NETSCOUT SYSTEMS INC

Previous wording

You should carefully consider the risks and uncertainties described below, together with the information included elsewhere in this Annual Report on Form 10-K and other documents we file with the SEC. The risks and uncertainties described below are those that we have identified as material but are not the only risks and uncertainties facing us. Our business is also subject to general risks and uncertainties that affect many other companies. Additional risks and uncertainties not currently known to us or that we currently believe are immaterial may also impair our business, including our results of operations, liquidity, and financial condition.

Current wording

You should carefully consider the risks and uncertainties described below, together with the information included elsewhere in this Annual Report and other documents we file with the SEC. The risks and uncertainties described below are those that we have identified as material but are not the only risks and uncertainties facing us. Our business is also subject to general risks and uncertainties that affect many other companies. Additional risks and uncertainties not currently known to us or that we currently believe are immaterial may also impair our business, including our results of operations, liquidity, and financial condition.

Previous wording

Unfavorable conditions in our industry, our customers industries, the global economy, or reductions in information technology spending, could limit our ability to grow our business and negatively affect our results of operations.

Current wording

Unfavorable and uncertain conditions in our industry, our customers' industries, the global economy, or reductions in information technology spending, could limit our ability to grow or maintain our business and negatively affect our results of operations.

Previous wording

Unfavorable conditions in the economy both in the United States and abroad, including conditions resulting from financial and credit market fluctuations, high interest rates, elevated or prolonged inflation, bank failures, international trade relations, political turmoil, natural catastrophes, outbreaks of contagious diseases, warfare, including in Ukraine and the Middle East, and terrorist attacks on the United States, Europe, the Asia Pacific region or elsewhere, could cause a decrease in business investments, including spending on information technology, and negatively affect the growth of our business and our results of operations. Heightened inflation has also increased, and could continue to further increase, the cost of operating our business and impact our customers’ spending decisions, which could negatively affect our results of operations. Our competitors, many of whom are larger and have greater financial resources than we do, may respond to challenging market conditions by lowering prices in an attempt to attract our customers and may be less dependent on key industry events to generate sales for their products. In addition, we serve certain industries that have historically been cyclical and have experienced periodic downturns that have had a material adverse impact on demand for the products, software, and services that we offer. Many of our customers are concentrated in certain industries, including financial services, public sector, healthcare, and the service provider market. Furthermore, the increased pace of consolidation in certain industries may result in reduced overall spending on our products and solutions. We cannot predict the timing, strength, or duration of any economic slowdown, instability, or recovery, generally or how any such event may impact our business.

Current wording

Unfavorable and uncertain conditions in the economy both in the United States and abroad, including conditions resulting from financial and credit market fluctuations, high interest rates, inflation, bank failures, international trade policies (including trade protection measures, such as tariffs, sanctions and other trade barriers), political turmoil, a shifting regulatory landscape, changes in government spending patterns, natural catastrophes, outbreaks of contagious diseases, warfare, including in Ukraine, and terrorist attacks on the United States, Europe, the Asia Pacific region or elsewhere, could cause a decrease in business investments, including spending on information technology, and negatively affect the growth of our business and our results of operations. In addition, we serve certain industries that have historically been cyclical and have experienced periodic downturns that have had a material adverse impact on demand for the products, software, and services that we offer. Many of our customers are concentrated in certain industries, including financial services, public sector, healthcare, and the service provider market. Furthermore, consolidation in certain industries may result in reduced overall spending on our products and solutions. We cannot predict the timing, strength, or duration of any economic slowdown, instability, or recovery, generally or how any such event may impact our business.

Previous wording

If our products contain errors or quality issues, such issues may be costly to correct, revenue may be delayed, we could be sued, and our reputation could be harmed.

Current wording

If our products contain material errors or quality issues, such issues may be costly to correct, revenue may be delayed, we could be sued, and our reputation could be harmed.

Previous wording

Our products are inherently complex, and, despite our quality assurance processes and testing by our customers and us, errors or quality issues may be found in our products after commencement of commercial shipments, especially when products are first introduced or when new versions are released. These errors may result from components supplied by third parties incorporated into our products, which makes us dependent upon the cooperation and expertise of such third parties for the diagnosis and correction of such errors. If errors are discovered, we may not be able to correct them in a timely manner or at all. In addition, we may need to make significant expenditures to eliminate errors and failures. Errors and failures in our products could result in loss of or delay in market acceptance of our products and could damage our reputation. Regardless of the source of these defects or errors, we may need to divert the attention of our engineering personnel from our product development efforts to address the detection and correction of these errors and defects. If one or more of our products fail, a customer may assert warranty and other contractual claims for substantial damages against us. Our contracts with customers contain provisions relating to warranty disclaimers and liability limitations, which may not be upheld. Defending a lawsuit, regardless of its merit, is costly and may divert management's attention and harm the market's perception of us and our products. In addition, if our business liability insurance coverage proves inadequate or future coverage is unavailable on acceptable terms or at all, our business, operating results, and financial condition could be adversely impacted.

Current wording

Our products are inherently complex, and, despite our quality assurance processes and testing by our customers and us, errors or quality issues may be found in our products after commencement of commercial shipments, especially when products are first introduced or when new versions are released. These errors may result from components supplied by third parties incorporated into our products, which makes us dependent upon the cooperation and expertise of such third parties for the diagnosis and correction of such errors. If errors are discovered, we may not be able to correct them in a timely manner or at all. In addition, we may need to make significant expenditures to eliminate errors and failures. Material errors and failures in our products could result in loss of or delay in market acceptance of our products and could damage our reputation. Regardless of the source of these defects or errors, we may need to divert the attention of our engineering personnel from our product development efforts to address the detection and correction of these errors and defects. If one or more of our products fail, a customer may assert warranty and other contractual claims for substantial damages against us. Our contracts with customers contain provisions relating to warranty disclaimers and liability limitations, which may not be upheld. Defending a lawsuit, regardless of its merit, is costly and may divert management's attention and harm the market's perception of us and our products. In addition, if our business liability insurance coverage proves inadequate or future coverage is unavailable on acceptable terms or at all, our business, operating results, and financial condition could be adversely impacted.

Previous wording

If our information technology systems, or those of third parties with whom we work, or data are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; and other adverse consequences.

Current wording

If our information technology systems, or those of third parties with whom we work, or our data are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; and other adverse consequences.

