Zoom Communications, Inc.

Previous wording

Our business is subscription based, and customers are not obligated to, and may choose not to, renew their subscriptions after their existing subscriptions expire. Customers may also terminate or reduce the size of their existing subscriptions. As a result, we cannot provide assurance that customers will renew their subscriptions utilizing the same tier of plan, upgrade to a higher-priced tier, or purchase additional products, if they renew at all. Renewals of subscriptions to our platform may decline or fluctuate because of several factors, such as dissatisfaction with our products and support, a customer no longer having a need for our products, or a belief that a competitor’s product is better, more secure, or less expensive than our products and platform. For example, during the COVID-19 pandemic, we saw a significant increase in usage and subscriptions. As a result, our customer base shifted largely from businesses and enterprises to a mix of businesses, enterprises, and consumers. Following the pandemic, some of our customers reduced or discontinued their use of our platform, and additional customers may do so in the future. Additionally, this shift in mix has resulted and may continue to result in higher non-renewal rates than we have experienced in the past. Renewals are also impacted by reductions in customer information technology spending budgets or a decision by the customer to consolidate their spending budgets on one of our competitor’s platforms, both of which are more likely to occur during periods of high inflation or recessionary or uncertain economic environments. We must continually add new customers and licenses to grow our business and to replace customers and licenses who choose not to continue to use our platform. Finally, any decrease in user satisfaction with our products or support would harm our brand, word-of-mouth referrals, and ability to grow.

Current wording

Our business is subscription based, and customers are not obligated to, and may choose not to, renew their subscriptions after their existing subscriptions expire. Customers may also terminate or reduce the size of their existing subscriptions. As a result, we cannot provide assurance that customers will renew their subscriptions utilizing the same tier of plan, upgrade to a higher-priced tier, or purchase additional products, if they renew at all. Renewals of subscriptions to our platform may decline or fluctuate because of several factors, such as the composition of our customer base dissatisfaction with our products and support, a customer no longer having a need for our products, or a belief that a competitor’s product is better, more secure, or less expensive than our products and platform. Renewals are also impacted by reductions in customer information technology spending budgets or a decision by the customer to consolidate their spending budgets on one of our competitor’s platforms, both of which are more likely to occur during periods of high inflation or recessionary or uncertain economic environments. We must continually add new customers and licenses to grow our business and to replace customers and licenses who choose not to continue to use our platform. Finally, any decrease in user satisfaction with our products or support would harm our brand, word-of-mouth referrals, and ability to grow.

Previous wording

Our revenue growth rate has fluctuated in prior periods, and may continue to decline in future periods.

Current wording

Our revenue growth rate has fluctuated in prior periods, and may decline in future periods.

Previous wording

Our revenue growth has fluctuated in prior periods. You should not rely on the revenue growth of any prior quarterly or annual period as an indication of our future performance. There are no assurances we will be able to sustain our revenue growth in future periods, and our revenue growth rate may continue to remain flat or decline in future periods. Many factors have and may contribute to declines in our growth rate, including higher market penetration, increased competition, macroeconomic conditions, such as inflation, recessionary or uncertain economic environments, fluctuating foreign currency exchange rates, slowing demand for our platform, a lower than anticipated capitalization on growth opportunities, and the maturation of our business, among others. Our growth rate could adversely affect investors’ perceptions of our business and the trading price of our Class A common stock could be adversely affected.

Current wording

Our revenue growth has fluctuated in prior periods. You should not rely on the revenue growth of any prior quarterly or annual period as an indication of our future performance. There are no assurances we will be able to sustain our revenue growth in future periods, and our revenue growth rate may remain flat or decline in future periods. Many factors have and may contribute to declines in our growth rate, including higher market penetration, increased competition, macroeconomic conditions, such as inflation, recessionary or uncertain economic environments, fluctuating foreign currency exchange rates, slowing demand for our platform, a lower than anticipated capitalization on growth opportunities, and the maturation of our business, among others. Our growth rate could adversely affect investors’ perceptions of our business and the trading price of our Class A common stock could be adversely affected.

Previous wording

Interruptions, delays, or outages in service from our co-located data centers or cloud hosting services and a variety of other factors, would impair the delivery of our services, require us to issue credits or pay penalties, and harm our business.

Current wording

Interruptions, delays, or outages in service from our co-located data centers or cloud hosting services and a variety of other factors, would impair, and in the past have impaired, the delivery of our services, require us to issue credits or pay penalties, and harm our business.

Previous wording

We currently serve our users from various co-located data centers located throughout the world. We also utilize cloud hosting services such as Amazon Web Services and Oracle Cloud for the hosting of certain critical aspects of our business and Microsoft Azure for limited customer-specified managed services. As part of our distributed meeting architecture, we establish private links between data centers that automatically transfer data between various data centers. Damage to, or failure of, these data centers has in the past resulted in and could in the future result in interruptions or delays in our services. In addition, we have experienced, and may in the future experience, other interruptions and delays in our services caused by a variety of other factors, including, but not limited to, infrastructure changes, vendor (including cloud hosting) issues, human or software errors, viruses, security attacks, ransomware or cyber extortion, fraud, general internet availability issues, spikes in usage, local administrative actions, changes to legal or permitting requirements, and denial of service issues. In some instances, we may not be able to identify the cause or causes of these problems within an acceptable period of time. For example, we have experienced partial outages in our services that impacted a subset of our users for a limited number of hours. Additionally, in connection with the addition of new data centers or expansion or consolidation of our existing data center facilities or other reasons, we may move or transfer our data and our users’ metadata to other data centers, not including our China data center. Despite precautions that we take during this process, any unsuccessful data transfers may impair or cause disruptions in the delivery of our service, and we may incur significant costs in connection with any such move or transfer. Interruptions, delays, or outages in our services would reduce our revenue; may require us to issue credits or pay penalties; may subject us to claims and litigation; and may cause customers to terminate their subscriptions and adversely affect our ability to attract new customers. Our ability to attract and retain customers and licenses depends on our ability to provide customers and users with a highly reliable platform and even minor interruptions or delays in our services could harm our business.

Current wording

We currently serve our users from various co-located data centers located throughout the world. We also utilize cloud hosting services such as Amazon Web Services and Oracle Cloud for the hosting of certain critical aspects of our business and Microsoft Azure for limited customer-specified managed services. As part of our distributed meeting architecture, we establish private links between data centers that automatically transfer data between various data centers. Damage to, or failure of, these data centers has in the past resulted in and could in the future result in interruptions or delays in our services. In addition, we have experienced, and may in the future experience, other interruptions and delays in our services caused by a variety of other factors, including, but not limited to, infrastructure changes, vendor (including cloud hosting) issues, human or software errors, viruses, security attacks, ransomware or cyber extortion, fraud, general internet availability issues, spikes in usage, local administrative actions, changes to legal or permitting requirements, and denial of service issues. In some instances, we may not be able to identify the cause or causes of these problems within an acceptable period of time. For example, we have experienced partial outages in our services that impacted a subset of our users for a limited number of hours. Additionally, in connection with the addition of new data centers, expansion or consolidation of our existing data center facilities, or other reasons, we may move or transfer our data and our users’ metadata to other data centers, not including our China data center. Despite precautions that we take during this process, any unsuccessful data transfers may impair or cause disruptions in the delivery of our service, and we may incur significant costs in connection with any such move or transfer. Interruptions, delays, or outages in our services would reduce our revenue; may require us to issue credits or pay penalties; may subject us to claims and litigation; and may cause customers to terminate their subscriptions and adversely affect our ability to attract new customers. Our ability to attract and retain customers and licenses depends on our ability to provide customers and users with a highly reliable platform and even minor interruptions or delays in our services could harm our business.

Previous wording

•UCaaS and legacy PBX providers, including Avaya, RingCentral, and 8x8; and

Current wording

•UCaaS and legacy PBX providers, including Avaya, RingCentral, and 8x8;

Previous wording

In February 2022, we launched Zoom Contact Center, an omnichannel contact center solution that is optimized for video, which competes against companies that offer similar services, such as Five9, Genesys, and NICE inContact, and new competitors that may enter that market in the future. As we continue to build out our platform, we may face increased competition against companies that offer similar services and new competitors that may enter that market in the future. During the COVID-19 pandemic, we saw a significant increase in usage and subscriptions from smaller customers, many of whom are consumers or small and medium sized businesses. With respect to these smaller customers, we face competition from more consumer-oriented platforms, most of which have more experience with the consumer market than we do. Further, many of our actual and potential competitors benefit from competitive advantages over us, such as greater name recognition; longer operating histories; more varied products and services; larger marketing budgets; more established marketing, customers and partner relationships; more third-party integrations; greater accessibility across devices and applications; greater access to larger user bases; major distribution agreements with hardware manufacturers and resellers; and greater financial, technical, and other resources. Some of our competitors may make acquisitions or strategic investments or enter into strategic relationships to offer a broader range of products and services than we do, which may prevent us from using such third parties' technology or offering such products or services. These combinations may make it more difficult for us to compete effectively. We expect these trends to continue as competitors attempt to strengthen or maintain their market positions.

Current wording

As we continue to build out our platform, we may face increased competition from companies that offer similar services and new competitors that may enter that market in the future. Our customers also include consumers or small and medium-sized businesses. With respect to these smaller customers, we face competition from more consumer-oriented platforms, most of which have more experience with the consumer market than we do. Further, many of our actual and potential competitors benefit from competitive advantages over us, such as greater name recognition; longer operating histories; more varied products and services; larger marketing budgets; more established marketing, customers and partner relationships; more third-party integrations; greater accessibility across devices and applications; greater access to larger user bases; major distribution agreements with hardware manufacturers and resellers; and greater financial, technical, and other resources. Some of our competitors may make acquisitions or strategic investments or enter into strategic relationships to offer a broader range of products and services than we do, which may prevent us from using such third parties' technology or offering such products or services. These combinations may make it more difficult for us to compete effectively. We expect these trends to continue as competitors attempt to strengthen or maintain their market positions.

