Sprinklr Inc
For the period ended Apr 30, 2025. Filed Jun 5, 2025.
View on SEC.govAbout this filing
A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.
Apr 30, 2025 · Filed Jun 5, 2025
What changed in Risk Factors?
Read the current filingPrevious report: 10-Q
Period ended 2024-10-31; filed 2024-12-04.
0001569345-24-000055
Item 1A. Risk FactorsUnregistered Sales of Equity Securities and Use of ProceedsCurrent report: 10-Q
Period ended 2025-04-30; filed 2025-06-05.
0001569345-25-000028
Item 1A. Risk FactorsUnregistered Sales of Equity Securities and Use of ProceedsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 255 previous paragraphs and 265 current paragraphs.
187 unchanged; 65 reworded; 11 added; 3 removed; 0 previous and 2 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (11)
Current report
•provide our customers with effective and efficient implementations, as well as on-going support that meets their needs;
Current report
•our ability to successfully implement the software systems we sell;
Current report
We use AI tools in our business operations for internal and external uses. Specifically, our employees and personnel may use AI technologies to support their work and our internal business operations, including for example, to generate source code used in our products and systems. Output from generative AI may infringe on third-party intellectual property rights without us being aware. Moreover, advanced AI tools, which may produce content indistinguishable from that generated by humans, have a number of benefits, risks, and liabilities, some still unknown. Recent decisions of governmental entities and courts (such as the U.S. Copyright Office, U.S. Patent and Trademark Office, and U.S. Court of Appeals for the Federal Circuit) interpret U.S. copyright and patent law as limited to protecting works and inventions created by human authors and inventors, respectively. We are therefore unlikely to be able to obtain U.S. copyright or patent protection for works or inventions wholly created by a generative AI tool, and our ability to obtain U.S. copyright and patent protection for source code, text, images, inventions, or other materials, which are developed with some use of AI tools, such as generative AI, may be limited, if available at all. Likewise, the availability of intellectual property protections in other countries is similarly unclear. Additionally, our use of third-party generative AI tools to develop source code, text, images, inventions, or other materials may expose us to greater risks than utilizing contracted human developers, as third-party generative AI vendors may not provide warranties or indemnities with respect to the output generated by such generative AI tools, and generative AI tools may also provide output that appears correct but is erroneous. Furthermore, some generative AI tools may be offered under terms that do not protect the confidentiality of the prompts or inputs that users submit to such tools and may use prompts or inputs to train shared AI models, potentially resulting in third-party users receiving outputs containing information from prompts or inputs (including confidential, competitive, proprietary, or personal data) that we submitted to the tool.
Current report
Our use of generative AI tools to generate code also may present additional security risks because the generated source code may contain security vulnerabilities. Additionally, the vendors of these generative AI tools may fail to comply with their contractual obligations to us regarding the confidentiality or security of any data or other inputs provided to such vendor or outputs generated by their generative AI tools. Our sensitive information could be leaked, disclosed, or revealed as a result of or in connection with our employees’, personnel’s, or vendors’ use of third-party generative AI tools or AI technologies generally.
Current report
Use of AI or generative AI in our products and services may be difficult to deploy successfully due to operational issues inherent to the nature of such technologies, including the development, maintenance and operation of deep learning datasets. Further, some of our customers, especially those in highly regulated industries, may be reluctant or unwilling to adopt AI or generative AI products. Accordingly, adoption of generative AI features in our products and marketing our products as AI or generative AI products could reduce or delay customer adoption. For example, AI and generative AI use machine learning techniques, including, but not limited to, algorithms, natural language processing and/or content creation which, depending on the model and the intended use case, may lead to flawed, biased, unexplained, and inaccurate results or outputs, which could lead to customer rejection or skepticism of such products or even potentially claims against us arising from customer reliance on erroneous output to its detriment. Emerging ethical issues surround the use of AI and generative AI, or if our deployment or development of AI or generative AI becomes controversial or is successfully and adversely challenged by our current or prospective customers, we may be subject to reputational risk. Any sensitive information (including confidential, competitive, proprietary, or personal data) that our customers input into the third-party generative AI features in our products (or that we input into generative AI tools that we use) could be leaked, disclosed to others or used for improper purposes, including if sensitive information is used to train our own AI or the third parties’ generative AI models, in breach of our contractual agreements. While we have processes and practices designed to ensure that we have the necessary rights to use source training data for training our AI, we may not in every instance be able to confirm that all of the information contained in such datasets has been obtained with the necessary permissions for us to use for purposes of our AI. For example, we may use publicly available data to train our AI that contains information that was unlawfully acquired from third parties without our knowledge. While we have some tools that can be leveraged to help us avoid using personal data to train or fine-tune our AI, it may be difficult for us to avoid or identify all instances where personal data may be in the scope of the training data, even though it is not necessarily required. If we were to receive claims from third parties asserting rights against our use of certain datasets used to train our AI, it may be difficult or impossible to disentangle our trained models from the subject matter of the claims.
Current report
The tax regimes to which we are subject or under which we operate are unsettled and may be subject to significant change. The issuance of additional guidance related to existing or future tax laws, or changes to tax laws, tax treaties or regulations proposed or implemented by the current or a future U.S. presidential administration, Congress, or taxing authorities in other jurisdictions, including jurisdictions outside of the United States, could materially affect our tax obligations and effective tax rate. To the extent that such changes have a negative impact on us, including as a result of related uncertainty, these changes may adversely impact our business, financial condition, results of operations and cash flows. For example, the IRA, enacts a minimum tax equal to 15 percent of the adjusted financial statement income of certain large U.S. corporations, as well as a one percent excise tax on stock repurchases imposed on public corporations making such repurchases. It is possible that the IRA could increase our tax liability.
Current report
Additionally, our tax obligations and effective tax rate in the jurisdictions in which we conduct business could increase as a result of international tax developments, including the implementation of the Two-Pillar framework led by the Organization for Economic Co-operation and Development (“OECD”). This framework involves the reallocation of taxing rights in respect of certain multinational enterprises above a fixed profit margin to the jurisdictions in which they carry on business (referred to as “Pillar One”) and the imposition of a minimum effective corporate tax rate (referred to as “Pillar Two”). A number of countries in which we conduct business have enacted, or are in the process of enacting, core elements of the Pillar Two rules. Based on our understanding of the applicable minimum revenue thresholds and applicable safe harbor and transitional rules, we expect that we do not currently fall within the scope of either Pillar One or Pillar Two rules. However, we anticipate that we may become subject to the Pillar Two rules in the foreseeable future, which could increase our overall tax obligations and result in additional material compliance costs. We are monitoring developments and evaluating the potential impact of the Pillar Two rules on our tax obligations, including our effective tax rate.
Current report
Future issuances of our stock could cause an “ownership change.” It is possible that any future ownership change could have a material effect on the use of our net operating loss carryforwards, which could adversely affect our profitability. In addition, at the state level, there may be periods during which the use of NOLs is suspended or otherwise limited which could accelerate or permanently increase state taxes owed.
Current report
We cannot guarantee that our share repurchase program will be fully consummated or that it will enhance long-term stockholder value. Share repurchases could also increase the volatility of the trading price of our common stock and could diminish our cash reserves.
Current report
Our board of directors has approved a share repurchase program to repurchase up to $150 million of our Class A common stock through June 30, 2026 in open market purchases at prevailing market prices or in negotiated transactions off the market, including, without limitation, accelerated share repurchase transactions, collared accelerated share repurchase transactions, volume weighted average purchase prepaid forward transactions and similar arrangements (the “2025 Share Repurchase Program”). Although our board of directors has authorized the 2025 Share Repurchase Program, it does not obligate us to repurchase any specific dollar amount or to acquire any specific number of shares. The actual timing, manner, price and total amount of future repurchases will depend on a variety of factors, including business, economic and market conditions, corporate and regulatory requirements, prevailing stock prices, restrictions under the terms of loan agreements and other considerations. The 2025 Share Repurchase Program may be modified, suspended, or terminated at any time, and we cannot guarantee that the program will be fully consummated or that it will enhance long-term stockholder value. The 2025 Share Repurchase Program could affect the trading price of our stock and increase volatility, and any announcement of a termination of this program may result in a decrease in the trading price of our stock. In addition, the 2025 Share Repurchase Program could diminish our cash and cash equivalents and marketable securities.
Current report
Trade disputes, trade restrictions, tariffs and other political tensions between the U.S. and other countries may also exacerbate unfavorable macroeconomic conditions, including inflationary pressures, foreign exchange volatility, financial market instability, and economic recessions or downturns, which may also negatively impact customer demand for our services, delay renewals or limit expansion opportunities with existing customers, limit our access to capital, or otherwise negatively impact our business and operations. In addition, retaliatory trade policies or anti-U.S. sentiment in certain regions, whether driven by trade tensions, political disagreements, or regulatory concerns, may make customers and governments more hesitant to adopt solutions offered by U.S.-based providers. This may lead to increased preference for local competitors, changes to government procurement policies, heightened regulatory scrutiny, decreased intellectual property protections, delays in regulatory approvals or other retaliatory regulatory non-tariff policies, or the introduction of trade barriers applicable to digital services, which may result in heightened international legal and operational risks and difficulties in attracting and retaining non-U.S. customers, suppliers, employees, partners and investors. Ongoing tariff and macroeconomic uncertainty may also contribute to volatility in the price of our Class A common stock.
Removed paragraphs (3)
Previous report
Changes in, or interpretations of, tax rules and regulations may adversely affect our effective tax rates.
