Gitlab Inc.

Previous wording

We have experienced rapid growth, both in terms of employee headcount and customer growth, as well as increased demand for our products. We anticipate that we will continue to expand our operations and responsibly grow our headcount in the near term, and our success will depend in part on our ability to manage that growth effectively, although there is no assurance that our rate of growth will continue at its current pace. Our total number of Base Customers has grown to 10,831 as of April 30, 2026 from 10,104 as of April 30, 2025. The growth and expansion of our business places a continuous strain on our management and operational and financial resources. Inaddition, as customers adopt our products for an increasing number of use cases, we have had to support more complex commercial relationships. To effectively manage and capitalize on our growth periods, we need to manage headcount capital and processes efficiently, while continuing to make investments to improve and expand our information technology and financial infrastructure, our security and compliance requirements, our operating and administrative systems, our relationships with various partners and other third parties. Our rate of growth may also be impacted as a result of global business or macroeconomic conditions, including inflation, tariffs, volatile interest rates, uncertainty with respect to the federal budget, debt ceiling and potential government shutdowns, volatility of the global debt and equity markets, and investment decisions by our customers.

Current wording

We have experienced rapid growth, both in terms of employee headcount and customer growth, as well as increased demand for our products. We anticipate that we will continue to expand our operations and responsibly grow our headcount in the near term, and our success will depend in part on our ability to manage that growth effectively, although there is no assurance that our rate of growth will continue at its current pace. Our total number of Base Customers has grown to 11,114 as of July 31, 2026 from 10,338 as of July 31, 2025. The growth and expansion of our business places a continuous strain on our management and operational and financial resources. Inaddition, as customers adopt our products for an increasing number of use cases, we have had to support more complex commercial relationships. To effectively manage and capitalize on our growth periods, we need to manage headcount capital and processes efficiently, while continuing to make investments to improve and expand our information technology and financial infrastructure, our security and compliance requirements, our operating and administrative systems, our relationships with various partners and other third parties. Our rate of growth may also be impacted as a result of global business or macroeconomic conditions, including inflation, tariffs, volatile interest rates, uncertainty with respect to the federal budget, debt ceiling and potential government shutdowns, volatility of the global debt and equity markets, and investment decisions by our customers.

Previous wording

Our total revenue for the three months ended April 30, 2026 and 2025 was $264.2 million and $214.5 million, respectively, representing a growth rate of 23%. You should not rely on the revenue growth of any prior quarter or annual period as an indication of our future performance. As a result of our limited history operating as a public company, our ability to accurately forecast our future results of operations is limited and subject to a number of uncertainties, including our ability to plan for and model future growth, and our usage (or consumption) billing model. Our historical revenue growth should not be considered indicative of our future performance.

Current wording

Our total revenue for the six months ended July 31, 2026 and 2025 was $550.4 million and $450.5 million, respectively, representing a growth rate of 22%. You should not rely on the revenue growth of any prior quarter or annual period as an indication of our future performance. As a result of our limited history operating as a public company, our ability to accurately forecast our future results of operations is limited and subject to a number of uncertainties, including our ability to plan for and model future growth, and our usage (or consumption) billing model. Our historical revenue growth should not be considered indicative of our future performance.

