Skip to main content

Expensify, Inc.

For the period ended Dec 31, 2025. Filed Feb 26, 2026.

View on SEC.gov

About this filing

A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.

FY2025 · Filed Feb 26, 2026

EXFY$2.05-8.1%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-K

Period ended 2024-12-31; filed 2025-02-27.

0001476840-25-000018

Item 1A. Risk Factors

Current report: 10-K

Period ended 2025-12-31; filed 2026-02-26.

0001476840-26-000009

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 329 previous paragraphs and 335 current paragraphs.

277 unchanged; 48 reworded; 8 added; 4 removed; 0 previous and 2 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (8)

Current report

In the United States, legislation related to the use of automated decision making has been introduced at the federal level and enacted or proposed at the state level as well. Some enacted or proposed frameworks include requirements focused on transparency, risk-management and accountability for AI

Current report

Technologies, while others focus on high-risk uses of AI, the use of automated decision-making technology or companies that are developers or deployers of AI Technologies. For example, the California Privacy Protection Agency finalized regulations under the California Consumer Privacy Act regarding the use of automated decision making. Numerous other states have enacted, passed, or are considering AI-focused legislation, creating a patchwork of regulations and a complex compliance challenge. Furthermore, the Trump administration’s approach to investment in and regulation of AI Technologies has and is expected to continue to deviate from that of the previous administration and we will need to adapt to any changes that may result from such approach, including as the result of new or changing executive orders. These new regulations and any subsequent laws or regulations may present additional complexity and risk to our business, particularly but not limited to where these laws overlap with privacy laws designed to protect individuals.

Current report

Any or all of the foregoing regulatory developments could affect our use of AI and our ability to provide, improve or commercialize our services, require changes to our operations and processes, and materially adversely affect our business, results of operations, and financial condition. Further, any failure or perceived failure by us to comply with existing or newly enacted laws, regulations and other requirements relating to AI Technologies could result in legal claims or proceedings (including class actions), regulatory investigations or enforcement actions.

Current report

It is possible that further new laws and regulations will be adopted in the United States and in other non-U.S. jurisdictions, or that existing laws and regulations, including competition, antitrust, data privacy and consumer protection laws, may be interpreted or enforced in ways that would limit our ability to use AI Technologies for our business, or require us to change the way we use AI Technologies in a manner that negatively affects the performance of our products, services, and business and the way in which we use AI Technologies. We may need to expend resources to adjust our products or services in certain jurisdictions if the laws, regulations, or decisions are not consistent across jurisdictions. Further, the cost to comply with such laws, regulations, or decisions and/or guidance interpreting existing laws, could be significant and would increase our operating expenses (such as by imposing additional reporting obligations regarding our use of AI Technologies). Such an increase in operating expenses could adversely affect our business, financial condition and results of operations. In addition, if we fail or are perceived to fail to comply with these laws and regulations, we may face lawsuits (including class actions), investigations, enforcement actions, negative reputational impacts, and other penalties that materially impact our business.

Current report

We are subject to travel payments-related fraud risks.

Current report

Our results of operations and financial condition could be negatively affected by our unintentional acceptance of fraudulent travel bookings made using stolen credit and debit cards. We are sometimes held liable for accepting fraudulent bookings through our website or for accepting other bookings for which payment is subsequently disputed by our customers, both of which have lead, and in the future may lead to the reversal of payments received by our partners for such bookings (referred to as a “charge-back”). Our ability to detect and combat fraudulent schemes, which have become increasingly common and sophisticated, may be negatively impacted by the emergence and innovation of new technology platforms and our global expansion, including into markets with a history of elevated fraudulent activity. In addition, we have not broadly adopted certain protective capabilities across our platform, such as requiring mobile application-based multi-factor authentication or third-party identify verification, which could result in significantly increased fraudulent activity on our platform.

Current report

We depend on our travel partners to detect and prevent certain kinds of fraudulent bookings. If we or our partners are unable to effectively combat fraudulent bookings on our website or if we otherwise experience increased levels of charge-backs, our partners, and by extension we, may also be subject to significant fines and higher transaction fees, or payment card networks may revoke our partners' access to their networks, meaning they would be unable to continue to accept card payments for travel on our behalf, either of which could have a material adverse effect on our results of operations and financial condition.

Current report

The rapid evolution and increased adoption of AI technologies also increases the risk of fraudulent bookings. In addition to adversely affecting our business, results of operations and financial condition, any of the foregoing events could have a significant negative effect on the value of our brand, which could also in turn have a material adverse impact on our financial performance.
Removed paragraphs (4)

Previous report

Additionally, In the United States, the Trump administration has rescinded an executive order relating to the safe and secure development of AI Technologies that was previously implemented by the Biden administration. The Trump administration then issued a new executive order that, among other things, requires certain agencies to develop and submit to the president action plans to “sustain and enhance America’s global AI dominance,” and to specifically review and, if possible, rescind rulemaking taken pursuant to the rescinded Biden executive order. Thus, the Trump administration may continue to rescind other existing federal orders and/or administrative policies relating to AI Technologies, or may implement new executive orders and/or other rule making relating to AI Technologies in the future. Any such changes at the federal level could require us to expend significant resources to modify our products, services, or operations to ensure compliance or remain competitive. U.S. legislation related to AI Technologies has also been introduced at the federal level and is advancing at the state level. For example, the California Privacy Protection Agency is currently in the process of finalizing regulations under the CCPA regarding the use of automated decision-making. California also enacted seventeen new laws in 2024 that further regulate use of AI Technologies and provide consumers with additional protections around companies’ use of AI Technologies, such as requiring companies to disclose certain uses of generative AI. Other states have also passed AI-focused legislation, such as Colorado’s Artificial Intelligence Act, which will require developers and deployers of “high-risk” AI systems to implement certain safeguards against algorithmic discrimination, and Utah’s Artificial Intelligence Policy Act, which establishes disclosure requirements and accountability measures for the use of generative AI in certain consumer interactions. Such additional regulations may impact our ability to develop, use, procure and commercialize AI Technologies in the future.

Previous report

As of December 31, 2024, we were not in compliance with all debt coven ants under the 2024 Amended Loan and Security Agreement, specifically the covenant restricting the amount of repurchases of common stock, which includes net share settlements of stock-based awards. On February 13, 2025, we entered into a third amendment to the 2024 Amended Loan and Security Agreement, which amended the covenant restricting the amount of repurchases of common stock, which includes net share settlements of stock-based awards, to allow for certain additional net share settlement activity and which provided a waiver from CIBC for our non-compliance with the previous version of such covenant as of December 31, 2024. We do not believe non-compliance with this covenant had any material impact on our operations.

Previous report

Because a substantial portion of our debt is variable-rate debt, fluctuations in interest rates could have a material effect on our business. We incur higher interest costs if interest rates increase. We are currently experiencing a high interest rate environment, and there is no guarantee that there will not be any further increases in the future. Any such increase in interest costs could have a material adverse impact on our financial condition and the levels of cash we maintain for working capital.