Previous report
Changes in tax law (including tax rates) could affect our future results of operations. Due to the expansion of our international business activity, any such changes could increase our worldwide effective tax rate and adversely affect our business, results of operations and financial condition. For example, recent legislation in the United States, commonly referred to as the Inflation Reduction Act, enacts a minimum tax equal to 15 percent of the adjusted financial statement income of certain large U.S. corporations, as well as a one percent excise tax on stock repurchases imposed on public corporations making such repurchases. It is possible that the Inflation Reduction Act could increase our tax liability. The current or future U.S. presidential administration could propose or enact changes to U.S. tax laws that we cannot currently predict and that could materially affect our business, results of operations and financial condition. Additionally, the Organization for Economic Co-operation and Development (“OECD”) has released guidance covering various topics, including transfer pricing, country-by-country reporting and definitional changes to permanent establishment that could ultimately impact our tax liabilities as countries adopt the OECD’s guidance. The OECD Pillar 2 guidelines address the increasing digitalization of the global economy and re-allocating taxing rights among countries. The European Union and many other member states have committed to adopting Pillar 2, which calls for a global minimum tax of 15% to be effective for tax years beginning in 2024. The OECD guidelines published to date include transition and safe harbor rules around the implementation of the
Previous report
Pillar 2 global minimum tax. We are monitoring developments and evaluating the impacts these new rules will have on our tax rate, including eligibility to qualify for these safe harbor rules.
Reworded paragraphs (65)
Previous wording
•We have incurred significant net losses in recent years, we may incur losses in the future and we may not be able to generate sufficient revenue to achieve and maintain profitability.
Current wording
•We have incurred significant net losses in the past, and we may not be able to generate sufficient revenue to achieve and maintain profitability.
Previous wording
•The market for Unified-CXM solutions is new and rapidly evolving, and if this market develops more slowly than we expect or declines, develops in a way that we do not expect, or if we do not compete effectively, our business could be adversely affected.
Current wording
•The market for Unified-CXM solutions is rapidly evolving, and if this market develops more slowly than we expect or declines, develops in a way that we do not expect, or if we do not compete effectively, our business could be adversely affected.
Previous wording
•If we or the third parties with whom we work experience a cybersecurity breach or other security incident or unauthorized parties otherwise obtain access to our customers’ data, our data or our Unified-CXM platform, our Unified-CXM platform may be perceived as not being secure, our reputation may be harmed, demand for our Unified-CXM platform may be reduced and we may incur significant liabilities.
Current wording
•If we or the third parties with whom we work experience a cybersecurity breach or other security incident, any vulnerabilities are identified, or unauthorized parties otherwise obtain access to our customers’ data, our data or our Unified-CXM platform, our Unified-CXM platform may be perceived as not being secure, our reputation may be harmed, demand for our Unified-CXM platform may be reduced and we may incur significant liabilities.
Previous wording
Our revenue was $200.7 million and $186.3 million for the three months ended October 31, 2024 and 2023, respectively, and $593.9 million and $538.2 million for the nine months ended October 31, 2024 and 2023, respectively. You should not rely on the revenue growth of any prior quarterly or annual period as an indication of our future performance. Even if our revenue continues to increase, our revenue growth rate may decline in the future as a result of a variety of factors, including the maturation of our business. Overall growth of our revenue depends on a number of factors, including our ability to:
Current wording
Our revenue was $205.5 million and $196.0 million for the three months ended April 30, 2025 and 2024, respectively. You should not rely on the revenue growth of any prior quarterly or annual period as an indication of our future performance. Even if our revenue continues to increase, our revenue growth rate may decline in the future as a result of a variety of factors, including the maturation of our business. Overall growth of our revenue depends on a number of factors, including our ability to:
Previous wording
We have incurred significant net losses in recent years, we may incur losses in the future and we may not be able to generate sufficient revenue to achieve and maintain profitability.
Current wording
We have incurred significant net losses in the past, and we may not be able to generate sufficient revenue to achieve and maintain profitability.
Previous wording
Other than the recent fiscal year ended January 31, 2024, we have incurred significant net losses in recent years, including a net loss of $55.7 million for the year ended January 31, 2023. We had an accumulated deficit of $724.8 million and $474.8 million as of October 31, 2024 and January 31, 2024, respectively. We expect that our costs will increase over time and our losses may continue, as we expect to invest significant additional funds in our business and incur costs relating to operating as a public company. To date, we have financed our operations principally through subscription payments by customers for use of our Unified-CXM platform and equity and debt financings. We have expended and expect to continue to expend substantial financial and other resources on:
Current wording
We have incurred significant losses in the past, and we had an accumulated deficit of $627.6 million and $626.1 million as of April 30, 2025 and January 31, 2025, respectively. While we have experienced revenue growth in recent periods and periods of profitability, we are not certain whether or when we will obtain a high enough volume of sales to sustain or increase our growth or maintain profitability in the future. We expect that our costs will increase over time and we could incur future losses, as we expect to invest significant additional funds in our business. To date, we have financed our operations principally through subscription payments by customers for use of our Unified-CXM platform and equity and debt financings. We have expended and expect to continue to expend substantial financial and other resources on:
Previous wording
These investments may be more costly than we expect and may not result in increased revenue or growth in our business. Any failure to increase our revenue sufficiently to keep pace with our investments and other expenses could prevent us from achieving and maintaining profitability or positive cash flow on a consistent basis. If we are unable to successfully address these risks and challenges as we encounter them, our business, results of operations and financial condition would be adversely affected. In the event that we fail to achieve or maintain profitability, the value of our Class A common stock could decline.
Current wording
These investments may be more costly than we expect and may not result in increased revenue or growth in our business. Any failure to increase our revenue sufficiently to keep pace with our investments and other expenses could prevent us from maintaining profitability or positive cash flow on a consistent basis. If we are unable to successfully address these risks and challenges as we encounter them, our business, results of operations and financial condition would be adversely affected. In the event that we fail to maintain profitability, the value of our Class A common stock could decline.
Previous wording
We have experienced, and may continue to experience, growth and organizational change, which has placed, and may continue to place, significant demands on our management, operational and financial resources. In addition, we operate globally and sell subscriptions in more than 80 countries. We also have experienced significant growth in the number of enterprises, end users, transactions and amount of data that our Unified-CXM platform and our associated hosting infrastructure support. As we continue to enter new markets and expand our international operations, we have launched new product innovations in recent years, which has led, and could continue to lead, to increased product and operational complexity, including increased implementation periods, which could adversely affect our business, results of operations and financial condition. We plan to continue to expand our international operations into other countries in the future, which will place additional demands on our resources and operations.
Current wording
We have experienced, and may continue to experience, growth and organizational change, which has placed, and may continue to place, significant demands on our management, operational and financial resources. In addition, we operate globally and sell subscriptions in more than 80 countries. We also have experienced significant growth in the number of enterprises, end users, transactions and amount of data that our Unified-CXM platform and our associated hosting infrastructure support. As we continue to enter new markets and expand our international operations, we have launched new product innovations in recent years, which has led, and could continue to lead, to increased product and operational complexity, including increased implementation periods, or more complex implementations and ongoing support needs, which could adversely affect our business, results of operations and financial condition. We plan to continue to expand our international operations into other countries in the future, which will place additional demands on our resources and operations.
Previous wording
•the timing of our recognition of stock-based compensation expense for our equity awards, particularly in cases where awards covering a large number of our shares are tied to a specific event or date; and
Current wording
•the timing of our recognition of stock-based compensation expense for our equity awards, particularly in cases where awards covering a large number of our shares are tied to a specific event or date;
Previous wording
•network outages or actual or perceived security breaches or other incidents;
Current wording
•network outages or actual or perceived security breaches or other incidents; and
Previous wording
In addition, we expect that an increasing focus on customer satisfaction and the growth of various communications channels and new technologies will profoundly impact the market for Unified-CXM solutions. We believe that enterprises increasingly are looking for flexible solutions that bridge across traditionally separate systems for experience management, marketing automation and customer relationship management. If we are unable to meet this demand to manage customer experiences through flexible solutions designed to address a broad range of needs, or if we otherwise fail to achieve more widespread market acceptance of our Unified-CXM platform, our business, results of operations, financial condition and growth prospects may be adversely affected.
Current wording
In addition, we expect that an increasing focus on customer satisfaction and the growth of various communications channels and new technologies will profoundly impact the market for Unified-CXM solutions. We believe that enterprises increasingly are looking for flexible solutions that bridge across traditionally separate systems for experience management, marketing automation and customer relationship management. We may be unable to effectively adapt our platform and approach to respond to changes in technology and customer needs. For example, in recent periods, we have experienced difficulties with managing the implementation of certain larger CCaaS projects, which has resulted in increased customer dissatisfaction, loss of certain customers and a delay in recognizing revenue associated with certain of these projects. In addition, customers have in the past and may continue in the future to slow their rate of expansion or reduce their number of licenses. If we are unable to meet this demand to manage customer experiences through flexible solutions designed to address a broad range of needs, or if we otherwise fail to achieve more widespread market acceptance of our Unified-CXM platform, our business, results of operations, financial condition and growth prospects may be adversely affected.
Previous wording
The market for Unified-CXM solutions is new and rapidly evolving, and if this market develops more slowly than we expect or declines, develops in a way that we do not expect, or if we do not compete effectively, our business could be adversely affected.
Current wording
The market for Unified-CXM solutions is rapidly evolving, and if this market develops more slowly than we expect or declines, develops in a way that we do not expect, or if we do not compete effectively, our business could be adversely affected.
Previous wording
We believe that our success and growth will depend to a substantial extent on the widespread acceptance and adoption of Unified-CXM solutions in general, and of our Unified-CXM platform in particular. The market for Unified-CXM solutions is new and rapidly evolving, and if this market fails to grow or grows more slowly than we currently anticipate, demand for our Unified-CXM platform could be adversely affected. The Customer Experience Management (“CXM”) market also is subject to rapidly changing user demand and trends. As a result, it is difficult to predict enterprise adoption rates and demand for our Unified-CXM platform, the future growth rate and size of our market or the impact of competitive solutions.
