Zoom Communications Inc
For the period ended Jan 31, 2025. Filed Feb 28, 2025.
View on SEC.govAbout this filing
A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.
FY2025 · Filed Feb 28, 2025
What changed in Risk Factors?
Read the current filingPrevious report: 10-K
Period ended 2024-01-31; filed 2024-03-04.
0001585521-24-000030
Item 1A. Risk FactorsCurrent report: 10-K
Period ended 2025-01-31; filed 2025-02-28.
0001585521-25-000042
Item 1A. Risk FactorsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 310 previous paragraphs and 315 current paragraphs.
230 unchanged; 73 reworded; 7 added; 4 removed; 3 previous and 5 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (7)
Current report
•bundled productivity suite providers with communication offerings, including Microsoft 365 (with Teams) and Google Workspace (with Meet);
Current report
•contracts with governmental entities are subject to termination for the convenience of the customer;
Current report
•as a U.S. government contractor, we may be subject to executive orders and regulatory changes affecting various aspects of our operations, including compliance with nondiscrimination plans, and any required elimination or modification of such plans in response to new executive orders could pose challenges in hiring or retaining employees and may lead to other adverse operational impacts, while failure to comply with these requirements could expose us to administrative, civil, or criminal liabilities, including fines, penalties, repayments or suspension or debarment from eligibility for future U.S. government contracts; and
Current report
In January 2025, the current administration began issuing Executive Orders identifying new government policy and directing U.S. federal agencies to evaluate their current actions, including certain spending, to ensure that such actions are consistent with new Administration priorities. Some of those Executive Orders are the subjects of pending litigation, and there remains significant uncertainty about the ways in which agencies will implement the new Executive Orders. Such implementation could negatively affect our current and future business with U.S. government agencies.
Current report
We may also become subject to new laws that regulate non-personal information. For example, the European Union’s Data Act imposes certain data and cloud service interoperability and switching obligations to enable users to switch between cloud service providers without undue delay or cost, as well as certain requirements concerning cross-border international transfers of, and governmental access to, non-personal information outside the EEA. Depending on how this Act and any similar laws are implemented and interpreted, we may have to adapt our business practices, contractual arrangements, and products and services to comply with such obligations.
Current report
There is an increasing focus from regulators, investors, customers and other stakeholders concerning environmental, social and governance matters. To the extent we share information about our practices in this area, we could be criticized for the accuracy, adequacy, or completeness of such disclosures. In addition, we may communicate related goals or initiatives from time to time, which can be costly to achieve and difficult to implement. There is no assurance that we will achieve any of these goals, that our initiatives will achieve their intended outcome, and our ability to implement these initiatives or achieve these goals may be dependent on external factors outside our control. Further, we may experience backlash from customers, government entities, advocacy groups, employees, or other stakeholders who disagree with our actual or perceived positions, or with our lack of position on social, environmental, governance, political, public policy, economic, geopolitical, or other sensitive issues. Any perceived lack of transparency about these matters could harm our brand and reputation, our employees’ engagement and retention, and the willingness of our customers and partners to do business with us.
Current report
There are inherent climate-related risks wherever business is conducted. We have a global workforce, and operate in leased office spaces and data centers, and the short, medium and long term climate impacts to our business are unclear.
Removed paragraphs (4)
Previous report
•bundled productivity solutions providers with video functionality, including Microsoft Teams and Google G Suite and Meet products;
Previous report
There is an increasing focus from regulators, investors, customers and other stakeholders concerning environmental, social and governance matters (“ESG”). Regulators are driving legislation to bring consistency and transparency to ESG disclosures. Some investors may use these ESG performance factors to guide their investment strategies and, in some cases, may choose not to invest in us if they believe our policies and actions relating to ESG are inadequate. We may face reputational damage in the event that we do not meet the ESG standards set by various constituencies.
Previous report
Our voluntary ESG and climate disclosures, as well as our reporting under related disclosure regulations, or a failure to meet evolving stakeholder expectations for ESG reporting and practices, may potentially harm our reputation and customer relationships or expose us to liability. Due to new regulatory standards and market standards, certain new or existing customers may impose stricter ESG guidelines or contractual language for, and may scrutinize relationships more closely with, their counterparties, including us, which may lengthen sales cycles or increase our costs.
Previous report
Furthermore, if our competitors’ ESG performance is perceived to be better than ours, potential or current investors may elect to invest with our competitors instead. In addition, in the event that we communicate certain initiatives or goals regarding ESG matters, we could fail, or be perceived to fail, in our achievement of such initiatives or goals, or we could be criticized for the scope of such initiatives or goals.
Reworded paragraphs (73)
Previous wording
Our revenue growth has fluctuated in prior periods. You should not rely on the revenue growth of any prior quarterly or annual period as an indication of our future performance. There are no assurances we will be able to sustain or increase our revenue growth in future periods, and our revenue growth rate may continue to decline in future periods. Many factors may contribute to declines in our growth rate, including higher market penetration, increased competition, macroeconomic conditions, such as inflation, recessionary or uncertain economic environments, fluctuating foreign currency exchange rates, slowing demand for our platform, a lower than anticipated capitalization on growth opportunities, and the maturation of our business, among others. Our growth rate could adversely affect investors’ perceptions of our business and the trading price of our Class A common stock could be adversely affected.
Current wording
Our revenue growth has fluctuated in prior periods. You should not rely on the revenue growth of any prior quarterly or annual period as an indication of our future performance. There are no assurances we will be able to sustain our revenue growth in future periods, and our revenue growth rate may continue to remain flat or decline in future periods. Many factors have and may contribute to declines in our growth rate, including higher market penetration, increased competition, macroeconomic conditions, such as inflation, recessionary or uncertain economic environments, fluctuating foreign currency exchange rates, slowing demand for our platform, a lower than anticipated capitalization on growth opportunities, and the maturation of our business, among others. Our growth rate could adversely affect investors’ perceptions of our business and the trading price of our Class A common stock could be adversely affected.
Previous wording
Interruptions, delays, or outages in service from our co-located data centers and a variety of other factors, would impair the delivery of our services, require us to issue credits or pay penalties, and harm our business.
Current wording
Interruptions, delays, or outages in service from our co-located data centers or cloud hosting services and a variety of other factors, would impair the delivery of our services, require us to issue credits or pay penalties, and harm our business.
Previous wording
We currently serve our users from various co-located data centers located throughout the world. We also utilize Amazon Web Services and Oracle Cloud for the hosting of certain critical aspects of our business, as well as Microsoft Azure for limited customer-specified managed services. As part of our distributed meeting architecture, we establish private links between data centers that automatically transfer data between various data centers. Damage to, or failure of, these data centers has in the past resulted in and could in the future result in interruptions or delays in our services. In addition, we have experienced, and may in the future experience, other interruptions and delays in our services caused by a variety of other factors, including, but not limited to, infrastructure changes, vendor issues, human or software errors, viruses, security attacks, ransomware or cyber extortion, fraud, general internet availability issues, spikes in usage, local administrative actions, changes to legal or permitting requirements, and denial of service issues. In some instances, we may not be able to identify the cause or causes of these problems within an acceptable period of time. For example, we have experienced partial outages in our services that impacted a subset of our users for a limited number of hours. Additionally, in connection with the addition of new data centers or expansion or consolidation of our existing data center facilities or other reasons, we may move or transfer our data and our users’ metadata to other data centers, not including our China data center. Despite precautions that we take during this process, any unsuccessful data transfers may impair or cause disruptions in the delivery of our service, and we may incur significant costs in connection with any such move or transfer. Interruptions, delays, or outages in our services would reduce our revenue; may require us to issue credits or pay penalties; may subject us to claims and litigation; and may cause customers to terminate their subscriptions and adversely affect our ability to attract new customers. Our ability to attract and retain customers and licenses depends on our ability to provide customers and users with a highly reliable platform and even minor interruptions or delays in our services could harm our business.
