Snowflake Inc
For the period ended Jul 31, 2024. Filed Aug 29, 2024.
View on SEC.govAbout this filing
A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.
Jul 31, 2024 · Filed Aug 29, 2024
What changed in Risk Factors?
Read the current filingPrevious report: 10-Q
Period ended 2024-04-30; filed 2024-05-31.
0001640147-24-000135
ITEM 1A. Risk FactorsCurrent report: 10-Q
Period ended 2024-07-31; filed 2024-08-29.
0001640147-24-000207
ITEM 1A. Risk FactorsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 252 previous paragraphs and 251 current paragraphs.
210 unchanged; 35 reworded; 5 added; 7 removed; 0 previous and 1 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (5)
Current report
Our revenue growth is also dependent on our ability to increase our penetration into existing markets, and to successfully enter and grow new markets, including highly-regulated markets such as financial services, healthcare, and the public sector. Sales to highly-regulated entities are subject to substantial additional costs and risks that are not present in sales to other customers, which are described below in the risk factor titled “We do business with federal, state, local, and foreign governments and agencies, and heavily regulated organizations; as a result, we face risks related to the procurement process, budget, delays, and product decisions driven by statutory and regulatory determinations, termination of contracts, and compliance with government contracting requirements.”
Current report
There can be no assurance that security measures designed to protect against security incidents will be effective, and our efforts to investigate, mitigate, contain, and remediate any security incidents that do occur may not be successful. Even though we may not control the security measures of third-party providers, we may incur liability or suffer reputational harm if such measures are breached. Actions taken by us, third-party cloud providers, or the other third parties with whom we work to detect, investigate, mitigate, contain, and remediate security incidents could result in outages, data losses, and disruptions of our business. We may be unable to detect, mitigate, or remediate vulnerabilities in our information security systems (such as our hardware and software, including that of third parties upon which we rely) on a timely basis. We may be unwilling or unable to make ransom payments due to, for example, applicable laws or regulations prohibiting such payments, the negative precedent such payments would set, or uncertainty over whether such payments would result in the threat actor deleting stolen data or otherwise delivering on their promised course of action. In general, cybersecurity incidents or security vulnerabilities could lead to significant interruptions in our operations, loss of data and income, reputational harm, diversion of funds, increased insurance costs, and other harm to our business, reputation, and competitive position. Security incidents and their resulting consequences, including negative publicity, may also cause customers to stop using our platform, deter existing or prospective customers from using our platform, and negatively impact our ability to grow and operate our business.
Current report
Our customers have experienced and may in the future experience security incidents in connection with their use of our platform that harm our customer relationships and our reputation, even when such incidents are due to vulnerabilities, policy violations, or credential exposures that we do not cause. We operate under a shared responsibility cybersecurity model where we are responsible for the security of our platform and underlying cloud infrastructure, while our customers are responsible for selecting, enabling, and configuring security controls for their individual environments in a manner that meets applicable cybersecurity standards and effectively reduces their information security risk. To assist customers in meeting their responsibilities, we offer and support a range of tools and features for access control, including multi-factor authentication (MFA), network access policies, and unified role-based access controls and policies. Customers may also use third-party external authentication tools, in which case we do not have visibility into whether adequate access controls (such as MFA or network restrictions) are being enforced. Regardless of whether customers use our authentication tools or external tools, if customers allow static access credentials, they are responsible for ensuring that the credentials remain private and are rotated on a regular basis. If our customers do not implement, or incorrectly implement, these features or otherwise fail to fulfill their responsibilities under our shared responsibility model, there is a higher risk that they will be the victim of cybersecurity incidents, which may harm our customer relationships, our reputation, and our business, which has occurred in the past and may happen again in the future.
Current report
For example, in May 2024, we became aware that a cybersecurity threat actor had potentially accessed a number of our customers’ Snowflake accounts as a result of such customers’ failure to fulfill certain of their obligations under our shared responsibility cybersecurity model (e.g., implementing MFA and network access policies). Even though we did not identify any evidence suggesting this activity was caused by or otherwise related to any vulnerability or misconfiguration of our systems, or a breach of our platform’s security or our environment, we are now the subject of multiple lawsuits, regulatory actions and investigations, and lawmaker inquiries (including Congressional inquiries) relating to these customer incidents. We are unable to predict the outcome or timeline of these matters or if any additional requests, inquiries, lawsuits, investigations or other government actions may arise. We have suffered and may continue to suffer negative publicity and reputational damage, including due to the misperception that our customers’ incidents resulted from a vulnerability, misconfiguration or breach of our platform’s security or systems and malicious activity within our environment. In addition, we may experience customer churn or face claims by customers, and it is possible that we are not able to fully recover any losses relating to these matters through any applicable insurance coverage or we may be required to seek indemnification from breached customers to mitigate our damages. These matters, together with any additional inquiries, regulatory or governmental investigations or other disputes that result from these customer security incidents, will require us to divert resources and may harm our reputation, business, financial condition and results of operations.
Current report
•significant security breaches affecting our platform or customers’ accounts; and
Removed paragraphs (7)
Previous report
We are a target of threat actors seeking unauthorized access to our or our customers’ or partners’ systems, data, or technology, or to disrupt our operations or ability to provide our services. Threat actors may also exploit vulnerabilities in, or obtain unauthorized access to, platforms, systems, networks, or physical facilities utilized by our third-party service providers. We may be unable to detect, mitigate, or remediate vulnerabilities in our information security systems (such as our hardware and software, including that of third parties upon which we rely) on a timely basis. Any security breach of our platform, our operational systems, our software (including open-source software), our physical facilities, or the systems of our third-party service providers or sub-processors, or the perception that one has occurred, could result in litigation, indemnity obligations, regulatory enforcement actions, investigations, fines, penalties, mitigation and remediation costs, disputes, reputational harm, diversion of management’s attention, and other liabilities and damage to our business. Security breaches and consequences from breaches, including negative publicity, may also prevent or cause customers to stop using our products, deter new customers from using our products, and negatively impact our ability to grow and operate our business.
Previous report
We employ a shared responsibility model where our customers are responsible for using and configuring our platform in a manner that meets applicable cybersecurity standards. As part of this shared security model, customers have sole responsibility for creating and securing their access credentials for our platform. However, even if we are not the cause of a security incident affecting our customers, our relationship with such customers may suffer and we may face reputational damage.
Previous report
A security incident may also cause us to breach, or lead to claims that we have breached, customer contracts or other legal obligations. As a result, we could be subject to legal action (including the imposition of fines or penalties) and our customers could end their relationships with us. Furthermore, there can be no assurance that any limitations of liability in our contracts would be enforceable or adequate or would otherwise protect us from liabilities, damages, or claims related to our data privacy and security obligations.