Previous wording

We have incurred losses in each year since our inception, including net losses of approximately $6.3 million, $56.0 million and $5.0 million in fiscal year 2025, 2026 and thethree months ended April 30, 2026, respectively. As of April 30, 2026, we had an accumulated deficit of approximately $1.2 billion. While we have experienced significant growth in revenue in recent periods, we cannot assure you that we will achieve profitability in future periods or that, if at any time we are profitable, we will sustain profitability. We also expect our operating and other expenses to increase in the foreseeable future as we continue to invest in our future growth, including implementing usage billing, expanding our research and development function to drive further development of The DevSecOps platform (including related to AI capabilities), expanding our sales and marketing activities, developing the functionality to expand into adjacent markets, and reaching customers in new geographic locations, which will negatively affect our operating results if our total revenue does not increase. While we consistently evaluate opportunities to reduce our operating costs and optimize efficiencies, we cannot guarantee that these efforts will be successful or that we will not re-accelerate operating expenditures in the future in order to capitalize on growth opportunities. In addition to the anticipated costs to continue to grow our business, we also expect to continue to incur significant legal, accounting, and other expenses as a public company. These efforts and expenses may be more costly than we expect, and we cannot guarantee that we will be able to increase our revenue to offset our operating expenses. Our revenue growth may slow or our revenue may decline for a number of reasons, including reduced demand for The DevSecOps platform, increased competition, an increased use of our free product offerings, a decrease in the growth or reduction in size of our overall market, usage billing, or any inability on our part to capitalize on growth opportunities. Further, as our SaaS offering makes up an increasing percentage of our total revenue, we expect to see increased associated cloud-related costs, such as hosting and infrastructure costs, which may adversely impact our gross margins. Any failure to increase our revenue or to manage our costs as we continue to grow and invest in our business would prevent us from achieving or maintaining profitability or achieving or maintaining positive operating cash flow at all or on a consistent basis, which would cause our business, financial condition, and results of operations to suffer.

Current wording

We have incurred losses in each year since our inception, including net losses of approximately $6.3 million, $56.0 million and$41.8 millionin fiscal year 2025, 2026 and thesix months ended July 31, 2026, respectively. As of July 31, 2026, we had an accumulated deficit of approximately $1.3 billion. While we have experienced significant growth in revenue in recent periods, we cannot assure you that we will achieve profitability in future periods or that, if at any time we are profitable, we will sustain profitability. We also expect our operating and other expenses to increase in the foreseeable future as we continue to invest in our future growth, including implementing usage billing, expanding our research and development function to drive further development of The DevSecOps platform (including related to AI capabilities), expanding our sales and marketing activities, developing the functionality to expand into adjacent markets, and reaching customers in new geographic locations, which will negatively affect our operating results if our total revenue does not increase. While we consistently evaluate opportunities to reduce our operating costs and optimize efficiencies, we cannot guarantee that these efforts will be successful or that we will not re-accelerate operating expenditures in the future in order to capitalize on growth opportunities. In addition to the anticipated costs to continue to grow our business, we also expect to continue to incur significant legal, accounting, and other expenses as a public company. These efforts and expenses may be more costly than we expect, and we cannot guarantee that we will be able to increase our revenue to offset our operating expenses. Our revenue growth may slow or our revenue may decline for a number of reasons, including reduced demand for The DevSecOps platform, increased competition, an increased use of our free product offerings, a decrease in the growth or reduction in size of our overall market, usage billing, or any inability on our part to capitalize on growth opportunities. Further, as our SaaS offering makes up an increasing percentage of our total revenue, we expect to see increased associated cloud-related costs, such as hosting and infrastructure costs, which may adversely impact our gross margins. Any failure to increase our revenue or to manage our costs as we continue to grow and invest in our business would prevent us from achieving or maintaining profitability or achieving or maintaining positive operating cash flow at all or on a consistent basis, which would cause our business, financial condition, and results of operations to suffer.

Previous wording

Because of the nature and importance of the data that our customers collect and manage by means of our services, it is possible that failures or errors in our systems could result in data loss or corruption, and/or cause the information that we or our customers collect to be incomplete or contain inaccuracies that our customers regard as material. Furthermore, the availability or performance of our products could be adversely affected by a number of factors, including: customers’ inability to access the internet, customers’ inappropriate use of our software, the failure of our network or software systems, security breaches, or variability in user traffic for our services. We may be required to issue credits or refunds for prepaid amounts related to unused services or otherwise be liable to our customers for damages they may incur resulting from certain events. If a customer’s internet service provider fails to provide sufficient capacity to support our products, otherwise experiences service outages, interruption or disruption, or intentionally or unintentionally restricts or limits our ability to send, deliver, or receive electronic communications or provide services, such failure could interrupt our customers’ access to our products, adversely affect their perception of our products’ reliability and reduce our revenues. In addition to potential liability, if we experience interruptions in the availability of our products or services, our reputation could be adversely affected and we could lose customers. Our production systems might not be sufficiently resilient against regional outages and recovery from such an outage might take an extended period of time. Further, while we have in place a data recovery plan, our data backup systems might fail and our data recovery plans may be insufficient to fully recover all of ours or our customers’ data hosted on our system.

