SentinelOne Inc
For the period ended Jul 31, 2024. Filed Aug 27, 2024.
View on SEC.govAbout this filing
A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.
Jul 31, 2024 · Filed Aug 27, 2024
What changed in Risk Factors?
Read the current filingPrevious report: 10-Q
Period ended 2024-04-30; filed 2024-05-30.
0001583708-24-000043
Item 1A. Risk FactorsCurrent report: 10-Q
Period ended 2024-07-31; filed 2024-08-27.
0001583708-24-000074
Item 1A. Risk FactorsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 337 previous paragraphs and 342 current paragraphs.
298 unchanged; 37 reworded; 4 added; 1 removed; 1 previous and 3 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (4)
Current report
•successfully execute on partner purchasing commitments;
Current report
Moreover, many of the companies with which we compete for experienced personnel have greater resources than we have. Our competitors also may be successful in recruiting and hiring members of our management team, sales team or other key employees, and it may be difficult for us to find suitable replacements on a timely basis, on competitive terms, or at all. We have in the past, and may in the future, be subject to allegations that employees we hire have been improperly solicited, or that they have divulged proprietary or other confidential information or that their former employers own such employees’ inventions or other work product, or that they have been hired in violation of non-compete provisions or non-solicitation provisions.
Current report
•Following California’s lead, other states have enacted privacy laws in recent years. In addition, a comprehensive federal privacy bill, which includes a private right of action for violations, has been proposed in Congress.
Removed paragraphs (1)
Previous report
•Other states have enacted consumer privacy laws comparable to the CCPA that came into effect in 2023: Virginia enacted the Virginia Consumer Data Protection Act which became effective January 1, 2023; Colorado and Connecticut enacted the Colorado Privacy Act and the Connecticut Personal Data Privacy and Online Monitoring Act, which both became effective July 1, 2023; Utah enacted the Utah Consumer Privacy Act, which became effective December 31, 2023. In addition, as of December 31, 2023, eight other states (Delaware, Indiana, Iowa, Florida, Montana, Oregon, Tennessee and Texas) enacted privacy legislation which will become effective between July 1, 2024 and January 1, 2026. Numerous other states also have pending consumer privacy legislation under review, which if enacted, would add additional costs and expense of resources to maintain compliance.
Reworded paragraphs (37)
Previous wording
•If we are unable to retain our customers, renew and expand our relationships with them, and add new customers, we may not be able to sustain revenue growth, and we may not achieve or maintain profitability in the future.
Current wording
•If we are unable to retain our customers, renew and expand our relationships with them, and add new customers, or our partners are unable to execute on their purchasing commitments, we may not be able to sustain revenue growth, and we may not achieve or maintain profitability in the future.
Previous wording
We have incurred net losses in all periods since our inception, and we may not achieve or maintain profitability in the future. We experienced a net loss of $70.1 million and $106.9 million for the three months ended April 30, 2024 and 2023, respectively. As of April 30, 2024, we had an accumulated deficit of $1.4 billion. While we have historically experienced significant growth in revenue, we cannot predict when or whether we will reach or maintain profitability. We also expect our operating expenses to increase in the future as we continue to invest for our future growth, including expanding our research and development function to drive further development of our platform, expanding our sales and marketing activities, developing the functionality to expand into adjacent markets, and reaching customers in new geographic locations, which will negatively affect our operating results if our total revenue does not increase. In addition to the anticipated costs to grow our business, we have incurred and expect to continue to incur significant additional legal, accounting, and other expenses as a public company, particularly now that we are no longer an emerging growth company. Our revenue growth is expected to slow as we grow and our revenue may decline for a number of other reasons, including reduced demand for our platform, increased competition, a decrease in the growth or reduction in size of our overall market, or if we cannot capitalize on growth opportunities, including acquisitions, new products, services, and feature releases. While we consistently evaluate opportunities to reduce our operating costs and optimize efficiencies, including, for example, our restructuring plan in June 2023, we cannot guarantee that these efforts will be successful or that we will not re-accelerate operating expenditures in the future in order to capitalize on growth opportunities. If we fail to increase our revenue to offset increases in our operating expenses, or manage our costs as we invest in our business, we may not achieve or sustain profitability.
Current wording
We have incurred net losses in all periods since our inception, and we may not achieve or maintain profitability in the future. We experienced a net loss of $69.2 million and $89.5 million for the three months ended July 31, 2024 and 2023, respectively. As of July 31, 2024, we had an accumulated deficit of $1.5 billion. While we have historically experienced significant growth in revenue, we cannot predict when or whether we will reach or maintain profitability. We also expect our operating expenses to increase in the future as we continue to invest for our future growth, including expanding our research and development function to drive further development of our platform, expanding our sales and marketing activities, developing the functionality to expand into adjacent markets, and reaching customers in new geographic locations, which will negatively affect our operating results if our total revenue does not increase. In addition to the anticipated costs to grow our business, we have incurred and expect to continue to incur significant additional legal, accounting, and other expenses as a public company, particularly now that we are no longer an emerging growth company. Our revenue growth is expected to slow as we grow and our revenue may decline for a number of other reasons, including reduced demand for our platform, increased competition, a decrease in the growth or reduction in size of our overall market, or if we cannot capitalize on growth opportunities, including acquisitions, new products, services, and feature releases. While we consistently evaluate opportunities to reduce our operating costs and optimize efficiencies, including, for example, our restructuring plan in June 2023, we cannot guarantee that these efforts will be successful or that we will not re-accelerate operating expenditures in the future in order to capitalize on growth opportunities. If we fail to increase our revenue to offset increases in our operating expenses, or manage our costs as we invest in our business, we may not achieve or sustain profitability.
Previous wording
•general global macroeconomic and political conditions, both domestically and in our foreign markets that could impact some or all regions where we operate, including global economic slowdowns, actual or perceived global banking and finance related issues, increased risk of inflation, potential uncertainty with respect to the federal debt ceiling and budget and potential government shutdowns related thereto, interest rate volatility, supply chain disruptions, labor shortages, and potential global recession;
Current wording
•general global macroeconomic and political conditions, both domestically and in our foreign markets that could impact some or all regions where we operate, including the upcoming U.S. election, global economic slowdowns, actual or perceived global banking and finance related issues, increased risk of inflation, interest rate volatility, supply chain disruptions, labor shortages, and potential global recession;
Previous wording
•general global macroeconomic and political conditions, both domestically and in our foreign markets that could impact some or all regions where we operate, including global economic slowdowns, actual or perceived global banking and finance related issues, increased risk of inflation, potential uncertainty with respect to the federal debt ceiling and budget and potential government shutdowns related thereto, interest rate volatility, supply chain disruptions, labor shortages and potential global recession;
Current wording
•general global macroeconomic and political conditions, both domestically and in our foreign markets that could impact some or all regions where we operate, including the upcoming U.S. election, global economic slowdowns, actual or perceived global banking and finance related issues, increased risk of inflation, interest rate volatility, supply chain disruptions, labor shortages and potential global recession;
Previous wording
Our business depends on the overall demand for information technology and on the economic health of our current and prospective customers. In addition, the purchase of our platform is often discretionary and may involve a significant commitment of capital and other resources. Weak global and regional economic conditions, including U.S. and global macro-economic issues, actual or perceived global banking and finance related issues, labor shortages, supply chain disruptions, rising interest rates and inflation, spending environments, geopolitical instability, warfare and uncertainty, weak economic conditions in certain regions or a reduction in information technology spending regardless of macro-economic conditions, including the effects of the conflicts in the Middle East, Ukraine, and tensions between China and Taiwan and judicial reform in Israel, could adversely affect our business, operating results, and financial condition, including resulting in longer sales cycles, a negative impact on our ability to attract and retain new customers or expand our platform or sell additional products and services to our existing customers, lower prices for our platform, higher default rates among our channel partners, reduced sales to new or existing customers and slower or declining growth. For example, as a result of current uncertainty in macroeconomic conditions and related higher cost consciousness around IT budgets, we have recently experienced certain impacts on our business, including a decline in usage and consumption patterns from certain customers, especially larger enterprise customers, longer sales cycles, and deal downsizing by new customers and of renewals by existing customers, especially larger enterprises. We expect the global macroeconomic conditions impacting demand to persist in the near term. Deterioration in economic conditions in any of the countries in which we do business could also cause slower or impaired collections on accounts receivable, which may adversely impact our liquidity and financial condition.
