DROPBOX INC

Previous wording

Additionally, many of our users initially access our platform free of charge. We strive to demonstrate the value of our platform to our registered users, thereby encouraging them to convert to paying users through in-product prompts and notifications, and time-limited trials of paid subscription plans. As of June 30, 2024, we served over 700 million registered users but only 18.22 million paying users. The actual number of unique users is lower than we report as one person may register more than once for our platform. As a result, we have fewer unique registered users that we may be able to convert to paying users. A majority of our registered users may never convert to a paid subscription to our platform, and failure to convert users to a paid subscription will restrict our ability to grow our revenue.

Current wording

Additionally, many of our users initially access our platform free of charge. We strive to demonstrate the value of our platform to our registered users, thereby encouraging them to convert to paying users through in-product prompts and notifications, and time-limited trials of paid subscription plans. As of September 30, 2024, we served over 700 million registered users but only 18.24 million paying users. The actual number of unique users is lower than we report as one person may register more than once for our platform. As a result, we have fewer unique registered users that we may be able to convert to paying users. A majority of our registered users may never convert to a paid subscription to our platform, and failure to convert users to a paid subscription will restrict our ability to grow our revenue.

Previous wording

Unauthorized parties have in the past gained access, and may in the future gain access, to systems, networks, or facilities used in our business through various means, including gaining unauthorized access to our systems, networks, or facilities, attempting to fraudulently induce our employees, users, or others into disclosing user names, passwords, or other sensitive information. For example, as previously disclosed in our Form 8-K filed with the Securities and Exchange Commission on May 1, 2024, on April 24, 2024, we became aware of unauthorized access to the Dropbox Sign production environment. We continue to face risks relating to this incident, including harm to our reputation and customer relationships, and ongoing litigation, in the form of four proposed class action lawsuits that have been filed in federal court in the Northern District of California, and regulatory scrutiny related to this incident, and we may discover other impacts or new related events may occur that could affect our business operations, financial condition or results of operations. Any unauthorized or inadvertent access to, or an actual or perceived security breach of or incident impacting, our systems, or networks, or facilities, or those of third parties on which we rely, or those of any businesses or technologies we have acquired, could result in an actual or perceived loss of, or unauthorized access to or disclosure, modification, misuse, loss, corruption, unavailability, or destruction of, our data or our users' content, regulatory investigations, proceedings, and orders, claims, demands, and litigation, indemnity obligations, damages, penalties, fines, and other costs in connection with actual and alleged contractual breaches, violations of applicable laws and regulations or other actual or asserted obligations, and other liabilities. Any such incident could also materially damage our reputation and market position and harm our business, results of operations, and financial condition, including reducing our revenue, causing us to issue credits to users, negatively impacting our ability to accept and process user payment information, eroding our users’ trust in our services and payment solutions, subjecting us to costly user notification or remediation, harming our ability to retain users, harming our brand, or increasing our cost of acquiring new users. We maintain errors, omissions, and cyber liability insurance policies covering certain security and privacy damages. However, we cannot be certain that our coverage will be adequate for liabilities actually incurred or that insurance will continue to be available to us on economically reasonable terms, or at all. Further, if a high-profile security breach or incident occurs with respect to another content collaboration solutions provider, our users and potential users could lose trust in the security of content collaboration solutions providers generally, which could adversely impact our ability to retain users o…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Unauthorized parties have in the past gained access, and may in the future gain access, to systems, networks, or facilities used in our business through various means, including gaining unauthorized access to our systems, networks, or facilities, attempting to fraudulently induce our employees, users, or others into disclosing user names, passwords, or other sensitive information. For example, as previously disclosed in our Form 8-K filed with the Securities and Exchange Commission on May 1, 2024, on April 24, 2024, we became aware of unauthorized access to the Dropbox Sign production environment. We continue to face risks relating to this incident, including harm to our reputation and customer relationships, and ongoing litigation, in the form of a consolidated class action lawsuit that has been filed in federal court in the Northern District of California, and regulatory scrutiny related to this incident, and we may discover other impacts or new related events may occur that could affect our business operations, financial condition or results of operations. Any unauthorized or inadvertent access to, or an actual or perceived security breach of or incident impacting, our systems, or networks, or facilities, or those of third parties on which we rely, or those of any businesses or technologies we have acquired, could result in an actual or perceived loss of, or unauthorized access to or disclosure, modification, misuse, loss, corruption, unavailability, or destruction of, our data or our users' content, regulatory investigations, proceedings, and orders, claims, demands, and litigation, indemnity obligations, damages, penalties, fines, and other costs in connection with actual and alleged contractual breaches, violations of applicable laws and regulations or other actual or asserted obligations, and other liabilities. Any such incident could also materially damage our reputation and market position and harm our business, results of operations, and financial condition, including reducing our revenue, causing us to issue credits to users, negatively impacting our ability to accept and process user payment information, eroding our users’ trust in our services and payment solutions, subjecting us to costly user notification or remediation, harming our ability to retain users, harming our brand, or increasing our cost of acquiring new users. We maintain errors, omissions, and cyber liability insurance policies covering certain security and privacy damages. However, we cannot be certain that our coverage will be adequate for liabilities actually incurred or that insurance will continue to be available to us on economically reasonable terms, or at all. Further, if a high-profile security breach or incident occurs with respect to another content collaboration solutions provider, our users and potential users could lose trust in the security of content collaboration solutions providers generally, which could adversely impact our ability to retain users or…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Third parties may attempt to compromise our employees and their privileged access into internal systems to gain access to accounts, our information, our networks, or our systems or those of third parties on which we rely. Employee error, malfeasance, errors in our systems and processes, or other errors in the storage, use, transmission, or other processing of personal information has in the past and could in the future result in an actual or perceived breach of user privacy or inadvertent disclosure of information, and such errors could adversely affect our business, brand, and reputation. For example, in the recent past an error in our use of a trusted third party to provide anti-malware and phishing services resulted in URLs embedded within content shared on Dropbox or uploaded to DocSend being made available to other paid subscribers and partners of that third party. However, only the URLs were sent - neither the document itself, nor any information within it, was shared. To address this, we asked the service provider to delete the affected URLs from its databases, and they have done so. While we are not aware of any URLs that were exploited by malicious actors, we cannot rule this out. As a standard practice, we complied with our notification obligations to applicable regulatory authorities. While we believe we have adequate systems in place to detect and prevent integration of software and services that may compromise personal information, we can provide no assurances those systems will be effective in every case.

