Skip to main content

TWILIO INC

For the period ended Sep 30, 2024. Filed Oct 31, 2024.

View on SEC.gov

About this filing

A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.

Sep 30, 2024 · Filed Oct 31, 2024

TWLO$202.02+0.5%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-Q

Period ended 2024-06-30; filed 2024-08-01.

0001447669-24-000128

Item 1A. Risk Factors

Current report: 10-Q

Period ended 2024-09-30; filed 2024-10-31.

0001447669-24-000178

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 354 previous paragraphs and 355 current paragraphs.

317 unchanged; 35 reworded; 1 added; 1 removed; 1 previous and 2 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (1)

Current report

•the Pallone-Thune Telephone Robocall Abuse Criminal Enforcement and Deterrence Act (“TRACED”);
Removed paragraphs (1)

Previous report

•inflation and actions taken by central banks to counter inflation;
Reworded paragraphs (35)

Previous wording

Global economic and business activities continue to face widespread macroeconomic uncertainties, including changes in the labor market and supply chain disruptions, inflation and monetary supply shifts, volatility in the banking and financial services sectors, and recession risks, which may continue for an extended period. Additionally, the instability in the geopolitical environment in many parts of the world, including from the war in Ukraine and conflict in the Middle East, may continue to cause or exacerbate uncertain economic conditions. These macroeconomic conditions have resulted in, and may continue to result in, decreased business spending by our current and prospective customers and business partners, reduced demand for or usage of our products, lower renewal rates by our customers, longer or delayed sales cycles, including current and prospective customers delaying contract signing or contract renewals, reduced budgets or minimum commitments related to the products that we offer, or delays in customer payments or our ability to collect accounts receivable, all of which could have an adverse impact on our business, results of operations and financial condition.

Current wording

Global economic and business activities continue to face widespread macroeconomic uncertainties, including changes in the labor market and supply chain disruptions, inflation and monetary supply shifts, volatility in the banking and financial services sectors, and recession risks, which may continue for an extended period. Additionally, the instability in the geopolitical environment in many parts of the world, including from the war in Ukraine and conflict in the Middle East, may continue to cause or exacerbate uncertain economic conditions. These macroeconomic conditions have resulted in, and may continue to result in, decreased business spending by our current and prospective customers and business partners, reduced demand for or usage of our products, lower renewal rates by our customers, longer or delayed sales cycles, including current and prospective customers delaying contract signing or contract renewals, reduced budgets or minimum commitments related to the products that we offer, or delays in customer payments or our ability to collect accounts receivable, all of which could have an adverse impact on our business, results of operations and financial condition. Additionally, the results of the 2024 U.S. presidential election could lead to changes in macroeconomic conditions and to the legal and regulatory environment in the United States and globally, including changes to international trade relations, economic and monetary policies or other legislation and regulations, any of which could have an adverse impact on the global economy and/or our business.

Previous wording

The current macroeconomic environment has constrained the budgets and financial resources of some of our current and prospective customers, which has caused them to become more budget-conscious and to delay and/or reduce spending. Given that a majority of our revenue is usage-based and impacted by general consumer sentiment and activity, our business may be more immediately and severely impacted by adverse macroeconomic conditions than those that rely primarily on software-as-a-service (“SaaS”) subscription revenue. The current macroeconomic environment has caused certain of our Communications customers to reduce or terminate their usage of our products without notice or termination charges, which has negatively impacted, and, despite recent stabilization in usage volumes, may in the future negatively impact, our Communications revenue. Similarly, the current macroeconomic environment has caused certain of our Segment and other subscription-based customers to renegotiate existing contracts on less advantageous terms to us than those currently in place, reduce or limit their contract value, default on payments due on existing contracts, or fail to renew at the end of their current contract term, which has had, and may continue to have, a negative impact on our revenue. A prolonged economic slowdown could exacerbate these negative effects on revenue and revenue growth in both our Communications and Segment business units. Additionally, when customers fail to pay us or reduce their spending with us, we may be adversely affected by an inability to collect amounts due, the costs of enforcing the terms of our contracts, including through litigation, and/or a reduction in revenue. For example, in February 2023, one of our customers, Oi SA, a Brazilian telecom company, initiated reorganization proceedings in a Brazilian bankruptcy court as well as a secondary proceeding under Chapter 15 in the United States and exposed us to risks on collections of pre-petition receivables and ongoing revenue, as detailed in Part I, Item 2, “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Factors Affecting Our Results of Operations.” If the effects of the current macroeconomic environment continue to adversely affect our business and the businesses of our current and prospective customers, our results of operations and financial condition may continue to be harmed, and many of the other risks described in this “Risk Factors” section will be exacerbated.

Current wording

The current macroeconomic environment has constrained the budgets and financial resources of some of our current and prospective customers, which has caused them to become more budget-conscious and to delay and/or reduce spending. Given that a majority of our revenue is usage-based and impacted by general consumer sentiment and activity, our business may be more immediately and severely impacted by adverse macroeconomic conditions than those that rely primarily on software-as-a-service (“SaaS”) subscription revenue. The current macroeconomic environment has caused certain of our usage-based customers to reduce or terminate their usage of our products without notice or termination charges, which has negatively impacted, and, despite recent stabilization in usage volumes, may in the future negatively impact, our usage-based revenue. Similarly, the current macroeconomic environment has caused certain of our subscription-based customers to renegotiate existing contracts on less advantageous terms to us than those currently in place, reduce or limit their contract value, default on payments due on existing contracts, or fail to renew at the end of their current contract term, which has had, and may continue to have, a negative impact on our subscription-based revenue. A prolonged economic slowdown could exacerbate these negative effects on revenue and revenue growth in both our Communications and Segment business units. Additionally, when customers fail to pay us or reduce their spending with us, we may be adversely affected by an inability to collect amounts due, the costs of enforcing the terms of our contracts, including through litigation, and/or a reduction in revenue. For example, in February 2023, one of our customers, Oi SA, a Brazilian telecom company, initiated reorganization proceedings in a Brazilian bankruptcy court as well as a secondary proceeding under Chapter 15 in the United States and exposed us to risks on collections of pre-petition receivables and ongoing revenue, as detailed in Part I, Item 2, “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Factors Affecting Our Results of Operations.” If the effects of the current macroeconomic environment continue to adversely affect our business and the businesses of our current and prospective customers, our results of operations and financial condition may continue to be harmed, and many of the other risks described in this “Risk Factors” section will be exacerbated.

Previous wording

•general economic conditions, including a downturn or recession, rising inflation and interest rates, and geopolitical uncertainty and instability;

Current wording

•general economic conditions, including a downturn or recession, heightened inflation and interest rates, and geopolitical uncertainty and instability;

Previous wording

•increases in inflation and our ability to control costs, including our operating expenses;

Current wording

•our ability to control costs, including our operating expenses;

Previous wording

Our business unit reorganization and changes in our segment reporting structure have required, and will continue to require, significant expenditures, allocation of valuable management resources, and significant demands on our operational and financial infrastructure. This could lead to a number of risks, including: actual or perceived disruption of service or reduction in service standards to our customers; the failure to preserve adequate internal controls as we reorganize our general and administrative functions, including our information technology and financial reporting infrastructure; the failure to preserve partnership, sales and other important relationships and to resolve conflicts that may arise; loss of sales as we eliminate certain sales positions, reorganize our sales teams into business units, and improve and expand our use of self-service capabilities; failure to develop effective cross-selling motions between the businesses; failure of the business units to drive efficiencies and leverage; diversion of management attention from ongoing business activities and core business objectives in order to manage operational changes; and the failure to maintain our corporate culture, employee morale and productivity, and to retain highly skilled employees due to reductions in our workforce and changes in leadership structure. Because of these and other factors, we cannot predict whether we will realize the purpose and anticipated benefits of our business reorganizations and segment reporting changes, and any similar changes in the future, and if we do not, our business, results of operations and financial condition could be adversely affected.

