Trade Desk Inc
For the period ended Sep 30, 2024. Filed Nov 7, 2024.
View on SEC.govAbout this filing
A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.
Sep 30, 2024 · Filed Nov 7, 2024
What changed in Risk Factors?
Read the current filingPrevious report: 10-Q
Period ended 2024-06-30; filed 2024-08-08.
0001671933-24-000090
Item 1A. Risk FactorsCurrent report: 10-Q
Period ended 2024-09-30; filed 2024-11-07.
0001671933-24-000122
Item 1A. Risk FactorsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 229 previous paragraphs and 230 current paragraphs.
220 unchanged; 9 reworded; 0 added; 0 removed; 0 previous and 1 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Reworded paragraphs (9)
Previous wording
In addition, as we develop and introduce new products and services, including those incorporating or utilizing artificial intelligence and machine learning and new processing of personal information, including identifiable information, they may raise new, or heighten existing, technological, security, legal and other risks and challenges, that may cause unintended consequences and may not function properly or may be misused by our clients. If we fail to adapt to our rapidly changing industry or to evolving client needs or expectations, or we provide new or updated products and services that exacerbate technological, security, legal or other challenges, the reputation of and demand for our platform or related offerings could decrease and our business, financial condition and operations may be adversely affected.
Current wording
In addition, as we develop and introduce new products and services, including those incorporating or utilizing artificial intelligence and machine learning and new processing of personal information, including identifiable information, they may raise new, or heighten existing, technological, security, legal and other risks and challenges, which may cause unintended consequences, and they may not function properly or may be misused by our clients. If we fail to adapt to our rapidly changing industry or to evolving client needs or expectations, or we provide new or updated products and services that exacerbate technological, security, legal or other challenges, the reputation of and demand for our platform or related offerings could decrease and our business, financial condition and operations may be adversely affected.
Previous wording
The substantial majority of our revenue has been derived from clients that programmatically purchase advertising through our platform. We expect that spending on programmatic ad buying will continue to be our primary source of revenue for the foreseeable future and that our revenue growth will largely depend on increasing spend through our platform. The market for programmatic ad buying is an emerging market, and our current and potential clients may not shift to programmatic ad buying from other buying methods as quickly as we expect, which would reduce our growth potential. If the market for programmatic ad buying deteriorates or develops more slowly than we expect, it could reduce demand for our platform, and our business, growth prospects and financial condition would be adversely affected.
Current wording
The substantial majority of our revenue has been derived from clients that programmatically purchase advertising through our platform. We expect that spending on programmatic ad buying will continue to be our primary source of revenue for the foreseeable future and that our revenue growth will largely depend on increasing spend through our platform. The market for programmatic ad buying is a relatively new market, and our current and potential clients may not shift to programmatic ad buying from other buying methods as quickly as we expect, which would reduce our growth potential. If the market for programmatic ad buying deteriorates or develops more slowly than we expect, it could reduce demand for our platform, and our business, growth prospects and financial condition would be adversely affected.
Previous wording
The use of APIs by our clients has significantly increased in recent years. Our APIs allow clients to build their own media buying and data management interface by using our APIs to develop custom integration of their business with our platform and related offerings. The increased use of APIs increases security and operational risks to our systems and the users of our systems, including the risk for intrusion attacks, data theft, or denial of service attacks. Furthermore, while APIs allow clients greater ease and power in accessing our platform and related offerings, they also increase the risk of overusing our systems, potentially causing outages. We have experienced system slowdowns due to client overuse of our systems through our APIs. While we have taken measures intended to decrease security and outage risks associated with the use of our APIs, we cannot guarantee that such measures will be successful. Our failure to prevent outages or security breaches resulting from API use could result in government enforcement actions against us, claims for damages by consumers and other affected individuals, costs associated with investigation and remediation damage to our reputation and loss of goodwill, any of which could harm our business, financial condition and results of operations.