Previous report

Generally accepted accounting principles in the United States are subject to interpretation by the Financial Accounting Standards Board ("FASB"), the American Institute of Certified Public Accountants, the SEC and various bodies formed to promulgate and interpret appropriate accounting principles. A change in these principles or interpretations could have a significant effect on our reported financial results, and could affect the reporting of transactions completed before the announcement of a change.
Reworded paragraphs (48)

Previous wording

•our ability to grow or maintain our gross logo retention rate and net seat retention rate (each as described under the section titled "Management's Discussion and Analysis of Financial Condition and Results of Operations—Key Factors Affecting Our Performance—Retaining Existing Customers"), expand usage within organizations, retain and increase sales to existing customers and attract new members and customers;

Current wording

•our ability to grow or maintain our gross logo retention rate and net seat retention rate (each as described in Part II, Item 7 “Management's Discussion and Analysis of Financial Condition and Results of Operations”), expand usage within organizations, retain and increase sales to existing customers and attract new members and customers;

Previous wording

•health crises, such as the COVID-19 pandemic, or other conditions that impact travel and business spending; and

Current wording

•health crises or other conditions that impact travel and business spending; and

Previous wording

•grow or maintain current levels of consideration from a vendor and/or fees generated through transaction-based features;

Current wording

•grow or maintain current levels of interchange revenue and/or fees generated through transaction-based features;

Previous wording

•the impact of any future pandemic, epidemic or other public health crisis and the corresponding pace and rate of recovery on our business;

Current wording

•the impact of any future pandemic, epidemic or other public health crisis on our business;

Previous wording

A majority of our subscriptions are driven by bottom-up adoption related to our expense management feature. Although we have added, and expect to continue to add, new features to expand our offerings, and all of our features are accessible under a single subscription, at least in the near term, we expect our expense management feature to continue to drive the majority of our subscriptions. As a result, market acceptance of our expense management feature is critical to our success. Demand for our expense management feature, as well as our other features, is affected by a number of factors, many of which are beyond our control, such as the adoption of our features by new and existing customers; the timing of development and release of upgraded or new features on our platform; products and services introduced or upgraded by our competitors or partners; our ability to determine optimal pricing for our platform, including in international markets; pricing offered by our competitors; technological change; and growth or contraction in our addressable market. We increased our subscription prices in 2020, and although the increased prices have not substantially affected our business to date, we cannot guarantee any future price increases we choose to implement will not adversely affect our business. If we are unable to meet customer demand for our expense management feature; do not price our subscriptions optimally or make changes to our subscription or pricing models that are not accepted by the market; or fail to convert members of our free expense management feature or trial subscriptions to paying subscribers, our business, results of operations, financial condition and growth prospects will suffer.

Current wording

A majority of our subscriptions are driven by bottom-up adoption related to our expense management feature. Although we have added, and expect to continue to add, new features to expand our offerings, and all of our features are accessible under a single subscription, at least in the near term, we expect our expense management feature to continue to drive the majority of our subscriptions. As a result, market acceptance of our expense management feature is critical to our success. Demand for our expense management feature, as well as our other features, is affected by a number of factors, many of which are beyond our control, such as the adoption of our features by new and existing customers; the timing of development and release of upgraded or new features on our platform; products and services introduced or upgraded by our competitors or partners; our ability to determine optimal pricing for our platform, including in international markets; pricing offered by our competitors; technological change; and growth or contraction in our addressable market. We cannot guarantee any price increases we may choose to implement in the future will not adversely affect our business. If we are unable to meet customer demand for our expense management feature; do not price our subscriptions optimally or make changes to our subscription or pricing models that are not accepted by the market; or fail to convert members of our free expense management feature or trial subscriptions to paying subscribers, our business, results of operations, financial condition and growth prospects will suffer.

Previous wording

For example, in 2021 we released the first version of an open-source financial group chat optimized for financial conversations, designed to be used both in and outside of work, and maintained by a community of open source developers. The current version has a subset of the features of our legacy app available as we continue development. We expect our open-source offering to be a complete rewrite of the Expensify front end, built on a new React Native platform that uses the same codebase across iOS, Android, web and desktop once completed. Although we see this direction as a natural next step in our long-term product vision, we have not developed an open-source financial group chat (or similar feature) before, and it may not meet customer needs, gain member traction or generate revenue sufficient to offset the costs of development, which could harm our business even if and when the feature complete version is released.

Current wording

For example, we have been migrating users onto New Expensify, our open-source financial group chat, which we have been developing since 2021, but there can be no guarantee that it will meet customer needs, gain member traction or generate revenue sufficient to offset the costs of development, which could harm our business.

Previous wording

These laws, rules, regulations, licensing and other authorization schemes, and industry standards are administered and enforced by multiple authorities and governing bodies in the United States, including but not limited to the U.S. Department of the Treasury, the Federal Deposit Insurance Corporation, the Board of Governors of the Federal Reserve System, Office of Foreign Assets Control, self-regulatory organizations, and numerous state and local governmental and regulatory authorities. These various authorities and governing bodies may enact conflicting laws or regulations that are complex and may change frequently. Responding to such conflicting, complex or changing rules and regulations entails inherent costs, and any actual or perceived failure to comply with existing or new laws and regulations, or orders of any governmental authority, including changes to or expansion of their interpretations, may subject us to significant fines, penalties, criminal and civil lawsuits, forfeiture of significant assets, enforcement actions in one or more jurisdictions, result in additional compliance and licensure requirements, and increased regulatory scrutiny of our business. In addition, we may be forced to restrict or change our operations or business practices, make product changes, or delay planned product launches or improvements. Any of the foregoing could materially adversely affect our brand, reputation, business, results of operations, and financial condition.

Current wording

These laws, rules, regulations, licensing and other authorization schemes, and industry standards are administered and enforced by multiple authorities and governing bodies in the United States, including but not limited to the U.S. Department of the Treasury, the Federal Deposit Insurance Corporation, the Board of Governors of the Federal Reserve System, Office of Foreign Assets Control, self-regulatory organizations, and numerous state and local governmental and regulatory authorities. These various authorities and governing bodies may enact conflicting laws or regulations that are complex and may change frequently. Responding to such conflicting, complex or changing rules and regulations entails inherent costs, and any actual or perceived failure to comply with existing or new laws and regulations, or orders of any governmental authority, including changes to or expansion of their interpretations, may subject us to significant fines, penalties, criminal and civil lawsuits, forfeiture of significant assets, restrictions and expulsion from card acceptance programs, enforcement actions in one or more jurisdictions, result in additional compliance and licensure requirements, and increased regulatory scrutiny of our business. In addition, we may be forced to restrict or change our operations or business practices, make product changes, or delay planned product launches or improvements. Any of the foregoing could materially adversely affect our brand, reputation, business, results of operations, and financial condition.