Current wording

Because of the nature and importance of the data that our customers collect and manage by means of our services, it is possible that failures or errors in our systems could result in data loss or corruption, and/or cause the information that we or our customers collect to be incomplete or contain inaccuracies that our customers regard as material. Furthermore, the availability or performance of our products could be adversely affected by a number of factors, including: customers’ inability to access the internet, customers’ inappropriate use of our software, the failure of our network or software systems, security breaches, or variability in user traffic for our services. We may be required to issue credits or refunds for prepaid amounts related to unused services or otherwise be liable to our customers for damages they may incur resulting from certain events. If a customer’s internet service provider fails to provide sufficient capacity to support our products, otherwise experiences service outages, interruption or disruption, or intentionally or unintentionally restricts or limits our ability to send, deliver, or receive electronic communications or provide services, such failure could interrupt our customers’ access to our products, adversely affect their perception of our products’ reliability and reduce our revenues. In addition to potential liability, if we experience interruptions in the availability of our products or services, our reputation could be adversely affected and we could lose customers. Our production systems might not be sufficiently resilient against regional outages and recovery from such an outage might take an extended period of time. Further, while we have in place a data recovery plan, our data backup systems might fail and our data recovery plans may be insufficient to fully recover all of our or our customers’ data hosted on our system.

Previous wording

In future periods, our growth could slow or our profits could decline for several reasons, including decreased demand for our product offerings and our professional services, usage billing, increased competition, a decrease in the growth of our overall market, a decrease in corporate spending, including as a result of global business or macroeconomic conditions, including inflation, tariffs, volatile interest rates, uncertainty with respect to the federal budget, debt ceiling and potential government shutdowns, volatility of the global debt and equity markets, and actual or perceived instability in the global banking sector, or otherwise, or our failure, for any reason, to continue to capitalize on growth opportunities. We may be forced to change or abandon our subscription based revenue model in order to compete with our competitors’ offerings.

Current wording

In future periods, our growth could slow or our profits could decline for several reasons, including decreased demand for our product offerings and our professional services, usage billing, increased competition, a decrease in the growth of our overall market, a decrease in corporate spending, including as a result of global business or macroeconomic conditions, including inflation, tariffs, volatile interest rates, uncertainty with respect to the federal budget, debt ceiling and potential government shutdowns, volatility of the global debt and equity markets, and actual or perceived instability in the global banking sector, or otherwise, or our failure, for any reason, to continue to capitalize on growth opportunities. We may be forced to change or abandon our revenue model in order to compete with our competitors’ offerings.

Previous wording

It could also become increasingly difficult to predict revenue and timing of collections given our usage billing model and our mix of annual, multi-year and other types of transactions changes as a result of our expansion into cloud-based offerings. Our failure to execute on our revenue projections could impair our ability to meet our business objectives and adversely affect our results of operations and financial condition.

Current wording

It could also become increasingly difficult to predict revenue and timing of collections given our billing models and our mix of annual, multi-year and other types of billing structures, including consumption-based offerings. Our failure to execute on our revenue projections could impair our ability to meet our business objectives and adversely affect our results of operations and financial condition. Additionally, under applicable accounting rules, the timing of revenue recognition under Flex depends in part on the pace of conversion of our self-managed base onto Flex, customer adoption and usage patterns, which we cannot control. We may not be able to accurately forecast the timing or magnitude of revenue recognition, which could lead investors and analysts to misinterpret our performance and contribute to volatility in the price of our securities. There can be no assurance that our efforts to explain these dynamics will prevent adverse reactions in the market for our securities.

