Skip to main content

Sprout Social Inc

For the period ended Dec 31, 2024. Filed Feb 26, 2025.

View on SEC.gov

About this filing

A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.

FY2024 · Filed Feb 26, 2025

SPT$11.12+0.5%Stored close · as of Nov 9, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-K

Period ended 2023-12-31; filed 2024-02-23.

0001517375-24-000020

Item 1A. Risk Factors

Current report: 10-K

Period ended 2024-12-31; filed 2025-02-26.

0001517375-25-000022

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 224 previous paragraphs and 251 current paragraphs.

159 unchanged; 57 reworded; 30 added; 6 removed; 2 previous and 5 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (30)

Current report

•Our actual operating results may fluctuate from period to period and may differ significantly from any guidance provided.

Current report

We have a number of federal government customers that may be impacted by any budget cuts implemented by the incoming administration. We cannot predict the impact any budget cuts will have on our existing or prospective customers and how that may impact their spending with us.

Current report

We employ a shared responsibility model where our customers are responsible for using, configuring and otherwise implementing security measures related to our platform, services and products in a manner that meets applicable cybersecurity standards, complies with laws, and addresses their information security risk. As part of this shared responsibility security model, we make certain security features available to our customers that can be implemented at our customers’ discretion, or identify security areas or measures for which our customers are responsible. For example, our customers can avail of Single Sign-On (SSO) integration with our platform, services and products to enforce their Identity Provider (IdP) settings. In certain cases where our customers choose not to implement, or incorrectly implement, those features or measures, misuse our services, or otherwise experience their own vulnerabilities, policy violations, credential compromise or security incidents, even if we are not the cause of a resulting customer security issue or incident, our customer relationships reputation, and revenue in the future may be adversely impacted.

Current report

In the United States, federal, state, and local governments have enacted numerous data privacy and security laws, including data breach notification laws, personal data privacy laws, and consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws (e.g., wiretapping laws). Numerous U.S. states have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal data. As applicable, such rights may include the right to access, correct, or delete certain personal data, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services. Certain states also impose stricter requirements for processing certain personal data, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for statutory fines for noncompliance. For example, the California Consumer Privacy Act of 2018 (“CCPA”) applies to personal data of consumers, business representatives, and employees who are California residents and requires businesses to provide specific disclosures in privacy notices and honor requests of such individuals to exercise certain privacy rights. The CCPA provides for statutory fines for intentional violations and allows private litigants affected by certain data breaches to recover significant statutory damages. Similar laws have passed and are being considered in several other states, as well as at the federal and local levels.

Current report

Additionally, we are subject to the EU’s Digital Services Act, or DSA, which imposes additional legal requirements on certain types of digital service providers, including online marketplaces. The DSA aims to prevent illegal and harmful activities online and combat the spread of disinformation and sets out a framework of layered responsibilities targeted at different types of services and imposes certain additional obligations on intermediary services, including a requirement to inform consumers of any illegal products or services being offered through the relevant digital platform. Depending on how the DSA and any similar laws are implemented and interpreted, we may have to adapt our business practices, contractual arrangements, and services to comply with such obligations.

Current report

In addition, some of our customers may be subject to the EU’s Digital Operational Resilience Act (DORA) and similar UK regulatory requirements on operational resilience, which aim to protect against severe disruptions caused by cyberattacks and ICT issues. These laws may obligate our customers to impose contractual provisions on us, including certain mandatory third-party risk management provisions. If we fail to materially comply with these contractual requirements, we may be subject to investigations, audits or other adverse consequences.

Current report

Furthermore, in Europe, the Network and Information Security Directive (“NIS2”) regulates resilience and incident response capabilities of entities operating in a number of sectors, including the health sector. Non-compliance with NIS2 may lead up to administrative fines of a maximum of 10 million Euros or up to 2% of the total worldwide revenue of the preceding fiscal year.

Current report

In addition to data privacy and security laws, we are contractually subject to industry standards adopted by industry groups, and we are, or may become in the future, subject to such obligations. For example, we may be subject to compliance with the Payment Card Industry Data Security Standard (“PCI DSS”). The PCI DSS requires companies to adopt certain measures to ensure the security of cardholder information, including using and maintaining firewalls, adopting proper password protections for certain devices and software, and restricting data access. We are also bound by other contractual obligations related to data privacy and security, and our efforts to comply with such obligations may not be successful.

Current report

We publish privacy policies, marketing materials, and other statements, related to compliance with certain certifications or self-regulatory principles, regarding artificial intelligence, data privacy and security. Regulators in the United States are increasingly scrutinizing these statements, and if these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, misleading, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators, or other adverse consequences.

Current report

Securities-related class action lawsuits and/or derivative lawsuits have often been brought against companies that experience volatility in the market price of their securities. We are currently, and may become in the future, subject to securities class actions, derivative suits or other securities-related legal actions. For example, as described further in Note 11 of the Notes to the Financial Statements (Part I, Item 8 of this Annual Report), beginning in May 2024, securities class action litigation and related stockholder derivative lawsuits (the “Securities Actions”) were filed against us and certain of our executives alleging violations of the federal securities laws for allegedly making false and misleading statements and omissions of fact. It is possible that additional lawsuits will be filed, or allegations received from stockholders, with respect to these same or other matters and also naming us and/or our officers and directors as defendants. The outcomes of the Securities Actions and any other related lawsuits are subject to inherent uncertainties, and the actual defense and disposition costs will depend upon many unknown factors. We could be forced to expend significant resources in the defense of the Securities Actions and any additional lawsuits, and we may not prevail. In addition, we may incur substantial legal fees and costs in connection with such lawsuits. We currently are not able to estimate the possible cost to us from these matters, as the Securities Actions are currently at an early stage, and we cannot be certain how long it may take to resolve the Securities Actions or the possible amount of any damages that we may be required to pay. Monitoring, initiating and defending against legal actions is time-consuming for our management, is likely to be expensive and may detract from our ability to fully focus our internal resources on our business activities. We could be forced to expend significant resources in the settlement or defense of the Securities Actions and any potential future lawsuits, and we may not prevail in such lawsuits. Additionally, we may not be successful in having any such lawsuits dismissed or settled within the limits of our insurance coverage. We have not established any reserve for any potential liability relating to the Securities Actions or any potential future lawsuits. It is possible that we could, in the future, incur judgments or enter into settlements of claims for monetary damages. A decision adverse to our interests in the Securities Actions, or in similar or related litigation, could result in the payment of substantial damages, or possibly fines, and could have a material adverse effect on our business, our stock price, cash flow, results of operations and financial condition.

Current report

Our actual operating results may fluctuate from period to period and may differ significantly from any guidance provided.

Current report

Our guidance, including forward-looking statements about our business, is prepared by management and is qualified by, and subject to, a number of assumptions and estimates that, while presented with numerical specificity, are inherently subject to significant business, economic and competitive uncertainties and contingencies. Many of these uncertainties and contingencies are beyond our control and are based upon specific assumptions with respect to future events. We generally state possible outcomes as high and low ranges, which are intended to provide a sensitivity analysis as variables are changed, but are not intended to represent that actual results could not fall outside of the suggested ranges or otherwise fluctuate from period to period. Factors that may cause fluctuations in our results of operations include, without limitation, those listed below:

Current report

•variability in our sales cycle, including as a result of the budgeting cycles and internal purchasing priorities of our customers;

Current report

•our ability to collect on accounts receivable;

Current report

•customer renewal rates;

Current report

•the timing of sales and recognition of revenue, which may vary as a result of changes in accounting rules and interpretations;

Current report

•network outages or actual or perceived security breaches or other incidents;

Current report

•general economic, market and political conditions; and

Current report

•the timing and success of introductions of new platform features and services by us or our competitors or any other change in the competitive dynamics of our industry, including consolidation among competitors, customers or strategic partners.

Current report

Guidance is necessarily speculative in nature, and it can be expected that some or all of the assumptions of the guidance furnished by us will not materialize or will vary significantly from actual results. In particular, guidance offered in periods of extreme uncertainty, such as the uncertainty caused by macroeconomic conditions, is inherently more speculative in nature than guidance offered in periods of relative stability. We have in the past, and may in the future, generate financial results that are below our stated guidance and/or lower or otherwise revise our guidance to reflect changes in our expected financial results. Accordingly, any guidance with respect to our projected financial performance is necessarily only an estimate of what management believes is realizable as of the date the guidance is given. Actual results may vary from the guidance and the variations may be material. In addition, the reliability of any forecasted financial data will diminish the farther in the future that the data is forecasted.