Current wording
The use of APIs by our clients has significantly increased in recent years. Our APIs allow clients to build their own media buying and data management interface by using our APIs to develop custom integration of their business with our platform and related offerings. The increased use of APIs increases security and operational risks to our systems and the users of our systems, including the risk for intrusion attacks, data theft, or denial of service attacks. Furthermore, while APIs allow clients greater ease and power in accessing our platform and related offerings, they also increase the risk of overusing our systems, potentially causing outages. We have experienced system slowdowns due to client overuse of our systems through our APIs. While we have taken measures intended to decrease security and outage risks associated with the use of our APIs, we cannot guarantee that such measures will be successful. Our failure to prevent outages or security breaches resulting from API use could result in government enforcement actions against us, claims for damages by consumers and other affected individuals, and costs associated with investigating and remediating damage to our reputation and loss of goodwill, any of which could harm our business, financial condition and results of operations.
Previous wording
As we expand our offerings, which in some instances involves ingesting more identifiable information, the consequences of potential security vulnerabilities become more significant for our business. We expect to continue to invest in technology and security services, equipment, and expertise, including engineers, data centers, network services and database technologies, as well as potentially increase our reliance on open source software. Without these improvements, our operations might suffer from security vulnerabilities or misuse, system disruptions, data loss, slow transaction processing, unreliable service levels, impaired quality or delays in reporting accurate information regarding transactions in our platform, any of which could negatively affect our financial condition, reputation and ability to attract and retain clients. In addition, the expansion and improvement of our systems and infrastructure may require us to commit substantial financial, operational and technical resources, with no assurance our business will increase. If we fail to respond to technological change or to adequately maintain, protect, expand, upgrade and develop our systems and infrastructure in a timely fashion, our growth prospects and results of operations could be adversely affected. The steps we take to increase the reliability, integrity and security of our platform and related offerings as they scale are expensive and complex, and our execution could result in operational failures and increased vulnerability to cyberattacks. Such cyberattacks could include denial-of-service attacks impacting service availability (including the ability to deliver ads) and reliability, tricking company employees into releasing control of their systems to a hacker, or the introduction of computer viruses or malware into our systems with a view to steal confidential or proprietary data. Cyberattacks of increasing sophistication may be difficult to detect and could result in the theft of our intellectual property and data, including personal information. We are also vulnerable to unintentional errors or malicious or improper actions by persons with authorized access to our systems that exceed the scope of their access rights, distribute data erroneously, or, unintentionally or intentionally, interfere with the intended operations and functioning of our platform and related offerings. Moreover, we could be adversely impacted by outages and disruptions in the online platforms of our inventory and data suppliers, such as real-time advertising exchanges. Misuse, vulnerabilities, outages and disruptions of our platform and related offerings, including due to cyberattacks, may require engagement with regulators or lead to legal actions, harm our reputation and negatively impact our business, financial condition and results of operations.
Current wording
As we expand our offerings, which in some instances involves ingesting more identifiable information, the consequences of potential security vulnerabilities become more significant for our business. We expect to continue to invest in technology and security services, equipment, and expertise, including engineers, data centers, network services and database technologies, as well as potentially increase our reliance on open source software. Without these improvements, our operations might suffer from security vulnerabilities or misuse, system disruptions, data loss, slow transaction processing, unreliable service levels, impaired quality or delays in reporting accurate information regarding transactions in our platform, any of which could negatively affect our financial condition, reputation and ability to attract and retain clients. In addition, the expansion and improvement of our systems and infrastructure may require us to commit substantial financial, operational and technical resources, with no assurance our business will increase. If we fail to respond to technological change or to adequately maintain, protect, expand, upgrade and develop our systems and infrastructure in a timely fashion, our growth prospects and results of operations could be adversely affected. The steps we take to increase the reliability, integrity and security of our platform and related offerings as they scale are expensive and complex, and our execution could result in operational failures and increased vulnerability to cyberattacks. Such cyberattacks could include denial-of-service attacks impacting service availability (including the ability to deliver ads) and reliability, tricking company employees into releasing control of their systems to a hacker, or the introduction of computer viruses or malware into our systems with a view to steal confidential or proprietary data. Cyberattacks of increasing sophistication may be difficult to detect and could result in the theft of our intellectual property and data, including personal information. We are also vulnerable to unintentional errors or malicious or improper actions by persons with authorized access to our systems that exceed the scope of their access rights, distribute data erroneously, or, unintentionally or intentionally, interfere with the intended operations and functioning of our platform and related offerings. Moreover, we could be adversely impacted by outages and disruptions in the online platforms of our inventory and data suppliers, such as real-time advertising exchanges. Misuse, vulnerabilities, outages and disruptions of our platform and related offerings, including due to cyberattacks, may require engagement with regulators or lead to legal actions, and may harm our reputation and negatively impact our business, financial condition and results of operations.
