HIPAA, standards. Governments and industry organizations may also adopt new laws, regulations, or requirements or make changes to existing laws or regulations that could impact the demand for, or value of, our applications such as the European Banking Authority's regulations. If we fail to maintain our current security certifications and/or to continue to meet security standards, or if we are unable to adapt our platform to changing legal and regulatory standards or other requirements in a timely manner, our customers may lose confidence in our platform, and our business could be negatively impacted.
Previous wording
In addition, the use of the internet as a business tool could be adversely affected due to delays in the development or adoption of new standards and protocols to handle increased demands of internet activity, security, reliability, cost, ease of use, accessibility, and quality of service. The performance of the internet and its acceptance as a business tool have been adversely affected by viruses, worms, and similar malicious programs, along with distributed denial of service (“DDoS”), and similar attacks. As a result, the internet has experienced a variety of outages and other delays as a result of such damage to or attacks on portions of its infrastructure. If the use of the internet is adversely affected by these issues, demand for our platform could suffer.
Current wording
In addition, the use of the internet as a business tool could be adversely affected due to delays in the development or adoption of new standards and protocols to handle increased demands of internet activity, security, reliability, cost, ease of use, accessibility, and quality of service. The performance of the internet and its acceptance as a business tool have been adversely affected by viruses, worms, and similar malicious programs, along with distributed denial of service and similar attacks. As a result, the internet has experienced a variety of outages and other delays as a result of such damage to or attacks on portions of its infrastructure. If the use of the internet is adversely affected by these issues, demand for our platform could suffer.
Previous wording
The United States and other countries maintain and administer export and import laws and regulations, including various economic and trade sanctions such as those administered by the Office of Foreign Assets Control (“OFAC”), which apply to our business. We are required to comply with these laws and regulations. If we fail to comply with such laws and regulations, we and certain of our employees could be subject to substantial civil or criminal penalties, including the possible loss of export or import privileges, fines which may be imposed on us and responsible employees or managers, and, in extreme cases, the incarceration of responsible employees or managers.
Current wording
The United States and other countries maintain and administer export and import laws and regulations, including various economic and trade sanctions such as those administered by the Office of Foreign Assets Control, which apply to our business. We are required to comply with these laws and regulations. If we fail to comply with such laws and regulations, we and certain of our employees could be subject to substantial civil or criminal penalties, including the possible loss of export or import privileges, fines which may be imposed on us and responsible employees or managers, and, in extreme cases, the incarceration of responsible employees or managers.
Previous wording
As of December 31, 2023, we had 16 issued patents and nine pending patent applications related to our platform and its technology. We have registered the “Appian” name and logo in the United States and certain other countries. We have registrations and/or pending applications for additional marks in the United States. We cannot provide assurance that any current or future applications for registrations for patent or trademark applications will result in the grant of any valid, enforceable intellectual property rights. Further, we cannot provide assurance that any granted patent or trademark will provide the protection we seek, will be valid if challenged, or will be sufficiently broad in actions against alleged infringers. Moreover, any of our granted intellectual property rights may be rendered invalid by future changes in the law, defects in our prosecution processes, or preexisting technology, rights, or marks.
Current wording
As of December 31, 2024, we had 21 issued patents and 20 pending patent applications related to our platform and its technology. We have registered the “Appian” name and logo in the United States and certain other countries. We have registrations and/or pending applications for additional marks in the United States. We cannot provide assurance any current or future applications for registrations for patent or trademark applications will result in the grant of any valid, enforceable intellectual property rights. Further, we cannot provide assurance any granted patent or trademark will provide the protection we seek, will be valid if challenged, or will be sufficiently broad in actions against alleged infringers. Moreover, any of our granted intellectual property rights may be rendered invalid by future changes in the law, defects in our prosecution processes, or preexisting technology, rights, or marks.
Previous wording
Further, our use of AI technologies internally and implemented as part of our platform may expose us to additional risks regarding our intellectual property. For more information on the legal and regulatory risks associated with the use of AI, please see our risk factors above at “—AI is a disruptive set of technologies that may affect the markets for our software dramatically and in unpredictable ways,” and “—Regulatory and legislative developments related to the use of AI could adversely affect our use of such technologies in our products, services, and business.”