Current report

Actual operating results may be different from our guidance, and such differences may be adverse and material. In light of the foregoing, investors are urged to not to place undue reliance on our guidance. In addition, the market price of our Class A common stock may reflect various market assumptions as to the accuracy of our guidance. If our actual results of operations fall below the expectations of investors or securities analysts, the price of our Class A common stock could decline substantially.

Current report

•variations in our financial results or those of our competitors;

Current report

•changes in earnings estimates, recommendations or coverage of our common stock by securities analysts;

Current report

•additions or departures of key personnel;

Current report

•litigation or regulatory actions involving us, including Securities Actions;

Current report

•general economic, industry, and market conditions;

Current report

•political developments in the United States, including potential implications from the recent elections; and

Current report

•other events or factors, including resulting from natural disasters, pandemics or responses to such events.

Current report

As a federal government contractor, we are required to maintain plans to ensure compliance with nondiscrimination and regulatory requirements for qualified employees in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act. Previously, federal contractors were obligated to comply with Executive Order 11246, which mandated the development of affirmative action programs focused on race and gender. Recent executive orders have eliminated this requirement.

Current report

This change in law may present several risks, including the perception among internal and external stakeholders that the company is moving away from its commitment to equal opportunity for race and gender. This perception could lead to challenges in hiring or retaining employees and other adverse operational impacts. However, failure to comply with changes in the law could expose Sprout to administrative, civil, or criminal liabilities, including fines, penalties, repayments, or suspension or debarment from eligibility for future U.S. government contracts. Additionally, Sprout’s effort to build an inclusive workforce in compliance with the law could lead to legal challenges.
Removed paragraphs (6)

Previous report

•Unstable market and economic conditions, including a global or domestic recession or the fear of a recession, may have serious adverse consequences on our business, financial condition and share price.

Previous report

We were incorporated in 2010 and we introduced our first solution in 2011. Since then, our business has grown rapidly and evolved significantly. Many of the key features of our platform and products have only launched in the past few years. As a result of the rapid growth and evolution of our

Previous report

business, our ability to forecast our future operating results is limited and subject to a number of uncertainties, including our ability to plan for and model future growth. As such, any predictions about our future revenue and expenses may not be as accurate as they could be with longer operating history in the enterprise segment, with our current product set, due to our acquisition of Tagger or if we operated in a more predictable market. We have encountered and will encounter risks and uncertainties frequently experienced by growing companies in rapidly changing industries, such as the risks and uncertainties described herein. If our assumptions regarding these risks and uncertainties, which we use to plan our business, are incorrect or change, or if we do not address these risks and uncertainties successfully, our operating and financial results could differ materially from our expectations and our business could suffer.

Previous report

In the United States, federal, state, and local governments have enacted numerous data privacy and security laws, including data breach notification laws, personal data privacy laws, and consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws (e.g., wiretapping laws). For example, the CCPA imposes certain obligations on businesses and service providers with respect to collecting and processing personal data of consumers, business representatives, and employees who are California residents. These obligations include, but are not limited to, providing specific disclosures in privacy notices and affording California residents with certain rights related to their personal data. The CCPA allows for statutory fines for noncompliance of up to $7,500 per violation. In addition, the CPRA amends and expands the CCPA and establishes a new California Privacy Protection Agency to implement and enforce the CPRA, which increases the risk of an enforcement action. Other states, like Virginia, Colorado, and Oregon, have also enacted or proposed data privacy laws that may differ from the CCPA. If we are or become subject to these laws and/or new or amended data privacy laws, the risk of enforcement actions against us could increase because we may be subject to additional obligations under applicable regulatory frameworks, and the number of individuals or entities that could initiate actions against us may increase, in addition to further complicating our compliance efforts.

Previous report

•issuance of new or updated research or reports by securities analysts or the failure of a security analyst to continue covering our company.

Previous report

Unstable market and economic conditions, including a global or domestic recession or the fear of a recession, may have serious adverse consequences on our business, financial condition and share price.
Reworded paragraphs (57)

Previous wording

•We have experienced rapid revenue growth in recent periods and our recent growth rates may not be indicative of our future growth.

Current wording

•Our historical revenue growth rates may not be indicative of our future growth.

Previous wording

As more of our sales efforts target larger enterprise customers, our sales cycle may become longer and more expensive and we may encounter increased pricing pressure and compliance challenges.

Current wording

•As more of our sales efforts target larger enterprise customers, our sales cycle has and may continue to become longer and more expensive and we may encounter increased pricing pressure and compliance challenges.

Previous wording

•If our information technology systems or data, or those of third parties upon which we rely, are or were compromised, we could experience adverse consequences, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers; and other adverse consequences.

Current wording

•If our information technology systems or data, or those of third parties with whom we work, are or were compromised, we could experience adverse consequences, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers; and other adverse consequences.

Previous wording

•The dual class structure of our common stock and the existing ownership of capital stock by our Co-Founders have the effect of concentrating voting control with our Co-Founders for the foreseeable future, which will limit the ability of our other investors to influence corporate matters.

Current wording

•The dual class structure of our common stock and the existing ownership of capital stock by our Co-Founders have the effect of concentrating voting control with our Co-Founders for the foreseeable future, which limits the ability of our other investors to influence corporate matters.

Previous wording

•macroeconomic factors and their impacts on users of our platform and products.

Current wording

•macroeconomic factors and their impacts on our customers and their budgets for our platform and products.

Previous wording

Our current and prospective customers are impacted by worsening macroeconomic conditions to varying degrees. Such conditions include, but are not limited to the high impact of high levels of inflation, high interest rates and ongoing overseas conflict. We cannot predict the impact macroeconomic conditions will have on our existing or prospective customers and how that may impact their spending with us.

Current wording

Our current and prospective customers are impacted by unstable macroeconomic conditions to varying degrees. Such conditions include, but are not limited to the impact of fluctuations in inflation and interest rates and ongoing overseas conflict. We cannot predict the impact macroeconomic conditions will have on our existing or prospective customers and how that may impact their spending with us.

Previous wording

We announced a price increase in November 2022 and may announce additional price increases in the future. For the year ended December 31, 2023, as compared to the year ended December 31, 2022, this price increase contributed to an increase in our average revenue per customer and a decrease in our total number of customers. As a result of this and any future pricing increase, our total number of customers may continue to decrease even when the average spend per customer increases over time. We may also experience softening demand or negative sentiment from our customers and prospective customers as a result of our increased pricing, which could impact our brand and competitiveness.

Current wording

We have previously increased prices in the past and may effect additional price increases in the future. Any future pricing increase may cause our total number of customers to continue to decrease even when the average spend per customer increases over time. We may also experience softening demand or negative sentiment from our customers and prospective customers as a result of our increased pricing, which could impact our brand and competitiveness.

Previous wording

We have experienced rapid revenue growth in recent periods and our recent growth rates may not be indicative of our future growth.

Current wording

Our historical revenue growth rates may not be indicative of our future growth.

Previous wording

We have experienced rapid revenue growth in recent years. In 2023, our revenue was $333.6 million, an increase of 31% as compared to our revenue of $253.8 million in 2022, which was an increase of 35% as compared to our revenue of $187.9 million in 2021. Although we have experienced rapid revenue growth in recent years, we may not continue to grow as rapidly in the future and our revenue growth rates may decline. Our revenue growth may slow or our revenue may decline for a number of other reasons, including reduced demand for our products, increased competition, a decrease in the growth or reduction in size of our overall market, failure to capitalize on growth opportunities, and the impacts to our business from macroeconomic factors such as high levels of inflation, high interest rates, ongoing overseas conflict, volatility in the capital markets and related market uncertainty. Our current and prospective customers are impacted by worsening macroeconomic conditions to varying degrees and as a result, in some cases we are experiencing slower growth of existing customers most impacted by these conditions. If we are unable to maintain consistent revenue or revenue growth, our stock price could be volatile or decline, and we may not achieve or maintain profitability. You should not rely on our revenue for any prior quarterly or annual periods as any indication of our future revenue or revenue growth.