Previous wording
The global regulatory landscape regarding the privacy and protection of personal information is evolving, and U.S. (state, federal and local) and foreign governments continue to consider and enact additional legislation and rulemaking related to privacy and data protection, often with a particular focus on intermediaries in the online advertising ecosystem, including those that engage in targeted advertising, “sell” or “share” personal data, and act as “data brokers.” We expect to see an increase in, or changes to, privacy and data protection legislation and regulation in this area for the foreseeable future. For example, in the U.S., the FTC continues to propose updates to existing regulations, including those governing collection of data from children online and related to “commercial surveillance” generally. Further, the FTC uses its enforcement powers under Section 5 of the Federal Trade Commission Act (the “FTC Act”) (which prohibits “unfair” and “deceptive” trade practices) to investigate companies engaging in online tracking. For example, in the preceding 12 months, the FTC has announced enforcement actions against a host of companies that handle personal data it views as sensitive for advertising purposes, such as actions against location data brokers and other actions against consumer health companies the FTC alleged disclosed consumer health data to third-party platforms for advertising purposes. These enforcement announcements signal increased regulatory scrutiny of advertising practices that involve “sensitive” categories of personal data such as health data and precise location information. Other companies in the advertising technology space have been subject to government investigation by regulatory bodies; advocacy organizations have also filed complaints with data protection authorities against advertising technology companies, arguing that certain of these companies’ practices do not comply with data privacy laws, or consumer protection laws such as the FTC Act. We cannot avoid the possibility that one of these investigations or enforcement actions will require us to alter our practices. In addition, a potential federal omnibus privacy law remains a possibility. The most recent effort resulted in the draft The American Privacy Rights Act (the “APRA”), which was announced with bipartisan support this spring. Although the initial momentum surrounding it has waned, if ultimately passed, such a law would likely substantially impact the online advertising ecosystem.
Current wording
The global regulatory landscape regarding the privacy and protection of personal information is evolving, and U.S. (state, federal and local) and foreign governments continue to consider and enact additional legislation and rulemaking related to privacy and data protection, often with a particular focus on intermediaries in the online advertising ecosystem, including those that engage in targeted advertising, “sell” or “share” personal data, and act as “data brokers.” We expect to see an increase in, or changes to, privacy and data protection legislation and regulation in this area for the foreseeable future. For example, in the U.S., the FTC continues to propose updates to existing regulations, including those governing collection of data from children online and related to “commercial surveillance” generally. Further, the FTC uses its enforcement powers under Section 5 of the Federal Trade Commission Act (the “FTC Act”) (which prohibits “unfair” and “deceptive” trade practices) to investigate companies engaging in online tracking. For example, the FTC has been very active in bringing enforcement actions against companies that handle personal data it views as sensitive for advertising purposes, including location data brokers and companies that process health-related data. These enforcement announcements signal increased regulatory scrutiny of advertising practices that involve “sensitive” categories of personal data such as health data and precise location information. Other companies in the advertising technology space have been subject to government investigation by regulatory bodies; advocacy organizations have also filed complaints with data protection authorities against advertising technology companies, arguing that certain of these companies’ practices do not comply with data privacy laws, or consumer protection laws such as the FTC Act. We cannot avoid the possibility that one of these investigations or enforcement actions will require us to alter our practices. In addition, a potential federal omnibus privacy law remains a possibility. Although the initial momentum surrounding it has waned, if ultimately passed, such a law would likely substantially impact the online advertising ecosystem.