Previous wording

•the timing of recognition of revenues and impact of usage billing;

Current wording

•the timing of recognition of revenues (including from Flex) and impact of usage billing;

Previous wording

The implementation of AI and machine learning technologies in our services may result in reputational harm, liability, increased expenditures, or other adverse consequences to our business operations.

Current wording

The implementation of AI, including agentic AI, and machine learning technologies in our services may result in reputational harm, liability, increased expenditures, or other adverse consequences to our business operations.

Previous wording

We have implemented AI capabilities throughout GitLab’s services, including as part of the GitLab Duo suite of AI features. The technologies underpinning these features exist in a rapidly-evolving regulatory and commercial environment which presents regulatory, litigation, ethical, reputational, and financial risks.

Current wording

We have implemented AI capabilities throughout GitLab’s services, including as part of the GitLab Duo suite of AI features. AI, and particularly agentic AI, has become increasingly central to our business strategy. The technologies underpinning these features exist in a rapidly-evolving regulatory and commercial environment which presents regulatory, litigation, ethical, reputational, and financial risks.

Previous wording

In addition to our direct sales force, we use channel partners to sell and support our products. Channel partners may become an increasingly important aspect of our business, particularly with regard to enterprise, governmental, and international sales. Our future growth in revenue and ability to achieve and sustain profitability may depend in part on our ability to identify, establish, and retain successful channel partner relationships in the United States and internationally, which will take significant time and resources and involve significant risk. If we are unable to maintain our relationships with these channel partners, or otherwise develop and expand our indirect distribution channel, our business, operating results, financial condition, or cash flows could be adversely affected.

Current wording

In addition to our direct sales force, we use channel partners to sell and support our products. Channel partners, or concentration among certain channel partners, may become an increasingly important aspect of our business, particularly with regard to enterprise, governmental, and international sales. Our future growth in revenue and ability to achieve and sustain profitability may depend in part on our ability to identify, establish, and retain successful channel partner relationships in the United States and internationally, which will take significant time and resources and involve significant risk. If we are unable to maintain our relationships with these channel partners, or otherwise develop and expand our indirect distribution channel, our business, operating results, financial condition, or cash flows could be adversely affected.

Previous wording

The GDPR and U.K. GDPR requires, among other things, that personal data only be transferred outside of the European Economic Area, or the E.E.A., or the U.K., respectively, to jurisdictions that have not been deemed adequate by the European Commission or by the U.K. data protection regulator, respectively, including the United States, if certain safeguards are taken to legitimize those data transfers. Legal developments in the E.U. have resulted in complexity and uncertainty regarding such transfers. For example, the European Court of Justice, or the CJEU, has previously advised that the Standard Contractual Clauses (a standard form of contract approved by the European Commission as an adequate personal data transfer mechanism) are not alone sufficient to protect data transferred to the United States or other countries not deemed adequate and the current E.U.-U.S. Data Privacy Framework, or the DPF, which permits certified U.S.-based organizations to receive transfers of personal data from the E.E.A. and the U.K, has previously been subject to proposed legal challenges before the CJEU. Thus, the Standard Contractual Clauses remain an important data transfer mechanism for transfers to countries outside of the E.E.A. and the U.K., but the use of Standard Contractual Clauses must still be assessed on a case-by-case basis taking into account the legal regime applicable in the destination country, in particular applicable surveillance laws and rights of individuals, and additional measures and/or contractual provisions may need to be put in place. The European Data Protection Board has also issued a decision imposing higher burdens on the use of data transfer mechanisms, such as the Standard Contractual Clauses, for cross-border data transfers and the CJEU has stated that if a competent supervisory authority believes that the Standard Contractual Clauses cannot be complied with in the destination country and that the required level of protection cannot be secured by other means, such supervisory authority is under an obligation to suspend or prohibit that transfer. Since the decision by the CJEU, supervisory authorities, including the CNIL and the Austrian Data Protection Authority, are now looking at cross-border transfers more closely, and have publicly stated that the transfer of data to the United States using certain analytics tools is illegal. While these decisions related specifically to analytics tools and may be inapplicable to organizations certified under the DPF, it has been suggested that it is far-reaching and applies to any transfer of E.U. personal data to the United States. We will continue to monitor this situation, and evaluate and utilize, where appropriate, all data transfer mechanisms available to us, but this may require the removal of tools from our services and websites where data is transferred from the E.U. to the United States, or impact the manner in which we provide our services, which could adversely affect our business.

