Freshworks Inc

Previous wording

•We recognize revenue over the term of our customer contracts. Consequently, downturns or upturns in new sales may not be immediately reflected in our operating results and may be difficult to discern.

Current wording

•We recognize revenue from subscriptions over the term of our customer contracts. Consequently, downturns or upturns in new sales may not be immediately reflected in our operating results and may be difficult to discern.

Previous wording

We have incurred net losses in each fiscal year since our founding. We generated net losses of $137.4 million and $232.1 million for the years ended December 31, 2023 and 2022, respectively. As of December 31, 2023, we had an accumulated deficit of $3.6 billion. We do not expect to be profitable in the near future, and while we achieved profitability for one quarter in 2020, we cannot assure you that we will achieve profitability again in the future or that, if we do become profitable, we will sustain profitability. Any failure by us to achieve and sustain profitability could cause the value of our Class A common stock to decline. These losses reflect, among other things, the significant investments we made to develop and commercialize our products, serve our existing customers, and broaden our customer base.

Current wording

We have incurred net losses in each fiscal year since our founding. We generated net losses of $95.4 million and $137.4 million for the years ended December 31, 2024 and 2023, respectively. As of December 31, 2024, we had an accumulated deficit of $3.7 billion. We do not expect to be profitable in the near future, and we cannot assure you that, if we do become profitable, we will sustain profitability. Any failure by us to achieve and sustain profitability could cause the value of our Class A common stock to decline. These losses reflect, among other things, the significant investments we made to develop and commercialize our products, serve our existing customers, and broaden our customer base.

Previous wording

While we have experienced significant growth in recent periods, our revenue growth rate has declined more recently. Even if our revenue continues to increase, we expect that our revenue growth rate may continue to decline in the future as a result of a variety of factors, including the maturation of our business. Our growth may continue to be impacted by macroeconomic factors beyond our control, including, but not limited to rising interest rates, foreign exchange rate volatility, global geopolitical uncertainties, and supply-chain issues. Further, as we operate in a rapidly changing industry, widespread acceptance and use of our products are critical to our future growth and success. We believe our revenue growth depends on a number of factors, including, but not limited to, our ability to:

Current wording

We have experienced significant growth in recent periods. Even if our revenue continues to increase, we expect that our revenue growth rate may continue to decline in the future as a result of a variety of factors, including the maturation of our business. Our growth may continue to be impacted by macroeconomic factors beyond our control, including, but not limited to high interest rates, inflation, foreign exchange rate volatility, global geopolitical uncertainties, and supply-chain issues. Further, as we operate in a rapidly changing industry, widespread acceptance and use of our products are critical to our future growth and success. We believe our revenue growth depends on a number of factors, including, but not limited to, our ability to:

Previous wording

Our quarterly results of operations, including the levels of our revenue, deferred revenue, working capital, and cash flows, have varied significantly in the past and may vary significantly in the future, such that period-to-period comparisons of our results of operations may not be meaningful. Our quarterly financial results have and may continue to fluctuate due to a variety of factors, many of which are outside of our control and may be difficult to predict, including, but not limited to:

Current wording

Our quarterly results of operations, including the levels of our revenue, deferred revenue, working capital, and cash flows, have varied significantly in the past and may vary significantly in the future, such that period-to-period comparisons of our results of operations may not be meaningful. Our quarterly financial results have and may continue to fluctuate due to a variety of factors, many of which are outside of our control and have been, and may continue to be, difficult to predict, including, but not limited to:

Previous wording

•costs and timing of expenses related to the potential acquisition of businesses, talent, technologies, or intellectual property, including potentially significant amortization costs and possible write-downs;

Current wording

•costs and timing of expenses related to the acquisition of businesses, talent, technologies, or intellectual property, including potentially significant amortization costs and possible write-downs;

Previous wording

Larger customers are becoming a bigger part of our business. Sales to large customers involve risks that may not be present or that are present to a lesser extent with sales to smaller organizations, such as longer sales cycles, more complex customer requirements, substantial upfront sales costs, and less predictability in completing some of our sales. For example, large customers may require considerable time to evaluate and test our products prior to making a purchase decision. A number of factors influence the length and variability of our sales cycle, including the need to educate potential customers about the uses and benefits of our products, the discretionary nature of purchasing and budget cycles, and the competitive nature of evaluation and purchasing approval processes. As a result, the length of our sales cycle, from identification of the opportunity to deal closure, may vary significantly from customer to customer, with sales to large enterprises typically taking longer to complete. Our typical sales cycle for mid-market and enterprise customers is approximately 150 days, as compared to 30 days for SMB customers. Moreover, large customers are often more demanding than other customers and begin to deploy our products on a limited basis but nevertheless require implementation services and negotiate pricing discounts or other onerous terms, which increase our upfront investment in the sales effort with no guarantee that sales to these customers will justify our substantial upfront investment, which can affect our roadmaps and deliverables. If we fail to effectively manage these risks associated with sales cycles and sales to large customers, our business, financial condition, and results of operations may be adversely affected.

Current wording

Larger customers are becoming a bigger part of our business. Sales to large customers involve risks that may not be present or that are present to a lesser extent with sales to smaller organizations, such as longer sales cycles, more complex customer requirements, substantial upfront sales costs, and less predictability in completing some of our sales. For example, large customers may require considerable time to evaluate and test our products prior to making a purchase decision. A number of factors influence the length and variability of our sales cycle, including the need to educate potential customers about the uses and benefits of our products, the discretionary nature of purchasing and budget cycles, and the competitive nature of evaluation and purchasing approval processes. As a result, the length of our sales cycle, from identification of the opportunity to deal closure, may vary significantly from customer to customer, with sales to large enterprises typically taking longer to complete. Our typical sales cycle for mid-market and enterprise customers is approximately 130 to 150 days, as compared to 30 days for SMB customers. Moreover, large customers are often more demanding than other customers and begin to deploy our products on a limited basis, but, nevertheless require implementation services and negotiate pricing discounts or other onerous terms, which increase our upfront investment in the sales effort with no guarantee that sales to these customers will justify our substantial upfront investment, which can affect our roadmaps and deliverables. If we fail to effectively manage these risks associated with sales cycles and sales to large customers, our business, financial condition, and results of operations may be adversely affected.

Previous wording

Our ability to grow is also subject to the risk of future disruptive technologies. Uncertainty around new and emerging AI applications, such as generative AI content creation, may require additional investment in the development of proprietary datasets, machine learning models and systems to test for accuracy, bias and other variables, which are often complex. Developing, testing and deploying AI systems may also increase the cost profile of our offerings due to the nature of the computing costs involved in such systems.