Current wording
We believe that our success and growth will depend to a substantial extent on the widespread acceptance and adoption of Unified-CXM solutions in general, and of our Unified-CXM platform in particular. The market for Unified-CXM solutions is rapidly evolving, and if this market fails to grow or grows more slowly than we currently anticipate, demand for our Unified-CXM platform could be adversely affected. The Customer Experience Management (“CXM”) market also is subject to rapidly changing user demand and trends. As a result, it is difficult to predict enterprise adoption rates and demand for our Unified-CXM platform, the future growth rate and size of our market or the impact of competitive solutions.
Previous wording
While we do not believe that any of our competitors currently offer a full suite of Unified-CXM solutions that competes across the breadth of our Unified-CXM platform, certain features of our Unified-CXM platform compete in particular segments of the overall Unified-CXM category. Our main competitors include, among others, experience management solutions, including solution media solutions, home-grown solutions and tools, adjacent Unified-CXM solutions, such as social messaging, customer service and support solutions, traditional marketing, advertising and consulting firms and customer relationship management and enterprise resource planning solutions. Further, other established SaaS providers and other technology companies not currently focused on Unified-CXM may expand their services to compete with us. Some of our competitors may be able to offer products or functionality similar to ours at a more attractive price than we can or do, including by integrating or bundling such products with their other product offerings. Additionally, some potential customers, particularly large organizations, have elected, and may in the future elect, to develop their own internal Unified-CXM solutions.
Current wording
While we do not believe that any of our competitors currently offer a full suite of Unified-CXM solutions that competes across the breadth of our Unified-CXM platform, certain features of our Unified-CXM platform compete in particular segments of the overall Unified-CXM category. Our main competitors include, among others, experience management solutions, including social media management and social listening solutions, home-grown tools, adjacent Unified-CXM solutions, such as social messaging, conversational and Agenic AI, CCaaS solutions, customer service and support solutions, customer feedback management and Voice of the Customer solutions, content marketing, and social advertising solutions, and consulting firms and customer relationship management and enterprise resource planning solutions. Further, other established SaaS providers and other technology companies not currently focused on Unified-CXM may expand their services to compete with us. Some of our competitors may be able to offer products or functionality similar to ours at a more attractive price than we can or do, including by integrating or bundling such products with their other product offerings. Additionally, some potential customers, particularly large organizations, have elected, and may in the future elect, to develop their own internal Unified-CXM solutions.
Previous wording
Our customer renewal rates, as well as the rate at which our customers expand their use of our Unified-CXM platform, may decline or fluctuate as a result of a number of factors, including the customers’ satisfaction with our Unified-CXM platform, defects or performance issues, our customer and product support, our prices, mergers and acquisitions affecting our customer base, the effects of global economic conditions, the entrance of new or competing technologies and the pricing of such competitive offerings or reductions in the enterprises’ spending levels for any reason. If our customers do not renew their subscriptions, renew on less favorable terms or reduce the scope of their subscriptions, our revenue may decline and we may not realize improved results of operations from our customer base, and, as a result, our business and financial condition could be adversely affected.
Current wording
Our customer renewal rates, as well as the rate at which our customers expand their use of our Unified-CXM platform, may decline or fluctuate as a result of a number of factors, including the customers’ satisfaction with our Unified-CXM platform, defects or performance issues, our customer and product implementation and support, our prices, mergers and acquisitions affecting our customer base, the effects of global economic conditions, the entrance of new or competing technologies and the pricing of such competitive offerings or reductions in the enterprises’ spending levels for any reason. If our customers do not renew their subscriptions, renew on less favorable terms or reduce the scope of their subscriptions, our revenue may decline and we may not realize improved results of operations from our customer base, and, as a result, our business and financial condition could be adversely affected.
Previous wording
We generally recognize subscription revenue from customers ratably over the terms of their contracts and a majority of our revenue is derived from subscriptions that have terms of one to three years. As a result, a portion of the revenue we report in each quarter is derived from the recognition of deferred revenue relating to subscriptions entered into during previous quarters. Consequently, a decline in new or renewed subscriptions in any single quarter may have a small impact on our revenue results for that quarter. However, such a decline will negatively affect our revenue in future quarters. Accordingly, the effect of significant downturns in sales and market acceptance of our Unified-CXM platform and potential changes in our pricing policies or rate of expansion or retention may not be fully reflected in our results of operations until future periods. For example, the impact of current economic uncertainties may cause customers to request better pricing, which may not be reflected immediately in our results of operations. In addition, customers have in the past and may continue in the future to slow their rate of expansion or reduce their number of licenses. We also may be unable to reduce our cost structure in line with a significant deterioration in sales. In addition, a significant majority of our costs are expensed as incurred, while revenue is recognized over the term of the agreements with our customers. As a result, increased growth in the number of our customers could continue to result in our recognition of more costs than revenue in the earlier periods of the terms of our agreements. Our subscription model also makes it difficult for us to rapidly increase our revenue through additional sales in any period, as revenue from new customers must be recognized over the applicable subscription term.
Current wording
We generally recognize subscription revenue from customers ratably over the terms of their contracts and a majority of our revenue is derived from subscriptions that have terms of one to three years. As a result, because we recognize revenue ratably over the terms of our subscription contracts, a portion of the revenue we report in each quarter is derived from the recognition of deferred revenue relating to subscriptions entered into during previous quarters. Consequently, a decline in new or renewed subscriptions in any one period may not be immediately reflected as revenue for that period. Accordingly, the effect of significant downturns in sales and market acceptance of our Unified-CXM platform and potential changes in our pricing policies or rate of expansion or retention may not be fully reflected in our results of operations until future periods. For example, the impact of current economic uncertainties may cause customers to request better pricing, which may not be reflected immediately in our results of operations. Our subscription model also makes it difficult for us to rapidly increase our revenue through additional sales in any period, as revenue from new customers must be recognized over the applicable subscription tern. In addition, customers have in the past and may continue in the future to slow their rate of expansion or reduce their number of licenses. We also may be unable to reduce our cost structure in line with a significant deterioration in sales. In addition, a majority of our costs are expensed as incurred, while revenue is recognized over the term of the agreements with our customers. As a result, increased growth in the number of our customers could continue to result in our recognition of more costs than revenue in the earlier periods of the terms of our agreements.
Previous wording
We currently serve our customers from third-party data centers and cloud computing providers located around the world. Some of these facilities may be located in areas prone to natural disasters and may experience events such as earthquakes, floods, fires, severe weather events, power loss, computer or telecommunication failures, service outages or losses, and similar events. They also may be subject to break-ins, sabotage, intentional acts of vandalism and similar misconduct or cybersecurity issues, including attacks enhanced or facilitated by artificial intelligence (“AI”) human error, terrorism, improper operation, unauthorized entry and data loss. In the event of significant physical damage to one of these data centers, it may take a significant period of time to achieve full resumption of our services, and our disaster recovery planning may not account for all eventualities. We also may incur significant costs for using alternative equipment or taking other actions in preparation for, or in reaction to, events that damage the data centers and equipment that we use. Although we carry business interruption insurance, it may not be sufficient to compensate us for the potentially significant losses, including the potential harm to the future growth of our business that may result from interruptions in our services or products.
Current wording
We currently serve our customers from third-party data centers and cloud computing providers located around the world. Some of these facilities may be located in areas prone to natural disasters and may experience events such as earthquakes, floods, fires, severe weather events, power loss, computer or telecommunication failures, service outages or losses, and similar events. They also may be subject to break-ins, sabotage, intentional acts of vandalism and similar misconduct or cybersecurity issues, including attacks enhanced or facilitated by artificial intelligence (“AI”), human error, terrorism, improper operation, unauthorized entry and data loss. Our data center operations also rely heavily on the availability of electricity, which also comes from third-party providers. If we or the third-party data center and cloud computing provider facilities that we use to deliver our services were to experience a major power outage or if the cost of electricity were to increase significantly, our operations and financial results could be harmed. If we or our third-party data centers and cloud service provider facilities were to experience a major power outage, we or they would have to rely on back-up generators, which might not work properly or might not provide an adequate supply during a major power outage. Such a power outage could result in a significant disruption of our business. In the event of significant physical damage to one of these data centers, it may take a significant period of time to achieve full resumption of our services, and our disaster recovery planning may not account for all eventualities. We also may incur significant costs for using alternative equipment or taking other actions in preparation for, or in reaction to, events that damage the data centers and equipment that we or the third parties with whom we work use. Although we carry business interruption insurance, it may not be sufficient to compensate us for the potentially significant losses, including the potential harm to the future growth of our business that may result from interruptions in our services or products.
Previous wording
As we grow and continue to add new third-party data centers and cloud computing providers and expand the capacity of our existing third-party data centers and cloud computing providers, we may move or transfer our data and our customers’ data. Despite precautions taken during this process, any unsuccessful data transfers may impair the delivery of our Unified-CXM platform. Any damage to, or failure of, our systems, or those of our third-party data centers or cloud computing providers or the systems of a customer that hosts our software in their private cloud, could result in interruptions on our Unified-CXM platform or damage to, or loss or compromise of, our data and our customers’ data, including personal data. Any impairment of our or our customers’ data or interruptions in the functioning of our Unified-CXM platform, whether due to damage to, or failure of, third-party data centers, cloud computing providers or the cloud computing providers of our customers or unsuccessful data transfers, may reduce our revenue, result in significant fines, cause us to issue credits or pay penalties, subject us to claims for indemnification and other claims, litigation or disputes, result in regulatory investigations or other inquiries, cause our customers to terminate their subscriptions and adversely affect our reputation, renewal rates and our ability to attract new customers. Our business will also be harmed if our existing and potential customers believe that our Unified-CXM platform is unreliable or not secure.