Previous report
•significant security breaches of our platform; and
Previous report
Future sales of our common stock in the public market could cause the market price of our common stock to decline.
Previous report
Sales of a substantial number of shares of our common stock in the public market, or the perception that these sales might occur, could depress the market price of our common stock and could impair our ability to raise capital through the sale of additional equity securities. Many of our stockholders who held our capital stock prior to completion of our IPO have substantial unrecognized gains on the value of the equity they hold based upon the price at which shares were sold in our IPO, and therefore, they may take steps to sell their shares or otherwise secure the unrecognized gains on those shares. We are unable to predict the timing of or the effect that such sales may have on the prevailing market price of our common stock.
Previous report
The shares of common stock subject to outstanding options, restricted stock unit, and other equity awards under our equity incentive plans, and the shares reserved for future issuance under our equity incentive plans, will become eligible for sale in the public market upon issuance, subject to compliance with applicable securities laws.
Reworded paragraphs (35)
Previous wording
Our revenue was $828.7 million and $623.6 million for the three months ended April 30, 2024 and 2023, respectively. As a result of our historical rapid growth, limited operating history, and unstable macroeconomic conditions, our ability to accurately forecast our future results of operations, including revenue, remaining performance obligations (RPO), and the percentage of RPO we expect to recognize as revenue in future periods, is limited and subject to a number of uncertainties, including our ability to plan for and model future growth and platform consumption. Our historical revenue growth should not be considered indicative of our future performance.
Current wording
Our revenue was $868.8 million and $674.0 million for the three months ended July 31, 2024 and 2023, respectively, and $1.7 billion and $1.3 billion for the six months ended July 31, 2024 and 2023, respectively. As a result of our historical rapid growth, limited operating history, large number of new product features, including those including artificial intelligence and machine learning technology, or AI Technology, and unstable macroeconomic conditions, our ability to accurately forecast our future results of operations, including revenue, gross margin, remaining performance obligations (RPO), and the percentage of RPO we expect to recognize as revenue in future periods, is limited and subject to a number of uncertainties, including our ability to plan for and model future growth and platform consumption. Our historical revenue growth should not be considered indicative of our future performance.
Previous wording
Further, our revenue growth could slow or our revenue could decline for a number of reasons, including increased competition, changes to technology, such as changes in software or underlying cloud infrastructure or the increasing prominence of new technology like artificial intelligence, and reduced demand for our platform. For example, customers may continue to optimize consumption, rationalize budgets, and prioritize cash flow management, including by reducing storage through shorter data retention policies and shortening committed contract durations. As a result of the foregoing and our rapid revenue growth in prior periods, our revenue growth rate has slowed in recent periods. Any further declines in our revenue growth rate could adversely affect investors’ perceptions of our business, and negatively impact the trading price of our common stock. We have also encountered, and will continue to encounter, risks and uncertainties frequently experienced by growing companies in rapidly changing industries, such as the risks and uncertainties described below. If our assumptions regarding these risks and uncertainties and our future revenue growth are incorrect or change, or if we do not address these risks successfully, our operating and financial results could differ materially from our expectations, and our business could suffer.
Current wording
Further, our revenue growth could slow or our revenue could decline for a number of reasons, including increased competition, changes to technology, such as changes in software or underlying cloud infrastructure or the increasing prominence of new technology like artificial intelligence, reputational harm, and reduced demand for our platform. For example, customers may continue to optimize consumption, rationalize budgets, and prioritize cash flow management, including by reducing storage through shorter data retention policies and shortening committed contract durations. As a result of the foregoing and our rapid revenue growth in prior periods, our revenue growth rate has slowed in recent periods. Any further declines in our revenue growth rate could adversely affect investors’ perceptions of our business, and negatively impact the trading price of our common stock.
Previous wording
Customers generally consume our platform by using compute, storage, and data transfer resources. Unlike a subscription-based business model, in which revenue is recognized ratably over the term of the subscription, we generally recognize revenue on consumption. Because our customers have flexibility in the timing of their consumption, we do not have the visibility into the timing of revenue recognition that a typical subscription-based software company has. There is a risk that customers will consume our platform at lower levels than we expect, including in response to adverse macroeconomic conditions or holidays. For example, during April 2023 and part of May 2023, consumption of our platform increased at a slower pace than expected. Unexpected fluctuations in customer consumption may cause actual results to differ from our forecasts. As a result, our results of operations in a given period should not be relied upon as indicative of future performance.
Current wording
Customers generally consume our platform by using compute, storage, and/or data transfer resources. Unlike a subscription-based business model, in which revenue is recognized ratably over the term of the subscription, we generally recognize revenue on consumption. Because our customers have flexibility in the timing of their consumption, we do not have the visibility into the timing of revenue recognition that a typical subscription-based software company has. Customer consumption fluctuates, and there is a risk that customers will consume our platform at lower levels than we expect, including in response to adverse macroeconomic conditions or holidays. Unexpected fluctuations in customer consumption may cause actual results to differ from our forecasts. As a result, our results of operations in a given period should not be relied upon as indicative of future performance.
Previous wording
We have experienced net losses in each period since inception. We generated net losses of $317.8 million and $226.1 million for the three months ended April 30, 2024 and 2023, respectively. As of April 30, 2024 and January 31, 2024, we had an accumulated deficit of $4.9 billion and $4.1 billion, respectively. We expect our costs and expenses to increase in future periods. In particular, we intend to continue to invest significant resources to further develop our platform, expand our research and development teams, retain our employees, and acquire other businesses, including in the areas of data science, artificial intelligence, and machine learning. In addition, our platform currently operates on public cloud infrastructure provided by Amazon Web Services (AWS), Microsoft Azure (Azure), and Google Cloud Platform (GCP), and our costs and gross margins are significantly influenced by the prices we are able to negotiate with these public cloud providers, which in certain cases are also our competitors. If we fail to meet any minimum commitments under our third-party cloud infrastructure agreements, we may be required to pay the difference, and our results of operations could be negatively impacted. We will also incur increased general and administrative expenses associated with our growth, including costs related to internal systems, operating as a public company, and targeting regulated industries or markets. Our efforts to grow our business may be costlier than we expect, or our revenue growth rate may be slower than we expect, and we may not be able to increase our revenue enough to offset the increase in operating expenses resulting from these investments. If we are unable to achieve and sustain profitability, or if we are unable to achieve the revenue growth that we expect from these investments, the value of our business and common stock may significantly decrease.