Current wording

Our business unit reorganization and changes in our segment reporting structure have required, and will continue to require, significant expenditures, allocation of valuable management resources, and significant demands on our operational and financial infrastructure. This could lead to a number of risks, including: actual or perceived disruption of service or reduction in service standards to our customers; the failure to preserve adequate internal controls as we reorganize our general and administrative functions, including our information technology and financial reporting infrastructure; the failure to preserve partnership, sales and other important relationships and to resolve conflicts that may arise; loss of sales as we eliminate certain sales positions, reorganize our sales teams, and improve and expand our use of self-service capabilities; failure to develop effective cross-selling motions between the businesses; failure of the business units to drive efficiencies and leverage; diversion of management attention from ongoing business activities and core business objectives in order to manage operational changes; and the failure to maintain our corporate culture, employee morale and productivity, and to retain highly skilled employees due to reductions in our workforce and changes in leadership structure. Because of these and other factors, we cannot predict whether we will realize the purpose and anticipated benefits of our business reorganizations and segment reporting changes, and any similar changes in the future, and if we do not, our business, results of operations and financial condition could be adversely affected.

Previous wording

In the first quarter of 2024, we conducted an operational review of Segment and developed a plan that we believe will deliver a more effective Segment business. As we announced in March 2024, we are targeting break-even non-GAAP income from operations for Segment by the second quarter of 2025 and we accelerated our target timeline to achieve GAAP operating profitability on a consolidated basis to the fourth quarter of 2025. There is no guarantee that we will achieve these operational and financial targets, and if we do not, it could negatively impact the trust of investors or securities analysts, and our results of operations and stock price could be adversely affected.

Current wording

In the first quarter of 2024, we conducted an operational review of Segment and developed a plan that we believe will deliver a more effective Segment business. As we announced in March 2024, we are targeting break-even non-GAAP income from operations for Segment by the second quarter of 2025. There is no guarantee that we will achieve our announced operational and financial targets, and if we do not, it could negatively impact the trust of investors or securities analysts, and our results of operations and stock price could be adversely affected.

Previous wording

Customer usage of our products depends on factors generally outside of our control, including macroeconomic conditions, so it is difficult to accurately predict customers’ usage levels. The loss of customers or reductions in their usage levels of our products may each have a negative impact on our business, results of operations and financial condition. Our Dollar-Based Net Expansion Rate has recently stabilized as compared to prior periods, but it may decline in the future if customers are not satisfied with our products and related customer service experience, the value proposition of our products or our ability to meet their needs and expectations, or due to macroeconomic conditions or reductions in customers’ budgets. If a significant number of customers cease using, or reduce their usage of our products, including due to cost-saving measures in the face of macroeconomic uncertainty or changes in the competitive landscape, then we may be required to spend significantly more on sales and marketing than we currently expect in order to maintain or increase revenue from customers. Such additional sales and marketing expenditures could adversely affect our business, results of operations and financial condition.

Current wording

Customer usage of our products depends on factors generally outside of our control, including macroeconomic conditions, so it is difficult to accurately predict customers’ usage levels. The loss of customers or reductions in their usage levels of our products may each have a negative impact on our business, results of operations and financial condition. Our Dollar-Based Net Expansion Rate has recently stabilized as compared to prior periods, but it may decline in the future if customers are not satisfied with our products and related customer service experience, the value proposition of our products or our ability to meet their needs and expectations, or due to macroeconomic conditions or reductions in customers’ budgets. If a significant number of customers cease using, or reduce their usage of our products, then we may be required to spend significantly more on sales and marketing than we currently expect in order to maintain or increase revenue from customers. Such additional sales and marketing expenditures could adversely affect our business, results of operations and financial condition.

Previous wording

The markets for our products, including the market for communications in general and cloud communications in particular, are subject to rapid technological change, evolving industry standards, and changing regulations, as well as changing customer needs, requirements and preferences. These are all uncertain and we cannot predict the consequences, effects, or introduction of new, disruptive, emerging technologies or the manner and pace at which our markets develop over time, and our ability to compete in these markets depends on predicting and adapting to these changing circumstances. The success of our business will depend, in part, on our ability to adapt and respond effectively to these changes on a timely basis, and anticipating these factors requires that we allocate significant resources without any guarantee that any such investments and efforts will result in initial or enhanced adoption of our products in the marketplace. For example, with the development of next-generation solutions that utilize new and advanced features, including AI and ML, we expect to commit significant resources to developing new products and enhancements incorporating AI and ML, and there is no guarantee that our investments and efforts will result in wider adoption of our products in the marketplace. If new technologies emerge that are able to deliver competitive products and services at lower prices, more efficiently, more conveniently or more securely or if new products are introduced into the market that could render our existing products obsolete, such technologies and products could adversely impact our ability to compete effectively and may lead to customers reducing or terminating their usage of our products. For example, if user authentication practices evolve to reduce or eliminate the use of one-time passwords, our revenue could be adversely affected.

Current wording

The markets for our products, including the market for communications in general and cloud communications in particular, are subject to rapid technological change, evolving industry standards, and changing regulations, as well as changing customer needs, requirements and preferences. These are all uncertain and we cannot predict the consequences, effects, or introduction of new, disruptive, emerging technologies or the manner and pace at which our markets develop over time, and our ability to compete in these markets depends on predicting and adapting to these changing circumstances. The success of our business will depend, in part, on our ability to adapt and respond effectively to these changes on a timely basis, and anticipating these factors requires that we allocate significant resources without any guarantee that any such investments and efforts will result in initial or enhanced adoption of our products in the marketplace. For example, with the development of next-generation solutions that utilize new and advanced features, including AI and ML, we expect to commit significant resources to developing new products and enhancements and there is no guarantee that our investments and efforts will result in wider adoption of our products in the marketplace. If new technologies emerge that are able to deliver competitive products and services at lower prices, more efficiently, more conveniently or more securely or if new products are introduced into the market that could render our existing products obsolete, such technologies and products could adversely impact our ability to compete effectively and may lead to customers reducing or terminating their usage of our products. For example, if user authentication practices evolve to reduce or eliminate the use of one-time passwords, our revenue could be adversely affected.

Previous wording

Some of our competitors and potential competitors are larger and have greater name recognition, longer operating histories, more established customer relationships, larger budgets, lower operating costs, and significantly greater resources than we do. As a result, our competitors may be able to respond more quickly and effectively than we can to new or changing opportunities, technologies, standards, customer requirements or changing economic conditions. Our competitors may also offer products or services that address one or a limited number of functions at lower prices, with greater depth than our products or in different geographies. Our current and potential competitors may develop and market new products and services with comparable functionality to our products, and this could lead to us having to decrease prices in order to remain competitive.

Current wording

Some of our competitors and potential competitors are larger and have greater name recognition, longer operating histories, more established customer relationships, larger budgets, lower operating costs, and significantly greater resources than we do. As a result, our competitors may be able to respond more quickly and effectively than we can to new or changing opportunities, technologies, standards, customer requirements or changing economic conditions. Our competitors may also offer products or services that address one or a limited number of functions at lower prices, with greater depth than our products or in different geographies. Our current and potential competitors may develop and market new products and services with comparable functionality to our products, and this could lead us to decrease prices in order to remain competitive.

Previous wording

We have incurred net losses in each year since our inception, including net losses of $87.2 million, $1.0 billion and $1.3 billion in the six months ended June 30, 2024 and the years ended December 31, 2023 and 2022, respectively. We had an accumulated deficit of $6.4 billion as of June 30, 2024. We will need to generate and sustain increased revenue levels, and manage our operating expenses, in future periods to become profitable and achieve our stated profitability goals and, even if we do, we may not be able to maintain or increase our level of profitability. We expect to continue to expend substantial financial and other resources on, among other things: investments in our engineering team; improvements in security and data protection; the development of new products, features and functionality and enhancements to our platform; sales and marketing; expansion of our operations and infrastructure, both domestically and internationally; and general administration, including legal, accounting and other expenses related to being a public company. Our efforts to grow our business may be more costly than we expect, and we may not be able to increase our revenue enough to offset our associated operating expenses. We may incur significant losses in the future for a number of reasons, including the other risks described herein, and unforeseen expenses, difficulties, complications and delays and other unknown events. If we are unable to achieve and sustain profitability, or if we incur significant losses, the value of our business and common stock may significantly decrease.