Previous wording

Cyber-attacks, malicious internet-based activity, online and offline fraud, and similar activities threaten the confidentiality, integrity, and availability of our sensitive data and information technology systems, and those of the third parties with whom we work. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer "hackers", threat actors, "hacktivists", organized criminal threat actors, personnel (such as through theft or misuse or unintentional disclosure), sophisticated nation states, and nation-state-supported actors.

Current wording

Cyber-attacks, malicious internet-based activity, fraud, and similar activities threaten the confidentiality, integrity, and availability of our sensitive, proprietary, and confidential information, including personal information, business data, trade secrets, intellectual property, and confidential third-party data, and information technology systems, and those of the third parties with whom we work. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer "hackers," threat actors, "hacktivists" promoting certain causes, organized criminal threat actors, personnel (such as through theft or misuse or unintentional disclosure), sophisticated nation states, and nation-state-supported actors.

Previous wording

Some actors now engage, and are expected to continue to engage, in cyber-attacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties with whom we work may be vulnerable to heightened risk of these attacks, including retaliatory cyber-attacks that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our goods and services.

Current wording

Increasingly, cyber-attacks are being used for geopolitical reasons and in conjunction with military conflicts and defense activities to drive strategic advantages for nation states and their supporters. During times of war and other major conflicts, we and the third parties with whom we work may be vulnerable to heightened risk of these attacks, including retaliatory cyber-attacks that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our goods and services.

Previous wording

We and the third parties with whom we work are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, credential stuffing, credential harvesting, personnel misconduct or error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, telecommunications failures, earthquakes, fires, floods, and other similar threats, including attacks enhanced or facilitated through the use of Artificial Intelligence ("AI"). Severe ransomware attacks are also prevalent and could lead to significant interruptions in our operations, ability to provide our products or services, loss of sensitive data and income, reputational harm, and diversion of funds for us and our customers.

Current wording

We and the third parties with whom we work are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including phishing attacks), malicious code (such as viruses and worms), malware (including advanced persistent threat intrusions), denial-of-service attacks, credential stuffing, credential harvesting, personnel misconduct or human error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, telecommunications failures, and other similar threats, including attacks enhanced or facilitated through the use of Artificial Intelligence ("AI"). Severe ransomware attacks are also prevalent and could lead to significant interruptions in our operations, ability to provide our products or services, loss of sensitive data and income, reputational harm, and diversion of funds for us and our customers.

Previous wording

In addition, our reliance on third parties could introduce cybersecurity risks and vulnerabilities, including supply-chain attacks, and other threats to our business operations. For example, we rely on third parties and technologies to operate some of our business systems and process sensitive data in a variety of contexts, including, without limitation, cloud-based infrastructure, data center facilities, encryption and authentication technology, employee email, content delivery to customers, and other functions. We also rely on third-party service providers to provide other products, services, or parts to our customers, or otherwise to operate our business. While we have instituted a third-party risk management process that is designed to account for third party specific risks, our ability to monitor these third parties' information security practices is limited. Third parties may not sufficiently maintain their information security measures or may change them without our knowledge or delay notification to us in a timely manner. If third parties with whom we work experience a security incident or other interruption, we could experience adverse consequences. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties' infrastructure in our supply chain or the supply chains of third parties with whom we work have not been compromised. While we may be entitled to damages if a third party with whom we work fails to satisfy their data privacy or security-related obligations to us, we cannot be certain that our applicable contracts with these third parties will adequately limit our data privacy or security-related liability to them or others, be sufficient to allow us to obtain indemnification or recovery from them for data privacy or security-related liabilities we incur that are caused by them, or be sufficient to cover all or any of our damages.

Current wording

Our reliance on third parties could also introduce cybersecurity risks and vulnerabilities, including supply-chain attacks, and other threats to our business operations due to security incidents or other interruptions they experience. For example, we rely on third parties and technologies to operate some of our business systems and process sensitive data in a variety of contexts, including, without limitation, cloud-based infrastructure, data center facilities, encryption and authentication technology, employee email, content delivery to customers, and other information systems. We also rely on third-party service providers to provide other products, services, or parts to our customers. While we have instituted a third-party risk management process that is designed to account for third party specific risks, our ability to monitor these third parties' information security practices is limited. Third parties may not sufficiently maintain their information security measures or may change them without our knowledge or delay notification to us in a timely manner. If the third parties we rely on are subject to a security breach or otherwise suffer disruptions that affect the services we use, the integrity and availability of our internal information could be compromised causing the loss of confidential or proprietary information, damage to our reputation, and economic loss. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties' infrastructure in our supply chain or the supply chains of third parties with whom we work have not been compromised. While we may be entitled to damages if a third party with whom we work fails to satisfy their data privacy or security-related obligations to us, we cannot be certain that our applicable contracts with these third parties will adequately limit our data privacy or security-related liability to them or others, be sufficient to allow us to obtain indemnification or recovery from them, or be sufficient to cover all or any of our damages.

Previous wording

Although we have multiple and layered controls and security measures in place designed to prevent and detect cyberattacks, experienced computer hackers are increasingly organized and sophisticated and we cannot guarantee that our security measures will be sufficient to protect against unauthorized access to our IT networks, software and systems. Malicious attack efforts operate on a large-scale and sometimes offer targeted attacks as a paid-for service. In addition, the techniques used to obtain access or sabotage networks change frequently, and we may be unable to anticipate such techniques, implement adequate preventative measures, or detect and stop security breaches that may arise from such techniques. As a provider of security solutions, we may be a more attractive target for such attacks. Other individuals or entities, including personnel or vendors, may also intentionally or unintentionally provide unauthorized access to our IT environments.

Current wording

Although we have multiple and layered controls and security measures designed to prevent, detect and respond to cyberattacks, experienced computer hackers are increasingly organized and sophisticated, and we cannot guarantee that our security measures will be sufficient to protect against unauthorized access to our IT networks, software and systems. Malicious attack efforts operate on a large-scale and sometimes offer targeted attacks as a paid-for service. In addition, the techniques used to obtain access or sabotage networks change frequently, and we may be unable to anticipate such techniques, implement adequate preventative measures, or detect and stop security breaches that may arise from such techniques. As a provider of security solutions, we may be a more attractive target for such attacks. Other individuals or entities, including personnel or vendors, may also intentionally or unintentionally provide unauthorized access to our IT environments.

Previous wording

We take steps to detect, mitigate, and remediate vulnerabilities in our information systems (such as hardware and/or software). We rely on third parties for vulnerability reporting including severity assessments that help assess prioritization in applying patches. We may not, however, detect or remediate all such vulnerabilities including on a timely basis. Further, we may experience delays in developing and deploying remedial measures and patches designed to address identified vulnerabilities. Vulnerabilities could be exploited and result in a security incident.