Current wording
We currently serve our users from various co-located data centers located throughout the world. We also utilize cloud hosting services such as Amazon Web Services and Oracle Cloud for the hosting of certain critical aspects of our business and Microsoft Azure for limited customer-specified managed services. As part of our distributed meeting architecture, we establish private links between data centers that automatically transfer data between various data centers. Damage to, or failure of, these data centers has in the past resulted in and could in the future result in interruptions or delays in our services. In addition, we have experienced, and may in the future experience, other interruptions and delays in our services caused by a variety of other factors, including, but not limited to, infrastructure changes, vendor (including cloud hosting) issues, human or software errors, viruses, security attacks, ransomware or cyber extortion, fraud, general internet availability issues, spikes in usage, local administrative actions, changes to legal or permitting requirements, and denial of service issues. In some instances, we may not be able to identify the cause or causes of these problems within an acceptable period of time. For example, we have experienced partial outages in our services that impacted a subset of our users for a limited number of hours. Additionally, in connection with the addition of new data centers or expansion or consolidation of our existing data center facilities or other reasons, we may move or transfer our data and our users’ metadata to other data centers, not including our China data center. Despite precautions that we take during this process, any unsuccessful data transfers may impair or cause disruptions in the delivery of our service, and we may incur significant costs in connection with any such move or transfer. Interruptions, delays, or outages in our services would reduce our revenue; may require us to issue credits or pay penalties; may subject us to claims and litigation; and may cause customers to terminate their subscriptions and adversely affect our ability to attract new customers. Our ability to attract and retain customers and licenses depends on our ability to provide customers and users with a highly reliable platform and even minor interruptions or delays in our services could harm our business.
Previous wording
Additionally, if our data centers are unable to keep up with our increasing needs for capacity, customers may experience delays or interruptions in service as we seek to obtain additional capacity, which could result in the loss of customers who use our unified communications and collaboration platform because of its reliability and performance. We plan to continue our practice of opening new co-located data centers throughout the world to meet increased demand, but we may be unable to bring additional data centers online in a timely manner, including as a result of current shortages for certain parts, such as servers.
Current wording
Additionally, if our data centers or cloud hosting services are unable to keep up with our increasing needs for capacity, customers may experience delays or interruptions in service as we seek to obtain additional capacity, which could result in the loss of customers who use our unified communications and collaboration platform because of its reliability and performance. We plan to continue our practice of opening new co-located data centers throughout the world to meet increased demand, but we may be unable to bring additional data centers online in a timely manner, including as a result of current shortages for certain parts, such as servers.
Previous wording
We do not control, or in some cases have limited control over, the operation of the co-located data center facilities we use, and they are vulnerable to damage or interruption from human error; intentional bad acts; earthquakes; floods; fires; hurricanes; war; terrorist attacks; power losses; hardware failures; systems failures; telecommunications failures; disease; and other public health related measures, any of which could disrupt our service. In the event of significant physical damage to one of these data centers, it may take a significant period of time to achieve full resumption of our services and our disaster recovery planning may not account for all eventualities. Despite precautions taken at these facilities, the occurrence of a natural disaster, an act of terrorism, or other act of malfeasance, a decision to close the facilities without adequate notice or other unanticipated problems at the facilities would harm our business.
Current wording
We do not control, or in some cases have limited control over, the operation of the co-located data center facilities and cloud hosting services we use, and they are vulnerable to damage or interruption from human error; intentional bad acts; earthquakes; floods; fires; hurricanes; war; terrorist attacks; power losses; hardware failures; systems failures; telecommunications failures; disease; and other public health related measures, any of which could disrupt our service. In the event of significant physical damage to one of these data centers or disruption of the cloud hosting services we use, it may take a significant period of time to achieve full resumption of our services and our disaster recovery planning may not account for all eventualities. Despite precautions taken at these data center facilities, the occurrence of a natural disaster, an act of terrorism, or other act of malfeasance, a decision to close the facilities without adequate notice or other unanticipated problems at the facilities would harm our business.
Previous wording
The market for communication and collaboration technologies platforms is competitive and rapidly changing, and existing and new market entrants, particularly established companies with greater resources than we have, that provide technologies to improve communication and collaboration technologies platforms, such as AI and machine learning, could also increase the level of competition in the market. Certain features of our current platform compete in the communication and collaboration technologies market with products offered by:
Current wording
The market for communication and collaboration technologies platforms is competitive and rapidly changing and includes companies ranging from new market entrants to hyperscalers that provide technologies to improve communication and collaboration technologies platforms either as bundled solutions or standalone products. Given the range of companies in this space, maintaining an open and robust marketplace with fair competition is important. Certain features of our current platform compete in the communication and collaboration technologies market with products offered by:
Previous wording
Other large established companies may also make investments in video communications tools. In addition, as we introduce new products and services into our platform, and with the introduction of new technologies and market entrants, including AI, we expect competition to intensify in the future.
Current wording
Other large established companies may also make investments in video communications tools. In addition, as we introduce new products and services into our platform, and with the introduction of new technologies and market entrants, including AI, we expect competition to continue to intensify.
Previous wording
In February 2022, we launched Zoom Contact Center, an omnichannel contact center solution that is optimized for video, which competes against companies that offer similar services, such as Five9, Inc., Genesys and NICE inContact, and new competitors that may enter that market in the future. As we continue to build out our platform, we may face increased competition against companies that offer similar services and new competitors that may enter that market in the future. During the COVID-19 pandemic, we saw a significant increase in usage and subscriptions from smaller customers, many of whom are consumers or small and medium sized businesses. With respect to these smaller customers, we face competition from more consumer-oriented platforms, most of which have more experience with the consumer market than we do. Further, many of our actual and potential competitors benefit from competitive advantages over us, such as greater name recognition; longer operating histories; more varied products and services; larger marketing budgets; more established marketing relationships; more third-party integration; greater accessibility across devices or applications; greater access to larger user bases; major distribution agreements with hardware manufacturers and resellers; and greater financial, technical, and other resources. Some of our competitors may make acquisitions or strategic investments or enter into strategic relationships to offer a broader range of products and services than we do, which may prevent us from using such third parties' technology or offering such products or services. These combinations may make it more difficult for us to compete effectively. We expect these trends to continue as competitors attempt to strengthen or maintain their market positions.
Current wording
In February 2022, we launched Zoom Contact Center, an omnichannel contact center solution that is optimized for video, which competes against companies that offer similar services, such as Five9, Genesys, and NICE inContact, and new competitors that may enter that market in the future. As we continue to build out our platform, we may face increased competition against companies that offer similar services and new competitors that may enter that market in the future. During the COVID-19 pandemic, we saw a significant increase in usage and subscriptions from smaller customers, many of whom are consumers or small and medium sized businesses. With respect to these smaller customers, we face competition from more consumer-oriented platforms, most of which have more experience with the consumer market than we do. Further, many of our actual and potential competitors benefit from competitive advantages over us, such as greater name recognition; longer operating histories; more varied products and services; larger marketing budgets; more established marketing, customers and partner relationships; more third-party integrations; greater accessibility across devices and applications; greater access to larger user bases; major distribution agreements with hardware manufacturers and resellers; and greater financial, technical, and other resources. Some of our competitors may make acquisitions or strategic investments or enter into strategic relationships to offer a broader range of products and services than we do, which may prevent us from using such third parties' technology or offering such products or services. These combinations may make it more difficult for us to compete effectively. We expect these trends to continue as competitors attempt to strengthen or maintain their market positions.
Previous wording
Demand for our platform is also price sensitive. Many factors, including our marketing, user acquisition, and technology costs, and our current and future competitors’ pricing and marketing strategies, can significantly affect our pricing strategies. Certain competitors offer, or may in the future offer, lower-priced or free products, or services that compete with our platform, or may bundle and offer a broader range of products and services than we do. Similarly, certain competitors may use marketing strategies that enable them to acquire customers at a lower cost than we can. Furthermore, third parties could build products similar to ours that rely on open source software. Even if such products do not include all the features and functionality that our platform provides, we could face pricing pressure from these third parties to the extent that users find such alternative products to be sufficient to meet their needs. There can be no assurance that we will not be forced to engage in price-cutting initiatives or other discounts or to increase our marketing and other expenses to attract and retain customers in response to competitive pressures, either of which would harm our business. We, on occasion, offer customers a free period of time at the beginning of the subscription term that can result in deferred billings or long-term accounts receivable and increase the risk of loss on uncollected accounts receivable.
Current wording
Demand for our platform is also price sensitive. Many factors, including our marketing, user acquisition, and technology costs, and our current and future competitors’ pricing and marketing strategies, can significantly affect our pricing strategies. Certain competitors offer, or may in the future offer, lower-priced or free products, or services that compete with our platform, or may bundle and offer a broader range of products and services than we do. Similarly, certain competitors may use marketing strategies that enable them to acquire customers at a lower cost than we can. Furthermore, third parties could build products similar to ours that rely on open source software. Even if such products do not include all the features and functionality that our platform provides, we could face pricing pressure from these third parties to the extent that users find such alternative products to be sufficient to meet their needs. In some cases, we have been forced to engage in price-cutting initiatives or other discounts to attract and retain customers in response to competitive pressures, and may have to do so in the future. We, on occasion, offer customers a free period of time at the beginning of the subscription term that can result in deferred billings or long-term accounts receivable and increase the risk of loss on uncollected accounts receivable.
