DROPBOX INC

Previous wording

We encourage both basic and paying users to upgrade to our premium offerings by recommending additional features and through in-product prompts and notifications. We are focused on increasing recurring revenue and we believe that users that subscribe to our premium paid offerings, including our bundled product offerings, demonstrate a propensity to retain and expand their deployments over time. We seek to expand within organizations through viral means by adding new users, having workplaces purchase additional products, or expanding the use of Dropbox into other departments within a workplace. We often see enterprise IT decision-makers adopting Dropbox after noticing substantial organic adoption by individuals and teams within the organization. However, if our paying users cancel their subscriptions or fail to renew, or if we fail to upgrade our paying users to premium offerings or expand within organizations, our business, results of operations, and financial condition may be harmed. In addition, certain of our enterprise licenses have a large number of seat licenses. Loss of paying users due to non-renewal of contracts that cover a large number of seat licenses could negatively impact our number of paying users, causing the number of net new paying users to decline or be negative. Accordingly, an enterprise decision not to renew its license may have a material impact on our number of paying users and could also have a significant impact on our business, results of operations, and financial condition as a result. Additionally, the timing of certain contract renewals that include a significant number of seat licenses may make any projections relating to our future paying users more uncertain. Although it is important to our business that our users renew their subscriptions after their existing subscriptions expire and that we expand our commercial relationships with our users, given the volume of our users, we may be unable to address any retention issues with specific users in a timely manner, which could harm our business.

Current wording

We encourage both basic and paying users to upgrade to our premium offerings by recommending additional features and through in-product prompts and notifications. We are focused on increasing recurring revenue and we believe that users that subscribe to our premium paid offerings demonstrate a propensity to retain and expand their deployments over time. We seek to expand within organizations through viral means by adding new users, having workplaces purchase additional products, or expanding the use of Dropbox into other departments within a workplace. We often see enterprise IT decision-makers adopting Dropbox after noticing substantial organic adoption by individuals and teams within the organization. However, if our paying users cancel their subscriptions or fail to renew, or if we fail to upgrade our paying users to premium offerings or expand within organizations, our business, results of operations, and financial condition may be harmed. In addition, certain of our enterprise licenses have a large number of seat licenses. Loss of paying users due to non-renewal of contracts that cover a large number of seat licenses could negatively impact our number of paying users, causing the number of net new paying users to decline or be negative. Accordingly, an enterprise decision not to renew its license may have a material impact on our number of paying users and could also have a significant impact on our business, results of operations, and financial condition as a result. Additionally, the timing of certain contract renewals that include a significant number of seat licenses may make any projections relating to our future paying users more uncertain. Although it is important to our business that our users renew their subscriptions after their existing subscriptions expire and that we expand our commercial relationships with our users, given the volume of our users, we may be unable to address any retention issues with specific users in a timely manner, which could harm our business.

Previous wording

Additionally, many of our users initially access our platform free of charge. We strive to demonstrate the value of our platform to our registered users, thereby encouraging them to convert to paying users through in-product prompts and notifications, and time-limited trials of paid subscription plans. As of December 31, 2023, we served over 700 million registered users but only 18.12 million paying users. The actual number of unique users is lower than we report as one person may register more than once for our platform. As a result, we have fewer unique registered users that we may be able to convert to paying users. A majority of our registered users may never convert to a paid subscription to our platform, and failure to convert users to a paid subscription will restrict our ability to grow our revenue.

Current wording

Additionally, many of our users initially access our platform free of charge. We strive to demonstrate the value of our platform to our registered users, thereby encouraging them to convert to paying users through in-product prompts and notifications, and time-limited trials of paid subscription plans. As of December 31, 2024, we served over 700 million registered users but only 18.22 million paying users. The actual number of unique users is lower than we report as one person may register more than once for our platform. As a result, we have fewer unique registered users that we may be able to convert to paying users. A majority of our registered users may never convert to a paid subscription to our platform, and failure to convert users to a paid subscription will restrict our ability to grow our revenue.

Previous wording

Furthermore, events that financially impact our registered users and other prospective paying users, such as macroeconomic factors, layoffs, inflation, increased interest rates, or catastrophic events, have in the past caused and may cause in future periods these users to delay or reduce technology spending, which impacted, and may continue to impact our ability to convert registered users or otherwise attract new paying users, restricting our ability to grow our revenue. If we are unable to increase our paying user growth rates or to offset declines in the number of new paying users with increased revenue per paying user, our revenue and operating results will be adversely affected.

Current wording

Furthermore, events or conditions that financially impact our registered users and other prospective paying users, such as macroeconomic factors, layoffs, inflation, fluctuating interest rates, or catastrophic events, have in the past caused and may cause in future periods these users to delay or reduce technology spending, which impacted, and may continue to impact our ability to convert registered users or otherwise attract new paying users, restricting our ability to grow our revenue. If we are unable to increase our paying user growth rates or to offset declines in the number of new paying users with increased revenue per paying user, our revenue and operating results will be adversely affected.

Previous wording

Our business could be damaged, and we could be subject to liability, if there is any unauthorized access to our data or our users’ content, including through privacy and data security breaches or incidents.

Current wording

We have in the past and may continue to experience privacy and data security breaches or incidents.

Previous wording

Unauthorized parties have in the past gained access, and may in the future gain access, to systems, networks, or facilities used in our business through various means, including gaining unauthorized access to our systems, networks, or facilities, attempting to fraudulently induce our employees, users, or others into disclosing user names, passwords, or other sensitive information. Any unauthorized or inadvertent access to, or an actual or perceived security breach of or incident impacting, our systems, or networks, or facilities, or those of third parties on which we rely, or those of any businesses or technologies we have acquired, could result in an actual or perceived loss of, or unauthorized access to or disclosure, modification, misuse, loss, corruption, unavailability, or destruction of, our data or our users' content, regulatory investigations, proceedings, and orders, claims, demands, and litigation, indemnity obligations, damages, penalties, fines, and other costs in connection with actual and alleged contractual breaches, violations of applicable laws and regulations or other actual or asserted obligations, and other liabilities. Any such incident could also materially damage our reputation and market position and harm our business, results of operations, and financial condition, including reducing our revenue, causing us to issue credits to users, negatively impacting our ability to accept and process user payment information, eroding our users’ trust in our services and payment solutions, subjecting us to costly user notification or remediation, harming our ability to retain users, harming our brand, or increasing our cost of acquiring new users. We maintain errors, omissions, and cyber liability insurance policies covering certain security and privacy damages. However, we cannot be certain that our coverage will be adequate for liabilities actually incurred or that insurance will continue to be available to us on economically reasonable terms, or at all. Further, if a high-profile security breach or incident occurs with respect to another content collaboration solutions provider, our users and potential users could lose trust in the security of content collaboration solutions providers generally, which could adversely impact our ability to retain users or attract new ones. We have also incorporated AI technologies into certain products and expect to continue to incorporate additional AI technologies into our products and otherwise into our business and operations in the future. The use of AI technologies and the accelerated product development lifecycle for AI products may create additional or increase existing cybersecurity risks and may result in security or privacy incidents. Further, cybersecurity attacks may use AI technologies and increase the risk of security incidents.