Current wording

We have experienced revenue growth in the past, but the rate of our growth has varied. For example, in 2024, our revenue was $405.9 million, an increase of 22% as compared to our revenue of $333.6 million in 2023, which was an increase of 31% as compared to our revenue of $253.8 million in 2022. We may not continue to grow at similar or faster rates in the future, and our revenue growth rates may decline. Our revenue growth may slow or our revenue may decline for a number of other reasons, including declining customer count, the maturation of our company, reduced demand for our products, increased competition, a decrease in the growth or reduction in size of our overall market, failure to capitalize on growth opportunities, and the impacts to our business from macroeconomic factors such as fluctuations in inflation and interest rates, ongoing overseas conflict, volatility in the capital markets and related market uncertainty. Our current and prospective customers are impacted by volatile macroeconomic conditions to varying degrees and as a result, in some cases we are experiencing slower growth of existing customers most impacted by these conditions. If we are unable to maintain consistent revenue or revenue growth, our stock price could be volatile or decline, and we may not achieve or maintain profitability. You should not rely on our revenue for any prior quarterly or annual periods as any indication of our future revenue or revenue growth.

Previous wording

Social media and the software industry are each subject to rapid technological change, evolving industry standards and practices and changing customer and user needs, requirements, tastes and preferences. The success of our business will depend, in part, on our ability to adapt and respond effectively to these changes on a timely basis. A significant example of these changes is the rapid advancement of artificial intelligence (“AI”) technologies. If we are unable to develop and sell new products that satisfy our customers and provide enhancements and new features for our existing platform and products that keep pace with the rapid change in social media and the software industry, our revenue and operating results could be adversely affected. Our platform must also integrate with a variety of network, hardware, browser, mobile and software platforms, and technologies, and we must continuously modify and enhance our products to adapt to changes and innovation in these technologies. If new technologies emerge or our competitors are able to deliver solutions at lower prices or more efficiently, conveniently or securely, such technologies or solutions could adversely affect our ability to compete.

Current wording

Social media and the software industry are each subject to rapid technological change, evolving industry standards and practices, developing regulatory requirements and changing customer and user needs, requirements, tastes and preferences. The success of our business will depend, in part, on our ability to adapt and respond effectively to these changes on a timely basis. A significant example of these changes is the rapid advancement of AI technologies. If we are unable to develop and sell new products that satisfy our customers and provide enhancements and new features for our existing platform and products that keep pace with the rapid change in social media and the software industry, our revenue and operating results could be adversely affected. Our platform must also integrate with a variety of network, hardware, browser, mobile and software platforms, and technologies, and we must continuously modify and enhance our products to adapt to changes and innovation in these technologies. If new technologies emerge or our competitors are able to deliver solutions at lower prices or more efficiently, conveniently or securely, such technologies or solutions could adversely affect our ability to compete.

Previous wording

The social media industry has experienced and is likely to continue to experience rapid change due to the evolving trends, tastes and preferences of users. If consumers widely adopt new social media networks and other third-party platforms or our customers’ use cases require new integrations with third-party platforms, we may need to develop integrations and functionality related to these new networks and platforms. This development effort may require significant research and development and sales and marketing resources, as well as licensing fees, all of which could adversely affect our business and operating results. In addition, new social media networks and other third-party platforms may not provide us with sufficient access to data from their platforms, preventing us from building effective integrations with our platform and products. Changing consumer tastes may also render our current integrations or functionality obsolete and the financial terms, if any, under which we obtain such integrations or functionality unfavorable. Any failure of our products to operate effectively with the social media networks and other third-party platforms used most frequently by consumers or customers could reduce the demand for our products. If we are unable to respond to these changes in a cost-effective manner, our products may become less marketable and less competitive or obsolete, and our operating results may be negatively affected. In addition, the technology industry has experienced, and may continue to experience, leadership changes, layoffs and other corporate changes that could have a negative impact on our ability to work effectively with the partner.

Current wording

The social media industry has experienced and is likely to continue to experience rapid change due to the evolving trends, tastes and preferences of users, changing policies and the evolving regulatory landscape. If consumers widely adopt new social media networks and other third-party platforms or our customers’ use cases require new integrations with third-party platforms, we may need to develop integrations and functionality related to these new networks and platforms. This development effort may require significant research and development and sales and marketing resources, as well as licensing fees, all of which could adversely affect our business and operating results. In addition, new social media networks and other third-party platforms may not provide us with sufficient access to data from their platforms, preventing us from building effective integrations with our platform and products. Regulatory requirements, including potential bans, and changing consumer tastes may also render our current integrations or functionality obsolete and the financial terms, if any, under which we obtain such integrations or functionality unfavorable. Any failure of our products to operate effectively with the social media networks and other third-party platforms used most frequently by consumers or customers could reduce the demand for our products. If we are unable to respond to these changes in a cost-effective manner, our products may become less marketable and less competitive or obsolete, and our operating results may be negatively affected. In addition, the technology industry has experienced, and may continue to experience, leadership changes, layoffs and other corporate changes that could have a negative impact on our ability to work effectively with these partners.

Previous wording

To remain competitive, we must continue to develop new product offerings, as well as features and enhancements to our existing platform and products. Maintaining adequate research and development personnel and resources to meet the demands of the market is essential. If we experience high employee turnover, lack of management ability or a lack of other research and development resources, we may miss market opportunities. The success of our business is dependent on our research and development teams developing a roadmap that allows us to retain and increase the spending of our existing customers and attract new customers. Social media is quickly evolving and we may invest significantly in particular functionality or integrations that may become obsolete in the future. Further, many of our competitors may expend a considerably greater amount of funds on their research and development programs, and those that do not may be acquired by larger companies that would allocate greater resources to our competitors’ research and development programs. Our failure to maintain adequate research and development resources, to use our research and development resources efficiently or to compete effectively with the research and development programs of our competitors could materially adversely affect our business.

Current wording

To remain competitive, we must continue to develop new product offerings, as well as features and enhancements to our existing platform and products. Maintaining adequate research and development personnel and resources to meet the demands of the market is essential. If we experience high employee turnover, lack of management ability or a lack of other research and development resources, we may miss market opportunities. The success of our business is dependent on our research and development teams developing a roadmap that allows us to retain and increase the spending of our existing customers and attract new customers. Social media is quickly evolving and we may invest significantly in particular functionality or integrations that may become obsolete in the future. In addition, in the future, new functionality may be required or networks may emerge and gain popularity with social media users, requiring us to quickly develop integrations. Further, many of our competitors may expend a considerably greater amount of funds on their research and development programs, and those that do not may be acquired by larger companies that would allocate greater resources to our competitors’ research and development programs. Our failure to maintain adequate research and development resources, to use our research and development resources efficiently or to compete effectively with the research and development programs of our competitors could materially adversely affect our business.

Previous wording

Our customers rely on our customer support organization to respond to inquiries and resolve issues related to their use of our platform quickly and effectively. Our customer support relies on third-party technology platforms, which may become unavailable or otherwise prevent our customers and customer support team from interacting on a timely basis. Our response times to customers and prospects may be impacted for reasons outside our control, such as changes to social media networks and other third-party APIs, which may interrupt aspects of our service to our customers. From time to time, we experience spikes in the number of customer support tickets that we receive, which may result in an increase in customer requests and significant delays in responding to our customers’ requests. Increased customer demand for our support services, without corresponding revenue increases, could increase our costs and harm our operating results. As we continue to grow our operations and support our global user base, we need to continue to provide efficient and high-quality support that meets our customers’ needs globally at scale. Our sales process is highly dependent on the ease of use of our platform and products, our business reputation and positive recommendations from our existing customers. Any failure to maintain a high-quality customer support organization, or a market perception that we do not maintain such levels of support, could harm our reputation, our ability to sell to existing and prospective customers and our business.

Current wording

Our customers rely on our customer support organization to respond to inquiries and resolve issues related to their use of our platform quickly and effectively. Our customer support relies on third-party technology platforms, which may become unavailable or otherwise prevent our customers and customer support team from interacting on a timely basis. Our response times to customers and prospects may be impacted for reasons outside our control, such as changes to social media networks and other third-party APIs, which may interrupt aspects of our service to our customers. From time to time, we experience spikes in the number of customer support tickets that we receive, which may result in an increase in customer requests and significant delays in responding to our customers’ requests. We have experienced high customer satisfaction (CSAT) scores. We achieved a 13% completion rate for our recent CSAT surveys. As a result, the recent scores may not be reflective of our broader customer base, and customer satisfaction and the related scores could decrease in the future. Increased customer demand for our support services, without corresponding revenue increases, could increase our costs and harm our operating results. As we continue to grow our operations and support our global user base, we need to continue to provide efficient and high-quality support that meets our customers’ needs globally at scale. Our sales process is highly dependent on the ease of use of our platform and products, our business reputation and positive recommendations from our existing customers. Any failure to maintain a high-quality customer support organization, or a market perception that we do not maintain such levels of support, could harm our reputation, our ability to sell to existing and prospective customers and our business.