Current wording

We have incurred net losses in each year since our inception, including net losses of $96.9 million, $1.0 billion and $1.3 billion in the nine months ended September 30, 2024 and the years ended December 31, 2023 and 2022, respectively. We had an accumulated deficit of $7.1 billion as of September 30, 2024. We will need to generate and sustain increased revenue levels, and manage our operating expenses, in future periods to become profitable and achieve our stated profitability goals and, even if we do, we may not be able to maintain or increase our level of profitability. We expect to continue to expend substantial financial and other resources on, among other things: investments in our engineering team; improvements in security and data protection; the development of new products, features and functionality and enhancements to our platform; sales and marketing; expansion of our operations and infrastructure, both domestically and internationally; and general administration, including legal, accounting and other expenses related to being a public company. Our efforts to grow our business may be more costly than we expect, and we may not be able to increase our revenue enough to offset our associated operating expenses. We may incur significant losses in the future for a number of reasons, including the other risks described herein, and unforeseen expenses, difficulties, complications and delays and other unknown events. If we are unable to achieve and sustain profitability, or if we incur significant losses, the value of our business and common stock may significantly decrease.

Previous wording

We currently interconnect with fixed and mobile network service providers around the world to enable the use by our customers of our products over their networks. Although we are in the process of acquiring authorization in many countries for direct access to phone numbers and for the provision of voice and messaging services on the networks of fixed and mobile network service providers, we expect that we will continue to rely on network service providers for these services. Where we do not have direct access to phone numbers, our reliance on network service providers has reduced our operating flexibility, ability to make timely service changes and control quality of service. In addition, the fees that we are charged by network service providers may change daily or weekly and we can be subject to the imposition of additional fees, penalties, or other administrative or technical requirements, and even service interruption, due to regulatory, competitive, or other industry related changes over which we have little to no control. We typically do not change our customers’ pricing as rapidly and, as a result, such fee increases could adversely affect our business and results of operations.

Current wording

We currently interconnect with fixed and mobile network service providers around the world to enable our customers to use our products over their networks. Although we are in the process of acquiring authorization in many countries for direct access to phone numbers and for the provision of voice and messaging services on the networks of fixed and mobile network service providers, we expect that we will continue to rely on network service providers for these services. Where we do not have direct access to phone numbers, our reliance on network service providers has reduced our operating flexibility, ability to make timely service changes and control quality of service. In addition, the fees that we are charged by network service providers may change daily or weekly and we can be subject to the imposition of additional fees, penalties, or other administrative or technical requirements, and even service interruption, due to regulatory, competitive, or other industry related changes over which we have little to no control. We typically do not change our customers’ pricing as rapidly and, as a result, such fee increases could adversely affect our business and results of operations.

Previous wording

In the six months ended June 30, 2024 and the years ended December 31, 2023 and 2022, we derived 35%, 34% and 34% of our revenue from customer accounts located outside the United States, respectively. The future success of our business will depend, in part, on our ability to strategically maintain and expand our customer base worldwide. Operating in international markets requires significant resources and management attention and subjects us to regulatory, economic and political risks in addition to those we face in the United States.

Current wording

In the nine months ended September 30, 2024 and the years ended December 31, 2023 and 2022, we derived 35%, 34% and 34% of our revenue from customer accounts located outside the United States, respectively. The future success of our business will depend, in part, on our ability to strategically maintain and expand our customer base worldwide. Operating in international markets requires significant resources and management attention and subjects us to regulatory, economic and political risks in addition to those we face in the United States.

Previous wording

Also, due to costs from our international operations and network service provider fees outside of the United States, which generally are higher than domestic rates, our Communications gross margin for international customers is typically lower than our Communications gross margin for domestic customers. As a result, our Communications gross margin has been, and may continue to be, adversely impacted by our international operations. Our failure to manage any of these risks successfully could harm our international operations, and adversely affect our business, results of operations and financial condition.

Current wording

Also, due to costs from our international operations and network service provider fees outside of the United States, which generally are higher than domestic rates, our gross margin for messages terminating internationally is typically lower than our gross margin for messages terminating domestically. As a result, our Communications gross margin has been, and may continue to be, adversely impacted by our international operations. Our failure to manage any of these risks successfully could harm our international operations, and adversely affect our business, results of operations and financial condition.

Previous wording

In the six months ended June 30, 2024 and the years ended December 31, 2023 and 2022, our 10 largest Active Customer Accounts generated an aggregate of 10%, 10% and 12% of our revenue, respectively. If any of these customers, or other large customers, do not continue to use our products, use fewer of our products, or use our products in a more limited capacity, or not at all, our business, results of operations and financial condition could be adversely affected. Additionally, the usage of our products by customers that do not have long-term contracts with us may change between periods. Those with no long-term contract with us may reduce or fully terminate their usage of our products at any time without notice, penalty or termination charges, which may adversely impact our results of operations.

Current wording

In the nine months ended September 30, 2024 and the years ended December 31, 2023 and 2022, our 10 largest Active Customer Accounts generated an aggregate of 10%, 10% and 12% of our revenue, respectively. If any of these customers, or other large customers, do not continue to use our products, use fewer of our products, or use our products in a more limited capacity, or not at all, our business, results of operations and financial condition could be adversely affected. Additionally, the usage of our products by customers that do not have long-term contracts with us may change between periods. Those with no long-term contract with us may reduce or fully terminate their usage of our products at any time without notice, penalty or termination charges, which may adversely impact our results of operations.

Previous wording

From time to time we may also divest or stop investing in certain businesses or products. For example, in the second quarter of 2023, we sold our Internet of Things assets and liabilities, and in the third quarter of 2023, we sold our ValueFirst business. The sale of a business or product has in the past and may in the future require us to restructure operations and/or terminate employees, and could expose us to unanticipated ongoing obligations and liabilities, including as a result of our indemnification obligations. During the pendency of a divestiture, we may be subject to risks related to a decline in the business, loss of employees, customers, or suppliers, and that the transaction may not close, which could have an adverse effect on the business to be divested and on us. Additionally, we are winding down the software component of our Zipwhip business in 2024, which we expect will negatively impact revenue growth rates in 2024. Divestitures or winding down businesses or products could disrupt our customer, supplier and/or employee relationships and divert the time and attention of our management and employees. Additionally, we may experience harm to our financial results, including loss of revenue, and we may not realize the expected benefits and cost savings of these actions and our operating results may be adversely impacted.

Current wording

From time to time we may also divest or stop investing in certain businesses or products. For example, in the second quarter of 2023, we sold our Internet of Things assets and liabilities, and in the third quarter of 2023, we sold our ValueFirst business. The sale of a business or product has in the past and may in the future require us to restructure operations and/or terminate employees, and could expose us to unanticipated ongoing obligations and liabilities, including as a result of our indemnification obligations. During the pendency of a divestiture, we may be subject to risks related to a decline in the business, loss of employees, customers, or suppliers, and that the transaction may not close, which could have an adverse effect on the business to be divested and on us. Additionally, we expect that the wind-down of the software component of our Zipwhip business in 2024 will negatively impact our revenue growth rates in the fourth quarter of 2024. Divestitures or winding down businesses or products could disrupt our customer, supplier and/or employee relationships and divert the time and attention of our management and employees. Additionally, we may experience harm to our financial results, including loss of revenue, and we may not realize the expected benefits and cost savings of these actions and our operating results may be adversely impacted.

Previous wording

We and our customers are subject to numerous domestic (for example, the California Consumer Privacy Act of 2018 (“CCPA”)) and foreign (for example, the General Data Protection Regulation (“GDPR”) in the European Union (“EU”)) privacy, data protection and data security laws and regulations that restrict the collection, use, disclosure and processing of personal information, including financial and health data. These laws and regulations are expanding globally, evolving, are being tested in courts, may result in increasing regulatory and public scrutiny of our practices relating to personal information and may increase our exposure to regulatory enforcement action, sanctions and litigation. The breadth and depth of changes in data protection obligations has required significant time and resources, including a review of our technology and systems currently in use against the requirements of GDPR.