Previous wording

Expensify Payments LLC (“Expensify Payments”) is a licensed money transmitter (or its equivalent) in various U.S. states and territories and is in the process of obtaining money transmission licenses in a number of additional states and territories. As a licensed money transmitter, Expensify Payments, its ultimate beneficial owners, and its control persons are subject to a range of restrictions and ongoing compliance obligations under the money transmitter statutes (or their equivalent) administered by the banking departments (or their equivalent) of the various U.S. states and territories where it is licensed, including requirements with respect to the investment of customer funds, financial recordkeeping and reporting, reconciliation of customer funds, bonding, minimum capital, minimum net worth, disclosure, and inspection by regulatory authorities concerning various aspects of its business. In a number of cases, evaluation of our compliance efforts, as well as questions of whether and to what extent our activities in connection with the provision of certain products and services (both current and historical) are considered money transmission, are matters of regulatory interpretation and could change over time. In the past, regulators have identified violations or alleged violations by us of certain statutory and regulatory requirements, and we have been subject to fines and other penalties by state regulatory authorities due to their interpretation and application of their respective state money transmitter regime to our activities. As a result of the laws and regulations applicable to us and our business, we are and could in the future be subject to investigations, inspections, examinations, and supervision, and resulting liability, including governmental fines, restrictions on our business, or other similar enforcement actions, and we could be forced to cease conducting certain aspects of our business with residents of certain jurisdictions, be forced to change our business practices in certain jurisdictions, or be required to obtain additional licenses, regulatory approvals, or other similar authorizations. We cannot make any assurances that we will be able to obtain or maintain any such licenses, regulatory approvals, and other similar authorizations, and there could be substantial costs and potential product changes involved in obtaining and maintaining any such licenses, approvals, or other similar authorizations, which could have a material adverse effect on our business. In addition, there are substantial costs and potential product changes involved in maintaining and renewing any licenses, regulatory approvals, and other similar authorizations, and we could be subject to fines or other enforcement action if we are found to violate disclosure, reporting, anti-money laundering, capitalization, net worth, corporate governance, or other requirements applicable to us, including those required in connection with maintaining such licenses, a…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Expensify Payments LLC (“Expensify Payments”) is a licensed money transmitter (or its equivalent) in most U.S. states and territories. As a licensed money transmitter, Expensify Payments, its ultimate beneficial owners, and its control persons are subject to a range of restrictions and ongoing compliance obligations under the money transmitter statutes (or their equivalent) administered by the banking departments (or their equivalent) of the various U.S. states and territories where it is licensed, including requirements with respect to the investment of customer funds, financial recordkeeping and reporting, reconciliation of customer funds, bonding, minimum capital, minimum net worth, disclosure, and inspection by regulatory authorities concerning various aspects of its business. In a number of cases, evaluation of our compliance efforts, as well as questions of whether and to what extent our activities in connection with the provision of certain products and services (both current and historical) are considered money transmission, are matters of regulatory interpretation and could change over time. In the past, regulators have identified violations or alleged violations by us of certain statutory and regulatory requirements, and we have been subject to fines and other penalties by state regulatory authorities due to their interpretation and application of their respective state money transmitter regime to our activities. As a result of the laws and regulations applicable to us and our business, we are and could in the future be subject to investigations, inspections, examinations, and supervision, and resulting liability, including governmental fines, restrictions on our business, or other similar enforcement actions, and we could be forced to cease conducting certain aspects of our business with residents of certain jurisdictions, be forced to change our business practices in certain jurisdictions, or be required to obtain additional licenses, regulatory approvals, or other similar authorizations. We cannot make any assurances that we will be able to obtain or maintain any such licenses, regulatory approvals, and other similar authorizations, and there could be substantial costs and potential product changes involved in obtaining and maintaining any such licenses, approvals, or other similar authorizations, which could have a material adverse effect on our business. In addition, there are substantial costs and potential product changes involved in maintaining and renewing any licenses, regulatory approvals, and other similar authorizations, and we could be subject to fines or other enforcement action if we are found to violate disclosure, reporting, anti-money laundering, capitalization, net worth, corporate governance, or other requirements applicable to us, including those required in connection with maintaining such licenses, approvals, or authorizations. These factors could impose substantial additional costs on us, involve considerable de…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Our success depends largely upon the continued services of our key executive officers and employees, including our founder and CEO, David Barrett. We also rely on our leadership team in the areas of research and development, marketing, sales, services and general and administrative functions, and on mission-critical individual contributors in research and development. From time to time, there may be changes in our executive management team resulting from the hiring or departure of executives, which could disrupt our business. We do not have employment agreements with our executive officers or other key personnel that require them to continue to work for us for any specified period and, therefore, they could terminate their employment with us at any time. The loss of one or more of our executive officers or key employees could have a serious adverse effect on our business.

Current wording

Our success depends largely upon the continued services of our key executive officers and employees, including our founder and CEO, David Barrett. We also rely on our leadership team in the areas of research and development, marketing, sales, services and general and administrative functions, and on mission-critical individual contributors in research and development. From time to time, there may be changes in our executive management team resulting from the hiring or departure of executives, which could disrupt our business. We do not have employment agreements with our executive officers or other key personnel that require them to continue to work for us for any specified period and, therefore, they could terminate their employment with us at any time. The loss of one or both of our executive officers or other key employees could have a serious adverse effect on our business.

Previous wording

On February 25, 2025, the Executive Committee authorized a share repurchase program to repurchase up to $50 million of our outstanding Class A common stock, which replaces the Company's share repurchase program that was approved in 2022. Although the Executive Committee has authorized this repurchase program, the program does not obligate us to repurchase any specific dollar amount or to acquire any specific number of shares. The actual timing, manner, price and total amount of future repurchases will depend on a variety of factors, including business, economic and market conditions, corporate and regulatory requirements, prevailing stock prices, restrictions under the terms of loan agreements and other considerations. The share repurchase program may be modified, suspended, or terminated at any time, and we cannot guarantee that the program will be fully consummated or that it will enhance long-term stockholder value. The program could affect the trading price of our stock and increase volatility, and any announcement of a termination of this program may result in a decrease in the trading price of our stock. In addition, this program could diminish our cash and cash equivalents and marketable securities.

Current wording

On February 25, 2025, the Executive Committee of our Board of Directors (the “Executive Committee”) authorized a share repurchase program to repurchase up to $50 million of our outstanding Class A common stock, which replaced the Company's share repurchase program that was approved in 2022. Although the Executive Committee has authorized this repurchase program, the program does not obligate us to repurchase any specific dollar amount or to acquire any specific number of shares. The actual timing, manner, price and total amount of future repurchases will depend on a variety of factors, including business, economic and market conditions, corporate and regulatory requirements, prevailing stock prices, restrictions under the terms of loan agreements and other considerations. The share repurchase program may be modified, suspended, or terminated at any time, and we cannot guarantee that the program will be fully consummated or that it will enhance long-term stockholder value. The program could affect the trading price of our stock and increase volatility, and any announcement of a termination of this program may result in a decrease in the trading price of our stock. In addition, this program could diminish our cash and cash equivalents and marketable securities.

Previous wording

The Expensify Card is an important element of our growth strategy, and we believe that, over time, the Expensify Card will be a prominent corporate card solution for SMBs in our core markets. For our Legacy Card Program, launched in 2020, we rely on a single third-party vendor, Marqeta, for the Expensify Card, who also manages the relationship with the card's issuing bank, Sutton Bank, and the card network, Visa. In the annual periods ended December 31, 2024, 2023 and 2022, consideration from this vendor representing monetized Expensify Card activities reduced our cost of revenue by $7.2 million, $10.1 million, and $6.2 million, respectively. Our agreement with Marqeta initially had a three year term that was renewed in June 2022 and now automatically renews annually thereafter unless either party provides 90 days’ notice prior to renewal.

Current wording

The Expensify Card is an important element of our growth strategy, and we believe that, over time, the Expensify Card will be a prominent corporate card solution for SMBs in our core markets. For our previous card program (the “Legacy Card Program”), launched in 2020, we rely on a single third-party vendor, Marqeta, for the Expensify Card, who also manages the relationship with the card's issuing bank, Sutton Bank, and the card network, Visa. In the annual period ended December 31, 2025, consideration from this vendor representing monetized Expensify Card activities reduced our cost of revenue by an immaterial amount. In the annual period ended December 31, 2024, consideration from this vendor representing monetized Expensify Card activities reduced our cost of revenue by $7.2 million. Our agreement with Marqeta initially had a three year term that was renewed in June 2022 and now automatically renews annually thereafter unless either party provides 90 days’ notice prior to renewal.

Previous wording

Under our Updated Card Program, which launched in February 2024, we rely on Marqeta as the payment processor, Bancorp as the card’s issuing bank, and Visa as the card network. In the annual period ended December 31, 2024, interchange revenue earned under the Updated Card Program was $9.2 million. Under the Updated Card Program, our agreement with Marqeta has an initial term of approximately four years, and will automatically renew annually thereafter. Our agreement with Bancorp has an initial five year term, and will automatically renew annually thereafter.

Current wording

Under our updated card program (the “Updated Card Program”), which launched in February 2024 and covers substantially all cardholders, we rely on Marqeta as the payment processor, Bancorp as the card’s issuing bank, and Visa as the card network. In the annual periods ended December 31, 2025 and 2024, interchange revenue earned under the Updated Card Program was $21.3 million and $9.2 million, respectively. Under the Updated Card Program, our agreement with Marqeta has an initial term of approximately four years, and will automatically renew annually thereafter. Our agreement with Bancorp has an initial five year term, and will automatically renew annually thereafter.