Previous wording

Our business may be significantly affected by changes in the economy, such as high inflation and the responses by central banking authorities to control such inflation, recessionary or uncertain environments, fluctuations in the foreign currency exchange rates and geopolitical tensions and military conflicts, including the ongoing conflicts between Russia and Ukraine and in the Middle East, and tariffs and trade tensions, including the United States' ongoing trade disputes with China and other countries. While some customers may view a subscription to our platform as a cost-saving purchase, decreasing the need for business travel, others may view a subscription to our platform as a discretionary purchase, and our customers may reduce their information technology spending on our platform during an economic downturn or during times of economic uncertainty. Given current economic conditions, including inflation, we have experienced and may continue to experience a loss of users and customers, as well as a reduction in demand for our platform, especially if the effects of the current economic environment have a prolonged impact on various industries that our unified communications and collaboration platform addresses. In addition to the foregoing, adverse developments that affect financial institutions, transactional counterparties or other third parties, such as bank failures, or concerns or speculation about any similar events or risks, could lead to market-wide liquidity problems, which in turn may cause third parties, including customers, to become unable to meet their obligations under various types of financial arrangements as well as general disruptions or instability in the financial markets. Moreover, we have lost and may continue to lose customers as a result of such customers ceasing to do business, and we have experienced and may continue to experience a material increase in longer payment cycles and greater difficulty in collecting accounts receivable from certain customers. These issues may continue in the future if current economic conditions continue or worsen.

Current wording

Our business may be significantly affected by changes in the economy, such as high inflation and the responses by central banking authorities to control such inflation, recessionary or uncertain environments, fluctuations in the foreign currency exchange rates and geopolitical tensions and military conflicts, and tariffs, the threat of new or increased tariffs and trade tensions, including the United States' ongoing trade disputes with China and other countries. While some customers may view a subscription to our platform as a cost-saving purchase, decreasing the need for business travel, others may view a subscription to our platform as a discretionary purchase, and our customers may reduce their information technology spending on our platform during an economic downturn or during times of economic uncertainty. Given current economic conditions, including inflation, we have experienced and may continue to experience a loss of users and customers, as well as a reduction in demand for our platform, especially if the effects of the current economic environment have a prolonged impact on various industries that our unified communications and collaboration platform addresses. In addition to the foregoing, adverse developments that affect financial institutions, transactional counterparties or other third parties, such as bank failures, or concerns or speculation about any similar events or risks, could lead to market-wide liquidity problems, which in turn may cause third parties, including customers, to become unable to meet their obligations under various types of financial arrangements as well as general disruptions or instability in the financial markets. Moreover, we have lost and may continue to lose customers as a result of such customers ceasing to do business, and we have experienced and may continue to experience a material increase in longer payment cycles and greater difficulty in collecting accounts receivable from certain customers. These issues may continue in the future if current economic conditions continue or worsen.

Previous wording

We are subject to requirements imposed by app stores such as those operated by Apple and Google, who may change their technical requirements or policies in a manner that adversely impacts the way in which we or our partners collect, use and share data from users. For example, Apple recently began requiring mobile applications using its iOS mobile operating system to obtain a user’s permission to track them or access their device’s advertising identifier for certain purposes. The long-term impact of these and any other privacy and regulatory changes remains uncertain. If we do not comply with applicable requirements imposed by app stores, we could lose access to the app store and users, and our business would be harmed.

Current wording

We are subject to requirements imposed by app stores such as those operated by Apple and Google, who may change their technical requirements or policies in a manner that adversely impacts the way in which we or our partners collect, use and share data from users. For example, Apple requires mobile applications using its iOS mobile operating system to obtain a user’s permission to track them or access their device’s advertising identifier for certain purposes. The long-term impact of these and any other privacy and regulatory changes remains uncertain. If we do not comply with applicable requirements imposed by app stores, we could lose access to the app store and users, and our business would be harmed.

Previous wording

We use generative AI processes and algorithms, including by deploying generative AI features in our products and services, which may result in adverse effects to our operations, legal liability, reputation and competitive risks. The use of generative and agentic AI at scale is relatively new, and may lead to challenges, concerns and risks that are significant or that we may not be able to predict. For example, AI algorithms use machine learning (“ML”) and predictive analytics which may be insufficient, biased, inaccurate or of poor quality, which could result in customer rejection or skepticism of our products, adversely impact the rights of individuals, affect our reputation or brand, and negatively affect our financial results. Additionally, we rely on third parties for certain AI features of our products and if such third parties do not provide us those features (or do not do so on acceptable terms), experience interruptions, or cease operating, we may need to work with another provider, which may take time or may not be possible, and could result in the disruption of certain of our products or services, affect our reputation or brand, and negatively affect our financial results. We could also face claims from third parties claiming infringement of their intellectual property or other proprietary rights with respect to materials used or created by generative or agentic AI tools or features that we believed to be available for use and not subject to such rights. The investment required to bring AI features to market and the costs associated with providing these features to our customers may be significant, and we may be unable to recover these costs if customers and users do not widely adopt these features. We currently offer our AI features at no additional cost, as we believe they will ultimately enhance user satisfaction, improve customer retention, and drive revenue. If such benefits are not realized, the associated investment costs could further negatively impact our margins. Further, use of generative AI tools by our employees or others could result in disclosure of confidential or sensitive company and customer data, reputational harm, and legal liability.

Current wording

We use generative AI processes and algorithms, including by deploying generative AI features in our products and services, which may result in adverse effects to our operations, legal liability, reputation and competitive risks. The use of generative and agentic AI at scale is relatively new, and may lead to challenges, concerns and risks that are significant or that we may not be able to predict. For example, AI algorithms use machine learning (“ML”) and predictive analytics which may be insufficient, biased, inaccurate or of poor quality, which could result in customer rejection or skepticism of our products, adversely impact the rights of individuals, affect our reputation or brand, and negatively affect our financial results. Additionally, we rely on third parties for certain AI features of our products and if such third parties do not provide us those features (or do not do so on acceptable terms), experience interruptions, or cease operating, we may need to work with another provider, which may take time or may not be possible, and could result in the disruption of certain of our products or services, affect our reputation or brand, and negatively affect our financial results. We could also face claims from third parties claiming infringement of their intellectual property or other proprietary rights with respect to materials used or created by generative or agentic AI tools or features that we believed to be available for use and not subject to such rights. The investment required to bring AI features to market and the costs associated with providing these features to our customers may be significant, and we may be unable to recover these costs if customers and users do not widely adopt these features. We currently offer certain of our AI features at no additional cost, as we believe they will ultimately enhance user satisfaction, improve customer retention, and drive revenue. If such benefits are not realized, the associated investment costs could further negatively impact our margins. Further, use of generative AI tools by our employees or others could result in disclosure of confidential or sensitive company and customer data, reputational harm, and legal liability.

Previous wording

On January 4, 2018, the Federal Communications Commission (“FCC”) released an order reclassifying broadband internet access as an information service, a regulatory regime generally referred to as network neutrality, subject to certain provisions of Title I of the Communications Act. The order requires broadband providers to publicly disclose accurate information regarding network management practices, performance characteristics, and commercial terms of their broadband internet access services sufficient to enable consumers to make informed choices regarding the purchase and use of such services, and entrepreneurs and other small businesses to develop, market, and maintain internet offerings. The new rules went into effect on June 11, 2018. Numerous parties filed judicial challenges to the order, and on October 1, 2019, the United States Court of Appeals for the District of Columbia Circuit released a decision that rejected nearly all of the challenges to the new rules, but reversed the FCC’s decision to prohibit all state and local regulation targeted at broadband internet service, requiring case-by-case determinations as to whether state and local regulation conflicts with the FCC’s rules. The court also required the FCC to reexamine three issues from the order but allowed the order to remain in effect, while the FCC conducts that review. On October 27, 2020, the FCC adopted an order concluding that the three issues remanded by the court did not provide a basis to alter its conclusions in the 2018 order. On October 19, 2023, the FCC adopted a notice of proposed rulemaking proposing to reinstate the 2015 rules, and on April 24, 2024, adopted an order that substantially reinstated those rules. On January 2, 2025, the U.S. Court of Appeals for the Sixth Circuit issued a decision overturning the FCC order. That decision remains subject to potential further appeals. We cannot predict the impact of the new rules on our operations or business.

Current wording

On January 4, 2018, the Federal Communications Commission (“FCC”) released an order reclassifying broadband internet access as an information service, a regulatory regime generally referred to as network neutrality, subject to certain provisions of Title I of the Communications Act. The order requires broadband providers to publicly disclose accurate information regarding network management practices, performance characteristics, and commercial terms of their broadband internet access services sufficient to enable consumers to make informed choices regarding the purchase and use of such services, and entrepreneurs and other small businesses to develop, market, and maintain internet offerings. The new rules went into effect on June 11, 2018. Numerous parties filed judicial challenges to the order, and on October 1, 2019, the United States Court of Appeals for the District of Columbia Circuit released a decision that rejected nearly all of the challenges to the new rules, but reversed the FCC’s decision to prohibit all state and local regulation targeted at broadband internet service, requiring case-by-case determinations as to whether state and local regulation conflicts with the FCC’s rules. The court also required the FCC to reexamine three issues from the order but allowed the order to remain in effect, while the FCC conducts that review. On October 27, 2020, the FCC adopted an order concluding that the three issues remanded by the court did not provide a basis to alter its conclusions in the 2018 order. On October 19, 2023, the FCC adopted a notice of proposed rulemaking proposing to reinstate the 2015 rules, and on April 24, 2024, adopted an order that substantially reinstated those rules. On January 2, 2025, the U.S. Court of Appeals for the Sixth Circuit issued a decision overturning the FCC order. A petition for rehearing of the decision filed by proponents of network neutrality was denied on March 11, 2025. On August 8, 2025, the proponents of network neutrality announced that they would not seek Supreme Court review of the Sixth Circuit decision. On November 3, 2025, the FCC released a notice of proposed rulemaking that proposed changes to the rules for disclosure of information on broadband services provided to consumers. We cannot predict the impact of the Sixth Circuit decision, the reinstatement of the prior rules or the proposed changes to the rules on our operations or business.