Current wording

We and our customers are subject to numerous domestic (for example, the California Consumer Privacy Act (“CCPA”)) and foreign (for example, the General Data Protection Regulation (“GDPR”) in the European Union (“EU”)) privacy, data protection and data security laws and regulations that restrict the collection, use, disclosure and processing of personal information, including financial and health data. These laws and regulations are expanding globally, evolving, and being tested in courts, may result in increasing regulatory and public scrutiny of our practices relating to personal information and may increase our exposure to regulatory enforcement action, sanctions and litigation. The breadth and depth of changes in data protection obligations has required significant time and resources, including a review of our technology and systems currently in use against the requirements of GDPR.

Previous wording

California residents (both consumers and employees) certain rights related to their personal information. The CCPA allows for statutory fines for noncompliance. Similar laws have been enacted in 18 other states with 6 laws currently in effect and the remainder becoming effective later in 2024, 2025 and 2026, respectively. Numerous other states, and the U.S. federal government, also have proposed general privacy legislation recently. Additionally, other states have proposed, and in certain cases enacted, other laws and regulations addressing privacy and data security, such as Washington’s My Health, My Data Act, which includes a private right of action. If we become subject to new privacy, data protection and data security laws, the risk of enforcement action against us could increase because we may become subject to additional obligations, and the number of individuals or entities that can initiate actions against us may increase, including individuals, via a private right of action, and state actors.

Current wording

The CCPA (as amended by the California Privacy Rights Act of 2020) imposes obligations on businesses to which it applies. These obligations include, but are not limited to, providing specific disclosures in privacy notices and affording California residents (both consumers and employees) certain rights related to their personal information. The CCPA allows for statutory fines for noncompliance. Similar laws have been enacted in 18 other states with 7 laws currently in effect and the remainder becoming effective later in 2024, 2025 and 2026. Numerous other states, and the U.S. federal government, also have proposed general privacy legislation recently. Additionally, other states have proposed, and in certain cases enacted, other laws and regulations addressing privacy and data security, such as Washington’s My Health, My Data Act, which includes a private right of action. If we become subject to new privacy, data protection and data security laws, the risk of enforcement action against us could increase because we may become subject to additional obligations, and the number of individuals or entities that can initiate actions against us may increase, including individuals, via a private right of action, and state actors.

Previous wording

Outside the United States, an increasing number of laws, regulations, and industry standards apply to privacy, data protection and data security. For example, the GDPR, the United Kingdom’s Data Protection Act 2018 (“UK GDPR”) and the new Swiss Federal Act on Data Protection, impose strict requirements for processing the personal information of individuals protected by the legislation, whether their data is processed within or outside the European Economic Area (“EEA”), the United Kingdom (“UK”) and Switzerland, respectively (such jurisdictions, collectively, “Europe”). For example, the GDPR imposes significant requirements regarding the processing of individuals’ personal information, including in relation to transparency, lawfulness of processing, individuals’ privacy rights, compliant contracting, data minimization, data breach notification, data re-usage, data retention, security of processing and international data transfers. Under the GDPR and UK GDPR, government regulators may impose temporary or definitive bans on data processing or data transfers, require a company to delete data, as well as impose significant fines, potentially ranging up to 20 million Euros under the GDPR, 17.5 million GBP under the UK GDPR, or 4% of a company’s worldwide revenue, whichever is higher. Further, individuals may initiate compensation claims or litigation related to our processing of their personal information. Other privacy laws in Europe impose strict requirements around marketing communications and the deployment of cookies on users’ devices. As another example, Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados Pessoais, or “LGPD”) (Law No. 13,709/2018) may apply to our operations. The LGPD broadly regulates processing of personal information of individuals in Brazil and imposes compliance obligations and penalties comparable to those of the GDPR. Additionally, we expect an increase in the regulation of the use of AI and ML in products and services. For example, in Europe, the Artificial Intelligence Act (“AI Act”), once adopted, will impose onerous obligations related to the development, placing on the market and use of AI-related systems. We may have to change our business practices to comply with obligations under these or other new and evolving regimes.

Current wording

Outside the United States, an increasing number of laws, regulations, and industry standards apply to privacy, data protection and data security. For example, the GDPR, the United Kingdom’s General Data Protection Regulation and Data Protection Act 2018 (“UK GDPR”) and the new Swiss Federal Act on Data Protection, impose strict requirements for processing the personal information of individuals protected by the legislation, whether their data is processed within or outside the European Economic Area (“EEA”), the United Kingdom (“UK”) and Switzerland, respectively (such jurisdictions, collectively, “Europe”). For example, the GDPR imposes significant requirements regarding the processing of individuals’ personal information, including in relation to transparency, lawfulness of processing, individuals’ privacy rights, compliant contracting, data minimization, data breach notification, data re-usage, data retention, security of processing and international data transfers. Under the GDPR and UK GDPR, government regulators may impose temporary or definitive bans on data processing or data transfers, require a company to delete data, as well as impose significant fines, potentially ranging up to 20 million Euros under the GDPR, 17.5 million GBP under the UK GDPR, or 4% of a company’s worldwide revenue, whichever is higher. Further, individuals may initiate compensation claims or litigation related to our processing of their personal information. Other privacy laws in Europe impose strict requirements around marketing communications and the deployment of cookies on users’ devices. As another example, Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados Pessoais, or “LGPD”) (Law No. 13,709/2018) may apply to our operations. The LGPD broadly regulates processing of personal information of individuals in Brazil and imposes compliance obligations and penalties comparable to those of the GDPR. Additionally, we expect an increase in the regulation of the use of AI and ML in products and services. For example, in Europe, the Artificial Intelligence Act (“AI Act”), once in force, will impose onerous obligations related to the development, placing on the market and use of AI-related systems. We may have to change our business practices to comply with obligations under these or other new and evolving regimes.

Previous wording

Further, the interpretation and application of new domestic and foreign laws and regulations in many cases is uncertain, and our legal and regulatory obligations in such jurisdictions are subject to frequent and unexpected changes, including the potential for various regulatory or other governmental bodies to enact new or additional laws or regulations, to issue rulings that invalidate prior laws or regulations, or to increase penalties significantly. For example, the EU’s Digital Services Act, Digital Markets Act and Data Act recently entered into force. Also, the UK Parliament’s on-going debate of the Data Protection and Digital Information (No. 2) Bill which, if enacted, will introduce certain changes to the UK’s data protection laws.

Current wording

Further, the interpretation and application of new domestic and foreign laws and regulations in many cases is uncertain, and our legal and regulatory obligations in such jurisdictions are subject to frequent and unexpected changes, including the potential for various regulatory or other governmental bodies to enact new or additional laws or regulations, to issue rulings that invalidate prior laws or regulations, or to increase penalties significantly. For example, the EU’s Digital Services Act, Digital Markets Act and Data Act entered into force in 2024.

Previous wording

Similarly, with our registration as an interconnected VoIP provider for certain products with the Federal Communications Commission (“FCC”), we also must comply with privacy laws associated with customer proprietary network information rules in the United States. If we fail or are perceived to have failed to maintain compliance with these requirements, we could be subject to regulatory audits, civil and criminal penalties, fines and breach of contract claims, as well as reputational damage, which could impact the willingness of customers to do business with us.

Current wording

Similarly, with our registration as an interconnected VoIP provider for certain products with the Federal Communications Commission (“FCC”), we also must comply with privacy laws associated with customer proprietary network information rules in the United States. If we fail or are perceived to have failed to maintain compliance with these requirements, we could be subject to regulatory audits or inquiries, civil and criminal penalties, fines and breach of contract claims, as well as reputational damage, which could impact the willingness of customers to do business with us.