Current wording
We have experienced net losses in each period since inception. We generated net losses of $317.8 million and $227.3 million for the three months ended July 31, 2024 and 2023, respectively, and $635.6 million and $453.4 million for the six months ended July 31, 2024 and 2023, respectively. As of July 31, 2024 and January 31, 2024, we had an accumulated deficit of $5.6 billion and $4.1 billion, respectively. We expect our costs and expenses to increase in future periods. In particular, we intend to continue to invest significant resources to further develop our platform, expand our research and development teams, retain our employees, and acquire other businesses, including in the areas of data science, artificial intelligence, and machine learning. In addition, our platform currently operates on public cloud infrastructure provided by Amazon Web Services (AWS), Microsoft Azure (Azure), and Google Cloud Platform (GCP), and our costs and gross margins are significantly influenced by the prices we are able to negotiate with these public cloud providers, which in certain cases are also our competitors. If we fail to meet any minimum commitments under our third-party cloud infrastructure agreements, we may be required to pay the difference, and our results of operations could be negatively impacted. We will also incur increased general and administrative expenses associated with our growth, including costs related to internal systems, operating as a public company, and targeting regulated industries or markets. Our efforts to grow our business may be costlier than we expect, or our revenue growth rate may be slower than we expect, and we may not be able to increase our revenue enough to offset the increase in operating expenses resulting from these investments. If we are unable to achieve and sustain profitability, or if we are unable to achieve the revenue growth that we expect from these investments, the value of our business and common stock may significantly decrease.
Previous wording
Our go-to-market strategy is focused on acquiring new customers and driving increased use of our platform by existing customers. The markets in which we operate are rapidly evolving and highly competitive, and the competition we face in such markets continues to increase with our investments in artificial intelligence and machine learning technology, or AI Technology, new workloads types, and new product capabilities, such as our increased support for open data formats that allow customers to use our platform to provide compute services without requiring them to store data (for example, Iceberg tables, which is anticipated to become generally available to our customers during the three months ending July 31, 2024). As these markets continue to mature and new technologies and competitors enter such markets, we expect competition to intensify. Our current competitors include:
Current wording
Our go-to-market strategy is focused on acquiring new customers and driving increased use of our platform by existing customers. The markets in which we operate are rapidly evolving and highly competitive, and the competition we face in such markets continues to increase with our investments in AI Technology, new workloads types, and new product capabilities, such as our increased support for open data formats that allow customers to use our platform for compute services without requiring storage (for example, Iceberg tables, which became generally available to our customers in June 2024). As these markets continue to mature and new technologies and competitors enter such markets, we expect competition to intensify. Our current competitors include:
Previous wording
We compete in markets that evolve rapidly. We believe that the pace of innovation will continue to accelerate as customers increasingly base their purchases of cloud data platforms on a broad range of factors, including performance and scale, markets addressed, types of data processed, ease of data ingress and egress, user experience and programming languages, use of artificial intelligence, and data governance and regulatory compliance. We introduced data warehousing on our platform in 2014 as our core use case, and our customers subsequently began using our platform for additional workloads, including data lake, data engineering, AI/ML, applications, collaboration, cybersecurity, and Unistore. Our future success depends on our ability to continue to innovate rapidly and effectively and increase customer adoption of our platform and the AI Data Cloud, including the Snowflake Marketplace and Snowpark.
Current wording
We compete in markets that evolve rapidly. We believe that the pace of innovation will continue to accelerate as customers increasingly base their purchases of cloud data platforms on a broad range of factors, including performance and scale, markets addressed, types of data processed, ease of data ingress and egress, user experience and programming languages, use of artificial intelligence, and data governance, security, and regulatory compliance. We introduced data warehousing on our platform in 2014 as our core use case, and our customers subsequently began using our platform for additional workloads, including data lake, data engineering, AI/ML, applications, collaboration, cybersecurity, and Unistore. Our future success depends on our ability to continue to innovate rapidly and effectively and increase customer adoption of our platform and the AI Data Cloud, including the Snowflake Marketplace and Snowpark.
Previous wording
Further, the value of our platform to customers is increased to the extent they are able to use it to process and access all types of data. We need to continue to invest in technologies, services, and partnerships that increase the types of data available and processed on our platform and the ease with which customers can ingest data into our platform. We must also continue to enhance our data sharing and marketplace capabilities so customers can share their data with internal business units, customers, and other third parties, acquire additional third-party data and data products to combine with their own data in order to gain additional business insights, and develop and monetize applications on our platform. As we develop, acquire, and introduce new services and technologies, including those that may incorporate artificial intelligence and machine learning, we may be subject to new or heightened legal, ethical, and other challenges. In addition, our platform requires third-party public cloud infrastructure to operate. Currently, we use public cloud offerings provided by AWS, Azure, and GCP. We will need to continue to innovate to optimize our offerings for these and other public clouds that our customers require, particularly as we expand internationally. Further, the markets in which we compete are subject to evolving industry standards and regulations, resulting in increasing data governance and compliance requirements for us and our customers and partners. To the extent we expand further into the public sector and highly regulated countries and industries, our platform and operations may need to address additional requirements specific to those markets, including data sovereignty requirements.
Current wording
Further, the value of our platform to customers is increased to the extent they are able to use it to process and access all types of data. We need to continue to invest in technologies, services, and partnerships that increase the types of data available and processed on our platform and the ease with which customers can ingest data into our platform. We must also continue to enhance our data sharing and marketplace capabilities so customers can share their data with internal business units, customers, and other third parties, acquire additional third-party data and data products to combine with their own data to gain additional business insights, and develop and monetize applications on our platform. As we develop, acquire, and introduce new services and technologies, including those that may incorporate artificial intelligence and machine learning, we may be subject to new or heightened legal, ethical, and other challenges. In addition, our platform requires third-party public cloud infrastructure to operate. Currently, we use public cloud offerings provided by AWS, Azure, and GCP. We will need to continue to innovate to optimize our offerings for these and other public clouds that our customers require, particularly as we expand internationally. Further, the markets in which we compete are subject to evolving industry standards and regulations, resulting in increasing data governance and compliance requirements for us and our customers and partners. To the extent we expand further into the public sector and highly regulated countries and industries, our platform and operations may need to address additional requirements specific to those markets, including data sovereignty requirements.
Previous wording
If we are unable to enhance our platform or operations to keep pace with these rapidly evolving customer requirements, or if new technologies emerge that are able to deliver competitive products at lower prices, more efficiently, more conveniently, or more securely than our platform, our business, financial condition, and results of operations could be adversely affected.
Current wording
If we are unable to enhance our platform or operations to keep pace with these rapidly evolving customer requirements, or if new technologies emerge that deliver competitive products at lower prices, more efficiently, more conveniently, or more securely than our platform, our business, financial condition, and results of operations could be adversely affected.