Current wording

Our ability to grow is also subject to the risk of future disruptive technologies. Uncertainty around new and emerging AI applications, such as generative AI content creation, has required and may continue to require additional investment in the development of proprietary datasets, machine learning models and systems to test for accuracy, bias and other variables, which are often complex. Developing, testing and deploying AI systems may also increase the cost profile of our offerings due to the nature of the computing costs involved in such systems.

Previous wording

Our business is subscription based, and customers are not obligated to and may not renew their subscriptions after their existing subscriptions expire. In order for us to maintain or improve our operating results, it is important that our customers renew their subscriptions when the initial contract term expires and add additional users to their subscriptions. Our customers have no obligation to renew their subscriptions, and we cannot ensure that customers will renew subscriptions with a similar contract period, with the same or greater number of users, or for the same or upgraded level of subscription plan. Customers may or may not renew their subscription plans as a result of a number of factors, including their satisfaction or dissatisfaction with our products, our pricing or pricing structure, the pricing or capabilities of the products and services offered by our competitors, the effects of general economic conditions, inflation, or customers’ budgetary constraints. If customers do not renew their subscriptions, renew on less favorable terms, or fail to add more users, or if we fail to upgrade trial customers to our paid subscription plans, or expand the adoption of our products within and across organizations, our revenue may decline or grow less quickly than anticipated, which would harm our business, results of operations, and financial condition. We have also experienced and may experience in the future a reduction in renewal rates and increased churn rates, particularly within our SMB customers, many of whom are on month-to-month subscriptions, as well as reduced customer spend and delayed payments that could materially impact our business, results of operations, and financial condition in future periods. If we fail to predict customer demands or fail to attract new customers and maintain and expand new and existing customer relationships, our revenue may grow more slowly than expected, may not grow at all, or may decline, and our business may be harmed.

Current wording

Our business is primarily subscription based, and customers are not obligated to and may not renew their subscriptions after their existing subscriptions expire. In order for us to maintain or improve our operating results, it is important that our customers renew their subscriptions when the initial contract term expires and add additional users to their subscriptions. Our customers have no obligation to renew their subscriptions, and we cannot ensure that customers will renew subscriptions with a similar contract period, with the same or greater number of users, or for the same or upgraded level of subscription plan. Customers may or may not renew their subscription plans as a result of a number of factors, including their satisfaction or dissatisfaction with our products, our pricing or pricing structure, the pricing or capabilities of the products and services offered by our competitors, the effects of general economic conditions, inflation, or customers’ budgetary constraints. If customers do not renew their subscriptions, renew on less favorable terms, or fail to add more users, or if we fail to upgrade trial customers to our paid subscription plans, or expand the adoption of our products within and across organizations, our revenue may decline or grow less quickly than anticipated, which would harm our business, results of operations, and financial condition. We have also experienced and may experience in the future a reduction in renewal rates and increased churn rates, particularly within our SMB customers, many of whom are on month-to-month subscriptions, as well as reduced customer spend and delayed payments that could materially impact our business, results of operations, and financial condition in future periods. If we fail to predict customer demands or fail to attract new customers and maintain and expand new and existing customer relationships, our revenue may grow more slowly than expected, may not grow at all, or may decline, and our business may be harmed.

Previous wording

We deploy generative AI into certain of our products and services, which may result in adverse effects to our operations, legal liability, reputation and competitive risks. The use of generative AI may lead to challenges, concerns and risks that are significant or that we may not be able to predict, especially if our use of these technologies in our products and services becomes more important to our operations over time.

Current wording

We deploy generative AI into certain of our products and services, which may result in adverse effects to our operations, legal liability, reputation and competitive risks. The rapid evolution of AI and the use of generative AI may lead to challenges, concerns and risks that are significant or that we may not be able to predict, especially if our use of these technologies in our products and services becomes more important to our operations over time.

Previous wording

Generative AI in our products and services may be difficult to deploy successfully due to operational issues inherent to the nature of such technologies. For example, AI algorithms use machine learning and predictive analytics which may be insufficient or of poor quality and reflect inherent biases and could lead to flawed, biased, and inaccurate results. In addition, generative AI may create content that appears correct but is factually inaccurate or flawed, or contains copyrighted or other protected material, and if our customers or others use this flawed content to their detriment, we may be exposed to brand or reputational harm, competitive harm, and/or legal liability. For example, deficient or inaccurate recommendations, summaries, or analyses that generative AI features assist in producing could lead to customer rejection or skepticism of our products, affect our reputation or brand, and negatively affect our financial results. Further, unauthorized use or misuse of generative AI by our employees or others may result in disclosure of confidential company and customer data, reputational harm, privacy law violations and legal liability. Generative AI is also the subject of a quickly evolving legal and regulatory environment, and new or enhanced governmental or regulatory scrutiny, litigation, ethical concerns, or other complications related to our use of generative AI could cause us to divert resources towards compliance and adversely affect our business, reputation, or financial results. Our use of generative AI may also lead to novel and urgent cybersecurity risks, including the misuse of personal data, which may adversely affect our operations and reputation.

Current wording

Generative AI in our products and services may be difficult to deploy successfully due to operational issues inherent to the nature of such technologies. Moreover, known risks of generative AI currently include risks related to accuracy, bias, toxicity, privacy and security and data provenance. For example, AI algorithms use machine learning and predictive analytics which may be insufficient or of poor quality and reflect inherent biases and could lead to flawed, biased, and inaccurate results. Since we may use AI outputs to make certain decisions, due to these potential inaccuracies or flaws, the model could be biased and could lead us to make decisions that could bias certain individuals (or classes of individuals), and adversely impact their rights, employment, and ability to obtain certain pricing, products, services, or benefits, including exposure to reputational and competitive harm, customer loss, and legal liability. In addition, generative AI may create content that appears correct but is factually inaccurate or flawed, or contains copyrighted or other protected material, and if our customers or others use this flawed content to their detriment, we may be exposed to brand or reputational harm, competitive harm, and/or legal liability. For example, deficient or inaccurate recommendations, summaries, or analyses that generative AI features assist in producing could lead to customer rejection or skepticism of our products, affect our reputation or brand, and negatively affect our financial results. Further, unauthorized use or misuse of generative AI by our employees or others may result in disclosure of confidential company and customer data, reputational harm, privacy law violations and legal liability. Generative AI is also the subject of a quickly evolving legal and regulatory environment, and new or enhanced governmental or regulatory scrutiny, litigation, ethical concerns, or other complications related to our use of generative AI could cause us to divert resources towards compliance and adversely affect our business, reputation, or financial results. Our use of generative AI may also lead to novel and urgent cybersecurity risks, including the misuse of personal data, which may adversely affect our operations and reputation.