Current wording
As we grow and continue to add new third-party data centers and cloud computing providers and expand the capacity of our existing third-party data centers and cloud computing providers, we may move or transfer our data and our customers’ data. Despite precautions taken during this process, any unsuccessful data transfers may impair the delivery of our Unified-CXM platform. Any damage to, or failure of, our systems, or those of our third-party data centers or cloud computing providers or the systems of a customer that hosts our software in their private cloud, could result in interruptions on our Unified-CXM platform or damage to, or loss or compromise of, our data and our customers’ data, including personal data. Any impairment of our or our customers’ data or interruptions in the functioning of our Unified-CXM platform, whether due to damage to, or failure of, third-party data centers, cloud computing providers or the cloud computing providers of our customers or unsuccessful data transfers, may reduce our revenue, increase our operations costs, result in significant fines, cause us to issue credits or pay penalties, subject us to claims for indemnification and other claims, litigation or disputes, result in regulatory investigations or other inquiries, cause our customers to terminate their subscriptions and adversely affect our reputation, renewal rates and our ability to attract new customers. Our business will also be harmed if our existing and potential customers believe that our Unified-CXM platform is unreliable or not secure.
Previous wording
Further, our leases and other agreements with data centers and cloud computing providers expire at various times, and the owners of our data center facilities and cloud computing providers have no obligation to renew their agreements with us on commercially reasonable terms, or at all. Additionally, certain of our data center and clouding computing provider agreements may be terminable for convenience by the counterparty. If services are interrupted at any of these facilities or providers, such agreements are terminated, or we are unable to renew these agreements on commercially reasonable terms or at all, or if one of our data center or cloud computing providers is acquired or encounters financial difficulties, including bankruptcy, we may be required to transfer our data, servers and other infrastructure to new data centers and cloud computing providers, and we may incur significant costs and possible service interruptions in connection with doing so. In addition, if we do not accurately plan for our data center and cloud computing capacity requirements and we experience significant strains on our data center and cloud computing capacity, we may experience delays and additional expenses in arranging new data center and cloud computing arrangements, and our customers could experience service outages that may subject us to financial liabilities, result in customer losses and dissatisfaction, and materially adversely affect our business, operating results and financial condition.
Current wording
Further, our leases and other agreements with data centers and cloud computing providers expire at various times, and the owners of our data center facilities and cloud computing providers have no obligation to renew their agreements with us on commercially reasonable terms, or at all, which exposes us to the potential for significant cost increases. Additionally, certain of our data center and cloud computing provider agreements may be terminable for convenience by the counterparty. If services are interrupted at any of these facilities or providers, such agreements are terminated, or we are unable to renew these agreements on commercially reasonable terms or at all, or if one of our data center or cloud computing providers is acquired or encounters financial difficulties, including bankruptcy, we may be required to transfer our data, servers and other infrastructure to new data centers and cloud computing providers, and we may incur significant costs and possible service interruptions in connection with doing so. In addition, if we do not accurately plan for our data center and cloud computing capacity requirements and we experience significant strains on our data center and cloud computing capacity, we may experience delays and additional expenses in arranging new data center and cloud computing arrangements, and our customers could experience service outages that may subject us to financial liabilities due to, for example, breach of Service Level Agreements (SLAs) or other commitments, result in customer losses and dissatisfaction, and materially adversely affect our business, operating results and financial condition.
Previous wording
Our future success will depend on our ability to adapt and innovate. To attract new customers and increase revenue from our existing customers, we will need to enhance and improve our existing platform and introduce new products, features and functionality. Enhancements and new products that we develop may not be introduced in a timely or cost-effective manner, may contain errors or defects, and may have interoperability difficulties with our Unified-CXM platform or other products. We have in the past experienced, and may in the future experience, delays in our planned release dates of new products, features and functionality, and there can be no assurance that these developments will be released according to schedule. We also have invested, and may continue to invest, in the acquisition of complementary businesses and technologies that we believe will enhance our Unified-CXM platform. If we are unable to successfully develop, release, acquire or integrate new products, features and functionality, or enhance our existing platform to meet the needs of our existing or potential customers in a timely and effective manner, or if a customer is not satisfied with the quality of work performed by us or with the technical support services rendered, our customers may delay or withhold payment to us, cancel their agreements with us, elect not to renew, or make service credit claims, warranty claims or other claims against us, and we could lose future sales. The occurrence of any of these events could result in diminishing demand for our solutions, a reduction of our revenues, an increase in our bad debt expense or in collection cycles for accounts receivable or could cause us to incur the risk or expense of litigation.
Current wording
Our future success will depend on our ability to adapt and innovate. To attract new customers and increase revenue from our existing customers, we will need to enhance and improve our existing platform and introduce new products, features and functionality. Enhancements and new products that we develop may not be introduced in a timely or cost-effective manner, may contain errors or defects, and may have interoperability difficulties with our Unified-CXM platform or other products. Furthermore, while we generally expect that enhancements and improvements to our products will attract new customers, certain of our customer agreements restrict our ability to materially change the features and functionality of our products or may obligate us to specific configurations or requirements, including in some cases, prohibiting the use of AI or generative AI in our products, which could result in violations of those customer agreements, or increased operational difficulties and costs due to our need to deploy different version of our products to different customers, i.e., enable or disable certain features, or failure of such customers to renew their agreements (and therefore, loss in revenue from such customers) as a result of our new products, features, and functionality. We have in the past experienced, and may in the future experience, delays in our planned release dates of new products, features and functionality, and there can be no assurance that these developments will be released according to schedule. We also have invested, and may continue to invest, in the acquisition of complementary businesses and technologies that we believe will enhance our Unified-CXM platform. If we are unable to successfully develop, release, acquire or integrate new products, features and functionality, or enhance our existing platform to meet the needs of our existing or potential customers in a timely and effective manner, or if a customer is not satisfied with the quality of work performed by us or with the technical support services rendered, our customers may delay or withhold payment to us, cancel their agreements with us, elect not to renew, or make service credit claims, warranty claims or other claims against us, and we could lose future sales. The occurrence of any of these events could result in diminishing demand for our solutions, a reduction in our revenues, an increase in our provision for credit losses or in collection cycles for accounts receivable or could cause us to incur the risk or expense of litigation.
Previous wording
Similarly, our customers and users of our Unified-CXM platform are increasingly accessing our Unified-CXM platform or interacting via mobile devices. We are devoting valuable resources to solutions related to mobile usage, but we cannot assure you that these solutions will be successful. If the mobile solutions we have developed for our Unified-CXM platform do not meet the needs of current or prospective customers, or if our solutions are difficult to access, customers or users may reduce their usage of our Unified-CXM platform or cease using our Unified-CXM platform altogether and our business could suffer.
Current wording
Similarly, our customers and users of our Unified-CXM platform are increasingly accessing our Unified-CXM platform or interacting via mobile devices. We are devoting valuable resources to solutions related to mobile usage, but we cannot assure you that these solutions will be successful. If the mobile solutions we have developed for our Unified-CXM platform do not meet the needs of current or prospective customers, or if our solutions are difficult to access or use, customers or users may reduce their usage of our Unified-CXM platform or cease using our Unified-CXM platform altogether and our business could suffer.
Previous wording
In addition to the use of our own AI features within our products, we have also incorporated generative artificial intelligence (“Generative AI”) into our product offerings and internal operations through third-party partners, which has the potential to result in adverse effects to our financial condition, results or reputation. Generative AI features and services leverage existing and widely available technologies, such as those owned by Microsoft Azure, OpenAI or alternative large language model providers. The use of Generative AI technology and processes at scale is relatively new and may lead to challenges, concerns and risks that are significant or that we may not be able to predict, especially if our use of these technologies in our products and services becomes more important to our operations over time.
Current wording
We also use our own proprietary AI-based features within our products, and have incorporated generative AI into our product offerings through third-party vendors, which has the potential to result in adverse effects to our financial condition, results or reputation. Generative AI features and services leverage existing and widely available technologies, such as those owned by Microsoft Azure, OpenAI or alternative large language model providers. The use of generative AI technology and processes at scale is relatively new and may lead to challenges, concerns and risks that are significant or that we may not be able to predict, especially if our use of these technologies in our products and services becomes more important to our operations over time.
Previous wording
Use of AI or Generative AI in our products and services may be difficult to deploy successfully due to operational issues inherent to the nature of such technologies, including the development, maintenance and operation of deep learning datasets, and our customers’ reluctance or failure to adopt or implement our new products and features as intended. For example, AI and Generative AI use machine learning techniques, including, but not limited to, algorithms, natural language processing and/or content creation which, depending on the reliability of the model, may lead to flawed, biased, unexplained, and inaccurate results, which could lead to customer rejection or skepticism of such products. Emerging ethical issues surround the use of AI and Generative AI, and if our deployment or use of AI or Generative AI becomes controversial or is successfully and adversely challenged by our current or prospective customers, we may be subject to reputational risk. Any sensitive information (including confidential, competitive, proprietary, or personal data) that our customers input into the third-party Generative AI features in our products (or that we input into Generative AI tools that we use) could be leaked, disclosed to others or used for improper purposes, including if sensitive information is used to train our own AI or the third parties’ Generative AI models, in breach of our contractual agreements. Additionally, where the product ingests personal data or where it makes connections using such data, these AI or Generative AI processes may reveal or generate other personal or sensitive data which we could lose control over or impair our ability to fulfill certain data subject requests in compliance with certain privacy laws or contractual obligations to our customers, such as requests to delete certain personal data ingested by the product. Further, unauthorized use or misuse of Generative AI by our employees, customers or others, including violation of internal policies or procedures or guidelines or contractual agreements and terms (including internal and external Acceptable Use policies or other policies and third-party terms), may result in disclosure or misuse of confidential company and customer data, reputational harm, privacy law violations, legal and contractual liability, or regulatory actions, including algorithmic disgorgement. Improper development and use of AI and Generative AI has the potential to result in biased outcomes and could lead to decisions that could harm certain individuals (or classes of individuals), and adversely impact their rights, employment, and ability to obtain certain pricing, products, services, or benefits. In addition, use of Generative AI may also lead to novel and urgent cybersecurity risks (such as if a bad actor “poisons” the Generative AI with bad inputs or logic), including the misuse of personal or business confidential data, which may adversely affect our operations and reputation.