Previous wording
We are investing significantly in AI Technology. Our investments include internally developing AI Technology, acquiring companies with complementary AI Technology, and partnering with companies to bring AI Technology to our platform. Our competitors are pursuing similar opportunities and may, as a result of greater resources, branding, or otherwise, develop, adopt and implement AI Technology faster or more successfully than we do, which could impair our ability to compete effectively and adversely affect our business, financial condition and results of operations. In addition, our successful development of AI Technology depends on our access to GPUs, which are currently in high demand. Finally, customers’ use of our AI Technology is often dependent on their ability to meet evolving regulatory standards. If they are unable to do so, they may not use our AI Technology as much as we anticipate. It is also possible that our investments in AI Technology do not result in the benefits we anticipate, or enable us to maintain our competitive advantage, which may adversely affect our business, financial condition, and results of operations. For example, we may not accurately anticipate market demand or offer AI Technology that amplifies our core data platform.
Current wording
We are investing significantly in AI Technology. Our investments include internally developing AI Technology, acquiring companies with complementary AI Technology, and partnering with companies to bring AI Technology to our platform. Our competitors are pursuing similar opportunities and may, as a result of greater resources, branding, or otherwise, develop, adopt and implement AI Technology faster or more successfully than we do, which could impair our ability to compete effectively and adversely affect our business, financial condition and results of operations. In addition, our successful development of AI Technology depends on our access to GPUs, which are currently in high demand. Finally, customers’ use of our AI Technology is often dependent on their ability to meet evolving regulatory standards, successfully complete internal compliance reviews, and enter into mutually acceptable contractual terms. If they are unable to do so, they may not use our AI Technology as much as we anticipate. It is also possible that our investments in AI Technology do not result in the benefits we anticipate, or enable us to maintain our competitive advantage, which may adversely affect our business, financial condition, and results of operations. For example, we may not accurately anticipate market demand or offer AI Technology that amplifies our core data platform.
Previous wording
If we or third-party service providers experience an actual or perceived security breach or unauthorized parties otherwise obtain access to our customers’ data, our data, or our platform, our platform may be perceived as not being secure, our reputation may be harmed, demand for our platform may be reduced, and we may incur significant liabilities.
Current wording
If we, our customers, or third-party service providers experience an actual or perceived security breach or unauthorized parties otherwise obtain access to our customers’ data, our data, or our platform, our platform may be perceived as not being secure, our reputation may be harmed, demand for our platform may be reduced, and we may incur significant liabilities.
Previous wording
Our platform processes, stores, and transmits our own sensitive data as well as customers’ and partners’ proprietary, confidential, and sensitive data, such as personal information, protected health information, and financial data. Our platform is built on the infrastructure of third-party public cloud providers, such as AWS, Azure, and GCP. We also use third-party service providers, sub-processors, and technology to help us deliver services to our customers and their end-users, as well as for our internal business operations. Customers may also use third-party technology, such as connectors, to access our platform. These third-party providers may process, store, or transmit data of our employees, partners, customers, and customers’ end-users or may otherwise be used to help operate our technology. Some of this third-party technology, including open-source software, could be used as an attack vector. Even though we may not control the security measures of these third parties, we may incur liability or suffer reputational harm as a result of any breach of such measures.
Current wording
In the ordinary course of our business, we store, transmit, generate, and process our, our customers’, and our business partners’ confidential and proprietary data. Such data includes sensitive data, such as personal information, protected health information, and financial data. We also use third-party service providers, sub-processors, and technology to help us deliver services to our customers and their end-users, as well as for our internal business operations. For example, our platform is built on the infrastructure of third-party public cloud providers, such as AWS, Azure, and GCP, and we use third-party technology to assist with securing our environment and providing access to our platform. Our customers may also use third-party service providers to assist with their use of our platform or third-party technology, such as connectors, to access our platform. These third-party service providers may process, store, or transmit data of our employees, partners, customers, and customers’ end-users or may otherwise be used to help operate our platform and corporate systems. We, our customers and business partners, and these third parties face a variety of evolving cybersecurity threats.
Previous wording
Threats to information systems and data come from a variety of sources, including traditional computer “hackers,” internal and external personnel (such as through theft or misuse), sophisticated nation-states, and nation-state-supported actors. We and the third parties that may provide access to our platform are subject to a variety of evolving cyber threats, including unauthorized intrusions, denial-of-service attacks, ransomware attacks, business email compromises, computer malware, social engineering attacks (including through deep fakes and phishing), internal and external personnel misconduct or error, supply-chain attacks, software vulnerabilities, software or hardware disruptions or failures, and attacks enhanced or facilitated by AI Technology, all of which are prevalent in our industry and our customers’ and partners’ industries. Furthermore, future business expansions, acquisitions or partnerships could expose us to additional cybersecurity risks and vulnerabilities. The techniques used to sabotage or obtain unauthorized access to our and third-party providers’ platforms, systems, networks, or physical facilities in which data is stored or processed, or through which data is transmitted change frequently, and are becoming increasingly difficult to detect. In addition, ransomware attacks are becoming more frequent and severe, and we may be unwilling or unable to make ransom payments due to, for example, applicable laws or regulations prohibiting such payments. In general, cybersecurity breaches or security vulnerabilities could lead to significant interruptions in our operations, loss of data and income, reputational harm, diversion of funds, unexpected service interruptions, increased insurance costs, and other harm to our business, reputation, and competitive position. In addition, there can be no assurance that security measures designed to protect against security incidents will be effective.
Current wording
Cybersecurity threats come from a variety of sources, including traditional computer “hackers,” internal and external personnel (such as through theft or misuse), sophisticated nation-states, and nation-state-supported actors. Cybersecurity threat actors can use a wide variety of methods, including unauthorized intrusions, denial-of-service attacks, ransomware attacks, business email compromises, computer malware, infostealer malware, social engineering attacks (including through deep-fakes and phishing), internal and external personnel misconduct or error, supply-chain attacks, software vulnerabilities, software or hardware disruptions or failures, and attacks enhanced or facilitated by AI Technology, all of which are prevalent in our industry and our customers’ and partners’ industries. These methods change frequently and are becoming increasingly difficult to detect. Threat actors who successfully compromise networks or systems may use the unauthorized access as a vector to compromise other networks and systems. Threat actors’ goals often include disrupting a company’s operations or ability to provide services, obtaining unauthorized access to platforms, systems, networks, or physical facilities in which data is stored or processed, or through which data is transmitted, and stealing data. Ransomware attacks are becoming more frequent and severe.
Previous wording
We have contractual and other legal obligations to notify relevant stakeholders of security breaches. For example, SEC rules require disclosure on Form 8-K of the nature, scope and timing of any material cybersecurity incident and the reasonably likely impact of such incident. Determining whether a cybersecurity incident is notifiable or reportable may not be straightforward and any such mandatory disclosures are costly and could lead to negative publicity, loss of customer or partner confidence in the effectiveness of our security measures, diversion of management’s attention, governmental investigations, and the expenditure of significant capital and other resources to respond to or alleviate problems caused by the actual or perceived security breach.