Current wording

The GDPR and U.K. GDPR requires, among other things, that personal data only be transferred outside of the European Economic Area, or the E.E.A., or the U.K., respectively, to jurisdictions that have not been deemed adequate by the European Commission or by the U.K. data protection regulator, respectively, including the United States, if certain safeguards are taken to legitimize those data transfers. Legal developments in the E.U. have resulted in complexity and uncertainty regarding such transfers. For example, the Court of Justice of the European Union, or the CJEU, has previously advised that the Standard Contractual Clauses (a standard form of contract approved by the European Commission as an adequate personal data transfer mechanism) are not alone sufficient to protect data transferred to the United States or other countries not deemed adequate and the current E.U.-U.S. Data Privacy Framework, or the DPF, which permits certified U.S.-based organizations to receive transfers of personal data from the E.E.A. and the U.K, has previously been subject to proposed legal challenges before the CJEU. Thus, the Standard Contractual Clauses remain an important data transfer mechanism for transfers to countries outside of the E.E.A. and the U.K., but the use of Standard Contractual Clauses must still be assessed on a case-by-case basis taking into account the legal regime applicable in the destination country, in particular applicable surveillance laws and rights of individuals, and additional measures and/or contractual provisions may need to be put in place. The European Data Protection Board has also issued a decision imposing higher burdens on the use of data transfer mechanisms, such as the Standard Contractual Clauses, for cross-border data transfers and the CJEU has stated that if a competent supervisory authority believes that the Standard Contractual Clauses cannot be complied with in the destination country and that the required level of protection cannot be secured by other means, such supervisory authority is under an obligation to suspend or prohibit that transfer. Since the decision by the CJEU, supervisory authorities, including the CNIL and the Austrian Data Protection Authority, are now looking at cross-border transfers more closely, and have publicly stated that the transfer of data to the United States using certain analytics tools is illegal. While these decisions related specifically to analytics tools and may be inapplicable to organizations certified under the DPF, it has been suggested that it is far-reaching and applies to any transfer of E.U. personal data to the United States. We will continue to monitor this situation, and evaluate and utilize, where appropriate, all data transfer mechanisms available to us, but this may require the removal of tools from our services and websites where data is transferred from the E.U. to the United States, or impact the manner in which we provide our services, which could adversely affect …

Excerpt shortened here; the source contains the full paragraph.

Previous wording

We are also subject to evolving E.U. and U.K. privacy laws on cookies and e-marketing. In the E.U. and the U.K., regulators are increasingly focusing on compliance with requirements in the online behavioral advertising ecosystem, and current national laws that implement the ePrivacy Directive may increase fines for non-compliance. In the E.U. and the U.K., informed consent is required for the placement of a cookie or similar technologies on a user’s device and for direct electronic marketing. The U.K. GDPR also imposes conditions on obtaining valid consent, such as a prohibition on pre-checked consents and a requirement to ensure separate consents are sought for each type of cookie or similar technology. Further, a recent European court decision and regulators’ recent guidance are driving increased attention to cookies and tracking technologies. If regulators start to enforce the strict approach in recent guidance, this could lead to substantial costs, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, adversely affect our margins, increase costs and subject us to additional liabilities. Regulation of cookies and similar technologies, and any decline of cookies or similar online tracking technologies as a means to identify and potentially target users, may lead to broader restrictions and impairments on our marketing and personalization activities and may negatively impact our efforts to understand users.