Current wording
Our business depends on the overall demand for information technology and on the economic health of our current and prospective customers. In addition, the purchase of our platform is often discretionary and may involve a significant commitment of capital and other resources. Weak global and regional economic conditions, including the upcoming U.S. election, U.S. and global macroeconomic issues, actual or perceived global banking and finance related issues, labor shortages, supply chain disruptions, fluctuating interest rates and inflation, spending environments, geopolitical instability, warfare and uncertainty, weak economic conditions in certain regions or a reduction in information technology spending regardless of macroeconomic conditions, including the effects of the conflicts in the Middle East, Ukraine, and tensions between China and Taiwan, could adversely affect our business, operating results, and financial condition, including resulting in longer sales cycles, a negative impact on our ability to attract and retain new customers or expand our platform or sell additional products and services to our existing customers, lower prices for our platform, higher default rates among our channel partners, reduced sales to new or existing customers and slower or declining growth. For example, as a result of current uncertainty in macroeconomic conditions and related higher cost consciousness around IT budgets, we have recently experienced certain impacts on our business, including a decline in usage and consumption patterns from certain customers, especially larger enterprise customers, longer sales cycles, and deal downsizing by new customers and of renewals by existing customers, especially larger enterprises. We expect the global macroeconomic conditions impacting demand to persist in the near term. Deterioration in economic conditions in any of the countries in which we do business could also cause slower or impaired collections on accounts receivable, which may adversely impact our liquidity and financial condition.
Previous wording
Moreover, the U.S. capital markets have experienced and continue to experience extreme volatility and disruption. Inflation rates in the U.S. significantly increased in 2022 resulting in federal action to increase interest rates, adversely affecting capital markets activity. Further deterioration of the global macroeconomic environment and regulatory action may adversely affect our business, operating results, and financial condition.
Current wording
Moreover, the U.S. capital markets have experienced and continue to experience extreme volatility and disruption. Inflation rates in the U.S. significantly increased in 2022 and 2023 resulting in federal action to increase interest rates, adversely affecting capital markets activity. Further deterioration of the global macroeconomic environment and regulatory action may adversely affect our business, operating results, and financial condition.
Previous wording
Any actual, alleged, or perceived security breach in our systems or networks, or any other actual, alleged or perceived data security incident we suffer, could result in damage to our reputation, negative publicity, loss of customers and sales, loss of competitive advantages over our competitors, increased costs to remedy any problems and otherwise respond to any incident, regulatory investigations and enforcement actions, fines and penalties, costly litigation, and other liability. We would also be exposed to a risk of loss or litigation and potential liability under laws, regulations, and contracts that protect the privacy and security of personal information. For example, the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act (CPRA), imposes a private right of action for security breaches that could lead to some form of remedy including regulatory scrutiny, fines, private right of action settlements, and other consequences. Where a security incident involves a breach of security leading to the accidental or unlawful destruction, loss, alternation, unauthorized disclosure of, or access to, personal data from the European Economic Area (EEA) or the UK in respect of which we are a controller or processor under the General Data Protection Regulation (GDPR), and the UK General Data Protection Regulation and UK Data Protection Act 2018 (UK GDPR), this could result in fines of up to €20 million or 4% of annual global turnover, whichever is greater, under the GDPR or up to £17.5 million or 4% of annual global turnover, whichever is greater, in the case of the UK GDPR. We may also be required to provide notice of such breaches to regulators and/or individuals which may result in us incurring additional costs, penalties, fines or litigation. Further, on July 26, 2023, the SEC adopted cybersecurity disclosure rules for public companies that require disclosure regarding cybersecurity risk management (including the board’s role in overseeing cybersecurity risks, management’s role and expertise in assessing and managing cybersecurity risks and processes for assessing, identifying and managing cybersecurity risks) in annual reports on Form 10-K. These cybersecurity disclosure rules also require the disclosure of material cybersecurity incidents by Form 8-K, within four business days of determining an incident is material. Any public disclosure relating to a material cybersecurity incident, whether as a result of the new SEC rules or otherwise, could harm our reputation, result in litigation and adversely impact our business, operating results, and financial condition.
Current wording
Any actual, alleged, or perceived security breach in our systems or networks, or any other actual, alleged or perceived data security incident we suffer, could result in damage to our reputation, negative publicity, loss of customers and sales, loss of competitive advantages over our competitors, increased costs to remedy any problems and otherwise respond to any incident, regulatory investigations and enforcement actions, fines and penalties, costly litigation, and other liability. We would also be exposed to a risk of loss or litigation and potential liability under laws, regulations, and contracts that protect the privacy and security of personal information. For example, the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act (CPRA), imposes a private right of action for security breaches that could lead to some form of remedy including regulatory scrutiny, fines, private right of action settlements, and other consequences. Where a security incident involves a breach of security leading to the accidental or unlawful destruction, loss, alternation, unauthorized disclosure of, or access to, personal data from the European Economic Area (EEA) or the United Kingdom (U.K.) in respect of which we are a controller or processor under the General Data Protection Regulation (GDPR), and the U.K. General Data Protection Regulation and U.K. Data Protection Act 2018 (U.K. GDPR), this could result in fines of up to €20 million or 4% of annual global turnover, whichever is greater, under the GDPR or up to £17.5 million or 4% of annual global turnover, whichever is greater, in the case of the U.K. GDPR. We may also be required to provide notice of such breaches to regulators and/or individuals which may result in us incurring additional costs, penalties, fines or litigation. Further, on July 26, 2023, the SEC adopted cybersecurity disclosure rules for public companies that require disclosure regarding cybersecurity risk management (including the board’s role in overseeing cybersecurity risks, management’s role and expertise in assessing and managing cybersecurity risks and processes for assessing, identifying and managing cybersecurity risks) in annual reports on Form 10-K. These cybersecurity disclosure rules also require the disclosure of material cybersecurity incidents by Form 8-K, within four business days of determining an incident is material. Any public disclosure relating to a material cybersecurity incident, whether as a result of the new SEC rules or otherwise, could harm our reputation, result in litigation and adversely impact our business, operating results, and financial condition.
Previous wording
Our platform and product features are multi-faceted, rely on third-party software and infrastructure, and may be deployed with material defects, vulnerabilities, software “bugs” or errors that are not detected until after their commercial release and deployment to our customers. From time to time, certain of our customers have reported defects in our platform related to performance, scalability, and compatibility. Our platform and product features also provide our customers with the ability to customize a multitude of settings, and administer devices on the applicable computing environment, and it is possible that a customer, partner or internal services team member could misconfigure or misuse our platform or otherwise fail to configure our products in an optimal manner.. Such defects and misconfigurations of our platform could cause our platform to operate at suboptimal efficacy, cause it to fail to secure customers’ computing environments and detect and block threats, or temporarily interrupt our customers’ computing environments. We also make frequent updates to our platform, which may fail, resulting in temporary vulnerability that increases the likelihood of a material defect.
Current wording
Our platform and product features are multi-faceted, rely on third-party software and infrastructure, and may be deployed with material defects, vulnerabilities, software “bugs” or errors that are not detected until after their commercial release and deployment to our customers. Vulnerabilities may be exploited by malicious actors and material defects may prevent our software from operating correctly or detecting malicious software. From time to time, certain of our customers have reported defects in our platform related to performance, scalability, and compatibility. In addition, customers may request a software bill of materials where we disclose an inventory of software used by the customer along with potential defects and vulnerabilities. Our platform and product features also provide our customers with the ability to customize a multitude of settings, and administer devices on the applicable computing environment, and it is possible that a customer, partner or internal services team member could misconfigure or misuse our platform or otherwise fail to configure our products in an optimal manner. Such defects and misconfigurations of our platform could cause our platform to operate at suboptimal efficacy, cause it to fail to secure customers’ computing environments and detect and block threats, or temporarily interrupt our customers’ computing environments. We also make frequent updates to our platform, which may fail or be deployed incorrectly resulting in temporary vulnerability, or a material defect or downtime in our customer environments.