Previous wording

In addition, a number of states have adopted or are adopting or considering legislation or executive actions that would regulate the conduct of broadband providers, including legislation to impose state-level network requirements in New York. After a federal court judge denied a request for a preliminary injunction against California’s state-specific network neutrality law, California began enforcing that law on March 25, 2021. A number of other states have adopted or are adopting or considering legislation or executive actions that would regulate the conduct of broadband providers. A similar law in Vermont is subject to a pending challenge, but went into effect on April 20, 2022 and the challenge has been suspended until an appeal in another case addressing state powers to adopt internet regulation is resolved. The FCC’s April 24 order, which, as described above, was overturned by the Sixth Circuit Court of Appeals, permits it to preempt any state-level network neutrality requirements that go beyond the requirements adopted in that order, but specifically held that the California law would not be preempted. We cannot predict whether the FCC order or other state initiatives will be enforced, modified, overturned, or vacated by legal action of the court, federal legislation, or the FCC. Under the FCC’s 2018 rules, which currently remain in effect, broadband internet access providers may be able to charge web-based services such as ours for priority access or favor services offered by our competitors or by the internet access providers themselves, which could result in increased costs and a loss of existing customers, impair our ability to attract new customers, and harm our business but the 2024 rules, if they go into effect, are intended to limit the ability of broadband internet access providers to engage in such behavior.

Current wording

In addition, a number of states have adopted or are adopting or considering legislation or executive actions that would regulate the conduct of broadband providers, including legislation to impose state-level network requirements in New York. After a federal court judge denied a request for a preliminary injunction against California’s state-specific network neutrality law, California began enforcing that law on March 25, 2021. Several other states have adopted or are adopting or considering legislation or executive actions that would regulate the conduct of broadband providers. A similar law in Vermont is subject to a pending challenge, but went into effect on April 20, 2022 and the challenge has been suspended until an appeal in another case addressing state powers to adopt internet regulation is resolved. The FCC’s April 24 order, which, as described above, was overturned by the Sixth Circuit Court of Appeals, permits it to preempt any state-level network neutrality requirements that go beyond the requirements adopted in that order, but specifically held that the California law would not be preempted. We cannot predict whether the FCC order or other state initiatives will be enforced, modified, overturned, or vacated by legal action of the court, federal legislation, or the FCC. Under the FCC’s 2018 rules, which currently remain in effect, broadband internet access providers may be able to charge web-based services such as ours for priority access or favor services offered by our competitors or by the internet access providers themselves, which could result in increased costs and a loss of existing customers, impair our ability to attract new customers, and harm our business.

Previous wording

Our security measures, and those of third parties with whom we work, have been compromised in the past and may be compromised in the future. If our security measures are compromised in the future or if our information technology fails, this could harm our reputation, expose us to significant fines and liability, impair our sales, and harm our business. In addition, if our products and services are perceived as not being secure, this could result in customers and users curtailing or ceasing their use of our products, our incurring significant liabilities, and our business being harmed.

Current wording

Our security measures, and those of third parties with whom we work, have been compromised in the past and may be compromised in the future. If our security measures are compromised in the future or if our information technology fails, this could harm our reputation, expose us to significant fines and liability, impair our sales, and harm our business. In addition, if our products and services are perceived as not being secure, this could result in customers and users curtailing or ceasing their use of our products, us incurring significant liabilities, and our business being harmed.

Previous wording

Cyberattacks, other malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our proprietary, confidential, and sensitive data and information technology systems, and those of the third parties with whom we work. Cloud-based platform providers of products and services have been and are expected to continue to be targeted. Threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation-state and nation-state supported actors, and advanced persistent threat intrusions. Some actors now engage and are expected to continue to engage in cyberattacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties with whom we work may be vulnerable to a heightened risk of these attacks, which could materially disrupt our systems and operations, supply chain, and ability to provide our services. We and the third parties with whom we work are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, credential stuffing, personnel misconduct or error, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, attacks enhanced or facilitated by AI, earthquakes, fires, floods, and other similar threats. Ransomware attacks, including those perpetrated by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations or our ability to provide our products or services, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Additionally, our platform, products, and services are relied on by a large number of companies worldwide and as a result, if our platform, products, or solutions are compromised, a significant number or all of our customers and their data could be simultaneously affected. The potential liability and associated consequences we could suffer as a result of such a large-scale event could be catastrophic and result in irrepara…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Cyberattacks, other malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our proprietary, confidential, and sensitive data and information technology systems, and those of the third parties with whom we work. Cloud-based platform providers of products and services have been and are expected to continue to be targeted. Threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation-state and nation-state supported actors, and advanced persistent threat intrusions. Some actors now engage and are expected to continue to engage in cyberattacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties with whom we work may be vulnerable to a heightened risk of these attacks, which could materially disrupt our systems and operations, supply chain, and ability to provide our services. We and the third parties with whom we work are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through deep fakes, which may be increasingly difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, credential stuffing, personnel misconduct or error, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, attacks enhanced or facilitated by AI, earthquakes, fires, floods, and other similar threats. Ransomware attacks, including those perpetrated by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations or our ability to provide our products or services, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Moreover, we and many similarly situated companies have been targeted by nation-state sponsored schemes intended to defraud companies through remote-work IT scams. While to date, these scams have not been successful, if they were to succeed, these scams could expose us to governmental and regulatory as well as market and media scrutiny regarding the actual or perceived integrity of our platform or data security, as well as othe…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Many governments have enacted laws requiring companies to provide notice of data security incidents, including those recently promulgated by the SEC. These laws may also require us to take certain measures, such as providing credit monitoring to individuals. Such laws are inconsistent, and compliance in the event of a widespread data breach is costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences. In addition, some of our customers require us to notify them of data security breaches.

Current wording

Many governments have enacted laws requiring companies to provide notice of data security incidents, including those recently promulgated by the SEC. These laws may also require us to take certain measures, such as providing credit monitoring to individuals. Such laws are inconsistent, compliance in the event of a widespread data breach is costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences. In addition, some of our customers require us to notify them of data security breaches.

Previous wording

Increased usage of our services, novel uses of our services, and additional awareness of Zoom and our brand has led and could in the future lead to greater public scrutiny of, press related to, or a negative perception of our information security and potential vulnerabilities associated with our platform. For example, during the COVID-19 pandemic, we opened our platform to unprecedented numbers of first-time users, leading to challenges for users who did not have full IT support or established protocols for security and privacy like our larger customers. As a result, we have experienced negative publicity related to meeting disruptions and security and privacy issues, including on encryption. Such unfavorable publicity and scrutiny could result in material reputational harm, a loss of customer and user confidence, increased regulatory or litigation exposure, additional expenses, and other harm to our business.

Current wording

Increased usage of our services, novel uses of our services, and additional awareness of Zoom and our brand have led and could in the future lead to greater public scrutiny of, press related to, or a negative perception of our information security and potential vulnerabilities associated with our platform. For example, during the COVID-19 pandemic, we opened our platform to unprecedented numbers of first-time users, leading to challenges for users who did not have full IT support or established protocols for security and privacy like our larger customers. As a result, we have experienced negative publicity related to meeting disruptions and security and privacy issues, including on encryption. Such unfavorable publicity and scrutiny could result in material reputational harm, a loss of customer and user confidence, increased regulatory or litigation exposure, additional expenses, and other harm to our business.

Previous wording

We believe that maintaining and enhancing the Zoom brand is critical to expanding our base of customers and users and, in particular, conveying to users and the public that the Zoom brand consists of a broad communications and collaboration platform, rather than just one distinct product. For example, if users view the Zoom brand primarily as a video conferencing point solution or utility rather than as a platform that connects people through video, voice, chat and content sharing, or have a negative perception of our privacy and security, then our market position may be detrimentally impacted. We anticipate that, as our market becomes increasingly competitive, maintaining and enhancing our brand may become increasingly difficult and expensive. Any unfavorable publicity or perception of our platform, including from any delays or interruptions in service due to capacity constraints stemming from increased usage, from our privacy or security features, because of sentiment towards the providers of communication and collaboration technologies generally, or from our integration of new product functionalities using technologies with heightened public interest, could adversely affect our reputation and our ability to attract and retain customers. Similarly, any unfavorable perception of our company, including due to any actual or perceived violation by our employees of our policies, such as our Code of Business Conduct and Ethics, could cause us reputational harm and customer loss, impact our financial performance, expose us to litigation, and harm our business, among other things. If we fail to promote and maintain the Zoom brand, including consumer and public perception of our platform or our company, or if we incur excessive expenses in this effort, our business will be harmed.

