Skip to main content

Braze Inc

For the period ended Oct 31, 2024. Filed Dec 10, 2024.

View on SEC.gov

About this filing

A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.

Oct 31, 2024 · Filed Dec 10, 2024

BRZE$45.79-0.0%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-Q

Period ended 2024-07-31; filed 2024-09-06.

0001676238-24-000171

Item 1A. Risk Factors

Current report: 10-Q

Period ended 2024-10-31; filed 2024-12-10.

0001676238-24-000208

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 289 previous paragraphs and 288 current paragraphs.

265 unchanged; 23 reworded; 0 added; 1 removed; 0 previous and 0 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Removed paragraphs (1)

Previous report

Our inability to comply with agreements we enter into with our customers regarding the collection, use, disclosure and other processing of personal data could result in additional costs and liabilities to us or inhibit sales of our products.
Reworded paragraphs (23)

Previous wording

•We rely upon third-party providers of cloud-based infrastructure, including Amazon Web Services, to host our products. Any disruption in the operations of these third-party providers or limitations on capacity or interference with our use could adversely affect our business, financial condition and results of operations.

Current wording

•We rely upon third-party providers of cloud-based infrastructure, including Amazon Web Services and Rackspace, to host our products. Any disruption in the operations of these third-party providers or limitations on capacity or interference with our use could adversely affect our business, financial condition and results of operations.

Previous wording

•If we or our third-party service providers experience a security breach or unauthorized parties otherwise obtain access to our customers’ data, our data or our platform, our solution may be perceived as not being secure, our reputation may be harmed, demand for our platform and products may be reduced and we may incur significant liabilities.

Current wording

•If we or our third-party service providers or vendors experience a security breach or unauthorized parties otherwise obtain access to our customers’ data, our data or our platform, our solution may be perceived as not being secure, our reputation may be harmed, demand for our platform and products may be reduced and we may incur significant liabilities.

Previous wording

The global economy, including credit and financial markets, has experienced extreme volatility and disruptions, including severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, increases in inflation rates, higher interest rates and uncertainty about economic stability. These unfavorable conditions have been, and may continue to be, exacerbated in the United States and abroad by global and domestic socioeconomic conditions, including the failure of high-profile banking and other financial institutions, the Federal Reserve’s attempts to combat inflation through interest rate increases, unrest in international trade relations, domestic and foreign political turmoil, natural catastrophes, pandemics related to highly infectious diseases, warfare and terrorist attacks on the United States, Europe, the Asia Pacific region or elsewhere, and international military conflicts and the related political and economic responses. Continued volatility and disruptions may have adverse consequences on us or the third parties on whom we rely. If the financial, equity or credit markets further deteriorate, including as a result of the measures taken to combat inflation, volatility in the banking and financial services sector, political unrest or war, it may make any necessary debt or equity financing more difficult to obtain in a timely manner or on favorable terms, more costly or more dilutive. Increased inflation rates can adversely affect us by increasing our costs, including labor and employee benefits costs. In addition, higher inflation and macroeconomic turmoil and uncertainty could also adversely affect our customers, which could reduce demand for our products and services. For instance, we were founded in 2011, but our business and revenue have grown rapidly over the last several years. As a result of our limited history operating at our current scale, our ability to accurately forecast our future results of operations is limited and subject to a number of uncertainties, including our ability to plan for and model future growth, particularly in a volatile economic environment. Recent increases in inflation, economic volatility and related increases in interest rates have affected customer spending behavior. Significant continued increases in inflation, continued economic volatility and related increases in interest rates could have a material adverse effect on our business, financial condition and results of operations. To the extent there is a sustained general economic downturn and our customer engagement platform is perceived by customers and potential customers as too costly, or too difficult to deploy or migrate to, our revenue may be disproportionately affected by delays or reductions in general customer engagement technology spending. This perception has previously, and may continue to, result in an extension of our sales cycle with potential customers, thu…

Excerpt shortened here; the source contains the full paragraph.