Current wording
use of AI, please see our risk factors above at “—AI is a disruptive set of technologies that may affect the markets
Previous wording
As of December 31, 2023, we had gross U.S. federal and state net operating loss carryforwards, or NOLs, of $295.9 million and $306.8 million, respectively, available to offset future taxable income. NOLs generated in tax years ended on or prior to December 31, 2017 will substantially expire by 2037 if unused. As a result of certain provisions in the Tax Cuts and Jobs Act of 2017, or the TCJA, as modified by the Coronavirus Aid, Relief, and Economic Security Act, or CARES Act, federal NOLs generated in tax years beginning after December 31, 2017 may be carried forward indefinitely but, in the case of tax years beginning after 2020, may only be used to offset 80% of our taxable income annually. Under the provisions of the Internal Revenue Code of 1986, as amended, or the Internal Revenue Code, substantial changes in our ownership may limit the amount of pre-change NOLs that can be utilized annually in the future to offset taxable income. Section 382 of the Internal Revenue Code imposes limitations on a company’s ability to use NOLs if a company experiences a more-than-50-percent ownership change over a three-year testing period. Based upon our analysis as of December 31, 2023, we have determined we do not expect these limitations to impair our ability to use our NOLs prior to expiration. However, if changes in our ownership occur in the future, our ability to use our NOLs may be further limited. For these reasons, we may not be able to utilize a material portion of the NOLs, even if we achieve profitability.
Current wording
As of December 31, 2024, we had gross U.S. federal and state net operating loss carryforwards, or NOLs, of $287.5 million and $297.5 million, respectively, available to offset future taxable income. NOLs generated in tax years ended on or prior to December 31, 2017 will substantially expire by 2037 if unused. As a result of certain provisions in the Tax Cuts and Jobs Act of 2017, or the TCJA, as modified by the Coronavirus Aid, Relief, and Economic Security Act, or CARES Act, federal NOLs generated in tax years beginning after December 31, 2017 may be carried forward indefinitely but, in the case of tax years beginning after 2020, may only be used to offset 80% of our taxable income annually. Under the provisions of the Internal Revenue Code of 1986, as amended, or the Internal Revenue Code, substantial changes in our ownership may limit the amount of pre-change NOLs that can be utilized annually in the future to offset taxable income. Section 382 of the Internal Revenue Code imposes limitations on a company’s ability to use NOLs if a company experiences a more-than-50-percent ownership change over a three-year testing period. Based upon our analysis as of December 31, 2024, we have determined we do not expect these limitations to impair our ability to use our NOLs prior to expiration. However, if changes in our ownership occur in the future, our ability to use our NOLs may be further limited. For these reasons, we may not be able to utilize a material portion of the NOLs, even if we achieve profitability.
Previous wording
As of December 31, 2023, we also had gross foreign NOLs of $192.3 million, primarily at our Swiss subsidiary, Appian Software International. As of December 31, 2023, we had tax-effected Swiss NOLs of $21.8 million. We also had tax-effected Swiss NOL expirations of $1.1 million in 2023, and a piece of our foreign NOLs will continue to expire each year if unutilized. If we are limited in our ability to use our NOLs in future years in which we have taxable income, we will pay more taxes than if we were able to fully utilize our NOLs. This could adversely affect our operating results and the market price of our Class A common stock.
Current wording
As of December 31, 2024, we also had gross foreign NOLs of $230.1 million, primarily at our Swiss subsidiary, Appian Software International. As of December 31, 2024, we had tax-effected Swiss NOLs of $26.2 million. We also had tax-effected Swiss NOL expirations of $1.0 million in 2024, and some of our foreign NOLs will continue to expire each year if unutilized. If we are limited in our ability to use our NOLs in future years in which we have taxable income, we will pay more taxes than if we were able to fully utilize our NOLs. This could adversely affect our operating results and the market price of our Class A common stock.