Current wording

Unauthorized parties have in the past gained access, and may in the future gain access, to systems, networks, or facilities used in our business through various means, including gaining unauthorized access to our systems, networks, or facilities, attempting to fraudulently induce our employees, users, or others into disclosing user names, passwords, or other sensitive information. For example, as previously disclosed in our Form 8-K filed with the Securities and Exchange Commission on May 1, 2024, on April 24, 2024, we became aware of unauthorized access to the Dropbox Sign production environment. We continue to face risks relating to this incident, including harm to our reputation and customer relationships, and ongoing litigation, in the form of a consolidated class action lawsuit that has been filed in federal court in the Northern District of California, and regulatory scrutiny related to this incident, and we may discover other impacts or new related events may occur that could affect our business operations, financial condition or results of operations. Any unauthorized or inadvertent access to, or an actual or perceived security breach of or incident impacting, our systems, or networks, or facilities, or those of third parties on which we rely, or those of any businesses or technologies we have acquired, could result in an actual or perceived loss of, or unauthorized access to or disclosure, modification, misuse, loss, corruption, unavailability, or destruction of, our data or our users' content, regulatory investigations, proceedings, and orders, claims, demands, and litigation, indemnity obligations, damages, penalties, fines, and other costs in connection with actual and alleged contractual breaches, violations of applicable laws and regulations or other actual or asserted obligations, and other liabilities. Any such incident could also materially damage our reputation and market position and harm our business, results of operations, and financial condition, including reducing our revenue, causing us to issue credits to users, negatively impacting our ability to accept and process user payment information, eroding our users’ trust in our services and payment solutions, subjecting us to costly user notification or remediation, harming our ability to retain users, harming our brand, or increasing our cost of acquiring new users. We maintain errors, omissions, and cyber liability insurance policies covering certain security and privacy damages. However, we cannot be certain that our coverage will be adequate for liabilities actually incurred or that insurance will continue to be available to us on economically reasonable terms, or at all. Further, if a high-profile security breach or incident occurs with respect to another content collaboration solutions provider, our users and potential users could lose trust in the security of content collaboration solutions providers generally, which could adversely impact our ability to retain users or…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Emerging and evolving cybersecurity threats pose unique challenges and involve sophisticated threat actors. Computer malware, ransomware, cyber viruses, social engineering (phishing attacks), denial of service or other attacks, employee theft or misuse and increasingly sophisticated network attacks have become more prevalent, particularly against cloud services. In this fast-changing threat environment, we are continuously assessing our security posture, including through the use of penetration testing and red team exercises, to identify gaps, threats, and vulnerabilities and, where we believe appropriate, we actively take additional and ongoing steps that are intended to strengthen our cybersecurity capabilities and mitigate the risk of a breach or incident. If we fail to respond appropriately to any identified gaps, threats or vulnerabilities, including by providing adequate funding and prioritizing strategic initiatives, or if we fail to adequately identify the gaps, threats or vulnerabilities, we face greater risk that an unauthorized party will obtain access to, or disrupt, our systems or networks or obtain access to data or content that we or third parties on which we rely store or otherwise process. Notwithstanding our efforts, we may fail to detect the existence of security breaches or incidents, including breaches or compromises of user content, and may be unable to prevent unauthorized access to user content. Malicious third parties might use techniques that we are unable to defend against to compromise and infiltrate our systems, infrastructure, and networks. The techniques used to obtain unauthorized access to, and to disable or degrade service, or sabotage systems change frequently and are often not recognized until launched against a target. They may originate from less regulated or remote areas around the world, or from state-sponsored actors, and the risks could also be elevated in connection with wars or other armed conflicts. If our security measures are breached or compromised or we, our systems, facilities or networks, or those of third parties on which we rely otherwise are subject to a security breach or incident, or our users’ content or other data is otherwise accessed, misused, modified, rendered unavailable, destroyed, or otherwise processed through unauthorized means, or if any such actions are believed to occur, our platform may be perceived as insecure, and we may lose existing users or fail to attract and retain new users. Moreover, public announcements concerning any cybersecurity-related incidents and steps we may take to respond to or remediate any such incidents could be perceived by securities analysts or investors to be negative, and such perception could, among other things, have an adverse effect on the price of our Class A common stock.

Current wording

Emerging and evolving cybersecurity threats pose unique challenges and involve sophisticated threat actors. Computer malware, ransomware, viruses, social engineering (phishing attacks), denial of service or other attacks, employee theft or misuse and increasingly sophisticated network attacks have become more prevalent, particularly against cloud services. In this fast-changing threat environment, we are continuously assessing our security posture, including through the use of penetration testing and red team exercises, to identify gaps, threats, and vulnerabilities and, where we believe appropriate, we actively take additional and ongoing steps that are intended to strengthen our cybersecurity capabilities and mitigate the risk of a breach or incident. If we fail to respond appropriately to any identified gaps, threats or vulnerabilities, including by providing adequate funding and prioritizing strategic initiatives, or if we fail to adequately identify the gaps, threats or vulnerabilities, we face greater risk that an unauthorized party will obtain access to, or disrupt, our systems or networks or obtain access to data or content that we or third parties on which we rely store or otherwise process. Notwithstanding our efforts, we may fail to detect the existence of security breaches or incidents, including breaches or compromises of user content, and may be unable to prevent unauthorized access to user content. Malicious third parties might use techniques that we are unable to defend against to compromise and infiltrate our systems, infrastructure, and networks. The techniques used to obtain unauthorized access to, and to disable or degrade service, or sabotage systems change frequently and are often not recognized until launched against a target. They may originate from less regulated or remote areas around the world, or from state-sponsored actors, and the risks could also be elevated in connection with wars or other armed conflicts. If our security measures are breached or compromised or we, our systems, facilities or networks, or those of third parties on which we rely otherwise are subject to a security breach or incident, or our users’ content or other data is otherwise accessed, misused, modified, rendered unavailable, destroyed, or otherwise processed through unauthorized means, or if any such actions are believed to occur, our platform may be perceived as insecure, and we may lose existing users or fail to attract and retain new users. Moreover, public announcements concerning any cybersecurity-related incidents and steps we may take to respond to or remediate any such incidents could be perceived by securities analysts or investors to be negative, and such perception could, among other things, have an adverse effect on the price of our Class A common stock.