Current wording

While we take steps to detect, mitigate, and remediate vulnerabilities in our information systems (such as hardware and/or software), vulnerabilities could be exploited and result in a security incident. We rely on third parties for vulnerability reporting including severity assessments that help prioritize patching. We may not, however, detect or remediate all such vulnerabilities including on a timely basis.

Previous wording

Applicable data privacy and security obligations may require us to notify relevant stakeholders, including affected individuals, customers, regulators and investors, of security incidents, or to implement other requirements, such as providing credit monitoring. Such disclosures and compliance with such requirements are costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences.

Current wording

Applicable data privacy and security obligations may require us, or we may voluntarily choose, to notify relevant stakeholders, including affected individuals, customers, regulators and investors, of security incidents, or take other actions, such as providing credit monitoring and identity theft protection services. Such disclosures and related actions can be costly, and the disclosure or the failure to comply with such applicable requirements could lead to adverse consequences.

Previous wording

If we, or a third party with whom we work, experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences, such as government enforcement actions; additional reporting, disclosure, notification and/or oversight requirements; restrictions on processing sensitive data; litigation; indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may cause customers to stop using our services, deter new customers from using our services, and negatively impact our ability to grow and operate our business.

Current wording

If we, or a third party with whom we work, experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences, such as government enforcement actions; additional reporting, disclosure, notification and/or oversight requirements; restrictions on processing sensitive data; litigation; indemnification obligations;

Previous wording

The market for application and network performance management, service assurance, cybersecurity solutions, and business intelligence is highly competitive and characterized by rapid changes in technology, evolving industry standards, changes in customer requirements, a current high level of and increasing competition, and frequent product introductions and enhancements. Our success is dependent upon our ability to meet our customers' needs, which are driven by changes in technologies, new application technologies, new security risks and the emergence of new industry standards. In addition, new technologies may shorten the life cycle for our products and solutions or could render our existing or planned products and services less competitive or obsolete. We must address demand from our customers for advancements in our products and services applications to support our customers' growing needs and requirements in complex networks. To meet this challenge and remain competitive in the market, we must introduce new enhancements and additional form factors to our existing product lines and service offerings. If we are unable to develop, introduce and communicate new network and application performance management and service assurance products, network security products, business intelligence products, and solutions or enhancements to existing products in a timely and successful manner, this inability could have a material and adverse impact on our business, operating results and financial condition.

Current wording

The market for application and network performance management, service assurance, cybersecurity solutions, and business intelligence is highly competitive and characterized by rapid changes in technology, including AI, evolving industry standards, changes in customer requirements, a current high level of and increasing competition, and frequent product introductions and enhancements. Our success is dependent upon our ability to meet our customers' needs, which are driven by changes in technologies, new application technologies, new security risks and the emergence of new industry standards. In addition, new technologies may shorten the life cycle for our products and solutions or could render our existing or planned products and services less competitive or obsolete. We must address demand from our customers for advancements in our products and services applications to support our customers' growing needs and requirements in complex networks. To meet this challenge and remain competitive in the market, we must introduce new enhancements and additional form factors to our existing product lines and service offerings. If we are unable to develop, introduce and communicate new network and application performance management and service assurance products, network security products, business intelligence products, and solutions or enhancements to existing products in a timely and successful manner, this inability could have a material and adverse impact on our business, operating results and financial condition.

Previous wording

As our success depends in part on our ability to develop product enhancements and new products and solutions that keep pace with continuing changes in technology, cyber risk and customer preferences, we must devote significant resources to research and development, development and introduction of new products and enhancements on a timely basis, and obtaining market acceptance for our existing products and new products. We have introduced and intend to continue to introduce new products and solutions, including increased migration to "software as a service" and software-deployed products as well as cybersecurity products. If the introduction of these products and solutions is significantly delayed or if we are unsuccessful in bringing these products and solutions to market, our business, operating results, and financial condition could be materially and adversely impacted. We are developing and are already deploying a number of new products as well as enhancements to our existing products and offerings, including our Omnis cybersecurity suite as well as additional software only solutions and products available in multiple form factors for most of our existing solutions.

Current wording

As our success depends in part on our ability to develop product enhancements and new products and solutions that keep pace with continuing changes in technology, cyber risk and customer preferences, we must devote significant resources to research and development, development and introduction of new products and enhancements on a timely basis, and obtaining market acceptance for our existing products and new products. We have introduced and intend to continue to introduce new products and solutions, including ongoing migration to "software as a service" as well as cybersecurity products. If the introduction of these products and solutions is significantly delayed or if we are unsuccessful in bringing these products and solutions to market, our business, operating results, and financial condition could be materially and adversely impacted. We are developing and are already deploying a number of new products as well as enhancements to our existing products and offerings, as well as additional software only solutions and products available in multiple form factors for most of our existing solutions.

Previous wording

Specific components that are necessary for the hardware assembly of our instruments are obtained from separate sole source suppliers or a limited group of suppliers, including some with operations in locations with geopolitical uncertainty. These components include our network interface cards and proprietary hardware. Our reliance on sole or limited suppliers involves several risks, a lack of control over the manufacturing process and inventory management, potential inability to obtain an adequate supply of required components, and the inability to exercise control over pricing, quality and timely delivery of components. For most of our products, we do not have the internal manufacturing capabilities to meet our customers' demands so we rely on third parties to supplement our capabilities. It is our practice to mitigate these risks by partnering with key suppliers, including distributors, to establish a variety of supply continuity practices. These practices may include, among other approaches, establishing buffer supply requiring suppliers to maintain adequate stocks of materials and use-based and kanban programs to set supply thresholds. We also maintain escrow arrangements for certain technologies. Where possible, we use widely available off the shelf hardware and work with large suppliers with multiple factories in diverse geographies. However, failure of supply, including because of a public health crisis, a geopolitical situation, terrorism or war, sanctions or embargoes, or failure to execute effectively on any of our risk mitigation practices could result in our inability to obtain adequate supply or deliveries or to ship our products on a timely basis or at all. Moreover, if we are unable to continue to acquire from these suppliers on acceptable terms or should any of these suppliers cease to supply us with components for any reason, we may not be able to identify and integrate an alternative source of supply in a timely fashion or at the same costs. Any transition to one or more alternate manufacturers could result in significant delays, operational problems, and increased costs, and may limit our ability to deliver our products to our customers on time for such transition period or, in extreme circumstances, at all. These risks could damage relationships with our current and prospective customers, cause shortfalls in expected revenue, and could materially and adversely impact our business, operating results and financial condition.