Current wording

We believe that maintaining and enhancing the Zoom brand is critical to expanding our base of customers and users and, in particular, conveying to users and the public that the Zoom brand consists of a broad communications and collaboration platform, rather than just one distinct product. For example, if users view the Zoom brand primarily as a video conferencing point solution or utility rather than as a workplace collaboration solution that connects people through video, voice, chat and content sharing, or have a negative perception of our privacy and security, then our market position may be detrimentally impacted. We anticipate that, as our market becomes increasingly competitive, maintaining and enhancing our brand may become increasingly difficult and expensive. Any unfavorable publicity or perception of our platform, including from any delays or interruptions in service due to capacity constraints stemming from increased usage, from our privacy or security features, because of sentiment towards the providers of communication and collaboration technologies generally, or from our integration of new product functionalities using technologies with heightened public interest, could adversely affect our reputation and our ability to attract and retain customers. Similarly, any unfavorable perception of our company, including due to any actual or perceived violation by our employees of our policies, such as our Code of Business Conduct and Ethics, could cause us reputational harm and customer loss, impact our financial performance, expose us to litigation, and harm our business, among other things. If we fail to promote and maintain the Zoom brand, including consumer and public perception of our platform or our company, or if we incur excessive expenses in this effort, our business will be harmed.

Previous wording

Our success depends in a large part upon the continued service of key members of our senior management team. In particular, our founder, President and Chief Executive Officer, Eric S. Yuan, is critical to our overall management, as well as the continued development of our products, services, the Zoom platform, our culture, our strategic direction, engineering, and our global operations, including regions such as the United States, Europe, Middle East, and Africa (“EMEA”), and Asia Pacific (“APAC”). All of our executive officers are at-will employees, and we do not maintain any key person life insurance policies. Any changes in our senior management team in particular, even in the ordinary course of business, including the transition of our Chief Financial Officer in 2024, may be disruptive to our business. Such changes may result in a loss of institutional knowledge and cause disruptions to our business. If our senior management team fails to work together effectively or execute our plans and strategies on a timely basis as a result of management turnover or otherwise, our business could be harmed.

Current wording

Our success depends in a large part upon the continued service of key members of our senior management team. In particular, our founder, President and Chief Executive Officer, Eric S. Yuan, is critical to our overall management, as well as the continued development of our products, services, the Zoom platform, our culture, our strategic direction, engineering, and our global operations, including regions such as the United States, Europe, Middle East, and Africa (“EMEA”), and Asia Pacific (“APAC”). All of our executive officers are at-will employees, and we do not maintain any key person life insurance policies. Any changes in our senior management team in particular, even in the ordinary course of business may be disruptive to our business. Such changes may result in a loss of institutional knowledge and cause disruptions to our business. If our senior management team fails to work together effectively or execute our plans and strategies on a timely basis as a result of management turnover or otherwise, our business could be harmed.

Previous wording

We believe that a critical component to our success and our ability to retain our best people is our culture. As we continue to grow and develop a public company infrastructure, we may find it difficult to maintain our happiness-centric company culture. Transparency is also an important part of our culture, and one that we practice every day. As we continue to grow, maintaining this culture of transparency will present its own challenges that we will need to address, including the type of information and level of detail that we share with our employees.

Current wording

We believe that a critical component to our success and our ability to retain our best people is our culture. As we continue to grow, we may find it difficult to maintain our happiness-centric company culture. Transparency is also an important part of our culture, and one that we practice every day. As we continue to grow, maintaining this culture of transparency will present its own challenges that we will need to address, including the type of information and level of detail that we share with our employees.

Previous wording

Our platform addresses the communications and collaboration needs of users worldwide, and we see international expansion as a major opportunity. Our revenue from APAC and EMEA collectively represented 28.2% and 28.7%, and 30.5% of our revenue for the fiscal years ended January 31, 2025, 2024, and 2023, respectively. Our customers include multinational corporations with global users, and we expect to continue to expand our international operations, which includes opening offices in new jurisdictions and providing our platform in additional languages to support the needs of these multinational corporations. Any new markets or countries into which we attempt to allow users to access our services or sell subscriptions to our platform may not be receptive. If we are not able to satisfy certain government- and industry-specific requirements, we have in the past and may in the future experience service outages or other adverse consequences, including interference with our local operations or restrictions on our ability to continue our operations in certain jurisdictions, that would impair our ability to operate or expand further into certain markets. As an example, if local or national Chinese government agencies interfered with or placed restrictions on our research and development operations in China, our ability to design new products, features, and functionality on a timely basis or at all, or our ability to effectively deliver our services, would be adversely impacted as a significant portion of our research and development organization resides in China. In addition, our ability to manage our business and conduct our operations internationally in the future requires considerable management attention and resources and is subject to the particular challenges of supporting a rapidly growing business in an environment of multiple languages, cultures, customs, legal and regulatory systems, alternative dispute systems, and commercial markets. Future international expansion will require investment of significant funds and other resources. We also face risks related to recruiting and retaining talented and capable employees outside the United States, including complying with complex employment- and compensation-related laws, regulations, and practices in these international jurisdictions, and maintaining our company culture across all of our offices. We may also be unable to grant equity compensation to employees in certain countries outside of the United States due to the complexities of local laws and regulations. This may require us to offer equally compelling alternatives to supplement our compensation, such as long-term cash compensation plans or increased short-term cash compensation, in order to continue to attract and retain employees in these jurisdictions.

Current wording

Our platform addresses the communications and collaboration needs of users worldwide, and we see international expansion as a major opportunity. Our revenue from APAC and EMEA collectively represented 27.9%, 28.2%, and 28.7% of our revenue for the fiscal years ended January 31, 2026, 2025, and 2024, respectively. Our customers include multinational corporations with global users, and we expect to continue to expand our international operations, which includes opening offices in new jurisdictions and providing our platform in additional languages to support the needs of these multinational corporations. Any new markets or countries into which we attempt to allow users to access our services or sell subscriptions to our platform may not be receptive. If we are not able to satisfy certain government- and industry-specific requirements, we have in the past and may in the future experience service outages or other adverse consequences, including interference with our local operations or restrictions on our ability to continue our operations in certain jurisdictions, that would impair our ability to operate or expand further into certain markets. As an example, if local or national Chinese government agencies interfered with or placed restrictions on our research and development operations in China, our ability to design new products, features, and functionality on a timely basis or at all, or our ability to effectively deliver our services, would be adversely impacted as a significant portion of our research and development organization resides in China. In addition, our ability to manage our business and conduct our operations internationally in the future requires considerable management attention and resources and is subject to the particular challenges of supporting a rapidly growing business in an environment of multiple languages, cultures, customs, legal and regulatory systems, alternative dispute systems, and commercial markets. Future international expansion will require investment of significant funds and other resources. We also face risks related to recruiting and retaining talented and capable employees outside the United States, including complying with complex employment- and compensation-related laws, regulations, and practices in these international jurisdictions, and maintaining our company culture across all of our offices. We may also be unable to grant equity compensation to employees in certain countries outside of the United States due to the complexities of local laws and regulations. This may require us to offer equally compelling alternatives to supplement our compensation, such as long-term cash compensation plans or increased short-term cash compensation, in order to continue to attract and retain employees in these jurisdictions.

Previous wording

•changes in diplomatic and trade relationships, including the continuing deterioration in diplomatic relations between the United States and China, or deterioration in diplomatic relations between the United States and countries with which the United States has traditionally enjoyed close ties and alliances, and the ongoing conflicts between Russia and Ukraine and in the Middle East;

Current wording

•changes in diplomatic and trade relationships, including the continuing deterioration in diplomatic relations between the United States and China, or deterioration in diplomatic relations between the United States and countries with which the United States has traditionally enjoyed close ties and alliances, and ongoing military conflicts;

Previous wording

We have a significant number of employees, primarily engineers, in China, where personnel costs are less expensive than in many other geographies. The number or proportion of our employees in China has fluctuated in the past and may fluctuate in the future due to a number of factors, including macroeconomic changes and internal restructuring. Geopolitical and national security tensions between the United States and China, or between other countries and China, have in the past, currently are and could in the future lead to increased scrutiny of our business operations in China and a negative perception among current and potential customers regarding our collection, use, storage, disclosure, and processing of personal information, and our privacy policies, any of which may harm our reputation and business. Additionally, we may face certain adverse consequences, as a result of geopolitical and national security tensions between the United States and China, including interference with, or restrictions on, our local operations that would impair our ability to operate in China. As an example, if local or national Chinese government agencies interfered with or placed restrictions on our research and development operations in China, our ability to design new products, features, and functionality on a timely basis or at all, or our ability to effectively deliver our service, would be adversely impacted as a significant portion of our research and development organization resides in China.

Current wording

We have a significant number of employees, primarily engineers, in China, where personnel costs are less expensive than in many other geographies. The number or proportion of our employees in China has fluctuated in the past and may fluctuate in the future due to a number of factors, including macroeconomic changes and internal restructuring. Geopolitical and national security tensions between the United States and China, or between other countries and China, have in the past, currently do and could in the future lead to increased scrutiny of our business operations in China and a negative perception among current and potential customers regarding our collection, use, storage, disclosure, and processing of personal information, and our privacy policies, any of which may harm our reputation and business. Additionally, we may face certain adverse consequences, as a result of geopolitical and national security tensions between the United States and China, including interference with, or restrictions on, our local operations that would impair our ability to operate in China. As an example, if local or national Chinese government agencies interfered with or placed restrictions on our research and development operations in China, our ability to design new products, features, and functionality on a timely basis or at all, or our ability to effectively deliver our service, would be adversely impacted as a significant portion of our research and development organization resides in China.