Previous wording

If we or our third party providers fail to protect our IT Systems against security incidents, or otherwise to protect our Confidential Information, there may be damage to our reputation and brand, material financial penalties, and legal liability, which could substantially harm our business, financial condition, and results of operations.

Current wording

We and our third-party providers are exposed to cybersecurity risks and incidents that may damage our reputation and brand, cause material financial penalties, and result in legal liability, any of which could substantially harm our business, financial condition, and results of operations.

Previous wording

We face numerous and evolving cybersecurity risks that threaten the confidentiality, integrity, and availability of our IT Systems and Confidential Information, through diverse attack vectors, such as social engineering/phishing, malware (including ransomware), malfeasance by insiders, human or technological error, and as a result of malicious code embedded in open-source software, or misconfigurations, “bugs” or other vulnerabilities in commercial software that is integrated into our (or our suppliers’ or service providers’) IT Systems, products, or services. Attacks upon information technology systems are increasing, and expected to continue increasing, in their frequency, levels of persistence, sophistication and intensity – including through the use of artificial intelligence – and are being conducted by diverse threat actors including sophisticated and organized groups and individuals with a wide range of motives and expertise. Furthermore, because the techniques used to obtain unauthorized access to, or to sabotage, systems change frequently and often are not recognized until launched against a target, we may be unable to anticipate these techniques or implement adequate preventative measures. We may also be subject to vulnerabilities or experience security incidents that may remain undetected for an extended period as attacks may circumvent security controls, evade detection, and remove forensic evidence. As a result, we may be unable to detect, investigate, remediate or recover from future attacks or incidents, or to avoid a material adverse impact to our IT Systems, Confidential Information, or business.

Current wording

We face numerous and evolving cybersecurity risks that threaten the confidentiality, integrity, and availability of our IT Systems and Confidential Information, through diverse attack vectors, such as social engineering/phishing, malware (including ransomware), malfeasance by insiders, human or technological error, and as a result of malicious code embedded in open-source software, or misconfigurations, “bugs” or other vulnerabilities in commercial software that is integrated into our (or our suppliers’ or service providers’) IT Systems, products, or services. Attacks upon information technology systems are increasing, and expected to continue increasing, in their frequency, levels of persistence, sophistication and intensity – including through the use of artificial intelligence – and are being conducted by diverse threat actors including sophisticated and organized groups and individuals with a wide range of motives and expertise. Furthermore, because the techniques used to obtain unauthorized access to, or to sabotage, systems, including tools that circumvent security controls, evade detection, and remove forensic evidence, change frequently and often are not recognized until launched against a target, we may be unable to anticipate these techniques or implement adequate preventative measures. We may also be subject to vulnerabilities or experience security incidents that may remain undetected for an extended period as attacks may circumvent security controls, evade detection, and remove forensic evidence. As a result, we may be unable to detect, investigate, remediate or recover from future attacks or incidents, or to avoid a material adverse impact to our IT Systems, Confidential Information, or business.

Previous wording

There can be no assurance that our cybersecurity risk management program and processes, including our policies, controls, or procedures, will be fully implemented, complied with or effective in protecting our IT Systems and Confidential Information. Because we make extensive use of third party suppliers and service providers, successful cyberattacks that disrupt or result in unauthorized access to third party IT Systems can materially impact our operations and financial results. Additionally, many of our employees and service providers work remotely, in part due to a significant increase in remote work stemming from the COVID-19 pandemic that has been maintained. As a result, we may be more vulnerable to cybersecurity-related events such as phishing attacks and other security challenges. Many companies that provide cloud based services have reported a significant increase in cyberattack activity since the beginning of the COVID-19 pandemic and related increase in remote work.

Current wording

There can be no assurance that our cybersecurity risk management program and processes, including our policies, controls, or procedures, will be fully implemented, complied with or effective in protecting our IT Systems and Confidential Information. Because we make extensive use of third party suppliers and service providers, successful cyberattacks that disrupt or result in unauthorized access to third party IT Systems can materially impact our operations and financial results. Additionally, many of our employees and service providers work remotely. As a result, we may be more vulnerable to cybersecurity-related events such as phishing attacks and other security challenges associated with managing remote computing assets and security vulnerabilities that are present in many non-corporate and home networks. Many companies that provide cloud based services have reported a significant increase in cyberattack activity since the beginning of the COVID-19 pandemic and related increase in remote work. Additionally, any integration of artificial intelligence in our or any service providers' operations, products or services is expected to pose new or unknown cybersecurity risks and challenges.

Previous wording

We and certain of our third-party providers regularly experience cyberattacks and other incidents, and we expect such attacks and incidents to continue in varying degrees. While to date no incidents have had a material impact on our operations or financial results, we cannot guarantee that material incidents will not occur in the future. Any adverse impact to the availability, integrity, or confidentiality of our IT Systems or Confidential Information can result in intentional or accidental unauthorized access to our IT Systems or our customers’ or partners’ sites, networks, systems and accounts; unauthorized access to, and misappropriation or disclosure of Confidential Information; viruses, worms, spyware, ransomware, or other malware being served from our platform, mobile application, networks, or systems, including as a result of supply chain attacks; deletion or modification of content or the display of unauthorized content on our platform; interruption, disruption, or malfunction of operations; costs relating to remediation, deployment of additional personnel and protection technologies, and response to governmental investigations and media inquiries and coverage; engagement of third-party experts and consultants; or risk of loss, litigation, regulatory action and other potential liabilities. If any of these adverse impacts should occur, we cannot guarantee data loss can be prevented. Additionally, if any adverse impacts occur, our reputation and brand could be damaged, our business may suffer, and we could be required to expend significant capital and other resources to alleviate problems caused by such breaches. Actual or anticipated cyber security attacks may cause us to incur increasing costs, including costs to deploy additional personnel and protection technologies, train employees and engage third-party experts and consultants. Any computer malware, viruses, computer hacking, fraudulent use attempts, phishing attacks, or other data security incidents among other things, could harm our reputation and our ability to retain existing customers and attract new customers.

Current wording

We and certain of our third-party providers regularly experience cyberattacks and other incidents, and we expect such attacks and incidents to continue in varying degrees. While to date no incidents have had a material impact on our operations or financial results, we cannot guarantee that material incidents will not occur in the future. Any adverse impact to the availability, integrity, or confidentiality of our IT Systems or Confidential Information can result in intentional or accidental unauthorized access to our IT Systems or our customers’ or partners’ sites, networks, systems and accounts; unauthorized access to, and misappropriation or disclosure of Confidential Information; viruses, worms, spyware, ransomware, or other malware being served from our platform, mobile application, networks, or systems, including as a result of supply chain attacks; deletion or modification of content or the display of unauthorized content on our platform; interruption, disruption, or malfunction of operations; costs relating to incident response, system restoration or remediation, future compliance, deployment of additional personnel and protection technologies, and response to governmental investigations and media inquiries and coverage; engagement of third-party experts and consultants; or risk of loss, litigation or proceedings (such as class actions), regulatory action, fines and penalties, and other potential liabilities. If any of these adverse impacts should occur, we cannot guarantee data loss can be prevented. Additionally, if any adverse impacts occur, our reputation and brand could be damaged, our business may suffer, and we could be required to expend significant capital and other resources to alleviate problems caused by such breaches. Actual or anticipated cyber security attacks may cause us to incur increasing costs, including costs to deploy additional personnel and protection technologies, train employees and engage third-party experts and consultants. Any computer malware, viruses, computer hacking, fraudulent use attempts, phishing attacks, or other data security incidents among other things, could harm our reputation and our ability to retain existing customers and attract new customers. Any or all of the foregoing could materially adversely affect our business, results of operations and financial condition.