Current wording

U.K. GDPR also imposes conditions on obtaining valid consent, such as a prohibition on pre-checked consents and a requirement to ensure separate consents are sought for each type of cookie or similar technology. Further, a recent European court decision and regulators’ recent guidance are driving increased attention to cookies and tracking technologies. In addition, in the United States, plaintiffs are increasingly asserting claims under state and federal wiretapping and privacy statutes, such as the California Invasion of Privacy Act and the federal Wiretap Act, alleging that cookies, pixels, session replay tools, chat features, software development kits, and similar tracking technologies constitute the unauthorized interception or recording of communications. Such claims are frequently brought not only as class actions but also as individual and mass arbitration demands and pre-litigation demand letters, and can carry statutory damages assessed on a per-violation basis. Regardless of their merit, these claims can be costly and time-consuming to defend, and the potential for aggregated statutory damages may create pressure to settle. If regulators start to enforce the strict approach in recent guidance, this could lead to substantial costs, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, adversely affect our margins, increase costs and subject us to additional liabilities. Regulation of cookies and similar technologies, and any decline of cookies or similar online tracking technologies as a means to identify and potentially target users, may lead to broader restrictions and impairments on our marketing and personalization activities and may negatively impact our efforts to understand users.

Previous wording

Competition for highly skilled personnel in our industry is intense, and we may not be successful in hiring or retaining qualified personnel to fulfill our current or future needs. We have, from time to time, experienced, and we may experience in the future, difficulty in hiring and retaining highly skilled team members with appropriate qualifications. In particular, recruiting and hiring senior product engineering personnel with AI and machine learning backgrounds has been, and we expect it to continue to be, challenging. On June 1, 2026, the board of directors of the Company approved a restructuring plan (the “Plan”). The Company anticipates approximately 14% of its global workforce as of January 31, 2026 may be impacted by the Plan. The Plan is intended to help position the Company for long-term success by realigning its operating structure to optimize execution against its strategic priorities. Any future reduction in force could be disruptive to our operations and could yield unanticipated consequences, such as attrition beyond planned staff reductions, or disruptions in our day-to-day operations, or could negatively impact our ability to attract and retain qualified management, technology software professionals or other personnel who are critical to our business.

Current wording

Competition for highly skilled personnel in our industry is intense, and we may not be successful in hiring or retaining qualified personnel to fulfill our current or future needs. We have, from time to time, experienced, and we may experience in the future, difficulty in hiring and retaining highly skilled team members with appropriate qualifications. In particular, recruiting and hiring senior product engineering personnel with AI and machine learning backgrounds has been, and we expect it to continue to be, challenging. In addition, the restructuring plan we implemented in June 2026 is intended to help position us for long-term success by realigning our operating structure to optimize execution against our strategic priorities; however, it may be disruptive to our operations, may take longer to implement than anticipated, and may lead to attrition beyond planned staff reductions, or negatively impact our ability to attract and retain qualified management, technology software professionals or other personnel who are critical to our business.

Previous wording

In the locations where we directly hire our team members into one of our entities, we must ensure that we are compliant with the applicable local laws governing team members in those jurisdictions, including local employment and tax laws. In the locations where we utilize PEOs, we contract with the PEO for it to serve as “Employer of Record” for those team members engaged through the PEO in each applicable location. Under this model, team members are employed by the PEO but provide services to GitLab. We also engage team members through a PEO self-employed model in certain jurisdictions where we contract with the PEO, which in turn contracts with individual team members as independent contractors. In all locations where we utilize PEOs, we rely on those PEOs to comply with local employment laws and regulations. We also issue equity to a substantial portion of our team members, including team members engaged through PEOs and to independent contractors, and must ensure we remain compliant with securities laws of the applicable jurisdiction where such team members are located.

Current wording

In the locations where we directly hire our team members into one of our entities, we must ensure that we are compliant with the applicable local laws governing team members in those jurisdictions, including local employment and tax laws. In the locations where we utilize professional employer organizations, or PEOs, we contract with the PEO for it to serve as “Employer of Record” for those team members engaged through the PEO in each applicable location. Under this model, team members are employed by the PEO but provide services to GitLab. We also engage team members through a PEO self-employed model in certain jurisdictions where we contract with the PEO, which in turn contracts with individual team members as independent contractors. In all locations where we utilize PEOs, we rely on those PEOs to comply with local employment laws and regulations. We also issue equity to a substantial portion of our team members, including team members engaged through PEOs and to independent contractors, and must ensure we remain compliant with securities laws of the applicable jurisdiction where such team members are located.