Previous wording

The market for customer service (CS), IT service management (ITSM), and customer relationship management (CRM) products is rapidly evolving and increasingly competitive, fragmented, and subject to rapidly changing technology, shifting user and customer needs, new market entrants, and frequent introductions of new products and services. We compete with a significant number of companies that range in size from large and diversified enterprises with significant financial resources to smaller companies. These competitors have developed or are developing products and services that currently, or in the future may, compete with some or all of our offerings.

Current wording

The market for employee experience (EX) and customer experience (CX) products is rapidly evolving and increasingly competitive, fragmented, and subject to rapidly changing technology, shifting user and customer needs, new market entrants, and frequent introductions of new products and services. We compete with a significant number of companies that range in size from large and diversified enterprises with significant financial resources to smaller companies. These competitors have developed or are developing products and services that currently, or in the future may, compete with some or all of our offerings.

Previous wording

Within CS, we primarily face competition from CS suites, such as Salesforce and Zendesk, and legacy vendors, such as Oracle and SAP. Within ITSM, we primarily face competition from traditional vendors, such as ServiceNow, BMC, Ivanti/Cherwell, and modern pure-play vendors, such as Atlassian. Within CRM, we primarily face competition from full-featured vendors, such as Salesforce, HubSpot, and Microsoft Dynamics, and legacy vendors, such as Oracle, SAP, and Sage.

Current wording

For our EX products, we primarily face competition from traditional vendors, such as ServiceNow, BMC, Ivanti/Cherwell, and modern pure-play vendors, such as Atlassian. For our CX solutions, with regards to customer service, we primarily face competition from customer service suites, such as Salesforce and Zendesk, and legacy vendors, such as Oracle and SAP and, with regards to customer relationship management, we primarily face competition from full-featured vendors, such as Salesforce, HubSpot, and Microsoft Dynamics, and legacy vendors, such as Oracle, SAP, and Sage.

Previous wording

Many of our current and potential competitors may have longer operating histories, greater brand name recognition, stronger and more extensive partner relationships, significantly greater financial, technical, marketing, and other resources, lower labor and development costs, and larger customer bases than we do. These competitors may invest and engage in more extensive research and development efforts, undertake more far-reaching marketing campaigns, and adopt more aggressive pricing policies that will allow them to build larger customer bases than we have. Our competitors may also offer their products and services at a lower price, or may offer price concessions, delayed payment terms, financing terms, or other terms and conditions that are more enticing to potential customers.

Current wording

Many of our current and potential competitors may have longer operating histories, greater brand name recognition, stronger and more extensive partner relationships, significantly greater financial, technical, marketing, and other resources, lower labor and development costs, and larger customer bases than we do. These competitors may invest and engage in more extensive research and development efforts, undertake more far-reaching marketing campaigns, and adopt more aggressive pricing policies that will allow them to build larger customer bases than we have. Our competitors may also offer their products and services at a lower price, or may offer price concessions, delayed payment terms, financing terms, or other terms and conditions that are more enticing to potential customers. Additionally, we are using or building our Freddy AI offerings into many of our product and we are facing increased competition as AI technologies are integrated into the various competitive offerings. Our competitors may be able to develop new AI offerings that disrupt our customers’ needs and negatively impact demand for our products, or incorporate AI into their offerings more successfully than we do and achieve greater and faster adoption.

Previous wording

Limitations or errors with respect to how we measure data or with respect to the data that we measure may affect our understanding of certain details of our business, which could affect our long-term strategies. If our key business metrics are not accurate representations of our business, if we discover material inaccuracies with respect to these figures, or if investors perceive there to be inaccuracies, our stock price could decline, we may be, and currently are, subject to stockholder litigation, our reputation may be significantly harmed, and our business, results of operations, and financial condition could be materially adversely affected.

Current wording

Limitations or errors with respect to how we measure data or with respect to the data that we measure may affect our understanding of certain details of our business, which could affect our long-term strategies. If our key business metrics are not accurate representations of our business, if we discover material inaccuracies with respect to these figures, or if investors perceive there to be inaccuracies, our stock price could decline. In addition, we are currently, and may in the future be, subject to stockholder litigation, which may significantly harm our reputation, and could materially adversely affect our business, results of operations, and financial condition.

Previous wording

A significant part of our business strategy and culture is to focus on long-term growth and customer success over short-term financial results. For example, in the year ended December 31, 2023, we increased our operating expenses to $663.2 million as compared to $635.6 million for the year ended December 31, 2022, while continuing to generate a net loss of $137.4 million in the year ended December 31, 2023. We expect that we will continue to operate at a loss, and our profitability may be lower than it would be if our strategy were to maximize near-term profitability. If we are ultimately unable to achieve or improve profitability at the level or during the time frame anticipated by securities or industry analysts and our stockholders, the trading price of our Class A common stock may decline.

Current wording

A significant part of our business strategy and culture is to focus on long-term growth and customer success over short-term financial results. For example, in the year ended December 31, 2024, we increased our operating expenses to $745.7 million as compared to $663.2 million for the year ended December 31, 2023, while continuing to generate a net loss of $95.4 million in the year ended December 31, 2024. We expect that we will continue to operate at a loss, and our profitability may be lower than it would be if our strategy were to maximize near-term profitability. If we are ultimately unable to achieve or improve profitability at the level or during the time frame anticipated by securities or industry analysts and our stockholders, the trading price of our Class A common stock may decline.

Previous wording

We recognize revenue over the term of our customer contracts. Consequently, downturns or upturns in new sales may not be immediately reflected in our operating results and may be difficult to discern.

Current wording

We recognize revenue from subscriptions over the term of our customer contracts. Consequently, downturns or upturns in new sales may not be immediately reflected in our operating results and may be difficult to discern.