Current wording

Specific components that are necessary for the hardware assembly of our instruments are obtained from separate sole source suppliers or a limited group of suppliers, including some with operations in locations with geopolitical uncertainty. These components include our network interface cards and proprietary hardware. Our reliance on sole or limited suppliers involves several risks, a lack of control over the manufacturing process and inventory management, potential inability to obtain an adequate supply of required components, and the inability to exercise control over pricing, quality and timely delivery of components. For most of our products, we do not have the internal manufacturing capabilities to meet our customers' demands so we rely on third parties to supplement our capabilities. It is our practice to mitigate these risks by partnering with key suppliers, including distributors, to establish a variety of supply continuity practices. These practices may include, among other approaches, establishing buffer supply requiring suppliers to maintain adequate stocks of materials and use-based and kanban programs to set supply thresholds. We also maintain escrow arrangements for certain technologies. Where possible, we use widely available off-the-shelf hardware and work with large suppliers with multiple factories in diverse geographies. However, failure of supply, including because of a public health crisis, geopolitical conflicts, terrorism or war, tariffs and associated trade wars, sanctions or embargoes, or failure to execute effectively on any of our risk mitigation practices could result in our inability to obtain adequate supply or deliveries or to ship our products on a timely basis or at all. Moreover, if we are unable to continue to acquire from these suppliers on acceptable terms or should any of these suppliers cease to supply us with components for any reason, we may not be able to identify and integrate an alternative source of supply in a timely fashion or at the same costs. Any transition to one or more alternate manufacturers could result in significant delays, operational problems, and increased costs, and may limit our ability to deliver our products to our customers on time for such transition period or, in extreme circumstances, at all. These risks could damage relationships with our current and prospective customers, cause shortfalls in expected revenue, and could materially and adversely impact our business, operating results and financial condition.

Previous wording

We derive nearly all our revenue from the sale of products and services that are designed to allow our customers to assure the delivery of services through management of the performance and network security of applications across IP networks. We have expanded our operations in the past through acquisitions and organic growth and may continue to expand them in the future to gain share in the evolving markets in which we operate. Therefore, we must be able to predict the appropriate features and prices for future products to address the market, the optimal distribution strategy, and the future changes to the competitive environment. For us to be successful, our potential customers must recognize the value of more sophisticated application management and network security solutions, decide to invest in the management of their networked applications and, in particular, adopt our management solutions. Any failure of this market to continue to be viable would materially and adversely impact our business, operating results, and financial condition. Additionally, businesses may choose to outsource the operations and management of their networks to managed service providers. Our business may depend on our ability to continue to develop relationships with these service providers and successfully market our products to them.

Current wording

We derive nearly all our revenue from the sale of products and services that are designed to allow our customers to ensure the delivery of services through management of the performance and network security of applications across IP networks. We have expanded our operations in the past through acquisitions and organic growth and may continue to expand them in the future to gain share in the evolving markets in which we operate. Therefore, we must be able to predict the appropriate features and prices for future products to address the market, the optimal distribution strategy, and the future changes to the competitive environment. For us to be successful, our potential customers must recognize the value of more sophisticated application management and network security solutions, decide to invest in the management of their networked applications and adopt our management solutions. Any failure of this market to continue to be viable would materially and adversely impact our business, operating results, and financial condition. Additionally, businesses may choose to outsource the operations and management of their networks to managed service providers. Our business may depend on our ability to continue to develop relationships with these service providers and successfully market our products to them.

Previous wording

Failure to manage growth properly and to implement enhanced automated systems could adversely impact our business.

Current wording

Failure to manage growth properly and to implement enhanced automated systems, including systems with AI, could adversely impact our business.

Previous wording

The growth in size and complexity of our business and our customer base has been and will continue to be a challenge to our management and operations. Additional growth will place significant demands on our management, infrastructure, and other resources. To manage further growth effectively, we must hire, integrate, and retain highly skilled personnel qualified to manage our expanded operations. We will also need to maintain and continually improve our financial and management controls, reporting systems, and procedures as our business grows and evolves over time. If we are unable to manage our growth effectively, our costs, the quality of our products, the effectiveness of our sales organization, attraction and retention of key personnel, our business, our operating results and financial condition could be materially and adversely impacted. To manage our growth effectively, we may need to implement new or enhanced automated infrastructure technology and systems.

Current wording

The growth in size and complexity of our business and our customer base has been and will continue to be a challenge to our management and operations. Additional growth will place significant demands on our management, infrastructure, and other resources. To manage further growth effectively, we must increase management depth and enhance succession planning. It is also important to our continued success that we hire qualified employees, properly train them and manage out poorly performing personnel, all while maintaining our corporate culture and spirit of innovation. If we are not successful at these efforts, our growth and operations could be adversely affected, and we may not be able to achieve our near- and long-term financial or operational goals. We will also need to maintain and continually improve our financial and management controls, reporting systems, and procedures as our business grows and evolves over time. If we are unable to manage our growth effectively, our costs, the quality of our products, the effectiveness of our sales organization, our ability to attract and retain key personnel, our business, our operating results and financial condition could be materially and adversely impacted. To manage our growth effectively, we may need to implement new or enhanced automated infrastructure technology and systems, including systems with AI.

Previous wording

As our business evolves, we must also expand and adapt our information technology (IT) and operational infrastructure. Our business relies on our data systems, billing systems and other operational and financial reporting and control systems. These systems have become increasingly complex due to the diversification and complexity of our business and acquisitions of new businesses with different systems. To manage our technical support infrastructure effectively and improve our sales efficiency, we will need to continue to upgrade and improve our data systems, billing systems, ordering processes, customer relationship management systems, and other operational and financial systems, procedures and controls. These upgrades and improvements may be difficult and costly, and they may require employees to dedicate a significant amount of time to implement. If we are unable to adapt our systems and organization in a timely, efficient, and cost-effective manner to accommodate changing circumstances, our business may be adversely affected. If the third parties we rely on for cloud-based or hosted data solutions for our internal network and information systems are subject to a security breach or otherwise suffer disruptions that affect the services we utilize, the integrity and availability of our internal information could be compromised causing the loss of confidential or proprietary information, damage to our reputation and economic loss.