Previous wording

For example, we outsource a substantial majority of our cloud infrastructure to Amazon Web Services (“AWS”), which hosts our products and platform. Our customers need to be able to reliably access our platform, without material interruption or degradation of performance. AWS runs its own platform that we access, and we are, therefore, vulnerable to service interruptions at AWS. We have experienced, and expect that we may experience interruptions, delays and outages in service and availability in the future due to a variety of factors, including infrastructure changes, human or software errors, website hosting disruptions and capacity constraints. Capacity constraints could be caused by a number of potential causes, including technical failures, natural disasters, public health epidemics or pandemics, fraud or security attacks. In addition, if our security, or that of AWS, is compromised, our products or platform become unavailable, or if our users are unable to use our products within a reasonable amount of time or at all, any one of which may be due to circumstances beyond our control, then our business, results of operations and financial condition could be adversely affected. In some instances, we may encounter difficulties or otherwise not be able to identify the cause or causes of these performance problems within a period of time acceptable to our customers. It may become increasingly difficult to maintain and improve our platform performance and to troubleshoot performance issues, especially during peak usage times, as our products become more complex and the usage of our products increases. To the extent that we do not effectively address capacity constraints, either through AWS or alternative providers of cloud infrastructure, or through other factors that may result in interruptions, delays and outages in service and availability of our products and/or services, our business, results of operations and financial condition may be adversely affected. In addition, if Amazon.com, Inc. (“Amazon”) requires that we comply with unfavorable terms in order to continue our use of AWS or if Amazon implements any changes in its service levels for AWS, the changes may adversely affect our ability to meet our customers’ requirements, result in negative publicity which could harm our reputation and brand and may adversely affect the usage of our platform.

Current wording

For example, we outsource a substantial majority of our cloud infrastructure to Amazon Web Services (“AWS”), which hosts our products and platform. Our customers need to be able to reliably access our platform, without material interruption or degradation of performance. AWS runs its own platform that we access, and we are, therefore, vulnerable to service interruptions at AWS. We have experienced, and expect that we may experience interruptions, delays and outages in service and availability in the future due to a variety of factors, including infrastructure changes, human or software errors, website hosting disruptions and capacity constraints. Capacity constraints could be caused by a number of potential causes, including technical failures, natural disasters, public health epidemics or pandemics, fraud or security attacks. In addition, if our security, or that of AWS, is compromised, if our products, platform or customer data become unavailable, or if our users are unable to use our products within a reasonable amount of time or at all, any one of which may be due to circumstances beyond our control, then our business, results of operations and financial condition could be adversely affected. In some instances, we may encounter difficulties or otherwise not be able to identify the cause or causes of these performance problems within a period of time acceptable to our customers. It may become increasingly difficult to maintain and improve our platform performance and to troubleshoot performance issues, especially during peak usage times, as our products become more complex and the usage of our products increases. To the extent that we do not effectively address capacity constraints, either through AWS or alternative providers of cloud infrastructure, or through other factors that may result in interruptions, delays and outages in service and availability of our products and/or services, our business, results of operations and financial condition may be adversely affected. In addition, if Amazon.com, Inc. (“Amazon”) requires that we comply with unfavorable terms in order to continue our use of AWS or if Amazon implements any changes in its service levels for AWS, the changes may adversely affect our ability to meet our customers’ requirements, result in negative publicity which could harm our reputation and brand and may adversely affect the usage of our platform.

Previous wording

We continue to incorporate additional AI solutions and features into our platform and our business, including CustomerAI, and these solutions and features may become more important to our operations or to our future growth over time. We expect to rely on AI solutions and features to help drive future growth in our business, but there can be no assurance that we will realize the desired or anticipated benefits from AI. Our investments in AI solutions and features have and may continue to negatively impact our cost of revenue and gross margins, particularly for our Segment business, until we are able to increase revenue enough to offset these investments. We may also fail to properly implement or market our AI solutions and features. Our competitors or other third parties may incorporate AI into their products, offerings, and solutions more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations. Our ability to effectively implement and market our AI solutions and features will depend, in part, on our ability to attract and retain employees with AI expertise, and we expect significant competition for professionals with the skills and technical knowledge that we will require. Additionally, our offerings based on AI may expose us to additional claims, demands and proceedings by private parties and regulatory authorities and subject us to legal liability as well as brand and reputational harm. For example, our business, financial condition and results of operations may be adversely affected if content or recommendations that AI solutions or features assist in producing are or are alleged to be deficient, inaccurate, or biased, or if such content, recommendations, solutions, or features or their development or deployment (including the collection, use, or other processing of data used to train or create such AI solutions or features) are found to have or alleged to have infringed upon or misappropriated third-party intellectual property rights or violated applicable laws, regulations, or other actual or asserted legal or contractual obligations to which we are or may become subject. The legal, regulatory, and policy environments around AI are evolving rapidly, and we may become subject to new and evolving legal and other obligations. These and other developments may require us to make significant changes to our use of AI, including by limiting or restricting our use of AI, and which may require us to make significant changes to our policies and practices, which may necessitate expenditure of significant time, expense, and other resources. AI also presents emerging ethical issues, and if our use of AI becomes controversial, we may experience brand or reputational harm.

Current wording

We continue to incorporate additional AI solutions and features into our platform and our business, and these solutions and features may become more important to our operations or to our future growth over time. We expect to rely on AI solutions and features to help drive future growth in our business, but there can be no assurance that we will realize the desired or anticipated benefits from AI. Our investments in AI solutions and features have and may continue to negatively impact our cost of revenue and gross margins until we are able to increase revenue enough to offset these investments. We may also fail to properly implement or market our AI solutions and features. Our competitors or other third parties may incorporate AI into their products, offerings, and solutions more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations. Our ability to effectively implement and market our AI solutions and features will depend, in part, on our ability to attract and retain employees with AI expertise, and we expect significant competition for professionals with the skills and technical knowledge that we will require. Additionally, our offerings based on AI may expose us to additional claims, demands and proceedings by private parties and regulatory authorities and subject us to legal liability as well as brand and reputational harm. For example, our business, financial condition and results of operations may be adversely affected if content or recommendations that AI solutions or features assist in producing are or are alleged to be deficient, inaccurate, or biased, or if such content, recommendations, solutions, or features or their development or deployment (including the collection, use, or other processing of data used to train or create such AI solutions or features) are found to have or alleged to have infringed upon or misappropriated third-party intellectual property rights or violated applicable laws, regulations, or other actual or asserted legal or contractual obligations to which we are or may become subject. The legal, regulatory, and policy environments around AI are evolving rapidly, and we may become subject to new and evolving legal and other obligations. These and other developments may require us to make significant changes to our use of AI, including by limiting or restricting our use of AI, and which may require us to make significant changes to our policies and practices, which may necessitate expenditure of significant time, expense, and other resources. AI also presents emerging ethical issues, and if our use of AI becomes controversial, we may experience brand or reputational harm.

Previous wording

As a provider of communications products, we are subject to existing or potential FCC regulations relating to privacy, telecommunications, consumer protection and other requirements. In addition, the extension of telecommunications regulations to our non-interconnected VoIP services could result in additional federal and state regulatory obligations and taxes. We are also in discussions with certain jurisdictions regarding potential sales and other taxes for prior periods that we may owe. In the event any of these jurisdictions disagree with management’s assumptions and analysis, the assessment of our tax exposure could differ materially from management's current estimates, which may increase our costs of doing business and negatively affect the prices our customers pay for our services. If we do not comply with FCC rules and regulations, we could be subject to FCC enforcement actions, fines, loss of licenses and possibly restrictions on our ability to operate or offer certain of our products. For example, on January 25, 2023, we received a “cease-and-desist” letter from the FCC related to reported fraudulent traffic on our messaging platform. We subsequently removed the identified traffic. In response to written questions from the FCC, we sent a follow-up letter to the agency on February 10, 2023 detailing our fraud mitigation practices and various planned improvements to reduce future risks. There has been no further communication from the agency on this matter. Any enforcement action by the FCC, which may be a public process, would hurt our reputation in the industry, could erode customer trust, possibly impair our ability to sell our VoIP, other telecommunications products and/or other services to customers and could adversely affect our business, results of operations and financial condition.