Current wording
We have contractual and other legal obligations to notify customers and other parties of certain security incidents, and may choose to make such notifications even if not legally required to do so. For example, SEC rules require disclosure on Form 8-K of the nature, scope and timing of any material cybersecurity incident and the reasonably likely impact of such incident. Determining whether a cybersecurity incident is notifiable or reportable may not be straightforward, and any such mandatory disclosures are costly and could lead to negative publicity, loss of customer or partner confidence in the effectiveness of our security measures, diversion of management’s attention, governmental investigations, and the expenditure of significant capital and other resources to investigate, respond to, or alleviate problems caused by the actual or perceived security breach.
Previous wording
Litigation and regulatory actions resulting from security breaches or related to our information security practices may adversely affect our business. Unauthorized access to our platform, systems, networks, or physical facilities could result in litigation with our customers, our customers’ end-users, or other relevant stakeholders, or investigations, inquiries, or actions by regulators. We may be subject to, and have received in the past, requests by regulators for information about our security practices, experiences, and issues. Alleged failures, problems, or issues related to our information security, including following such information requests, could result in formal investigations or actions from a variety of regulators, including state attorneys general, the Federal Trade Commission (FTC), the SEC, and others. These proceedings could force us to spend money in defense or settlement, divert management’s time and attention, increase our costs of doing business, or adversely affect our reputation. We could be required to fundamentally change our business activities and practices or modify our platform capabilities in response to such litigation, which could have an adverse effect on our business.
Current wording
Any security breach of our platform, our operational systems, our software (including open-source software), our physical facilities, or the systems of our third-party service providers or sub-processors, or the perception that one has occurred, or unauthorized access to our customers’ or partners’ systems, data, or technology, could result in claims that we have breached customer contracts or other legal obligations. In addition, we may be subject to, and have received in the past, requests by regulators (including members of Congress) for information about our security practices, our public statements about our security program, experiences, and issues. Alleged failures, problems, or issues related to our information security or our customers’ use of our platform, including following such information requests, could result in formal investigations; actions from a variety of regulators, including state attorneys general, the Department of Justice, the Federal Trade Commission (FTC), and the SEC; litigation; indemnity obligations; fines; penalties; mitigation and remediation costs; reputational harm; diversion of management’s attention; friction with customers; and other liabilities and damage to our business. Further, cybersecurity incidents may lead customers or prospective customers to attempt to negotiate contractual terms that are less favorable to us, such as broader indemnification obligations and higher limitations of liability.
Previous wording
Our insurance coverage may not be adequate for liability arising from data security breaches, indemnification obligations, or other liabilities. The successful assertion of one or more large claims against us that exceeds our available insurance coverage or results in changes to our insurance policies (including premium increases or the imposition of large deductible or co-insurance requirements) could have an adverse effect on our business. In addition, we cannot be sure that our existing insurance coverage and coverage for errors and omissions will continue to be available on acceptable terms or that our insurers will not deny coverage as to any future claim. Risks related to our systems and security breaches are likely to increase as we continue to expand our platform and geographic footprint, grow our customer and partner base, and process, store, and transmit increasingly large amounts of data.
Current wording
Our insurance coverage may not be adequate for liability arising from data security breaches involving us or our customers or other third parties, indemnification obligations, or other liabilities. The successful assertion of one or more large claims against us that exceeds our available insurance coverage or results in changes to our insurance policies (including premium increases or the imposition of large deductible or co-insurance requirements) could have an adverse effect on our business. In addition, we cannot be sure that our existing insurance coverage and coverage for errors and omissions will continue to be available on acceptable terms or that our insurers will not deny coverage as to any future claim. Risks related to our systems and security breaches are likely to increase as we continue to expand our platform and geographic footprint, grow our customer and partner base, acquire operating companies, and process, store, and transmit increasingly large amounts of data.
Previous wording
From time to time, we may become subject to legal proceedings and claims, such as claims brought by our customers in connection with commercial disputes, employment claims, including claims related to the loss of employee equity grants upon termination, intellectual property claims, or securities class actions or other claims related to volatility in the trading price of our common stock. For example, we are currently subject to a securities class action lawsuit in federal court alleging federal securities law violations in connection with our initial public offering (IPO). See the section titled “Legal Proceedings” for more information. Litigation could result in substantial costs and divert management’s attention and resources, which might seriously harm our business, financial condition, and results of operations. Our existing insurance might not cover such claims, provide sufficient payments to cover all the costs to resolve one or more such claims, or continue to be available on terms acceptable to us (including premium increases or the imposition of large deductible or co-insurance requirements). A claim brought against us that is uninsured or underinsured could result in unanticipated costs, potentially harming our business, financial position, and results of operations.
Current wording
From time to time, we may become subject to legal proceedings and claims, such as claims brought by our customers in connection with commercial disputes, employment claims, including claims related to the loss of employee equity grants upon termination, intellectual property claims, or securities class actions or other claims related to volatility in the trading price of our common stock. For example, we are named in a securities class action lawsuit in federal court alleging federal securities law violations, as well as several class action lawsuits alleging common law and statutory claims in connection with the security matters we became aware of in May 2024. See the section titled “Legal Proceedings” for more information. Litigation could result in substantial costs and divert management’s attention and resources, which might seriously harm our business, financial condition, and results of operations. Our existing insurance might not cover such claims, provide sufficient payments to cover all the costs to resolve one or more such claims, or continue to be available on terms acceptable to us (including premium increases or the imposition of large deductible or co-insurance requirements). A claim brought against us that is uninsured or underinsured could result in unanticipated costs, potentially harming our business, financial position, and results of operations.
Previous wording
We could suffer disruptions, outages, defects, and other performance and quality problems with our platform or with the public cloud and internet infrastructure on which it relies.
Current wording
We or our third-party service providers could suffer disruptions, outages, defects, and other performance and quality problems with our platform or with the public cloud and internet infrastructure on which it relies.
Previous wording
Our business depends on our platform being available without disruption. We have experienced, and may in the future experience, disruptions, outages, defects, and other performance and quality problems with our platform and with the public cloud and internet infrastructure on which our platform relies. These problems can be caused by a variety of factors, including introductions of new functionality, vulnerabilities, and defects in proprietary and open-source software, human error or misconduct, natural disasters (such as tornadoes, earthquakes, or fires), capacity constraints, design limitations, denial of service attacks, or other security-related incidents.