Current wording

Third parties may attempt to compromise our employees and their privileged access into internal systems to gain access to accounts, our information, our networks, or our systems or those of third parties on which we rely. Employee error, malfeasance, errors in our systems and processes, or other errors in the storage, use, transmission, or other processing of personal information has in the past and could in the future result in an actual or perceived breach of user privacy or inadvertent disclosure of information, and such errors could adversely affect our business, brand, and reputation. For example, in the past an error in our use of a trusted third party to provide anti-malware and phishing services resulted in URLs embedded within content shared on Dropbox or uploaded to DocSend being made available to other paid subscribers and partners of that third party. However, only the URLs were sent - neither the document itself, nor any information within it, was shared. To address this, we asked the service provider to delete the affected URLs from its databases, and they have done so. While we are not aware of any URLs that were exploited by malicious actors, we cannot rule this out. As a standard practice, we complied with our notification obligations to applicable regulatory authorities. While we believe we have adequate systems in place to detect and prevent integration of software and services that may compromise personal information, we can provide no assurances those systems will be effective in every case.

Previous wording

Additionally, efforts to grow and expand our business, including the introduction of new features and products, places a continuous significant strain on our management, operational, and financial resources. As we introduce new products and features, including AI features, and to the extent our user base and third-party relationships expand, our information technology systems, organizational structures, and internal controls and procedures may not be adequate to support our operations. Moreover, any increasing complexity of our product offerings could harm our customer experience and negatively impact user retention or the conversion of registered users to paying users.

Current wording

Additionally, efforts to grow and expand our business, including the introduction of new features and products, places a continuous significant strain on our management, operational, and financial resources. As we introduce new products and features, including AI features, and to the extent our user base and third-party relationships expand, our information technology systems, organizational structures, and internal controls and procedures may not be adequate to support our operations. These issues have from time-to-time in the past, and may in the future, slow or limit our ability to execute against our product initiatives, impact user experience, and impair growth. Moreover, any increasing complexity of our product offerings could harm our customer experience and negatively impact user retention or the conversion of registered users to paying users.

Previous wording

Our business may be affected by general economic, political, and market conditions, including any resulting negative impact on spending by our business and consumer users. Some of our users may view a paid subscription to our platform as a discretionary purchase, and our paying users have in the past and may in the future reduce their spending on our platform during an economic downturn, especially in the event of a prolonged recessionary period. Concerns about inflation, rising interest rates, unemployment trends, geopolitical issues, including wars and other armed conflicts, global health epidemics and other highly communicable diseases, bank insolvency and related uncertainty and volatility in the financial services industry, or a widespread economic slowdown or recession (in the United States or internationally) have led to, and could continue to lead to, increased market volatility and economic uncertainty, which could cause current and prospective paying users to delay, decrease, or cancel purchases of our products and services, or delay or default on their payment obligations. In response to economic uncertainty, we have been more disciplined in our hiring and operating expenses, either of which could negatively impact our ability to grow and invest in our business. As a result, our business, results of operations, and financial condition may be significantly affected by changes in the economy generally.