Current wording
The disclosure and use of personal data in AI technologies is subject to various privacy laws and other privacy obligations. Additionally, where our products ingest personal data or where they make connections using such data, these AI or generative AI processes may reveal or generate other personal or sensitive data over which we could lose control or impair our ability to fulfill certain data subject requests in compliance with certain privacy laws or contractual obligations to our customers, such as requests to delete certain personal data ingested by the product. Further, unauthorized use or misuse of generative AI by our employees, customers or others, including violation of internal policies or procedures or guidelines or contractual agreements and terms (including internal and external Acceptable Use policies or other policies and third-party terms), may result in disclosure or misuse of confidential company and customer data, reputational harm, privacy law violations, legal and contractual liability, or regulatory actions, including algorithmic disgorgement. Improper development, deployment, or onward use of AI and generative AI has the potential to result in biased outcomes and could lead to decisions that could harm certain individuals (or classes of individuals), and adversely impact their rights, employment, and ability to obtain certain pricing, products, services, or benefits. In addition, use of generative AI may also lead to novel and urgent cybersecurity risks (such as if a bad actor “poisons” the generative AI with bad inputs or logic), including the misuse of personal or business confidential data, which may adversely affect our operations and reputation.
Previous wording
Uncertainty in the legal regulatory regime relating to AI, as well as variation on AI regulations from jurisdiction to jurisdiction, may require significant resources to modify and maintain business practices to comply with U.S. and foreign laws, the nature of which cannot be determined at this time as they continue to rapidly evolve and solidify. Several jurisdictions around the globe have already proposed or enacted laws or guidelines governing AI. For example, in October 2023, the Biden administration issued an executive order on AI that requires companies developing certain types of AI models to notify the federal government of certain safety test results and other information. As another example, the EU Artificial Intelligence Act (“EU AI Act”) has come into force and its provisions are gradually becoming effective, which imposes a number of obligations on various parties related to the development and use of certain AI-powered systems, and other jurisdictions are beginning to adopt or prepare for adoption of similar laws. These laws may be more restrictive than the EU AI Act and may render the use of such technologies challenging. While we aim to develop and use AI responsibly by attempting to identify and mitigate any issues associated with fairness, bias, transparency, or ethical or legal use of AI, we may be unsuccessful in identifying or resolving such issues. Further, use of our AI systems for unintended or improper use cases by customer users may alter the associated legal obligations upon Sprinklr, without our knowledge. We may not be able to detect, mitigate and remediate such misuse, and limitations of liability in contracts may be inadequate to address legal liability, fines, penalties and other regulatory actions resulting from such misuse. Additionally, certain privacy laws extend rights to consumers (such as the right to delete certain personal data) and regulate automated decision making, which may be incompatible with AI, particularly training AI using personal data. These obligations may make it harder for us to conduct our business using AI, develop innovative AI models and create potential for regulatory fines or penalties, require us to change our business practices, retrain our AI, prevent or limit our creation and use of AI or Generative AI, or delete or require us to disgorge certain algorithms. For example, the US Federal Trade Commission has required other companies to turn over or delete or disgorge valuable insights or trainings generated through the use of AI, or the AI models or algorithms themselves, where they allege the company has violated privacy and consumer protection laws. If we cannot use AI or Generative AI, or that use is restricted, our business may be less efficient, or we may be at a competitive disadvantage. Further, intellectual property ownership and liability for violation of terms of use, open-source licenses, infringement or misappropriation of intellectual property and violation of privacy or…
Excerpt shortened here; the source contains the full paragraph.
Current wording
Uncertainty in the legal regulatory regime relating to AI, as well as variation on AI regulations from jurisdiction to jurisdiction, may require significant resources to modify and maintain business practices to comply with U.S. and foreign laws, the nature of which cannot be determined at this time as they continue to rapidly evolve and solidify. Several jurisdictions around the globe, including Europe and certain U.S. states, have proposed, enacted or are considering laws or guidelines governing the development and use of AI, such as the EU’s Artificial Intelligence Act (“EU AI Act”) and Colorado’s Artificial Intelligence Act. For example, the EU AI Act imposes a number of obligations on various parties related to the development and use of certain AI-based systems, and additional jurisdictions are beginning to adopt or prepare for adoption of similar laws. These laws may be more restrictive than the EU AI Act and may render the use of such technologies challenging. While we aim to develop and use AI responsibly by attempting to identify and mitigate any issues associated with fairness, bias, transparency, or ethical or legal use of AI, we may be unsuccessful in identifying or resolving such issues. Further, use of our AI systems for unintended or improper use cases by customer users may alter the associated legal obligations upon Sprinklr, without our knowledge. We may not be able to detect, mitigate and remediate such misuse, and limitations of liability in contracts may be inadequate to address legal liability, fines, penalties and other regulatory actions resulting from such misuse. Additionally, certain privacy laws extend rights to consumers (such as the right to delete certain personal data) and regulate automated decision making, which may be incompatible with AI, particularly training AI using personal data. These obligations may make it harder for us to conduct our business using AI, develop innovative AI models and create potential for regulatory fines or penalties, require us to change our business practices, retrain our AI, prevent or limit our creation and use of AI or generative AI, or delete or require us to disgorge certain algorithms. For example, the U.S. Federal Trade Commission has required other companies to turn over or delete or disgorge valuable insights or trainings generated through the use of AI, or the AI models or algorithms themselves, where they allege the company has violated privacy and consumer protection laws.
Previous wording
Moreover, our employees and personnel use Generative AI technologies to support their work, and the associated disclosure and use of personal data may be subject to various privacy laws and other privacy obligations. Our use of this technology could result in additional compliance costs, regulatory investigations and actions, and lawsuits if we do not use (or are perceived to not use it) it in accordance with our internal and external policies and governance, or applicable laws and other obligations, including contractual obligations to our customers. Output from Generative AI systems that we use may infringe on third party intellectual property rights without us being aware. However, if we are unable to use Generative AI, it could make our business less efficient and result in competitive disadvantages. Additionally, sensitive information of ours or our customers could be inadvertently leaked, disclosed, or revealed as a result of or in connection with our employees’, personnel’s, customers’ or vendors’ use of Generative AI technologies.
Current wording
Our use of AI and generative AI technology could result in additional compliance costs, regulatory investigations and actions, and lawsuits if we do not use (or are perceived to not use) it in accordance with our internal and external policies and governance, or applicable laws and other obligations, including contractual obligations to our customers. However, if we cannot use AI or generative AI, or that use is restricted, our business may be less efficient, or we may be at a competitive disadvantage. Further, intellectual property ownership and liability for violation of terms of use, open-source license obligations, infringement or misappropriation of intellectual property and violation of privacy or publicity rights are issues arising from the use of AI technologies that legislators are still attempting to establish and with which courts are still grappling. In addition, access to data from third-party sources, including public sources and data suppliers, may become more restricted in the future, which could negatively impact our development and deployment of products, including AI technologies, that rely on such data for training or operation. Therefore, the use of AI technologies in connection with our products or operations may impact our business model or result in the inability to establish ownership of intellectual property or exposure to claims relating to the foregoing.
Previous wording
We depend on, and anticipate that we will continue to depend on, various third-party relationships in order to sustain and grow our business, including technology companies whose products integrate with ours. Failure of any of these technology companies to maintain, support or secure their technology platforms in general, and our integrations in particular, or errors or defects in their technologies or products, could adversely affect our relationships with our customers, damage our brand and reputation and result in delays or difficulties in our ability to provide our Unified-CXM platform. For example, we rely on third parties to support certain components of our communication and voice services. Failure of any of these third-party providers to provide their services or to meet contractual service level commitments, or if they materially increase the cost of their services, for any reason, could adversely affect our relationships with our customers, lead to increases in the prices we are charged and therefore potentially the prices our customers pay for our products and services, damage our brand and reputation and result in delays or difficulties in our ability to provide certain services. We also rely on the availability and accuracy of various forms of client feedback and input data, including data solicited via survey or based on data sources across modern channels, and any changes in the availability or accuracy of such data could adversely impact our business and results of operations and harm our reputation and brand. In some cases, we rely on negotiated agreements with social media networks and other data providers. These negotiated agreements may provide increased access to application programming interfaces (“APIs”) and data that allow us to provide a more comprehensive solution for our customers. These agreements are subject to termination in certain circumstances, and there can be no assurance that we will be able to renew those agreements or that the terms of any such renewal, including pricing and levels of service, will be favorable. We cannot accurately predict the potential impact of the termination of any of our agreements with social media networks and other data providers, including the impact on our access to the related APIs. There can be no assurance that following any such termination we would be able to maintain the current level of functionality of our platform in such circumstances, as a result of more limited access to APIs or otherwise, which could adversely affect our results of operations. In addition, there can be no assurance that we will not be required to enter into new negotiated agreements with data providers in the future to maintain or enhance the level of functionality of our platform, or that the terms and conditions of such agreements, including pricing and levels of service, will not be less favorable, which could adversely affect our results of operations. In particular, X (formerly known as Twitter) p…
Excerpt shortened here; the source contains the full paragraph.