Previous wording
Our results of operations have fluctuated and may in the future fluctuate significantly, and period-to-period comparisons of our results of operations may not be meaningful. Accordingly, the results of any one quarter should not be relied upon as an indication of future performance. Our results of operations may fluctuate as a result of a variety of factors, many of which are outside of our control, and as a result, may not fully reflect the underlying performance of our business. For example, during fiscal year 2021, we experienced rapid growth in usage of our unified communications and collaboration platform largely due to the COVID-19 pandemic, a significant portion of which was attributable to free Basic accounts, which do not generate any revenue. To meet this increased demand, we have incurred and expect to continue to incur significant costs associated with upgrading our infrastructure and expanding our capacity. Fluctuation in our results may negatively impact the value of our securities. Factors that may cause fluctuations in our results of operations include, without limitation, those listed below:
Current wording
Our results of operations have fluctuated and may in the future fluctuate significantly, and period-to-period comparisons of our results of operations may not be meaningful. Accordingly, the results of any one quarter should not be relied upon as an indication of future performance. Our results of operations may fluctuate as a result of a variety of factors, many of which are outside of our control, and as a result, may not fully reflect the underlying performance of our business. For example, during fiscal year 2021, we experienced rapid growth in usage of our unified communications and collaboration platform largely due to the COVID-19 pandemic, a significant portion of which was attributable to free Basic accounts, which do not generate any revenue. To meet this increased demand, we have incurred and expect to continue to incur significant costs associated with upgrading our infrastructure and expanding our capacity. Fluctuations in our results may negatively impact the value of our securities. Factors that may cause fluctuations in our results of operations include, without limitation, those listed below:
Previous wording
Our business may be significantly affected by changes in the economy, such as high inflation and the responses by central banking authorities to control such inflation, recessionary or uncertain environments, U.S. federal debt ceiling negotiations and the risk of a U.S. government shutdown, fluctuations in the foreign currency exchange rates and global impacts, including the Russian invasion of Ukraine, the conflict in Israel and the surrounding area and the United States' ongoing trade disputes with China and other countries. While some customers may view a subscription to our platform as a cost-saving purchase, decreasing the need for business travel, others may view a subscription to our platform as a discretionary purchase, and our customers may reduce their information technology spending on our platform during an economic downturn or during times of economic uncertainty. Given current economic conditions, including inflation, we have experienced and may continue to experience a loss of users and customers, as well as a reduction in demand for our platform, especially if the effects of the current economic environment have a prolonged impact on various industries that our unified communications and collaboration platform addresses. In addition to the foregoing, adverse developments that affect financial institutions, transactional counterparties or other third parties, such as bank failures, or concerns or speculation about any similar events or risks, could lead to market-wide liquidity problems, which in turn may cause third parties, including customers, to become unable to meet their obligations under various types of financial arrangements as well as general disruptions or instability in the financial markets. Moreover, we have lost and may continue to lose customers as a result of such customers ceasing to do business, and we have experienced and may continue to experience a material increase in longer payment cycles and greater difficulty in collecting accounts receivable from certain customers. These issues may continue in the future if current economic conditions continue or worsen.
Current wording
Our business may be significantly affected by changes in the economy, such as high inflation and the responses by central banking authorities to control such inflation, recessionary or uncertain environments, fluctuations in the foreign currency exchange rates and geopolitical tensions and military conflicts, including the ongoing conflicts between Russia and Ukraine and in the Middle East, and tariffs and trade tensions, including the United States' ongoing trade disputes with China and other countries. While some customers may view a subscription to our platform as a cost-saving purchase, decreasing the need for business travel, others may view a subscription to our platform as a discretionary purchase, and our customers may reduce their information technology spending on our platform during an economic downturn or during times of economic uncertainty. Given current economic conditions, including inflation, we have experienced and may continue to experience a loss of users and customers, as well as a reduction in demand for our platform, especially if the effects of the current economic environment have a prolonged impact on various industries that our unified communications and collaboration platform addresses. In addition to the foregoing, adverse developments that affect financial institutions, transactional counterparties or other third parties, such as bank failures, or concerns or speculation about any similar events or risks, could lead to market-wide liquidity problems, which in turn may cause third parties, including customers, to become unable to meet their obligations under various types of financial arrangements as well as general disruptions or instability in the financial markets. Moreover, we have lost and may continue to lose customers as a result of such customers ceasing to do business, and we have experienced and may continue to experience a material increase in longer payment cycles and greater difficulty in collecting accounts receivable from certain customers. These issues may continue in the future if current economic conditions continue or worsen.
Previous wording
We invest significant resources into sales to large organizations. Large organizations typically undertake a significant evaluation and negotiation process due to their leverage, size, organizational structure, and approval requirements, all of which have and may continue to lengthen our sales cycle. We have also faced and may in the future face unexpected deployment challenges with large organizations or more complicated deployment of our some or all aspects of our platform. Large organizations may demand additional features, support services and pricing concessions, or require additional security management or control features. We may spend substantial time, effort, and money on sales efforts to large organizations without any assurance that our efforts will produce any sales or that these customers will deploy our platform widely enough across their organization to justify our substantial up-front investment. As a result, we anticipate increased sales to large organizations will lead to higher up-front sales costs and greater unpredictability in our business, results of operations, and financial condition.
Current wording
We invest significant resources into sales to large organizations. Large organizations typically undertake a significant evaluation and negotiation process due to their leverage, size, organizational structure, and approval requirements, all of which have and may continue to lengthen our sales cycle. We have also faced and may in the future face unexpected deployment challenges with large organizations or more complicated deployment of some or all aspects of our platform. Large organizations may demand additional features, support services and pricing concessions, or require additional security management or control features. We may spend substantial time, effort, and money on sales efforts to large organizations without any assurance that our efforts will produce any sales or that these customers will deploy our platform widely enough across their organization to justify our substantial up-front investment. As a result, we anticipate increased sales to large organizations will lead to higher up-front sales costs and greater unpredictability in our business, results of operations, and financial condition.
Previous wording
We have incurred net losses in the past and could incur net losses in the future. We intend to continue to expend significant funds on our sales and marketing efforts to attract new customers, expand the number of licenses and services used by our customers and develop and enhance our products. We also intend to continue investing in general corporate purposes, including operations, hiring additional personnel, including through acquisitions of other businesses, upgrading our infrastructure, addressing security and privacy issues, and expanding into new geographies and markets. To the extent we are successful in increasing our customer base, we may also incur increased losses because, other than sales commissions, the costs associated with acquiring customers are generally incurred up front, while the subscription revenue is generally recognized ratably over the subscription term, which can be monthly, annual, or on a multiyear basis. Our efforts to grow our business may be costlier than we expect, and we may not be able to increase our revenue enough to offset our higher operating expenses, which may result in decreased profitability. We may incur significant losses in the future for a number of reasons, including as a result of the other risks described herein, and unforeseen expenses, difficulties, complications, delays, and other unknown events. While free users continue to be a meaningful portion of the user base, we have directed marketing programs focused on converting free users to paid subscriptions. Some of these users have upgraded to a paid plan but the remainder have not and may never do so. If we are unable to increase or sustain our profitability, the value of our business and Class A common stock may significantly decrease. Furthermore, it is difficult to predict the size and growth rate of our market, customer demand for our platform, customer adoption and renewal of our platform, the entry of competitive products and services, or the success of existing competitive products and services. As a result, we may not increase or maintain profitability in future periods. If we fail to grow our revenue sufficiently to keep pace with our investments and other expenses, our business would be harmed.
Current wording
We have incurred net losses in the past and could incur net losses in the future. We intend to continue to expend significant funds on our sales and marketing efforts to attract new customers, expand the number of licenses and services used by our customers and develop and enhance our products. We also intend to continue investing in general corporate purposes, including operations, hiring additional personnel, including through acquisitions of other businesses, upgrading our infrastructure, addressing security and privacy issues, and expanding into new geographies and markets. To the extent we are successful in increasing our customer base, we may also incur increased losses because, other than sales commissions, the costs associated with acquiring customers are generally incurred up front, while the subscription revenue is generally recognized ratably over the subscription term, which can be monthly, annual, or on a multiyear basis. Our efforts to grow our business may be costlier than we expect, and we may not be able to increase our revenue enough to offset our higher operating expenses, which may result in decreased profitability. We may incur significant losses in the future for a number of reasons, including as a result of the other risks described herein, and unforeseen expenses, difficulties, complications, delays, and other unknown events. While free users continue to be a meaningful portion of the user base, we have directed marketing programs focused on converting free users to paid subscriptions. Some of these users have upgraded to a paid plan but the remainder have not and may never do so. If we are unable to increase or sustain our profitability, the value of our business and Class A common stock may significantly decrease. Furthermore, it is difficult to predict the size and growth rate of our market, customer demand for our platform, customer adoption and renewal of our platform, the entry of competitive products and services, or the success of existing competitive products and services. As a result, we may not be able to increase or maintain profitability in future periods. If we fail to grow our revenue sufficiently to keep pace with our investments and other expenses, our business would be harmed.