Previous wording

We generally recognize subscription revenue from customers ratably over the terms of their contracts, and a majority of our revenue is derived from subscriptions that have terms longer than one month. As a result, a portion of the revenue we report each quarter is derived from the recognition of deferred revenue relating to subscriptions entered into during previous quarters. Consequently, a decline in new or renewed subscriptions with terms that are longer than one month in any single quarter may have a small impact on our revenue for that quarter. However, such a decline will negatively affect our revenue in future quarters. Accordingly, the effect of significant downturns in sales and market acceptance of our products, and potential changes in our pricing policies or rate of expansion or retention, may not be fully reflected in our results of operations until future periods. We may also be unable to reduce our operating expenses in a timely fashion if our revenues were to significantly decline. In addition, because we believe a substantial percentage of subscriptions to our products are shorter than many comparable SaaS companies and because we have many variations of billing cycles, our remaining performance obligations may be a less meaningful indicator of our future financial results as compared to other SaaS companies. A significant portion of our costs are expensed as incurred, while revenue is recognized over the life of the agreement with the applicable customer.

Current wording

We generally recognize subscription revenue from customers ratably over the terms of their contracts, and a majority of our revenue is derived from subscriptions that have terms longer than one month. As a result, a portion of the revenue we report each quarter is derived from the recognition of deferred revenue relating to subscriptions entered into during previous quarters. Consequently, a decline in new or renewed subscriptions with terms that are longer than one month in any single quarter may have a small impact on our revenue for that quarter. However, such a decline will negatively affect our revenue in future quarters. Accordingly, the effect of significant downturns in sales and market acceptance of our products, and potential changes in our pricing policies or rate of expansion or retention, may not be fully reflected in our results of operations until future periods. We may also be unable to reduce our operating expenses in a timely fashion if our revenues were to significantly decline. In addition, because we believe a substantial percentage of subscriptions to our products are shorter than many comparable SaaS companies and because we have many variations of billing cycles, our remaining performance obligations may be a less meaningful indicator of our future financial results as compared to other SaaS companies. A significant portion of our costs are expensed as incurred, while revenue from subscriptions is recognized over the life of the agreement with the applicable customer.

Previous wording

The failure to attract and retain additional qualified personnel or to maintain our company culture could harm our business and culture and prevent us from executing our business strategy and growth plans.

Current wording

The failure to attract and retain additional qualified personnel could harm our business and prevent us from executing our business strategy and growth plans, and the steps we took recently to realign our workforce to our focused priorities may not have the expected benefits or may exacerbate these difficulties.

Previous wording

In addition, to execute our business model, we must attract and retain highly qualified personnel. Competition for executive officers, software engineers and product managers (particularly with AI and machine learning backgrounds), sales personnel, and other key personnel in our industry and in the San Francisco Bay Area, where our headquarters is located, in India where our engineering, product, and inside sales resources are concentrated, and in other locations where we maintain offices, is intense. As we become a more mature company, we may find our recruiting efforts more challenging. The incentives to attract, retain, and motivate employees provided by our equity awards, or by other compensation arrangements, may not be as effective as in the past.

Current wording

In addition, to execute our business model, we must attract and retain highly qualified personnel. Competition for executive officers, software engineers and product managers (particularly with AI and machine learning backgrounds), sales personnel, and other key personnel in our industry is intense in the locations in which we operate. As we become a more mature company, we may find our recruiting efforts more challenging. The incentives to attract, retain, and motivate employees provided by our equity awards, or by other compensation arrangements, may not be as effective as in the past.

Previous wording

Many of the companies with which we compete for experienced personnel have greater resources than we have. In addition, to remain competitive in India, we must maintain our reputation as a premier employer in India, including by providing competitive wages and benefits. Our recruiting efforts may also be limited by laws and regulations, such as restrictive immigration laws, and restrictions on travel or availability of visas. Furthermore, any actual or perceived decline in the value of our equity awards as a result of volatility in our stock price could harm our hiring and retention efforts. If we do not succeed in attracting highly qualified personnel or retaining or motivating existing personnel, we may be unable to support our continued growth.

Current wording

Many of the companies with which we compete for experienced personnel have greater resources than we have. Our recruiting efforts may also be limited by laws and regulations, such as restrictive immigration laws, and restrictions on travel or availability of visas. Furthermore, any actual or perceived decline in the value of our equity awards as a result of volatility in our stock price could harm our hiring and retention efforts. If we do not succeed in attracting highly qualified personnel or retaining or motivating existing personnel, we may be unable to support our continued growth.

Previous wording

We believe that a critical component of our success has been our culture. We have invested substantial time and resources in building out our team with an emphasis on shared values and a commitment to diversity and inclusion. As we continue to develop the infrastructure to support our growth, we will need to maintain our culture among a larger number of employees dispersed in various geographic regions, including those who may be working remotely outside of an office environment. Any failure to preserve our culture could negatively affect our future success, including our ability to retain and recruit personnel.

Current wording

We believe that a critical component of our success has been our culture. We have invested substantial time and resources in building out our team with an emphasis on shared values and a commitment to diversity and inclusion. As we continue to develop the infrastructure to support our growth, we will need to maintain our culture among a larger number of employees dispersed across the globe. Any failure to preserve our culture could negatively affect our future success, including our ability to retain and recruit personnel.

Previous wording

If our information technology, systems, or those of third parties upon which we rely, or our data are or were to be compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions, litigation, fines and penalties, disruptions of our business operations, reputational harm, loss of revenue or profits, and other adverse consequences.

Current wording

If our information technology, systems, or those of third parties upon which we rely, or our data are or were to be compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions, litigation, fines and penalties, disruptions of our business operations, reputational harm, loss of revenue or profits, loss of customers or sales, and other adverse consequences.

Previous wording

In the ordinary course of business, we and the third parties upon which we rely collect, receive, access, store, process, generate, use, transfer, disclose, share, make accessible, protect, secure, and dispose of (collectively, Process or Processing) a large amount of information from our users, customers, and our own employees, including personal information and other sensitive and confidential information including proprietary and confidential business data, trade secrets, intellectual property, sensitive third-party data, business plans, transactions, and financial information (collectively, Sensitive Information). As a result, we and the third parties upon which we rely face a variety of evolving threats that could cause security incidents. Cyber-attacks, malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive data and information technology systems, and those of the third parties upon which we rely. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors.

Current wording

In the ordinary course of business, we and the third parties upon which we rely collect, receive, access, store, process, generate, use, transfer, disclose, share, make accessible, protect, secure, and dispose of (collectively, Process or Processing) a large amount of information from our users, customers, and our own employees, including personal information and other sensitive and confidential information including proprietary and confidential business data, trade secrets, intellectual property, sensitive third-party data, business plans, transactions, and financial information (collectively, Sensitive Information). As a result, we and the third parties upon which we rely face a variety of evolving threats that could cause security incidents. Cyber-attacks, malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive data and information technology systems, and those of the third parties upon which we rely. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. Some actors now engage and are expected to continue to engage in cyber-attacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we, the third parties with whom we work, and our customers may be vulnerable to a heightened risk of these attacks, including retaliatory cyber-attacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our goods and services.