Current wording

As a provider of communications products, we are subject to existing or potential FCC and state regulations relating to privacy, telecommunications, consumer protection and other requirements. In addition, the extension of telecommunications regulations to our non-interconnected VoIP services could result in additional federal and state regulatory obligations and taxes. We are also in discussions with certain jurisdictions regarding potential sales and other taxes for prior periods that we may owe. In the event any of these jurisdictions disagree with management’s assumptions and analysis, the assessment of our tax exposure could differ materially from management's current estimates, which may increase our costs of doing business and negatively affect the prices our customers pay for our services. If we do not comply with FCC rules and regulations, we could be subject to FCC enforcement actions, fines, loss of licenses and possibly restrictions on our ability to operate or offer certain of our products. For example, on January 25, 2023, we received a “cease-and-desist” letter from the FCC related to reported fraudulent traffic on our messaging platform. We subsequently removed the identified traffic. In response to written questions from the FCC, we sent a follow-up letter to the agency on February 10, 2023 detailing our fraud mitigation practices and various planned improvements to reduce future risks. There has been no further communication from the agency on this matter. Any enforcement action by the FCC, which may be a public process, would hurt our reputation in the industry, could erode customer trust, possibly impair our ability to sell our VoIP, other telecommunications products and/or other services to customers and could adversely affect our business, results of operations and financial condition.

Previous wording

In addition, Congress and the FCC are attempting to mitigate the prevalence of robocalls by requiring participation in a technical standard called Signature-based Handling of Asserted Information Using toKENs (“SHAKEN”) and Secure Telephone Identity Revisited (“STIR”) (together, “SHAKEN/STIR”), which allows voice carriers to authenticate caller ID, prohibiting malicious spoofing. The FCC also has open proceedings relating to robocalls and robotexts. While we do not currently expect the FCC to require more than the robocall and robotexting measures that we have started to implement, if the FCC were to implement new regulations or requirements that limited the types of customers allowed to use our platform or overly burdensome requirements for our customers, those actions could limit the customers that we are able to serve.

Current wording

In addition, Congress and the FCC are attempting to mitigate the prevalence of robocalls by requiring participation in a technical standard called Signature-based Handling of Asserted Information Using toKENs (“SHAKEN”) and Secure Telephone Identity Revisited (“STIR”) (together, “SHAKEN/STIR”), which allows voice carriers to authenticate caller ID, prohibiting malicious spoofing. The FCC has implemented orders and has open proceedings relating to robocalls and robotexts. While we do not currently expect the FCC to require more than the robocall and robotexting measures that we have started to implement, if the FCC were to implement new regulations or requirements that limited the types of customers allowed to use our platform or overly burdensome requirements for our customers, those actions could limit the customers that we are able to serve.

Previous wording

Our international operations are subject to country-specific governmental regulation and related actions that have increased and will continue to increase our compliance costs or impact our products and platform or prevent us from offering or providing our products in certain countries. Moreover, the regulation of CPaaS companies like us is continuing to evolve internationally and many existing regulations may not fully contemplate the CPaaS business model or how they fit into the communications regulatory framework. As a result, interpretation and enforcement of regulations often involve significant uncertainties. In many countries, including those in the European Union, a number of our products or services are subject to licensing and communications regulatory requirements which increases the level of scrutiny and enforcement by regulators. Future legislative, regulatory or judicial actions impacting CPaaS services could also increase the cost and complexity of compliance and expose us to liability. For example, in some countries, some or all of the services we offer are not considered regulated telecommunications services, while in other countries they are subject to telecommunications regulations, including but not limited to payment into universal service funds, licensing fees, provision of emergency services, provision of information to support emergency services and number portability. Failure to comply with these regulations could result in our Company being issued remedial directions to undertake independent audits and implement effective systems, processes and practices to ensure compliance, significant fines or being prohibited from providing telecommunications services in a jurisdiction.

Current wording

Our international operations are subject to country-specific governmental regulation and related actions that have increased and will continue to increase our compliance costs or impact our products and platform or prevent us from offering or providing our products in certain countries. Moreover, the regulation of CPaaS companies like us is continuing to evolve internationally and many existing regulations may not fully contemplate the CPaaS business model or how they fit into the communications regulatory framework. As a result, interpretation and enforcement of regulations often involve significant uncertainties. In many countries, including those in the European Union, a number of our products or services are subject to licensing and communications regulatory requirements which increases the level of scrutiny and enforcement by regulators. Future legislative, regulatory or judicial actions impacting CPaaS services could also increase the cost and complexity of compliance and expose us to liability. For example, in some countries, some or all of the services we offer are not considered regulated telecommunications services, while in other countries they are subject to telecommunications regulations, including but not limited to payment into universal service funds, licensing fees, provision of emergency services, provision of information to support emergency services and number portability as well as requirements to combat scams and fraud. Failure to comply with these regulations could result in our Company being issued remedial directions to undertake independent audits and implement effective systems, processes and practices to ensure compliance, significant fines or being prohibited from providing telecommunications services in a jurisdiction.

Previous wording

In addition, in order to obtain allocations of, assign and retain Numbering Resources in the EU or certain other regions, we are often required to be licensed by local telecommunications regulatory authorities, some of which have been increasingly monitoring and regulating the categories of Numbering Resources that are eligible for provisioning to our customers. We have obtained licenses and are in the process of obtaining licenses in various countries in which we do business, but in some countries, the regulatory regime around provisioning of Numbering Resources is unclear, subject to change over time, and sometimes may conflict from jurisdiction to jurisdiction. Furthermore, these regulations and governments’ approach to their enforcement, as well as our products and services, are still evolving and we may be unable to maintain compliance with applicable regulations, or enforce compliance by our customers, on a timely basis or without significant cost. Also, compliance with these types of regulation may require changes in products or business practices that result in reduced revenue. Due to our or our customers’ assignment and/or use of Numbering Resources in certain countries in a manner that may violate applicable rules and regulations, we have been subjected to government inquiries and audits, and may in the future be subject to significant penalties or further governmental action, and in extreme cases, may be precluded from doing business in that particular country. We have also been forced to reclaim Numbering Resources from our customers as a result of certain events of non-compliance. These reclamations result in loss of customers, loss of revenue, reputational harm, erosion of customer trust, and may also result in breach of contract claims, all of which could have an adverse effect on our business, results of operations and financial condition.

Current wording

In addition, in order to obtain allocations of, assign and retain Numbering Resources in the EU or certain other regions, we are often required to be licensed by local telecommunications regulatory authorities, some of which have been increasingly monitoring and regulating the categories of Numbering Resources that are eligible for provisioning to our customers, including restricting the use of types of numbers for particular use cases. We have obtained licenses and are in the process of obtaining licenses in various countries in which we do business, but in some countries, the regulatory regime around provisioning of Numbering Resources is unclear, subject to change over time, and sometimes may conflict from jurisdiction to jurisdiction. Furthermore, these regulations and governments’ approach to their enforcement, as well as our products and services, are still evolving and we may be unable to maintain compliance with applicable regulations, or enforce compliance by our customers, on a timely basis or without significant cost. Also, compliance with these types of regulation may require changes in products or business practices that result in reduced revenue. Due to our or our customers’ assignment and/or use of Numbering Resources in certain countries in a manner that may violate applicable rules and regulations, we have been subjected to government inquiries and audits, and may in the future be subject to significant penalties or further governmental action, and in extreme cases, may be precluded from doing business in that particular country. We have also been forced to reclaim Numbering Resources from our customers as a result of certain events of non-compliance. These reclamations result in loss of customers, loss of revenue, reputational harm, erosion of customer trust, and may also result in breach of contract claims, all of which could have an adverse effect on our business, results of operations and financial condition.

Previous wording

Our customers’ and other users’ violation of our policies or other misuse of our platform to transmit unauthorized, offensive or illegal messages, spam, phishing scams, and website links to harmful applications or for other fraudulent or illegal activity could damage our reputation, and we may face a risk of litigation and liability for illegal activities on our platform and unauthorized, inaccurate, or fraudulent information distributed via our platform.

Current wording

Our customers’ and other users’ violation of our policies or other misuse of our platform to transmit unwanted, offensive or illegal messages, spam, phishing scams, and website links to harmful applications or for other fraudulent or illegal activity could damage our reputation, and we may face a risk of litigation and liability for illegal activities on our platform and unauthorized, inaccurate, or fraudulent information distributed via our platform.