Previous wording

Increased user demand for support may result in increased costs that may harm our results of operations. For example, during the COVID-19 pandemic we saw surging demand requiring us to allocate additional resources to support our expanded customer and user base, including many who were using our platform for the first time, placing additional pressure on our support organization. In addition, as we continue to support our global user base, we need to be able to continue to provide efficient support that meets our customers and users’ needs globally at scale. If we are unable to provide efficient user support globally at scale or if we need to hire additional support personnel, our business may be harmed. Our new customer signups are highly dependent on our business reputation and on recommendations from our existing customers and users. Any failure to maintain high-quality support, or a market perception that we do not maintain high-quality support for our customers and users, would harm our business.

Current wording

Increased user demand for support may result in increased costs that may harm our results of operations. For example, during the COVID-19 pandemic we saw surging demand requiring us to allocate additional resources to support our expanded customer and user base, including many who were using our platform for the first time, placing additional pressure on our support organization. In addition, as we continue to support our global user base, we need to be able to continue to provide efficient support that meets our customers and users’ needs globally at scale. If we are unable to provide efficient user support globally at scale or if we need to hire additional support personnel, our business may be harmed. Our new customer sign-ups are highly dependent on our business reputation and on recommendations from our existing customers and users. Any failure to maintain high-quality support, or a market perception that we do not maintain high-quality support for our customers and users, would harm our business.

Previous wording

We sell to customers globally and have international operations primarily in Australia, China, and the U.K. As we continue to expand our international operations, we will become more exposed to the effects of fluctuations in currency exchange rates. Although the majority of our cash generated from revenue is denominated in U.S. dollars, a portion of our revenue is denominated in foreign currencies, and our expenses are generally denominated in the currencies of the jurisdictions in which we conduct our operations. For the fiscal years ended January 31, 2025, 2024, and 2023, 19.3%, 19.3%, and 20.0% of our revenue, respectively, and 16.4%, 13.7%, and 10.8% of our expenses, respectively, were denominated in currencies other than U.S. dollars. Because we conduct business in currencies other than U.S. dollars but report our results of operations in U.S. dollars, we also face remeasurement exposure to fluctuations in currency exchange rates, which could hinder our ability to predict our future results and earnings and could materially impact our results of operations. For example, for the fiscal year ended January 31, 2025, our total revenue was lower than anticipated in part due to the strengthening of the U.S. dollar. We do not currently maintain a program to hedge exposures to non-U.S. dollar currencies.

Current wording

We sell to customers globally and have international operations primarily in Australia, China, and the U.K. As we continue to expand our international operations, we will become more exposed to the effects of fluctuations in currency exchange rates. Although the majority of our cash generated from revenue is denominated in U.S. dollars, a portion of our revenue is denominated in foreign currencies, and our expenses are generally denominated in the currencies of the jurisdictions in which we conduct our operations. For the fiscal years ended January 31, 2026, 2025, and 2024, 19.7%, 19.3%, and 19.3% of our revenue, respectively, and 21.7%, 16.4%, and 13.7% of our expenses, respectively, were denominated in currencies other than U.S. dollars. Because we conduct business in currencies other than U.S. dollars but report our results of operations in U.S. dollars, we also face remeasurement exposure to fluctuations in currency exchange rates, which could hinder our ability to predict our future results and earnings and could materially impact our results of operations. For example, for the fiscal year ended January 31, 2026, our total revenue was lower than anticipated in part due to the strengthening of the U.S. dollar. We do not currently maintain a program to hedge exposures to non-U.S. dollar currencies.

Previous wording

We expect to continue selling our products and services to U.S. federal and state and foreign governmental agency customers, which may occur through sales to other companies that re-sell our services to government customers and/or through direct sales to government entities. While we are a U.S. Federal Risk and Authorization Management Program (“FedRAMP”) authorized SaaS service, selling to government entities and other government contractors presents a number of unique challenges and risks including the following:

Current wording

We expect to continue selling our products and services to U.S. federal and state and foreign governmental agency customers, which may occur through sales to other companies that resell our services to government customers and/or through direct sales to government entities. While we are a U.S. Federal Risk and Authorization Management Program (“FedRAMP”) authorized SaaS service, selling to government entities and other government contractors presents a number of unique challenges and risks including the following:

Previous wording

The OECD has also been working on a Base Erosion and Profits Shifting project that, upon implementation, would change various aspects of the existing framework under which our tax obligations are determined in many of the countries in which we operate. In this regard, the OECD has proposed policies aiming to modernize global tax systems, including a country-by-country 15% minimum effective tax rate (“Pillar Two”) for multinational companies. Numerous countries have enacted, or are in the process of enacting, legislation to implement the Pillar Two model rules with a subset of the rules becoming effective during our fiscal year ended January 31, 2025, and the remaining rules becoming effective for our fiscal year ending January 31, 2026, or in later periods. As these rules continue to evolve with new legislation and guidance, we will continue to monitor and account for the enactment of Pillar Two rules in the countries where we operate, and the potential impacts such rules may have on our effective tax rate and cash flows in future years.

Current wording

The OECD has also been working on a Base Erosion and Profits Shifting project that, upon implementation, would change various aspects of the existing framework under which our tax obligations are determined in many of the countries in which we operate. In this regard, the OECD has proposed policies aiming to modernize global tax systems, including a country-by-country 15% minimum effective tax rate (“Pillar Two”) for multinational companies. Numerous countries have enacted, or are in the process of enacting, legislation to implement the Pillar Two model rules with a subset of the rules having become effective during our fiscal year ended January 31, 2025, and the remaining rules becoming effective for our fiscal year ending January 31, 2026, or in later periods. Further, on June 28, 2025, the G7 released a joint statement that it had reached an understanding to modify the approach to Pillar Two, aiming to simplify administration of the rules. On January 5, 2026, the OECD issued administrative guidance outlining a framework under which U.S.-parented groups may be excluded from the application of the OECD’s global minimum tax rules. Each member jurisdiction will need to adopt this guidance into local law, and the timing and manner of adoption may vary. As these rules continue to evolve with new legislation and guidance, we will continue to monitor and account for the enactment of Pillar Two rules in the countries where we operate, and the potential impacts such rules may have on our effective tax rate and cash flows in future years.

Previous wording

During fiscal year 2021, we experienced rapid growth in usage of our unified communications and collaboration platform largely due to the COVID-19 pandemic. This usage dramatically changed the scale of our business, and we have a limited operating history at the current scale of our business. As a result, our ability to forecast our future results of operations is limited and subject to a number of uncertainties, including our ability to plan for and model future growth and expenses. Our historical revenue growth should not be considered indicative of our future performance. Further, in future periods, our revenue growth could continue to slow or our revenue could decline for a number of reasons, including any reduction in demand for our platform; increased competition; contraction of our overall market; our inability to accurately forecast demand for our platform and plan for capacity constraints; or our failure, for any reason, to capitalize on growth opportunities or to adapt and respond to inflationary factors affecting our business or future economic recession. The changes the COVID-19 pandemic fostered on the way companies operate, including the shifts to remote and hybrid work have limited our ability to forecast revenue, costs, and expenses due to the uncertainty around how companies choose to operate in the future, including the impacts of a remote and hybrid workplace. We have encountered and will encounter risks and uncertainties frequently experienced by growing companies in rapidly changing industries, such as the risks and uncertainties described herein. If our assumptions regarding these risks and uncertainties, which we use to plan our business, are incorrect or change, or if we do not address these risks successfully, our business would be harmed.

Current wording

During fiscal year 2021, we experienced rapid growth in usage of our unified communications and collaboration platform largely due to the COVID-19 pandemic. This usage dramatically changed the scale of our business, and we have a limited operating history at the current scale of our business. As a result, our ability to forecast our future results of operations is limited and subject to a number of uncertainties, including our ability to plan for and model future growth and expenses. Our historical revenue growth should not be considered indicative of our future performance. Further, in future periods, our revenue growth could continue to slow or our revenue could decline for a number of reasons, including any reduction in demand for our platform; increased competition; contraction of our overall market; our inability to accurately forecast demand for our platform and plan for capacity constraints; or our failure, for any reason, to capitalize on growth opportunities or to adapt and respond to inflationary factors affecting our business or future economic recession. Additionally, the shifts to remote and hybrid work, have limited our ability to forecast revenue, costs, and expenses due to the uncertainty around how companies choose to operate in the future, including the impacts of a remote and hybrid workplace. We have encountered and will encounter risks and uncertainties frequently experienced by growing companies in rapidly changing industries, such as the risks and uncertainties described herein. If our assumptions regarding these risks and uncertainties, which we use to plan our business, are incorrect or change, or if we do not address these risks successfully, our business would be harmed.

Previous wording

In the United States, federal, state, and local governments have enacted numerous privacy, data protection, and information security laws, including data breach notification laws, personal information privacy laws, consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws (e.g., wiretapping laws). Numerous U.S. states have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal data. As applicable, such rights may include the right to access, correct, or delete certain personal data, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services. Certain states also impose stricter requirements for processing certain personal data, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for statutory fines for noncompliance. For example, the California Consumer Privacy Act of 2018 (“CCPA”) applies to personal information of consumers, business representatives, and employees, and requires businesses to provide specific disclosures in privacy notices and honor requests of California residents to exercise certain privacy rights. The CCPA provides for fines and allows private litigants affected by certain data breaches to recover significant statutory damages. Similar laws are being considered in several other states, as well as at the federal and local levels and we expect more states to pass similar laws in the future. These developments may further complicate compliance efforts and increase legal risk and compliance costs for us and the third parties upon whom we rely. Under various laws and other obligations related to privacy, data protection, and information security, we are required to obtain certain consents to process personal information. For example, some of our data processing practices may be challenged under wiretapping laws when we obtain consumer information from third parties through various methods, including chatbot and session replay providers, or via third-party marketing pixels. These practices are subject to increased challenges by class action plaintiffs. Several states and foreign jurisdictions have enacted statutes imposing obligations on businesses collecting or processing biometric information. For example, Illinois’ Biometric Information Privacy Act (“BIPA”) regulates the collection, use, safeguarding, and storage of biometric information and provides for substantial penalties and statutory damages. The Federal Trade Commission (“FTC”), has indicated that use of biometric technologies (including facial recognition technologies) may be subject to additional scrutiny. Our inability or failure to obtain con…

Excerpt shortened here; the source contains the full paragraph.