Current wording

As our business evolves, we must also expand and adapt our information technology (IT) and operational infrastructure. Our business relies on our data systems, billing systems and other operational and financial reporting and control systems. These systems have become increasingly complex due to the complexity of our business and acquisitions of new businesses with different systems. To manage our technical support infrastructure effectively and improve our sales efficiency, we will need to continue to upgrade and improve our data systems, billing systems, ordering processes, customer relationship management systems, and other operational and financial systems, procedures and controls. These upgrades and improvements may be difficult and costly, and they may require employees to dedicate a significant amount of time to implement. If we are unable to adapt our systems and organization in a timely, efficient, and cost-effective manner to accommodate changing circumstances, our business may be adversely affected.

Previous wording

Our future growth and success may require us to increase the number and use of our indirect sales efforts through our distributors and channel partners and to leverage those relationships to expand these distribution channels and to develop new indirect distribution channels to increase revenue. Our channel partners have no obligation to purchase any products from us. Some of our distribution and channel partners also distribute and sell competitive products and services and the reduction in sales of our products by these partners could materially reduce our revenues. In addition, they could internally develop products that compete with our solutions or partner with our competitors and bundle or resell competitors' solutions, possibly at lower prices. The potential inability to develop relationships with new partners in new markets, expand and manage our existing partner relationships, the unwillingness of our partners to market and sell our products effectively or the loss of existing partnerships or experienced personnel could have a material and adverse impact on our business, operating results and financial condition. Sales to customers outside the United States accounted for 43%, 36%, and 41% of our total revenue for the fiscal years ended March 31, 2024, 2023 and 2022, respectively.

Current wording

Our future growth and success may require us to increase the number and use of our indirect sales efforts through our distributors and channel partners and to leverage those relationships to expand these distribution channels and to develop new indirect distribution channels to increase revenue. Our channel partners have no obligation to purchase any products from us. Some of our distribution and channel partners also distribute and sell competitive products and services and the reduction in sales of our products by these partners could materially reduce our revenues. In addition, they could internally develop products that compete with our solutions or partner with our competitors and bundle or resell competitors' solutions, possibly at lower prices. The potential inability to develop relationships with new partners in new markets, expand and manage our existing partner relationships, the unwillingness of our partners to market and sell our products effectively or the loss of existing partnerships or experienced personnel could have a material and adverse impact on our business, operating results and financial condition. Sales to customers outside the United States accounted for 43%, 43%, and 36% of our total revenue for the fiscal years ended March 31, 2025, 2024 and 2023, respectively.

Previous wording

The need to develop such relationships can be particularly acute in areas outside of the U.S. Recruiting and retaining qualified channel partners and training them in the use of our technology and services and ensuring that they comply with our legal and ethical requirements requires significant time and resources throughout the relationship.

Current wording

The need to develop such relationships can be particularly acute in areas outside of the U.S. Recruiting and retaining qualified channel partners and training them in the use of our technology and services and ensuring that they comply with our legal and policy requirements requires significant time and resources throughout the relationship. If we are unable to devote the time necessary to retain and train such channel partners, our revenues could be negatively impacted.

Previous wording

Our business and operations, and the operations of our customers, partners, and/or suppliers, may be adversely affected by epidemics and pandemics. Future epidemics and pandemics risk disrupting and adversely affecting our business operations and financial results, as well as the markets and communities in which we and our customers, suppliers and other business partners operate.

Current wording

Our business and operations, and the operations of our customers, partners, and/or suppliers, may be adversely affected by epidemics and pandemics.

Previous wording

We face risks related to epidemics, pandemics, and other outbreaks of communicable diseases that adversely affect global commercial activity, economies, financial markets, and companies. An epidemic or pandemic or other outbreak of communicable diseases, poses the risk that we or our customers, suppliers, and other business partners may be disrupted or prevented from conducting normal business activities for certain periods of time, the durations of which are uncertain, and may otherwise experience significant impairments of business activities.

Current wording

We face risks related to epidemics, pandemics, and other outbreaks of communicable diseases that adversely affect the commercial activity, economies, financial markets, and communities in which we and our customers, suppliers and other business partners operate. An epidemic, pandemic, or other outbreak of communicable diseases poses the risk that we, our customers, suppliers, and other business partners may be disrupted or prevented from conducting normal business activities for certain periods of time, the durations of which are uncertain, and may otherwise experience significant impairment of business activities. Our business continuity plans and processes may not anticipate or plan for every potential risk scenario for the outbreak of an epidemic or pandemic and our customers, suppliers, and other business partners may not have similarly robust continuity plans and processes in place.

Previous wording

To the extent future epidemic or pandemic adversely affects our business and financial results, it may also have the effect of heightening many of the other risks described in this "Risk Factors" section, such as those relating to our quarterly revenue and operating results, the estimates made for our critical accounting policies, and the operation of internal controls over such estimates, as well as on our liquidity and on our ability to satisfy our indebtedness obligations and debt covenants.

Current wording

To the extent a future epidemic or pandemic adversely affects our business and financial results, it may also have the effect of heightening many of the other risks described in this "Risk Factors" section, such as those relating to the estimates made for our critical accounting policies, and the operation of internal controls over such estimates, as well as on our liquidity and on our ability to satisfy any indebtedness obligations and debt covenants.

Previous wording

Our business is heavily dependent on our intellectual property. We rely upon a combination of patent, copyright, trademark and trade secret laws and registrations and non-disclosure and other contractual and license arrangements to protect our intellectual property rights. The reverse engineering, unauthorized copying, or other misappropriation of our intellectual property, including intentionally or unintentionally through AI, could enable third parties to benefit from our technology without compensating us or make claims on our IP. Furthermore, the laws of some foreign jurisdictions do not offer the same protections for our proprietary rights as the laws of the United States, and we may be subject to unauthorized use of our products in those countries. Legal proceedings to enforce our intellectual property rights could be burdensome and expensive and could involve a high degree of uncertainty. In addition, legal proceedings may divert management's attention from growing our business. There can be no assurance that the steps we have taken to protect our intellectual property rights will be adequate to deter misappropriation or loss of proprietary information, or that we will be able to detect unauthorized use by third parties and take appropriate steps to enforce our intellectual property rights. The unauthorized copying or use of our products or proprietary information could result in reduced sales of our products and eventually harm our operating results.