Previous wording

Moreover, certain customers may use our platform to transmit unauthorized, offensive or illegal messages, calls, spam, phishing scams, and website links to harmful applications, reproduce and distribute copyrighted material or the trademarks of others without permission, and report inaccurate or fraudulent data or information. These issues also arise with respect to a portion of those users who use our platform on a free trial basis or upon initial use. These actions are in violation of our policies, in particular, our Acceptable Use Policy. For example, on January 25, 2023, we received a cease-and-desist letter from the FCC alleging that we were transmitting illegal robocall traffic that originated from an independent software vendor customer and their end user customer. In response, we suspended the customers’ accounts and sent the FCC a follow-up letter on February 10, 2023 detailing our fraud mitigation practices and various planned improvements to reduce future risks. There has been no further communication from the agency on this matter. Failure to respond appropriately to the FCC’s allegations could allow domestic carriers to begin blocking all voice traffic transmitting from our network. However, our efforts to defeat spamming attacks, illegal robocalls and other fraudulent activity will not prevent all such attacks and activity. Such use of our platform could damage our reputation and we could face claims for damages, regulatory enforcement, copyright or trademark infringement, defamation, negligence, or fraud. Furthermore, enacting more stringent controls on our customers’ use of our platform to combat such violations of our Acceptable Use Policy could increase friction for our legitimate customers and decrease their use of our platform.

Current wording

Moreover, certain customers may use our platform to transmit unwanted, offensive or illegal messages, calls, spam, phishing scams, and website links to harmful applications, reproduce and distribute copyrighted material or the trademarks of others without permission, and report inaccurate or fraudulent data or information. These issues also arise with respect to a portion of those users who use our platform on a free trial basis or upon initial use. These actions are in violation of our policies, in particular, our Acceptable Use Policy. For example, on January 25, 2023, we received a cease-and-desist letter from the FCC alleging that we were transmitting illegal robocall traffic that originated from an independent software vendor customer and their end user customer. In response, we suspended the customers’ accounts and sent the FCC a follow-up letter on February 10, 2023 detailing our fraud mitigation practices and various planned improvements to reduce future risks. There has been no further communication from the agency on this matter. Failure to respond appropriately to the FCC’s allegations could allow domestic carriers to begin blocking all voice traffic transmitting from our network. However, our efforts to defeat spamming attacks, illegal robocalls and other fraudulent activity will not prevent all such attacks and activity. Such use of our platform could damage our reputation and we could face claims for damages, regulatory enforcement, copyright or trademark infringement, defamation, negligence, or fraud. Furthermore, enacting more stringent controls on our customers’ use of our platform to combat such violations of our Acceptable Use Policy could increase friction for our legitimate customers and decrease their use of our platform.

Previous wording

The current legislative and regulatory landscape regarding the regulation of the Internet is subject to uncertainty. For example, in January 2018, the FCC released an order that repealed the “open Internet rules,” often known as “net neutrality,” which could affect the services used by us and our customers. In response to this decision California and a number of states implemented their own net neutrality rules which mirrored parts of the repealed federal regulations. In April 2024, the FCC voted to reinstate substantially all of the net neutrality rules that had been in place prior to the 2018 repeal. Those rules are under review by a federal appeals court. In addition, the results of the 2024 presidential election may influence whether the FCC maintains, modifies or, again, repeals these net neutrality rules. If the net neutrality rules are repealed, we cannot predict whether internet service providers may limit our users’ ability to access our platform or may make our platform a less attractive alternative compared to our competitors’ applications. In a related regulatory context, while the EU requires equal access to internet content, under its Digital Single Market initiative the EU may impose additional requirements that could increase our costs. If new FCC, EU, or other rules directly or inadvertently impose costs on online providers like our business, our expenses may rise. Were any of these outcomes to occur, our ability to retain existing users or attract new users may be impaired, our costs may increase, and our business may be significantly harmed.

Current wording

The current legislative and regulatory landscape regarding the regulation of the Internet is subject to uncertainty. For example, in January 2018, the FCC released an order that repealed the “open Internet rules,” often known as “net neutrality,” which could affect the services used by us and our customers. In response to this decision California and a number of states implemented their own net neutrality rules which mirrored parts of the repealed federal regulations. In April 2024, the FCC voted to reinstate substantially all of the net neutrality rules that had been in place prior to the 2018 repeal. Those rules have temporarily been blocked and remain under review by a federal appeals court. In addition, the results of the 2024 presidential election may influence whether the FCC maintains, modifies or, again, repeals these net neutrality rules. If the net neutrality rules are repealed, we cannot predict whether internet service providers may increase fees, limit our users’ ability to access our platform or may make our platform a less attractive alternative compared to our competitors’ applications. In a related regulatory context, while the EU requires equal access to internet content, under its Digital Single Market initiative the EU may impose additional requirements that could increase our costs. If new FCC, EU, or other rules directly or inadvertently impose costs on online providers like our business, our expenses may rise. Were any of these outcomes to occur, our ability to retain existing users or attract new users may be impaired, our costs may increase, and our business may be significantly harmed.

Previous wording

We are also subject to U.S. and foreign anti-corruption and anti-bribery laws, including the FCPA, the UK Bribery Act 2010, and other anti-corruption laws and regulations in the countries in which we conduct activities. Anti-corruption laws are interpreted broadly and generally prohibit companies, their employees, agents, representatives, business partners, and third-party intermediaries from directly or indirectly authorizing, offering, or providing, improper payments or things of value to recipients in the public or private sector, and also require that we maintain accurate books and records and adequate internal controls and compliance procedures designed to prevent violations. We sometimes leverage third parties to sell our products and conduct our business abroad. We, our employees, agents, representatives, business partners and third-party intermediaries may have direct or indirect interactions with officials and employees of government agencies or state-owned or affiliated entities and we may be held liable for the corrupt or other illegal activities of these employees, agents, representatives, business partners or third-party intermediaries even if we do not explicitly authorize such activities. It is possible that our employees, agents, representatives, business partners or third-party intermediaries could fail to comply with our policies and applicable laws and regulations, for which we may ultimately be held responsible. Any allegations or violation of the FCPA or other applicable anti-bribery and anti-corruption laws and anti-money laundering laws could result could result in whistleblower complaints, sanctions, settlements, prosecution, enforcement actions, significant fines and penalties, damages, adverse media coverage, investigations, loss of export privileges, severe criminal or civil sanctions, or suspension or debarment from government contracts, all of which may have an adverse effect on our reputation, business, results of operations, and prospects. Responding to any investigation or action would likely result in a materially significant diversion of management’s attention and resources, significant defense costs and other professional fees.

Current wording

We are also subject to U.S. and foreign anti-corruption and anti-bribery laws, including the FCPA, the UK Bribery Act 2010, and other anti-corruption laws and regulations in the countries in which we conduct activities. Anti-corruption laws are interpreted broadly and generally prohibit companies, their employees, agents, representatives, business partners, and third-party intermediaries from directly or indirectly authorizing, offering, or providing, improper payments or things of value to recipients in the public or private sector, and also require that we maintain accurate books and records and adequate internal controls and compliance procedures designed to prevent violations. We sometimes leverage third parties to sell our products and conduct our business abroad. We, our employees, agents, representatives, business partners and third-party intermediaries may have direct or indirect interactions with officials and employees of government agencies or state-owned or affiliated entities and we may be held liable for the corrupt or other illegal activities of these employees, agents, representatives, business partners or third-party intermediaries even if we do not explicitly authorize such activities. It is possible that our employees, agents, representatives, business partners or third-party intermediaries could fail to comply with our policies and applicable laws and regulations, for which we may ultimately be held responsible. Any allegations or violation of the FCPA or other applicable anti-bribery and anti-corruption laws and anti-money laundering laws could result in whistleblower complaints, sanctions, settlements, prosecution, enforcement actions, significant fines and penalties, damages, adverse media coverage, investigations, loss of export privileges, severe criminal or civil sanctions, or suspension or debarment from government contracts, all of which may have an adverse effect on our reputation, business, results of operations, and prospects. Responding to any investigation or action would likely result in a materially significant diversion of management’s attention and resources, significant defense costs and other professional fees.