Previous wording

Our failure to invest in AI technologies and incorporate them into various facets of our business and product offerings in a timely, effective and compliant manner may place us at a competitive disadvantage, reducing demand for our offerings and adversely affecting our business, financial condition and results of operations. Our competitors may more effectively internally utilize AI, enabling their business to run more efficiently than Sprout, placing us at a competitive disadvantage, and they may better incorporate AI into their product offerings, negatively impacting demand for our products.

Current wording

Our failure to invest in AI technologies and incorporate them into various facets of our business and product offerings in a timely, effective and compliant manner may place us at a competitive disadvantage, reducing demand for our offerings and adversely affecting our business, financial condition and results of operations. Our competitors may more effectively internally utilize AI, enabling their business to run more efficiently than Sprout Social, placing us at a competitive disadvantage, and they may better incorporate AI into their product offerings, negatively impacting demand for our products.

Previous wording

AI advances have the potential to enable the development of alternative competitive services or enable our customers to reduce or bypass the use of our services, such as a reduction of seats used by our customers. If any of our customers, social network partners, competitors or new market entrants were to develop algorithms or other AI tools capable of replicating or better competing against our services, our services and solutions could, over time, become obsolete or unnecessary, or demand for our services could be significantly reduced, particularly if any such AI alternative proved to be more accurate, more efficient or more cost-effective. Any widespread automation of our services could have a material adverse effect on our business, financial condition and results of operations.

Current wording

AI advances have the potential to enable the development of alternative competitive services or enable our customers to reduce or bypass the use of our services, such as a reduction of seats used by our customers. If any of our customers, social network partners, competitors or new market entrants were to develop algorithms or other AI tools capable of replicating or better competing against our services, our services and solutions could, over time, become obsolete or unnecessary, or demand for our services could be significantly reduced, particularly if any such AI alternative proved to be more accurate, more efficient or more cost-effective. Any of the foregoing could have a material adverse effect on our business, financial condition and results of operations.

Previous wording

The introduction of AI technologies into new or existing products may result in new or enhanced governmental or regulatory scrutiny, confidentiality or security risks, ethical concerns, legal liability or other complications that could adversely affect our business, reputation and financial results. For example, our employees and personnel may use AI technologies to perform their work, and the disclosure and use of personal data in AI technologies is subject to various privacy laws and other privacy obligations. Furthermore, AI technologies incorporated into our product offerings may use algorithms, datasets or training methodologies that may be flawed or contain deficiencies that may be difficult or impossible to proactively detect which, in turn, may suggest content that is factually inaccurate, biased or otherwise flawed.

Current wording

The introduction of AI technologies into new or existing products may result in new or enhanced governmental or regulatory scrutiny, confidentiality or security risks, ethical concerns, legal liability or other complications that could adversely affect our business, reputation and financial results. For example, our employees and personnel may use AI technologies to perform their work, and the disclosure and use of personal data in AI technologies is subject to various laws, including data privacy and security laws and AI-specific laws and other privacy obligations. Furthermore, AI technologies incorporated into our product offerings may use algorithms, datasets or training methodologies that may be flawed or contain deficiencies that may be difficult or impossible to proactively detect which, in turn, may suggest content that is factually inaccurate, biased or otherwise flawed. We also use AI to assist us in making certain decisions, which is similarly regulated by certain laws, including data privacy laws. Due to inaccuracies or flaws in the inputs, outputs, or logic of the AI, the model could be biased and could lead us to make decisions that could bias certain individuals (or classes of individuals), and adversely impact their rights, employment, and ability to obtain certain pricing, products, services, or benefits. If such AI and machine learning-based outputs are deemed to be biased, we could face adverse consequences, including exposure to reputational and competitive harm, customer loss, and legal liability.

Previous wording

Furthermore, AI is subject to data privacy and security laws, as well as increasing regulation and scrutiny. Several jurisdictions around the globe, including Europe and certain U.S. states, have proposed enacted, or are considering laws governing AI, including the EU’s AI Act. We expect other jurisdictions will adopt similar laws. Additionally, certain privacy laws extend rights to consumers (such as the right to delete certain personal data) and regulate automated decision making, which may be incompatible with our use of AI technologies and machine learning. These obligations may make it harder for us to conduct our business using AI technologies and machine learning, lead to regulatory fines or penalties, require us to change our business practices, retrain our AI technologies and machine learning, or prevent or limit our use of AI technologies and machine learning. For example, the U.S. Fair Trade Commission (“FTC”) has required other companies to turn over (or disgorge) valuable insights or trainings generated through the use of AI technologies and machine learning where they allege the company has violated privacy and consumer protection laws. If we cannot use AI technologies and machine learning or that use is restricted, our business may be less efficient, or we may be at a competitive disadvantage.

Current wording

Furthermore, AI is subject to data privacy and security laws, as well as increasing regulation and scrutiny. Several jurisdictions around the globe, including Europe and certain U.S. states, have proposed enacted, or are considering laws governing AI, including the EU’s AI Act. We expect other jurisdictions will adopt similar laws. Additionally, certain privacy laws extend rights to consumers (such as the right to delete certain personal data) and regulate automated decision making, which may be incompatible with our use of AI technologies and machine learning. These obligations may make it harder for us to conduct our business using AI technologies and machine learning, lead to regulatory fines or penalties, require us to change our business practices, retrain our AI technologies and machine learning, or prevent or limit our use of AI technologies and machine learning. For example, the U.S. Federal Trade Commission (“FTC”) has required other companies to turn over (or disgorge) valuable insights or trainings generated through the use of AI technologies and machine learning where they allege the company has violated privacy and consumer protection laws. If we cannot use AI technologies and machine learning or that use is restricted, our business may be less efficient, or we may be at a competitive disadvantage.

Previous wording

For each of the years ended December 31, 2023, 2022 and 2021, we derived 28% of our revenue from customers located outside of the United States. We are continuing to expand our international operations as part of our growth strategy. However, there are a variety of risks and costs associated with our international sales and operations, which include making investments prior to the proven adoption of our products, the cost of conducting our business internationally and hiring and training international employees and the costs associated with complying with local law. Furthermore, we cannot predict the rate at which our platform and products will be accepted in international markets by potential customers. We believe our ability to attract new customers to subscribe to our platform or to attract existing customers to renew or expand their use of our platform is directly correlated to the level of engagement we obtain with the customer. To the extent we are unable to effectively engage with non-U.S. customers due to our limited international sales force capacity, we may be unable to grow in international markets effectively.

Current wording

For each of the years ended December 31, 2024, 2023 and 2022, we derived 27%, 28% and 28%, respectively, of our revenue from customers located outside of the United States. There are a variety of risks and costs associated with our international sales and operations, which include making investments prior to the proven adoption of our products, the cost of conducting our business internationally and hiring and training international employees and the costs associated with complying with local law. Furthermore, we cannot predict the rate at which our platform and products will be accepted in international markets by potential customers. We believe our ability to attract new customers to subscribe to our platform or to attract existing customers to renew or expand their use of our platform is directly correlated to the level of engagement we obtain with the customer. To the extent we are unable to effectively engage with non-U.S. customers due to our limited international sales force capacity, we may be unable to grow in international markets effectively.

Previous wording

As our international operations expand, our exposure to the effects of fluctuations in currency exchange rates grows. While we have primarily transacted with customers and vendors in U.S. dollars historically, we expect to continue to expand the number of transactions with our customers that are denominated in foreign currencies in the future. Fluctuations in the value of the U.S. dollar and foreign currencies may make our subscriptions more expensive for international customers, which could harm our business. Additionally, we incur expenses for employee compensation and other operating expenses at our non-U.S. locations in the local currency for such locations. Fluctuations in the exchange rates between the U.S. dollar and other currencies could result in an increase to the U.S. dollar equivalent of such expenses. These fluctuations could cause our results of operations to differ from our expectations or the expectations of our investors. Additionally, such foreign currency exchange rate fluctuations could make it more difficult to detect underlying trends in our business and results of operations.

Current wording

Due to our international presence, we have some exposure to the effects of fluctuations in currency exchange rates. While we have primarily transacted with customers and vendors in U.S. dollars historically, we expect to conduct some transactions with our customers that are denominated in foreign currencies in the future. Fluctuations in the value of the U.S. dollar and foreign currencies may make our subscriptions more expensive for international customers, which could harm our business. Additionally, we incur expenses for employee compensation and other operating expenses at our non-U.S. locations in the local currency for such locations. Fluctuations in the exchange rates between the U.S. dollar and other currencies could result in an increase to the U.S. dollar equivalent of such expenses. These fluctuations could cause our results of operations to differ from our expectations or the expectations of our investors. Additionally, such foreign currency exchange rate fluctuations could make it more difficult to detect underlying trends in our business and results of operations.