Current wording

Our business may be affected by general economic, political, and market conditions, including any resulting negative impact on spending by our business and consumer users. Some of our users may view a paid subscription to our platform as a discretionary purchase, and our paying users have in the past and may in the future reduce their spending on our platform during an economic downturn, especially in the event of a prolonged recessionary period. Concerns about inflation, interest rates, unemployment trends, geopolitical issues, including wars and other armed conflicts, global health epidemics and other highly communicable diseases, bank insolvencies and related uncertainty and volatility in the financial services industry, or a widespread economic slowdown or recession (in the United States or internationally) have led to, and could continue to lead to, increased market volatility and economic uncertainty, which could cause current and prospective paying users to delay, decrease, or cancel purchases of our products and services, or delay or default on their payment obligations. In response to economic uncertainty, we have been more disciplined in our hiring and operating expenses, either of which could negatively impact our ability to grow and invest in our business. As a result, our business, results of operations, and financial condition may be significantly affected by changes in the economy generally.

Previous wording

With the introduction of new technologies and market entrants, we expect competition to intensify. Many of our actual and potential competitors have competitive advantages over us, such as greater name recognition, longer operating histories, more varied products and services, larger marketing budgets, more established marketing relationships, access to larger user bases, major distribution agreements with hardware manufacturers and resellers, and greater financial, technical, and other resources. Some of our competitors may make acquisitions or enter into strategic relationships or alliances to offer a broader range of products and services than we do. These combinations make it increasingly difficult for us to compete effectively. We expect these trends to continue as competitors continue to strengthen or maintain their market positions.

Current wording

With the introduction of new technologies and market entrants, we expect competition to intensify. Many of our actual and potential competitors have competitive advantages over us, such as greater name recognition, longer operating histories, more varied products and services, larger marketing budgets, more established marketing relationships, access to larger user bases, major distribution agreements with hardware manufacturers and resellers, and greater financial, technical, and other resources. Some of our competitors may make acquisitions or enter into strategic relationships or alliances to offer a broader range of products and services than we do. These combinations make it increasingly difficult for us to compete effectively. We expect these trends to continue as competitors strengthen or maintain their market positions.

Previous wording

Demand for our platform is also sensitive to price, and our pricing and packaging has in the past and could in the future negatively impact our top of funnel and conversion rates. Many factors, including our marketing, user acquisition and technology costs, and our current and future competitors’ pricing and marketing strategies, can significantly affect our pricing strategies. Certain of our competitors offer, or may in the future offer, lower-priced or free products or services that compete with our platform or may bundle and offer a broader range of products and services.

Current wording

Demand for our platform is sensitive to price, and our pricing and packaging has in the past and could in the future negatively impact our top of funnel and conversion rates. Many factors, including our marketing, user acquisition and technology costs, and our current and future competitors’ pricing and marketing strategies, can significantly affect our pricing strategies. Certain of our competitors offer, or may in the future offer, lower-priced or free products or services that compete with our platform or may bundle and offer a broader range of products and services.

Previous wording

The content collaboration market is characterized by rapid technological change and frequent new product and service introductions. Our ability to grow our user base and increase revenue from existing users will depend heavily on our ability to enhance and improve our platform, introduce new features and products, increase our strategic partnerships with third parties, and interoperate across an increasing range of devices, operating systems, and third-party applications. Users may require features and capabilities that our current platform does not have. The need to respond to technological changes may require investments in our business that could impact short-term growth or profitability. We have made, and intend to continue making, significant investments in developing products that will incorporate AI, and while we are optimistic that such new products will drive future growth of our business, the development of such new features will incur significant costs, we expect to face increasing competition, and there is no guarantee that such new product offerings will ultimately be successful. Additionally, use of newly-developed AI technology could result in reputational harm, operational risks, or legal liability. Moreover, uncertainty in the regulatory landscape relating to AI along with new or enhanced governmental or regulatory scrutiny could negatively impact our business in the U.S. or in other jurisdictions where we operate. For example, the European Union enacted the Artificial Intelligence Act in March 2024 that prohibits certain AI applications and systems and imposes additional requirements on the use of certain applications or systems.