Current wording

Our business is heavily dependent on our intellectual property. We rely upon a combination of patent, copyright, trademark and trade secret laws and registrations and non-disclosure and other contractual and license arrangements to protect our intellectual property rights. The reverse engineering, unauthorized copying, or other misappropriation of our intellectual property, including intentionally or unintentionally through AI, could enable third parties to benefit from our technology without compensating us or make claims on our intellectual property. Furthermore, the laws of some foreign jurisdictions do not offer the same protections for our proprietary rights as the laws of the United States, and we may be subject to unauthorized use of our products in those countries. Legal proceedings to enforce our intellectual property rights could be burdensome and expensive and could involve a high degree of uncertainty. In addition, legal proceedings may divert management's attention from growing our business. There can be no assurance that the steps we have taken to protect our intellectual property rights will be adequate to deter misappropriation or loss of proprietary information, or that we will be able to detect unauthorized use by third parties and take appropriate steps to enforce our intellectual property rights. The unauthorized copying or use of our products or proprietary information could result in reduced sales of our products and eventually harm our operating results.

Previous wording

We are and may continue to be subject to claims by others, whether valid or not, that our products infringe on their intellectual property rights, patents, copyrights, or trademarks. Further, intellectual property issues, such as ownership, copyright, and patentability, have not been fully settled with respect to AI technology. These claims, whether or not valid, could require us to spend significant sums in litigation, pay damages or royalties, delay product shipments, reengineer our products, rename our products and rebuild name recognition or acquire licenses to such third-party intellectual property. We may not be able to secure any required licenses on commercially reasonable terms or secure them at all, which could force our customers to stop using our products, or in the case of resellers and others, stop selling our products. In some cases, we may have agreed to contract terms that indemnify our customers and partners if our products or technology infringe or misappropriate specified third party intellectual property rights; therefore, we could become involved in litigation or claims brought against our customers or partners if our products or technology are the subject of such allegations. Any of these claims or resulting events could have a material and adverse impact on our business, operating results, and financial condition.

Current wording

We have and may continue to be subject to claims by others, whether valid or not, that our products infringe on their intellectual property rights, patents, copyrights, or trademarks. Further, intellectual property issues, such as ownership, copyright, and patentability, have not been fully settled with respect to AI technology. These claims, whether valid or not, could require us to spend significant sums in litigation, pay damages or royalties, delay product shipments, reengineer our products, rename our products and rebuild name recognition or acquire licenses to such third-party intellectual property. We may not be able to secure any required licenses on commercially reasonable terms or secure them at all, which could force our customers to stop using our products, or in the case of resellers and others, stop selling our products. In some instances, we have defended against specious patent infringement claims by non-practicing or patent assertion entities, which ultimately achieved successful outcomes. In some cases, we have agreed to contract terms that indemnify our customers and partners if our products or technology infringe or misappropriate third party intellectual property rights; therefore, we could become involved in litigation or claims brought against our customers or partners if our products or technology are the subject of such allegations. Any of these claims or resulting events could have a material and adverse impact on our business, operating results, and financial condition.

Previous wording

Our indebtedness may limit our operations and our use of our cash flow, and any failure to comply with the covenants that apply to our indebtedness could adversely affect our liquidity and financial condition.

Current wording

Any current or future indebtedness may limit our operations and our use of our cash flow, and any failure to comply with the covenants that apply to any indebtedness could adversely affect our liquidity and financial condition.

Previous wording

On July 27, 2021, we amended and extended our existing credit facility (Second Amended and Restated Credit Agreement) with a syndicate of lenders. The Second Amended and Restated Credit Agreement provides for a five-year $800.0 million senior secured revolving credit facility, including a letter of credit sub-facility of up to $75.0 million. We may elect to use the new credit facility for working capital purposes (including to finance the repurchase of common stock). The commitments under the Second Amended and Restated Credit Agreement will expire on July 27, 2026, and any outstanding loans will be due on that date. As of the date of this report, we had $100.0 million in outstanding indebtedness under the Second Amended and Restated Credit Agreement. Our debt level can have negative consequences, including exposing us to future interest rate risk. We may incur significantly more debt in the future, and there can be no assurance that our cost of funding will not substantially increase. Our current revolving credit facility also imposes certain restrictions on us; for a more detailed description please refer to "Management's Discussion and Analysis of Financial Condition and Results of Operations." Upon an event of default, for example, the administrative agent, with the consent of, or at the request of, the holders of more than 50% in principal amount of the loans and commitments, may terminate the commitments and accelerate the maturity of the loans outstanding under the Second Amended and Restated Credit Agreement and enforce certain other remedies under the Second Amended and Restated Credit Agreement and other loan documents, which would adversely affect our liquidity and financial condition. If we take on additional indebtedness, the risks described above could increase.

Current wording

We are party to a Third Amended and Restated Credit Agreement, which provides for a five-year $600.0 million senior secured revolving credit facility, including a letter of credit sub-facility of up to $75.0 million. We may elect to use the new credit facility for working capital purposes (including to finance the repurchase of common stock). The commitments under the Third Amended and Restated Credit Agreement will expire on October 4, 2029, and any outstanding loans will be due on that date. As of the date of this report, we did not have any amounts outstanding under the Third Amended and Restated Credit Agreement. Our debt level can have negative consequences, including exposing us to future interest rate risk. We may incur significantly more debt in the future, and there can be no assurance that our cost of funding will not substantially increase. Our current revolving credit facility also imposes certain restrictions on us; for a more detailed description please refer to "Management's Discussion and Analysis of Financial Condition and Results of Operations." Upon an event of default, for example, the administrative agent, with the consent of, or at the request of, the holders of more than 50% in principal amount of the loans and commitments, may terminate the commitments and accelerate the maturity of the loans outstanding and enforce certain other remedies under the Third Amended and Restated Credit Agreement and other loan documents, which would adversely affect our liquidity and financial condition. If we take on additional indebtedness, the risks described above could increase.

Previous wording

Our ability to meet our obligations under the Second Amended and Restated Credit Agreement will depend on market conditions and our future performance, which is subject to economic, financial, competitive, and other factors beyond our control. If we are unable to remain profitable, or if we use more cash than we generate in the future, our level of indebtedness at such time could adversely affect our operations by limiting or prohibiting our ability to obtain financing for additional capital expenditures, acquisitions and general corporate purposes. In addition, if we are unable to make payments as required under the Second Amended and Restated Credit Agreement, we would be in default under the terms of the loans, which could seriously harm our business. If we incur significantly more debt, this could intensify the risks described above.