Previous wording
State lawmakers are also actively addressing consumer data privacy issues. Many states have adopted omnibus consumer privacy laws, some of which are already enforceable, while others will take effect over the coming years. These state laws define “personal information” broadly enough to include many online identifiers provided by individuals’ devices, applications, and protocols (such as IP addresses, mobile application identifiers and unique cookie identifiers), individuals’ location data, and hashed versions of email addresses and phone numbers. These laws generally require covered businesses to meet numerous data privacy-related obligations and establish data privacy rights for consumers in such states (including rights to opt out of certain processing of their personal data and to request correction, deletion of and access to personal data), imposing special rules on the collection of personal data from minors and other personal data deemed “sensitive” under the laws, and creating new notice obligations. Most significant for the advertising industry, however, these laws require businesses that engage in certain advertising uses of personal data to offer and honor an opt-out of such activities, including, in some states, through browser or device-based preference signals. (Terminology varies slightly among some of the state laws, tying the opt-out requirement to “targeted advertising,” “sales” or “sharing” of personal data.) Because of these obligations, the availability of data within our platform, our other offerings and the advertising ecosystem more broadly may decline, potentially making our platform and offerings less valuable to our clients.
Current wording
State lawmakers are also actively addressing consumer data privacy issues. Many states have adopted omnibus consumer privacy laws, some of which are already enforceable, while others will take effect over the coming years. These state laws define “personal information” broadly enough to include many online identifiers provided by individuals’ devices, applications, and protocols (such as IP addresses, mobile application identifiers and unique cookie identifiers), individuals’ location data, and hashed versions of email addresses and phone numbers. These laws generally require covered businesses to meet numerous data privacy-related obligations and establish data privacy rights for consumers in such states (including rights to opt out of certain processing of their personal data and to request correction, deletion of and access to personal data), imposing special rules on the collection of personal data from minors and other personal data deemed “sensitive” under the laws, and creating new notice obligations. Many also impose data minimization requirements, mandating that companies only collect and process data for certain purposes. Most significant for the advertising industry, however, these laws require businesses that engage in certain advertising uses of personal data to offer and honor an opt-out of such activities, including, in some states, through browser or device-based preference signals. (Terminology varies slightly among some of the state laws, tying the opt-out requirement to “targeted advertising,” “sales” or “sharing” of personal data.) Because of these obligations, the availability of data within our platform, our other offerings and the advertising ecosystem more broadly may decline, potentially making our platform and offerings less valuable to our clients.
Previous wording
Our Class B common stock has ten votes per share and our Class A common stock has one vote per share. Because of the ten-to-one voting ratio between our Class B and Class A common stock, the holders of our Class B common stock collectively have substantial control of the combined voting power of our common stock. Our certificate of incorporation provides that all Class B common stock will convert automatically into Class A common stock on December 22, 2025, unless converted prior to such date. As of June 30, 2024, stockholders who held shares of Class B common stock, including our executive officers, employees, and directors and their affiliates, together held approximately 49.5% of the voting power of our outstanding capital stock. This concentrated control limits or precludes your ability to influence corporate matters, as the holders of Class B common stock are able to influence or substantially control matters requiring approval by our stockholders, including the election of the directors, excluding the director we have designated as a Class A director, and the approval of mergers, acquisitions or other extraordinary transactions. Their interests may differ from yours and they may vote in a manner that is adverse to your interests. This ownership concentration may deter, delay or prevent a change of control of our company, deprive our stockholders of an opportunity to receive a premium for their common stock as part of a sale of our company and may ultimately affect the market price of our common stock. Furthermore, in connection with the dual class nature of our common stock, we have become subject to legal proceedings and could become involved in additional litigation, including securities class action claims and/or derivative litigation. Any such legal proceedings, regardless of outcome or merit, may divert management’s time and attention and may result in the incurrence of significant expense, including legal fees. For additional information regarding the pending legal proceeding, refer to “Item 1. Legal Proceedings.”