Current wording

The global economy, including credit and financial markets, has experienced extreme volatility and disruptions, including severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, increases in inflation rates, higher interest rates and uncertainty about economic stability. These unfavorable conditions have been, and may continue to be, exacerbated in the United States and abroad by global and domestic socioeconomic conditions, including the failure of high-profile banking and other financial institutions, the Federal Reserve’s attempts to combat inflation through interest rate increases, unrest in international trade relations, domestic and foreign political turmoil, natural catastrophes, pandemics related to highly infectious diseases, warfare and terrorist attacks on the United States, Europe, the Asia Pacific region or elsewhere, and international military conflicts and the related political and economic responses. Continued volatility and disruptions may have adverse consequences on us or the third parties on whom we rely. If the financial, equity or credit markets further deteriorate, including as a result of the measures taken to combat inflation, volatility in the banking and financial services sector, political unrest or war, it may make any necessary debt or equity financing more difficult to obtain in a timely manner or on favorable terms, more costly or more dilutive. Increased inflation rates can adversely affect us by increasing our costs, including labor and employee benefits costs. In addition, higher inflation and macroeconomic turmoil and uncertainty could also adversely affect our customers, which could reduce demand for our products and services. For instance, we were founded in 2011, but our business and revenue have grown rapidly over the last several years. As a result of our limited history operating at our current scale, our ability to accurately forecast our future results of operations is limited and subject to a number of uncertainties, including our ability to plan for and model future growth, particularly in a volatile economic environment. Recent increases in inflation, economic volatility and related increases in interest rates have affected customer spending behavior. Significant continued increases in inflation, continued economic volatility and related increases in interest rates could have a material adverse effect on our business, financial condition and results of operations. To the extent there is a sustained general economic downturn and our customer engagement platform is perceived by customers and potential customers as too costly, or too difficult to deploy or migrate to, our revenue may be disproportionately affected by delays or reductions in general customer engagement technology spending. This perception has previously, and may continue to, result in an extension of our sales cycle with potential customers, thu…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Our revenue was $281.0 million and $216.9 million for the six months ended July 31, 2024 and 2023, respectively. You should not rely on our historical revenue growth as an indication of our future performance. Even if our revenue continues to increase, we expect that our annual revenue growth rate will decline in the future as a result of a variety of factors, including the maturation of our business. Overall growth of our revenue depends on several factors, including our ability to:

Current wording

Our revenue was $433.0 million and $340.8 million for the nine months ended October 31, 2024 and 2023, respectively. You should not rely on our historical revenue growth as an indication of our future performance. Even if our revenue continues to increase, we expect that our annual revenue growth rate will decline in the future as a result of a variety of factors, including the maturation of our business. Overall growth of our revenue depends on several factors, including our ability to:

Previous wording

We have experienced net losses in each of our last several fiscal years. We generated a net loss of $58.9 million and $70.9 million for the six months ended July 31, 2024 and 2023, respectively. As of July 31, 2024, we had an accumulated deficit of $541.7 million. While we have experienced significant revenue growth in recent periods, we cannot guarantee whether or when we will achieve or maintain profitability in the future. We also expect our costs and expenses to increase in future periods, which could negatively affect our future results of operations if our revenue does not continue to increase. In particular, we intend to continue to expend substantial financial and other resources on:

Current wording

We have experienced net losses in each of our last several fiscal years. We generated a net loss of $87.0 million and $101.9 million for the nine months ended October 31, 2024 and 2023, respectively. As of October 31, 2024, we had an accumulated deficit of $569.6 million. While we have experienced significant revenue growth in recent periods, we cannot guarantee whether or when we will achieve or maintain profitability in the future. We also expect our costs and expenses to increase in future periods, which could negatively affect our future results of operations if our revenue does not continue to increase. In particular, we intend to continue to expend substantial financial and other resources on:

Previous wording

Our ability to attract new customers and increase revenue from existing customers depends in large part on our ability to enhance and improve our platform and its products and functionality, increase adoption and usage of our platform, and introduce new products and functionality. The market in which we compete is subject to rapid technological change, evolving industry standards and changing regulations, as well as changing customer and consumer needs, requirements and preferences, including changes in the use of channels through which consumers desire to communicate with brands.Additionally, we cannot predict what, if any, actions regulators will take regarding the use and sale of customer engagement software or in our key markets in the future. Any regulatory restrictions on the use of customer engagement tools from domestic or foreign regulators could have the effect of reducing demand for our platform in this and other markets. Further, recent advances in, and the public availability of, generative artificial intelligence may be a significant disruptor in consumer engagement and marketing strategies. The success of our business will depend, in part, on our ability to adapt and respond effectively to these changes on a timely basis. If we are unable to enhance our platform offerings to keep pace with rapid technological and regulatory change, or if new technologies emerge that are able to deliver competitive products at lower prices, more efficiently, more conveniently or more securely than our platform, our business, financial condition and results of operations may be adversely affected. Further as we develop, acquire, and introduce new services and technologies, including those that may incorporate artificial intelligence and machine learning, we may be subject to new or heightened legal, ethical, and other challenges.