Current wording
In some cases, we rely on negotiated agreements with social media networks and other data providers. These negotiated agreements may provide increased access to application programming interfaces (“APIs”) and data that allow us to provide a more comprehensive solution for our customers. These agreements are subject to termination in certain circumstances, and there can be no assurance that we will be able to renew those agreements or that the terms of any such renewal, including pricing and levels of service, will be favorable. We cannot accurately predict the potential impact of the termination of any of our agreements with social media networks and other data providers, including the impact on our access to the related APIs. There can be no assurance that following any such termination we would be able to maintain the current level of functionality of our platform in such circumstances, as a result of more limited access to APIs or otherwise, which could adversely affect our results of operations. In addition, there can be no assurance that we will not be required to enter into new negotiated agreements with data providers in the future to maintain or enhance the level of functionality of our platform, or that the terms and conditions of such agreements, including pricing and levels of service, will not be less favorable, which could adversely affect our results of operations. In particular, X (formerly known as Twitter) provides us with certain data that supports our Unified-CXM platform pursuant to an agreement that expires on December 31, 2026. If our agreement with X expires, is not renewed on the same or similar terms or at all, or if it is terminated due to the failure or unwillingness of either party to perform its obligations thereunder, we may not be able to provide the same level of Unified-CXM insights to our customers and our business, results of operations and financial condition may be materially and adversely affected. In addition, we obtain data from data aggregators who, despite their commercial commitments to us, may not have the right to provide that data to us, and so could expose us to claims in the future, from the data sources or data owners.
Previous wording
During the nine months ended October 31, 2024, approximately 41% of our sales were to customers outside of the Americas. As part of our growth strategy, we expect to continue to expand our international operations, which may include opening additional offices in new jurisdictions and providing our Unified-CXM platform in additional languages and on-boarding new customers outside the United States. Any new markets or countries into which we attempt to sell subscriptions to our Unified-CXM platform may not be receptive to our business development activities. We currently have sales personnel and sales and customer and product support operations in the United States and certain countries across Europe, the Asia Pacific region and the Americas. We believe that our ability to attract new customers to our Unified-CXM platform and to convince existing customers to renew or expand their use of our Unified-CXM platform is directly correlated to the level of engagement we achieve with our customers in their home countries. To the extent that we are unable to effectively engage with non-U.S. customers, we may be unable to effectively grow in international markets.
Current wording
During the three months ended April 30, 2025, approximately 43% of our sales were to customers outside of the Americas. As part of our growth strategy, we expect to continue to expand our international operations, which may include opening additional offices in new jurisdictions and providing our Unified-CXM platform in additional languages and on-boarding new customers outside the United States. Any new markets or countries into which we attempt to sell subscriptions to our Unified-CXM platform may not be receptive to our business development activities. We currently have sales personnel and sales and customer and product support operations in the United States and certain countries across Europe, the Asia Pacific region and the Americas. We believe that our ability to attract new customers to our Unified-CXM platform and to convince existing customers to renew or expand their use of our Unified-CXM platform is directly correlated to the level of engagement we achieve with our customers in their home countries. To the extent that we are unable to effectively engage with non-U.S. customers, we may be unable to effectively grow in international markets.
Previous wording
We use open source software in connection with our Unified-CXM platform and products and operations. Some open source software licenses require users who distribute open source software as part of their software to publicly disclose all or part of the source code to such software or make available any derivative works of the open source code (which may include our modifications or product code into which such open source software has been integrated) on unfavorable terms allowing further modification and redistribution and at no or nominal cost, and we may be subject to such terms. The terms of many open source licenses have not been interpreted by U.S. or foreign courts, and there is a risk that these open source licenses could be construed in a way that imposes unanticipated conditions or restrictions on our ability to commercialize our products. While we monitor our use of open source software and try to ensure that none is used in a manner that would require us to disclose source code that we have decided to maintain as proprietary or that would otherwise breach the terms or fail to meet the conditions of an open source license or third-party contract, such use could inadvertently occur, or could be claimed to have occurred, in part because open source license terms are often ambiguous. We could be subject to suits by parties claiming ownership of or demanding release of the open source software or derivative works that we developed using such software, which could include our proprietary source code, or otherwise seeking to enforce the applicable open source licensing terms or alleging that our use of such software infringes, misappropriates or otherwise violates a third party’s intellectual property rights. We may as a result be subject to claims for breach of contract, infringement of intellectual property rights, or indemnity, required to release our proprietary source code, pay damages, royalties, or license fees or other amounts, seek licenses, re-engineer our applications, discontinue sales in the event re-engineering cannot be accomplished on a timely basis or take other remedial action that may divert resources away from our development efforts, any of which could adversely affect our business. Any actual or claimed requirement to disclose our proprietary source code or pay damages for breach of the applicable license could harm our business and could help third parties, including our competitors, develop products and services that are similar to or better than ours.
Current wording
It is possible that our use of open source software could inadvertently result in, or could be claimed to have resulted in use that would require us to disclose source code that we have decided to maintain as proprietary or that would otherwise breach the terms or fail to meet the conditions of an open source license or third-party contract, in part because open source license terms are often ambiguous and are not always drafted with certain programming languages in mind. We could be subject to suits by parties claiming ownership of or demanding release of the open source software or derivative works that we developed using such software, which could include our proprietary source code, or otherwise seeking to enforce the applicable open source licensing terms or alleging that our use of such software infringes, misappropriates or otherwise violates a third party’s intellectual property rights. We may as a result be subject to claims for breach of contract, infringement of intellectual property rights, or indemnity, required to release our proprietary source code, pay damages, incur additional internal compliance costs, royalties, or license fees or other amounts, seek licenses, re-engineer our applications, discontinue sales in the event re-engineering cannot be accomplished on a timely basis or take other remedial action that may divert resources away from our development efforts, any of which could adversely affect our business. Any actual or claimed requirement to disclose our proprietary source code or pay damages for breach of the applicable license could harm our business and could help third parties, including our competitors, develop products and services that are similar to or better than ours.
Previous wording
Additionally, the use of certain open source software can lead to greater risks than use of third-party commercial software, as open source licensors generally do not provide warranties or controls on the origin of software. There is typically no support available for open source software, and we cannot ensure that the authors of such open source software will implement or push updates to address security risks or will not abandon further development and maintenance. Many of the risks associated with the use of open source software, such as the lack of warranties or assurances of title or performance, cannot be eliminated, and could, if not properly addressed, negatively affect our business. We have processes to help alleviate these risks, including a review process for screening requests from our developers for the use of open source software, but we cannot be sure that all open source software is identified or submitted for approval prior to use in our products and services. Any of these risks could be difficult to eliminate or manage, and, if not addressed, could have an adverse effect on our business, financial condition, and results of operations.
Current wording
Additionally, the use of certain open source software can lead to greater risks than use of third-party commercial software, as open source licensors generally do not provide warranties or controls on the origin of software. There is typically no support available for open source software, and we cannot ensure that the authors of such open source software will implement or push updates to address security risks or will not abandon further development and maintenance. Many of the risks associated with the use of open source software, such as the lack of warranties or assurances of title or performance, cannot be eliminated, and could, if not properly addressed, negatively affect our business. While we do keep track of our use of open-source software, we cannot be sure that all open source software is identified prior to use in our products and services. Any of these risks could be difficult to eliminate or manage, and, if not addressed, could have an adverse effect on our business, financial condition, and results of operations.
Previous wording
Our success and ability to compete depend in part upon our ability to obtain, maintain, protect, defend and enforce our intellectual property. As of October 31, 2024, we owned 38 U.S. issued patents and 11 pending non-provisional or provisional U.S. patent applications. We rely on a combination of patent, copyright, trademark and trade secret laws in the United States and internationally, as well as technological measures and contractual provisions, such as confidentiality or license agreements with our employees, customers, partners, and other third parties, to establish and protect our brand, maintain our competitive position and protect our intellectual property rights from infringement, misappropriation or other violation. However, the steps we take to protect our intellectual property rights may be inadequate or ineffective, and our intellectual property may be challenged, invalidated, narrowed in scope or rendered unenforceable through administrative processes, including re-examination, inter partes review, interference and derivation proceedings and equivalent proceedings in foreign jurisdictions (e.g., opposition proceedings) or litigation. The steps we take to protect our intellectual property rights may not be sufficient to effectively prevent third parties from infringing, misappropriating or otherwise violating our intellectual property or to prevent unauthorized disclosure or unauthorized use of our trade secrets or other confidential information. We cannot guarantee that any of our pending applications will issue or be approved or that our existing and future intellectual property rights will be sufficiently broad to protect our proprietary technology.
Current wording
Our success and ability to compete depend in part upon our ability to obtain, maintain, protect, defend and enforce our intellectual property. As of April 30, 2025, we owned 38 U.S. issued patents and 10 pending non-provisional or provisional U.S. patent applications. We rely on a combination of patent, copyright, trademark and trade secret laws in the United States and internationally, as well as technological measures and contractual provisions, such as confidentiality or license agreements with our employees, customers, partners, and other third parties, to establish and protect our brand, maintain our competitive position and protect our intellectual property rights from infringement, misappropriation or other violation. However, the steps we take to protect our intellectual property rights may be inadequate or ineffective, and our intellectual property may be challenged, invalidated, narrowed in scope or rendered unenforceable through administrative processes, including re-examination, inter partes review, interference and derivation proceedings and equivalent proceedings in foreign jurisdictions (e.g., opposition proceedings) or litigation. The steps we take to protect our intellectual property rights may not be sufficient to effectively prevent third parties from infringing, misappropriating or otherwise violating our intellectual property or to prevent unauthorized disclosure or unauthorized use of our trade secrets or other confidential information. We cannot guarantee that any of our pending applications will issue or be approved or that our existing and future intellectual property rights will be sufficiently broad to protect our proprietary technology.
Previous wording
There is considerable patent and other intellectual property development activity in our industry and companies in the technology industry frequently enter into litigation based on allegations of infringement, misappropriation or other violations of intellectual property rights. Our future success depends in part on our ability to develop and commercialize our products and services without infringing, misappropriating or otherwise violating the intellectual property and proprietary rights of others. From time to time, we have received and may in the future receive claims from third parties, including our competitors, alleging that our Unified-CXM platform and underlying technology infringe, misappropriate or otherwise violate such third party’s intellectual property rights, including their trade secrets, and we may be found to be infringing upon such rights. For example, on February 25, 2022, we agreed to settle all outstanding claims with Opal Labs Inc. (“Opal”) with respect to Opal’s complaints alleging breach of contract and violation of Oregon’s Uniform Trade Secrets Act, among other claims, and, on March 1, 2022, the court dismissed those claims with prejudice. We and Opal finalized the settlement on March 15, 2022, and it was paid on March 30, 2022.