Current wording

The content collaboration market is characterized by rapid technological change and frequent new product and service introductions. Our ability to grow our user base and increase revenue from existing users will depend heavily on our ability to enhance and improve our platform, introduce new features and products, increase our strategic partnerships with third parties, and interoperate across an increasing range of devices, operating systems, and third-party applications. Users may require features and capabilities that our current platform does not have. The need to respond to technological changes may require investments in our business that could impact short-term growth or profitability. We have made, and intend to continue making, significant investments in developing products that will incorporate AI, and while we are optimistic that such new products have the potential to drive future growth of our business, the development of such new features will incur significant costs and there is no guarantee that such new product offerings will ultimately be successful. Additionally, use of newly-developed AI technology could result in reputational harm, operational risks, or legal liability. Moreover, uncertainty in the regulatory landscape relating to AI along with new or enhanced governmental or regulatory scrutiny could negatively impact our business in the U.S. or in other jurisdictions where we operate. For example, the European Union enacted the Artificial Intelligence Act in March 2024 that prohibits certain AI applications and systems and imposes additional requirements on the use of certain applications or systems.

Previous wording

To execute our business plan, we must attract and retain highly qualified personnel. Competition for these employees is intense and we may not be successful in attracting and retaining qualified personnel. We have experienced, and we may continue to experience, difficulty in hiring and retaining highly skilled employees with appropriate qualifications. As we continue to operate in a Virtual First model, our recent hires and planned hires may not become as productive as we expect, and we may be unable to hire, integrate, or retain sufficient numbers of qualified individuals. Many of the companies with which we compete for experienced personnel have greater resources than we have. In addition, in making employment decisions, particularly in the internet and high-technology industries, job candidates often consider the value of the equity they are to receive in connection with their employment. Employees may be more likely to leave us if the shares they own or the shares underlying their equity incentive awards have significantly appreciated or significantly reduced in value. Many of our employees may receive significant proceeds from sales of our equity in the public markets, which may reduce their motivation to continue to work for us. If we fail to attract new personnel, or fail to retain and motivate our current personnel, our business, financial results, and growth prospects could be harmed.

Current wording

To execute our business plan, we must attract and retain highly qualified personnel. Competition for these employees is intense and we may not be successful in attracting and retaining qualified personnel. We have experienced, and we may continue to experience, difficulty in hiring and retaining highly skilled employees with appropriate qualifications. As we continue to operate in a Virtual First model, our recent hires and planned hires may not become as productive as we expect, and we may be unable to hire, integrate, or retain sufficient numbers of qualified individuals. Many of the companies with which we compete for experienced personnel have greater resources than we have. In addition, in making employment decisions, particularly in the internet and high-technology industries, job candidates often consider the value of the equity they are to receive in connection with their employment. Employees may be more likely to leave us if the shares they own or the shares underlying their equity incentive awards have significantly appreciated or significantly reduced in value. Many of our employees may receive significant proceeds from sales of our equity in the public markets, which may reduce their motivation to continue to work for us. Furthermore, our 2024 reduction in workforce may result in increased attrition beyond our intended reduction in workforce, reduce employee morale, and negatively impact employee recruiting and retention. If we fail to attract new personnel, or fail to retain and motivate our current personnel, our business, financial results, and growth prospects could be harmed.

Previous wording

We have paying users across approximately 180 countries and approximately half of our revenue in the year ended December 31, 2023 was generated from paying users outside the United States. We expect to continue to expand our international operations, which may include employees working in new jurisdictions and providing our platform in additional languages. Any new markets or countries into which we attempt to sell subscriptions to our platform may not be receptive. For example, we may not be able to expand further in some markets if we are unable to satisfy certain government- and industry-specific requirements. In addition, our ability to manage our business and conduct our operations internationally requires considerable management attention and resources and is subject to the particular challenges of supporting a rapidly growing business in an environment of multiple languages, cultures, customs, legal and regulatory systems, alternative dispute systems, and commercial markets. International expansion has required, and will continue to require, investment of significant funds and other resources. Expanding and operating internationally subjects us to regulatory, economic, geographic, social, and political risks and may increase risks that we currently face, including risks associated with:

Current wording

We have paying users across approximately 180 countries and approximately half of our revenue in the year ended December 31, 2023 was generated from paying users outside the United States. We expect to continue to expand our international operations, which may include employees working in new jurisdictions and providing our products in additional languages. Any new markets or countries into which we attempt to sell subscriptions to our platform may not be receptive. For example, we may not be able to expand further in some markets if we are unable to satisfy certain government- and industry-specific requirements. In addition, our ability to manage our business and conduct our operations internationally requires considerable management attention and resources and is subject to the particular challenges of supporting a rapidly growing business in an environment of multiple languages, cultures, customs, legal and regulatory systems, alternative dispute systems, and commercial markets. International expansion has required, and will continue to require, investment of significant funds and other resources. Expanding and operating internationally subjects us to regulatory, economic, geographic, social, and political risks and may increase risks that we currently face, including risks associated with:

Previous wording

Any acquisition we complete could be viewed negatively by users, developers, partners, or investors, and could have adverse effects on our existing business relationships, financial condition, or the value of our capital stock.