Previous wording
In addition, because the techniques used by computer hackers to access or sabotage target computing environments change frequently and generally are not recognized until launched against a target, there is a risk that an advanced attack could emerge that our platform is unable to detect or prevent. Furthermore, as a well-known provider of security solutions, our networks, platform, products, including cloud-based technology, and customers could be targeted by attacks specifically designed to disrupt our business, harm our reputation or use our technology to gain unauthorized access. In addition, regional geopolitical conflicts such as the conflicts in the Middle East, Ukraine and tensions between China and Taiwan, may result in increased cyberattacks against our customers, resulting in an increased risk of a security breach of our customers’ systems. In addition, defects or errors in our platform could result in a failure to effectively update customers’ cloud-based products. Our data centers and networks may experience technical failures and downtime, may fail to distribute appropriate updates, or may fail to meet the increased requirements of a growing customer base, any of which could temporarily or permanently expose our customers’ computing environments, leaving their computing environments unprotected against cyber threats. Any of these situations could result in negative publicity to us, damage our reputation, and increase expenses and customer relations issues, which would adversely affect our business, financial condition, and operating results.
Current wording
In addition, because the techniques used by computer hackers to access or sabotage target computing environments change frequently and generally are not recognized until launched against a target, there is a risk that an advanced attack could emerge that our platform is unable to detect or prevent. Furthermore, as a well-known provider of security solutions and because security solutions are highly privileged in customers environments, our networks, platform, products, including cloud-based technology, and customers could be targeted by attacks specifically designed to disrupt our business, harm our reputation or use our technology to gain unauthorized access. In addition, regional geopolitical conflicts such as the conflicts in the Middle East, Ukraine and tensions between China and Taiwan, may result in increased cyberattacks against our customers, resulting in an increased risk of a security breach of our customers’ systems. In addition, defects or errors in our platform could result in a failure to effectively update customers’ cloud-based products. Our data centers and networks may experience technical failures and downtime, may fail to distribute appropriate updates, or may fail to meet the increased requirements of a growing customer base, any of which could temporarily or permanently expose our customers’ computing environments, leaving their computing environments unprotected against cyber threats. Any of these situations could result in negative publicity to us, damage our reputation, and increase expenses and customer relations issues, which would adversely affect our business, financial condition, and operating results.
Previous wording
Advances in computer capabilities, discoveries of new weaknesses and other developments with software generally used by the Internet community may increase the risk we will suffer a security breach. Furthermore, our platform may fail to detect or prevent malware, ransomware, viruses, worms or similar threats for any number of reasons, including our failure to enhance and expand our platform to reflect industry trends, new technologies and new operating environments, the complexity of the environment of our clients and the sophistication of malware, viruses and other threats. Our platform may fail to detect or prevent threats in any particular test for a number of reasons. We or our service providers may also suffer security breaches or unauthorized access to personal information, financial account information, and other confidential information due to employee error, rogue employee activity, unauthorized access by third parties acting with malicious intent or who commit an inadvertent mistake or social engineering. If we experience, or our service providers experience, any breaches of security measures or sabotage or otherwise suffer unauthorized use or disclosure of, or access to, personal information, financial account information or other confidential information, we might be required to expend significant capital and resources to address these problems. We may not be able to remedy any problems caused by hackers or other similar actors in a timely manner, or at all. To the extent potential customers, industry analysts or testing firms believe that the failure to detect or prevent any particular threat is a flaw or indicates that our platform does not provide significant value, our reputation and business would be harmed. Any real or perceived defects, errors or vulnerabilities in our platform, or any other failure of our platform to detect an advanced threat, could result in:
Current wording
Advances in computer capabilities, discoveries of new weaknesses and other developments with software generally used by the Internet community may increase the risk we will suffer a security breach. Furthermore, our platform may fail to detect or prevent malware, ransomware, viruses, worms or similar threats for any number of reasons, including our failure to enhance and expand our platform to reflect industry trends, new technologies and new operating environments, the complexity of the environment of our clients and the sophistication of malware, viruses and other threats. Our platform may fail to detect or prevent threats in any particular test for a number of reasons. Our platform may fail to interoperate or conflict with customer environments causing customer downtime. We or our service providers may also suffer security breaches or unauthorized access to personal information, financial account information, and other confidential information due to employee error, rogue employee activity, unauthorized access by third parties acting with malicious intent or who commit an inadvertent mistake or social engineering. If we experience, or our service providers experience, any breaches of security measures or sabotage or otherwise suffer unauthorized use or disclosure of, or access to, personal information, financial account information or other confidential information, we might be required to expend significant capital and resources to address these problems. We may not be able to remedy any problems caused by hackers or other similar actors in a timely manner, or at all. To the extent potential customers, industry analysts or testing firms believe that the failure to detect or prevent any particular threat is a flaw or indicates that our platform does not provide significant value, our reputation and business would be harmed. Any real or perceived defects, errors or vulnerabilities in our platform, or any other failure of our platform to detect an advanced threat, could result in:
Previous wording
Because techniques used to obtain unauthorized access or to sabotage systems change frequently and generally are not recognized until after they are launched against a target, we and our service providers may be unable to anticipate these techniques or to implement adequate preventative measures. Moreover, if a high-profile cybersecurity incident occurs with respect to another SaaS provider, customers may lose trust in the security of the SaaS business model generally, which could adversely affect our ability to retain existing customers or attract new ones. In the last few years there have been many successful advanced cybersecurity incidents that have damaged several prominent companies despite strong information security measures. We expect that the risks associated with cybersecurity incidents and the costs of preventing such attacks will continue to increase in the future.
Current wording
Because techniques used to obtain unauthorized access or to sabotage systems change frequently and generally are not recognized until after they are launched against a target, we and our service providers may be unable to anticipate these techniques or to implement adequate preventative measures. Moreover, if a high-profile cybersecurity incident occurs with respect to another SaaS provider, customers may lose trust in the security of the SaaS business model generally, which could adversely affect our ability to retain existing customers or attract new ones. Further, if another cybersecurity vendor were to experience a defect, error, or vulnerability, fail to detect a cybersecurity incident, or to cause interruptions in the networks of their customers, customers may lose trust in cybersecurity companies generally, including our platform, which could adversely affect our business, including our ability to retain existing customers or attract new ones.
Previous wording
As part of our business strategy, we have in the past and expect to continue to make investments in and/or acquire complementary companies, services, products, technologies, or talent. For example, in February 2021 we acquired Scalyr, a data analytics company, in May 2022 we acquired Attivo, a leading identity security and lateral movement protection company, in November 2023 we acquired KSG, a strategic advisory group, and in February 2024 we acquired both PingSafe, a cloud security platform, and Stride, a security automation company. We have also invested in certain privately held companies through our S Ventures fund, and we may not realize a return on these investments. All of our venture investments are subject to a risk of partial or total loss of investment capital. Our ability as an organization to acquire and integrate other companies, services or technologies in a successful manner is not guaranteed.
Current wording
As part of our business strategy, we have in the past and expect to continue to make investments in and/or acquire complementary companies, services, products, technologies, or talent. For example, in November 2023 we acquired KSG, a strategic advisory group, and in February 2024 we acquired both PingSafe, a cloud security platform, and Stride, a security automation company. We have also invested in certain privately held companies through our S Ventures fund, and we may not realize a return on these investments. All of our venture investments are subject to a risk of partial or total loss of investment capital. Our ability as an organization to acquire and integrate other companies, services or technologies in a successful manner is not guaranteed.
Previous wording
If we are unable to retain our customers, renew and expand our relationships with them, and add new customers, we may not be able to sustain revenue growth, and we may not achieve or maintain profitability in the future.
Current wording
If we are unable to retain our customers, renew and expand our relationships with them, and add new customers, or our partners are unable to execute on their purchasing commitments, we may not be able to sustain revenue growth, and we may not achieve or maintain profitability in the future.
Previous wording
Substantially all of our sales are fulfilled through our channel partners, including resellers, distributors, MSPs, MSSPs, MDRs, OEMs, and IR firms, and we expect that we will continue to generate a significant portion of our revenue from channel partners for the foreseeable future. Our agreements with our channel partners are non- exclusive, do not last for set terms, and may be terminated by either party at any time. Further, channel partners fulfill our sales on a purchase order basis and do not impose minimum purchase requirements or related terms on sales. Additionally, we have entered, and intend to continue to enter, into alliance partnerships with third parties to support our future growth plans. The loss of a substantial number of our channel partners or alliance partners, or the failure to recruit additional partners, would adversely affect our business, operating results, and financial condition.