Current wording
There is considerable patent and other intellectual property development activity in our industry and companies in the technology industry frequently enter into litigation based on allegations of infringement, misappropriation or other violations of intellectual property rights. Our future success depends in part on our ability to develop and commercialize our products and services without infringing, misappropriating or otherwise violating the intellectual property and proprietary rights of others. From time to time, we have received and may in the future receive claims from third parties, including our competitors, alleging that our Unified-CXM platform and underlying technology infringe, misappropriate or otherwise violate such third party’s intellectual property rights, including their trade secrets, and we may be found to be infringing upon such rights.
Previous wording
We are, and may become in the future, subject to securities class actions, derivative suits or other securities-related legal actions. For example, in August 2024, a putative securities class action was filed against us and certain of our officers alleging violations of the federal securities laws for allegedly making false and misleading statements.
Current wording
We are, and may become in the future, subject to securities class actions, derivative suits or other securities-related legal actions. For example, in August 2024, a putative securities class action was filed against us and certain of our officers alleging violations of the federal securities laws for allegedly making false and misleading statements. On March 18, 2025, March 26, 2025, and April 30, 2025, three stockholder derivative actions were filed, purporting to bring claims on behalf of the Company against certain of our current and former directors and officers for alleged violations of the federal securities laws and breaches of their fiduciary duties, among other claims, in relation to substantially the same factual allegations as those made in the securities class action.
Previous wording
In addition, federal and state government agencies and private organizations have imposed, and may in the future impose, additional taxes, fees or other charges for accessing the Internet or commerce conducted via the Internet. Internet access is frequently provided by companies that have significant market power and could take actions that degrade, disrupt or increase the cost of our customers’ use of our Unified-CXM platform, which could negatively impact our business. In December 2017, the Federal Communications Commission (“FCC”) repealed its 2015 “network neutrality” rules, effective June 2018. The 2015 network neutrality rules were designed to ensure that all online content and services were treated the same by internet service providers and granted providers of broadband internet access services greater freedom to make changes to their services, including, potentially, changes that may discriminate against or harm our business. In April 2024, the FCC adopted an order that substantially reinstated the 2015 rules. In addition, a number of states have adopted or are adopting or considering legislation or executive actions that would regulate the conduct of broadband providers. For example, California began enforcing a state-specific network neutrality law on March 25, 2021. A number of other states have adopted or are adopting or considering legislation or executive actions that would regulate the conduct of broadband providers. The FCC’s April 2024 order permits it to preempt any state-level network neutrality requirements that go beyond the requirements adopted in that order, but specifically held that the California law would not be preempted. We cannot predict the actions that the FCC may take, whether any new FCC order or state initiatives regulating providers will be modified, overturned, or vacated by legal action, federal legislation, or the FCC itself, or the degree to which additional federal or state regulatory action – or inaction – may adversely affect our business. We could incur greater operating expenses or our customers’ use of our Unified-CXM platform could be adversely affected, either of which could harm our business and results of operations.
Current wording
In addition, federal and state government agencies and private organizations have imposed, and may in the future impose, additional taxes, fees or other charges for accessing the Internet or commerce conducted via the Internet. Internet access is frequently provided by companies that have significant market power and could take actions that degrade, disrupt or increase the cost of our customers’ use of our Unified-CXM platform, which could negatively impact our business. In December 2017, the Federal Communications Commission (“FCC”) repealed its 2015 “network neutrality” rules, effective June 2018. The 2015 network neutrality rules were designed to ensure that all online content and services were treated the same by internet service providers and granted providers of broadband internet access services greater freedom to make changes to their services, including, potentially, changes that may discriminate against or harm our business. In April 2024, the FCC adopted an order that substantially reinstated the 2015 rules, but the U.S. Court of Appeals for the Sixth Circuit overturned the FCC’s decision on January 2, 2025, which means that there is no federal regulation requiring network neutrality. A number of states have adopted or are adopting or considering legislation or executive actions that would regulate the conduct of broadband providers. For example, California and Vermont have state-level requirements in effect, and New York is considering similar legislation. We cannot predict the actions that the FCC may take, whether any new FCC order or state initiatives regulating providers will be modified, overturned, or vacated by legal action, federal legislation, or the FCC itself, or the degree to which additional federal or state regulatory action – or inaction – may adversely affect our business. We could incur greater operating expenses or our customers’ use of our Unified-CXM platform could be adversely affected, either of which could harm our business and results of operations.
Previous wording
We seek to maintain the integrity and availability of our products and confidentiality of our confidential information through certain controls, such as business continuity and disaster recovery plans, redundant designs of operational systems and processes, training and availability of key employees, contractual and technical assurances by our third-party service providers to maintain their services to us, regular tests and audits of critical systems and plans, capacity planning for current and future system and process needs, enterprise risk management, and periodic review of our plans. Notwithstanding these efforts, we cannot ensure that our systems or those of our third-party partners are not or will not be vulnerable to disruptions from natural or man-made disasters or other security incidents. We are exposed to threats and resulting risks that may result in a significant disruption of our ability to deliver our products to our customers.
Current wording
We seek to maintain the integrity and availability of our products and confidentiality of our confidential information through certain controls, such as business continuity and disaster recovery plans, redundant designs of operational systems and processes, internal corporate governance, training and availability of key employees, contractual and technical assurances by our third-party service providers to maintain their services to us, regular tests and audits of critical systems and plans, capacity planning for current and future system and process needs, enterprise risk management, and periodic review of our plans. Notwithstanding these efforts, we cannot ensure that our systems or those of the third parties with whom we work are not or will not be vulnerable to disruptions from natural or man-made disasters or other security incidents. We are exposed to threats and resulting risks that may result in a significant disruption of our ability to deliver our products to our customers.
Previous wording
In the United States, federal, state, and local governments have enacted numerous data privacy and security laws, including data breach notification laws, personal data privacy laws, and consumer protection laws (such as Section 5 of the Federal Trade Commission Act), and other laws, including wiretapping laws. For example, some privacy laws and other obligations may require us or our customers to obtain consent to process personal data in certain circumstances. Some of our data processing practices may be challenged under wiretapping laws, as we obtain customer information from third parties through various methods, including chatbot and session replay providers, or via third-party marketing pixels. In addition, we must comply with the FCC’s regulations that require us to protect private customer information about their use of telecommunications services, known as customer proprietary network information. Our inability or failure to adhere to applicable requirements could result in adverse consequences, including class action litigation, mass arbitration demands and statutory fines for noncompliance. In the past few years, numerous U.S. states have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal data. As applicable, such rights may include the right to access, correct, or delete certain personal data, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making, which, even if not directly applicable to Sprinklr as a data processor, may be applicable to our customers. The exercise of these rights may impact our business and ability to provide our products and services. These state laws also allow for statutory fines for noncompliance. For example, under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, “CCPA”) noncompliance may carry fines of up to $7,500 per intentional violation; the CCPA also allows for a private right of action for certain data breaches. These laws, as well as other laws or regulations relating to data privacy and security, particularly any new or modified laws or regulations that require enhanced protection of certain types of data or new obligations with regard to data retention, transfer or disclosure, may result in further uncertainty with respect to data privacy and security issues, and will require us to incur additional resource, costs and expenses in an effort to comply. The enactment of various laws has prompted similar legislative developments in other states, which has created a patchwork of overlapping nuanced state laws, as certain state laws may be more stringent, broader in scope or offer greater individual rights with respect to personal data than federal, foreign or other state laws, which may complicate complia…
Excerpt shortened here; the source contains the full paragraph.
Current wording
In the United States, federal, state, and local governments have enacted numerous data privacy and security laws, including data breach notification laws, personal data privacy laws, and consumer protection laws (such as Section 5 of the Federal Trade Commission Act), and other laws, including wiretapping laws. For example, some privacy laws and other obligations require us or our customers to obtain consent to process personal data in certain circumstances. Some of our data processing practices may be subject to challenges or lawsuits under data privacy and communication laws, including, for example, under wiretapping laws, if we share customer information with third parties through various methods, including chatbot and session replay providers, or via third-party marketing pixels. In addition, we must comply with the FCC’s regulations that require us to protect private customer information about their use of telecommunications services, known as customer proprietary network information. Our, or the third parties with whom we work, inability or failure to adhere to applicable requirements could result in adverse consequences, including class action litigation, mass arbitration demands and statutory fines for noncompliance. In the past few years, numerous U.S. states have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal data. As applicable, such rights may include the right to access, correct, or delete certain personal data, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making, which, even if not directly applicable to Sprinklr as a data processor, may be applicable to our customers. The exercise of these rights may impact our business and ability to provide our products and services. These state laws also allow for statutory fines for noncompliance. For example, under the California Consumer Privacy Act of 2018 (“CCPA”), noncompliance carries fines and also allows for a private right of action for certain data breaches. These laws, as well as other laws or regulations relating to data privacy and security, particularly any new or modified laws or regulations that require enhanced protection of certain types of data or new obligations with regard to data retention, transfer or disclosure, may result in further uncertainty with respect to data privacy and security issues and will require us to incur additional resource, costs and expenses in an effort to comply. The enactment of various laws has prompted similar legislative developments in other states, which has created a patchwork of overlapping nuanced state laws, as certain state laws may be more stringent, broader in scope or offer greater individual rights with respect to personal data than federal, foreign or other state laws, which complicate compli…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
In addition, as we continue to expand our business activities, we are accessing additional types and greater volumes of potentially confidential or sensitive information that may subject us to additional privacy and security laws and obligations. For example, in certain limited instances, we have agreed with specific customers to permit the exchange of protected health information through certain approved platform components. Our access to protected health information for specific agreed use cases on behalf of those customers that are covered entities and therefore subject to the Health Insurance Portability and Accountability Act of 1996, as amended by the Health Information Technology for Economic and Clinical Health Act (collectively, “HIPAA”), may subject us to HIPAA’s specific requirements relating to the privacy, security, and transmission of protected health information. To the extent that we become subject to HIPAA, our failure to comply could result in significant penalties. Additionally, to the extent that additional customers with whom we did not agree to permit the exchange of protected health information through our platforms in their capacity as covered entities nonetheless input or allow such information within the platform in violation of their contractual obligations with us, we could also be subject to additional compliance risks. Similar privacy, security, and transmission obligations may apply to us outside the United States if we process health information and other categories of sensitive or confidential information unknowingly, and our failure to comply could result in significant penalties.