Previous wording

We may rely on third parties when deploying our infrastructure, and in doing so, expose it to security risks outside of our direct control. We rely on outside vendors and contractors to perform services necessary for the operation of the business, and they may fail to adequately secure our user and company content data. This risk may increase when vendors and contractors work remotely, including as part of our Virtual First model. Additionally, unapproved internal AI product usage or human error in the product development process each have the potential to result in disclosure of user or company content data.

Current wording

We may rely on third parties when deploying our infrastructure, and in doing so, expose it to security risks outside of our direct control. We rely on outside vendors and contractors to perform services necessary for the operation of the business, and they may fail to adequately secure our user and company content data. Furthermore, despite our security measures, contractors and other individuals (some of whom our intelligence indicates are supported by nation states) have in the past gained, and in the future may gain, access to our systems. This risk may increase when vendors and contractors work remotely, including as part of our Virtual First model. Additionally, unapproved internal AI product usage or human error in the product development process each have the potential to result in disclosure of user or company content data.

Previous wording

In addition, certain developers or other partners who create applications that integrate with our platform, may receive or store information provided by us or by our users through these applications. If these third parties or developers fail to adopt or adhere to adequate data security practices, or in the event of a breach or other compromise of their networks or systems, our data or our users' data may be improperly accessed, used, or disclosed.

Current wording

In addition, certain developers or other partners who create applications that integrate with our platform, may receive or store information provided by us or by our users through these applications. If these third parties or developers fail to adopt or adhere to adequate data security practices or the Dropbox Developer Terms and Conditions, or in the event of a breach or other compromise of their networks or systems, our data or our users' data may be improperly accessed, used, or disclosed.

Previous wording

Third parties may attempt to compromise our employees and their privileged access into internal systems to gain access to accounts, our information, our networks, or our systems or those of third parties on which we rely. Employee error, malfeasance, errors in our systems and processes, or other errors in the storage, use, transmission, or other processing of personal information has in the past and could in the future result in an actual or perceived breach of user privacy or inadvertent disclosure of information, and such errors could adversely affect our business, brand, and reputation. For example, in the recent past an error in our use of a trusted third party to provide anti-malware and phishing services resulted in URLs embedded within content shared on Dropbox or uploaded to DocSend being made available to other paid subscribers and partners of that third party. However, only the URLs were sent - neither the document itself, nor any information within it, was shared. To address this, we asked the service provider to delete the affected URLs from its databases, and they have done so. While we are not aware of any URLs that were exploited by malicious actors, we cannot rule this out. As a standard practice, we complied with our notification obligations to applicable regulatory authorities. While we believe we have adequate systems in place to detect and prevent integration of software and services that may compromise personal information, we can provide no assurances those systems will be effective in every case.

Current wording

Third parties may attempt to compromise our employees and their privileged access into internal systems to gain access to accounts, our information, our networks, or our systems or those of third parties on which we rely. Employee error, malfeasance, errors in our systems and processes, or other errors in the storage, use, transmission, or other processing of personal information has in the past and could in the future result in an actual or perceived breach of user privacy or inadvertent disclosure of information, and such errors could adversely affect our business, brand, and reputation. For example, in the past an error in our use of a trusted third party to provide anti-malware and phishing services resulted in URLs embedded within content shared on Dropbox or uploaded to DocSend being made available to other paid subscribers and partners of that third party. However, only the URLs were sent - neither the document itself, nor any information within it, was shared. To address this, we asked the service provider to delete the affected URLs from its databases, and they have done so. While we are not aware of any URLs that were exploited by malicious actors, we cannot rule this out. As a standard practice, we complied with our notification obligations to applicable regulatory authorities. While we believe we have adequate systems in place to detect and prevent integration of software and services that may compromise personal information, we can provide no assurances those systems will be effective in every case.

Previous wording

Our rate of growth has declined in past periods. If we do not successfully execute our plan for future growth, our growth rate may continue to decline in the future.

Current wording

Our rate of growth has declined in past periods. If we do not successfully execute our plan for future growth, our growth rate may continue to decline and we may experience negative growth.

Previous wording

The rate of growth of our business and revenue has declined in prior periods and may continue to decline in the future if we are unable to execute on our new product initiatives and plans for future growth. Although we believe our new product initiatives represent an opportunity for future growth, these initiatives, including any AI-based initiatives, may not succeed, and any additional revenue they generate may be insufficient to offset declining rates of growth in other areas of our business.

Current wording

The rate of growth of our business and revenue has declined, and we expect to experience negative growth in the near term. If we are unable to execute on our new product initiatives and plans for growth in the future, we may be unable to reverse this trend. Our new product initiatives, including any AI-based initiatives, are intended to result in growth, but such initiatives require a period of investment and ultimately may not succeed on the timelines we expect or at all. Any additional revenue our new initiatives generate may be insufficient to offset the amounts we have invested or the declining rates of growth in other areas of our business.

Previous wording

Additionally, efforts to grow and expand our business, including the introduction of new features and products, places a continuous significant strain on our management, operational, and financial resources. As we introduce new products and features, including AI features, and to the extent our user base and third-party relationships expand, our information technology systems, organizational structures, and internal controls and procedures may not be adequate to support our operations. Moreover, any increasing complexity of our product offerings could harm our customer experience and negatively impact user retention or the conversion of registered users to paying users.