Current wording

Our ability to attract new customers and increase revenue from existing customers depends in large part on our ability to enhance and improve our platform and its products and functionality, increase adoption and usage of our platform, and introduce new products and functionality. The market in which we compete is subject to rapid technological change, evolving industry standards and changing regulations, as well as changing customer and consumer needs, requirements and preferences, including changes in the use of channels through which consumers desire to communicate with brands. Additionally, we cannot predict what, if any, actions regulators will take regarding the use and sale of customer engagement software or in our key markets in the future. Any regulatory restrictions on the use of customer engagement tools from domestic or foreign regulators could reduce demand for our platform in the United States and foreign markets. Further, recent advances in, and the public availability of, generative artificial intelligence may be a significant disruptor in consumer engagement and marketing strategies. The success of our business will depend, in part, on our ability to adapt and respond effectively to these changes on a timely basis. If we are unable to enhance our platform offerings to keep pace with rapid technological and regulatory change, or if new technologies emerge that are able to deliver competitive products at lower prices, more efficiently, more conveniently or more securely than our platform, our business, financial condition and results of operations may be adversely affected. Further as we develop, acquire, and introduce new services and technologies, including those that may incorporate artificial intelligence and machine learning, we may be subject to new or heightened legal, ethical, and other challenges.

Previous wording

Our ability to expand our customer base and achieve broader market adoption of our platform will depend on the productivity of our sales and marketing operations. We plan to continue expanding our sales team and strategic partners over the long term, both domestically and internationally; however, there is no assurance that we will be successful in attracting and retaining talented sales personnel or strategic partners or that any new sales personnel will be able to achieve productivity in a reasonable period of time or at all. We also plan to dedicate significant resources to sales and marketing programs to drive new customer acquisition, as well as engage with customers to promote upsell and cross-sell opportunities. For example, to encourage awareness, usage, familiarity and adoption of our platform and products, we plan to offer free trials of our platform. This strategy may not be successful in leading customers to purchase long term subscriptions of our product, as usage of our free tier may not cause users or others within their organization to purchase and deploy our platform. We also engage with industry analysts, consulting firms, marketing service providers, data and technology partners, marketing agencies and other solution partners, business and trade press, and other industry experts who exert considerable influence in our market to promote our platform and our brand. Our business, financial condition and results of operations may be harmed if our sales and marketing efforts do not generate a corresponding increase in revenue. In addition, we may not achieve anticipated revenue growth from expanding our sales team if we are unable to hire, develop and retain talented sales personnel, if our new sales personnel are unable to achieve desired productivity levels in a reasonable period of time, or if our sales and marketing programs are not effective. If the cost of marketing our platform and products increases or competition reduces the effectiveness of our marketing efforts, our business, financial condition and results of operations may be adversely affected.

Current wording

Our ability to expand our customer base and achieve broader market adoption of our platform will depend on the productivity of our sales and marketing operations. We plan to continue expanding our sales team and strategic partners over the long term, both domestically and internationally; however, there is no assurance that we will be successful in attracting and retaining talented sales personnel or strategic partners or that any new sales personnel will be able to achieve productivity in a reasonable period of time or at all. We also plan to dedicate significant resources to sales and marketing programs to drive new customer acquisition, as well as engage with customers to promote upsell and cross-sell opportunities. For example, to encourage awareness, usage, familiarity and adoption of our platform and products, we offer free trials of our platform. This strategy may not be successful in leading customers to purchase long term subscriptions of our product, as usage of our free tier may not cause users or others within their organization to purchase and deploy our platform. We also engage with industry analysts, consulting firms, marketing service providers, data and technology partners, marketing agencies and other solution partners, business and trade press, and other industry experts who exert considerable influence in our market to promote our platform and our brand. Our business, financial condition and results of operations may be harmed if our sales and marketing efforts do not generate a corresponding increase in revenue. In addition, we may not achieve anticipated revenue growth from expanding our sales team if we are unable to hire, develop and retain talented sales personnel, if our new sales personnel are unable to achieve desired productivity levels in a reasonable period of time, or if our sales and marketing programs are not effective. If the cost of marketing our platform and products increases or competition reduces the effectiveness of our marketing efforts, our business, financial condition and results of operations may be adversely affected.