Current wording
In addition, as we continue to expand our business activities, we are accessing additional types and greater volumes of potentially confidential or sensitive information that may subject us to additional privacy and security laws and obligations. For example, in certain limited instances, we have agreed with specific customers to permit the exchange of protected health information through certain approved platform components. Our access to protected health information for specific agreed upon use cases on behalf of those customers that are covered entities and therefore subject to the Health Insurance Portability and Accountability Act of 1996, as amended by the Health Information Technology for Economic and Clinical Health Act (collectively, “HIPAA”), may subject us to HIPAA’s specific requirements relating to the privacy, security, and transmission of protected health information. To the extent that we are or may become subject to HIPAA, our failure to comply could result in significant penalties. Additionally, to the extent that additional customers with whom we did not agree to permit the exchange of protected health information through our platforms in their capacity as covered entities nonetheless input or allow such information within the platform in violation of their contractual obligations with us, we could also be subject to additional compliance risks. Similar privacy, security, and transmission obligations may apply to us outside the United States if we process health information and other categories of sensitive or confidential information knowingly or unknowingly, and our failure to comply could result in significant penalties. As we expand into more regulated industries, there may be additional obligations regarding the types of data in scope, and higher risk due to the sensitivity and potential impact of exposure.
Previous wording
As another example, we process an increasing amount of credit card data through our Secure Forms module, and we have entered contractual relationships requiring us to comply with the Payment Card Industry Data Security Standard (“PCI DSS”). The PCI DSS requires companies to adopt certain measures to ensure the security of cardholder information, including using and maintaining firewalls, adopting proper password protections for certain devices and software, and restricting data access. Noncompliance with PCI-DSS can result in penalties ranging from $5,000 to $100,000 per month by credit card companies, litigation, damage to our reputation, and revenue losses.
Current wording
As another example, we enable the processing of credit card data through our Secure Forms module, and we have entered contractual relationships requiring us to comply with the Payment Card Industry Data Security Standard (“PCI DSS”). The PCI DSS requires companies to adopt certain measures to ensure the security of cardholder information, including using and maintaining firewalls, adopting proper password protections for certain devices and software, and restricting data access. Noncompliance with PCI-DSS can result in penalties ranging from $5,000 to $100,000 per month by credit card companies, litigation, damage to our reputation, and revenue losses.
Previous wording
Europe and other jurisdictions have enacted industry-specific laws requiring data to be localized in some limited circumstances or limiting the transfer of personal data to other countries. European and other data protection laws, including the GDPR, place some restrictions on the ability of companies to freely transfer personal data to countries deemed to be inadequate for privacy purposes, and there are fairly rigorous restrictions regarding transfers of personal data from China (although these have been softened recently). Other jurisdictions may also adopt stringent data localization and cross-border data transfer requirements and, in many circumstances, these may be requirements outside of the scope of privacy law, including industry-specific or national security requirements. Although there are currently various mechanisms that may be used to enable the transfer of personal data from the European Economic Area (“EEA”) and UK to the United States in compliance with the law, such as the EU-US Data Privacy Framework and the UK extension thereto (to which we are an active participant) and the EU’s standard contractual clauses, these mechanisms continue to be subject to legal challenges, and there is no continued assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States or other countries with “inadequate” data protection regimes without the potential for future challenge. If there is no lawful manner for us to transfer personal data from the EEA, the UK, or other jurisdictions outside of the origin territory, or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the prohibition on further transfers (including remote access by employees in support teams in certain regions), the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our processing or transferring of personal data necessary to operate our business. Additionally, companies that transfer personal data out of the EEA and UK to other jurisdictions, particularly to the United States, can be subject to increased scrutiny from regulators, individual litigants, and activist groups.
Current wording
Europe and other jurisdictions have proposed or enacted laws requiring data to be localized in some limited circumstances or limiting the transfer of personal data to other countries. In addition, some customers have internal policy requirements which may differ from, or be more burdensome than, applicable regulations. For example, European and other data protection laws, including the GDPR, place some restrictions on the ability of companies to freely transfer personal data to countries deemed to be inadequate for privacy purposes, and there are fairly rigorous restrictions regarding transfers of personal data from China. Other jurisdictions may also adopt stringent data localization and cross-border data transfer requirements and, in many circumstances, these may be requirements outside of the scope of privacy law, including industry-specific or national security requirements. With respect to data transfers under the GDPR, although there are currently various mechanisms that may be used to enable the transfer of personal data from the European Economic Area (“EEA”) and UK to the United States in compliance with the law, such as the EU-US Data Privacy Framework and the UK extension thereto (to which we are an active participant) and the EU’s standard contractual clauses, these mechanisms continue to be subject to legal challenges, and there is no continued assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States or other countries with “inadequate” data protection regimes without the potential for future challenge. If there is no lawful manner for us to transfer personal data from the EEA, the UK, or other jurisdictions outside of the origin territory, or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the prohibition on further transfers (including remote access by employees in support teams in certain regions), the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our processing or transferring of personal data necessary to operate our business. Additionally, the U.S. Department of Justice issued a rule entitled the Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons, which places additional restriction on certain data transactions involving countries of concern (e.g., China, Russia, Iran) and covered individuals (i.e., individuals and entities located in or controlled by individuals or entities located in those jurisdictions) that may impact certain business activities such as vendor engagements, sale or sharing of data, employment of …
Excerpt shortened here; the source contains the full paragraph.
Previous wording
We may also become directly or indirectly subject to new laws in the EEA that regulate cybersecurity and non-personal data, such as the EU Data Act, the EU Digital Operational Resilience Act (DORA) or the so-called “EU NIS2 Directive,” Depending on how new laws are implemented and interpreted, we may have to adapt our business practices, contractual arrangements and products to comply with such obligations.
Current wording
We are or may become directly or indirectly subject to new laws in the EEA that regulate cybersecurity and non-personal data, such as the EU Data Act, the EU Digital Operational Resilience Act (DORA) or the so-called “EU NIS2 Directive.” Depending on how new laws are implemented and interpreted, we may have to adapt our business practices, contractual arrangements and products to comply with such obligations.
Previous wording
UK and EEA data privacy regulations in relation to electronic communications also require opt-in consent to send certain unsolicited marketing emails or other electronic communications to individuals or for the use of cookies and the data obtained using cookies and similar technologies for advertising, analytics and certain other purposes – activities on which our products and marketing strategies rely. Enforcement of these requirements has increased, and a new regulation proposed in the European Union, known as the ePrivacy Regulation, makes these requirements, as well as requirements around tracking technologies, such as cookies, more stringent and increases the penalties for violating them. Such restrictions could increase our exposure to regulatory enforcement action, increase our compliance costs, and adversely affect our business.
Current wording
UK and EEA data privacy regulations in relation to electronic communications also require opt-in consent to send certain unsolicited marketing emails or other electronic communications to individuals or for the use of cookies and the data obtained using cookies and similar technologies for advertising, analytics and certain other purposes – activities on which our products and marketing strategies rely. Enforcement of these requirements has increased, and a new regulation proposed in the EU, known as the ePrivacy Regulation, makes these requirements, as well as requirements around tracking technologies, such as cookies, more stringent and increases the penalties for violating them. Such restrictions could increase our exposure to regulatory enforcement action, increase our compliance costs, and adversely affect our business.
Showing the first 40 of 65 pairs. Open the source sections for the rest.
Rearranged current paragraphs (2)
Current report — wording carried from elsewhere
We depend on, and anticipate that we will continue to depend on, various third-party relationships in order to sustain and grow our business, including technology companies whose products integrate with ours. Failure of any of these technology companies to maintain, support or secure their technology platforms in general, and our integrations in particular, or errors or defects in their technologies or products, or errors in our implementation or maintenance of those technologies in our Unified-CXM platform could adversely affect our relationships with our customers, damage our brand and reputation and result in delays or difficulties in our ability to provide our Unified-CXM platform. For example, we rely on third parties to support certain components of our communication and voice services. Failure of any of these third-party providers to provide their services or to meet contractual service level commitments, or if they materially increase the cost of their services, for any reason, could adversely affect our relationships with our customers, lead to increases in the prices we are charged and therefore potentially the prices our customers pay for our products and services, damage our brand and reputation and result in delays or difficulties in our ability to provide certain services. We also rely on the availability and accuracy of various forms of client feedback and input data, including data solicited via survey or based on data sources across modern channels, and any changes in the availability or accuracy of such data could adversely impact our business and results of operations and harm our reputation and brand.
Current report — wording carried from elsewhere
We use open source software in connection with our Unified-CXM platform and products and operations, including those products that are currently (or may be) distributed. Some open source software licenses require users who distribute open source software as part of their software to publicly disclose all or part of the source code to such software or make available any derivative works of the open source code (which may include our modifications or product code into which such open source software has been integrated) on unfavorable terms allowing further modification and redistribution and at no or nominal cost, and we may be subject to such terms. The terms of many open source licenses have not been interpreted by U.S. or foreign courts, and there is a risk that these open source licenses could be construed in a way that imposes unanticipated conditions or restrictions on our ability to commercialize our products.