Current wording
Our business depends on our platform being available without disruption. We and our third-party service providers have experienced, and may in the future experience, disruptions, outages, defects, and other performance and quality problems related to our platform and with the public cloud and internet infrastructure on which our platform relies. These problems can be caused by a variety of factors, including introductions of new functionality, vulnerabilities, coding errors, and defects in proprietary and open-source software, human error or misconduct, natural disasters (such as tornadoes, earthquakes, or fires), capacity constraints, design limitations, denial of service attacks, or other security-related incidents.
Previous wording
Any disruptions, outages, defects, and other performance and quality problems with our platform or with the public cloud and internet infrastructure on which it relies, or any material change in our contractual and other business relationships with our public cloud providers, could result in reduced use of our platform, increased expenses, including service credit obligations, and harm to our brand and reputation, any of which could have a material adverse effect on our business, financial condition, and results of operations.
Current wording
Any disruptions, outages, defects, and other performance and quality problems with our platform or with the public cloud, internet infrastructure, or other technology on which it relies, or any material change in our contractual and other business relationships with our public cloud providers, could result in reduced use of our platform, increased expenses, including service credit obligations, and harm to our brand and reputation, any of which could have a material adverse effect on our business, financial condition, and results of operations.
Previous wording
•our ability to retain existing customers and drive their increased consumption of our platform;
Current wording
•our ability to retain existing customers and drive their increased sustained consumption of our platform (including new product features and functionality);
Previous wording
•fluctuations in consumption resulting from the introduction of new features, technologies, or capabilities to our software, systems, or to underlying cloud infrastructure, including features or capabilities that may increase or decrease the consumption required to execute existing or future workloads, like better storage compression and cloud infrastructure processor improvements, or that allow customers to use our platform to provide compute services without requiring them to store data;
Current wording
•fluctuations in consumption resulting from the introduction of new features, technologies, or capabilities to our software, systems, or to underlying cloud infrastructure, including features or capabilities that may increase or decrease the consumption required to execute existing or future workloads, like better storage compression and cloud infrastructure processor improvements, or that allow customers to use our platform for compute services without requiring storage;
Previous wording
•rising inflation and our ability to control costs, including our operating expenses;
Current wording
•inflation and our ability to control costs, including our operating expenses;
Previous wording
We must increase the productivity of our sales and marketing organization to increase our sales to new and existing customers. It requires significant time and resources to effectively onboard new sales and marketing personnel and to train new and existing personnel so they are able to successfully sell our product. We also plan to continue to dedicate significant resources to sales and marketing programs that are industry-specific and focused on large organizations. Once a new customer begins using our platform, our sales team needs to focus on expanding consumption with that customer. All of these efforts will require us to invest significant financial and other resources, including in industries and sales channels in which we have limited experience to date. Our business and results of operations will be harmed if our sales and marketing efforts generate increases in revenue that are smaller than anticipated. We may not achieve anticipated revenue growth from our sales force if we are unable to attract, hire, develop, integrate, and retain talented and effective sales personnel, if our sales personnel are unable to achieve desired productivity levels, or if our sales and marketing programs are not effective.
Current wording
We must increase the size and productivity of our sales and marketing organization to increase our sales to new and existing customers. It requires significant time and resources to effectively onboard new sales and marketing personnel and to train new and existing personnel so they are able to successfully sell our product. We also plan to continue to dedicate significant resources to sales and marketing programs that are industry-specific and focused on large organizations. Once a new customer begins using our platform, our sales team needs to focus on expanding consumption with that customer. All these efforts require us to invest significant financial and other resources, including in industries and sales channels in which we have limited experience to date. In addition, our sales compensation plans must be structured in a way that properly incentivizes our sales and marketing personnel to drive increased consumption and new capacity arrangements. Our business and results of operations will be harmed if our sales and marketing efforts generate increases in revenue that are smaller than anticipated. We may not achieve anticipated revenue growth from our sales force if we are unable to attract, hire, develop, integrate, and retain talented and effective sales personnel, if our sales personnel are unable to achieve desired productivity levels, or if our sales and marketing programs, including our sales compensation plans, are not effective.
Previous wording
Sales to large customers involve risks that may not be present or that are present to a lesser extent with sales to smaller organizations, such as longer sales cycles, stronger customer leverage in negotiating pricing and other terms, more complex customer requirements, including our ability to partner with third parties that advise such customers or help them integrate their IT solutions, substantial upfront sales costs, less predictability in completing some of our sales, and higher customer support expectations. For example, large customers may require considerable time to evaluate and test our platform or new features prior to making a purchase decision. In addition, large customers may be switching from legacy on-premises solutions when purchasing our products, and may rely on third parties with whom we do not have relationships when making purchasing decisions. A number of factors also influence the length and variability of our sales cycle, including the need to educate potential customers about the uses and benefits of our platform, the renegotiation of existing agreements to cover additional workloads, changing laws, the discretionary nature of purchasing and budget cycles, and the competitive nature of evaluation and purchasing approval processes. As a result, the length of our sales cycle, from identification of the opportunity to deal closure, may vary significantly from customer to customer, with sales to large enterprises typically taking longer to complete. We have also historically seen consumption growth from large enterprises take longer than when compared to smaller enterprises. Moreover, large customers often begin to deploy our products on a limited basis but nevertheless demand implementation services and negotiate pricing discounts, which increase our upfront investment in the sales effort with no guarantee that sales to these customers will justify our substantial upfront investment. If we fail to effectively manage these risks associated with sales cycles and sales to large customers, our business, financial condition, and results of operations could be affected.
Current wording
Sales to large customers involve risks that may not be present or that are present to a lesser extent with sales to smaller organizations, such as longer sales cycles, stronger customer leverage in negotiating pricing and other terms, more complex customer requirements, including our ability to partner with third parties that advise such customers or help them integrate their IT solutions, substantial upfront sales costs, less predictability in completing some of our sales, and higher customer support expectations. For example, large customers may require considerable time to evaluate and test our platform or new features prior to making a purchase decision. In addition, large customers may be switching from legacy on-premises solutions when purchasing our products, and may rely on third parties with whom we do not have relationships when making purchasing decisions. Furthermore, large customers may have more extensive compliance and vendor diligence programs with respect to new products and services, which may increase both the time and resources needed to sell to them and also result in the inability to sell to them if we do not meet their compliance standards. A number of factors also influence the length and variability of our sales cycle, including the need to educate potential customers about the uses and benefits of our platform, the renegotiation of existing agreements to cover additional workloads, changing laws, the discretionary nature of purchasing and budget cycles, and the competitive nature of evaluation and purchasing approval processes. As a result, the length of our sales cycle, from identification of the opportunity to deal closure, may vary significantly from customer to customer, with sales to large enterprises typically taking longer to complete. We have also historically seen consumption growth from large enterprises take longer than when compared to smaller enterprises. Moreover, large customers often begin to deploy our products on a limited basis but nevertheless demand implementation services and negotiate pricing discounts, which increase our upfront investment in the sales effort with no guarantee that sales to these customers will justify our substantial upfront investment. If we fail to effectively manage these risks associated with sales cycles and sales to large customers, our business, financial condition, and results of operations could be affected.