Previous wording

Remote work has become more common and has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers, and devices outside our premises or network, including working at home, while in transit and in public locations.

Current wording

Remote work has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers, and devices outside our premises or network, including working at home, while in transit and in public locations.

Previous wording

Additionally, although we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties upon which we rely). We may not, however, detect and remediate all such vulnerabilities including on a timely basis. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities. Vulnerabilities could be exploited and result in a security incident.

Current wording

Additionally, although we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect, mitigate, and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties upon which we rely). Additionally, certain data privacy and security obligations may require us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our information technology systems and sensitive information. We may not, however, detect and remediate all such vulnerabilities including on a timely basis. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities. Vulnerabilities could be exploited and result in a security incident.

Previous wording

Following a breach of security or other incident, we cannot guarantee that recovery protocols and backup systems will be sufficient to prevent data loss or ensure that we are able to recover promptly any data rendered inaccessible. Additionally, breaches of security or other incidents can damage our reputation and brand, cause our business to suffer, and could require us to expend significant capital and other resources to alleviate problems caused by such breaches or incidents, and we could be exposed to risk of loss, litigation, or regulatory action, and other potential liability. Actual or perceived security breaches or attacks on our systems or those of our third-party service providers can cause us to incur increasing costs, including costs to deploy additional personnel and protection technologies, train employees, and engage third-party experts and consultants and may require notification under applicable data privacy regulations or contractual obligations, or for customer relations or publicity purposes, which could result in additional reputational harm, costly litigation (including class action litigation), material contract breaches, liability, settlement costs, loss of sales, regulatory scrutiny, actions or investigations, a loss of confidence in our business, systems and Processing, a diversion of management’s time and attention, and significant fines, penalties, assessments, fees, and expenses. While we may be entitled to damages if our third-party service providers fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. We continue to devote significant resources to protect against security breaches or other incidents, and we may need to devote significant resources in the future to address problems caused by breaches, including notifying affected individuals, regulators, investors, customers, or other relevant stakeholders of security incidents, and responding to any resulting litigation, which in turn, diverts resources from the growth and expansion of our business.

Current wording

While we may be entitled to damages if our third-party service providers fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. We continue to devote significant resources to protect against security breaches or other incidents, and we may need to devote significant resources in the future to address problems caused by breaches, including notifying affected individuals, regulators, investors, customers, or other relevant stakeholders of security incidents, and responding to any resulting litigation, which in turn, diverts resources from the growth and expansion of our business.

Previous wording

Actual or anticipated security breaches, including a breach of the systems or networks of our third-party providers, could compromise our systems or networks, creating system outages, disruptions or slowdowns and exploiting security vulnerabilities of our networks. In addition, the information stored on our network, or the networks of our third-party providers could be accessed, publicly disclosed, altered, lost or stolen, which could subject us to liability and cause us financial harm. A breach of the security measures of one of our third-party providers could result in the destruction, modification or exfiltration of confidential corporate information or other data that may provide additional avenues of attack. Breaches or perceived breaches of our systems or networks or the systems or networks of our third-party providers, whether or not any such breach is due to a vulnerability in our platform, may also undermine confidence in us or our industry and result in damage to our reputation, negative publicity, loss of users, partners and sales, increased remediation costs, and costly litigation or regulatory fines.

Current wording

Actual or suspected security breaches, including a breach of the systems or networks of our third-party providers, could compromise our systems or networks, creating system outages, disruptions or slowdowns and exploiting security vulnerabilities of our networks. In addition, the information stored on our network, or the networks of our third-party providers could be accessed, publicly disclosed, altered, lost or stolen, which could subject us to liability and cause us financial harm. A breach of the security measures of one of our third-party providers could result in the destruction, modification or exfiltration of confidential corporate information or other data that may provide additional avenues of attack. Breaches or perceived breaches of our systems or networks or the systems or networks of our third-party providers, whether or not any such breach is due to a vulnerability in our platform, may also undermine confidence in us or our industry and result in damage to our reputation, negative publicity, loss of users, partners and sales, increased remediation costs, and costly litigation or regulatory fines.

Previous wording

Additionally, our Sensitive Information or our customers’ Sensitive Information could be leaked, disclosed, or revealed as a result of or in connection with our employees’, personnel’s, or vendors’ use of generative AI technologies. Some generative AI tools may be offered under terms that do not protect the confidentiality of the prompts or inputs that users submit to such tools, and even if the terms do include confidentiality protections, the vendors of these generative AI tools may fail to comply with their contractual obligations regarding the confidentiality or security of any data or other inputs provided to such vendor, or outputs generated by their generative AI tools. Additionally, the providers of generative AI tools could use inputs to further train the third parties’ AI/ML model. Not all providers offer an option to opt-out of such usage, and, even where we do opt-out, we cannot guarantee that the opt-out will be fully effective. Additionally, where an AI/ML model ingests personal information and makes connections using such data, those technologies may reveal other personal or Sensitive Information generated by the model. We do not have formal policies and procedures in place to review and track our employees’, personnel’ and vendors’ use of generative AI, and accordingly, these risks could be particularly difficult to eliminate or manage, and, if not addressed, could have a material adverse effect on our business, results of operations, financial condition, and future prospects.

Current wording

Additionally, our Sensitive Information or our customers’ Sensitive Information could be leaked, disclosed, or revealed as a result of or in connection with our employees’, personnel’s, or vendors’ use of generative AI technologies. Some generative AI tools may be offered under terms that do not protect the confidentiality of the prompts or inputs that users submit to such tools, and even if the terms do include confidentiality protections, the vendors of these generative AI tools may fail to comply with their contractual obligations regarding the confidentiality or security of any data or other inputs provided to such vendor, or outputs generated by their generative AI tools. Additionally, the providers of generative AI tools could use inputs to further train the third parties’ AI and machine learning (AI/ML) model. Not all providers offer an option to opt-out of such usage, and, even where we do opt-out, we cannot guarantee that the opt-out will be fully effective. Additionally, where an AI/ML model ingests personal information and makes connections using such data, those technologies may reveal other personal or Sensitive Information generated by the model. Although we have guidelines with respect to our employees’ use of generative AI tools that encourage the review of certain use cases at the executive level, we do not have processes in place to track and evaluate our employees’, personnel’ and vendors’ use of generative AI tools and cannot guarantee that all uses will be in accordance with our guidelines. Accordingly, these risks could be particularly difficult to eliminate or manage, and, if not addressed, could have a material adverse effect on our business, results of operations, financial condition, and future prospects.