Previous wording

•incidents or interruptions with third-party service providers, including Apple or Google services, that affect the ability of our customers to use our platform;

Current wording

•incidents or interruptions with third-party service providers or vendors, including Apple or Google services, that affect the ability of our customers to use our platform;

Previous wording

To execute our growth plan, we must attract and retain highly qualified personnel. Competition for these personnel is intense, especially for experienced software engineers and senior sales executives. We expect to continue to experience difficulty in hiring and retaining employees with appropriate qualifications. In addition, as a result of our hybrid work model, we have a large, remote workforce, which adds to the complexity and costs of our business operations. Our hybrid work model may impact our ability to identify, hire and train new personnel. Also, as a public company, potential candidates may not perceive our compensation package, including our equity awards, as favorably as employees hired prior to our initial public offering or as compared to our private competitors. In addition, our recruiting personnel, methodology and approach may need to be altered to address a changing candidate pool and profile. We may not be able to identify or implement such changes in a timely manner. Also, it is not uncommon for companies to see significant turnover in their workforce following an initial public offering, a trend which may only be further amplified by the competitive market for highly-skilled employees. If we fail to attract new personnel, experience significant turnover or the loss of key personnel or fail to retain and motivate our current personnel, it could adversely affect our business and future growth prospects. Further, many of the companies with which we compete for experienced personnel have greater resources than we have. If we hire employees from competitors or other companies, their former employers may attempt to assert that these employees or we have breached legal obligations, resulting in a diversion of our time and resources.

Current wording

To execute our growth plan, we must attract and retain highly qualified personnel. Competition for these personnel is intense, especially for experienced software engineers and senior sales executives. We expect to continue to experience difficulty in hiring and retaining employees with appropriate qualifications. In addition, as a result of our hybrid work model, we have a large, remote workforce, which adds to the complexity and costs of our business operations. Our hybrid work model may impact our ability to identify, hire and train new personnel. Also, as a public company, potential candidates may not perceive our compensation package, including our equity awards, as favorably as employees hired prior to our initial public offering or as compared to our private competitors. In addition, our recruiting personnel, methodology and approach may need to be altered to address a changing candidate pool and profile. We may not be able to identify or implement such changes in a timely manner. If we fail to attract new personnel, experience significant turnover or the loss of key personnel or fail to retain and motivate our current personnel, it could adversely affect our business and future growth prospects. Further, many of the companies with which we compete for experienced personnel have greater resources than we have. If we hire employees from competitors or other companies, their former employers may attempt to assert that these employees or we have breached legal obligations, resulting in a diversion of our time and resources.

Previous wording

We rely upon third-party providers of cloud-based infrastructure, including Amazon Web Services, to host our products. Any disruption in the operations of these third-party providers or limitations on capacity or interference with our use could adversely affect our business, financial condition and results of operations.

Current wording

We rely upon third-party providers of cloud-based infrastructure, including Amazon Web Services and Rackspace, to host our products. Any disruption in the operations of these third-party providers or limitations on capacity or interference with our use could adversely affect our business, financial condition and results of operations.

Previous wording

We outsource substantially all the infrastructure relating to our cloud-based platform to third-party hosting providers. Our customers need to be able to access our platform at any time, without interruption or degradation of performance, and we provide many of them with service-level commitments with respect to uptime and, occasionally, throughput. Our products depend on protecting the virtual cloud infrastructure hosted by third-party hosting providers by maintaining its configuration, architecture, features and interconnection specifications, as well as the information stored in these virtual data centers, which is transmitted by third-party internet service providers. Any limitation on the capacity or availability of our third-party hosting providers could impede our ability to onboard new customers or expand the usage of our existing customers, which could adversely affect our business, financial condition and results of operations. Currently, we rely on cloud computing infrastructure, particularly from Amazon Web Services, or AWS, to host our platform and support our operations and many of the internal products we use to operate our business. We do not have control over the operations of the facilities of AWS or other cloud providers. Each provider’s respective facilities may be vulnerable to damage or interruption from earthquakes, hurricanes, floods, fires, cybersecurity attacks, security breaches, terrorist attacks, power losses, telecommunications failures and other events beyond our or their control. In the event that AWS’s or any other third-party provider’s systems or service abilities are hindered by any of the events discussed above, our ability to operate our platform may be impaired, our customers may be impacted, we may be subject to claims for refunds or terminations under our contracts, and our reputation and brand may be harmed. A decision to close these facilities without adequate notice, or other unanticipated problems, could result in lengthy interruptions to our platform. All of the aforementioned risks may be exacerbated if our or our partners’ business continuity and disaster recovery plans prove to be inadequate in such a scenario.