Previous wording

Many states are also pursuing legislative expansion of the scope of goods and services that are subject to sales and similar taxes as well as the circumstances in which a vendor of goods and services must collect such taxes. Following the United States Supreme Court decision in South Dakota v. Wayfair, Inc., states are now free to levy taxes on sales of goods and services based on an “economic nexus,” regardless of whether the seller has a physical presence in the state. Any additional fees and taxes levied on our services by any state may adversely impact our results of operations.

Current wording

United States Supreme Court decision in South Dakota v. Wayfair, Inc., states are now free to levy taxes on sales of goods and services based on an “economic nexus,” regardless of whether the seller has a physical presence in the state. Any additional fees and taxes levied on our services by any state may adversely impact our results of operations.

Previous wording

Historically, we have not billed or collected taxes in certain jurisdictions and, in accordance with GAAP, we have recorded a provision for our tax exposure in these jurisdictions when it is both probable that a liability has been incurred and the amount of the exposure can be reasonably estimated. We reserved $18.6 million and $20.2 million for domestic jurisdictions and jurisdictions outside of the United States, respectively, on our June 30, 2024 balance sheet for these tax payments. These estimates include several key assumptions, including, but not limited to, the taxability of our products, the jurisdictions in which we believe we have nexus or a permanent establishment, and the sourcing of revenues to those jurisdictions. In the event these jurisdictions challenge our assumptions and analysis, our actual exposure could differ materially from our current estimates and reserves. If the actual payments we make to any jurisdiction exceed the accrual in our balance sheet, our results of operations would be harmed. In addition, some customers may question the incremental tax charges and seek to negotiate lower pricing from us, which could adversely affect our business, results of operations and financial condition.

Current wording

Historically, we have not billed or collected taxes in certain jurisdictions and, in accordance with GAAP, we have recorded a provision for our tax exposure in these jurisdictions when it is both probable that a liability has been incurred and the amount of the exposure can be reasonably estimated. We reserved $18.5 million and $19.7 million for domestic jurisdictions and jurisdictions outside of the United States, respectively, on our September 30, 2024 balance sheet for these tax payments. These estimates include several key assumptions, including, but not limited to, the taxability of our products, the jurisdictions in which we believe we have nexus or a permanent establishment, and the sourcing of revenues to those jurisdictions. In the event these jurisdictions challenge our assumptions and analysis, our actual exposure could differ materially from our current estimates and reserves. If the actual payments we make to any jurisdiction exceed the accrual in our balance sheet, our results of operations would be harmed. In addition, some customers may question the incremental tax charges and seek to negotiate lower pricing from us, which could adversely affect our business, results of operations and financial condition.

Previous wording

We are subject to income taxes in both the United States and numerous international jurisdictions. Significant judgment is required in determining our worldwide provision for income taxes. In the ordinary course of our business, there are many transactions and calculations where the ultimate tax determination is uncertain. Our effective tax rates may fluctuate significantly on a quarterly basis because of a variety of factors, including changes in the mix of earnings and losses in countries with differing statutory tax rates, changes in our business or structure, changes in tax laws that could adversely impact our income or non-income taxes or the expiration of or disputes about certain tax agreements in a particular country. We are subject to audit by various tax authorities. In accordance with U.S. GAAP, we recognize income tax benefits, net of required valuation allowances and accrual for uncertain tax positions. Although we believe our tax estimates are reasonable, the final determination of tax audits and any related litigation could be materially different than that which is reflected in historical income tax provisions and accruals. Should additional taxes be assessed as a result of an audit or litigation, an adverse effect on our results of operations, financial condition and cash flows in the period or periods for which that determination is made could result.

Current wording

We are subject to income taxes in both the United States and numerous international jurisdictions. Significant judgment is required in determining our worldwide provision for income taxes. In the ordinary course of our business, there are many transactions and calculations where the ultimate tax determination is uncertain. Our effective tax rates may fluctuate significantly on a quarterly basis because of a variety of factors, including changes in the mix of earnings and losses in countries with differing statutory tax rates, changes in our business or structure, changes in tax laws that could adversely impact our income or non-income taxes or the expiration of or disputes about certain tax agreements in a particular country. We are subject to audit by various tax authorities. In accordance with GAAP, we recognize income tax benefits, net of required valuation allowances and accrual for uncertain tax positions. Although we believe our tax estimates are reasonable, the final determination of tax audits and any related litigation could be materially different than that which is reflected in historical income tax provisions and accruals. Should additional taxes be assessed as a result of an audit or litigation, an adverse effect on our results of operations, financial condition and cash flows in the period or periods for which that determination is made could result.

Previous wording

•general political, social, economic and market conditions, in both domestic and foreign markets, including the effects of the war in Ukraine and conflict in the Middle East on the global economy, changes in the labor market, supply chain disruptions, inflation, increased interest rates, instability and volatility in the banking and financial services sector, and slow or negative growth of our markets.

Current wording

•general political, social, economic and market conditions, in both domestic and foreign markets, including the effects of the war in Ukraine and conflict in the Middle East on the global economy, changes in the labor market, supply chain disruptions, heightened inflation or interest rates, instability and volatility in the banking and financial services sector, and slow or negative growth of our markets.

Previous wording

In February 2023, our board of directors authorized the repurchase of up to $1.0 billion of our common stock from time to time through a share repurchase program. In March 2024, our board of directors authorized an additional $2.0 billion share repurchase program. Through June 30, 2024, we have repurchased $2.0 billion of our common stock on the open market under this program, such that up to $1.0 billion remained available for repurchase as of June 30, 2024. Under our share repurchase programs, we may make repurchases of stock through a variety of methods, including open share market purchases, privately negotiated purchases, entering into one or more confirmations or other contractual arrangements with a financial institution counterparty to effectuate one or more accelerated stock repurchase contracts, forward purchase contracts or similar derivative instruments, Dutch auction tender offers, or through a combination of any of the foregoing, in accordance with applicable federal securities laws. Our share repurchase programs terminate at 11:59 pm Pacific Time on December 31, 2024, do not obligate us to repurchase any specific number of shares, and may be suspended at any time at our discretion and without prior notice. The timing and amount of any repurchases, if any, will be subject to liquidity, stock price, market and economic conditions, compliance with applicable legal requirements such as Delaware surplus and solvency tests and other relevant factors. Any failure to repurchase stock after we have announced our intention to do so may negatively impact our reputation and investor confidence in us and may negatively impact our stock price.

Current wording

In February 2023, our board of directors authorized the repurchase of up to $1.0 billion of our common stock from time to time through a share repurchase program. In March 2024, our board of directors authorized an additional $2.0 billion share repurchase program. Through September 30, 2024, we have repurchased $2.6 billion of our common stock on the open market under this program, such that up to $412.0 million remained available for repurchase as of September 30, 2024. Under our share repurchase programs, we may make repurchases of stock through a variety of methods, including open share market purchases, privately negotiated purchases, entering into one or more confirmations or other contractual arrangements with a financial institution counterparty to effectuate one or more accelerated stock repurchase contracts, forward purchase contracts or similar derivative instruments, Dutch auction tender offers, or through a combination of any of the foregoing, in accordance with applicable federal securities laws. Our share repurchase programs terminate at 11:59 pm Pacific Time on December 31, 2024, do not obligate us to repurchase any specific number of shares, and may be suspended at any time at our discretion and without prior notice. The timing and amount of any repurchases, if any, will be subject to liquidity, stock price, market and economic conditions, compliance with applicable legal requirements such as Delaware surplus and solvency tests and other relevant factors. Any failure to repurchase stock after we have announced our intention to do so may negatively impact our reputation and investor confidence in us and may negatively impact our stock price.
Rearranged current paragraphs (2)

Current report — wording carried from elsewhere

•fluctuations in inflation and interest rates;

Current report — wording carried from elsewhere

Many states are also pursuing legislative expansion of the scope of goods and services that are subject to sales and similar taxes as well as the circumstances in which a vendor of goods and services must collect such taxes. Following the
Rearranged previous paragraphs (1)

Previous report — wording carried elsewhere

The CCPA (as amended by the California Privacy Rights Act of 2020) imposes obligations on businesses to which it applies. These obligations include, but are not limited to, providing specific disclosures in privacy notices and affording