Previous wording
From time to time, there may be changes in our executive management team or other key employees resulting from the hiring or departure of these personnel. Our executive officers and other key employees are employed on an at-will basis, which means that these personnel could terminate their employment with us at any time. For example, in February 2024, Frank Slootman retired as Chief Executive Officer and Sridhar Ramaswamy was appointed to replace him. The loss of one or more of our executive officers or any significant change in executive leadership could harm morale, cause additional personnel to depart, or introduce operational delays or risks as successor executives learn our business, each of which could harm our operating results.
Current wording
From time to time, there may be changes in our executive management team or other key employees resulting from the hiring or departure of these personnel. Our executive officers and other key employees are employed on an at-will basis, which means that these personnel could terminate their employment with us at any time. For example, in February 2024, Frank Slootman retired as Chief Executive Officer and Sridhar Ramaswamy was appointed to replace him. In July 2024, Grzegorz Czajkowski, our former EVP, Engineering and Support, resigned and left Snowflake to pursue another opportunity. The loss of additional executive officers or any significant change in executive leadership could harm morale, cause additional personnel to depart, or introduce operational delays or risks as successor executives learn our business, each of which could harm our operating results.
Previous wording
In order to continue to hire and retain highly qualified personnel, we will need to continue to hire in new locations around the world and manage return to work and remote working policies, which may add to the complexity and costs of our business operations. From time to time, we have experienced, and we expect to continue to experience, difficulty in hiring and retaining employees with appropriate qualifications. Many of the companies with which we compete for experienced personnel have greater resources than we have and can provide more competitive compensation and benefits. In addition, we require the majority of our employees to work from a physical office, while certain of our competitors allow remote work environments. In addition, prospective and existing employees often consider the value of the equity awards they receive in connection with their employment. If the actual or perceived value of our equity awards declines or continues to experience significant volatility, or if our existing employees receive significant proceeds from liquidating their previously vested equity awards, it may adversely affect our ability to recruit and retain key employees. Furthermore, current and prospective employees may believe that their equity award offers have limited upside, and our competitors may be able to offer more appealing compensation packages. In order to retain our existing employees and manage potential attrition, including as a result of any stock price decreases and market volatility that impact the actual or perceived value of our equity awards, we may issue additional equity awards or provide our employees with increased cash compensation, which could negatively impact our results of operations and be dilutive to stockholders. Finally, if we hire employees from competitors or other companies, their former employers may attempt to assert that we or these employees have breached our or their legal obligations, resulting in a diversion of our time and resources.
Current wording
In order to continue to hire and retain highly qualified personnel, we will need to continue to hire in new locations around the world and manage return to work and remote working policies, which may add to the complexity and costs of our business operations. From time to time, we have experienced, and we expect to continue to experience, difficulty in hiring and retaining employees with appropriate qualifications. Many of the companies with which we compete for experienced personnel have greater resources than we have and can provide more competitive compensation and benefits. In addition, we require the majority of our employees to work from a physical office, while certain of our competitors allow remote work environments. In addition, prospective and existing employees often consider the value of the equity awards they receive in connection with their employment. Since the beginning of fiscal year 2025, our stock price has declined significantly. If the actual or perceived value of our equity awards continues to decline or undergoes significant volatility, or if our existing employees receive significant proceeds from liquidating their previously vested equity awards, it may adversely affect our ability to recruit and retain key employees. Furthermore, current and prospective employees may believe that their equity award offers have limited upside, and our competitors may be able to offer more appealing compensation packages. In order to retain our existing employees and manage potential attrition, including as a result of any stock price decreases and market volatility that impact the actual or perceived value of our equity awards, we may issue additional equity awards or provide our employees with increased cash compensation, which could negatively impact our results of operations and be dilutive to stockholders. Finally, if we hire employees from competitors or other companies, their former employers may attempt to assert that we or these employees have breached our or their legal obligations, resulting in a diversion of our time and resources.
Previous wording
In our customer contracts and certain strategic partnership agreements, we assume liability for security breaches and data protection claims caused by us and by certain third parties on which we rely. Our contracts with customers, partners, investors, and other third parties may also include indemnification provisions under which we agree to defend and indemnify them against claims and losses arising from alleged infringement, misappropriation, or other violation of intellectual property rights and for other matters. We may not be successful in our attempt to limit our liability and indemnity obligations and obtain corresponding liability and indemnification obligations from vendors and partners that would require them to contribute to our obligations, and an event triggering our liability or indemnity obligations could give rise to multiple claims involving multiple customers or other third parties. There is no assurance that our applicable insurance coverage, if any, would cover, in whole or in part, any such liability or indemnity obligations. We may be liable for up to the full amount of the contractual claims, which could result in substantial liability or material disruption to our business or could negatively impact our relationships with customers or other third parties, reduce demand for our platform, and adversely affect our business, financial condition, and results of operations.
Current wording
In our customer contracts and certain strategic partnership agreements, we assume liability for security breaches and data protection claims caused by us and by certain third parties on which we rely. Our contracts with customers, partners, investors, and other third parties may also include indemnification provisions under which we agree to defend and indemnify them against claims and losses arising from alleged infringement, misappropriation, or other violation of intellectual property rights and for other matters. We may not be successful in our attempt to limit our liability and indemnity obligations and obtain corresponding liability and indemnification obligations from vendors and partners that would require them to contribute to our obligations, and an event triggering our liability or indemnity obligations could give rise to multiple claims involving multiple customers or other third parties. In addition, our customers or other business partners may attempt to claim indemnification even if we are not at fault, and defending against such claims may be time-consuming and expensive. There is no assurance that our applicable insurance coverage, if any, would cover, in whole or in part, any such liability or indemnity obligations. We may be liable for up to the full amount of the contractual claims, which could result in substantial liability or material disruption to our business or could negatively impact our relationships with customers or other third parties, reduce demand for our platform, and adversely affect our business, financial condition, and results of operations.
Previous wording
We provide our platform to the U.S. government, state and local governments, foreign governments, and heavily regulated organizations directly and through our partners. We have made, and may continue to make, significant investments to support future sales opportunities in the government sector, including obtaining government certifications. However, government certification requirements may change, we may be unable to achieve or sustain one or more required government certifications, or we may be required to make unexpected changes to our business, operations or products to obtain or sustain such certifications. As a result, our ability to sell into the government sector could be restricted until we satisfy the requirements of such certifications.