Previous wording

We believe that the brand identity that we have developed has significantly contributed to the success of our business. We also believe that maintaining and enhancing the “Expensify” brand is critical to expanding our customer base and establishing and maintaining relationships with partners. Successful promotion of our brand will depend largely on the effectiveness of our marketing efforts, our ability to ensure that our platform remains high-quality, reliable, useful and competitively priced, the quality and perceived value of our platform, our ability to successfully differentiate our platform and features from those of our competitors and the ability of our customers to achieve successful results by using our platform and features. Maintaining and enhancing our brand may require us to make substantial investments not just in our core expense management service but also in newer features, such as our financial chat services, and to make substantial investments in foreign markets, and these investments may not be successful. We also plan to enhance our brand and drive interest in our overall platform by introducing certain consumer-focused features, which may not be successful. Substantial advertising expenditures may be required to maintain and enhance our brand, which may not prove successful. Advertising and other brand promotion activities may not generate customer awareness or increase revenue, and even if they do, any increase in revenue may not offset the expenses we incur in building our brand. For example, in 2023 we opened the Expensify Lounge in San Francisco, CA as a brand awareness campaign, but it ultimately did not yield the expected results and was shut down in late 2023. Further, in 2023 we hosted our third ExpensiCon, an invite-only, all-expenses paid industry conference set in an exotic location that included a full itinerary of events and excursions. We spent significant resources on ExpensiCon and achieved mixed results. There can be no assurance that similar initiatives will achieve desired results. Additionally, there could be a negative reaction to certain advertising campaigns and values-based activity and communications. If we fail to promote and maintain the “Expensify” brand, or if we incur excessive expenses in this effort, we may fail to attract or retain customers necessary to realize a sufficient return on our brand-building efforts or to achieve the widespread brand awareness that is critical for broad customer adoption of our platform and features. We anticipate that, as our market becomes increasingly competitive, maintaining and enhancing our brand may become more difficult and expensive.

Current wording

We believe that the brand identity that we have developed has significantly contributed to the success of our business. We also believe that maintaining and enhancing the “Expensify” brand is critical to expanding our customer base and establishing and maintaining relationships with partners. Successful promotion of our brand will depend largely on the effectiveness of our marketing efforts, our ability to ensure that our platform remains high-quality, reliable, useful and competitively priced, the quality and perceived value of our platform, our ability to successfully differentiate our platform and features from those of our competitors and the ability of our customers to achieve successful results by using our platform and features. Maintaining and enhancing our brand may require us to make substantial investments not just in our core expense management service but also in newer features, such as our financial chat services, and to make substantial investments in foreign markets, and these investments may not be successful. We also plan to enhance our brand and drive interest in our overall platform by introducing certain consumer-focused features, which may not be successful. Substantial advertising expenditures may be required to maintain and enhance our brand, which may not prove successful. Advertising and other brand promotion activities may not generate customer awareness or increase revenue, and even if they do, any increase in revenue may not offset the expenses we incur in building our brand. Additionally, there could be a negative reaction to certain advertising campaigns and values-based activity and communications. If we fail to promote and maintain the “Expensify” brand, or if we incur excessive expenses in this effort, we may fail to attract or retain customers necessary to realize a sufficient return on our brand-building efforts or to achieve the widespread brand awareness that is critical for broad customer adoption of our platform and features. We anticipate that, as our market becomes increasingly competitive, maintaining and enhancing our brand may become more difficult and expensive.

Previous wording

We may also review or revise our software architecture as we grow, which may require significant resources and investments. For example, in 2021 we released the first version of an open-source financial group chat optimized for financial conversations, designed to be used both in and outside of work, and maintained by a community of open source developers. We expect our open-source offering to be a complete rewrite of the Expensify front end, built on a new React Native platform that uses the same codebase across iOS, Android, web and desktop once it is completed. There can be no assurance that this direction will achieve customer acceptance or that we will realize the anticipated return on our investment even if and when the feature complete version is released.

Current wording

We may also review or revise our software architecture as we grow, which may require significant resources and investments. For example, we have been migrating users onto New Expensify, an open-source financial group chat optimized for financial conversations that we have been developing since 2021, but there can be no assurance that this initiative will achieve customer acceptance or that we will realize the anticipated return on our investment.

Previous wording

If we experience increasing demand for our features, we may not be able to augment our infrastructure quickly enough to accommodate this demand, which may limit our growth or cause disruptions, outages and other performance problems that could lead to financial liabilities or affect our brand and reputation. If our subscription sales decrease, certain of our fixed costs, such as for capital equipment, may make it difficult for us to adjust our expenses downward quickly.

Current wording

If we experience increasing demand for our features, we may not be able to augment our infrastructure quickly enough to accommodate this demand, which may limit our growth or cause disruptions, outages and other performance problems that could lead to financial liabilities or affect our brand and reputation.

Previous wording

For example we use AI Technologies to optimize our internal processes, including analyzing and processing receipts, responding to customer support requests, and drafting personalized marketing communications.

Current wording

For example we use AI Technologies to optimize our internal processes, including, but not limited to, analyzing and processing receipts, bills, and invoices, responding to customer support requests, and drafting personalized marketing communications.

Previous wording

In particular, if the models underlying our AI Technologies are: incorrectly implemented; reliant on incomplete, inadequate, inaccurate, biased or otherwise poor quality data; used without sufficient oversight and governance to ensure their responsible use; and/or adversely impacted by unforeseen defects, technical challenges, cybersecurity threats or material performance issues, the performance of our products, services and business, as well as our reputation, could suffer or we could incur liability resulting from the violation of laws or contracts to which we are a party or civil claims.

Current wording

In particular, if the models underlying our AI Technologies are: incorrectly implemented; reliant on incomplete, inadequate, inaccurate, biased or otherwise poor quality data; used without sufficient oversight and governance to ensure their responsible use; and/or adversely impacted by unforeseen defects, technical challenges, cybersecurity threats, data privacy concerns, or material performance issues, the performance of our products, services and business, as well as our reputation, could suffer or we could incur liability resulting from the violation of laws or contracts to which we are a party or civil claims.

Previous wording

We use AI Technologies licensed from third parties, such as OpenAI, in our technologies and our ability to continue to use such technologies at the scale we need may be dependent on access to OpenAI’s software and infrastructure. While we believe that there are alternative third-party AI Technologies which would be suitable, we cannot control the availability or pricing of such third-party AI Technologies, especially in a highly competitive environment, and we may be unable to negotiate favorable economic terms with the applicable providers. If any such third-party AI Technologies become incompatible with our solutions or unavailable for use, or if the providers of such models unfavorably change the terms on which their AI Technologies are offered or terminate their relationship with us, our solutions may become less appealing to our customers and our business will be harmed. In addition, to the extent any third-party AI Technologies are used as a hosted service, any disruption, outage, or loss of information through such hosted services could disrupt our operations or solutions, damage our reputation, cause a loss of confidence in our solutions, or result in legal claims or proceedings, for which we may be unable to recover damages from the affected provider.

Current wording

We use AI Technologies licensed from third parties, such as OpenAI and Anthropic, in our technologies and our ability to continue to use such technologies at the scale we need may be dependent on access to such specific third parties' software and infrastructure. While we believe that there are alternative third-party AI Technologies which would be suitable, we cannot control the availability or pricing of such third-party AI Technologies, especially in a highly competitive environment, and we may be unable to negotiate favorable economic terms with the applicable providers. If any such third-party AI Technologies become incompatible with our solutions or unavailable for use, or if the providers of such models unfavorably change the terms on which their AI Technologies are offered or terminate their relationship with us, our solutions may become less appealing to our customers and our business will be harmed. In addition, to the extent any third-party AI Technologies are used as a hosted service, any disruption, outage, or loss of information through such hosted services could disrupt our operations or solutions, damage our reputation, cause a loss of confidence in our solutions, or result in legal claims or proceedings, for which we may be unable to recover damages from the affected provider.