Previous wording
The dual class structure of our common stock and the existing ownership of capital stock by Matt Calkins, our founder and Chief Executive Officer, has the effect of concentrating voting control with Mr. Calkins for the foreseeable future, which will limit the ability of others to influence corporate matters.
Current wording
The dual class structure of our common stock and the existing ownership of capital stock by Matt Calkins, our founder and Chief Executive Officer, has the effect of concentrating voting control with
Previous wording
Our Class B common stock has ten votes per share, and our Class A common stock has one vote per share. Given the greater number of votes per share attributed to our Class B common stock, our Class B stockholders collectively beneficially owned shares representing approximately 88% of the voting power of our outstanding capital stock as of December 31, 2023. Further, Mr. Calkins, our founder and Chief Executive Officer, together with his affiliates, collectively beneficially owned shares representing approximately 81% of the voting power of our outstanding capital stock as of December 31, 2023. Consequently, Mr. Calkins, together with his affiliates, is able to control a majority of the voting power even if their stock holdings represent as few as approximately 24% of the outstanding number of shares of our common stock. This concentrated control will limit the ability of others to influence corporate matters for the foreseeable future. For example, Mr. Calkins will be able to control elections of directors, amendments of our certificate of incorporation or bylaws, increases to the number of shares available for issuance under our equity incentive plans or adoption of new equity incentive plans, and approval of any merger or sale of assets for the foreseeable future. This concentrated control could also discourage a potential investor from acquiring our Class A common stock due to the limited voting power of such stock relative to the Class B common stock and might harm the market price of our Class A common stock. In addition, Mr. Calkins has the ability to control the management and major strategic investments of our company as a result of his position as our Chief Executive Officer and his ability to control the election or replacement of our directors. As a board member and officer, Mr. Calkins owes a fiduciary duty to our stockholders and must act in good faith in a manner he reasonably believes to be in the best interests of our stockholders. However, as a stockholder, even a controlling stockholder, Mr. Calkins is entitled to vote his shares, and shares over which he has voting control, in his own interests, which may not always be in the interests of our stockholders generally.
Current wording
Our Class B common stock has ten votes per share, and our Class A common stock has one vote per share. Given the greater number of votes per share attributed to our Class B common stock, our Class B stockholders collectively beneficially owned shares representing approximately 88% of the voting power of our outstanding capital stock as of December 31, 2024. Further, Mr. Calkins, our founder and Chief Executive Officer, together with his affiliates, collectively beneficially owned shares representing approximately 77% of the voting power of our outstanding capital stock as of December 31, 2024. Consequently, Mr. Calkins, together with his affiliates, is able to control a majority of the voting power even if their stock holdings represent as few as approximately 24% of the outstanding number of shares of our common stock. This concentrated control will limit the ability of others to influence corporate matters for the foreseeable future. For example, Mr. Calkins will be able to control elections of directors, amendments of our certificate of incorporation or bylaws, increases to the number of shares available for issuance under our equity incentive plans or adoption of new equity incentive plans, and approval of any merger or sale of assets for the foreseeable future. This concentrated control could also discourage a potential investor from acquiring our Class A common stock due to the limited voting power of such stock relative to the Class B common stock and might harm the market price of our Class A common stock. In addition, Mr. Calkins has the ability to control the management and major strategic investments of our company as a result of his position as our Chief Executive Officer and his ability to control the election or replacement of our directors. As a board member and officer, Mr. Calkins owes a fiduciary duty to our stockholders and must act in good faith in a manner he reasonably believes to be in the best interests of our stockholders. However, as a stockholder, even a controlling stockholder, Mr. Calkins is entitled to vote his shares, and shares over which he has voting control, in his own interests, which may not always be in the interests of our stockholders generally.
Showing the first 40 of 42 pairs. Open the source sections for the rest.