Current wording
Substantially all of our sales are fulfilled through our channel partners, including resellers, distributors, MSPs, MSSPs, MDRs, OEMs, and IR firms, and we expect that we will continue to generate a significant portion of our revenue from channel partners for the foreseeable future. Our agreements with our channel partners generally are non-exclusive, do not last for set terms, and may be terminated by either party at any time. Further, the majority of channel partners fulfill our sales on a purchase order basis and do not impose minimum purchase requirements or related terms on sales. We also have several large MSSP, OEM and reseller partnerships with multi-year purchasing commitments. Additionally, we have entered, and intend to continue to enter, into alliance partnerships with third parties to support our future growth plans. The loss of a substantial number of our channel partners or alliance partners, the failure to recruit additional partners, or failure of partners to meet their purchasing commitments would adversely affect our business, operating results, key financial metrics and financial condition.
Previous wording
To the extent our partners are unsuccessful in selling our platform, or if we are unable to enter into arrangements with and retain a sufficient number of high-quality partners in each of the regions in which we sell or plan to sell our platform, we are unable to keep them motivated to sell our platform, or our partners shift focus to other vendors and/or our competitors, our ability to sell our platform and operating results will be harmed. The termination of our relationship with any significant partner may adversely affect our sales and operating results. Our ability to achieve revenue growth in the future will depend in part on our ability to maintain successful relationships with our channel partners and in training our channel partners to independently sell and deploy our platform.
Current wording
To the extent our partners are unsuccessful in selling our platform, or if we are unable to enter into arrangements with and retain a sufficient number of high-quality partners in each of the regions in which we sell or plan to sell our platform, we are unable to keep them motivated to sell our platform, or our partners shift focus to other vendors and/or our competitors, our ability to sell our platform and operating results will be harmed. To the extent our partners fail to meet their purchasing commitments we risk churn in forecast metrics. The termination of our relationship with any significant partner may adversely affect our sales and operating results. Our ability to achieve revenue growth in the future will depend in part on our ability to maintain successful relationships with our channel partners and in training our channel partners to independently sell and deploy our platform.
Previous wording
We are generating a growing portion of our revenue outside of the US, and conduct our business activities in various foreign countries, including some emerging markets where we have limited experience, where the challenges of conducting our business can be significantly different from those we have faced in more developed markets and where business practices may create internal control risks including:
Current wording
We are generating a growing portion of our revenue outside of the U.S., and conduct our business activities in various foreign countries, including some emerging markets where we have limited experience, where the challenges of conducting our business can be significantly different from those we have faced in more developed markets and where business practices may create internal control risks including:
Previous wording
•exposure to numerous, increasing, stringent (particularly in the EU), and potentially inconsistent laws and regulations relating to privacy, data protection, and information security;
Current wording
•exposure to numerous, increasing, stringent (particularly in the European Union (E.U.)), and potentially inconsistent laws and regulations relating to privacy, data protection, and information security;
Previous wording
We have experienced rapid growth in recent periods, and we expect to continue to invest broadly across our organization to support our growth. For example, our headcount grew from over 2,200 employees as of April 30, 2023, to over 2,400 employees as of April 30, 2024. Although we have experienced rapid growth historically, we may not sustain our growth rates, nor can we assure you that our investments to support our growth will be successful. The growth and expansion of our business will require us to invest significant financial and operational resources and the continuous dedication of our management team.
Current wording
We have experienced rapid growth in recent periods, and we expect to continue to invest broadly across our organization to support our growth. For example, our headcount grew from over 2,200 employees as of July 31, 2023, to over 2,500 employees as of July 31, 2024. Although we have experienced rapid growth historically, we may not sustain our growth rates, nor can we assure you that our investments to support our growth will be successful. The growth and expansion of our business will require us to invest significant financial and operational resources and the continuous dedication of our management team.
Previous wording
In addition, as we have grown, our number of customers has also increased significantly, and we have increasingly managed more complex deployments of our platform in more complex computing environments. The rapid growth and expansion of our business places a significant strain on our management, operational, and financial resources. To manage any future growth effectively, we must continue to improve and expand our information technology and financial infrastructure, our operating and administrative systems and controls, and our ability to manage headcount, capital, and processes in an efficient manner. As a result of recent macroeconomic conditions, in June 2023, we approved a restructuring plan designed to improve operational efficiencies and operating costs and better align our workforce and operations with current business needs, priorities, and near-term growth expectations.
Current wording
In addition, as we have grown, our number of customers has also increased significantly, and we have increasingly managed more complex deployments of our platform in more complex computing environments. The rapid growth and expansion of our business places a significant strain on our management, operational, and financial resources. To manage any future growth effectively, we must continue to improve and expand our information technology and financial infrastructure, our operating and administrative systems and controls, and our ability to manage headcount, capital, and processes in an efficient manner. As a result of macroeconomic conditions, in June 2023, we approved a restructuring plan designed to improve operational efficiencies and operating costs and better align our workforce and operations with current business needs, priorities, and near-term growth expectations.
Previous wording
Our future success is dependent, in part, on our ability to hire, integrate, train, manage, retain, and motivate the members of our management team and other key employees throughout our organization. The loss of key personnel, including key members of our management team or members of our board of directors, as well as certain of our key marketing, sales, finance, support, product development, people team, or technology personnel, could disrupt our operations and have an adverse effect on our ability to grow our business. In particular, we are highly dependent on the services of Tomer Weingarten, our co-founder, Chairman of the Board of Directors, President, and Chief Executive Officer, who is critical to the development of our technology, platform, future vision, and strategic direction. From time to time, there have been and may in the future be changes in our management team. While we seek to manage any such transitions carefully, such changes may result in a loss of institutional knowledge, cause disruptions to our business and negatively affect our business. Further, we maintain an office in Tel Aviv, Israel and had approximately 12% of our personnel in Israel as of April 30, 2024. We are closely monitoring the unfolding events of the armed conflict in Israel which began in October 2023. While this conflict is still evolving, to date, the conflict has not had an adverse impact on our workforce and we have implemented continuity measures to address the safety of our employees and continue our operations in the event of reduced employee availability in the conflict region. However, if our continuity measures fail or the conflict continues to worsen or intensify, any business interruptions or spillover effects could adversely affect our business and operations.
Current wording
Our future success is dependent, in part, on our ability to hire, integrate, train, manage, retain, and motivate the members of our management team and other key employees throughout our organization. The loss of key personnel, including key members of our management team or members of our board of directors, as well as certain of our key marketing, sales, finance, support, product development, people team, or technology personnel, could disrupt our operations and have an adverse effect on our ability to grow our business. In particular, we are highly dependent on the services of Tomer Weingarten, our co-founder, Chairman of the Board of Directors, President, and Chief Executive Officer, who is critical to the development of our technology, platform, future vision, and strategic direction. From time to time, there have been and may in the future be changes in our management team. While we seek to manage any such transitions carefully, such changes may result in a loss of institutional knowledge, cause disruptions to our business and negatively affect our business. Further, we maintain an office in Tel Aviv, Israel and had approximately 12% of our personnel in Israel as of July 31, 2024. We are closely monitoring the unfolding events of the armed conflict in Israel. While this conflict is still evolving, to date, the conflict has not had an adverse impact on our workforce and we have implemented continuity measures to address the safety of our employees and continue our operations in the event of reduced employee availability in the conflict region. However, if our continuity measures fail or the conflict continues to worsen or intensify, any business interruptions or spillover effects could adversely affect our business and operations.