Previous wording

We have incurred net losses since inception and expect to incur net losses in the future. We incurred net losses of $66.4 million, $50.2 million and $28.7 million in 2023, 2022 and 2021, respectively. As of December 31, 2023, we had an accumulated deficit of $292.4 million. We have never achieved profitability on an annual or quarterly basis and we do not know if we will be able to achieve or sustain profitability. We plan to continue to invest in our research and development and sales and marketing efforts, and we anticipate that our operating expenses will continue to increase as we scale our business and expand our operations.

Current wording

We have incurred net losses since inception and expect to incur net losses in the future. We incurred net losses of $62.0 million, $66.4 million and $50.2 million in 2024, 2023 and 2022, respectively. As of December 31, 2024, we had an accumulated deficit of $354.4 million. We have never achieved profitability on an annual or quarterly basis and we do not know if we will be able to achieve or sustain profitability. We plan to continue to invest in our research and development and sales and marketing efforts, and we anticipate that our operating expenses will continue to increase as we scale our business and expand our operations.

Previous wording

Our operations rely on information technology systems for the use, storage and transmission of sensitive and confidential information with respect to our customers, content creators, our customers’ consumers or other social media audiences, the third-party technology platforms of other parties and our employees. A cybersecurity-related attack, malicious internet-based activity, online and offline fraud, and intrusion or disruption by either an internal or external source or other breach of the systems on which our platform and products operate, and on which our employees conduct business, could lead to unauthorized access to, use of, loss of or unauthorized disclosure of sensitive and confidential information, disruption of our services, and resulting regulatory enforcement actions, litigation, indemnity obligations and other possible liabilities, as well as negative publicity, which could damage our reputation, impair sales and harm our business. In addition to traditional computer “hackers,” malicious code (such as viruses and worms), compromised accounts with elevated privileges (phishing), credential stuffing, credential harvesting, employee misconduct or error, theft or misuse, and denial-of-service attacks, sophisticated nation-state and nation-state supported actors now engage in attacks (including advanced persistent threat intrusions) and attacks are now enhanced or facilitated by AI. Despite efforts designed to create security barriers to such threats, it is not feasible, as a practical matter, for us to entirely mitigate these risks. If our security measures are compromised as a result of third-party action, employee, customer, or user error, malfeasance, stolen or fraudulently obtained log-in credentials or otherwise, our reputation would be damaged, our data, information or intellectual property, or those of our customers, may be destroyed, stolen or otherwise compromised, our business may be harmed and we could incur significant liability. We have not always been able in the past and may be unable in the future to anticipate or prevent techniques used to obtain unauthorized access to or compromise of our systems because they change frequently and are generally not detected until after an incident has occurred. We also cannot be certain that we will be able to prevent vulnerabilities in our software or quickly address vulnerabilities that we may become aware of in the future. While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect, mitigate, and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties upon which we rely). We may not, however, detect and remediate all such vulnerabilities including on a timely basis. Further, we may experience delays in developing and deploying remedial measures and patches designed to address identified…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Despite efforts designed to create security barriers to such threats, it is not feasible, as a practical matter, for us to entirely mitigate these risks. If our security measures are compromised as a result of third-party action, employee, customer, or user error, malfeasance, stolen or fraudulently obtained log-in credentials or otherwise, our reputation would be damaged, our data, information or intellectual property, or those of our customers, may be destroyed, stolen or otherwise compromised, our business may be harmed and we could incur significant liability. We have not always been able in the past and may be unable in the future to anticipate or prevent techniques used to obtain unauthorized access to or compromise of our systems because they change frequently and are generally not detected until after an incident has occurred. For example, we have been, and expect to continue being, the target of unsuccessful phishing and social engineering attacks, SQL and malformed input attacks, card testing attacks, and credential stuffing attacks targeting employee and customer access. We also cannot be certain that we will be able to prevent vulnerabilities in our software or quickly address vulnerabilities that we may become aware of in the future. While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect, mitigate, and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties with whom we work). We may not, however, detect and remediate all such vulnerabilities on a timely basis. Further, we may experience delays in developing and deploying remedial measures and patches designed to address identified vulnerabilities. Vulnerabilities could be exploited and result in a security incident. As we rely on third-party cloud infrastructure and SaaS services, we depend in part on third-party security measures to protect against unauthorized access, cyberattacks and the mishandling of data and information. Any cybersecurity event, including any vulnerability in our software, cyberattack, intrusion or disruption, could result in significant increases in costs, including costs for remediating the effects of such an event, lost revenue due to network downtime, and a decrease in customer and user trust, increases in insurance premiums due to cybersecurity incidents, increased costs to address cybersecurity issues and attempts to prevent future incidents, and harm to our business and our reputation because of any such incident.

Previous wording

Many governments have enacted laws requiring companies to provide notice of data security incidents involving certain types of personal data. In addition, some of our customers or other relevant stakeholders may require us to notify them of data security breaches. Such notifications are costly, and the notification or the failure to comply with such requirements could lead to adverse consequences Security compromises experienced by our competitors, by our customers or by us may lead to public disclosures, which may lead to widespread negative publicity. Any security compromise in our industry, whether actual or perceived, could harm our reputation, erode confidence in the effectiveness of our security measures, negatively affect our ability to attract new customers, encourage consumers to restrict the sharing of their personal data with our customers or the social media networks, cause existing customers to elect not to renew their subscriptions or subject us to third-party lawsuits, regulatory fines or other action or liability, which could harm our business.

Current wording

Many governments have enacted laws requiring companies to provide notice of data security incidents involving certain types of personal data. In addition, some of our customers or other relevant stakeholders may require us to notify them of data security breaches. Such notifications are costly, and the notification or the failure to comply with such requirements could lead to adverse consequences. Security compromises experienced by our competitors, by our customers or by us may lead to public disclosures, which may lead to widespread negative publicity. Any security compromise in our industry, whether actual or perceived, could harm our reputation, erode confidence in the effectiveness of our security measures, negatively affect our ability to attract new customers, encourage consumers to restrict the sharing of their personal data with our customers or the social media networks, cause existing customers to elect not to renew their subscriptions or subject us to third-party lawsuits, regulatory fines or other action or liability, which could materially harm our business.

Previous wording

We outsource the majority of our cloud infrastructure to Amazon Web Services, or AWS, which hosts our platform and products. In addition, we outsource a small portion of our cloud infrastructure to other provider, which, together with AWS, we refer to as our Hosting Providers. Our customers must have the ability to access our platform at any time, without interruption or degradation of performance. Our Hosting Providers runs their own platform upon which our platform and products depend, and we are, therefore, vulnerable to service interruptions at our Hosting Providers. We have experienced, and expect that in the future we may experience interruptions, delays and outages in service and availability from time to time due to a variety of factors, including infrastructure changes, human or software errors, website hosting disruptions and capacity constraints. Capacity constraints could be due to a number of potential causes including technical failures, natural disasters, fraud or security attacks. In addition, if our security, or that of our Hosting Providers, is compromised, our platform or products are unavailable or our users are unable to use our products within a reasonable amount of time or at all, then our business, results of operations and financial condition could be adversely affected. We note that our ability to conduct security audits on our Hosting Providers is limited and our contracts do not contain strong indemnification terms in our favor. In some instances, we may not be able to identify and/or remedy the cause or causes of these performance problems within a period of time acceptable to our customers. It may become increasingly difficult to maintain and improve our platform performance, especially during peak usage times, as our products become more complex and the usage of our products increases. To the extent that we do not effectively address capacity constraints, either through our Hosting Providers or an alternative provider of cloud infrastructure, our business, results of operations and financial condition may be adversely affected. In addition, any changes in service levels from our Hosting Providers may adversely affect our ability to meet our customers’ requirements.