Current wording

Our ability to meet our obligations under the Third Amended and Restated Credit Agreement will depend on market conditions and our future performance, which is subject to economic, financial, competitive, and other factors beyond our control. If we are unable to remain profitable, or if we use more cash than we generate in the future, our level of indebtedness at such time could adversely affect our operations by limiting or prohibiting our ability to obtain financing for additional capital expenditures, acquisitions and general corporate purposes. In addition, if we are unable to make payments as required under the Third Amended and Restated Credit Agreement, we would be in default under the terms of the loans, which could seriously harm our business. If we incur significantly more debt, this could intensify the risks described above.

Previous wording

However, we may not be able to obtain additional capital when we want or need it, or capital may not be available on satisfactory terms, including in light of current macroeconomic conditions, such as heightened inflation and increasing interest rates, stock price volatility, bank failures and the risk of a potential recession. Furthermore, any additional capital may have terms that adversely affect our business, such as new financial or operating covenants, or that may result in dilution to our stockholders.

Current wording

However, we may not be able to obtain additional capital when we want or need it, or capital may not be available on satisfactory terms, including in light of current macroeconomic conditions, such as heightened inflation and increasing interest rates, stock price volatility, and the risk of a potential recession. Furthermore, any additional capital may have terms that adversely affect our business, such as new financial or operating covenants, or that may result in dilution to our stockholders.

Previous wording

We operate in businesses where there is intense competition for experienced personnel in all our global markets. We depend on our ability to identify, recruit, hire, train, develop and retain qualified and effective professionals and to attract and retain talent needed to execute our business strategy. Our future success depends in large part upon our ability to attract, train, motivate and retain highly skilled employees, particularly executives, sales and marketing personnel, software engineers, and technical support personnel. The complexity of our products, software systems and services require highly trained professionals. While we presently have a sophisticated, dedicated and experienced team of employees who have a deep understanding of our business lines, the labor market for these individuals has historically been very competitive due to the limited number of people available with the necessary technical skills and understanding. If we are unable to attract and retain the highly skilled technical personnel that are integral to our sales, marketing, product development and technical support teams, the rate at which we can generate sales and develop new products or product enhancements may be limited. This inability could have a material and adverse impact on our business, operating results, and financial condition.

Current wording

We operate in global markets where there is intense competition for experienced personnel. We depend on our ability to identify, recruit, hire, train, develop and retain qualified and effective professionals and to attract and retain talent needed to execute our business strategy. Our future success depends in large part upon our ability to attract, train, motivate and retain highly skilled employees, particularly executives, sales and marketing personnel, software engineers, and technical support personnel. The complexity of our products, software systems and services require highly trained professionals. The labor market for these individuals has historically been very competitive due to the limited number of people available with the necessary technical skills and understanding. If we are unable to attract and retain the highly skilled technical personnel that are integral to our sales, marketing, product development and technical support teams, the rate at which we can generate sales and develop new products or product enhancements may be limited. This inability could have a material and adverse impact on our business, operating results, and financial condition.

Previous wording

Loss of key personnel could adversely impact our business. Our future success depends to a significant degree on the skills, experience and efforts of Anil Singhal, our President, Chief Executive Officer, and co-founder, and our other key executive officers and senior managers to work effectively as a team. Effective succession planning is also important for our long-term success. Failure to ensure effective transfers of knowledge and smooth transitions involving key employees could hinder our strategic planning and execution. The loss of one or more of our key personnel could have a material and adverse impact on our business, operating results, and financial condition. We must, therefore, plan for and manage the succession of key executives due to retirement, illness, or competitive offers.

Current wording

Loss of key personnel or a failure of our succession plan could adversely impact our business. Our future success depends to a significant degree on the skills, experience and efforts of Anil Singhal, our President, Chief Executive Officer, and co-founder, and our other key executive officers and senior managers to work effectively as a team. Effective succession planning is also important for our long-term success. For example, on May 8, 2025, we announced the retirements from their roles of Ms. Bua, our Chief Financial Officer, and Mr. Szabados, our Chief Operating Officer, each to be effective May 31, 2025, and the appointments of Mr. Piazza as our new Chief Financial Officer and Mr. Munshi as our new Chief Operating Officer, each to be effective on June 1, 2025. Failure to ensure effective transfers of knowledge and smooth transitions involving key employees could hinder our strategic planning and execution. The loss of one or more of our key personnel could have a material and adverse impact on our business, operating results, and financial condition. We must, therefore, continuously plan for and manage the succession of key executives due to retirement, illness, or competitive offers.

Previous wording

We and our suppliers are subject to, and may become subject to, evolving laws and regulations pertaining to ESG matters. In addition, regulators, customers, investors, employees and other stakeholders are increasingly focused on ESG matters and related disclosures. These changing rules, regulations and stakeholder expectations have resulted in, and are likely to continue to result in, increased general and administrative expenses and increased management time and attention spent complying with or meeting such regulations and expectations. We also communicate certain ESG initiatives and goals in our public disclosures. Statements about our ESG initiatives and goals, and progress against those goals, may be based on standards for measuring progress that are still developing, internal controls and processes that continue to evolve, and assumptions that are subject to change in the future. If our ESG-related data, processes and reporting are incomplete or inaccurate, or if we fail to achieve progress with respect to our ESG goals on a timely basis, or at all, our reputation, business, financial performance and growth could be adversely affected.

Current wording

We and our suppliers are subject to, and may become subject to, evolving laws and regulations pertaining to identifying, measuring, and reporting ESG matters. In addition, regulators, customers, investors, employees and other stakeholders remain focused on ESG matters and related disclosures. These changing rules, regulations and stakeholder expectations have resulted in, and are likely to continue to result in, expense and management time and attention spent complying with or meeting such regulations and expectations. We also communicate certain ESG initiatives and goals in our public disclosures. Statements about our ESG initiatives and goals, and progress against those goals, may be based on standards for measuring progress that are still developing, internal controls and processes that continue to evolve, and assumptions that are subject to change in the future. If our ESG-related data, processes and reporting are incomplete or inaccurate, or if we fail or are perceived to have failed to achieve progress with respect to our ESG goals on a timely basis, or at all, our reputation, business, financial performance and growth could be adversely affected. However, the lack of harmonization in the ESG legal and regulatory landscape across the jurisdictions in which we operate may subject us to enhanced compliance risks and costs. In the U.S., efforts targeting diversity, equity, and inclusion programs and ESG efforts whether through legislation, policies, investigations, litigation, and regulatory scrutiny could result in the Company facing additional obligations, becoming the subject of investigations or enforcement actions, or sustaining reputational harm.