Previous wording

We rely on third parties maintaining open digital marketplaces to distribute our mobile applications for our Freshdesk, Freshchat, Freshcaller, Freshservice, and Freshsales products. If such third parties interfere with the distribution of our mobile applications, our business would be adversely affected.

Current wording

We rely on third parties maintaining open digital marketplaces to distribute our mobile applications for our Freshservice, Freshdesk, Freshchat, Freshcaller, and Freshsales products. If such third parties interfere with the distribution of our mobile applications, our business would be adversely affected.

Previous wording

We rely on third parties maintaining open digital marketplaces, including the Apple App Store and Google Play, which make our mobile applications for our Freshdesk, Freshchat, Freshcaller, Freshservice, and Freshsales, products available for download. We cannot assure you that the marketplaces through which we distribute these mobile applications will maintain their current structures or that such marketplaces will not charge us fees to list our application for download. We are also dependent on these third-party marketplaces to enable us and our users to timely update these mobile applications, and to incorporate new features, integrations, and capabilities.

Current wording

We rely on third parties maintaining open digital marketplaces, including the Apple App Store and Google Play, which make our mobile applications for our Freshservice, Freshdesk, Freshchat, Freshcaller, and Freshsales products available for download. We cannot assure you that the marketplaces through which we distribute these mobile applications will maintain their current structures or that such marketplaces will not charge us fees to list our application for download. We are also dependent on these third-party marketplaces to enable us and our users to timely update these mobile applications, and to incorporate new features, integrations, and capabilities.

Previous wording

Fluctuations in the value of foreign currencies relative to the U.S. dollar, have in the past and may in the future continue to adversely affect our revenue, operating expenses and results of operations due to transactional and translational remeasurement that is reflected in our earnings. Specifically, our results of operations and cash flows are subject to currency fluctuations primarily in the Indian Rupee, British Pound and Euro against the U.S. dollar. These exposures may change over time as business practices evolve, economic and political conditions change and evolving tax regulations come into effect. Also, fluctuations in the values of foreign currencies relative to the U.S. dollar could make it more difficult to detect underlying trends in our business and results of operations. Additionally, global events as well as geopolitical developments, such as the conflict between Russia and Ukraine and the evolving events in Israel and Gaza, fluctuating commodity prices, trade tariff developments and inflation have caused, and may in the future cause, global economic uncertainty and uncertainty about the interest rate environment, which could amplify the volatility of currency fluctuations. In 2023, we entered into foreign exchange forward contracts to hedge a portion of our forecasted foreign currency expenses denominated in Indian Rupee. Our hedging program is designed to reduce, but does not eliminate, the risk that our earnings and cash flows may be adversely affected by changes in exchange rates. We may enter into other hedging transactions in the future if our exposure to foreign currency becomes more significant.

Current wording

Fluctuations in the value of foreign currencies relative to the U.S. dollar, have in the past and may in the future continue to adversely affect our revenue, operating expenses and results of operations due to transactional and translational remeasurement that is reflected in our earnings. Specifically, our results of operations and cash flows are subject to currency fluctuations primarily in the Indian rupee, British pound and euro against the U.S. dollar. These exposures may change over time as business practices evolve, economic and political conditions change and evolving tax regulations come into effect. Also, fluctuations in the values of foreign currencies relative to the U.S. dollar could make it more difficult to detect underlying trends in our business and results of operations. Additionally, global events as well as geopolitical developments, such as the conflict between Russia and Ukraine and the evolving events in Israel and Gaza, fluctuating commodity prices, trade tariff developments and inflation have caused, and may in the future cause, global economic uncertainty and uncertainty about the interest rate environment, which could amplify the volatility of currency fluctuations. Beginning in 2023, we entered into foreign exchange forward contracts to hedge a portion of our forecasted foreign currency expenses denominated in Indian rupee. Our hedging program is designed to reduce, but does not eliminate, the risk that our earnings and cash flows may be adversely affected by changes in exchange rates. We may enter into other hedging transactions in the future if our exposure to foreign currency becomes more significant.

Previous wording

We derive, and expect to continue to derive, substantially all of our revenue from our Freshdesk, Freshservice, and Freshsales products. As such, the continued growth in market demand for and market acceptance of these products is critical to our continued success. Demand for our products is affected by a number of factors, some of which are beyond our control, such as the rate of adoption of our products within an organization, the timing of development and release of new products by our competitors; the development and acceptance of new features, integrations, and capabilities for our products; price, product, and service changes by us or our competitors; technological changes and developments within the markets we serve; growth, contraction, and rapid evolution of our market; and general economic conditions and trends. If we are unable to continue to meet the demands of users and customers to keep up with trends in preferences for CS, ITSM, or CRM products, or to achieve more widespread market acceptance of our products, our business, results of operations, and financial condition would be harmed. In addition, some current and potential customers, particularly larger organizations, may develop or acquire their own tools or continue to rely on traditional tools and software for their CS, ITSM, or CRM needs, which would reduce or eliminate their demand for our products. If demand for our products declines for any of these or other reasons, our business, results of operations, and financial condition would be adversely affected.

Current wording

We derive, and expect to continue to derive, substantially all of our revenue from our Freshservice and Freshdesk products. As such, the continued growth in market demand for and market acceptance of these products is critical to our continued success. Demand for our products is affected by a number of factors, some of which are beyond our control, such as the rate of adoption of our products within an organization, the timing of development and release of new products by our competitors; the development and acceptance of new features, integrations, and capabilities for our products; price, product, and service changes by us or our competitors; technological changes and developments within the markets we serve; growth, contraction, and rapid evolution of our market; and general economic conditions and trends. If we are unable to continue to meet the demands of users and customers to keep up with trends in preferences for CX or EX products, or to achieve more widespread market acceptance of our products, our business, results of operations, and financial condition would be harmed. In addition, some current and potential customers, particularly larger organizations, may develop or acquire their own tools or continue to rely on traditional tools and software for their CX or EX needs, which would reduce or eliminate their demand for our products. If demand for our products declines for any of these or other reasons, our business, results of operations, and financial condition would be adversely affected.