Current wording

We outsource the majority of our cloud infrastructure to Amazon Web Services, or AWS, which hosts our platform and products. In addition, we outsource a small portion of our cloud infrastructure to other providers, which, together with AWS, we refer to as our Hosting Providers. Our customers must have the ability to access our platform at any time, without interruption or degradation of performance. Our Hosting Providers run their own platform upon which our platform and products depend, and we are, therefore, vulnerable to service interruptions at our Hosting Providers. We have experienced, and expect that in the future we may experience interruptions, delays and outages in service and availability from time to time due to a variety of factors, including infrastructure changes, human or software errors, website hosting disruptions and capacity constraints. Capacity constraints could be due to a number of potential causes including technical failures, natural disasters, fraud or security attacks. In addition, if our security, or that of our Hosting Providers, is compromised, our platform or products are unavailable or our users are unable to use our products within a reasonable amount of time or at all, then our business, results of operations and financial condition could be adversely affected. We note that our ability to conduct security audits on our Hosting Providers is limited and our contracts do not contain strong indemnification terms in our favor. In some instances, we may not be able to identify and/or remedy the cause or causes of these performance problems within a period of time acceptable to our customers. It may become increasingly difficult to maintain and improve our platform performance, especially during peak usage times, as our products become more complex and the usage of our products increases. To the extent that we do not effectively address capacity constraints, either through our Hosting Providers or an alternative provider of cloud infrastructure, our business, results of operations and financial condition may be adversely affected. In addition, any changes in service levels from our Hosting Providers may adversely affect our ability to meet our customers’ requirements.

Previous wording

Market opportunity estimates and growth forecasts, including those we have generated ourselves, are subject to significant uncertainty and are based on assumptions and estimates that may not prove to be accurate. The variables that go into the calculation of our market opportunity are subject to change over time, and there is no guarantee that any particular number or percentage of addressable users or companies covered by our market opportunity estimates will purchase our products at all or generate any particular level of revenue for us. Any expansion in the markets in which we operate depends on a number of factors, including the cost, performance, and perceived value associated with our platforms and those of our competitors. Even if the markets in which we compete meet the size estimates, our business could fail to grow at similar rates. Our growth is subject to many factors, including our success in implementing our business strategy, which is subject to many risks and uncertainties. Accordingly, our forecasts of market growth should not be taken as indicative of our future growth. For more information regarding the estimates of market opportunity and the forecasts of market growth, see “Business—Our Industry”.

Current wording

Market opportunity estimates and growth forecasts, including those we have generated ourselves, are subject to significant uncertainty and are based on assumptions and estimates that may not prove to be accurate. The variables that go into the calculation of our market opportunity are subject to change over time, and there is no guarantee that any particular number or percentage of the total number of businesses in the United States or globally that we estimate will require a social media management platform, as set forth in our market opportunity estimates, will purchase our products at all or generate an amount of revenue indicated by our estimates of the average of our segment ACVs and our estimate of our direct competitor’s segment ACVs, as set forth in our market opportunity estimates. Any expansion in the markets in which we operate depends on a number of factors, including the cost, performance, and perceived value associated with our platforms and those of our competitors. Even if the markets in which we compete meet the size estimates, our business could fail to grow at similar rates. Our growth is subject to many factors, including our success in implementing our business strategy, which is subject to many risks and uncertainties. Accordingly, our forecasts of market growth should not be taken as indicative of our future growth. For more information regarding the estimates of market opportunity and the forecasts of market growth, see “Business—Our Industry”.

Previous wording

The market for our social media management platform is fragmented, rapidly evolving, and competitive. In addition to competing with comprehensive social media management platforms with diverse capabilities, we compete with point solutions for sentiment monitoring, influencer marketing, compliance, social listening, content management and distribution, employee advocacy, relationship management and social commerce, among others, as well as native use of individual social media networks. To remain competitive, we must deliver features and functionality that enhance the utility of our platform to our new and prospective customers, without the presence of software defects, adapt to changing functionality and APIs of the social media networks and other third party platforms, maintain and develop integrations with third parties that provide value to our customers, ensure our platform and products are easy to use and deliver value to our customers, provide a superior customer success and support experience and demonstrate value to our current and prospective customers across multiple functions within their organizations. We may not be successful in delivering on some or all of the foregoing or doing so while maintaining competitive pricing of our platform and products, which could result in customer dissatisfaction and adversely affect our business.

Current wording

The market for our social media management platform is fragmented, rapidly evolving, and competitive. In addition to competing with comprehensive social media management platforms with diverse capabilities, we compete with point solutions for influencer marketing, social listening, content management and distribution, employee advocacy, relationship management and social commerce, among others, as well as native use of individual social media networks. To remain competitive, we must deliver features and functionality that enhance the utility of our platform to our new and prospective customers, without the presence of software defects, adapt to changing functionality and APIs of the social media networks and other third party platforms, maintain and develop integrations with third parties that provide value to our customers, ensure our platform and products are easy to use and deliver value to our customers, provide a superior customer success and support experience and demonstrate value to our current and prospective customers across multiple functions within their organizations. We may not be successful in delivering on some or all of the foregoing or doing so while maintaining competitive pricing of our platform and products, which could result in customer dissatisfaction and adversely affect our business.

Previous wording

Many of our current and future competitors may benefit from competitive advantages over us, such as greater name recognition, longer operating histories, more varied products and services, larger sales and marketing or research and development budgets, more established relationships with social media networks and different or a greater number of third-party integrations. In addition, some of our competitors may make acquisitions or enter into strategic relationships to offer a broader range of products and services than we do. These combinations may make it more difficult for us to compete effectively. We expect this to continue as competitors attempt to strengthen or maintain their market positions.

Current wording

Some of our current and future competitors may benefit from competitive advantages over us, such as greater name recognition, longer operating histories, more varied products and services, larger sales and marketing or research and development budgets, more established relationships with social media networks and different or a greater number of third-party integrations. In addition, some of our competitors may make acquisitions or enter into strategic relationships to offer a broader range of products and services than we do. These combinations may make it more difficult for us to compete effectively. We expect this to continue as competitors attempt to strengthen or maintain their market positions.

Previous wording

We are subject to stringent and changing obligations related to data privacy and security. Our actual or perceived failure to comply with such obligations could lead to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse business consequences.

Current wording

We are subject to stringent and changing obligations related to data privacy and security. Our actual or perceived failure to comply with such laws and obligations could lead to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse business consequences.

Previous wording

In the ordinary course of business, we collect and process personal data, including proprietary and confidential business data, intellectual property, and other third-party data. For example, we process personal data about our customers’ consumers, content creators, and other social media users that interact with our customers’ social media pages. Our data collection and processing activities subject us to numerous data privacy and security obligations, such as various laws, regulations, guidance, industry standards, external and internal privacy and security policies, contracts, and other obligations that govern the processing of personal data by us and on our behalf. While we contractually prohibit our customers from using our platform to process, store, or collect sensitive information (such as personal health information or credit card information), our customers may breach these use prohibitions and cause us to inadvertently violate laws, rules, or regulations regarding the use and protection of personal data, which in turn may adversely impact our business.

Current wording

In the ordinary course of business, we collect and process personal data and other sensitive data, including proprietary and confidential business data, intellectual property, and other third-party data. For example, we process personal data about our customers’ consumers, content creators, and other social media users that interact with our customers’ social media pages. Our data collection and processing activities subject us to certain data privacy and security obligations, such as various laws, regulations, guidance, industry standards, external and internal privacy and security policies, contracts, and other obligations that govern the processing of personal data by us and on our behalf. While we contractually prohibit our customers from using our platform to process, store, or collect sensitive information (such as personal health information or credit card information), our customers may breach these use prohibitions and cause us to inadvertently violate laws, rules, or regulations regarding the use and protection of personal data, which in turn may adversely impact our business.

Previous wording

Outside the United States, an increasing number of laws, regulations, and industry standards apply to data privacy and security. For example, the EU GDPR and the equivalent law in the UK GDPR impose strict requirements for processing the personal data of individuals. Under the EU GDPR, government regulators may impose temporary or definitive bans on data processing, as well as fines of up to 20 million euros or 4% of annual global revenue, whichever is greater. Similar processing penalties and fines exist under the UK GDPR, and the variations in the application of GDPR in the UK following Brexit has increased the complexity of our compliance efforts. Further, individuals may initiate litigation related to our processing of their personal data. As another example, Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados Pessoais, or “LGPD”) (Law No. 13,709/2018) may apply to our operations. The LGPD broadly regulates processing of personal data of individuals in Brazil and imposes compliance obligations and penalties comparable to those of the EU GDPR. In Canada, the Personal Information Protection and Electronic Documents Act (“PIPEDA”) may apply to our operations. We may also process personal data about our customers’ consumers in Asia and therefore, may become subject to new and emerging data privacy regimes in Asia, including China’s Personal Information Protection Law, Japan’s Act on the Protection of Personal Information, and Singapore’s Personal Data Protection Act.