Previous wording

Additionally, our reliance on third-party AI Technologies, such as those licensed from OpenAI, involves certain data privacy and security risks. While we generally seek to obtain contractual commitments from the applicable providers that prohibit the use of our data to train or refine their AI models, we may not be able to implement technical measures to prevent such providers from doing so in contravention to their contractual obligations. For more information on data privacy and security risks, see the risk factor “We receive, process, store and use business and personal data, which subjects us to governmental regulation and other legal obligations related to data privacy, protection and security, and our actual or perceived failure to comply with such obligations could harm our business and expose us to liability.”

Current wording

Additionally, our reliance on third-party AI Technologies, such as those licensed from OpenAI and Anthropic, involves certain data privacy and security risks. While we generally seek to obtain contractual commitments from the applicable providers that prohibit the use of our data to train or refine their AI models, we may not be able to implement technical measures to prevent such providers from doing so in contravention to their contractual obligations. For more information on data privacy and security risks, see the risk factor “We receive, process, store and use business and personal data, which subjects us to governmental regulation and other legal obligations related to data privacy, protection and security, and our actual or perceived failure to comply with such obligations could harm our business and expose us to liability.”

Previous wording

The regulatory framework for AI Technologies is rapidly evolving as many federal, state and foreign government bodies and agencies have introduced or are currently considering additional laws and regulations. Additionally, existing laws and regulations may be interpreted in ways that would affect the operation of our AI Technologies, or could be rescinded or amended as new administrations take differing approaches to evolving AI Technologies. As a result, implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and we cannot yet completely determine the impact future laws, regulations, standards, or market perception of their requirements may have on our business and may not always be able to anticipate how to respond to these laws or regulations.

Current wording

The regulatory framework for AI Technologies is rapidly evolving as many federal, state and foreign government bodies and agencies have enacted or are currently considering laws and regulations governing AI. Additionally, existing laws and regulations may be interpreted or enforced in ways that would affect the operation of our AI Technologies, or could be rescinded or amended as new administrations take differing approaches to evolving AI Technologies. As a result, implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and we cannot predict the impact future laws, regulations, or standards, or the market perception of their requirements, may have on our business or how we will respond to these laws or regulations.

Previous wording

Already, certain existing legal regimes (e.g., relating to data privacy) regulate certain aspects of AI Technologies, and new laws regulating AI Technologies have been enacted in China and either entered into force in the United States and the EU in 2024 or are expected to enter into force in 2025.

Current wording

Already, certain existing legal regimes (e.g., relating to data privacy) regulate certain aspects of AI Technologies, and new laws regulating AI Technologies have been enacted in China and either entered into force in the United States and the EU in 2024 and 2025 or are expected to enter into force in 2026.

Previous wording

In order to continue to execute on our business strategy and growth plans, including the development of new features, and to maintain and upgrade our existing features, we will need to attract a sufficient number of highly qualified personnel, especially software engineers. Competition for software engineers and other key personnel in our industry is intense, especially for engineers with high levels of experience in designing and developing software for Internet-related services. As we become a more mature company, we may find our recruiting efforts more challenging.

Current wording

In order to continue to execute on our business strategy and growth plans, including the development of new features, and to maintain and upgrade our existing features, we will need to attract a sufficient number of highly qualified personnel, especially software engineers. Competition for software engineers and other key personnel in our industry is intense, especially for engineers with high levels of experience in designing and developing software for Internet-related services.

Previous wording

We believe that a critical component of our success has been our culture, which is deeply embedded in everything we do. Our culture is centered on a belief that a life well lived is one that enables you to achieve the following three goals: Live Rich, Have Fun and Save the World. We have invested substantial time and resources in building our team with an emphasis on collaboration and innovation, ensuring customer success and a commitment to diversity and inclusion. We invest in our culture to create fun, diverse and memorable experiences for our employees, including certain employee travel to company-wide meetings in the U.S. and abroad. As we continue to grow and develop the infrastructure associated with being a public company, we will need to maintain our culture among a larger number of employees dispersed in various geographic regions. Any failure to preserve our culture could negatively affect our future success, including our ability to retain and recruit personnel.

Current wording

We believe that a critical component of our success has been our culture, which is deeply embedded in everything we do. Our culture is centered on a belief that a life well lived is one that enables you to achieve the following three goals: Live Rich, Have Fun and Save the World. We have invested substantial time and resources in building our team with an emphasis on collaboration and innovation and promoting success for both our customers and our employees. We invest in our culture to create fun, inclusive and memorable experiences for our employees, including certain employee travel to company-wide meetings in the U.S. and abroad from time to time. As we continue to grow and develop the infrastructure associated with being a public company, we will need to maintain our culture among a larger number of employees dispersed in various geographic regions. Any failure to preserve our culture could negatively affect our future success, including our ability to retain and recruit personnel.

Previous wording

Our revenue generated from customers outside the United States was $12.4 million (9% of our revenue), $13.3 million (9% of our revenue), and $14.7 million (9% of our revenue) for the annual periods ended December 31, 2024, 2023 and 2022, respectively. Our core geographies are the United States, the United Kingdom, Canada and Australia. In the future, we may pursue expansion of our international operations. Operating in international markets requires significant resources and management attention and subjects us to regulatory, economic and political risks that are different from those in the United States. In addition, we face risks in doing business internationally that could adversely affect our business and results of operations, including:

Current wording

Our revenue generated from customers outside the United States was $12.5 million (9% of our revenue) and $12.4 million (9% of our revenue) for the annual periods ended December 31, 2025 and 2024, respectively. Our core geographies are the United States, the United Kingdom, Canada and Australia. In the future, we may pursue expansion of our international operations. Operating in international markets requires significant resources and management attention and subjects us to regulatory, economic and political risks that are different from those in the United States. In addition, we face risks in doing business internationally that could adversely affect our business and results of operations, including:

Previous wording

Our wholly owned subsidiary, Expensify Payments LLC, is registered as a “Money Services Business” with the U.S. Department of Treasury’s Financial Crimes Enforcement Network (“FinCEN”), and subject to regulatory oversight and enforcement by FinCEN under the Bank Secrecy Act, as amended by the USA PATRIOT Act of 2001 (“BSA”). Among other things, the BSA requires money services businesses to develop and implement risk-based anti-money laundering programs, report large cash transactions and suspicious activity and maintain transaction records. The BSA prohibits, among other things, our involvement in transferring the proceeds of criminal activities. Regulators in the United States and globally may require us to further revise or expand our compliance program, including the procedures we use to verify the identity of our customers and to monitor international and domestic transactions. In addition, we are contemplating offering certain products in the future that may require us to obtain licenses to operate as a money transmitter (or its equivalent) in various states and territories where such licenses are required. We have already obtained such licenses in certain states and have pending license applications in others. If we are unable to obtain a license to operate as a money transmitter, our ability to grow certain of our services may be limited. As a licensed money transmitter, we would be subject to obligations and restrictions with respect to the handling and investment of customer funds, record keeping and reporting requirements, bonding requirements and inspection by state regulatory agencies.