Current wording
We provide our platform to the U.S. government, state and local governments, foreign governments, and heavily regulated organizations directly and through our partners. We have made, and may continue to make, significant investments to support future sales opportunities in the government sector, including obtaining government certifications or clearances. However, government certification or clearance requirements may change, we may be unable to achieve or sustain one or more required government certifications or clearances, or we may be required to make unexpected changes to our business, operations or products to obtain or sustain such certifications or clearances. As a result, our ability to sell into the government sector could be restricted until we satisfy the requirements of such certifications or clearances.
Previous wording
A component of our growth strategy involves the further expansion of our operations and customer base internationally. Customer accounts outside the United States generated 24% of our revenue for the three months ended April 30, 2024. We are continuing to adapt to and develop strategies to address international markets, but there is no guarantee that such efforts will have the desired effect. For example, we anticipate that we will need to establish relationships with new partners in order to expand into certain countries, including China, and if we fail to identify, establish, and maintain such relationships, we may be unable to execute on our expansion plans. We expect that our international activities will continue to grow for the foreseeable future as we continue to pursue opportunities in existing and new international markets, which will require significant dedication of management attention and financial resources.
Current wording
A component of our growth strategy involves the further expansion of our operations and customer base internationally. Customer accounts outside the United States generated 24% of our revenue for each of the three and six months ended July 31, 2024. We are continuing to adapt to and develop strategies to address international markets, but there is no guarantee that such efforts will have the desired effect. For example, we anticipate that we will need to establish relationships with new partners in order to expand into certain countries, including China, and if we fail to identify, establish, and maintain such relationships, we may be unable to execute on our expansion plans. We expect that our international activities will continue to grow for the foreseeable future as we continue to pursue opportunities in existing and new international markets, which will require significant dedication of management attention and financial resources.
Previous wording
•differing and potentially more onerous labor regulations where labor laws are generally more advantageous to employees as compared to the United States, including regulations governing terminations in locations that do not permit at-will employment and deemed hourly wage and overtime regulations;
Current wording
•differing and potentially more onerous labor regulations that are generally more advantageous to employees as compared to the United States, including regulations governing terminations in locations that do not permit at-will employment and deemed hourly wage and overtime regulations;
Previous wording
We are currently preparing to offer our platform to Chinese affiliates of certain multi-national customers. Under Chinese law, we must offer our platform through a Chinese-owned operating partner, which must assume control and management of certain aspects of our platform and serve as the seller of record. This requires a new operating and go-to-market model, and there is a risk that functionality or customer experience may suffer and that we may incur liability or brand impairment arising from the operating partner’s actions or inactions. In addition, developing and operationalizing this new model is a significant investment and may not generate expected returns.
Current wording
We are currently offering our platform to Chinese affiliates of certain multi-national customers. Under Chinese law, we must offer our platform through a Chinese-owned operating partner, which must assume control and management of certain aspects of our platform and serve as the seller of record. This requires a new operating and go-to-market model, and there is a risk that functionality or customer experience may suffer and that we may incur liability or brand impairment arising from the operating partner’s actions or inactions. In addition, developing and operationalizing this new model is a significant investment and may not generate expected returns.
Previous wording
The tax regimes we are subject to or operate under, including income and non-income taxes, are unsettled and may be subject to significant change. Changes in tax laws, regulations, or rulings, or changes in interpretations of existing laws and regulations, could materially affect our financial position and results of operations. For example, the 2017 legislation informally titled the Tax Act significantly reformed the Internal Revenue Code of 1986, as amended (the Code). In August 2022, the United States passed the Inflation Reduction Act, which provides for a minimum tax equal to 15% of the adjusted financial statement income of certain large corporations, as well as a 1% excise tax on stock repurchases. In February 2023, our board of directors authorized the repurchase of up to $2.0 billion of our common stock through a stock repurchase program. We do not expect the excise tax on repurchases under our stock repurchase program to have a material impact on our aggregate tax liability. In addition, many countries have recently proposed, recommended, or enacted changes to existing tax laws or new tax laws that could significantly increase our tax obligations in the countries where we do business or require us to change the manner in which we operate our business.
Current wording
The tax regimes we are subject to or operate under, including income and non-income taxes, are unsettled and may be subject to significant change. Changes in tax laws, regulations, or rulings, or changes in interpretations of existing laws and regulations, could materially affect our financial position and results of operations. For example, the 2017 legislation informally titled the Tax Act significantly reformed the Internal Revenue Code of 1986, as amended (the Code). In August 2022, the United States passed the Inflation Reduction Act, which provides for a minimum tax equal to 15% of the adjusted financial statement income of certain large corporations, as well as a 1% excise tax on stock repurchases. In February 2023, our board of directors authorized the repurchase of up to $2.0 billion of our common stock through a stock repurchase program. In August 2024, our board of directors authorized the repurchase of an additional $2.5 billion of our outstanding common stock under the stock purchase program and extended the expiration date of the stock repurchase program from March 2025 to March 2027. We do not expect the excise tax on repurchases under our stock repurchase program to have a material impact on our aggregate tax liability. In addition, many countries have recently proposed, recommended, or enacted changes to existing tax laws or new tax laws that could significantly increase our tax obligations in the countries where we do business or require us to change the manner in which we operate our business.
Previous wording
•significant data breaches, disruptions to, or other incidents involving our platform;
Current wording
•significant data breaches, disruptions to, or other incidents involving our platform or our customers;
Previous wording
•our involvement in litigation and the development and outcome of such litigation;
Current wording
•our involvement in litigation or governmental or regulatory investigations or inquiries and the development and outcome of such litigation, investigations, or inquiries;
Previous wording
In February 2023, our board of directors authorized the repurchase of up to $2.0 billion of our common stock through a stock repurchase program. Repurchases may be effected, from time to time, either on the open market (including via pre-set trading plans), in privately negotiated transactions, or through other transactions in accordance with applicable securities laws. The program expires in March 2025.
Current wording
In February 2023, our board of directors authorized the repurchase of up to $2.0 billion of our common stock through a stock repurchase program. In August 2024, our board of directors authorized the repurchase of an additional $2.5 billion of our outstanding common stock under the stock repurchase program and extended the expiration date of the stock repurchase program from March 2025 to March 2027. Repurchases may be effected, from time to time, either on the open market (including via pre-set trading plans), in privately negotiated transactions, or through other transactions in accordance with applicable securities laws.
Rearranged current paragraphs (1)
Current report — wording carried from elsewhere
We have also encountered, and will continue to encounter, risks and uncertainties frequently experienced by growing companies in rapidly changing industries, such as the risks and uncertainties described below. If our assumptions regarding these risks and uncertainties and our future revenue growth are incorrect or change, or if we do not address these risks successfully, our operating and financial results could differ materially from our expectations, and our business could suffer.