Current wording

Outside the United States, an increasing number of laws, regulations, and industry standards apply to data privacy and security. For example, the EU GDPR and the equivalent law in the UK GDPR impose strict requirements for processing the personal data of individuals. Under the EU GDPR, government regulators may impose temporary or definitive bans on data processing, as well as fines of up to 20 million euros or 4% of annual global revenue, whichever is greater. Similar processing penalties and fines exist under the UK GDPR, and the variations in the application of GDPR in the UK following Brexit has increased the complexity of our compliance efforts. Further, individuals may initiate litigation related to our processing of their personal data. As another example, Brazil’s General Data Protection

Previous wording

Certain jurisdictions have enacted data localization laws and cross-border personal data transfer laws. For example, absent appropriate safeguards or other circumstances, the EU GDPR, UK GDPR, and laws in Switzerland generally restrict the transfer of personal data to countries that these jurisdictions consider to not provide an adequate level of personal data protection. Although there are currently various mechanisms that may be used to transfer personal data from the EEA and UK to the United States in compliance with law, such as the EEA’s standard contractual clauses, the UK’s International Data Transfer Agreement / Addendum, and the EU-U.S. Data Privacy Framework and the UK extension thereto (which allows for transfers to relevant U.S.-based organizations who self-certify compliance and participate in the Framework), these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States.

Current wording

Certain jurisdictions have enacted data localization laws and cross-border personal data transfer laws. For example, absent appropriate safeguards or other circumstances, the EU GDPR, UK GDPR, and laws in Switzerland generally restrict the transfer of personal data to countries that these jurisdictions consider to not provide an adequate level of personal data protection. Although there are currently various mechanisms that can be used to transfer personal data from the EEA and UK to the United States in compliance with law, such as the EEA’s standard contractual clauses, the UK’s International Data Transfer Agreement / Addendum, and the EU-U.S. Data Privacy Framework and the UK extension thereto (which allows for transfers to relevant U.S.-based organizations who self-certify compliance and participate in the Framework), these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States.

Previous wording

Our obligations related to data privacy and security are quickly changing in an increasingly stringent fashion, creating some uncertainty as to the effective future legal framework. These obligations may be subject to differing applications and interpretations, which may be inconsistent or in conflict among jurisdictions. As our platform and products evolve and the ways we use personal data change to meet the complex needs of our customer base, we continue to become subject to additional privacy and security obligations. Even if we believe we have satisfied compliance requirements in our activities, regulators may disagree with our compliance posture and issue high penalties and fines for noncompliance. Additionally, our sales cycles may increase due to increasingly rigorous privacy and security assessments that must be completed prior to purchasing our platform and products as a result of increased regulation. Preparation for and compliance with these obligations require us to devote significant resources (including, without limitation, financial and time-related resources). For example, the increased consumer control over the sharing of their personal data afforded by the CCPA may affect our customers’ ability to share such personal data with us or may require us to delete or remove consumer information from our records or data sets, which may result in considerable costs for our organization. Further, these obligations may necessitate changes to our information technologies, systems, and practices and to those of any third parties that process personal data on our behalf. In addition, these obligations may require us to change our business model or our products. For example, social media networks (which are integral third-party services to our platform) are under heightened scrutiny from international regulators as well as individuals seeking to bring claims for alleged non-compliance. If the interpretation or application of data privacy or security laws or regulations adversely impact social media networks, this may change the APIs and data made available to us from the social media networks. Although we endeavor to comply with all applicable data privacy and security obligations, we may at times fail (or be perceived to have failed) to do so. Despite our efforts, our personnel or third parties upon whom we rely may fail to comply with such obligations, which could negatively impact our business operations and compliance posture. For example, any failure by a third-party that processes personal data on our behalf to comply with applicable law, regulations, or contractual obligations could result in adverse effects, including inability to operate our business and proceedings against us by governmental entities or others.

Current wording

Our obligations related to data privacy and security are quickly changing in an increasingly stringent fashion, creating some uncertainty as to the effective future legal framework. These obligations may be subject to differing applications and interpretations, which may be inconsistent or in conflict among jurisdictions. As our platform and products evolve and the ways we use personal data change to meet the complex needs of our customer base, we continue to become subject to additional privacy and security obligations. Even if we believe we have satisfied compliance requirements in our activities, regulators may disagree with our compliance posture and issue high penalties and fines for noncompliance. Additionally, our sales cycles may increase due to increasingly rigorous privacy and security assessments that must be completed prior to purchasing our platform and products as a result of increased regulation. Preparation for and compliance with these obligations require us to devote significant resources (including, without limitation, financial and time-related resources). For example, the increased consumer control over the sharing of their personal data afforded by the CCPA may affect our customers’ ability to share such personal data with us or may require us to delete or remove consumer information from our records or data sets, which may result in considerable costs for our organization. Further, these obligations may necessitate changes to our information technologies, systems, and practices and to those of any third parties that process personal data on our behalf. In addition, these obligations may require us to change our business model or our products. For example, social media networks (which are integral third-party services to our platform) are under heightened scrutiny from international regulators as well as individuals seeking to bring claims for alleged non-compliance. If the interpretation or application of data privacy or security laws or regulations adversely impact social media networks, this may change the APIs and data made available to us from the social media networks. Although we endeavor to comply with all applicable data privacy and security obligations, we may at times fail (or be perceived to have failed) to do so. Despite our efforts, our personnel or third parties with whom we work may fail to comply with such obligations, which could negatively impact our business operations and compliance posture. For example, any failure by a third-party that processes personal data on our behalf to comply with applicable law, regulations, or contractual obligations could result in adverse effects, including inability to operate our business and proceedings against us by governmental entities or others.

Previous wording

If our information technology systems or data, or those of third parties upon which we rely, are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers; and other adverse consequences.

Current wording

If our information technology systems or data, or those of third parties with whom we work, are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers; and other adverse consequences.

Previous wording

In the ordinary course of our business, we may collect, store, use, transmit, disclose, or otherwise process proprietary and confidential data, including personal data and intellectual property. We may rely upon third party service providers and technologies to operate critical business systems to process confidential and personal data in a variety of contexts, including, without limitation, third-party providers of cloud-based infrastructure, encryption and authentication technology, employee email, content delivery to customers, and other functions. Our ability to monitor these third parties’ cybersecurity practices is limited, and these third parties may not have adequate information security measures in place. We may inadvertently share or receive sensitive information with or from third parties.

Current wording

In the ordinary course of our business, we may collect, store, use, transmit, disclose, or otherwise process sensitive information. We may rely upon third party service providers and technologies to operate critical business systems to process confidential and personal data in a variety of contexts, including, without limitation, third-party providers of cloud-based infrastructure, encryption and authentication technology, employee email, content delivery to customers, and other functions. Our ability to monitor these third parties’ cybersecurity practices is limited, and these third parties may not have adequate information security measures in place. We may inadvertently share or receive sensitive information with or from third parties.

Previous wording

We and the third parties upon which we rely may be subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks (such as credential stuffing), personnel misconduct or error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, earthquakes, fires, floods, and other similar threats. Ransomware attacks, including those perpetrated by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Similarly, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems (including our platform) or the third-party information technology systems that support us and our services. During times of war and other major conflicts, we and the third parties upon which we rely may be vulnerable to a heightened risk of these attacks, including retaliatory cyber-attacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our services.

Current wording

We and the third parties with whom we work may be subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks (such as credential stuffing), personnel misconduct or error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, earthquakes, fires, floods, and other similar threats. Ransomware attacks, including those perpetrated by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Similarly, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems (including our platform) or the third-party information technology systems that support us and our services. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. If the third parties with whom we work experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if the third parties with whom we work fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. During times of war and other major conflicts, we and the third parties with whom we work may be vulnerable to a heightened risk of these attacks, including retaliatory cyber-attacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our services.

Previous wording

We may expend significant resources or modify our business activities in an effort to further protect against security incidents. Certain data privacy and security obligations may require us to implement and maintain specific security measures to protect our information technology systems, including our platform, and data. While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective.

Current wording

We expend significant resources or modify our business activities in an effort to further protect against security incidents. Certain data privacy and security obligations require us to implement and maintain specific security measures to protect our information technology systems, including our platform, and data. While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective.

Previous wording

Applicable data privacy and security obligations may require us to notify relevant stakeholders of security incidents. Such disclosures are costly, and the disclosures or the failure to comply with such requirements could lead to adverse consequences. If we (or a third party upon whom we rely) experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences. These consequences may include: government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing data (including personal data); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive data about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position.