Current wording

In the United States, federal, state, and local governments have enacted numerous privacy, data protection, and information security laws, including data breach notification laws, personal information privacy laws, consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws (e.g., wiretapping laws). Numerous U.S. states have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal data. As applicable, such rights may include the right to access, correct, or delete certain personal data, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services. Certain states also impose stricter requirements for processing certain personal data, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for statutory fines for noncompliance. For example, the California Consumer Privacy Act of 2018 (“CCPA”) applies to personal information of consumers, business representatives, and employees, and requires businesses to provide specific disclosures in privacy notices and honor requests of California residents to exercise certain privacy rights. The CCPA provides for fines and allows private litigants affected by certain data breaches to recover significant statutory damages. Similar laws have been enacted and are being considered in several other states, as well as at the federal and local levels and we expect more states to pass similar laws in the future. These developments may further complicate compliance efforts and increase legal risk and compliance costs for us and the third parties upon whom we rely. Under various laws and other obligations related to privacy, data protection, and information security, we are required to obtain certain consents to process personal information. For example, some of our data processing practices may be challenged under wiretapping laws when we obtain consumer information from third parties through various methods, including AI features, chatbot and session replay providers, or via third-party marketing pixels. These practices are subject to increased challenges by class action plaintiffs. Several states and foreign jurisdictions have enacted statutes imposing obligations on businesses collecting or processing biometric information. For example, Illinois’ Biometric Information Privacy Act (“BIPA”) regulates the collection, use, safeguarding, and storage of biometric information and provides for substantial penalties and statutory damages. The Federal Trade Commission (“FTC”), has indicated that use of biometric technologies (including facial recognition technologies) may be subject to additional scrutiny. Our…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

We also market to customers in Asia and have operations in Japan, Singapore and India, and may be subject to new and emerging privacy, data protection, and information security regimes in the region, including Japan’s Act on the Protection of

Current wording

We also market to customers in Asia and have operations in Japan, Singapore and India, and may be subject to new and emerging privacy, data protection, and information security regimes in the region, including Japan’s Act on the Protection of Personal Information, Singapore’s Personal Data Protection Act, and India's new privacy legislation, the Digital Personal Data Protection Act.

Previous wording

Our development and use of AI technologies is subject to privacy, data protection, IP, and information security laws, industry standards, external and internal privacy and security policies, and contractual requirements, as well as increasing regulation and scrutiny. Several jurisdictions around the globe, including the EU, the UK and certain U.S. states, have proposed, enacted, or are considering laws governing the development and use of technology featuring AI. For example, the EU's AI Act enters in phases this year and will have a direct effect across all EU jurisdictions. The EU AI Act and other similar laws, if implemented and if applicable, could impose onerous obligations related to the use of AI-related systems. Obligations on AI may make it harder for us to conduct our business using, or build products incorporating, AI, require us to change our business practices, require us to retrain our algorithms, require us to disclose or provide greater transparency regarding the nature of our AI tools and the data we have employed to train them, or prevent or limit our use of AI. For example, the FTC has required other companies to turn over (or disgorge) valuable insights or trainings generated through the use of AI where they allege the company has violated privacy and consumer protection laws. Additionally, certain privacy laws extend rights to consumers (such as the right to delete certain personal information) and regulate automated decision making, which may be incompatible with our use of AI. If we do not develop or incorporate AI in a manner consistent with these factors, and consistent with customer expectations, it has in the past and may in the future result in an adverse impact to our reputation, our business may be less efficient, or we may be at a competitive disadvantage. Similarly, if customers and users do not widely adopt our new product AI experiences, features, and capabilities, or they do not perform as expected, we may not be able to realize a return on our investment.

Current wording

Our development and use of AI technologies is subject to privacy, data protection, IP, and information security laws, industry standards, external and internal privacy and security policies, and contractual requirements, as well as increasing regulation and scrutiny. Several jurisdictions around the globe, including the EU, the UK and certain U.S. states, have proposed, enacted, or are considering laws governing the development and use of technology featuring AI. The EU AI Act sets out a risk-based framework, subjecting certain AI technologies to numerous compliance obligations, including transparency, conformity and risk assessment, monitoring and human oversight requirements. Under the EU AI Act, non-compliant companies may be subject to administrative fines of up to 35 million Euros or 7% of a company’s total worldwide annual turnover for the preceding financial year, whichever is the higher. Obligations on AI may make it harder for us to conduct our business using, or build products incorporating, AI, require us to change our business practices, require us to retrain our algorithms, require us to disclose or provide greater transparency regarding the nature of our AI tools and the data we have employed to train them, or prevent or limit our use of AI. For example, the FTC has required other companies to turn over (or disgorge) valuable insights or trainings generated through the use of AI where they allege the company has violated privacy and consumer protection laws. Additionally, certain privacy laws extend rights to consumers (such as the right to delete certain personal information) and regulate automated decision making, which may be incompatible with our use of AI. If we do not develop or incorporate AI in a manner consistent with these factors, and consistent with customer expectations, it has in the past and may in the future result in an adverse impact to our reputation, our business may be less efficient, or we may be at a competitive disadvantage. Similarly, if customers and users do not widely adopt our new product AI experiences, features, and capabilities, or they do not perform as expected, we may not be able to realize a return on our investment.

Previous wording

Online Privacy Protection Act (“COPPA”), California’s Age Appropriate Design Code, the CCPA, other U.S. state comprehensive privacy laws, the EU and UK GDPR, the EU's Digital Services Act ("DSA"), the UK's Online Safety Act ("OSA") and the UK Age Appropriate Design Code, impose various obligations on companies that process minors' data and/or provide online services, or other interactive platforms used by children, including prohibiting showing minors advertising, requiring age verification, limiting the use of minors’ personal information, requiring certain consents to process such data and extending certain rights to children and their parents with respect to that data. These laws may, and in some cases already have been subject to legal challenges and changing interpretations which may further complicate our efforts to comply with laws applicable to us. Some of these obligations have wide ranging applications, including for services that do not intentionally target child users (defined in some circumstances as a user under the age of 18 years old). In particular, COPPA is a U.S. Federal law that applies to operators of commercial websites and online services directed to U.S. children under the age of 13 that collect personal information from children, and to operators of general audience websites with actual knowledge that they are collecting personal information from U.S. children under the age of 13. We provide video communications and collaboration services to schools, school districts, and school systems to support traditional, virtual, and hybrid classrooms, distance learning, educational office hours, guest lectures, and other services. As part of these services, Zoom may be used by students, including students under the age of 13, and we collect personal information from such students on behalf of our school subscribers. School subscribers must contractually consent to Zoom’s information practices on behalf of students, prior to students using the services. If we fail to accurately anticipate the application, interpretation, or legislative expansion of these laws, regulations, and legally-binding codes, we could be subject to governmental enforcement actions, data processing restrictions, litigation, fines and penalties, adverse publicity or loss of customers. Moreover, as a result of any such failures, we could be in breach of our K-12 school customer contracts, and our customers could lose trust in us, which could harm our reputation and business.

Current wording

Additionally, regulators are increasingly scrutinizing companies that process minors' data and/or provide online services or other interactive platforms used by minors. Numerous laws, regulations, and legally-binding codes, such as the Children’s Online Privacy Protection Act (“COPPA”), California’s Age Appropriate Design Code, the CCPA, other U.S. state comprehensive privacy laws, the EU and UK GDPR, the EU's Digital Services Act ("DSA"), the UK's Online Safety Act ("OSA") and the UK Age Appropriate Design Code, impose various obligations on companies that process minors' data and/or provide online services, or other interactive platforms used by children, including prohibiting showing minors advertising, requiring age verification, limiting the use of minors’ personal information, requiring certain consents to process such data and extending certain rights to children and their parents with respect to that data. These laws may, and in some cases already have been subject to legal challenges and changing interpretations which may further complicate our efforts to comply with laws applicable to us. Some of these obligations have wide ranging applications, including for services that do not intentionally target child users (defined in some circumstances as a user under the age of 18 years old). In particular, COPPA is a U.S. Federal law that applies to operators of commercial websites and online services directed to U.S. children under the age of 13 that collect personal information from children, and to operators of general audience websites with actual knowledge that they are collecting personal information from U.S. children under the age of 13. We provide video communications and collaboration services to schools, school districts, and school systems to support traditional, virtual, and hybrid classrooms, distance learning, educational office hours, guest lectures, and other services. As part of these services, Zoom may be used by students, including students under the age of 13, and we collect personal information from such students on behalf of our school subscribers. School subscribers must contractually consent to Zoom’s information practices on behalf of students, prior to students using the services. If we fail to accurately anticipate the application, interpretation, or legislative expansion of these laws, regulations, and legally-binding codes, we could be subject to governmental enforcement actions, data processing restrictions, litigation, fines and penalties, adverse publicity or loss of customers. Moreover, as a result of any such failures, we could be in breach of our K-12 school customer contracts, and our customers could lose trust in us, which could harm our reputation and business.