Current wording

Our wholly owned subsidiary, Expensify Payments LLC, is registered as a “Money Services Business” with the U.S. Department of Treasury’s Financial Crimes Enforcement Network (“FinCEN”), and subject to regulatory oversight and enforcement by FinCEN under the Bank Secrecy Act, as amended by the USA PATRIOT Act of 2001 (“BSA”). Among other things, the BSA requires money services businesses to develop and implement risk-based anti-money laundering programs, report large cash transactions and suspicious activity and maintain transaction records. The BSA prohibits, among other things, our involvement in transferring the proceeds of criminal activities. Regulators in the United States and globally may require us to further revise or expand our compliance program, including the procedures we use to verify the identity of our customers and to monitor international and domestic transactions. In addition, we are contemplating offering certain products in the future that may require us to obtain licenses to operate as a money transmitter (or its equivalent) in various states and territories where such licenses are required. We have already obtained such licenses in most states. If we are unable to obtain a license to operate as a money transmitter, our ability to grow certain of our services may be limited. As a licensed money transmitter, we would be subject to obligations and restrictions with respect to the handling and investment of customer funds, record keeping and reporting requirements, bonding requirements and inspection by state regulatory agencies.

Previous wording

We receive, process, store and use business and personal data relating to our employees, business contacts, members and customers around the world (collectively, “Personal Data”), including the United States and the European Economic Area (“EEA”). As a result, our business is subject to a number of federal, state, local and foreign laws, regulations, regulatory codes and guidelines governing data privacy, data protection and security, including with respect to the collection, storage, use, processing, transmission, disclosure and protection of Personal Data.

Current wording

We receive, process, store and use business and personal data relating to our employees, business contacts, members and customers around the world (collectively, “Personal Data”), including the United States and the European Economic Area (“EEA”). As a result, our business is subject to a number of federal, state, local and foreign laws, regulations, regulatory codes and guidelines governing data privacy, data protection and security, including with respect to the collection, storage, use, processing, transmission, disclosure and protection of Personal Data, and those that are specific to certain industries, sectors, contexts, or locations.

Previous wording

If we are unable to develop and offer features that meet legal requirements or help our members and customers meet their obligations under the laws or regulations relating to privacy, data protection, or information security, or if we violate or are perceived to violate any laws, regulations, or other obligations relating to privacy, data protection, or information security, we may experience reduced demand for our platform, harm to our reputation and become subject to investigations, claims and other remedies, which would expose us to significant fines, penalties and other damages, all of which would harm our business. Further, given the breadth and depth of changes in global data protection obligations, compliance has caused us to expend significant resources, and such expenditures are likely to continue into the future as we continue our compliance efforts and respond to new interpretations and enforcement actions.

Current wording

If we are unable to develop and offer features that meet legal requirements or help our members and customers meet their obligations under the laws or regulations relating to privacy, data protection, or information security, or if we violate or are perceived to violate any laws, regulations, or other obligations relating to privacy, data protection, or information security, we may experience reduced demand for our platform, harm to our reputation and become subject to investigations, claims, proceedings and other actions by individuals, consumer rights groups, government agencies, or others, which would expose us to significant costs in investigating and defending such claims and, if found liable, pay significant fines, penalties and other damages or be required to make changes to our business, all of which would harm our business, results of operations, and financial condition. Further, given the breadth and depth of changes in global data protection obligations, compliance has caused us to expend significant resources, and such expenditures are likely to continue into the future as we continue our compliance efforts and respond to new interpretations and enforcement actions.

Previous wording

•computer viruses, malware, vulnerability exploits, or cyber-attacks;

Current wording

•computer viruses, malware (including ransomware), vulnerability exploits, social engineering/phishing, or cyber-attacks;

Previous wording

In the future, we may raise additional capital through additional debt or equity financings to support our business growth, to respond to business opportunities, challenges, or unforeseen circumstances, or for other reasons. On an ongoing basis, we evaluate sources of financing and may raise additional capital in the future. Our ability to obtain additional capital will depend on our development efforts, business plans, investor demand, operating performance, the condition of the capital markets, and other factors. We cannot assure you that additional financing will be available to us on favorable terms when required, or at all. If we raise additional funds through the issuance of equity or equity-linked securities, those securities may have rights, preferences, or privileges senior to the rights of existing stockholders, and existing stockholders may experience dilution. Debt financing, if available, may involve restrictive covenants relating to our capital raising activities and other financial and operational matters, which could reduce our operational flexibility or make it more difficult for us to obtain additional capital and to pursue business opportunities. In addition, subject to limited exceptions, our loan and security agreement with Canadian Imperial Bank of Commerce ("CIBC"), as amended and restated on February 21, 2024 and as amended on February 13, 2025, and as may be further amended from time to time, ("2024 Amended Loan and Security Agreement"), restricts us from incurring indebtedness without the prior written consent of the lender. Further, if we are unable to obtain additional capital when required, or are unable to obtain additional capital on satisfactory terms, our ability to continue to support our business growth or to respond to business opportunities, challenges, or unforeseen circumstances would be adversely affected.

Current wording

In the future, we may raise additional capital through additional debt or equity financings to support our business growth, to respond to business opportunities, challenges, or unforeseen circumstances, or for other reasons. On an ongoing basis, we evaluate sources of financing and may raise additional capital in the future. Our ability to obtain additional capital will depend on our development efforts, business plans, investor demand, operating performance, the condition of the capital markets, and other factors. We cannot assure you that additional financing will be available to us on favorable terms when required, or at all. If we raise additional funds through the issuance of equity or equity-linked securities, those securities may have rights, preferences, or privileges senior to the rights of existing stockholders, and existing stockholders may experience dilution. Debt financing, if available, may involve restrictive covenants relating to our capital raising activities and other financial and operational matters, which could reduce our operational flexibility or make it more difficult for us to obtain additional capital and to pursue business opportunities. In addition, subject to limited exceptions, our Letter of Credit Facility and Security Agreement with Canadian Imperial Bank of Commerce (“CIBC”), entered into on October 9, 2025 (“LOC Security Agreement”), restricts us and our subsidiaries’ ability to, among other things, incur certain additional indebtedness, create or incur certain liens, permit a change of control, sell or transfer assets, pay dividends or make distributions, subject to certain exceptions.

Previous wording

Our operating activities may be restricted as a result of covenants related to the indebtedness under our 2024 Amended Loan and Security Agreement and/or future indebtedness, and we may be required to repay the outstanding indebtedness in an event of default, which would have an adverse effect on our business.

Current wording

Our operating activities may be restricted as a result of covenants related to the indebtedness under our LOC Security Agreement and/or future indebtedness, and we may be required to repay any outstanding indebtedness in an event of default, which would have an adverse effect on our business.

Previous wording

Our 2024 Amended Loan and Security Agreement consists of a $25.0 million revolving line of credit, which matures in September 2025, and subjects us, and any future indebtedness would likely subject us, to various customary covenants, including requirements as to financial reporting, insurance and certain liquidity and leverage thresholds and restrictions on our ability to maintain cash deposits outside of CIBC above certain thresholds, dispose of our business or property, to change our line of business, to liquidate or dissolve, to enter into any change in control transaction, to merge or consolidate with any other entity or to acquire all or substantially all the capital stock or property of another entity, to incur additional indebtedness, to incur liens on our property, to pay any dividends or other distributions on capital stock other than dividends payable solely in capital stock, to redeem capital stock, to engage in transactions with affiliates, to encumber our intellectual property and certain other restrictions on our activities. Our business may be adversely affected by these restrictions on our ability to operate our business.

Current wording

Our LOC Security Agreement consists of a $7.5 million irrevocable standby letter of credit, which matures on March 20, 2026, and subjects us, and any future indebtedness would likely subject us, to various customary covenants, including requirements as to financial reporting, restrictions on our ability to maintain cash deposits outside of CIBC above certain thresholds, to dispose of our business or property, to change our line of business, to liquidate or dissolve, to enter into any change in control transaction, to merge or consolidate with any other entity or to acquire all or substantially all the capital stock or property of another entity, to incur additional indebtedness, to incur liens on our property, to pay any dividends or other distributions on capital stock other than dividends payable solely in capital stock, to redeem capital stock, to engage in transactions with affiliates, to encumber our intellectual property and certain other restrictions on our activities. Our business may be adversely affected by any such restrictions on our ability to operate our business.