Current wording

Efforts to grow and expand our business, including the introduction of new features and products, places a continuous significant strain on our management, operational, and financial resources. As we introduce new products and features, including AI features, and to the extent our user base and third-party relationships expand, our information technology systems, organizational structures, and internal controls and procedures may not be adequate to support our operations. In addition, our challenges may be heightened in connection with our Virtual First work model, as we engage an increasingly distributed employee base in countries around the world, as well as our focus on aligning our resources to create a more nimble and streamlined organization. These issues have from time-to-time in the past, and may in the future, slow or limit our ability to execute against our product initiatives, impact user experience, and impair growth. Moreover, any increasing complexity of our product offerings could harm our customer experience and negatively impact user retention or the conversion of registered users to paying users.

Previous wording

Our ability to forecast our future results of operations is subject to a number of risks and uncertainties, including our ability to effectively plan for and model future growth, and we have not always and we may not in the future receive our expected return on investments that we make in our business in the time we expect or at all. We have encountered in the past, and may encounter in the future, risks and uncertainties frequently experienced by companies in rapidly changing industries. If we fail to achieve the necessary level of efficiency in our organization, or our investments do not result in the growth we expect, our business, results of operations, and financial condition could be harmed.

Current wording

In order to maintain or reaccelerate our growth, we must effectively allocate our resources and if we invest in future growth, and fail to achieve our goals, our business will be harmed. Our ability to forecast our future results of operations and future growth is subject to a number of risks and uncertainties, including our ability to effectively plan for and model future growth, and we have not always and we may not in the future receive the return we expect on investments that we make in our business in the time we expect or at all. We have encountered in the past, and may encounter in the future, risks and uncertainties frequently experienced by companies in rapidly changing industries. If we fail to achieve the necessary level of efficiency in our organization, or our investments do not result in the growth we expect, our business, results of operations, and financial condition could be harmed.

Previous wording

Our brand, reputation, and ability to attract, retain, and serve our users are dependent upon the reliable performance of our platform, including our underlying technical infrastructure. Our users rely on our platform to store digital copies of their valuable content, including financial records, business information, documents, photos, and other important content. Our technical infrastructure may not be adequately designed with sufficient reliability and redundancy to avoid performance delays or outages that could be harmful to our business, and turnover in our personnel, may additionally impact our ability to respond to any such delays or outages. If our platform is unavailable when users attempt to access it, or if it does not load as quickly as they expect, users may not use our platform as often in the future, or at all.

Current wording

Our brand, reputation, and ability to attract, retain, and serve our users is dependent upon the reliable performance of our platform, including our underlying technical infrastructure. Our users rely on our platform to store digital copies of their valuable content, including financial records, business information, documents, photos, and other important content. Our technical infrastructure may not be adequately designed with sufficient reliability and redundancy to avoid performance delays or outages that could be harmful to our business and turnover in our personnel may additionally impact our ability to respond to any such delays or outages. If our platform is unavailable when users attempt to access it, or if it does not load as quickly as they expect, users may not use our platform as often in the future, or at all.

Previous wording

The continued growth of our user base and the amount and types of information stored, synced, and shared on our platform will require an increasing amount of technical infrastructure, including network capacity and computing power, to continue to satisfy the needs of our users. The vast majority of user content is stored at our own custom-built infrastructure in co-location facilities that we directly lease and operate. As we continue to add, enhance and modify our infrastructure to meet our business needs, we may move or transfer additional content accordingly.

Current wording

The continued growth of our user base and the amount and types of information stored, synced, and shared on our platform will require an increasing amount of technical infrastructure, including network capacity and computing power, to continue to satisfy the needs of our users. The vast majority of user content is stored in our own custom-built infrastructure in co-location facilities that we directly lease and operate. As we continue to add, enhance and modify our infrastructure to meet our business needs, we may move or transfer additional content accordingly.

Previous wording

With the introduction of new technologies and market entrants, we expect competition to intensify. Many of our actual and potential competitors have competitive advantages over us, such as greater name recognition, longer operating histories, more varied products and services, larger marketing budgets, more established marketing relationships, access to larger user bases, major distribution agreements with hardware manufacturers and resellers, and greater financial, technical, and other resources. Some of our competitors may make acquisitions or enter into strategic relationships or alliances to offer a broader range of products and services than we do. These combinations make it increasingly difficult for us to compete effectively. We expect these trends to continue as competitors continue to strengthen or maintain their market positions.

Current wording

With the introduction of new technologies and market entrants, we expect competition to intensify. Many of our actual and potential competitors have competitive advantages over us, such as greater name recognition, longer operating histories, more varied products and services, larger marketing budgets, more established marketing relationships, access to larger user bases, major distribution agreements with hardware manufacturers and resellers, and greater financial, technical, and other resources. Some of our competitors may make acquisitions or enter into strategic relationships or alliances to offer a broader range of products and services than we do. These combinations may make it increasingly difficult for us to compete effectively. We expect these trends to continue as competitors strengthen or maintain their market positions.

Previous wording

Demand for our platform is also sensitive to price, and our pricing and packaging has in the past and could in the future negatively impact our top of funnel and conversion rates. Many factors, including our marketing, user acquisition and technology costs, and our current and future competitors’ pricing and marketing strategies, can significantly affect our pricing strategies. Certain of our competitors offer, or may in the future offer, lower-priced or free products or services that compete with our platform or may bundle and offer a broader range of products and services.

Current wording

Demand for our platform is sensitive to price, and our pricing and packaging has in the past and could in the future negatively impact our top of funnel and conversion rates. Many factors, including our marketing, user acquisition and technology costs, and our current and future competitors’ pricing and marketing strategies, can significantly affect our pricing strategies. Certain of our competitors offer, or may in the future offer, lower-priced or free products or services that compete with our platform or may bundle and offer a broader range of products and services.

Previous wording

The content collaboration market is characterized by rapid technological change and frequent new product and service introductions. Our ability to grow our user base and increase revenue from existing users will depend heavily on our ability to enhance and improve our platform, introduce new features and products, increase our strategic partnerships with third parties, and interoperate across an increasing range of devices, operating systems, and third-party applications. Users may require features and capabilities that our current platform does not have. The need to respond to technological changes may require investments in our business that could impact short-term growth or profitability. We have made, and intend to continue making, significant investments in developing products that will incorporate AI, and while we are optimistic that such new products will drive future growth of our business, the development of such new features will incur significant costs, we expect to face increasing competition, and there is no guarantee that such new product offerings will ultimately be successful. Additionally, use of newly-developed AI technology could result in reputational harm, operational risks, or legal liability. Moreover, uncertainty in the regulatory landscape relating to AI along with new or enhanced governmental or regulatory scrutiny could negatively impact our business in the U.S. or in other jurisdictions where we operate. For example, the European Union has proposed an Artificial Intelligence Act that, if finalized, would prohibit certain AI applications and systems and impose additional requirements on the use of certain applications or systems.