Previous wording

We plan to continue expanding our international operations which could subject us to additional costs and risks, and our continued expansion internationally may not be successful.

Current wording

We plan to continue to strategically structure our international operations in line with our business needs, which could subject us to additional costs and risks.

Previous wording

We plan to expand our operations internationally in the future. Outside of the United States, we currently have direct and indirect subsidiaries in Canada, Germany, France, India, Ireland, Israel, the Netherlands, Spain, the United Kingdom, Australia, India, Japan, South Korea, and Singapore, and have team members in over 60 countries. We also have a joint venture in China. There are significant costs and risks inherent in conducting business in international markets, including:

Current wording

We plan to continue to strategically structure our international operations in the future. Outside of the United States, we currently have direct and indirect subsidiaries in Canada, Germany, France, India, Ireland, Israel, the Netherlands, Spain, the United Kingdom, Australia, Japan, South Korea, and Singapore, and have team members in many countries. We also have a joint venture in China. There are significant costs and risks inherent in conducting business in international markets, including:

Previous wording

These factors and other factors could harm our international operations and, consequently, materially impact our business, operating results, and financial condition. Further, we may incur significant operating expenses as a result of our international expansion, which may not be successful. We have limited experience with regulatory environments and market practices internationally, and we may not be able to penetrate or successfully operate in new markets. If we are unable to continue to expand internationally and manage the complexity of our global operations successfully, our financial condition and operating results could be adversely affected.

Current wording

These factors and other factors could harm our international operations and, consequently, materially impact our business, operating results, and financial condition. In addition, we implemented a restructuring plan in June 2026, and, as a result, we expect to exit operations in approximately 22 countries. This restructuring, the actual charges for which may exceed estimates, subjects us to additional risks, including risks associated with winding down or transferring local employment arrangements and PEO relationships, potential adverse tax, regulatory, or contractual consequences of exiting these jurisdictions, disruption to customer support and service continuity in affected regions, and operational and reputational risks associated with the transition. The restructuring may take longer than anticipated, and we cannot assure that we will be able to complete the restructuring without adverse effects on our business, operating results, or financial condition, including that anticipated cost savings may not be realized. Further, we may incur significant operating expenses as a result of our international operations, which may not be successful. We have limited experience with regulatory environments and market practices internationally, and we may not be able to penetrate or successfully operate in new markets. If we are unable to continue to expand internationally and manage the complexity of our global operations successfully, our financial condition and operating results could be adversely affected.

Previous wording

In July 2025, the U.S. federal government enacted the One Big Beautiful Bill Act, or OBBBA, implementing significant corporate tax reforms. OBBBA provides immediate deductibility for domestic research and experimental expenses for tax years beginning after December 31, 2024, with elections available to accelerate deductions for previously capitalized research and experimental expenses from 2022 through 2024. Corporations may deduct remaining unamortized amounts either fully in their first taxable year beginning after December 31, 2024, or ratably over two years. OBBBA increased the tax rate associated with international operations and reduced the tax benefit associated with certain foreign-derived deduction eligible income of United States-domiciled corporations. OBBBA also increased the Base Erosion and Anti-Abuse Tax rate associated with payments from United States corporations to foreign subsidiaries treated as Controlled Foreign Corporations.

Current wording

In July 2025, the U.S. federal government enacted the One Big Beautiful Bill Act, or OBBBA, implementing significant corporate tax reforms. OBBBA increased the tax rate associated with international operations and reduced the tax benefit associated with certain foreign-derived deduction eligible income of United States-domiciled corporations. OBBBA also increased the Base Erosion and Anti-Abuse Tax rate associated with payments from United States corporations to foreign subsidiaries treated as Controlled Foreign Corporations.