Previous wording

We are subject to stringent and evolving US and foreign laws, regulations, industry standards, policies, rules, contractual obligations, and other obligations related to data privacy and security. Our actual or perceived failure to comply with such obligations could lead to regulatory investigations or actions; litigation (including class action claims) and mass arbitration demands; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; and other adverse business consequences.

Current wording

We and the third parties with whom we work are subject to stringent and evolving US and foreign laws, regulations, and rules, contractual obligations, industry standards, policies, and other obligations related to data privacy and security. The actual or perceived failure by us or by the third parties with whom we work to comply with such obligations could lead to regulatory investigations or actions; litigation (including class action claims) and mass arbitration demands; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse business consequences.

Previous wording

In the United States, federal, state, and local governments have enacted numerous Data Protection Laws, including data breach notification laws, personal information privacy laws, consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws (e.g., wiretapping laws). Additionally, in the past few years, numerous U.S. states—including California, Virginia, Colorado, Connecticut, and Utah—have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal information. As applicable, such rights may include the right to access, correct, or delete certain personal information, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services. Certain states also impose stricter requirements for processing certain personal information, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for statutory fines for noncompliance. For example, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, CCPA) applies to personal information of consumers, business representatives, and employees who are California residents, and requires businesses to provide specific disclosures in privacy notices and honor requests of such individuals to exercise certain privacy rights, such as those noted below. The CCPA provides for administrative fines of up to $7,500 per intentional violation and allows private litigants affected by certain data breaches to recover significant statutory damages. Similar laws are being considered in several other states, as well as at the federal and local levels, and we expect more states to pass similar laws in the future. These new developments further complicate compliance efforts, and increase legal risk and compliance costs for us and the third parties upon whom we rely.

Current wording

In the United States, federal, state, and local governments have enacted numerous Data Protection Laws, including data breach notification laws, personal information privacy laws, consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws (e.g., wiretapping laws). Numerous U.S. states have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal information. As applicable, such rights may include the right to access, correct, or delete certain personal information, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services. Certain states also impose stricter requirements for processing certain personal information, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for statutory fines for noncompliance. For example, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, CCPA) applies to personal information of consumers, business representatives, and employees who are California residents, and requires businesses to provide specific disclosures in privacy notices and honor requests of such individuals to exercise certain privacy rights, such as those noted below. The CCPA provides for fines and allows private litigants affected by certain data breaches to recover significant statutory damages. Similar laws are being considered in several other states, as well as at the federal and local levels, and we expect more states to pass similar laws in the future. These new developments further complicate compliance efforts, and increase legal risk and compliance costs for us and the third parties upon whom we rely.

Previous wording

Outside the United States, an increasing number of Data Protection Laws and Data Protection Obligations may govern privacy, data protection, and information security. For example, the EU General Data Protection Regulation (EU GDPR), the EU GDPR as it forms part of UK law by virtue of section 3 of the European Union (Withdrawal) Act 2018 (UK GDPR), Australia’s Privacy Act, and India’s new privacy legislation, the Digital Personal Data Protection Act (DPDP), impost strict requirements for Processing personal information.

Current wording

Outside the United States, an increasing number of Data Protection Laws and Data Protection Obligations may govern privacy, data protection, and information security. For example, the EU General Data Protection Regulation (EU GDPR), the EU GDPR as it forms part of UK law by virtue of section 3 of the European Union (Withdrawal) Act 2018 (UK GDPR), Australia’s Privacy Act, and India’s new privacy legislation, the Digital Personal Data Protection Act, 2023 (Data Protection Act), impost strict requirements for Processing personal information.

Previous wording

In addition, we may be unable to transfer personal information from the EU, UK, and other jurisdictions to the United States or other countries due to data localization requirements or limitations on cross-border data flows. The EU and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal information to other countries. In particular, the European Economic Area (EEA) and the UK have significantly restricted the transfer of personal information to the United States and other countries whose privacy laws it generally believes are inadequate. Other jurisdictions may adopt similarly stringent interpretations of their data localization and cross-border data transfer laws. Although there are currently various mechanisms that may be used to transfer personal information from the EEA and UK to the United States in compliance with law, such as the EU-U.S. Data Privacy Framework and the UK extension thereto (which allows for transfers to relevant U.S.-based organizations who, like us, self-certify compliance and participate in the Framework), the EEA and UK’s standard contractual clauses, and the UK’s International Data Transfer Agreement / Addendum, these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal information to the United States. If there is no lawful manner for us to transfer personal information from the EEA, the UK, or other jurisdictions to the United States, or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business to Processing activities to other jurisdictions (such as Europe) at significant expense, and increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our Processing or transferring of personal information necessary to operate our business. Additionally, companies that transfer personal information out of the EEA and UK to other jurisdictions, particularly to the United States, are subject to increased scrutiny from regulators, individual litigants, and activities groups. Some European regulators have ordered certain companies to suspend or permanently cease certain transfers of personal information out of Europe for allegedly violating the EU GDPR’s cross-border data transfer limitations.

Current wording

For example, under the GDPR, companies may face temporary or definitive bans on data processing and other corrective actions; significant fines; or private litigation related to processing of personal data brought by classes of data subjects or consumer protection organizations authorized at law to represent their interests. In addition, we may be unable to transfer personal information from the EU, UK, and other jurisdictions to the United States or other countries due to data localization requirements or limitations on cross-border data flows. The EU and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal information to other countries. In particular, the European Economic Area (EEA) and the UK have significantly restricted the transfer of personal information to the United States and other countries whose privacy laws it generally believes are inadequate. Other jurisdictions may adopt or have already adopted similarly stringent data localization and cross-border data transfer laws. Although there are currently various mechanisms that may be used to transfer personal information from the EEA and UK to the United States in compliance with law, such as the EU-U.S. Data Privacy Framework and the UK extension thereto (which allows for transfers to relevant U.S.-based organizations who, like us, self-certify compliance and participate in the Framework), the EEA and UK’s standard contractual clauses, and the UK’s International Data Transfer Agreement / Addendum, these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal information to the United States. If there is no lawful manner for us to transfer personal information from the EEA, the UK, or other jurisdictions to the United States, or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business to Processing activities to other jurisdictions (such as Europe) at significant expense, and increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our Processing or transferring of personal information necessary to operate our business. Additionally, companies that transfer personal information out of the EEA and UK to other jurisdictions, particularly to the United States, are subject to increased scrutiny from regulators, individual litigants, and activities groups. Some European regulators have ordered certain companies to suspend or permanently cease certain transfers of personal information out of Europe for allegedly violating the EU GDPR’s cross-border data transfer limitations. Regulators in the United States such as the Department of Justice are also incr…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

We publish privacy policies, marketing materials, and other statements, regarding privacy, data protection, and information security. If these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators, or other adverse consequences.