Previous wording
Despite our efforts to protect our proprietary rights, unauthorized parties may attempt to copy aspects of our platform or obtain and use information that we regard as proprietary. We generally enter into confidentiality or license agreements with our employees, consultants, vendors, and customers, and generally limit access to and distribution of our proprietary information. However, such agreements may not be enforceable in full or in part in all jurisdictions and any breach could negatively affect our business and our remedy for such breach may be limited. The contractual provisions that we enter into may not prevent unauthorized use or disclosure of our proprietary technology or intellectual property rights and may not provide an adequate remedy in the event of unauthorized use or disclosure of our proprietary technology or intellectual property rights. Lastly, the measures we employ to limit the access and distribution of our proprietary information may not prevent unauthorized use or disclosure of our proprietary technology or intellectual property. As such, we cannot guarantee that the steps taken by us will prevent misappropriation of our technology. Policing unauthorized use of our technology or platform is difficult. In addition, the laws of some foreign countries do not protect our proprietary rights to the same extent as the laws of the U.S., and many foreign countries do not enforce these laws as diligently as government agencies and private parties in the U.S.. For example, many foreign countries limit the enforceability of patents against certain third parties, including government agencies or government contractors. In these countries, patents may provide limited or no benefit. Effective trade secret protection may also not be available in every country in which our products are available or where we have employees or independent contractors. The loss of trade secret protection could make it easier for third parties to compete with our products by copying functionality. In addition, any changes in, or unexpected interpretations of, the trade secret and employment laws in any country in which we operate may compromise our ability to enforce our trade secret and intellectual property rights. From time to time, legal action by us may be necessary to enforce our patents and other intellectual property rights, to protect our trade secrets, to determine the validity and scope of the proprietary rights of others or to defend against claims of infringement or invalidity. Moreover, the availability of copyright protection and other legal protections for intellectual property generated by certain technologies, such as generative AI, is uncertain. The use of generative AI and other forms of AI may expose us to risks because the intellectual property ownership and license rights, including copyright, of generative and other AI output, has not been fully interpreted by U.S. courts or been fully addressed by U.S. federal or state regulation, as…
Excerpt shortened here; the source contains the full paragraph.
Current wording
Despite our efforts to protect our proprietary rights, unauthorized parties may attempt to copy aspects of our platform or obtain and use information that we regard as proprietary. We generally enter into confidentiality or license agreements with our employees, consultants, vendors, and customers, and generally limit access to and distribution of our proprietary information. However, such agreements may not be enforceable in full or in part in all jurisdictions and any breach could negatively affect our business and our remedy for such breach may be limited. The contractual provisions that we enter into may not prevent unauthorized use or disclosure of our proprietary technology or intellectual property rights and may not provide an adequate remedy in the event of unauthorized use or disclosure of our proprietary technology or intellectual property rights. Lastly, the measures we employ to limit the access and distribution of our proprietary information may not prevent unauthorized use or disclosure of our proprietary technology or intellectual property. As such, we cannot guarantee that the steps taken by us will prevent misappropriation of our technology. Policing unauthorized use of our technology or platform is difficult. In addition, the laws of some foreign countries do not protect our proprietary rights to the same extent as the laws of the U.S., and many foreign countries do not enforce these laws as diligently as government agencies and private parties in the U.S. For example, many foreign countries limit the enforceability of patents against certain third parties, including government agencies or government contractors. In these countries, patents may provide limited or no benefit. Effective trade secret protection may also not be available in every country in which our products are available or where we have employees or independent contractors. The loss of trade secret protection could make it easier for third parties to compete with our products by copying functionality. In addition, any changes in, or unexpected interpretations of, the trade secret and employment laws in any country in which we operate may compromise our ability to enforce our trade secret and intellectual property rights. From time to time, legal action by us may be necessary to enforce our patents and other intellectual property rights, to protect our trade secrets, to determine the validity and scope of the proprietary rights of others or to defend against claims of infringement or invalidity.
Previous wording
In certain circumstances, we may also be subject to the EU General Data Protection Regulation (GDPR) (established in 2018 and implemented by countries in the European Economic Area (EEA)) and the U.K. General Data Protection Regulation and U.K. Data Protection Act 2018 (U.K. GDPR), which respectively govern the collection, use, disclosure, transfer or other processing of personal data of natural persons, and it applies extra-territorially and imposes onerous requirements on controllers and processors of personal data, including, for example: (i) accountability and transparency requirements, and enhanced requirements for obtaining valid consent; (ii) obligations to consider data protection as any new products or services are developed and to limit the amount of personal data processed; (iii) obligations to comply with data protection rights of data subjects; and (iv) reporting of personal data breaches to the supervisory authority without undue delay (and no later than 72 hours).
Current wording
In certain circumstances, we may also be subject to the GDPR (established in 2018 and implemented by countries in the EEA) and the U.K. GDPR, which respectively govern the collection, use, disclosure, transfer or other processing of personal data of natural persons, and it applies extra-territorially and imposes onerous requirements on controllers and processors of personal data, including, for example: (i) accountability and transparency requirements, and enhanced requirements for obtaining valid consent; (ii) obligations to consider data protection as any new products or services are developed and to limit the amount of personal data processed; (iii) obligations to comply with data protection rights of data subjects; and (iv) reporting of personal data breaches to the supervisory authority without undue delay (and no later than 72 hours).
Previous wording
Companies that must comply with the GDPR face increased compliance obligations and risk, including more robust regulatory enforcement of data protection requirements and potential fines for noncompliance of up to €20 million or 4 percent of the annual global revenues of the noncompliant company, whichever is greater. Additionally, following the withdrawal by the United Kingdom (U.K.) from the European Union (E.U.) and the EEA, companies must comply with both the GDPR and the U.K. GDPR as incorporated into United Kingdom national law, the latter regime having the ability to separately fine up to the greater of £17.5 million or 4 percent of global turnover. In addition to the foregoing, a breach of the GDPR or U.K. GDPR could result in regulatory investigations, reputational damage, orders to cease or change our processing of our data, enforcement notices, and/or assessment notices (for a compulsory audit). We may also face civil claims including representative actions and other class action type litigation (where individuals have suffered harm), potentially amounting to significant compensation or damages liabilities, as well as associated costs, diversion of internal resources, and reputational harm.
Current wording
Companies that must comply with the GDPR face increased compliance obligations and risk, including more robust regulatory enforcement of data protection requirements and potential fines for noncompliance of up to €20 million or 4 percent of the annual global revenues of the noncompliant company, whichever is greater. Additionally, following the withdrawal by the U.K. from the E.U. and the EEA, companies must comply with both the GDPR and the U.K. GDPR as incorporated into U.K. national law, the latter regime having the ability to separately fine up to the greater of £17.5 million or 4 percent of global turnover. In addition to the foregoing, a breach of the GDPR or U.K. GDPR could result in regulatory investigations, reputational damage, orders to cease or change our processing of our data, enforcement notices, and/or assessment notices (for a compulsory audit). We may also face civil claims including representative actions and other class action type litigation (where individuals have suffered harm), potentially amounting to significant compensation or damages liabilities, as well as associated costs, diversion of internal resources, and reputational harm.
Previous wording
To add to this complexity, effective on July 10, 2023, the European Commission adopted the new EU-US Data Privacy Framework (DPF) which allows for transfers of personal data from the EU to certified companies in the US without the need for additional privacy safeguards as an alternative to the SCCs. In October 2023, a UK extension to the DPF was adopted enabling the transfer of personal data between the UK and US entities without the need for an IDTA or UK SCC Addendum. Similarly, the Swiss-U.S. DPF allows transfers of personal data from Switzerland to certified companies in the U.S. without the need for additional privacy safeguards as an alternative to the SCCs. We have self-certified to the EU-U.S. DPF, the UK extension to the EU-U.S. DFP, and the Swiss-U.S. DPF and now rely on these mechanisms instead of the SCCs for certain transfers from those respective countries to the U.S however these transfer mechanisms could be subject to further legal challenge which could cause the legal requirements for personal data transfers from these countries to the U.S. to become uncertain once again.
Current wording
To add to this complexity, effective on July 10, 2023, the European Commission adopted the new E.U.-U.S. Data Privacy Framework (DPF) which allows for transfers of personal data from the E.U. to certified companies in the U.S. without the need for additional privacy safeguards as an alternative to the SCCs. In October 2023, a U.K. extension to the DPF was adopted enabling the transfer of personal data between the U.K. and U.S. entities without the need for an IDTA or U.K. SCC Addendum. Similarly, the Swiss-U.S. DPF allows transfers of personal data from Switzerland to certified companies in the U.S. without the need for additional privacy safeguards as an alternative to the SCCs. We have self-certified to the E.U.-U.S. DPF, the U.K. extension to the E.U.-U.S. DFP, and the Swiss-U.S. DPF and now rely on these mechanisms instead of the SCCs for certain transfers from those respective countries to the U.S. however these transfer mechanisms could be subject to further legal challenge which could cause the legal requirements for personal data transfers from these countries to the U.S. to become uncertain once again.