Current wording

Applicable data privacy and security obligations may require us to notify relevant stakeholders of security incidents impacting the confidentiality or integrity of their data and we have processes to ensure timely notifications, which have been utilized when required. Such disclosures are costly, and the disclosures or the failure to comply with such requirements could lead to adverse consequences. If we (or a third party with whom we work) experience a security incident or are perceived to have experienced a security incident, we may experience material adverse consequences. These consequences may include: government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing data (including personal data); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant material consequences may prevent or cause customers to stop using our platform, products, or services, deter new customers from using our platform, products, or services, and negatively impact our ability to grow and operate our business. In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive data about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position.

Previous wording

Our agreements with customers and other third parties may include indemnification or other provisions under which we agree to indemnify or otherwise be liable to them for losses suffered or incurred as a result of claims of intellectual property infringement, damages caused by us to property or persons, or other liabilities relating to or arising from our platform, products or other acts or omissions. For some of our larger customers, we sometimes negotiate additional indemnification for breaches of our obligations, representations or warranties in the subscription agreement, gross negligence or willful misconduct, breaches of confidentiality, losses related to security incidents, breach of the data processing addendum or violations of applicable law. The term of these contractual provisions often survives termination or expiration of the applicable agreement. Large indemnity payments or damage claims from contractual breach could harm our business, operating results and financial condition.

Current wording

Our agreements with customers and other third parties may include indemnification or other provisions under which we agree to indemnify or otherwise be liable to them for losses suffered or incurred as a result of claims of intellectual property infringement, damages caused by us to property or persons, or other liabilities relating to or arising from our platform, products or other acts or omissions. For some of our larger customers, we sometimes negotiate additional indemnity provisions which may include indemnification for breaches of our obligations, representations or warranties in the subscription agreement, gross negligence or willful misconduct, breaches of confidentiality, losses related to security incidents, breach of the data processing addendum or violations of applicable law. The term of these contractual provisions often survives termination or expiration of the applicable agreement. Large indemnity payments or damage claims from contractual breach could harm our business, operating results and financial condition.

Previous wording

From time to time, third parties may assert infringement claims against our customers. These claims may require us to initiate or defend protracted and costly litigation on behalf of our customers, regardless of the merits of these claims. If any of these claims succeed, we may be forced to pay damages on behalf of our customers or may be required to obtain licenses for the platform or products they use or modify our platform or products. If we cannot obtain all necessary licenses on commercially reasonable terms or made such modifications to avoid a claim, our customers may be forced to stop using our platform or products. Further, customers may require us to indemnify or otherwise be liable to them for breach of confidentiality or failure to implement adequate security measures with respect to their data stored, transmitted or processed by our employees, platform or products. Although we normally contractually limit our liability with respect to such obligations, we may still incur substantial liability related to them. Any dispute with a customer with respect to such obligations could have adverse effects on our relationship with that customer and other current and prospective customers, reduce demand for our platform or products, and harm our revenue, business and operating results.

Current wording

From time to time, third parties may assert infringement claims against our customers. These claims may require us to initiate or defend protracted and costly litigation on behalf of our customers, regardless of the merits of these claims. If any of these claims succeed, we may be forced to pay damages on behalf of our customers or may be required to obtain licenses for the platform or products they use or modify our platform or products. If we cannot obtain all necessary licenses on commercially reasonable terms or make such modifications to avoid a claim, our customers may be forced to stop using our platform or products. Further, customers may require us to indemnify or otherwise be liable to them for breach of confidentiality or failure to implement adequate security measures with respect to their data stored, transmitted or processed by our employees, platform or products. Although we normally contractually limit our liability with respect to breach of those obligations, we may still be responsible for substantial damages related to claims. Any dispute with a customer with respect to such obligations could have adverse effects on our relationship with that customer and other current and prospective customers, reduce demand for our platform or products, and harm our revenue, business and operating results.

Previous wording

We may be subject to litigation, disputes or regulatory inquiries for a variety of claims, which could adversely affect our results of operations, harm our reputation or otherwise negatively affect our business.

Current wording

We are currently subject to, and may become in the future, subject to litigation, disputes or regulatory inquiries for a variety of claims, which could adversely affect our results of operations, harm our reputation or otherwise negatively affect our business.

Previous wording

From time to time, we may be involved in litigation, disputes or regulatory inquiries that arise in the ordinary course of business. These may include claims, lawsuits and proceedings involving labor and employment, wage and hour, commercial, alleged securities law violations or other investor claims, and other matters. We expect that the number and significance of these potential disputes may increase as our business expands and our company grows larger. While our agreements with customers generally limit our liability for damages arising from our platform, we cannot assure you that these contractual provisions will protect us from liability for damages in the event we are sued. Although we carry general liability insurance coverage, our insurance may not cover all potential claims to which we are exposed or may not be adequate to indemnify us for all liability that may be imposed. Any claims against us, whether meritorious or not, could be time consuming, result in costly litigation, require significant amounts of management time, adversely affect our reputation and result in the diversion of significant operational resources. Because litigation is inherently unpredictable, we cannot assure you that the results of any of these actions will not have a material adverse effect on our revenue, business, brand, results of operations and financial condition.

Current wording

From time to time, we may also be involved in other types of litigation, disputes or regulatory inquiries that arise in the ordinary course of business. These may include claims, lawsuits and proceedings involving labor and employment, wage and hour, and commercial. We generally expect that the number, type and significance of claims, lawsuits, disputes and/or regulatory inquiries involving the Company may increase as our business expands and our company grows larger. While our agreements with customers generally limit our liability for damages arising from our platform, we cannot assure you that these contractual provisions will protect us from liability for damages in the event we are sued. Additionally, although we carry general liability insurance and director and officer liability insurance, these policies may not apply to cover all claims to which we are (or could be) exposed and/or may be inadequate to fully cover damages and/or liabilities resulting from such claims. Any claims against us, whether meritorious or not, could result in costly litigation, require significant amounts of management and employee time, adversely affect our reputation and/or result in the diversion of significant operational resources. Because litigation is inherently unpredictable, we cannot assure you that the results of any of these actions will not have a material adverse effect on our revenue, business, brand, results of operations and financial condition.

Showing the first 40 of 57 pairs. Open the source sections for the rest.

Rearranged current paragraphs (5)

Current report — wording carried from elsewhere

As more of our sales efforts target larger enterprise customers, our sales cycle has and may continue to become longer and more expensive and we may encounter increased pricing pressure and compliance challenges.

Current report — wording carried from elsewhere

We recognize subscription revenue ratably over the term of our customer contracts. Consequently, downturns or upturns in new sales may not be immediately reflected in our operating results and may be difficult to discern.

Current report — wording carried from elsewhere

Our operations rely on information technology systems for the use, storage and transmission of sensitive and confidential information with respect to our customers, content creators, our customers’ consumers or other social media audiences, the third-party technology platforms of other parties and our employees. A cybersecurity-related attack, malicious internet-based activity, online and offline fraud, and intrusion or disruption by either an internal or external source or other breach of the systems on which our platform and products operate, and on which our employees conduct business, could lead to unauthorized access to, use of, loss of or unauthorized disclosure of sensitive and confidential information, disruption of our services, and resulting regulatory enforcement actions, litigation, indemnity obligations and other possible liabilities, as well as negative publicity, which could damage our reputation, impair sales and harm our business. In addition to traditional computer “hackers,” malicious code (such as viruses and worms), compromised accounts with elevated privileges (phishing), credential stuffing, credential harvesting, employee misconduct or error, theft or misuse, and denial-of-service attacks, sophisticated nation-state and nation-state supported actors now engage in attacks (including advanced persistent threat intrusions) and attacks are now enhanced or facilitated by AI.

Current report — wording carried from elsewhere

Law (Lei Geral de Proteção de Dados Pessoais, or “LGPD”) (Law No. 13,709/2018) applies to our operations. The LGPD broadly regulates processing of personal data of individuals in Brazil and imposes compliance obligations and penalties comparable to those of the EU GDPR. In Canada, the Personal Information Protection and Electronic Documents Act (“PIPEDA”) applies to our operations. We also process personal data about our customers’ consumers in Asia and therefore, may become subject to new and emerging data privacy regimes in Asia, including China’s Personal Information Protection Law, Japan’s Act on the Protection of Personal Information, and Singapore’s Personal Data Protection Act.

Current report — wording carried from elsewhere

•our ability to attract new customers;
Rearranged previous paragraphs (2)

Previous report — wording carried elsewhere

If we do not adequately fund our research and development efforts, or use research and development teams effectively, we may not be able to compete effectively, and our business and operating results may be harmed.

Previous report — wording carried elsewhere

We also rely on unpatented proprietary technology that is only protected to the extent that it is kept secret from and not independently developed by others. To protect our trade secrets and other proprietary technology and information, we have entered into confidentiality agreements with most of our