Current wording

Any acquisition we complete could be viewed negatively by users, developers, partners, or investors, and could have adverse effects on our existing business relationships, financial condition, or the value of our capital stock. Further, an acquired business may not achieve the returns or strategic benefits we expected and we may have unanticipated expenses, write-offs or charges related to such acquisitions.

Previous wording

On July 10, 2023, the European Commission adopted an adequacy decision relating to the transfer of personal data from the European Economic Area (“EEA”) to the U.S. that takes place under the EU-U.S. Data Privacy Framework (“DPF”). The DPF is the successor to the EU-U.S. Privacy Shield (“Privacy Shield”) and allows participating entities to transfer personal data to the U.S. As we continued to participate in Privacy Shield, we transitioned automatically to the DPF. The DPF also applies to transfers from the UK to the U.S. as of October 12, 2023 and in due course will also apply to transfers from Switzerland to the U.S. Switzerland must also adopt its own adequacy decision, which is expected to happen shortly.

Current wording

On July 10, 2023, the European Commission adopted an adequacy decision relating to the transfer of personal data from the European Economic Area (“EEA”) to the U.S. that takes place under the EU-U.S. Data Privacy Framework (“DPF”). The DPF is the successor to the EU-U.S. Privacy Shield (“Privacy Shield”) and allows participating entities to transfer personal data to the U.S. As we continued to participate in Privacy Shield, we transitioned automatically to the DPF. The DPF also applies to transfers from the UK and Switzerland to the U.S. Switzerland must also adopt its own adequacy decision, which is expected to happen shortly.

Previous wording

Additionally, several states in the U.S. have enacted new data privacy laws. For example, the California Consumer Privacy Act of 2018 (“CCPA”), which affords consumers expanded privacy protections, went into effect on January 1, 2020. The California Privacy Rights Act ("CPRA"), effective as of January 1, 2023, significantly modified the CCPA, resulting in uncertainty and requiring us to incur additional costs and expenses. The enactment of the CCPA has prompted similar legislative developments in other states. For example, Virginia, Colorado, Utah, and Connecticut have each passed laws similar to the CCPA and CPRA that took effect in 2023; Florida, Montana, Oregon, and Texas have enacted similar laws that have taken or will take effect in 2024; Tennessee, Delaware, New Jersey, Nebraska, Iowa, Maryland, Minnesota, and New Hampshire have enacted similar laws that go into effect in 2025, and Indiana, Kentucky, and Rhode Island have enacted similar laws that will go into effect in 2026. Other laws relating to privacy and cybersecurity, many of which are similar to the CCPA and CPRA, are being considered by other state legislatures, and the U.S. federal government is contemplating federal privacy legislation. These developments create the potential for a patchwork of overlapping but different laws throughout the U.S. relating to privacy and cybersecurity. The effects of the CCPA and these other laws remain far-reaching and, depending on final regulatory guidance and other related developments, may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply. Similarly, a number of legislative initiatives in the EEA and the United States, at both the federal and state level, as well as other jurisdictions have been proposed or enacted, and could impose new obligations in areas affecting our business. For example, on November 17, 2022, the Digital Services Act (“DSA”) entered into force in the EU and includes new obligations to limit the spread of illegal content and illegal products online, increase the protection of minors, and provide users with more choice and transparency and allows for fines of up to 6% of annual turnover. The impacts of the DSA on the overall industry, business models and our operations are uncertain, and these regulations could result in changes to our subscriptions or introduce new operational requirements and administrative costs, each of which could have an adverse effect on our business, results of operations, and financial condition.