Previous wording
As supervisory authorities continue to issue further guidance on personal information transfers, we could suffer additional costs, complaints, or regulatory investigations or fines. If we are otherwise unable to transfer personal data between and among countries and regions in which we operate, it could affect the manner in which we provide our services, adversely affecting our financial results, and possibly making it necessary to establish systems in the EEA, Switzerland, the UK and other jurisdiction to maintain personal data originating from those jurisdictions that adds expenses and may create distractions from our other business pursuits. Loss, retention or misuse of certain information and alleged violations of laws and regulations relating to privacy and data security, and any relevant claims, may expose us to potential liability and may require us to expend significant resources on data security and in responding to and defending such allegations and claims.
Current wording
As supervisory authorities continue to issue further guidance on personal information transfers, we could suffer additional costs, complaints, or regulatory investigations or fines. If we are otherwise unable to transfer personal data between and among countries and regions in which we operate, it could affect the manner in which we provide our services, adversely affecting our financial results, and possibly making it necessary to establish systems in the EEA, Switzerland, the U.K. and other jurisdiction to maintain personal data originating from those jurisdictions that adds expenses and may create distractions from our other business pursuits. Loss, retention or misuse of certain information and alleged violations of laws and regulations relating to privacy and data security, and any relevant claims, may expose us to potential liability and may require us to expend significant resources on data security and in responding to and defending such allegations and claims.
Previous wording
We are also subject to evolving EU and UK privacy laws on cookies and electronic marketing. In the EU and the UK, informed opt-in consent is required for the placement of a cookie or similar technologies on a user’s device and for direct electronic marketing. The GDPR also imposes conditions on obtaining valid consent, such as a prohibition on pre-checked consents and a requirement to ensure separate consents are sought for each type of cookie or similar technology. While we anticipate the development of the ePrivacy Regulation to govern cookies and e-marketing, recent European court decisions and regulators’ guidance are driving increased attention to cookies and tracking technologies. If regulators start to enforce the strict approach in recent guidance, this could lead to substantial costs, require significant systems changes, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, adversely affect our margins, increase costs and subject us to additional liabilities. Regulation of cookies and similar technologies, and any decline of cookies or similar online tracking technologies as a means to identify and potentially target users, may lead to broader restrictions and impairments on our marketing and personalization activities and may negatively impact our efforts to understand users. Similar concerns may happen under the new CPRA regime in California and other current and soon-to-be enacted U.S. state privacy laws.
Current wording
We are also subject to evolving E.U. and U.K. privacy laws on cookies and electronic marketing. In the E.U. and the U.K., informed opt-in consent is required for the placement of a cookie or similar technologies on a user’s device and for direct electronic marketing. The GDPR also imposes conditions on obtaining valid consent, such as a prohibition on pre-checked consents and a requirement to ensure separate consents are sought for each type of cookie or similar technology. While we anticipate the development of the ePrivacy Regulation to govern cookies and e-marketing, recent European court decisions and regulators’ guidance are driving increased attention to cookies and tracking technologies. If regulators start to enforce the strict approach in recent guidance, this could lead to substantial costs, require significant systems changes, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, adversely affect our margins, increase costs and subject us to additional liabilities. Regulation of cookies and similar technologies, and any decline of cookies or similar online tracking technologies as a means to identify and potentially target users, may lead to broader restrictions and impairments on our marketing and personalization activities and may negatively impact our efforts to understand users. Similar concerns may happen under the new CPRA regime in California and other current and soon-to-be enacted U.S. state privacy laws.
Previous wording
Additionally, by expanding into the EU and UK, we may also trigger Article 3(2) of the GDPR/UK. GDPR directly as we may be considered to be monitoring data subjects. To the extent we process personal data on behalf of our customers for the provision of services, we have, and may in the future, also be required to enter into data processing agreements which comply with Article 28 of the GDPR/UK GDPR.
Current wording
Additionally, by expanding into the E.U. and U.K., we may also trigger Article 3(2) of the GDPR/U.K. GDPR directly as we may be considered to be monitoring data subjects. To the extent we process personal data on behalf of our customers for the provision of services, we have, and may in the future, also be required to enter into data processing agreements which comply with Article 28 of the GDPR/U.K. GDPR.
Previous wording
We depend on a number of third parties in relation to the operation of our business, a number of which process personal data on our behalf or as our sub-processor. To the extent required by applicable law, we attempt to mitigate the associated risks of using third parties by performing security assessments and detailed due diligence, entering into contractual arrangements to ensure that providers only process personal data according to our instructions or comparable instructions to the instructions of our customer (as applicable), and that they have sufficient technical and organizational security measures in place. There is no assurance that these contractual measures and our own privacy and security-related safeguards will protect us from the risks associated with the third-party processing, storage and transmission of such information. Any violation of privacy, data protection, data or cybersecurity laws by our third-party processors could have a material adverse effect on our business and result in the fines and penalties under the GDPR and the UK GDPR outlined above.
Current wording
We depend on a number of third parties in relation to the operation of our business, a number of which process personal data on our behalf or as our sub-processor. To the extent required by applicable law, we attempt to mitigate the associated risks of using third parties by performing security assessments and detailed due diligence, entering into contractual arrangements to ensure that providers only process personal data according to our instructions or comparable instructions to the instructions of our customer (as applicable), and that they have sufficient technical and organizational security measures in place. There is no assurance that these contractual measures and our own privacy and security-related safeguards will protect us from the risks associated with the third-party processing, storage and transmission of such information. Any violation of privacy, data protection, data or cybersecurity laws by our third-party processors could have a material adverse effect on our business and result in the fines and penalties under the GDPR and the U.K. GDPR outlined above.
Previous wording
From time to time, we have been subject to claims, suits and other proceedings. For example, we are currently the subject of securities litigation and commercial litigation. For additional information regarding these litigation matters, see the section titled “Legal Proceedings.” Regardless of the outcome, legal proceedings can have an adverse impact on us because of legal costs and diversion of management attention and resources, and could cause us to incur significant expenses or liability, adversely affect our brand recognition or require us to change our business practices. The expense of litigation and the timing of this expense from period to period are difficult to estimate, subject to change and could adversely affect our business, operating results and financial condition. It is possible that a resolution of one or more such proceedings could result in substantial damages, settlement costs, fines and penalties that would adversely affect our business, consolidated financial condition, operating results or cash flows in a particular period. These proceedings could also result in reputational harm, sanctions, consent decrees or orders requiring a change in our business practices. Because of the potential risks, expenses and uncertainties of litigation, we may, from time to time, settle disputes, even where we have meritorious claims or defenses, by agreeing to settlement agreements. Because litigation is inherently unpredictable, we cannot assure you that the results of any of these actions will not have a material adverse effect on our business, operating results, financial condition, and prospects. Any of these consequences could adversely affect our business, operating results, and financial condition.
Current wording
From time to time, we are subject to claims, suits and other proceedings. For example, we are currently the subject of securities litigation and commercial litigation. For additional information regarding these litigation matters, see the section titled “Legal Proceedings.” Regardless of the outcome, legal proceedings can have an adverse impact on us because of legal costs and diversion of management attention and resources, and could cause us to incur significant expenses or liability, adversely affect our brand recognition or require us to change our business practices. The expense of litigation and the timing of this expense from period to period are difficult to estimate, subject to change and could adversely affect our business, operating results and financial condition. It is possible that a resolution of one or more such proceedings could result in substantial damages, settlement costs, fines and penalties that would adversely affect our business, consolidated financial condition, operating results or cash flows in a particular period. These proceedings could also result in reputational harm, sanctions, consent decrees or orders requiring a change in our business practices. Because of the potential risks, expenses and uncertainties of litigation, we may, from time to time, settle disputes, even where we have meritorious claims or defenses, by agreeing to settlement agreements. Because litigation is inherently unpredictable, we cannot assure you that the results of any of these actions will not have a material adverse effect on our business, operating results, financial condition, and prospects. Any of these consequences could adversely affect our business, operating results, and financial condition.
Previous wording
We are subject to U.S. federal, state, local and sales taxes in the U.S. and foreign income taxes, withholding taxes and transaction taxes in numerous foreign jurisdictions. Significant judgment is required in evaluating our tax positions and our worldwide provision for income taxes. During the ordinary course of business, there are many activities and transactions for which the ultimate tax determination is uncertain. In addition, our future income tax obligations could be adversely affected by changes in, or interpretations of, tax laws in the U.S. or in other jurisdictions in which we operate.