Previous wording

The dual class structure of our common stock will have the effect of concentrating voting control with those stockholders who hold our Class B capital stock, including our directors, executive officers, and beneficial owners of 5% or greater of our outstanding capital stock who hold in the aggregate a majority of the voting power of our capital stock, which will limit or preclude your ability to influence corporate matters, including the election of directors and the approval of any change of control transaction.

Current wording

The shares of our Class A common stock are concentrated in our directors, executive officers, and beneficial owners of 5% or greater of our outstanding capital stock, which may limit or preclude your ability to influence corporate matters, including the election of directors and the approval of any change of control transaction.

Previous wording

Our Class B common stock has ten votes per share, and our Class A common stock has one vote per share. As of April 30, 2026, the holders of our outstanding Class B common stock hold a substantial majority of the voting power of our outstanding capital stock, with our directors, executive officers, and holders of more than 5% of our common stock, and their respective affiliates, holding a majority of the voting power of our capital stock. Because of the ten-to-one voting ratio between our Class B and Class A common stock, the holders of our Class B common stock collectively will continue to control a majority of the combined voting power of our common stock and therefore will be able to control all matters submitted to our stockholders for approval until the earlier of (i) October 14, 2031, (ii) the death or disability, as defined in our restated certificate of incorporation, of Sytse Sijbrandij, (iii) the date specified by a vote of the holders of two-thirds of the then outstanding shares of Class B common stock and (iv) the first date on which the number of shares of outstanding Class B common stock (including shares of Class B common stock subject to outstanding stock options) is less than 5% of the aggregate number of shares of outstanding common stock. This concentrated control will limit or preclude your ability to influence corporate matters for the foreseeable future, including the election of directors, amendments of our organizational documents, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval. In addition, this may prevent or discourage unsolicited acquisition proposals or offers for our capital stock that you may feel are in your best interest as one of our stockholders.

Current wording

On August 21, 2026, all of our Class B common stock converted into Class A common stock, due to Class B common stock representing less than 5% of our aggregate outstanding common stock (the “Sunset Date”). Following the Sunset Date, outstanding shares of our Class A common stock remain concentrated in our directors, executive officers, and beneficial owners of 5% or greater of our outstanding capital stock, which may limit or preclude your ability to influence corporate matters for the foreseeable future, including the election of directors, amendments of our organizational documents, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval.

Previous wording

The following table sets forth information regarding repurchases of our Class A common stock during the three months ended April 30, 2026:

Current wording

The following table sets forth information regarding repurchases of our Class A common stock during thethree months ended July 31, 2026:

Previous wording

(1) On March 2, 2026, our Board of Directors authorized the repurchase of up to $400.0 million of our Class A common stock (the "2026 Repurchase Program"). Repurchases of our Class A common stock may be effected, from time to time, either on the open market (including pre-set trading plans), in privately negotiated transactions, and other transactions in accordance with applicable securities laws. The 2026 Repurchase Program does not obligate us to acquire any particular amount of Class A common stock, and the 2026 Repurchase Program may be suspended or discontinued at any time at our discretion. All repurchased shares were immediately retired upon settlement. Average price paid per share includes broker commissions; no excise tax is included in the average price per share. As of April 30, 2026, $350.0 million remained available for repurchase under the 2026 Repurchase Program. See Note 9. Equity of this Quarterly Report on Form 10-Q for additional information related to share repurchases

Current wording

(1) On March 2, 2026, our Board of Directors authorized the repurchase of up to $400.0 million of our Class A common stock (the "2026 Repurchase Program"). Repurchases of our Class A common stock may be effected, from time to time, either on the open market (including pre-set trading plans), in privately negotiated transactions, and other transactions in accordance with applicable securities laws. The 2026 Repurchase Program does not obligate us to acquire any particular amount of Class A common stock, and the 2026 Repurchase Program may be suspended or discontinued at any time at our discretion. All repurchased shares were immediately retired upon settlement. Average price paid per share includes broker commissions; no excise tax is included in the average price per share. As of July 31, 2026, $245.3 million remained available for repurchase under the 2026 Repurchase Program. See “Note 9. Equity” of this Quarterly Report on Form 10-Q for additional information related to share repurchases