Current wording
Our Class B common stock has ten votes per share and our Class A common stock has one vote per share. Because of the ten-to-one voting ratio between our Class B and Class A common stock, the holders of our Class B common stock collectively have substantial control of the combined voting power of our common stock. Our certificate of incorporation provides that all Class B common stock will convert automatically into Class A common stock on December 22, 2025, unless converted prior to such date. As of September 30, 2024, stockholders who held shares of Class B common stock, including our executive officers, employees, and directors and their affiliates, together held approximately 49.4% of the voting power of our outstanding capital stock. This concentrated control limits or precludes your ability to influence corporate matters, as the holders of Class B common stock are able to influence or substantially control matters requiring approval by our stockholders, including the election of the directors, excluding the director we have designated as a Class A director, and the approval of mergers, acquisitions or other extraordinary transactions. Their interests may differ from yours and they may vote in a manner that is adverse to your interests. This ownership concentration may deter, delay or prevent a change of control of our company, deprive our stockholders of an opportunity to receive a premium for their common stock as part of a sale of our company and may ultimately affect the market price of our common stock. Furthermore, in connection with the dual class nature of our common stock, we have become subject to legal proceedings and could become involved in additional litigation, including securities class action claims and/or derivative litigation. Any such legal proceedings, regardless of outcome or merit, may divert management’s time and attention and may result in the incurrence of significant expense, including legal fees. For additional information regarding the pending legal proceedings, refer to “Item 1. Legal Proceedings.”
Previous wording
As a public company, we are subject to the reporting requirements of the Exchange Act, and are required to comply with the applicable requirements of the Sarbanes-Oxley Act and the Dodd-Frank Wall Street Reform and Consumer Protection Act, the listing requirements of Nasdaq, and other applicable securities rules and regulations. Compliance with these rules and regulations increases our legal and financial compliance costs, make some activities more difficult, time-consuming or costly and increase demand on our systems and resources. Among other things, the Exchange Act requires that we file annual, quarterly and current reports with respect to our business and results of operations and maintain effective disclosure controls and procedures and internal controls over financial reporting. Significant resources and management oversight are required to maintain and, if required, improve our disclosure controls and procedures and internal controls over financial reporting to meet this standard. As a result, management’s attention may be diverted from other business concerns, which could harm our business and results of operations.
Current wording
As a public company, we are subject to the reporting requirements of the Exchange Act, and are required to comply with the applicable requirements of the Sarbanes-Oxley Act and the Dodd-Frank Wall Street Reform and Consumer Protection Act, the listing requirements of Nasdaq, and other applicable securities rules and regulations. Compliance with these rules and regulations increases our legal and financial compliance costs, make some activities more difficult, time-consuming or costly and increase demand on our systems and resources. Among other things, the Exchange
Previous wording
The U.S. and non-U.S. tax laws applicable to our business activities are subject to interpretation and are changing. We are subject to audit by the Internal Revenue Service and by taxing authorities of the state, local and foreign jurisdictions in which we operate. Our tax obligations are based in part on our corporate operating structure, including the manner in which we develop, value, use and hold our intellectual property, the jurisdictions in which we operate, how tax authorities assess revenue-based taxes such as sales and use taxes, the scope of our international operations and the value we ascribe to our intercompany transactions. Taxing authorities may challenge, and have challenged, our tax positions and methodologies for valuing developed technology or intercompany arrangements, positions regarding the collection of sales and use taxes, and the jurisdictions in which we are subject to taxes, which could expose us to additional taxes. Any adverse outcomes of such challenges to our tax positions could result in additional taxes for prior periods, interest and penalties, as well as higher future taxes. In addition, our future tax expense could increase as a result of changes in tax laws, regulations or accounting principles, or as a result of earning income in jurisdictions that have higher tax rates. For example, the European Commission has proposed, and various jurisdictions, including a number of states in the United States, are considering