Previous wording
In addition, we provide, develop, and create applications for our platform partners that integrate our platform with our partners’ various offerings. For example, our Zoom One product integrates with tools offered by companies, such as Atlassian and Dropbox, to help teams get more done together. If we are not able to continue and expand on existing and new relationships to integrate our platform with our partners’ solutions, or there are quality issues with our products or service interruptions of our products that integrate with our partners’ solutions, our business will be harmed.
Current wording
In addition, we provide, develop, and create applications for our platform partners that integrate our platform with our partners’ various offerings. For example, our Zoom Workplace product integrates with tools offered by companies, such as Atlassian and Dropbox, to help teams get more done together. If we are not able to continue and expand on existing and new relationships to integrate our platform with our partners’ solutions, or there are quality issues with our products or service interruptions of our products that integrate with our partners’ solutions, our business will be harmed.
Previous wording
We use generative AI processes and algorithms, including by deploying generative AI features in our products and services, which may result in adverse effects to our operations, legal liability, reputation and competitive risks. The use of generative AI at scale is relatively new, and may lead to challenges, concerns and risks that are significant or that we may not be able to predict. For example, AI algorithms use machine learning (“ML”) and predictive analytics which may be insufficient, biased, inaccurate or of poor quality, which could result in customer rejection or skepticism of our products, adversely impact the rights of individuals, affect our reputation or brand, and negatively affect our financial results. Additionally, we could face claims from third parties claiming infringement of their intellectual property or other proprietary rights with respect to materials used or created by generative AI tools or features that we believed to be available for use and not subject to such rights. The investment required to bring AI features to market and the costs associated with providing these features to our customers may be significant, and we may be unable to recover these costs if customers and users do not widely adopt these features. Further, use of generative AI tools by our employees or others could result in disclosure of confidential or sensitive company and customer data, reputational harm, and legal liability.
Current wording
We use generative AI processes and algorithms, including by deploying generative AI features in our products and services, which may result in adverse effects to our operations, legal liability, reputation and competitive risks. The use of generative and agentic AI at scale is relatively new, and may lead to challenges, concerns and risks that are significant or that we may not be able to predict. For example, AI algorithms use machine learning (“ML”) and predictive analytics which may be insufficient, biased, inaccurate or of poor quality, which could result in customer rejection or skepticism of our products, adversely impact the rights of individuals, affect our reputation or brand, and negatively affect our financial results. Additionally, we rely on third parties for certain AI features of our products and if such third parties do not provide us those features (or do not do so on acceptable terms), experience interruptions, or cease operating, we may need to work with another provider, which may take time or may not be possible, and could result in the disruption of certain of our products or services, affect our reputation or brand, and negatively affect our financial results. We could also face claims from third parties claiming infringement of their intellectual property or other proprietary rights with respect to materials used or created by generative or agentic AI tools or features that we believed to be available for use and not subject to such rights. The investment required to bring AI features to market and the costs associated with providing these features to our customers may be significant, and we may be unable to recover these costs if customers and users do not widely adopt these features. We currently offer our AI features at no additional cost, as we believe they will ultimately enhance user satisfaction, improve customer retention, and drive revenue. If such benefits are not realized, the associated investment costs could further negatively impact our margins. Further, use of generative AI tools by our employees or others could result in disclosure of confidential or sensitive company and customer data, reputational harm, and legal liability.
Previous wording
Unlike traditional communications and collaborations technologies, our services depend on our users’ high-speed broadband access to the internet, usually provided through a cable or digital subscriber line connection. Increasing numbers of users and increasing bandwidth requirements may degrade the performance of our platform due to capacity constraints and other internet infrastructure limitations. As our number of users has grown and their usage of communications capacity has increased, we have been required to make additional investments in network capacity to maintain adequate data transmission speeds, the availability of which may be limited, or the cost of which may be on terms unacceptable to us. If adequate capacity does not continue to be available to us to support our user base in the future, our network may be unable to achieve or maintain sufficiently high data transmission capacity, reliability, or performance. In addition, if internet service providers and other third parties providing internet services have outages or deteriorations in their quality of service, our users will not have access to our platform or may experience a decrease in the quality of our platform. Furthermore, as the rate of adoption of new technologies increases, the networks our platform relies on may not be able to sufficiently adapt to the increased demand for these services, including ours. Frequent or persistent interruptions could cause current or potential users to believe that our systems or platform are unreliable, leading them to switch to our competitors or to avoid our platform, which could permanently harm our business.
Current wording
Unlike traditional communications and collaboration technologies, our services depend on our users’ high-speed broadband access to the internet, usually provided through a cable or digital subscriber line connection. Increasing numbers of users and increasing bandwidth requirements may degrade the performance of our platform due to capacity constraints and other internet infrastructure limitations. As our number of users has grown and their usage of communications capacity has increased, we have been required to make additional investments in network capacity to maintain adequate data transmission speeds, the availability of which may be limited, or the cost of which may be on terms unacceptable to us. If adequate capacity does not continue to be available to us to support our user base in the future, our network may be unable to achieve or maintain sufficiently high data transmission capacity, reliability, or performance. In addition, if internet service providers and other third parties providing internet services have outages or deteriorations in their quality of service, our users will not have access to our platform or may experience a decrease in the quality of our platform. Furthermore, as the rate of adoption of new technologies increases, the networks our platform relies on may not be able to sufficiently adapt to the increased demand for these services, including ours. Frequent or persistent interruptions could cause current or potential users to believe that our systems or platform are unreliable, leading them to switch to our competitors or to avoid our platform, which could permanently harm our business.
Previous wording
On January 4, 2018, the Federal Communications Commission (“FCC”) released an order reclassifying broadband internet access as an information service, a regulatory regime generally referred to as network neutrality, subject to certain provisions of Title I of the Communications Act. The order requires broadband providers to publicly disclose accurate information regarding network management practices, performance characteristics, and commercial terms of their broadband internet access services sufficient to enable consumers to make informed choices regarding the purchase and use of such services, and entrepreneurs and other small businesses to develop, market, and maintain internet offerings. The new rules went into effect on June 11, 2018. Numerous parties filed judicial challenges to the order, and on October 1, 2019, the United States Court of Appeals for the District of Columbia Circuit released a decision that rejected nearly all of the challenges to the new rules, but reversed the FCC’s decision to prohibit all state and local regulation targeted at broadband internet service, requiring case-by-case determinations as to whether state and local regulation conflicts with the FCC’s rules. The court also required the FCC to reexamine three issues from the order but allowed the order to remain in effect, while the FCC conducts that review. On October 27, 2020, the FCC adopted an order concluding that the three issues remanded by the court did not provide a basis to alter its conclusions in the 2018 order. On October 19, 2023, the FCC adopted a notice of proposed rulemaking that would reinstate the 2018 rules and asked for comment on that proposal and on potential changes to those rules. We cannot predict whether or when the FCC will adopt new rules or the impact of any rules that may be adopted on our operations or business.
Current wording
On January 4, 2018, the Federal Communications Commission (“FCC”) released an order reclassifying broadband internet access as an information service, a regulatory regime generally referred to as network neutrality, subject to certain provisions of Title I of the Communications Act. The order requires broadband providers to publicly disclose accurate information regarding network management practices, performance characteristics, and commercial terms of their broadband internet access services sufficient to enable consumers to make informed choices regarding the purchase and use of such services, and entrepreneurs and other small businesses to develop, market, and maintain internet offerings. The new rules went into effect on June 11, 2018. Numerous parties filed judicial challenges to the order, and on October 1, 2019, the United States Court of Appeals for the District of Columbia Circuit released a decision that rejected nearly all of the challenges to the new rules, but reversed the FCC’s decision to prohibit all state and local regulation targeted at broadband internet service, requiring case-by-case determinations as to whether state and local regulation conflicts with the FCC’s rules. The court also required the FCC to reexamine three issues from the order but allowed the order to remain in effect, while the FCC conducts that review. On October 27, 2020, the FCC adopted an order concluding that the three issues remanded by the court did not provide a basis to alter its conclusions in the 2018 order. On October 19, 2023, the FCC adopted a notice of proposed rulemaking proposing to reinstate the 2015 rules, and on April 24, 2024, adopted an order that substantially reinstated those rules. On January 2, 2025, the U.S. Court of Appeals for the Sixth Circuit issued a decision overturning the FCC order. That decision remains subject to potential further appeals. We cannot predict the impact of the new rules on our operations or business.