Current wording

The content collaboration market is characterized by rapid technological change and frequent new product and service introductions. Our ability to grow our user base and increase revenue from existing users will depend heavily on our ability to enhance and improve our platform, introduce new features and products, increase our strategic partnerships with third parties, and interoperate across an increasing range of devices, operating systems, and third-party applications. Users may require features and capabilities that our current platform does not have. The need to respond to technological changes may require investments in our business that could impact short-term growth or profitability. We have made, and intend to continue making, significant investments in developing products that will incorporate AI, and while we are optimistic that such new products have the potential to drive future growth of our business, the development of such new features will incur significant costs and there is no guarantee that such new product offerings will ultimately be successful. Additionally, use of newly-developed AI technology could result in reputational harm, operational risks, or legal liability. Moreover, uncertainty in the regulatory landscape relating to AI along with new or enhanced governmental or regulatory scrutiny could negatively impact our business in the U.S. or in other jurisdictions where we operate. For example, the European Union enacted the Artificial Intelligence Act in March 2024 that prohibits certain AI applications and systems and imposes additional requirements on the use of certain applications or systems. Additionally, several U.S. states have proposed, and in certain cases have enacted, legislation covering the deployment and regulation of AI technology, or otherwise imposing obligations in connection with the use of AI.

Previous wording

In addition, while we believe trends towards remote or distributed work will prove to be significant and long lasting, and that these trends will open up increased market opportunities for us, such as our work on new AI-driven products, such trends or opportunities may not materialize or, if they do, we may not be able to develop new features or products, or enhance our existing offerings, sufficiently to take advantage of them. We invest significantly in research and development, and our goal is to focus our spending on measures that improve quality and ease of adoption and create organic user demand for our platform. There is no assurance that our enhancements to our platform or our new product experiences, partnerships, features, or capabilities will be compelling to our users or gain market acceptance. If our research and development investments do not accurately anticipate user demand, we are unsuccessful in establishing or maintaining our strategic partnerships, or if we fail to develop our platform in a manner that satisfies user preferences in a timely and cost-effective manner, we may fail to retain our existing users or increase demand for our platform.

Current wording

In addition, while we believe remote or distributed work will continue to have a significant and long lasting impact on the workforce, and will open up increased market opportunities for us, such as our work on new AI-driven products, such opportunities may not materialize or, if they do, we may not be able to develop new features or products, or enhance our existing offerings, sufficiently to take advantage of them. We invest significantly in research and development, and our goal is to focus our spending on measures that improve quality and ease of adoption and create organic user demand for our platform. There is no assurance that our enhancements to our platform or our new product experiences, partnerships, features, or capabilities will be compelling to our users or gain market acceptance. If our research and development investments do not accurately anticipate user demand, we are unsuccessful in establishing or maintaining our strategic partnerships, or if we fail to develop our platform in a manner that satisfies user preferences in a timely and cost-effective manner, we may fail to retain our existing users or increase demand for our platform.

Previous wording

The introduction of new products and services by competitors or the development of entirely new technologies to replace existing offerings could make our platform obsolete or adversely affect our business, results of operations, and financial condition. We may experience difficulties with software development, design, or marketing that could delay or prevent our development, introduction, or implementation of new product experiences, features, or capabilities. We also may experience broad-based business or economic disruptions that could adversely affect the productivity of our employees and result in delays in the development or implementation process. For example, in response to the COVID-19 pandemic, we transitioned to a Virtual First work model, which may lead to disruptions and decreased productivity that could result in delays in our product development process. The risk of such disruptions and decreased productivity may persist as our workforce operates under a Virtual First model. We have in the past experienced delays in our internally planned release dates of new features and capabilities, and there can be no assurance that new product experiences, features, or capabilities will be released according to schedule. Any delays could result in adverse publicity, loss of revenue or market acceptance, or claims by users brought against us, all of which could have a material and adverse effect on our reputation, business, results of operations, and financial condition. Moreover, new features may require substantial investment, and we have no assurance that such investments will be successful. If users do not widely adopt our new product experiences, features, and capabilities, we may not be able to realize a return on our investment. If we are unable to develop, license, or acquire new features and capabilities to our platform on a timely and cost-effective basis, or if such enhancements do not achieve market acceptance, our business, results of operations, and financial condition could be adversely affected.

Current wording

The introduction of new products and services by competitors or the development of entirely new technologies to replace existing offerings could make our platform obsolete or adversely affect our business, results of operations, and financial condition. We may experience difficulties with software development, design, or marketing that could delay or prevent our development, introduction, or implementation of new product experiences, features, or capabilities. We also may experience broad-based business or economic disruptions that could adversely affect the productivity of our employees and result in delays in the development or implementation process. For example, in response to the COVID-19 pandemic, we transitioned to a Virtual First work model, which may lead to disruptions and decreased productivity that could result in delays in our product development process as compared to a fully in-office model. The risk of such disruptions and decreased productivity may persist as our workforce operates under a Virtual First model. We have also in the past experienced delays in our internally planned release dates of new features and capabilities, and there can be no assurance that new product experiences, features, or capabilities will be released according to schedule. Any delays could result in adverse publicity, loss of revenue or market acceptance, or claims by users brought against us, all of which could have a material and adverse effect on our reputation, business, results of operations, and financial condition. Moreover, new features may require substantial investment, and we have no assurance that such investments will be successful. If users do not widely adopt our new product experiences, features, and capabilities, we may not be able to realize a return on our investment. If we are unable to develop, license, or acquire new features and capabilities to our platform on a timely and cost-effective basis, or if such enhancements do not achieve market acceptance, our business, results of operations, and financial condition could be adversely affected.