Previous wording

The service assurance, application performance management, network security, cybersecurity and business intelligence markets are highly competitive, rapidly evolving, and fragmented markets that have overlapping technologies and competitors, both large and small, and we expect competition on solutions offerings and pricing to increase. We believe customers make service management system, network security, cybersecurity and business intelligence purchasing decisions based primarily upon the following factors:

Current wording

The service assurance, application performance management, network security, cybersecurity and business intelligence markets are highly competitive, rapidly evolving, and fragmented markets that have overlapping technologies and competitors, both large and small, and we expect increasing competition on solutions offerings and pricing. We believe customers make service management system, network security, cybersecurity and business intelligence purchasing decisions based primarily upon the following factors:

Previous wording

We compete with a large and growing number of providers of service assurance, application performance management solutions, network security offerings and network traffic analyzers and probes, as well as with providers of business intelligence services. In addition, leading network equipment, network security and service assurance and application technology vendors offer their own management solutions, including products which they license from other competitors. Some of our current and potential competitors have greater name recognition and substantially greater financial, management, marketing, service, support, technical, distribution and other resources than we do. In addition, some of our customers develop their own in-house solutions to meet their technological needs. Further, in recent years some of our competitors have been acquired by larger companies that are seeking to enter or expand in the markets in which we operate. We expect this trend to continue as companies attempt to strengthen or maintain their market positions in an evolving industry. Therefore, given their larger size and greater resources, our competitors may be able to respond more effectively than we can to new or changing opportunities, technologies, standards and customer requirements.

Current wording

We compete with a large and growing number of providers of service assurance, application performance management solutions, network security offerings and network traffic analyzers and probes, as well as with providers of business intelligence services. In addition, leading network equipment, network security and service assurance and application technology vendors offer their own management solutions, including products which they license from other competitors. Some of our current and potential competitors have greater name recognition and substantially greater financial, management, marketing, service, support, technical, distribution and other resources than we do. Other competitors may take greater advantage of emerging new technologies and applications to compete with us. In addition, some of our customers develop their own in-house solutions to meet their technological needs. Further, in recent years some of our competitors have been acquired by larger companies that are seeking to enter or expand in the markets in which we operate. We expect this trend to continue as companies attempt to strengthen or maintain their market positions in an evolving industry. Therefore, given their larger size and greater resources, our competitors may be able to respond more effectively than we can to new or changing opportunities, technologies, standards and customer requirements, including by lowering prices to attract our customers, and may be less dependent on key industry events to generate sales for their products.

Previous wording

We could be materially adversely affected by increased regulation of the Internet and Internet commerce in any country where we operate, as well as access to or commerce conducted on the Internet. Further, governments may change or increase regulation or restriction of sales, licensing, distribution, and exporting or importing of certain technologies to certain countries. The adoption of additional regulation of the Internet and Internet commerce could decrease demand for our products, and, at the same time, increase the cost of selling our products, which could have a material and adverse effect on our financial condition and results of operations. Failure to comply with governmental laws and regulations related to evolving technologies, such as Artificial Intelligence, could harm our business. Our business is subject to regulation by various federal, state, local and foreign governments. In certain jurisdictions, these regulatory requirements may be more stringent than those in the United States. These laws and regulations may also impact our innovation and business drivers in developing or using new and emerging technologies, including those related to AI and machine learning. Noncompliance with applicable regulations or requirements could subject us to investigations, sanctions, enforcement actions, lost profits, fines, damages, civil and criminal penalties, injunctions or other consequences. If any governmental sanctions are imposed, or if we do not prevail in any possible civil or criminal litigation, our business, results of operations, and financial condition could be materially adversely affected. In addition, responding to any action will likely result in a significant diversion of management’s attention and resources. Enforcement actions and sanctions could have a material and adverse impact on our business, reputation, operating results and financial condition.

Current wording

We could be materially adversely affected by increased regulation of the Internet and Internet commerce in any country where we operate, as well as access to or commerce conducted on the Internet. Further, governments may change or increase regulation or restriction of sales, licensing, distribution, and exporting or importing of certain technologies to certain countries. The adoption of additional regulation of the Internet and Internet commerce could decrease demand for our products, and, at the same time, increase the cost of selling our products, which could have a material and adverse effect on our financial condition and results of operations. Failure to comply with governmental laws and regulations related to evolving technologies, such as AI, could harm our business. Our business is subject to regulation by various federal, state, local and foreign governments. In certain jurisdictions, these regulatory requirements may be more stringent than those in the United States. These laws and regulations may also impact our innovation and business drivers in developing or using new and emerging technologies, including those related to AI and machine learning. Noncompliance with applicable regulations or requirements could subject us to investigations, sanctions, enforcement actions, lost profits, fines, damages, civil and criminal penalties, injunctions or other consequences. If any governmental sanctions are imposed, or if we do not prevail in any possible civil or criminal litigation, our business, reputation, results of operations, and financial condition could be materially adversely affected. In addition, responding to any action will likely result in a significant diversion of management’s attention and resources.

Previous wording

We are subject to stringent and evolving U.S. state, local, and foreign laws, regulations and rules, contractual obligations, policies, and other obligations related to data privacy and security. Our actual, or perceived failure to comply with such obligations (or such failure by the third parties with whom we work) could lead to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business, results of operations; reputational harm; loss of revenue or profits; and other adverse business consequences.

Current wording

We are subject to stringent and evolving U.S. state, local, and federal, and foreign laws, regulations and rules, contractual obligations, industry standards, policies, and other obligations related to data privacy and security. Our actual, or perceived failure to comply with such obligations (or such failure by the third parties with whom we work) could lead to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business, results of operations; reputational harm; loss of revenue or profits; and other adverse business consequences.

Previous wording

Our data processing activities subject us to numerous data privacy and security obligations, such as various laws, regulations, external and internal privacy and security policies, contractual requirements, and other obligations relating to data privacy and security. The regulatory framework for data privacy and security issues worldwide has and will continue to evolve, and as a result, legal requirements and enforcement practices are likely to continue to impact business requirements regarding the collection, use, storage, protection, retention, or transfer of data. In many jurisdictions, enforcement activities and consequences for noncompliance are rising.

Current wording

Our data processing activities subject us to numerous data privacy and security obligations, such as various laws, regulations, guidance, industry standards, external and internal privacy and security policies, contractual requirements, and other obligations relating to data privacy and security. The regulatory framework for data privacy and security issues worldwide has and will continue to evolve, and as a result, legal requirements and enforcement practices are likely to continue to impact business requirements regarding the processing of sensitive data. In many jurisdictions, enforcement activities and consequences for noncompliance are rising.