Previous wording
In addition, a number of states have adopted or are adopting or considering legislation or executive actions that would regulate the conduct of broadband providers. After a federal court judge denied a request for a preliminary injunction against California’s state-specific network neutrality law, California began enforcing that law on March 25, 2021. A number of other states have adopted or are adopting or considering legislation or executive actions that would regulate the conduct of broadband providers. A similar law in Vermont is subject to a pending challenge, but went into effect on April 20, 2022 and the challenge has been suspended until an appeal in another case addressing state powers to adopt internet regulation is resolved. We cannot predict whether the FCC order or other state initiatives will be enforced, modified, overturned, or vacated by legal action of the court, federal legislation, or the FCC. In addition, the status of state regimes may be affected by the FCC's action in its new network neutrality proceeding. Under the FCC’s current rules, broadband internet access providers may be able to charge web-based services such as ours for priority access or favor services offered by our competitors or by the internet access providers themselves, which could result in increased costs and a loss of existing customers, impair our ability to attract new customers, and harm our business.
Current wording
In addition, a number of states have adopted or are adopting or considering legislation or executive actions that would regulate the conduct of broadband providers, including legislation to impose state-level network requirements in New York. After a federal court judge denied a request for a preliminary injunction against California’s state-specific network neutrality law, California began enforcing that law on March 25, 2021. A number of other states have adopted or are adopting or considering legislation or executive actions that would regulate the conduct of broadband providers. A similar law in Vermont is subject to a pending challenge, but went into effect on April 20, 2022 and the challenge has been suspended until an appeal in another case addressing state powers to adopt internet regulation is resolved. The FCC’s April 24 order, which, as described above, was overturned by the Sixth Circuit Court of Appeals, permits it to preempt any state-level network neutrality requirements that go beyond the requirements adopted in that order, but specifically held that the California law would not be preempted. We cannot predict whether the FCC order or other state initiatives will be enforced, modified, overturned, or vacated by legal action of the court, federal legislation, or the FCC. Under the FCC’s 2018 rules, which currently remain in effect, broadband internet access providers may be able to charge web-based services such as ours for priority access or favor services offered by our competitors or by the internet access providers themselves, which could result in increased costs and a loss of existing customers, impair our ability to attract new customers, and harm our business but the 2024 rules, if they go into effect, are intended to limit the ability of broadband internet access providers to engage in such behavior.
Previous wording
If there are changes to the regulatory structures in the United States or elsewhere that reduce investment in infrastructure by internet service providers, including a return of the network neutrality regulations that were repealed, any impacts of reduced investment that reduce network capacity or speed could have a negative effect on our business, operating results, and financial condition.
Current wording
If there are changes to the regulatory structures in the United States or elsewhere that reduce investment in infrastructure by internet service providers, including a return of the network neutrality regulations that were overturned, any impacts of reduced investment that reduce network capacity or speed could have a negative effect on our business, operating results, and financial condition.
Previous wording
Our security measures, and those of third parties upon which we rely, have been compromised in the past and may be compromised in the future. If our security measures are compromised in the future or if our information technology fails, this could harm our reputation, expose us to significant fines and liability, impair our sales, and harm our business. In addition, our products and services may be perceived as not being secure. This perception may result in customers and users curtailing or ceasing their use of our products, our incurring significant liabilities, and our business being harmed.
Current wording
Our security measures, and those of third parties with whom we work, have been compromised in the past and may be compromised in the future. If our security measures are compromised in the future or if our information technology fails, this could harm our reputation, expose us to significant fines and liability, impair our sales, and harm our business. In addition, if our products and services are perceived as not being secure, this could result in customers and users curtailing or ceasing their use of our products, our incurring significant liabilities, and our business being harmed.
Previous wording
In the ordinary course of our business, we and the third parties upon which we rely collect, receive, store, process, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, and share confidential, proprietary, and sensitive data, including data of ours, our customers, and our users, the data which includes personal information, customer and user content, health-related data, intellectual property, trade secrets, business plans, and financial information. We and the third parties upon which we rely face a variety of evolving threats, including but not limited to ransomware attacks, which could cause security incidents. Security incidents have occurred in the past and may occur in the future, resulting in unauthorized access to, loss or unauthorized disclosure of, or inadvertent disclosure of confidential, proprietary, and sensitive information.
Current wording
In the ordinary course of our business, we and the third parties with whom we work collect, receive, store, process, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, and share confidential, proprietary, and sensitive data, including data of ours, our customers, and our users, the data which includes personal information, customer and user content, health-related data, intellectual property, trade secrets, business plans, and financial information. We and the third parties upon which we rely face a variety of evolving threats, including but not limited to ransomware attacks, which could cause security incidents. We routinely investigate security incidents, which have occurred in the past and may occur in the future, that result in unauthorized access to, loss or unauthorized disclosure of, or inadvertent disclosure of confidential, proprietary, and sensitive information.
Previous wording
Cyberattacks, other malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our proprietary, confidential, and sensitive data and information technology systems, and those of the third parties upon which we rely. Cloud-based platform providers of products and services have been and are expected to continue to be targeted. Threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation-state and nation-state supported actors, and advanced persistent threat intrusions. Some actors now engage and are expected to continue to engage in cyberattacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties upon which we rely may be vulnerable to a heightened risk of these attacks, which could materially disrupt our systems and operations, supply chain, and ability to provide our services. We may be subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, credential stuffing, personnel misconduct or error, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, attacks enhanced or facilitated by AI, earthquakes, fires, floods, and other similar threats. Ransomware attacks, including those perpetrated by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations or our ability to provide our products or services, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Additionally, our platform, products, and services are relied on by a large number of companies worldwide and as a result, if our platform, products, or solutions are compromised, a significant number or all of our customers and their data could be simultaneously affected. The potential liability and associated consequences we could suffer as a result of such a large-scale event could be catastrophic and result in irreparable harm.
Current wording
Cyberattacks, other malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our proprietary, confidential, and sensitive data and information technology systems, and those of the third parties with whom we work. Cloud-based platform providers of products and services have been and are expected to continue to be targeted. Threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation-state and nation-state supported actors, and advanced persistent threat intrusions. Some actors now engage and are expected to continue to engage in cyberattacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties with whom we work may be vulnerable to a heightened risk of these attacks, which could materially disrupt our systems and operations, supply chain, and ability to provide our services. We and the third parties with whom we work are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, credential stuffing, personnel misconduct or error, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, attacks enhanced or facilitated by AI, earthquakes, fires, floods, and other similar threats. Ransomware attacks, including those perpetrated by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations or our ability to provide our products or services, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Additionally, our platform, products, and services are relied on by a large number of companies worldwide and as a result, if our platform, products, or solutions are compromised, a significant number or all of our customers and their data could be simultaneously affected. The potential liability and associated consequences we could suffer as a result of such a large-scale event could be catastrophic and result in irrepara…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
Future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program.
Current wording
Future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Furthermore, we have discovered, and may in the future discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program.
Previous wording
In addition, our reliance on third-party service providers could introduce new cybersecurity risks and vulnerabilities, including supply-chain attacks, and other threats to our business operations. We rely on third-party service providers and technologies to operate critical business systems to process confidential, proprietary, and sensitive data in a variety of contexts, including, without limitation, cloud-based infrastructure, data center facilities, encryption and authentication technology, employee email, content delivery to customers, and other functions. We also rely on third-party service providers to provide other products, services and parts, or otherwise to operate our business. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. If our third-party service providers experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if our third-party service providers fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties’ infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised.
Current wording
In addition, our reliance on third parties has in the past and could continue to introduce new cybersecurity risks and vulnerabilities, including supply-chain attacks, and other threats to our business operations. We rely on third parties to operate critical business systems to process confidential, proprietary, and sensitive data in a variety of contexts, including, without limitation, cloud-based infrastructure, data center facilities, encryption and authentication technology, employee email, content delivery to customers, and other functions. We also rely on third parties to provide other products, services and parts, or otherwise to operate our business. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. If the third parties with whom we work experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if the third parties with whom we work fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties’ infrastructure in our supply chain or that of the third parties with whom we work supply chains have not been compromised.