Current wording
We are subject to U.S. federal, state, and local taxes in the U.S. and foreign income taxes, withholding taxes and transaction taxes in foreign jurisdictions. Significant judgment is required in evaluating our tax positions and our worldwide provision for income taxes. During the ordinary course of business, there are many activities and transactions for which the determination of our ultimate tax liabilities is uncertain. In addition, our future income tax obligations could be adversely affected by changes in, or interpretations of, tax laws in the U.S. or in other jurisdictions in which we operate.
Previous wording
The IRA contains certain tax measures, including a corporate alternative minimum tax of 15% on some large corporations and an excise tax of 1% on certain corporate stock buy-backs taking place after December 31, 2022. In addition, the Organization for Economic Cooperation and Development (OECD) Inclusive Framework of 137 jurisdictions have joined a two-pillar plan to reform international taxation rules. The first pillar is focused on the allocation of taxing rights between countries for in-scope multinational enterprises that sell goods and services into countries with little or no local physical presence and is intended to apply to multinational enterprises with global turnover above €20 billion. The second pillar is focused on developing a global minimum tax rate of at least 15 percent applicable to in-scope multinational enterprises and is intended to apply to multinational enterprises with annual consolidated group revenue in excess of €750 million. We are still evaluating the impact of the pillar two rules as they continue to be refined by the OECD and implemented by various national governments. However, it is possible that the pillar two rules, as implemented by various national governments, could adversely affect our effective tax rate or result in higher cash tax liabilities.
Current wording
For example, the United States tax law legislation commonly referred to as the Tax Cuts and Jobs Act of 2017 significantly reformed the Internal Revenue Code of 1986, as amended (the Internal Revenue Code), reducing U.S. federal tax rates, making sweeping changes to rules governing international business operations, and imposing significant additional limitations on tax benefits, including the deductibility of interest and the use of net operating loss carryforwards. On August 16, 2022, President Biden signed the Inflation Reduction Act of 2022 (IRA) into law. The IRA contains certain tax measures, including a corporate alternative minimum tax of 15% on some large corporations and an excise tax of 1% on certain corporate stock buy-backs taking place after December 31, 2022. In addition, the Organization for Economic Cooperation and Development (OECD) Inclusive Framework of 137 jurisdictions have joined a two-pillar plan to reform international taxation rules. The first pillar is focused on the allocation of taxing rights between countries for in-scope multinational enterprises that sell goods and services into countries with little or no local physical presence and is intended to apply to multinational enterprises with global turnover above €20 billion. The second pillar is focused on developing a global minimum tax rate of at least 15 percent applicable to in-scope multinational enterprises and is intended to apply to multinational enterprises with annual consolidated group revenue in excess of €750 million. We are still evaluating the impact of the pillar two rules as they continue to be refined by the OECD and implemented by various national governments. However, it is possible that the pillar two rules, as implemented by various national governments, could adversely affect our effective tax rate or result in higher cash tax liabilities.
Previous wording
It is not uncommon for tax authorities in different countries to have conflicting views, for instance, with respect to, among other things, the manner in which the arm’s length standard is applied for transfer pricing purposes, the transfer pricing and charges for intercompany services and other intercompany transactions, or with respect to the valuation of our intellectual property and the manner in which our intellectual property is utilized within our group. In 2022, we began negotiating a bilateral Advance Pricing Agreement (APA) with the United States and the Israeli governments, covering various transfer pricing matters for intercompany transactions relating to the intergroup utilization of our intellectual property among our group enterprises. An APA, if obtained, will provide us with a more predictable future business operating model, and preclude the relevant tax authorities from making certain transfer pricing adjustments within the scope of these agreements. These transfer pricing matters may be significant to our consolidated financial statements. If taxing authorities in any of the jurisdictions in which we conduct our international operations were to successfully challenge our transfer pricing, we could be required to reallocate part or all of our income to reflect transfer pricing adjustments, which could result in an increased tax liability to us. In such circumstances, if the country from where the income was reallocated did not agree to the reallocation, we could become subject to tax on the same income in both countries, resulting in double taxation. Furthermore, the relevant taxing authorities may disagree with our determinations as to the income and expenses attributable to specific jurisdictions. We believe that our tax and financial accounting positions are reasonable and our tax reserves are adequate to cover any potential liability. We also believe that our assumptions, judgements, and estimates are reasonable and that our transfer pricing for these intercompany transactions are on arm’s-length terms. However, the relevant tax authorities may disagree with our tax positions, including any assumptions, judgements or estimates used for these transfer pricing matters and intercompany transactions. If any of these tax authorities determine that our transfer pricing for these intercompany transactions do not meet arm’s-length criteria, and were successful in challenging our positions, we could be required to pay additional taxes, interest and penalties related thereto, which could be in excess of any reserves established therefore, and which could result in higher effective tax rates, reduced cash flows and lower overall profitability of our operations. Our financial statements could fail to reflect adequate reserves to cover such a contingency.
Current wording
It is not uncommon for tax authorities in different countries to have conflicting views, for instance, with respect to, among other things, the manner in which the arm’s length standard is applied for transfer pricing purposes, the transfer pricing and charges for intercompany services and other intercompany transactions, or with respect to the valuation of our intellectual property for tax purposes and the manner in which our intellectual property is owned and utilized within our group. In 2022, we began negotiating a bilateral Advance Pricing Agreement (APA) with the U.S. and the Israeli governments, covering various transfer pricing matters for intercompany transactions relating to the intergroup ownership and utilization of our intellectual property among our group enterprises and the provision of intergroup services. An APA, if obtained and implemented, will provide us with greater certainty regarding our tax obligation in respect of our U.S. and Israeli intercompany transactions, transfer pricing and charges, and a more predictable future business operating model, and will preclude the relevant tax authorities from making certain transfer pricing adjustments within the scope of these agreements. These transfer pricing matters may be significant to our consolidated financial statements. If taxing authorities in any of the jurisdictions in which we conduct our international operations were to successfully challenge our transfer pricing, we could be required to reallocate part or all of our income to reflect transfer pricing adjustments, which could result in an increased tax liability to us. In such circumstances, if the country from where the income was reallocated did not agree to the reallocation, we could become subject to tax on the same income in both countries, resulting in double taxation. Furthermore, the relevant taxing authorities may disagree with our determinations as to the income and expenses attributable to specific jurisdictions. We believe that our tax and financial accounting positions are reasonable and our tax reserves are adequate to cover any potential liability. We believe that our assumptions, judgements, and estimates are reasonable and that our transfer pricing for these intercompany transactions are on arm’s-length terms. However, the relevant tax authorities may disagree with our tax positions, including any assumptions, judgements, valuations or estimates used for these transfer pricing matters and intercompany transactions. If any of these tax authorities determine that our transfer pricing for these intercompany transactions do not meet arm’s-length criteria, and were successful in challenging our positions, we could be required to pay additional taxes, interest, indexation charges and/or penalties related thereto, which could be in excess of any reserves established therefore, and which could result in higher effective tax rates, reduced cash flows and lower overall profitability of our operations. Our financi…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
Our sales contracts are denominated in U.S. dollars, and therefore our revenue is not subject to foreign currency risk. However, strengthening of the U.S. dollar increases the real cost of our platform to our customers outside of the U.S., which could lead to delays in the purchase of our platform and the lengthening of our sales cycle. If the U.S. dollar continues to strengthen, this could adversely affect our operating results and financial condition. In addition, increased international sales in the future, including through continued international expansion, our channel partners and other partnerships, could result in foreign currency denominated sales, which would increase our foreign currency risk.
Current wording
Our sales contracts are denominated in U.S. dollars, and therefore our revenue is not subject to foreign currency risk. However, strengthening of the U.S. dollar increases the real cost of our platform to our customers outside of the U.S., which could lead to delays in the purchase of our platform and the lengthening of our sales cycle. If the U.S.