Rearranged current paragraphs (8)
Current report — wording carried from elsewhere
In addition, new laws and regulations, or the interpretation of existing laws and regulations, in any of the jurisdictions we operate may affect our ability to leverage AI in any of our products and services and may expose us to government enforcement or civil suits. As the legal and regulatory framework encompassing AI matures, it may result in increases in our operational and development expenses that impact our ability to develop, earn revenue from, or utilize any products or services incorporating AI. Additionally, if any of our employees, contractors, vendors or service providers use any third-party software incorporating AI in connection with our business or the services they provide to us, it may lead to the inadvertent disclosure or incorporation of our confidential, sensitive or proprietary information into publicly available training sets which may impact our ability to realize the benefit of, or adequately maintain, protect and enforce our intellectual property or sensitive or confidential information, harming our competitive position and business. Our ability to mitigate risks associated with disclosure of our proprietary, sensitive or confidential information, including in connection with the use of AI, will depend on our implementation, maintenance, monitoring and enforcement of appropriate technical and administrative safeguards, policies, and procedures governing the use of AI in our business. In the U.S., a number of civil lawsuits have been initiated related to the foregoing and other concerns, any of which may, amongst other things, require us to limit the ways in which AI tools and technologies are trained, refined or implemented, and may affect our ability to develop products or services using or incorporating AI.
Current report — wording carried from elsewhere
Furthermore, our competitors, customers, or other third parties may incorporate AI into their products more quickly or more successfully than us, which could impair our ability to compete effectively. Given we rely on third party providers for underlying large language model technology, our ability to differentiate our AI offerings from our competitors could be limited. Further, to the extent other, larger technology companies with greater resources and market power gain exclusive or advantageous access to large language model providers, our ability to offer competing AI services could be negatively impacted. The increasing use of generative AI by third parties may also negatively impact the integrity of our own proprietary data, data sets, and content databases if and to the extent any invalid, inaccurate, biased, or otherwise flawed data produced by any such AI systems may inadvertently be incorporated in our proprietary data, data sets, or content databases, negatively affecting our reputation, and the value of our proprietary data, data sets, or content databases. As generative AI and other AI tools are relatively new, sophisticated, and evolving quickly, we cannot predict all of the risks that may arise from our current or future use of AI in our business. Any of the foregoing and any similar issues, whether actual or perceived, could negatively impact our customers’ experience and diminish the perceived quality and value of our products and services. This in turn could damage our brand, reputation, competitive position, and business.
Current report — wording carried from elsewhere
On May 9, 2022, a jury returned a verdict that Pegasystems, Inc., willfully and maliciously misappropriated trade secrets from us and awarded us $2.036 billion in damages for Pegasystems’ unjust enrichment for usage of our trade secrets. A judge entered a final judgment on that verdict on September 15, 2022 and further granted us $23.6 million in attorney’s fees as well as statutory post-judgment interest at an annual rate of 6%, or approximately $122.0 million per year.
Current report — wording carried from elsewhere
Certain of our customers use our platform to create applications that ensure secure communications given the nature of the content being distributed and associated applicable regulatory requirements. As attitudes towards privacy and data security evolve, governmental and other customers may also require our platform to comply with certain privacy, security, and other certifications and standards that are specialized or industry-specific. Our cloud platform holds various security certifications from government agencies and industry organizations, including the
Current report — wording carried from elsewhere
Further, our use of AI technologies internally and implemented as part of our platform may expose us to additional risks regarding our intellectual property. To the extent we do not have sufficient rights to use any data or other material or content produced by generative AI in our business, or if we experience cybersecurity incidents in connection with our use of AI, it could adversely affect our reputation and expose us to legal liability or regulatory risk, including with respect to third-party intellectual property, privacy, publicity, contractual, or other rights. Given we rely on third-party providers for underlying large language model technology, and we do not have full knowledge as to the entire set of data on which each underlying third-party AI model was trained on, our ability to mitigate such risks directly is limited. For more information on the legal and regulatory risks associated with the
Current report — wording carried from elsewhere
for our software dramatically and in unpredictable ways,” and “—Regulatory and legislative developments related to
Current report — wording carried from elsewhere
the use of AI could adversely affect our use of such technologies in our products, services, and business.”
Current report — wording carried from elsewhere
Mr. Calkins for the foreseeable future, which will limit the ability of others to influence corporate matters.