Previous wording
If our security measures are compromised, our reputation could be damaged; our data, information or intellectual property, or that of our customers, may be destroyed, stolen, or otherwise compromised; our business may be harmed; and we could incur significant liability. We take steps designed to detect and remediate vulnerabilities in our information systems and those of third parties upon whom we rely, but we may not detect or remediate all such vulnerabilities or do so in a timely manner. The threats and techniques used to exploit vulnerabilities change frequently and are often sophisticated in nature, and may be difficult to detect by security tools. Vulnerabilities could be exploited and result in a security incident. We have limited budgetary and human resources for detecting and remediating vulnerabilities and have experienced difficulties in hiring and retaining qualified security personnel, especially after our recent restructuring actions. We may experience delays in developing and deploying remedial measures, including patches, designed to address identified vulnerabilities, and our remedial measures may require action by our customers such as installing patches or updates, which may increase the amount of time a vulnerability remains unremediated. We have not always been able in the past and may be unable in the future to anticipate or prevent threats or techniques used to detect or exploit vulnerabilities in our information systems or third-party software, or obtain unauthorized access to or compromise our systems.
Current wording
If our security measures are compromised, as has occurred in the past, our reputation could be damaged; our data, information or intellectual property, or that of our customers, may be destroyed, stolen, or otherwise compromised; our business may be harmed; and we could incur significant liability. We take steps designed to detect and remediate vulnerabilities in our information systems and those of third parties with whom we work, but we may not detect or remediate all such vulnerabilities or do so in a timely manner. The threats and techniques used to exploit vulnerabilities change frequently and are often sophisticated in nature, and may be difficult to detect by security tools. Vulnerabilities could be exploited and result in a security incident. We have limited budgetary and human resources for detecting and remediating vulnerabilities and have experienced difficulties in hiring and retaining qualified security personnel, especially after our recent restructuring actions. We may experience delays in developing and deploying remedial measures, including patches, designed to address identified vulnerabilities, and our remedial measures may require action by our customers such as installing patches or updates, which may increase the amount of time a vulnerability remains unremediated. We have not always been able in the past and may be unable in the future to anticipate or prevent threats or techniques used to detect or exploit vulnerabilities in our information systems or third-party software, or obtain unauthorized access to or compromise our systems.
Previous wording
We will continue to make prioritization decisions based on, among other things, our available resources, the efficacy of our security tools, and the increasing workload to meet certain security obligations, to determine which vulnerabilities or security defects to fix and the timing of these fixes, which could result in an exploit that compromises security. In some cases, customers are responsible for installing our software updates, and until they do so, their service remains subject to the vulnerabilities addressed in the software update. Vulnerabilities and critical security defects, errors in remediating vulnerabilities or security defects, failure of third-party providers to remediate vulnerabilities or security defects, or customers not deploying security releases or deciding not to install software updates could result in claims of liability against us, damage our reputation, or otherwise harm our business. Security incidents and vulnerabilities, and concerns regarding privacy, data protection, and information security may also prevent some of our customers and users from using or cause some of our customers and users to stop using our solutions and fail to upgrade or renew their subscriptions. Failures to meet customers’ and users’ expectations with respect to security and confidentiality of their data and information could damage our reputation and affect our ability to retain customers and users, attract new customers and users, and grow our business. In addition, cybersecurity events or security vulnerabilities could result in breaches of our agreements with customers, lawsuits against us (including class action litigation), regulatory investigations or actions, and significant increases in costs, including costs for remediating the effects of such an event or vulnerability, lost revenue due to network downtime, and a decrease in customer and user trust, increases in insurance premiums due to cybersecurity incidents, increased costs to address cybersecurity issues, and attempts to prevent future incidents, fines, penalties, judgments and settlements, and attorney fees, and harm to our business and our reputation because of any such incident.
Current wording
We will continue to make prioritization decisions based on, among other things, our available resources, the efficacy of our security tools, and the increasing workload to meet certain security obligations, to determine which vulnerabilities or security defects to fix and the timing of these fixes, which could result in an exploit that compromises security. In some cases, customers are responsible for installing our software updates, and until they do so, their service remains subject to the vulnerabilities addressed in the software update. Vulnerabilities and critical security defects, errors in remediating vulnerabilities or security defects, failure of third-party providers to remediate vulnerabilities or security defects, or customers not deploying security releases or deciding not to install software updates could result in claims of liability against us, damage our reputation, or otherwise harm our business.
Previous wording
Any of the previously identified or similar threats could cause a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to confidential, proprietary, or sensitive data or our information technology systems, or those of the third parties upon whom we rely. A security incident or other interruption could disrupt our ability (and that of third parties upon whom we rely) to provide our services. We may expend significant resources or modify our business activities to try to protect against security incidents. Additionally, certain privacy, data protection, and information security obligations may require us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our information technology systems and sensitive data.
Current wording
Any of the previously identified or similar threats could cause a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to confidential, proprietary, or sensitive data or our information technology systems, or those of the third parties with whom we work A security incident or other interruption could disrupt our ability (and that of third parties with whom we work) to provide our services. We expend significant resources or modify our business activities to try to protect against security incidents. Additionally, certain privacy, data protection, and information security obligations require us to implement and maintain certain security measures or industry-standard or reasonable security measures to protect our information technology systems and sensitive data.
Previous wording
Many governments have enacted laws requiring companies to provide notice of data security incidents, including those recently promulgated by the SEC. Such laws are inconsistent, and compliance in the event of a widespread data breach is costly. In addition, some of our customers require us to notify them of data security breaches.
Current wording
Many governments have enacted laws requiring companies to provide notice of data security incidents, including those recently promulgated by the SEC. These laws may also require us to take certain measures, such as providing credit monitoring to individuals. Such laws are inconsistent, and compliance in the event of a widespread data breach is costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences. In addition, some of our customers require us to notify them of data security breaches.
Previous wording
Actual or perceived security gaps or security compromises experienced in our industry or by our competitors, our customers, a third party upon whom we rely, or us could cause us to experience adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive data (including personal information); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; diversion of management attention; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may cause customers to stop using our services, deter new customers from using our services, and negatively impact our ability to grow and operate our business.
Current wording
Actual or perceived security gaps or security compromises experienced in our industry or by our competitors, our customers, a third party with whom we work, or us could cause us to experience adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive data (including personal information); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; diversion of management attention; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may cause customers to stop using our services, deter new customers from using our services, and negatively impact our ability to grow and operate our business.
Previous wording
While our employee headcount both in the United States and internationally has generally increased over time, we have undertaken, and may undertake from time to time in the future, restructuring actions to better align our financial model and. For example, in February 2023, we commenced certain restructuring actions, designed to reduce operating costs and continue advancing our ongoing commitment to profitable growth.
Current wording
While our employee headcount both in the United States and internationally has generally increased over time, we have undertaken, and may undertake from time to time in the future, restructuring actions to better align our financial model. For example, in February 2023, we commenced certain restructuring actions, designed to reduce operating costs and continue advancing our ongoing commitment to profitable growth.
Previous wording
These organizational changes may not achieve or sustain the targeted benefits, or the benefits, even if achieved, may not be adequate to meet our long-term profitability and operational expectations. Steps we take to manage our business operations, including workplace policies for employees, and to align our operations with our strategies for future growth, may adversely affect our reputation and brand, our ability to recruit, retain and motivate highly skilled personnel. Additionally, while we expect to continue to grow our business and operations over time, we have encountered in the past, and may encounter in the future, risks and uncertainties frequently experienced by growing companies in rapidly changing industries. Our ability to manage our growth and business operations effectively and to integrate new employees, technologies and acquisitions into our existing business will require us to continue to expend resources to continue to support our global user-base and to retain, attract, train, motivate and manage employees. This places a continuous, significant strain on our management, operational, and financial resources. If we fail to achieve the necessary level of efficiency in our organization as it grows, or if we are not able to accurately forecast future growth, our business would be harmed.
Current wording
These organizational changes may not achieve or sustain the targeted benefits, or the benefits, even if achieved, may not be adequate to meet our long-term profitability and operational expectations. Steps we take to manage our business operations, including workplace policies for employees, and to align our operations with our strategies for future growth, may adversely affect our reputation and brand, our ability to recruit, retain and motivate highly skilled personnel. Additionally, while we expect to continue to grow our business and operations over time, we have encountered in the past, and may encounter in the future, risks and uncertainties frequently experienced by growing companies in rapidly changing industries. Our ability to manage our growth and business operations effectively and to integrate new employees, technologies and acquisitions into our existing business will require us to continue to expend resources to support our global user-base and to retain, attract, train, motivate and manage employees. This places a continuous, significant strain on our management, operational, and financial resources. If we fail to achieve the necessary level of efficiency in our organization as it grows, or if we are not able to accurately forecast future growth, our business would be harmed.