Previous wording
In order to support our growth and respond to business challenges, such as developing new features or enhancements to our platform to stay competitive, acquiring new technologies, and improving our infrastructure, we have made significant financial investments in our business and we intend to continue to make such investments. As a result, we may need to engage in additional equity or debt financings to provide the funds required for these investments and other business endeavors. If we raise additional funds through equity or convertible debt issuances, our existing stockholders may suffer significant dilution and these securities could have rights, preferences, and privileges that are superior to those of holders of our Class A common stock. We expect that our existing cash and cash equivalents will be sufficient to meet our anticipated cash needs for working capital and capital expenditures for at least the next 12 months. If we obtain additional funds through debt financing, we may not be able to obtain such financing on terms favorable to us. Further, the current global macroeconomic environment may make it more difficult to raise additional capital on favorable terms, it at all. Such terms may involve restrictive covenants making it difficult to engage in capital raising activities and pursue business opportunities, including potential acquisitions. The trading prices of technology companies have been highly volatile as a result of the conflict in the Middle East, Ukraine and tensions between China and Taiwan, inflation, interest rate volatility, actual or perceived instability in the banking system, and market downturns, which may reduce our ability to access capital on favorable terms or at all. In addition, a recession, depression, or other sustained adverse market event could adversely affect our business and the value of our Class A common stock. If we are unable to obtain adequate financing or financing on terms satisfactory to us when we require it, our ability to continue to support our business growth and to respond to business challenges could be significantly impaired and our business may be adversely affected, requiring us to delay, reduce, or eliminate some or all of our operations.
Current wording
In order to support our growth and respond to business challenges, such as developing new features or enhancements to our platform to stay competitive, acquiring new technologies, and improving our infrastructure, we have made significant financial investments in our business and we intend to continue to make such investments. As a result, we may need to engage in additional equity or debt financings to provide the funds required for these investments and other business endeavors. If we raise additional funds through equity or convertible debt issuances, our existing stockholders may suffer significant dilution and these securities could have rights, preferences, and privileges that are superior to those of holders of our Class A common stock. We expect that our existing cash and cash equivalents will be sufficient to meet our anticipated cash needs for working capital and capital expenditures for at least the next 12 months. If we obtain additional funds through debt financing, we may not be able to obtain such financing on terms favorable to us. Further, the current global macroeconomic environment may make it more difficult to raise additional capital on favorable terms, it at all. Such terms may involve restrictive covenants making it difficult to engage in capital raising activities and pursue business opportunities, including potential acquisitions. The trading prices of technology companies have been highly volatile as a result of the conflicts in the Middle East and Ukraine, as well as tensions between China and Taiwan, inflation, interest rate volatility, actual or perceived instability in the banking system, and market downturns, which may reduce our ability to access capital on favorable terms or at all. In addition, a recession, depression, or other sustained adverse market event could adversely affect our business and the value of our Class A common stock. If we are unable to obtain adequate financing or financing on terms satisfactory to us when we require it, our ability to continue to support our business growth and to respond to business challenges could be significantly impaired and our business may be adversely affected, requiring us to delay, reduce, or eliminate some or all of our operations.
Previous wording
•the global political, economic and macroeconomic climate, including but not limited to, actual or perceived instability in the banking industry, potential uncertainty with respect to the federal debt ceiling and budget and potential government shutdowns related thereto, labor shortages, supply chain disruptions, potential recession, inflation, and rising interest rates;
Current wording
•the global political, economic and macroeconomic climate, including but not limited to, the upcoming U.S. election, actual or perceived instability in the banking industry, labor shortages, supply chain disruptions, potential recession, inflation, and fluctuating interest rates;
Previous wording
In addition, the stock market in general, and the market for technology companies in particular, has experienced extreme price and volume fluctuations that have often been unrelated or disproportionate to the operating performance of those companies, particularly during the current period of global macroeconomic uncertainty, including rising inflation, increasing interest rates, labor shortages and fluctuations in international currency rates, as well as the impacts of regional geopolitical conflicts, including the conflicts in the Middle East, Ukraine and tensions between China and Taiwan. These economic, political, regulatory and market conditions have and may continue to negatively impact the market price of our Class A common stock, regardless of our actual operating performance. In addition, in the past, following periods of volatility in the overall market and the market prices of a particular company’s securities, securities class action litigation has often been instituted against that company. Securities litigation, if instituted against us, could result in substantial costs and divert our management’s attention and resources from our business. This could have an adverse effect on our business, operating results, and financial condition.
Current wording
In addition, the stock market in general, and the market for technology companies in particular, has experienced extreme price and volume fluctuations that have often been unrelated or disproportionate to the operating performance of those companies, particularly during the current period of global macroeconomic uncertainty, including rising inflation, fluctuating interest rates, labor shortages and fluctuations in international currency rates, as well as the impacts of regional geopolitical conflicts, including the conflicts in the Middle East and Ukraine and tensions between China and Taiwan. These economic, political, regulatory and market conditions have and may continue to negatively impact the market price of our Class A common stock, regardless of our actual operating performance. In addition, in the past, following periods of volatility in the overall market and the market prices of a particular company’s securities, securities class action litigation has often been instituted against that company. Securities litigation, if instituted against us, could result in substantial costs and divert our management’s attention and resources from our business. This could have an adverse effect on our business, operating results, and financial condition.
Previous wording
Natural disasters or other catastrophic events may cause damage or disruption to our operations, international commerce, and the global economy, and thus could have an adverse effect on us. Our business operations are also subject to interruption by fire, power shortages, flooding, and other events beyond our control. In addition, our global operations expose us to risks associated with public health crises, such as pandemics and epidemics, which could harm our business and cause our operating results to suffer. Further, acts of war, armed conflict, terrorism and other geopolitical unrest, such as the conflicts in the Middle East, Ukraine and tensions between China and Taiwan, could cause disruptions in our business or the businesses of our partners or the economy as a whole. We maintain an office in Tel-Aviv, Israel and had approximately 12% of our personnel in Israel as of April 30, 2024. We are closely monitoring the unfolding events of the armed conflict in Israel which began in October 2023. While this conflict is still evolving, to date, the conflict has not had an adverse impact on our business results of operations and we have implemented continuity measures to address the safety of our employees and continue our operations in the event of reduced employee availability in the conflict region. However, if our continuity measures fail or the conflict continues to worsen or intensify, any business interruptions or spillover effects could adversely affect our business and operations.
Current wording
Natural disasters or other catastrophic events may cause damage or disruption to our operations, international commerce, and the global economy, and thus could have an adverse effect on us. Our business operations are also subject to interruption by fire, power shortages, flooding, and other events beyond our control. In addition, our global operations expose us to risks associated with public health crises, such as pandemics and epidemics, which could harm our business and cause our operating results to suffer. Further, acts of war, armed conflict, terrorism and other geopolitical unrest, such as the conflicts in the Middle East and Ukraine and tensions between China and Taiwan, could cause disruptions in our business or the businesses of our partners or the economy as a whole. We maintain an office in Tel-Aviv, Israel and had approximately 12% of our personnel in Israel as of July 31, 2024. We are closely monitoring the unfolding events of the armed conflict in Israel. While this conflict is still evolving, to date, the conflict has not had an adverse impact on our business results of operations and we have implemented continuity measures to address the safety of our employees and continue our operations in the event of reduced employee availability in the conflict region. However, if our continuity measures fail or the conflict continues to worsen or intensify, any business interruptions or spillover effects could adversely affect our business and operations.
Rearranged current paragraphs (3)
Current report — wording carried from elsewhere
In the last few years there have been many successful advanced cybersecurity incidents that have damaged several prominent companies despite strong information security measures. We expect that the risks associated with cybersecurity incidents and the costs of preventing such attacks will continue to increase in the future.
Current report — wording carried from elsewhere
Moreover, the availability of copyright protection and other legal protections for intellectual property generated by certain technologies, such as generative AI, is uncertain. The use of generative AI and other forms of AI may expose us to risks because the intellectual property ownership and license rights, including copyright, of generative and other AI output, has not been fully interpreted by U.S. courts or been fully addressed by U.S. federal or state regulation, as well as in foreign jurisdictions.
Current report — wording carried from elsewhere
dollar continues to strengthen, this could adversely affect our operating results and financial condition. In addition, increased international sales in the future, including through continued international expansion, our channel partners and other partnerships, could result in foreign currency denominated sales, which would increase our foreign currency risk.
Rearranged previous paragraphs (1)
Previous report — wording carried elsewhere
For example, the United States tax law legislation commonly referred to as the Tax Cuts and Jobs Act of 2017 significantly reformed the Internal Revenue Code of 1986, as amended (the Internal Revenue Code), reducing U.S. federal tax rates, making sweeping changes to rules governing international business operations, and imposing significant additional limitations on tax benefits, including the deductibility of interest and the use of net operating loss carryforwards. On August 16, 2022, President Biden signed the Inflation Reduction Act of 2022 (IRA) into law.