Previous wording

In addition to privacy, data protection and information security laws, we are contractually subject to certain industry standards adopted by industry groups and may become subject to additional such obligations in the future. We also have certain privacy, data protection, information security obligations arising from the practices in our industry or of companies similar to us. We are also bound by other contractual obligations related to privacy, data protection, and information security, and our efforts to comply with such obligations may not be successful. If we fall below such industry standard or cannot comply with such contractual obligations, our reputation and business may be harmed. We also publish privacy policies, marketing materials, whitepapers and other statements, such as compliance with certain certifications or self-regulatory principles, regarding privacy, data protection, artificial intelligence and information security. Regulators in the United States have scrutinized and are increasingly scrutinizing these statements, and if these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, misleading or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators, or other adverse consequences.

Current wording

In addition to privacy, data protection and information security laws, we are contractually subject to certain industry standards adopted by industry groups and may become subject to additional such obligations in the future. We also have certain privacy, data protection, information security obligations arising from the practices in our industry or of companies similar to us. We are also bound by other contractual obligations related to privacy, data protection, and information security, and our efforts to comply with such obligations may not be successful. If we fall below such industry standards or cannot comply with such contractual obligations, our reputation and business may be harmed. We also publish privacy policies, marketing materials, whitepapers and other statements, such as compliance with certain certifications or self-regulatory principles, regarding privacy, data protection, artificial intelligence and information security. Regulators in the United States have scrutinized and are increasingly scrutinizing these statements, and if these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, misleading or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators, or other adverse consequences.

Previous wording

In June 2020, we received a grand jury subpoena from the Department of Justice’s U.S. Attorney’s Office for the EDNY, which requested information regarding our interactions with foreign governments and foreign political parties, including the Chinese government, as well as information regarding storage of and access to user data, the development and implementation of Zoom’s privacy policies, and the actions we took responding to law enforcement requests from the Chinese government. In July 2020, we received subpoenas from the Department of Justice’s U.S. Attorney’s Office for the NDCA and the SEC. Both subpoenas seek documents and information relating to various security, data protection, and privacy matters, including our encryption, and our statements relating thereto, as well as calculation of usage metrics and related public statements. In addition, the NDCA subpoena seeks information relating to any contacts between our employees and representatives of the Chinese government, and any attempted or successful influence by any foreign government in our policies, procedures, practices, and actions as they relate to users in the United States. We have since received additional subpoenas from EDNY and NDCA seeking related information. We are fully cooperating with all of these investigations and have conducted our own thorough internal investigation. These investigations are ongoing, and a negative outcome in any or all of these matters could cause us to incur substantial fines, penalties, or other financial exposure, as well as material reputational harm, a loss of customer and user confidence and business, additional expenses, and other harm to our business. As of the date hereof, in regard to the SEC matter, a tentative settlement of $18.0 million is now outstanding and remains subject to SEC approval. We do not know when these matters will be completed, including the SEC matter, which facts we will ultimately discover as a result of the investigations, or what actions the government may or may not take.

Current wording

In June 2020, we received a grand jury subpoena from the Department of Justice’s U.S. Attorney’s Office for the EDNY, which requested information regarding our interactions with foreign governments and foreign political parties, including the Chinese government, as well as information regarding storage of and access to user data, the development and implementation of Zoom’s privacy policies, and the actions we took responding to law enforcement requests from the Chinese government. In July 2020, we received subpoenas from the Department of Justice’s U.S. Attorney’s Office for the NDCA and the SEC. Both subpoenas seek documents and information relating to various security, data protection, and privacy matters, including our encryption, and our statements relating thereto, as well as calculation of usage metrics and related public statements. In addition, the NDCA subpoena seeks information relating to any contacts between our employees and representatives of the Chinese government, and any attempted or successful influence by any foreign government in our policies, procedures, practices, and actions as they relate to users in the United States. We have since received additional subpoenas from EDNY and NDCA seeking related information. We are fully cooperating with all of these investigations and have conducted our own thorough internal investigation. On July 30, 2025, the SEC informed us that its investigation has concluded and they do not intend to recommend an enforcement action. The EDNY and NDCA investigations are ongoing, and a negative outcome in any or all of these matters could cause us to incur substantial fines, penalties, or other financial exposure, as well as material reputational harm, a loss of customer and user confidence and business, additional expenses, and other harm to our business. We do not know when the EDNY and NDCA matters will be completed, which facts we will ultimately discover as a result of the investigations, or what actions the government may or may not take.

Previous wording

Changes in government trade policies, including the imposition of tariffs and export restrictions, could limit our ability to sell our products to certain customers, which may materially adversely affect our sales and results of operations.

Current wording

Changes in government trade policies, including the imposition of tariffs and export restrictions, could limit our ability to sell our products to certain customers, which may have a material adverse effect on our sales and results of operations.

Previous wording

The U.S. or foreign governments have taken and may in the future take administrative, legislative, or regulatory action, including imposing tariffs, that could materially interfere with our ability to sell products in certain countries. The direct and indirect effects of tariffs and other restrictive trade policies are difficult to measure and are only one part of a larger U.S./China economic and trade policy disagreement. The effects of tariffs are uncertain because of the dynamic nature of governmental action and responses. Sustained uncertainty about, or worsening of, current global economic conditions and further escalation of trade tensions between the United States and its trading partners, especially China, could result in a global economic slowdown and long-term changes to global trade, including retaliatory trade restrictions that restrict our ability to operate in China. We cannot predict what actions may ultimately be taken by the current administration or future administrations with respect to tariffs or trade relations between the United States and China or other countries, what products may be subject to such actions, or what actions may be taken by the other countries in retaliation. Any further deterioration in the relations between the United States and China could exacerbate these actions and other governmental intervention. For example, the implementation of China’s national-security law in Hong Kong has created additional U.S.-China tensions and could potentially increase the risks associated with the business and operations of U.S.-based technology companies in China. Any alterations to our business strategy or operations made in order to adapt to or comply with any such changes would be time-consuming and expensive, and certain of our competitors may be better suited to withstand or react to these changes.

Current wording

The U.S. or foreign governments have taken and may in the future take administrative, legislative, or regulatory action, including imposing tariffs, that could materially interfere with our ability to sell products in certain countries, and the recent announcements of substantial new tariffs and other restrictive trade policies have created a dynamic and unpredictable trade landscape, which may adversely impact our business. The direct and indirect effects of tariffs and other restrictive trade policies are difficult to measure and are only one part of a larger U.S./China economic and trade policy disagreement. The effects of tariffs are uncertain because of the dynamic nature of governmental action and responses. Sustained uncertainty about, or worsening of, current global economic conditions and further escalation of trade tensions between the United States and its trading partners, especially China, could result in a global economic slowdown and long-term changes to global trade, including retaliatory trade restrictions that restrict our ability to operate in China. We cannot predict what actions may ultimately be taken by the current administration or future administrations with respect to tariffs or trade relations between the United States and China or other countries, what products may be subject to such actions, or what actions may be taken by the other countries in retaliation. Any further deterioration in the relations between the United States and China could exacerbate these actions and other governmental intervention. For example, the implementation of China’s national-security law in Hong Kong has created additional U.S.-China tensions and could potentially increase the risks associated with the business and operations of U.S.-based technology companies in China. Any alterations to our business strategy or operations made in order to adapt to or comply with any such changes would be time-consuming and expensive, and certain of our competitors may be better suited to withstand or react to these changes.

Previous wording

Commerce and applies to contracts entered into prior to the effective date of the order. On March 22, 2021, the U.S. Department of Commerce issued an interim final rule allowing it to identify, review, and prohibit ICTS transactions that pose a national security risk, including transactions involving specified countries, such as China. Several aspects of this rule remain unclear including the scope of affected transactions and how the rule will be implemented and enforced in practice. In addition, the U.S. Commerce Department has implemented additional restrictions and may implement further restrictions that would affect conducting business with certain Chinese companies. Due to the uncertainty regarding the timing, content, and extent of any such changes in policy, we cannot assure you that we will successfully mitigate any negative impact. Depending upon their duration and implementation, these tariffs, the executive order and its implementation, and other regulatory actions could materially affect our business, including in the form of increased cost of revenue, decreased margins, increased pricing for customers, and reduced sales.

Current wording

Further, the U.S. Government has expressed concerns with the security of information and communications technology and services (“ICTS”) sourced from providers in China, Russia, and other jurisdictions. In May 2019, an executive order was issued invoking national emergency economic powers to implement a framework to regulate the acquisition or transfer of ICTS in transactions that imposed undue national security risks. The executive order is subject to implementation by the Secretary of Commerce and applies to contracts entered into prior to the effective date of the order. On March 22, 2021, the U.S. Department of Commerce issued an interim final rule allowing it to identify, review, and prohibit ICTS transactions that pose a national security risk, including transactions involving specified countries, such as China. Several aspects of this rule remain unclear, including the scope of affected transactions and how the rule will be implemented and enforced in practice. In addition, the U.S. Commerce Department has implemented additional restrictions and may implement further restrictions that would affect conducting business with certain Chinese companies. Due to the uncertainty regarding the timing, content, and extent of any such changes in policy, we cannot assure you that we will successfully mitigate any negative impact. Depending upon their duration and implementation, these tariffs, the executive order and its implementation, and other regulatory actions could materially affect our business, including in the form of increased cost of revenue, decreased margins, increased pricing for customers, and reduced sales.