Previous wording
Our success depends in a large part upon the continued service of key members of our senior management team. In particular, our founder, President and Chief Executive Officer, Eric S. Yuan, is critical to our overall management, as well as the continued development of our products, services, the Zoom platform, our culture, our strategic direction, engineering, and our global operations, including regions such as the United States, Europe, Middle East, and Africa (“EMEA”), and Asia Pacific (“APAC”). All of our executive officers are at-will employees, and we do not maintain any key person life insurance policies. Any changes in our senior management team in particular, even in the ordinary course of business, may be disruptive to our business. Such changes may result in a loss of institutional knowledge and cause disruptions to our business. If our senior management team fails to work together effectively or execute our plans and strategies on a timely basis as a result of management turnover or otherwise, our business could be harmed.
Current wording
Our success depends in a large part upon the continued service of key members of our senior management team. In particular, our founder, President and Chief Executive Officer, Eric S. Yuan, is critical to our overall management, as well as the continued development of our products, services, the Zoom platform, our culture, our strategic direction, engineering, and our global operations, including regions such as the United States, Europe, Middle East, and Africa (“EMEA”), and Asia Pacific (“APAC”). All of our executive officers are at-will employees, and we do not maintain any key person life insurance policies. Any changes in our senior management team in particular, even in the ordinary course of business, including the transition of our Chief Financial Officer in 2024, may be disruptive to our business. Such changes may result in a loss of institutional knowledge and cause disruptions to our business. If our senior management team fails to work together effectively or execute our plans and strategies on a timely basis as a result of management turnover or otherwise, our business could be harmed.
Previous wording
Our platform addresses the communications and collaboration needs of users worldwide, and we see international expansion as a major opportunity. Our revenue from APAC and EMEA collectively represented 28.7% and 30.5%, and 33.3% of our revenue for the fiscal years ended January 31, 2024, 2023, and 2022, respectively. We plan to add local sales support in further select international markets over time. Our customers include multinational corporations with global users, and we expect to continue to expand our international operations, which includes opening offices in new jurisdictions and providing our platform in additional languages to support the needs of these multinational corporations. Any new markets or countries into which we attempt to allow users to access our services or sell subscriptions to our platform may not be receptive. If we are not able to satisfy certain government- and industry-specific requirements, we have in the past and may in the future experience service outages or other adverse consequences, including interference with our local operations or restrictions on our ability to continue our operations in certain jurisdictions, that would impair our ability to operate or expand further into certain markets. As an example, if local or national Chinese government agencies interfered with or placed restrictions on our research and development operations in China, our ability to design new products, features, and functionality on a timely basis or at all, or our ability to effectively deliver our services, would be adversely impacted as a significant portion of our research and development organization resides in China. In addition, our ability to manage our business and conduct our operations internationally in the future requires considerable management attention and resources and is subject to the particular challenges of supporting a rapidly growing business in an environment of multiple languages, cultures, customs, legal and regulatory systems, alternative dispute systems, and commercial markets. Future international expansion will require investment of significant funds and other resources. We also face risks related to recruiting and retaining talented and capable employees outside the United States, including complying with complex employment- and compensation-related laws, regulations, and practices in these international jurisdictions, and maintaining our company culture across all of our offices. We may also be unable to grant equity compensation to employees in certain countries outside of the United States due to the complexities of local laws and regulations. This may require us to offer equally compelling alternatives to supplement our compensation, such as long-term cash compensation plans or increased short-term cash compensation, in order to continue to attract and retain employees in these jurisdictions.
Current wording
Our platform addresses the communications and collaboration needs of users worldwide, and we see international expansion as a major opportunity. Our revenue from APAC and EMEA collectively represented 28.2% and 28.7%, and 30.5% of our revenue for the fiscal years ended January 31, 2025, 2024, and 2023, respectively. Our customers include multinational corporations with global users, and we expect to continue to expand our international operations, which includes opening offices in new jurisdictions and providing our platform in additional languages to support the needs of these multinational corporations. Any new markets or countries into which we attempt to allow users to access our services or sell subscriptions to our platform may not be receptive. If we are not able to satisfy certain government- and industry-specific requirements, we have in the past and may in the future experience service outages or other adverse consequences, including interference with our local operations or restrictions on our ability to continue our operations in certain jurisdictions, that would impair our ability to operate or expand further into certain markets. As an example, if local or national Chinese government agencies interfered with or placed restrictions on our research and development operations in China, our ability to design new products, features, and functionality on a timely basis or at all, or our ability to effectively deliver our services, would be adversely impacted as a significant portion of our research and development organization resides in China. In addition, our ability to manage our business and conduct our operations internationally in the future requires considerable management attention and resources and is subject to the particular challenges of supporting a rapidly growing business in an environment of multiple languages, cultures, customs, legal and regulatory systems, alternative dispute systems, and commercial markets. Future international expansion will require investment of significant funds and other resources. We also face risks related to recruiting and retaining talented and capable employees outside the United States, including complying with complex employment- and compensation-related laws, regulations, and practices in these international jurisdictions, and maintaining our company culture across all of our offices. We may also be unable to grant equity compensation to employees in certain countries outside of the United States due to the complexities of local laws and regulations. This may require us to offer equally compelling alternatives to supplement our compensation, such as long-term cash compensation plans or increased short-term cash compensation, in order to continue to attract and retain employees in these jurisdictions.
Previous wording
•changes in diplomatic and trade relationships, including the continuing deterioration in diplomatic relations between the United States and China, the conflict in Israel and the surrounding area, and the continuing war between Russia and Ukraine;
Current wording
•changes in diplomatic and trade relationships, including the continuing deterioration in diplomatic relations between the United States and China, or deterioration in diplomatic relations between the United States and countries with which the United States has traditionally enjoyed close ties and alliances, and the ongoing conflicts between Russia and Ukraine and in the Middle East;
Previous wording
Geopolitical tension between the United States and China, or between other countries, such as Taiwan, and China, may intensify and lead to increased scrutiny of our business operations in China.
Current wording
Geopolitical tension between the United States and China, or between other economies, such as Taiwan, and China, may intensify and lead to increased scrutiny of our business operations in China.
Previous wording
In June and July 2020, we received subpoenas from the Department of Justice’s U.S. Attorney’s Office for the Eastern District of New York (“EDNY”) and the Department of Justice’s U.S. Attorney’s Office for the Northern District of California (“NDCA”). The EDNY and NDCA subpoenas requested information about (among other things) our interactions with foreign governments and/or foreign political parties, including the Chinese government, as well as about storage of and access to user data, including the use of servers based overseas. In addition, the EDNY subpoena requested information about the actions we took responding to law enforcement requests from the Chinese government. The NDCA subpoena also requested documents and information about (among other things) contacts between our employees and representatives of the Chinese government, and any attempted or successful influence by any foreign government in our policies, procedures, practices, and actions as they relate to users in the United States. We are fully cooperating with these investigations and have been conducting our own thorough internal investigation. These investigations are ongoing, and we do not know when they will be completed, which facts we will ultimately discover as a result of the investigations, or what actions the government may or may not take. We cannot predict the outcome of these investigations, and a negative outcome in any or all of these matters could cause us to incur substantial fines, penalties, or other financial exposure, as well as material reputational harm, a loss of customer and user confidence and business, additional expenses, and other harm to our business.
Current wording
In June and July 2020, we received subpoenas from the Department of Justice’s U.S. Attorney’s Office for the Eastern District of New York (“EDNY”) and the Department of Justice’s U.S. Attorney’s Office for the Northern District of California (“NDCA”). The EDNY and NDCA subpoenas requested information about (among other things) our interactions with foreign governments and/or foreign political parties, including the Chinese government, as well as about storage of and access to user data, including the use of servers based overseas. In addition, the EDNY subpoena requested information about the actions we took responding to law enforcement requests from the Chinese government. The NDCA subpoena also requested documents and information about (among other things) contacts between our employees and representatives of the Chinese government, and any attempted or successful influence by any foreign government in our policies, procedures, practices, and actions as they relate to users in the United States. We are fully cooperating with these investigations and have conducted our own thorough internal investigation. These investigations are ongoing, and we do not know when they will be completed, which facts we will ultimately discover as a result of the investigations, or what actions the government may or may not take. We cannot predict the outcome of these investigations, and a negative outcome in any or all of these matters could cause us to incur substantial fines, penalties, or other financial exposure, as well as material reputational harm, a loss of customer and user confidence and business, additional expenses, and other harm to our business.