Previous wording

Our business may be affected by general economic, political, and market conditions, including any resulting negative impact on spending by our business and consumer users. Some of our users may view a paid subscription to our platform as a discretionary purchase, and our paying users have in the past and may in the future reduce their spending on our platform during an economic downturn, especially in the event of a prolonged recessionary period. Concerns about inflation, rising interest rates, unemployment trends, geopolitical issues, including wars and other armed conflicts, global health epidemics and other highly communicable diseases, bank insolvency and related uncertainty and volatility in the financial services industry, or a widespread economic slowdown or recession (in the United States or internationally) have led to, and could continue to lead to, increased market volatility and economic uncertainty, which could cause current and prospective paying users to delay, decrease, or cancel purchases of our products and services, or delay or default on their payment obligations. In response to economic uncertainty, we have been more disciplined in our hiring and operating expenses, either of which could negatively impact our ability to grow and invest in our business. As a result, our business, results of operations, and financial condition may be significantly affected by changes in the economy generally.

Current wording

Our business may be affected by general economic, political, and market conditions, including any resulting negative impact on spending by our business and consumer users. Some of our users may view a paid subscription to our platform as a discretionary purchase, and our paying users have in the past and may in the future reduce their spending on our platform during an economic downturn, especially in the event of a prolonged recessionary period. Concerns about inflation, fluctuating or uncertain interest rates, unemployment trends, geopolitical issues, including wars and other armed conflicts, global health epidemics and other highly communicable diseases, bank insolvencies and related uncertainty and volatility in the financial services industry, or a widespread economic slowdown or recession (in the United States or internationally) have led to, and could continue to lead to, increased market volatility and economic uncertainty, which could cause current and prospective paying users to delay, decrease, or cancel purchases of our products and services, or delay or default on their payment obligations. In response to economic uncertainty, we have been more disciplined in our hiring and operating expenses, either of which could negatively impact our ability to grow and invest in our business. As a result, our business, results of operations, and financial condition may be significantly affected by changes in the economy generally.

Previous wording

To execute our business plan, we must attract and retain highly qualified personnel. Competition for these employees is intense and we may not be successful in attracting and retaining qualified personnel. We have experienced, and we may continue to experience, difficulty in hiring and retaining highly skilled employees with appropriate qualifications. As we continue to operate in a Virtual First model, our recent hires and planned hires may not become as productive as we expect, and we may be unable to hire, integrate, or retain sufficient numbers of qualified individuals. Many of the companies with which we compete for experienced personnel have greater resources than we have. In addition, in making employment decisions, particularly in the internet and high-technology industries, job candidates often consider the value of the equity they are to receive in connection with their employment. Employees may be more likely to leave us if the shares they own or the shares underlying their equity incentive awards have significantly appreciated or significantly reduced in value. Many of our employees may receive significant proceeds from sales of our equity in the public markets, which may reduce their motivation to continue to work for us. If we fail to attract new personnel, or fail to retain and motivate our current personnel, our business, financial results, and growth prospects could be harmed.

Current wording

To execute our business plan, we must attract and retain highly qualified personnel. Competition for these employees is intense and we may not be successful in attracting and retaining qualified personnel. We have experienced, and we may continue to experience, difficulty in hiring and retaining highly skilled employees with appropriate qualifications. As we continue to operate in a Virtual First model, our recent hires and planned hires may not become as productive as we expect, and we may be unable to hire, integrate, or retain sufficient numbers of qualified individuals. Many of the companies with which we compete for experienced personnel have greater resources than we have. In addition, in making employment decisions, particularly in the internet and high-technology industries, job candidates often consider the value of the equity they are to receive in connection with their employment. Employees may be more likely to leave us if the shares they own or the shares underlying their equity incentive awards have significantly appreciated or significantly reduced in value. Many of our employees may receive significant proceeds from sales of our equity in the public markets, which may reduce their motivation to continue to work for us. Furthermore, our 2024 reduction in workforce may result in increased attrition, reduce employee morale, and negatively impact employee recruiting and retention. If we fail to attract new personnel, or fail to retain and motivate our current personnel, our business, financial results, and growth prospects could be harmed.

Previous wording

We have a limited history of operating with a Virtual First workforce and the long-term impact on our financial results and business operations remains uncertain.

Current wording

We operate with a Virtual First workforce and the long-term impact of this model on our financial results and business operations remains uncertain.

Previous wording

In October 2020, we announced a Virtual First work model pursuant to which remote work has become the primary experience for all of our employees and our intention is for our workforce to continue being more distributed over time. However, we have a limited history of operating with a Virtual First workforce and, although we anticipate that our Virtual First work model will have a long-term positive impact on our financial results and business operations, the impact remains uncertain. Additionally, there is no guarantee that we will realize the anticipated benefits to our business, including cost savings, increased employee satisfaction or ability to attract and retain employees. We may also not achieve operational efficiencies, or increased productivity.

Current wording

In October 2020, we announced a Virtual First work model pursuant to which remote work has become the primary experience for all of our employees and our intention is for our workforce to continue being more distributed over time. However, although we anticipate that our Virtual First work model will have a long-term positive impact on our financial results and business operations, the impact remains uncertain. Additionally, there is no guarantee that we will realize the anticipated benefits to our business, including cost savings, increased employee satisfaction or ability to attract and retain employees. We may also not achieve operational efficiencies, or increased productivity.

Previous wording

Our shift to a Virtual First work model could make it increasingly difficult to oversee our increasingly distributed workforce and manage our business, potentially resulting in harm to our company culture, increased employee attrition, and the loss of key personnel, as well as potentially negatively impacting product research and development and the growth of our business. We may also experience an increased risk of privacy and data security breaches and incidents involving our data or our users’ content. Any of these factors could adversely affect our financial condition and operating results.

Current wording

Our Virtual First work model could make it increasingly difficult to oversee our increasingly distributed workforce and manage our business, potentially resulting in harm to our company culture, increased employee attrition, and the loss of key personnel, as well as potentially negatively impacting product research and development and the growth of our business. We may also experience an increased risk of privacy and data security breaches and incidents involving our data or our users’ content. Any of these factors could adversely affect our financial condition and operating results.