Current wording

Additionally, several states in the U.S. have enacted new data privacy laws. For example, the California Consumer Privacy Act of 2018 (“CCPA”), which affords consumers expanded privacy protections, went into effect on January 1, 2020. The California Privacy Rights Act ("CPRA"), effective as of January 1, 2023, significantly modified the CCPA, resulting in uncertainty and requiring us to incur additional costs and expenses. The enactment of the CCPA has prompted similar legislative developments in other states. For example, Virginia, Colorado, Utah, and Connecticut have each passed laws similar to the CCPA and CPRA that took effect in 2023; Florida, Montana, Oregon, and Texas have enacted similar laws that have taken effect in 2024; Tennessee, Delaware, New Jersey, Nebraska, Iowa, Maryland, Minnesota, and New Hampshire have enacted similar laws that go into effect in 2025, and Indiana, Kentucky, and Rhode Island have enacted similar laws that will go into effect in 2026. Other laws relating to privacy and cybersecurity, many of which are similar to the CCPA and CPRA, are being considered by other state legislatures, and the U.S. federal government is contemplating federal privacy legislation. These developments create the potential for a patchwork of overlapping but different laws throughout the U.S. relating to privacy and cybersecurity. The effects of the CCPA and these other laws remain far-reaching and, depending on final regulatory guidance and other related developments, may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply. Similarly, a number of legislative initiatives in the EEA and the United States, at both the federal and state level, as well as other jurisdictions have been proposed or enacted, and could impose new obligations in areas affecting our business. For example, on November 17, 2022, the Digital Services Act (“DSA”) entered into force in the EU and includes new obligations to limit the spread of illegal content and illegal products online, increase the protection of minors, and provide users with more choice and transparency and allows for fines of up to 6% of annual turnover. The impacts of the DSA on the overall industry, business models and our operations are uncertain, and these regulations could result in changes to our subscriptions or introduce new operational requirements and administrative costs, each of which could have an adverse effect on our business, results of operations, and financial condition. Further, the EU revised its Cybersecurity Directive (“NIS2”), with EU member states obligated to transpose it into national law by October 17, 2024. NIS2, among other things, obligates companies to adopt or update policies and procedures on issues such as incident handling and supply chain security, implementing certain administrative measures, and requires top management’s involvement in cybersecurity risk-management measures, with top m…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

We own a large number of patents, copyrights, trademarks, domain names, and trade secrets and, from time-to-time, are subject to litigation based on allegations of infringement, misappropriation or other violations of intellectual property, or other rights. As we face increasing competition and gain an increasingly high profile, the possibility of intellectual property rights claims, commercial claims, and other assertions against us grows. We have in the past been, are currently, and may from time-to-time in the future become, a party to litigation and disputes related to our intellectual property, our business practices, transactions involving our securities and our platform. For example, as discussed in the section titled "Legal Proceedings," we have recently been involved in legal proceedings against Motion Offense, which alleged that Dropbox infringes certain of its patents. A jury trial was conducted in May 2023. The jury found in favor of Dropbox on all counts including non-infringement and invalidity of the patents and awarded no damages to Motion Offense. We are currently awaiting entry of judgment by the district court. The final judgment may be appealed to the Federal Circuit. It is not possible presently to either (i) determine the final outcome of this matter or (ii) estimate any maximum possible exposure or range of loss. The costs of supporting litigation and dispute resolution proceedings are considerable, and there can be no assurances that a favorable outcome will be obtained. Our business, results of operations, and financial condition could be materially and adversely affected by such costs and any unfavorable outcomes in current or future litigation. We may need to settle litigation and disputes on terms that are unfavorable to us, or we may be subject to an unfavorable judgment that may not be reversible upon appeal. The terms of any settlement or judgment may require us to cease some or all of our operations or pay substantial amounts to the other party. With respect to any intellectual property rights claim, we may have to seek a license to continue practices found to be in violation of third-party rights, which may not be available on reasonable terms and may significantly increase our operating expenses. A license to continue such practices may not be available to us at all, and we may be required to develop alternative non-infringing technology or practices or discontinue the practices. The development of alternative, non-infringing technology or practices could require significant effort and expense.

Current wording

We own a large number of patents, copyrights, trademarks, domain names, and trade secrets and, from time-to-time, are subject to litigation based on allegations of infringement, misappropriation or other violations of intellectual property, or other rights. As we face increasing competition and gain an increasingly high profile, the possibility of intellectual property rights claims, commercial claims, and other assertions against us grows. We have in the past been, are currently, and may from time-to-time in the future become, a party to litigation and disputes related to our intellectual property, our business practices, transactions involving our securities and our platform. For example, as discussed in the section titled "Legal Proceedings," we have recently been involved in legal proceedings against Motion Offense, which alleged that Dropbox infringes certain of its patents. A jury trial was conducted in May 2023. The jury found in favor of Dropbox on all counts including non-infringement and invalidity of the patents and awarded no damages to Motion Offense. In August 2024, the court entered judgment in line with the May 2023 jury verdict. On September 27, 2024, Motion Offense filed a Motion for Judgment as a Matter of Law and a (renewed) Motion for a New Trial. We filed our responses on October 25, 2024, and Motion Offense’s replies will be due by November 15, 2024. The final judgment may be appealed to the Federal Circuit. It is not possible presently to either (i) determine the final outcome of this matter or (ii) estimate any maximum possible exposure or range of loss. The costs of supporting litigation and dispute resolution proceedings are considerable, and there can be no assurances that a favorable outcome will be obtained. Our business, results of operations, and financial condition could be materially and adversely affected by such costs and any unfavorable outcomes in current or future litigation. We may need to settle litigation and disputes on terms that are unfavorable to us, or we may be subject to an unfavorable judgment that may not be reversible upon appeal. The terms of any settlement or judgment may require us to cease some or all of our operations or pay substantial amounts to the other party. With respect to any intellectual property rights claim, we may have to seek a license to continue practices found to be in violation of third-party rights, which may not be available on reasonable terms and may significantly increase our operating expenses. A license to continue such practices may not be available to us at all, and we may be required to develop alternative non-infringing technology or practices or discontinue the practices. The development of alternative, non-infringing technology or practices could require significant effort and expense.