enacting or have enacted laws that impose separate taxes on specified digital services, which may increase our tax obligations in such jurisdictions. In addition, the Organization for Economic Cooperation and Development (“OECD”) announced an Inclusive Framework on Base Erosion and Profit Shifting, including Pillar Two Model Rules defining the global minimum tax, which calls for the taxation of large multinational corporations at a minimum rate of 15%. While the changes from these rules have not impacted our financial condition or results of operations, they could increase our effective tax rate and cash tax payments in future periods. Any increase in our tax expense could have a negative effect on our financial condition and results of operations. Moreover, the determination of our provision for income taxes and other tax liabilities requires significant estimates and judgment by management, and the tax treatment of certain transactions is uncertain. Any changes, ambiguity, or uncertainty in taxing jurisdictions’ administrative interpretations, decisions, policies and positions, including, the position of taxing authorities with respect to revenue generated by reference to certain digital services, could also materially impact our income tax liabilities. Although we believe we will make reasonable estimates and judgments, the ultimate outcome of any particular issue may differ from the amounts previously recorded in our financial statements and any such occurrence could materially affect our financ…
Excerpt shortened here; the source contains the full paragraph.
Current wording
The U.S. and non-U.S. tax laws applicable to our business activities are subject to interpretation and are changing. We are subject to audit by the Internal Revenue Service and by taxing authorities of the state, local and foreign jurisdictions in which we operate. Our tax obligations are based in part on our corporate operating structure, including the manner in which we develop, value, use and hold our intellectual property, the jurisdictions in which we operate, how tax authorities assess revenue-based taxes such as sales and use taxes, the scope of our international operations and the value we ascribe to our intercompany transactions. Taxing authorities may challenge, and have challenged, our tax positions and methodologies for valuing developed technology or intercompany arrangements, positions regarding the collection of sales and use taxes, and the jurisdictions in which we are subject to taxes, which could expose us to additional taxes. Any adverse outcomes of such challenges to our tax positions could result in additional taxes for prior periods, interest and penalties, as well as higher future taxes. In addition, our future tax expense could increase as a result of changes in tax laws, regulations or accounting principles, or as a result of earning income in jurisdictions that have higher tax rates. For example, the European Commission has proposed, and various jurisdictions, including a number of states in the United States, are considering enacting or have enacted laws that impose separate taxes on specified digital services, which may increase our tax obligations in such jurisdictions. In addition, the Organization for Economic Cooperation and Development (“OECD”) announced an Inclusive Framework on Base Erosion and Profit Shifting, including Pillar Two Model Rules defining a global minimum tax, which calls for the taxation of large multinational corporations at a minimum rate of 15%. While the changes from these rules have not impacted our financial condition or results of operations, they could increase our effective tax rate and cash tax payments in future periods. Any increase in our tax expense could have a negative effect on our financial condition and results of operations. Moreover, the determination of our provision for income taxes and other tax liabilities requires significant estimates and judgment by management, and the tax treatment of certain transactions is uncertain. Any changes, ambiguity, or uncertainty in taxing jurisdictions’ administrative interpretations, decisions, policies and positions, including, the position of taxing authorities with respect to revenue generated by reference to certain digital services, could also materially impact our income tax liabilities. Although we believe we will make reasonable estimates and judgments, the ultimate outcome of any particular issue may differ from the amounts previously recorded in our financial statements and any such occurrence could materially affect our financia…
Excerpt shortened here; the source contains the full paragraph.
Rearranged current paragraphs (1)
Current report — wording carried from elsewhere
Act requires that we file annual, quarterly and current reports with respect to our business and results of operations and maintain effective disclosure controls and procedures and internal controls over financial reporting. Significant resources and management oversight are required to maintain and, if required, improve our disclosure controls and procedures and internal controls over financial reporting to meet this standard. As a result, management’s attention may be diverted from other business concerns, which could harm our business and results of operations.