Previous wording

In addition, as we continue our shift to Virtual First, we will need less office space than we are currently contractually committed to leasing and as a result, we have recorded and may in the future record impairment charges related to the office spaces we no longer expect to need, which impacted and may in the future impact our ability to achieve or maintain GAAP profitability. Furthermore, any prolonged recessionary period and industry shifts towards remote or distributed work, declines in rent prices or increased availability of open office space, may prevent us from finding subtenants for our unused office space on favorable terms or at all. The extended decline in demand for commercial real estate in San Francisco, in particular, has impacted our subleasing strategy and resulted in us taking additional impairment charges beyond our original expectations. In the event that we are unable to sublease our space on favorable terms or at all, or if we are able to sublease space but our subtenants fail to make lease payments to us or otherwise default on their obligations to us, we may generate less sublease income than we have currently estimated, continue to incur substantial payment obligations under our leases and incur additional or higher impairment charges than we have currently estimated, any of which could materially and adversely affect our business, cash flows, results of operations, profitability, and financial condition.

Current wording

In addition, as we continue to operate with our Virtual First model, we will need less office space than we are currently contractually committed to leasing and, as a result, we have recorded and may in the future record impairment charges related to the office spaces we no longer expect to need, which impacted and may in the future impact our ability to achieve or maintain GAAP profitability. Furthermore, any prolonged recessionary period and industry shifts towards remote or distributed work, declines in rent prices or increased availability of open office space, may prevent us from finding subtenants for our unused office space on favorable terms or at all. The extended decline in demand for commercial real estate in San Francisco, in particular, has impacted our subleasing strategy and resulted in us taking additional impairment charges beyond our original expectations. In the event that we are unable to sublease our space on favorable terms or at all, or if we are able to sublease space but our subtenants fail to make lease payments to us or otherwise default on their obligations to us, we may generate less sublease income than we have currently estimated, continue to incur substantial payment obligations under our leases and incur additional or higher impairment charges than we have currently estimated, any of which could materially and adversely affect our business, cash flows, results of operations, profitability, and financial condition.

Previous wording

Historically, our business model has been driven by organic adoption and viral growth, with more than 90% of our revenue generated from self-serve channels. As a result, we do not have a significant outbound sales force, which has enabled us to be more efficient with our sales and marketing spend. Although we believe our business model can continue to scale without a large outbound sales force, our word-of-mouth and user referral marketing model may not continue to be as successful as we anticipate, and our limited experience selling directly to large organizations through our outbound sales force may impede our future growth. As we continue to scale our business, an enhanced sales infrastructure could assist in reaching larger organizations and growing our revenue. Identifying and recruiting additional qualified sales personnel and training them would require significant time, expense, and attention, and would significantly impact our business model. Further, adding more sales personnel would change our cost structure and results of operations, and we may have to reduce other expenses in order to accommodate a corresponding increase in sales and marketing expenses. If our limited outbound sales force and lack of experience selling and marketing to large organizations prevents us from reaching larger organizations and growing our revenue, and if we are unable to hire, develop, and retain talented sales personnel in the future, our business, results of operations, and financial condition could be adversely affected.

Current wording

Historically, our business model has been driven by organic adoption and viral growth, with more than 90% of our revenue generated from self-serve channels. As a result, we do not have a significant outbound sales force, which has enabled us to be more efficient with our sales and marketing spend. Our word-of-mouth and user referral marketing model may not continue to be as successful as we anticipate, and our limited experience selling directly to large organizations through our outbound sales force may impede our future growth. As we continue to scale our business, an enhanced sales infrastructure could assist in reaching larger organizations and growing our revenue. Identifying and recruiting additional qualified sales personnel and training them would require significant time, expense, and attention, and would significantly impact our business model. Further, adding more sales personnel would change our cost structure and results of operations, and we may have to reduce other expenses in order to accommodate a corresponding increase in sales and marketing expenses. If our limited outbound sales force and lack of significant experience selling and marketing to large organizations prevents us from reaching larger organizations and growing our revenue, and if we are unable to hire, develop, and retain talented sales personnel in the future, our business, results of operations, and financial condition could be adversely affected.

Previous wording

We are continuing to expand our operations outside the United States, where we may be subject to increased business and economic risks that could impact our results of operations.

Current wording

Our current operations outside the United States and our efforts to expand, subject us to increased business and economic risks that could impact our results of operations.

Previous wording

We have paying users across approximately 180 countries and approximately half of our revenue in the year ended December 31, 2023 was generated from paying users outside the United States. We expect to continue to expand our international operations, which may include employees working in new jurisdictions and providing our platform in additional languages. Any new markets or countries into which we attempt to sell subscriptions to our platform may not be receptive. For example, we may not be able to expand further in some markets if we are unable to satisfy certain government- and industry-specific requirements. In addition, our ability to manage our business and conduct our operations internationally requires considerable management attention and resources and is subject to the particular challenges of supporting a rapidly growing business in an environment of multiple languages, cultures, customs, legal and regulatory systems, alternative dispute systems, and commercial markets. International expansion has required, and will continue to require, investment of significant funds and other resources. Expanding and operating internationally subjects us to regulatory, economic, geographic, social, and political risks and may increase risks that we currently face, including risks associated with:

Current wording

We have paying users across approximately 180 countries and approximately 43% of our revenue in the year ended December 31, 2024 was generated from paying users outside the United States. We expect to continue to expand our international operations, which may include employees working in new jurisdictions and providing our products in additional languages. Any new markets or countries into which we attempt to sell subscriptions to our platform may not be receptive. For example, we may not be able to expand further in some markets if we are unable to satisfy certain government- and industry-specific requirements. In addition, our ability to manage our business and conduct our operations internationally requires considerable management attention and resources and is subject to the particular challenges of supporting a rapidly growing business in an environment of multiple languages, cultures, customs, legal and regulatory systems, alternative dispute systems, and commercial markets. International expansion has required, and will continue to require, investment of significant funds and other resources. Expanding and operating internationally subjects us to regulatory, economic, geographic, social, and political risks and may increase risks that we currently face, including risks associated with:

Previous wording

•compliance with applicable international laws, regulations, and standards including laws and regulations with respect to labor and employment, privacy, data protection, cybersecurity, consumer protection, tax, export control and sanctions, and unsolicited email, and the risk of penalties to our users and individual members of management or employees if our practices are deemed to be out of compliance;

Current wording

•compliance with applicable international laws, regulations, and standards including laws and regulations with respect to labor and employment, privacy, data protection, cybersecurity, AI, consumer protection, tax, export control and sanctions, and unsolicited email, and the risk of penalties to our users and individual members of management or employees if our practices are deemed to be out of compliance;

Previous wording

If the datacenters and service providers that we use are unable to keep up with our growing needs for capacity, or if we are unable to renew our agreements with datacenters, and service providers on commercially reasonable terms, we may be required to transfer servers or content to new datacenters or engage new service providers, and we may incur significant costs, and possible service interruption in connection with doing so. Any changes in third-party service levels at datacenters or any real or perceived errors, defects, disruptions, or other performance problems with our platform could harm our reputation and may result in damage to, or loss or compromise of, our users’ content. Interruptions in our platform might, among other things, reduce our revenue, cause us to issue refunds to users, subject us to potential liability, harm our reputation, or decrease our renewal rates.