Previous wording

The trading price of our Class A common stock may be volatile and could be subject to fluctuations in response to various factors, some of which are beyond our control. Factors that could cause fluctuations in the trading price of our Class A common stock include the following:

Current wording

The trading price of our Class A common stock may be volatile and could be subject to fluctuations in response to various factors, some of which are beyond our control. Factors that could cause fluctuations in the trading price of our Class A common stock include, but are not limited to, the following:

Previous wording

Our Class A common stock has one vote per share, our Class B common stock has ten votes per share, and our Class C common stock has no voting rights, except as otherwise required by law. As of June 30, 2024, our directors and executive officers, and their respective affiliates, held in the aggregate 76.4% of the voting power of our capital stock, with Mr. Houston holding approximately 76.2% of the voting power of our capital stock. We are including the Co-Founder Grant (as defined in “Significant Impacts of Stock-Based Compensation” included in Part II, Item 7 of this report) in this calculation since the shares underlying such grant are legally issued and outstanding shares of our Class A common stock and Mr. Houston is able to vote these shares prior to their vesting. Because of the ten-to-one voting ratio between our Class B and Class A common stock, the holders of our Class B common stock collectively will continue to control a majority of the combined voting power of our common stock and therefore be able to control all matters submitted to our stockholders for approval so long as the shares of Class B common stock represent at least 9.1% of all outstanding shares of our Class A and Class B common stock. This concentrated control will limit or preclude other stockholders’ ability to influence corporate matters for the foreseeable future, including the election of directors, amendments of our organizational documents, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval. In addition, this may prevent or discourage unsolicited acquisition proposals or offers for our capital stock that other stockholders may feel are in their best interests as one of our stockholders.

Current wording

Our Class A common stock has one vote per share, our Class B common stock has ten votes per share, and our Class C common stock has no voting rights, except as otherwise required by law. As of September 30, 2024, our directors and executive officers, and their respective affiliates, held in the aggregate 77.2% of the voting power of our capital stock, with Mr. Houston holding approximately 77.0% of the voting power of our capital stock. We are including the Co-Founder Grant (as defined in “Significant Impacts of Stock-Based Compensation” included in Part II, Item 7 of this report) in this calculation since the shares underlying such grant are legally issued and outstanding shares of our Class A common stock and Mr. Houston is able to vote these shares prior to their vesting. Because of the ten-to-one voting ratio between our Class B and Class A common stock, the holders of our Class B common stock collectively will continue to control a majority of the combined voting power of our common stock and therefore be able to control all matters submitted to our stockholders for approval so long as the shares of Class B common stock represent at least 9.1% of all outstanding shares of our Class A and Class B common stock. This concentrated control will limit or preclude other stockholders’ ability to influence corporate matters for the foreseeable future, including the election of directors, amendments of our organizational documents, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval. In addition, this may prevent or discourage unsolicited acquisition proposals or offers for our capital stock that other stockholders may feel are in their best interests as one of our stockholders.

Previous wording

We initially implemented a stock repurchase program in 2020. In February 2022, our Board of Directors authorized the repurchase of up to an additional $1.2 billion of the outstanding shares of our Class A common stock and in July 2023 our Board of Directors further authorized the repurchase of up to an additional $1.2 billion of the outstanding shares of our Class A common stock. The repurchase program does not have an expiration date and we are not obligated to repurchase a specified number or dollar value of shares. Share repurchases will be made from time-to-time in private transactions or open market purchases, as permitted by securities laws and other legal requirements. Although we have previously announced an intention to allocate a significant portion of our free cash flow to share repurchases, any share repurchases remain subject to the circumstances in place at that time, including prevailing market prices. As a result, there can be no guarantee around the timing of our share repurchases, or that the volume of such repurchases will increase. In addition, as part of the IRA, the United States implemented a 1% non-deductible excise tax on the value of certain stock repurchases by publicly traded companies. This tax will generally increase the costs to us of any share repurchases. The stock repurchase program could affect the price of our Class A common stock, increase volatility and diminish our cash reserves. Our repurchase program may be suspended or terminated at any time and, even if fully implemented, may not enhance long-term stockholder value.