Current wording

We publish privacy policies, marketing materials, whitepapers, and other statements, such as statements related to compliance with certain certifications or self-regulatory principles, concerning data privacy, security, and artificial intelligence. Regulators in the United States are increasingly scrutinizing these statements, and if these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, misleading, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators, or other adverse consequences.

Previous wording

In India, the Digital Personal Data Protection Act, 2023 (Data Protection Act) deals with processing of all personal information in digital form, whether collected digitally or offline and digitalized later for processing. The Data Protection Act requires companies collecting and dealing with high volumes of personal information and who are notified as significant data fiduciaries, to fulfil certain additional obligations such as appointment of a data protection officer for grievance redressal and an independent data auditor to evaluate compliance with the Data Protection Act. It also provides for the establishment of a Data Protection Board of India for taking remedial actions and imposing penalties for breach of the provisions of the Data Protection Act. It imposes restrictions and obligations on data fiduciaries, resulting from dealing with personal information and further, provides for levy of penalties for breach of obligations prescribed under the Data Protection Act. The provisions of the Data Protection Act shall come into force upon being notified by the Government of India.

Current wording

In India, the Data Protection Act deals with processing of all personal information in digital form, whether collected digitally or offline and digitalized later for processing. The Data Protection Act requires companies collecting and dealing with high volumes of personal information and who are notified as significant data fiduciaries, to fulfil certain additional obligations such as appointment of a data protection officer for grievance redressal and an independent data auditor to evaluate compliance with the Data Protection Act. It also provides for the establishment of a Data Protection Board of India for taking remedial actions and imposing penalties for breach of the provisions of the Data Protection Act. It imposes restrictions and obligations on data fiduciaries, resulting from dealing with personal information and further, provides for levy of penalties for breach of obligations prescribed under the Data Protection Act. The provisions of the Data Protection Act shall come into force upon being notified by the Government of India.

Previous wording

We use AI, including generative AI, and ML technologies in our products and services. The development and use of AI/ML present various privacy and security risks that may impact our business. AI/ML are subject to Data Protection Laws, as well as increasing regulation and scrutiny. Several jurisdictions around the globe, including the EU and certain US states, have proposed or enacted laws governing AI/ML. For example, European regulators have proposed a stringent AI regulation, which will take direct effect across all EU member states if adopted, and we expect other jurisdictions will adopt similar laws. Additionally, certain Data Protection Laws extend rights to consumers (such as the right to delete certain personal information) and regulate automated decision making, which may be incompatible with our use of AI/ML. These obligations may make it harder for us to conduct our business using AI/ML, lead to regulatory fines or penalties, require us to change our business practices, retrain our AI/ML, or prevent or limit our use of AI/ML. For example, the Federal Trade Commission has required other companies to turn over (or disgorge) valuable insights or trainings generated through the use of AI/ML where they allege the company has violated privacy and consumer protection laws.

Current wording

We use AI, including generative AI, and ML technologies in our products and services. The development and use of AI/ML present various privacy and security risks that may impact our business. AI/ML are subject to Data Protection Laws, as well as increasing regulation and scrutiny. Several jurisdictions around the globe, including the EU and certain US states, have proposed or enacted laws governing AI/ML, for example, the EU's Artificial Intelligence Act. Additionally, certain Data Protection Laws extend rights to consumers (such as the right to delete certain personal information) and regulate automated decision making, which may be incompatible with our use of AI/ML. These obligations may make it harder for us to conduct our business using AI/ML, lead to regulatory fines or penalties, require us to change our business practices, retrain our AI/ML, or prevent or limit our use of AI/ML. For example, the Federal Trade Commission has required other companies to turn over (or disgorge) valuable insights or trainings generated through the use of AI/ML where they allege the company has violated privacy and consumer protection laws. If we cannot use AI/ML or that use is restricted, our business may be less efficient, or we may be at a competitive disadvantage.

Previous wording

Any failure or perceived failure by us to comply with applicable Data Protection Laws or any of our Data Protection Obligations may result in governmental investigations or enforcement actions, litigation, claims, or public statements against us. If we are unable to develop and offer products or internal processes that meet legal requirements or help our users and customers meet their obligations under the Data Protection Laws, or if we violate or are perceived to violate any Data Protection Laws, we may cause our customers to lose trust in us and experience reduced demand for our products, harm to our reputation, and become subject to investigations, claims, and other remedies, which would expose us to significant fines, penalties, and other damages, all of which would harm our business. Given the breadth and depth of changes in global data protection obligations, compliance has caused us to expend significant resources, and such expenditures are likely to continue into the future as we continue our compliance efforts and respond to new interpretations and enforcement actions. Further, the costs of compliance with, and other burdens imposed by, the laws, regulations, and policies that are applicable to the businesses of our customers may limit the adoption and use of, and reduce the overall demand for, our products and services.

Current wording

We may at times fail (or be perceived to have failed) in our efforts to comply with Data Protection Laws or any of our Data Protection Obligations. Moreover, despite our efforts, our personnel or third parties with whom we work may fail to comply with such obligations, which could negatively impact our business operations. If we or the third parties with whom we work fail, or are perceived to have failed, to address or comply with applicable Data Protection Laws or any of our Data Protection Obligations, we could face significant consequences, including governmental enforcement actions e.g., investigations, fines, penalties, audits, inspections, and similar), litigation (including class-action claims) and mass arbitration demands, claims, or public statements against us, additional reporting requirements and/or oversight; bans or restrictions on processing personal data; orders to destroy or not use personal data; and imprisonment of company officials. If we are unable to develop and offer products or internal processes that meet legal requirements or help our users and customers meet their obligations under the Data Protection Laws, or if we violate or are perceived to violate any Data Protection Laws, we may cause our customers to lose trust in us and experience reduced demand for our products, harm to our reputation, and become subject to investigations, claims, and other remedies, which would expose us to significant fines, penalties, and other damages, all of which would harm our business. Given the breadth and depth of changes in global data protection obligations, compliance has caused us to expend significant resources, and such expenditures are likely to continue into the future as we continue our compliance efforts and respond to new interpretations and enforcement actions. Further, the costs of compliance with, and other burdens imposed by, the laws, regulations, and policies that may be applicable to the businesses of our customers, for example, the EU's Digital Operations Resilience Act, may limit the adoption and use of, and reduce the overall demand for, our products and services.