Current wording

If the datacenters and service providers that we use are unable to keep up with our growing needs for capacity, or if we are unable to renew our agreements with datacenters, and service providers on commercially reasonable terms, we may be required to transfer servers or content to new datacenters or engage new service providers, and we may incur significant costs, and possible service interruption in connection with doing so. Any changes in third-party service levels at datacenters or any real orperceived errors, defects, disruptions, or other performance problems with our platform could harm our reputation and may result in damage to, or loss or compromise of, our users’ content. Interruptions in our platform might, among other things, reduce our revenue, cause us to issue refunds to users, subject us to potential liability, harm our reputation, or decrease our renewal rates.

Previous wording

We also depend on our ecosystem of developers to create applications that will integrate with our platform. As of December 31, 2023, Dropbox was receiving over 75 billion API calls per month, and just under 1,000,000 developers had registered and built applications on our platform. Our reliance on this ecosystem of developers creates certain business risks relating to the quality of the applications built using our APIs, service interruptions of our platform from these applications, lack of service support for these applications, and possession of intellectual property rights associated with these applications.

Current wording

We also depend on our ecosystem of developers to create applications that will integrate with our platform. As of December 31, 2024, Dropbox was receiving over 75 billion API calls per month, and just over 1,000,000 developers had registered and built applications on our platform. Our reliance on this ecosystem of developers creates certain business risks relating to the quality of the applications built using our APIs, service interruptions of our platform from these applications, lack of service support for these applications, and possession of intellectual property rights associated with these applications.

Previous wording

We have acquired, and may in the future acquire, other businesses and technologies, which could require significant management attention, disrupt our business operations, cause us to incur debt or dilute stockholder value.

Current wording

We have acquired or invested in, and may in the future acquire or invest in, other businesses, assets, and technologies, which could require significant management attention, disrupt our business operations, cause us to incur debt or dilute stockholder value, and may not be successful.

Previous wording

As part of our business strategy, we have acquired or invested in, and may in the future acquire or invest in, other companies, employee teams, or technologies to complement or expand our products, obtain personnel, or otherwise complement or grow our business. For example, in the fourth fiscal quarter of 2022, we acquired key assets from Boxcryptor, a provider of end-to-end "zero knowledge" encryption for cloud storage services, with plans to embed these capabilities natively within Dropbox to provide an additional layer of data protection for certain of our customers on paid plans. Additionally, in the fourth fiscal quarter of 2022, we acquired FormSwift, a cloud-based service that provides users the ability to create, edit, and save critical business forms and agreements.

Current wording

As part of our business strategy, we have acquired or invested in, and may in the future acquire or invest in, other companies, employee teams, or technologies to complement or expand our products, obtain personnel, or otherwise complement or grow our business.

Previous wording

Any acquisition we complete could be viewed negatively by users, developers, partners, or investors, and could have adverse effects on our existing business relationships, financial condition, or the value of our capital stock.

Current wording

Any acquisition we complete could be viewed negatively by users, developers, partners, or investors, and could have adverse effects on our existing business relationships, financial condition, or the value of our capital stock. Further, an acquired business may not achieve the returns or strategic benefits we expected and we may have unanticipated expenses, write-offs or charges related to such acquisitions.

Previous wording

Our current indebtedness, including our 2026 Notes, 2028 Notes and our revolving credit facility, place significant restrictions on our business and could have important consequences to our stockholders and effects on our business, as could any future indebtedness.

Current wording

Our current indebtedness, including our 2026 Notes, 2028 Notes and our term loan facility, place significant restrictions on our business and could have important consequences to our stockholders and effects on our business, as could any future indebtedness.

Previous wording

For example, the terms of our revolving credit and guarantee agreement, as amended, contain a number of covenants that limit our ability and our subsidiaries’ ability to, among other things, incur additional indebtedness, pay dividends, make redemptions and repurchases of stock, make investments, loans and acquisitions, create liens, engage in transactions with affiliates, merge or consolidate with other companies, or sell substantially all of our assets. We are also required to maintain certain financial covenants, including a consolidated leverage ratio incurrence covenant and a minimum liquidity balance.

Current wording

For example, the terms of our term loan facility contain a number of covenants that limit our ability and our subsidiaries’ ability to, among other things, incur additional indebtedness, create liens, merge or consolidate with other companies, sell substantially all of our assets, pay dividends, make redemptions and repurchases of stock, engage in transactions with affiliates, make investments, loans and acquisitions, and prepay certain indebtedness, in each case subject to qualifications and exceptions.

Previous wording

•make it more difficult for us to satisfy our debt obligations, including the 2026 Notes and the 2028 Notes;

Current wording

•make it more difficult for us to satisfy our debt obligations, including our term loan facility, the 2026 Notes and the 2028 Notes;

Previous wording

We finance a significant portion of our expenditures through leasing arrangements, and we may enter into additional similar arrangements in the future. As of December 31, 2023, we had an aggregate of $1,173.6 million of commitments to settle contractual obligations. In particular, we utilize both finance and operating leases to finance some of our equipment, datacenters and offices. In addition, we may draw upon our revolving credit facility to finance our operations or for other corporate purposes. If we default on these leasing or credit obligations, our leasing partners and lenders may, among other things:

Current wording

We finance a significant portion of our expenditures through leasing arrangements, and we may enter into additional similar arrangements in the future. As of December 31, 2024, we had an aggregate of $1,088.6 million of commitments to settle contractual obligations. In particular, we utilize both finance and operating leases to finance some of our equipment, datacenters and offices. In addition, we borrowed $1.0 billion of term loans under our term loan facility for general corporate purposes, including repurchases of our stock. If we default on these leasing or credit obligations, our leasing partners and lenders may, among other things:

Previous wording

•require repayment of any outstanding lease obligations;

Current wording

•require repayment of any outstanding lease obligations or loans;