Previous wording
We recognize revenue from subscriptions to our platform over the terms of these subscriptions. As a result, a portion of the revenue we report in each quarter is derived from the recognition of deferred revenue relating to subscriptions entered into during previous quarters. Consequently, a decline in new or renewed subscriptions in any single quarter may have an immaterial impact on the revenue that we recognize for that quarter. However, such a decline will negatively affect our revenue in future quarters. Accordingly, the effect of significant downturns in sales and potential changes in our pricing policies or rate of customer expansion or retention may not be fully reflected in our results of operations until future periods. In addition, a significant portion of our costs is expensed as incurred, while revenue is recognized over the term of the subscription. As a result, growth in the number of new customers and users could continue to result in our recognition of higher costs and lower revenue in the earlier periods of our subscriptions. Finally, our subscription-based revenue model also makes it difficult for us to rapidly increase our revenue through additional sales in any period, as revenue from new customers or from existing customers that increase their use of our platform or upgrade to a higher-priced plan must be recognized over the applicable subscription term.
Current wording
We recognize revenue from subscriptions to our platform over the terms of these subscriptions. As a result, a portion of the revenue we report in each quarter is derived from the recognition of deferred revenue relating to subscriptions entered into during previous quarters. Consequently, a decline in new or renewed subscriptions in any single quarter may have an immaterial impact on the revenue that we recognize for that quarter. However, such a decline will negatively affect our revenue in future quarters. Accordingly, the effect of significant downturns in sales and potential changes in our pricing policies or rate of customer expansion or retention may not be fully reflected in our results of operations until future periods. In addition, a significant portion of our costs is expensed as incurred, while revenue is recognized over the term of the subscription. As a result, growth in the number of new customers and users could continue to result in our recognition of higher costs and lower revenue in the earlier periods of our subscriptions. Finally, our subscription-based revenue model also makes it difficult for us to rapidly increase our revenue through additional sales in any period, as revenue from new customers or from existing customers who increase their use of our platform or upgrade to a higher-priced plan must be recognized over the applicable subscription term.
Previous wording
We sell to customers globally and have international operations primarily in Australia, China, and the U.K. As we continue to expand our international operations, we will become more exposed to the effects of fluctuations in currency exchange rates. Although the majority of our cash generated from revenue is denominated in U.S. dollars, a portion of our revenue is denominated in foreign currencies, and our expenses are generally denominated in the currencies of the jurisdictions in which we conduct our operations. For the fiscal years ended January 31, 2024, 2023, and 2022, 19.3%, 20.0%, and 22.6% of our revenue, respectively, and 13.7%, 10.8%, and 16.8% of our expenses, respectively, were denominated in currencies other than U.S. dollars. Because we conduct business in currencies other than U.S. dollars but report our results of operations in U.S. dollars, we also face remeasurement exposure to fluctuations in currency exchange rates, which could hinder our ability to predict our future results and earnings and could materially impact our results of operations. For example, for the fiscal year ended January 31, 2024, our total revenue was lower than anticipated in part due to the strengthening of the U.S. dollar. We do not currently maintain a program to hedge exposures to non-U.S. dollar currencies.
Current wording
We sell to customers globally and have international operations primarily in Australia, China, and the U.K. As we continue to expand our international operations, we will become more exposed to the effects of fluctuations in currency exchange rates. Although the majority of our cash generated from revenue is denominated in U.S. dollars, a portion of our revenue is denominated in foreign currencies, and our expenses are generally denominated in the currencies of the jurisdictions in which we conduct our operations. For the fiscal years ended January 31, 2025, 2024, and 2023, 19.3%, 19.3%, and 20.0% of our revenue, respectively, and 16.4%, 13.7%, and 10.8% of our expenses, respectively, were denominated in currencies other than U.S. dollars. Because we conduct business in currencies other than U.S. dollars but report our results of operations in U.S. dollars, we also face remeasurement exposure to fluctuations in currency exchange rates, which could hinder our ability to predict our future results and earnings and could materially impact our results of operations. For example, for the fiscal year ended January 31, 2025, our total revenue was lower than anticipated in part due to the strengthening of the U.S. dollar. We do not currently maintain a program to hedge exposures to non-U.S. dollar currencies.
Previous wording
•non-compliance with terms and conditions of government contracts, or with representations or certifications made in connection with government contracts, can result in significantly more adverse consequences than we typically would expect in the commercial market, including, depending on the circumstances, criminal liability, liability under the civil False Claims Act, and/or suspension or debarment from doing business with governmental entities; and
Current wording
•non-compliance with terms and conditions of government contracts, or with representations or certifications made in connection with government contracts, can result in significantly more adverse consequences than we typically would expect in the commercial market, including, depending on the circumstances, criminal liability, liability under the civil False Claims Act, and/or suspension or debarment from doing business with governmental entities;
Previous wording
In May 2021, the Biden Administration issued an Executive Order requiring federal agencies to implement additional information technology security measures, including, among other things, requiring agencies to adopt multifactor authentication and encryption for data at rest and in transit to the maximum extent consistent with Federal records laws and other applicable laws. The Executive Order will lead to the development of secure software development practices and/or criteria for a consumer software labeling program, which will reflect a baseline level of secure practices, for software that is developed and sold to the
Current wording
In May 2021, the Biden Administration issued an Executive Order requiring federal agencies to implement additional information technology security measures, including, among other things, requiring agencies to adopt multifactor authentication and encryption for data at rest and in transit to the maximum extent consistent with Federal records laws and other applicable laws. The Executive Order will lead to the development of secure software development practices and/or criteria for a consumer software labeling program, which will reflect a baseline level of secure practices, for software that is developed and sold to the U.S. federal government. Software developers will be required to provide visibility into their software and make security data publicly available. Due to this Executive Order, federal agencies may require us to modify our cybersecurity practices and policies, thereby increasing our compliance costs. If we are unable to meet the requirements of the Executive Order, our ability to work with the U.S. government may be impaired and may result in a loss of revenue.
Showing the first 40 of 73 pairs. Open the source sections for the rest.
Rearranged current paragraphs (5)
Current report — wording carried from elsewhere
Security incidents and vulnerabilities, and concerns regarding privacy, data protection, and information security may also prevent some of our customers and users from using or cause some of our customers and users to stop using our solutions and fail to upgrade or renew their subscriptions. Failures to meet customers’ and users’ expectations with respect to security and confidentiality of their data and information could damage our reputation and affect our ability to retain customers and users, attract new customers and users, and grow our business.
Current report — wording carried from elsewhere
In addition, cybersecurity events or security vulnerabilities could result in breaches of our agreements with customers, lawsuits against us (including class action litigation), regulatory investigations or actions, and significant increases in costs, including costs for remediating the effects of such an event or vulnerability, lost revenue due to network downtime, and a decrease in customer and user trust, increases in insurance premiums due to cybersecurity incidents, increased costs to address cybersecurity issues, and attempts to prevent future incidents, fines, penalties, judgments and settlements, and attorney fees, and harm to our business and our reputation because of any such incident.
Current report — wording carried from elsewhere
Personal Information, Singapore’s Personal Data Protection Act, and India's new privacy legislation, the Digital Personal Data Protection Act.
Current report — wording carried from elsewhere
Additionally, regulators are increasingly scrutinizing companies that process minors' data and/or provide online services or other interactive platforms used by minors. Numerous laws, regulations, and legally-binding codes, such as the Children’s
Current report — wording carried from elsewhere
Further, the U.S. Government has expressed concerns with the security of information and communications technology and services (“ICTS”) sourced from providers in China, Russia, and other jurisdictions. In May 2019, an executive order was issued invoking national emergency economic powers to implement a framework to regulate the acquisition or transfer of ICTS in transactions that imposed undue national security risks. The executive order is subject to implementation by the Secretary of
Rearranged previous paragraphs (3)
Previous report — wording carried elsewhere
U.S. federal government. Software developers will be required to provide visibility into their software and make security data publicly available. Due to this Executive Order, federal agencies may require us to modify our cybersecurity practices and policies, thereby increasing our compliance costs. If we are unable to meet the requirements of the Executive Order, our ability to work with the U.S. government may be impaired and may result in a loss of revenue.
Previous report — wording carried elsewhere
Outside the United States, an increasing number of laws, regulations, and industry standards related to privacy, data protection, and information security may govern. For example, the European Union’s General Data Protection Regulation (“EU
Previous report — wording carried elsewhere
Amendment to the U.S. Constitution and on the ground that it is preempted by Section 230. We cannot predict whether any such state legislation will be adopted, enforced, modified, overturned, or vacated.