Previous wording

Additionally, our ability to meet our debt obligations and other expenses will depend on our future performance, which will be affected by financial, business, economic, regulatory and other factors, many of which we are unable to control. We may be required to repay any outstanding indebtedness if an event of default occurs under the 2024 Amended Loan and Security Agreement. Under the 2024 Amended Loan and Security Agreement, an event of default will occur if, among other things, we fail to make payments under such agreement; we breach certain of our covenants under such agreement, subject to specified cure periods with respect to certain breaches; we or our assets become subject to certain legal proceedings, such as bankruptcy proceedings; we are unable to pay our debts as they become due; or we default on contracts with third parties which would permit CIBC to accelerate the maturity of such indebtedness or that could have a material adverse change on us. We may not have enough available cash or be able to raise additional funds through equity or debt financings to repay such indebtedness at the time any such event of default occurs. CIBC could also exercise its rights as collateral agent to take possession of, and to dispose of, the collateral securing the loan, which collateral includes substantially all of our personal property (including intellectual property). Our business, financial condition and results of operations could be materially adversely affected as a result of any of these events. We may seek to enter into an extension of the 2024 Amended Loan and Security Agreement or enter into a new facility with another lender. We may not be able to extend the term or obtain other debt financing on terms that are favorable to us, if at all, and we could be subject to additional restrictions on our business operations. If we are unable to obtain adequate financing or financing on satisfactory terms when required, our ability to support our business growth and to respond to business challenges could be significantly impaired, and our business may be harmed.

Current wording

Additionally, our ability to meet our debt obligations and other expenses will depend on our future performance, which will be affected by financial, business, economic, regulatory and other factors, many of which we are unable to control. We may be required to repay any outstanding indebtedness if an event of default occurs under the LOC Security Agreement, or under any future indebtedness. Under the LOC Security Agreement, an event of default will occur if, among other things, we fail to make payments under such agreement if due; we breach certain of our covenants under such agreement, subject to specified cure periods with respect to certain breaches; we or our assets become subject to certain legal proceedings, such as bankruptcy proceedings; we are unable to pay our debts as they become due; or we default on contracts with third parties which would permit CIBC to accelerate the maturity of any outstanding indebtedness or that could have a material adverse change on us. We may not have enough available cash or be able to raise additional funds through equity or debt financings to repay any outstanding indebtedness at the time any such event of default occurs. CIBC could also exercise its rights as collateral agent to take possession of, and to dispose of, the collateral securing the letter of credit, which collateral includes substantially all of our personal property (including intellectual property). Our business, financial condition and results of operations could be materially adversely affected as a result of any of these events. We may seek to enter into an extension of the LOC Security Agreement or enter into a new facility with another lender. We may not be able to extend the term or obtain other debt financing on terms that are favorable to us, if at all, and we could be subject to additional restrictions on our business operations. If we are unable to obtain adequate financing or financing on satisfactory terms when required, our ability to support our business growth and to respond to business challenges could be significantly impaired, and our business may be harmed.

Previous wording

We expect to be in compliance with all debt covenants under the 2024 Amended Loan and Security Agreement by the end of the fiscal quarter ended March 31, 2025. However, if a waiver from CIBC is required in the future for potential non-compliance, CIBC may be unwilling to provide a waiver and could, as a result, call our outstanding debt obligations immediately which could have a material adverse effect on our financial condition.

Current wording

As of December 31, 2025, we were in compliance with all debt covenants under the LOC Security Agreement.

Previous wording

We lease servers and other hardware in order to provide our services. These servers are highly custom, built to order servers, which from time to time need to be upgraded, repaired or replaced. Many of these servers contain parts that are manufactured in Taiwan, China, and other international regions. The Trump Administration has threatened to impose severe tariffs on imports from some or all of these regions. The imposition of such tariffs could materially increase the cost of maintenance for our servers or prevent us from being able to obtain parts all together. While our systems are designed to be redundant and fault tolerant, our inability to upgrade or repair them could result in our inability to continue to provide services to the expectations of our customers, which could lead to a loss of customers and materially adversely affect our results of operations.

Current wording

We lease servers and other hardware in order to provide our services. These servers are highly custom, built to order servers, which from time to time need to be upgraded, repaired or replaced. Many of these servers contain parts that are manufactured in Taiwan, China, and other international regions. Severe tariffs on imports from some or all of these regions have been imposed in the recent past, and could be imposed in the future. The imposition of such tariffs could materially increase the cost of maintenance for our servers or prevent us from being able to obtain parts all together. While our systems are designed to be redundant and fault tolerant, our inability to upgrade or repair them could result in our inability to continue to provide services to the expectations of our customers, which could lead to a loss of customers and materially adversely affect our results of operations.

Previous wording

The preparation of financial statements in conformity with generally accepted accounting principles in the United States ("GAAP") requires management to make estimates and assumptions that affect the amounts reported in our consolidated financial statements. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, as provided in the section titled “Management’s discussion and analysis of financial condition and results of operations.” The results of these estimates form the basis for making judgments about the carrying values of assets, liabilities and equity, and the amount of revenue and expenses that are not readily apparent from other sources. Significant assumptions and estimates used in preparing our consolidated financial statements include those related to the useful lives and recoverability of long-lived assets, the fair value of common stock prior to being a publicly traded company and stock-based compensation expense, as well as those used to allocate our employee and employee related expense, which consist of contractor costs, employee salary and wages, stock-based compensation and travel and other employee-related costs, to their appropriate financial statement line items due to our generalist model and organizational structure. Our results of operations may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our results of operations to fall below the expectations of securities analysts and investors, resulting in a decline in the trading price of our Class A common stock.

Current wording

The preparation of financial statements in conformity with generally accepted accounting principles in the United States (“GAAP”) requires management to make estimates and assumptions that affect the amounts reported in our consolidated financial statements. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, as provided in the section titled “Management’s discussion and analysis of financial condition and results of operations.” The results of these estimates form the basis for making judgments about the carrying values of assets, liabilities and equity, and the amount of revenue and expenses that are not readily apparent from other sources. Significant assumptions and estimates used in preparing our consolidated financial statements include those related to the Company's classification of employee and employee-related expenses, the useful lives and recoverability of long-lived assets and deferred contract acquisition costs, income taxes, capitalization of internal-use software costs and stock-based compensation expense. Our results of operations may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our results of operations to fall below the expectations of securities analysts and investors, resulting in a decline in the trading price of our Class A common stock.

Previous wording

We are subject to regular review and audit by U.S. federal, state, and foreign tax authorities. Tax authorities may disagree with certain positions we have taken, and any adverse outcome of such a review or audit could increase the amount of taxes imposed on our business, and harm our financial position, results of operations, and cash flows. In particular, we are currently under examination by the Internal Revenue Service ("IRS") for our 2021 and 2022 tax years. We are continuing to respond to inquiries related to these examinations. These examinations could result in challenges to various positions we have asserted in our tax filings and could impact our tax liability. The ultimate resolution of these examinations, and any other reviews, audits or litigation, may differ from the amounts recorded in our financial statements and may materially affect our financial results in the period or periods for which such determination is made.

Current wording

We are subject to regular review and audit by U.S. federal, state, and foreign tax authorities. Tax authorities may disagree with certain positions we have taken, and any adverse outcome of such a review or audit could increase the amount of taxes imposed on our business, and harm our financial position, results of operations, and cash flows.

Showing the first 40 of 48 pairs. Open the source sections for the rest.

Rearranged current paragraphs (2)

Current report — wording carried from elsewhere

If our subscription sales decrease, certain of our fixed costs, such as for capital equipment, may make it difficult for us to adjust our expenses downward quickly.

Current report — wording carried from elsewhere

Accordingly, investors in our Class A common stock must rely on sales of their Class A common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investments.