Current wording

We initially implemented a stock repurchase program in 2020. In February 2022, our Board of Directors authorized the repurchase of up to an additional $1.2 billion of the outstanding shares of our Class A common stock and in July 2023 our Board of Directors further authorized the repurchase of up to an additional $1.2 billion of the outstanding shares of our Class A common stock. The repurchase program does not have an expiration date and we are not obligated to repurchase a specified number or dollar value of shares. Share repurchases will be made from time-to-time in private transactions or open market purchases, as permitted by securities laws and other legal requirements. Although we have previously announced an intention to allocate a significant portion of our free cash flow to share repurchases, any share repurchases remain subject to the circumstances in place at that time, including prevailing market prices. As a result, the timing and the volume of our share repurchases may fluctuate. In addition, as part of the IRA, the United States implemented a 1% non-deductible excise tax on the value of certain stock repurchases by publicly traded companies. This tax will generally increase the costs to us of any share repurchases. The stock repurchase program could affect the price of our Class A common stock, increase volatility and diminish our cash reserves. Our repurchase program may be suspended or terminated at any time and, even if fully implemented, may not enhance long-term stockholder value.

Previous wording

Our current controls and any new controls that we develop may become inadequate because of changes in conditions in our business. Additionally, to the extent we acquire other businesses, the acquired company may not have a sufficiently robust system of internal controls and we may uncover new deficiencies. Weaknesses in our disclosure controls and internal control over financial reporting may be discovered in the future. Any failure to develop or maintain effective controls or any difficulties encountered in their implementation or improvement that could harm our results of operations or cause us to fail to meet our reporting obligations and may result in a restatement of our financial statements for prior periods. Any failure to implement and maintain effective internal control over financial reporting also could adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports regarding the effectiveness of our internal control over financial reporting that are required to be included in our periodic reports that will be filed with the SEC. Ineffective disclosure controls and procedures and internal control over financial reporting could also cause investors to lose confidence in our reported financial and other information, which would likely have a negative effect on the trading price of our Class A common stock. In addition, if we are unable to continue to meet these requirements, we may not be able to remain listed on Nasdaq.

Current wording

Our current controls and any new controls that we develop may become inadequate because of changes in conditions in our business. Additionally, to the extent we acquire other businesses, the acquired company may not have a sufficiently robust system of internal controls and we may uncover new deficiencies. Weaknesses in our disclosure controls and internal control over financial reporting may be discovered in the future. Furthermore, the loss of expertise and institutional knowledge of employees, including as a result of our 2024 reduction in workforce, may negatively impact our ability to maintain adequate controls and procedures. Any failure to develop or maintain effective controls or any difficulties encountered in their implementation or improvement that could harm our results of operations or cause us to fail to meet our reporting obligations and may result in a restatement of our financial statements for prior periods. Any failure to implement and maintain effective internal control over financial reporting also could adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports regarding the effectiveness of our internal control over financial reporting that are required to be included in our periodic reports that will be filed with the SEC. Ineffective disclosure controls and procedures and internal control over financial reporting could also cause investors to lose confidence in our reported financial and other information, which would likely have a negative effect on the trading price of our Class A common stock. In addition, if we are unable to continue to meet these requirements, we may not be able to remain listed on Nasdaq.

Previous wording

The trading market for our Class A common stock will depend in part on the research and reports that securities or industry analysts publish about us or our business. The analysts’ estimates are based upon their own opinions and are often different from our estimates or expectations. If one or more of the analysts who cover us downgrade our Class A common stock or publish inaccurate or unfavorable research about our business, the price of our securities would likely decline. If few securities analysts commence coverage of us, or if one or more of these analysts cease coverage of us or fail to publish reports on us regularly, demand for our securities could decrease, which might cause the price and trading volume of our Class A common stock to decline.

Current wording

The trading market for our Class A common stock will depend in part on the research and reports that securities or industry analysts publish about us or our business. The analysts’ estimates are based upon their own opinions and are often different from our estimates or expectations. If one or more of the analysts who cover us downgrade our Class A common stock or publish inaccurate or unfavorable research about our business, the price of our securities would likely decline. If few securities analysts maintain coverage of us, or if one or more of these analysts cease coverage of us or fail to publish reports on us regularly, demand for our securities could decrease, which might cause the price and trading volume of our Class A common stock to decline.

Previous wording

(3) Includes 39,657 shares of restricted common stock withheld by the Company upon vesting of restricted stock awards to satisfy tax withholding requirements.

Current wording

(3) Includes 40,658 shares of restricted common stock withheld by the Company upon vesting of restricted stock awards to satisfy tax withholding requirements.