Previous wording

We may be subject to, or respond to requests from law enforcement that are legally valid, appropriately scoped, and sufficiently detailed in connection with enforcement of, various civil and criminal laws, including those covering copyright, indecent content, child protection, consumer protection, telecommunications services, taxation, and similar matters. It may be difficult, expensive, and disruptive for us to address law enforcement requests, subpoenas and other legal process, and laws in various jurisdictions may conflict and hamper our ability to satisfy or comply with such requests, subpoenas and other legal process. There have been instances where improper or illegal content has been shared on our platform without our knowledge. As a service provider and as a matter of policy, we do not monitor user meetings. However, to protect user safety and prevent conduct that is illegal, violent, or harmful to others, we enforce our terms of service through use of a mix of tools that suggest when such activity may be occurring on our platform. Our trust and safety team may take further action as appropriate, including suspension or termination of the participant's account or referral to law enforcement. The laws in this area are currently in a state of flux and vary widely between jurisdictions. Accordingly, it may be possible that in the future we and our competitors may be subject to legal actions along with the users who shared such content. In addition, regardless of any legal liability we may face, our reputation could be harmed should there be an incident generating extensive negative publicity about the content shared on our platform. Such publicity would harm our business.

Current wording

We may be subject to, or respond to requests from law enforcement that are legally valid, appropriately scoped, and sufficiently detailed in connection with enforcement of, various civil and criminal laws, including those covering copyright, indecent content, child protection, consumer protection, telecommunications services, taxation, and similar matters. It may be difficult, expensive, and disruptive for us to address law enforcement requests, subpoenas and other legal processes, and laws in various jurisdictions may conflict and hamper our ability to satisfy or comply with such requests, subpoenas and other legal process. There have been instances where improper or illegal content has been shared on our platform without our knowledge. As a service provider and as a matter of policy, we do not monitor user meetings. However, to protect user safety and prevent conduct that is illegal, violent, or harmful to others, we enforce our terms of service through use of a mix of tools that suggest when such activity may be occurring on our platform. Our trust and safety team may take further action as appropriate, including suspension or termination of the participant's account or referral to law enforcement. The laws in this area are currently in a state of flux and vary widely between jurisdictions. Accordingly, it may be possible that in the future we and our competitors may be subject to legal actions along with the users who shared such content. In addition, regardless of any legal liability we may face, our reputation could be harmed should there be an incident generating extensive negative publicity about the content shared on our platform. Such publicity would harm our business.

Previous wording

Legislation has been adopted in Florida and Texas that is intended to reduce or eliminate the power of businesses operating on the Internet to moderate user-generated content, implicitly eliminating the federal protections granted under Section 230. Similar legislation has been introduced in other states. Implementation of the Florida and Texas statutes has been stayed by various federal courts, including the U.S. Supreme Court. On August 18, 2022, the parties in the Florida case requested, and were granted, a stay of the appeals court mandate pending Supreme Court review. On September 16, 2022, the U.S. Court of Appeals for the Fifth Circuit issued a decision upholding the Texas law. On September 30, the parties in that case filed an unopposed motion to stay the Fifth Circuit decision pending Supreme Court review, and the Fifth Circuit granted that request on October 13, 2022. On September 29, 2023, the Supreme Court announced that it would review both the Florida and Texas decisions, and on July 1, 2024, the Court issued a decision returning both cases to the trial courts for additional analysis. The district court in Texas, on August 29, 2024, issued a decision staying some portions of the Texas law and allowing others to go into effect, relying on analysis under both Section 230 and the First Amendment, and on November 18, 2024, the Fifth Circuit issued an order setting parameters for the district court's consideration of the issues raised by the Supreme Court. The district court in Florida set a trial date in its case for June 2025. Florida amended its statute in an effort to address issues that led the court to issue the stay. It is likely that any other such state legislation also would be challenged under the First Amendment to the U.S. Constitution and on the ground that it is preempted by Section 230. In addition, on August 27, 2024, the U.S. Court of Appeals for the Third Circuit issued a decision limiting the protections afforded by Section 230 in cases where a social media company curates user feeds to the extent that the feed becomes the speech of the company, reversing a trial court decision that immunized the company under Section 230. We cannot predict whether any such state legislation will be adopted, enforced, modified, overturned, or vacated.

Current wording

Legislation has been adopted in Florida and Texas that is intended to reduce or eliminate the power of businesses operating on the Internet to moderate user-generated content, implicitly eliminating the federal protections granted under Section 230. Similar legislation has been introduced in other states. Implementation of the Florida and Texas statutes has been stayed by various federal courts, including the U.S. Supreme Court. On August 18, 2022, the parties in the Florida case requested, and were granted, a stay of the appeals court mandate pending Supreme Court review. On September 16, 2022, the U.S. Court of Appeals for the Fifth Circuit issued a decision upholding the Texas law. On September 30, the parties in that case filed an unopposed motion to stay the Fifth Circuit decision pending Supreme Court review, and the Fifth Circuit granted that request on October 13, 2022. On September 29, 2023, the Supreme Court announced that it would review both the Florida and Texas decisions, and on July 1, 2024, the Court issued a decision returning both cases to the trial courts for additional analysis. The district court in Texas, on August 29, 2024, issued a decision staying some portions of the Texas law and allowing others to go into effect, relying on analysis under both Section 230 and the First Amendment. On November 18, 2024, the Fifth Circuit issued an order setting parameters for the district court's consideration of the issues raised by the Supreme Court. On January 31, 2025, the plaintiffs refiled their complaint with revisions to reflect the Supreme Court decision. The August 2024 decision is subject to a pending appeal. The district court in Florida denied a motion to dismiss the suit in that state on May 22, 2025. Florida amended its statute in an effort to address issues that led the court to issue the stay. It is likely that any other such state legislation also would be challenged under the First Amendment to the U.S. Constitution and on the ground that it is preempted by Section 230. In addition, on August 27, 2024, the U.S. Court of Appeals for the Third Circuit issued a decision limiting the protections afforded by Section 230 in cases where a social media company curates user feeds to the extent that the feed becomes the speech of the company, reversing a trial court decision that immunized the company under Section 230. We cannot predict whether any such state legislation will be adopted, enforced, modified, overturned, or vacated.

Previous wording

Zoom Phone is provided through our wholly owned subsidiary, Zoom Voice Communications, Inc., which is regulated by the FCC as an interconnected voice over internet protocol (“VoIP”) service provider. As a result, Zoom Phone is subject to existing or potential FCC regulations, including, but not limited to, regulations relating to privacy, disability access, porting of numbers, federal Universal Service Fund (“USF”), contributions and other regulatory assessments, emergency calling/Enhanced 911 (“E-911”), access charges for long distance services, and law enforcement access. The Supreme Court currently is considering a challenge to the USF contribution rules that could affect how such contributions are collected from services providers like us. Congress or the FCC may expand the scope of Zoom Phone’s regulatory obligations at any time. In addition, FCC classification of Zoom Phone as a common carrier or telecommunications service could result in additional federal and state regulatory obligations. If we do not comply with any current or future state regulations that apply to our business, we could be subject to substantial fines and penalties, we may have to restructure our product offerings, exit certain markets, or raise the price of our products, any of which could ultimately harm our business and results of operations. Any enforcement action by the FCC, which may be a public process, would hurt our reputation in the industry, possibly impair our ability to sell Zoom Phone to our customers and harm our business.

Current wording

Zoom Phone is provided through our wholly owned subsidiary, Zoom Voice Communications, Inc., which is regulated by the FCC as an interconnected voice over internet protocol (“VoIP”) service provider. As a result, Zoom Phone is subject to existing or potential FCC regulations, including, but not limited to, regulations relating to privacy, disability access, porting of numbers, federal Universal Service Fund (“USF”), contributions and other regulatory assessments, emergency calling/Enhanced 911 (“E-911”), access charges for long distance services, and law enforcement access. In June 2025, the Supreme Court rejected a challenge to the USF contribution rules. However, a new lawsuit has been filed seeking to invalidate the system on other grounds in the U.S. Court of Appeals for the Fifth Circuit on October 1, 2025. Congress or the FCC may expand the scope of Zoom Phone’s regulatory obligations at any time. On October 29, 2025, the FCC released a notice of proposed rulemaking that could result in substantial changes in the regulatory regime governing interconnection among providers of voice service. In addition, FCC classification of Zoom Phone as a common carrier or telecommunications service could result in additional federal and state regulatory obligations. If we do not comply with any current or future state regulations that apply to our business, we could be subject to substantial fines and penalties, we may have to restructure our product offerings, exit certain markets, or raise the price of our products, any of which could ultimately harm our business and results of operations. Any enforcement action by the FCC, which may be a public process, would hurt our reputation in the industry, possibly impair our ability to sell Zoom Phone to our customers and harm our business.

Previous wording

As described above, the FCC has reinstated its prior network neutrality regulations, but the FCC order was reversed by the Sixth Circuit Court of Appeals. See Part 1A. Failures in internet infrastructure or interference with broadband access could cause current or potential users to believe that our systems are unreliable, possibly leading our customers to switch to our competitors, or to cancel their subscriptions to our platform. Changes in FCC regulation of the internet and internet-based services also could impose new regulatory obligations on our other services. Such action could result in extension of common carrier regulation to internet-based communications services like the ones we offer. The imposition of common carrier regulation would increase our costs, and we could be required to modify our service offerings to comply with regulatory requirements. The failure to comply with such regulation could result in substantial fines and penalties and other sanctions.

Current wording

As described above, the FCC reinstated its prior network neutrality regulations in 2024, but the FCC order was reversed by the Sixth Circuit Court of Appeals. See Part 1A. Failures in internet infrastructure or interference with broadband access could cause current or potential users to believe that our systems are unreliable, possibly leading our customers to switch to our competitors, or to cancel their subscriptions to our platform. Changes in FCC regulation of the internet and internet-based services also could impose new regulatory obligations on our other services. Such action could result in extension of common carrier regulation to internet-based communications services like the ones we offer. The imposition of common carrier regulation would increase our costs, and we could be required to modify our service offerings to comply with regulatory requirements. The failure to comply with such regulation could result in substantial fines and penalties and other sanctions.