Current wording

We outsource substantially all the infrastructure relating to our cloud-based platform to third-party hosting providers. Our customers need to be able to access our platform at any time, without interruption or degradation of performance, and we provide many of them with service-level commitments with respect to uptime and, occasionally, throughput. Our products depend on protecting the virtual cloud infrastructure hosted by third-party hosting providers by maintaining its configuration, architecture, features and interconnection specifications, as well as the information stored in these virtual data centers, which is transmitted by third-party internet service providers. Any limitation on the capacity or availability of our third-party hosting providers could impede our ability to onboard new customers or expand the usage of our existing customers, which could adversely affect our business, financial condition and results of operations. Currently, we rely on cloud computing infrastructure, particularly from Amazon Web Services, or AWS, to host our platform and support our operations and many of the internal products we use to operate our business. We also host our end user profiles on Rackspace. We do not have control over the operations of the facilities of AWS, Rackspace or other cloud providers. Each provider’s respective facilities may be vulnerable to damage or interruption from earthquakes, hurricanes, floods, fires, cybersecurity attacks, security breaches, terrorist attacks, power losses, service outages, software or hardware failures, telecommunications failures and other events beyond our or their control. In the event that AWS’s, Rackspace’s or any other third-party provider’s systems or service abilities are hindered by any of the events discussed above, our ability to operate our platform may be impaired, our customers may be impacted, we may be subject to claims for refunds or terminations under our contracts, and our reputation and brand may be harmed. A decision to close these facilities without adequate notice, or other unanticipated problems, could result in lengthy interruptions to our platform. All of the aforementioned risks may be exacerbated if our or our partners’ business continuity and disaster recovery plans prove to be inadequate in such a scenario.

Previous wording

Additionally, AWS or other cloud providers may experience threats, attacks or security breaches from computer malware, ransomware, viruses, social engineering (including phishing attacks), denial-of-service or other attacks, employee error, theft or misuse and general hacking, including from state-sponsored or criminal hacking groups, which have become more prevalent in our industry. Any of these security incidents could result in unauthorized access or damage to, or the disablement, encryption, use or misuse, disclosure, modification, destruction or loss of our data or our partners’ data, including personal data, or disrupt our ability to provide our platform or services. Our platform’s continuing and uninterrupted performance is critical to our success. Users may become dissatisfied by any system failure that interrupts our ability to provide our platform to them and could make claims for refunds or terminations under our contracts. We may not be able to easily switch our AWS operations to another cloud or other data center provider if there are disruptions or interference with our use of any third-party provider’s services, and even if we do switch our operations, the process can require significant time and expense and other cloud and data center providers are subject to the same risks. Sustained or repeated system failures would reduce the attractiveness of our platform to our partners, thereby reducing revenue. Moreover, negative publicity arising from these types of disruptions could damage our reputation and may adversely impact use of our platform. We may not carry sufficient business interruption insurance or have sufficient contractual remedies to compensate us for losses that may occur as a result of any events that cause interruptions in our service.

Current wording

Additionally, AWS, Rackspace or other cloud providers may experience threats, attacks or security breaches from computer malware, ransomware, viruses, social engineering (including phishing attacks), denial-of-service or other attacks, employee error, theft or misuse and general hacking, including from state-sponsored or criminal hacking groups, which have become more prevalent in our industry. Any of these security incidents could result in unauthorized access or damage to, or the disablement, encryption, use or misuse, disclosure, modification, destruction or loss of our data or our customers’ data, including personal data, or disrupt our ability to provide our platform or services. Our platform’s continuing and uninterrupted performance is critical to our success. Customers may become dissatisfied by any system failure that interrupts our ability to provide our platform to them and could make claims for refunds or terminations under our contracts. We may not be able to easily switch our AWS or Rackspace operations to another cloud or other data center provider if there are disruptions or interference with our use of any third-party provider’s services, and even if we do switch our operations, the process can require significant time and expense and other cloud and data center providers are subject to the same risks. Sustained or repeated system failures would reduce the attractiveness of our platform to our customers, thereby reducing revenue. Moreover, negative publicity arising from these types of disruptions could damage our reputation and may adversely impact use of our platform. We may not carry sufficient business interruption insurance or have sufficient contractual remedies to compensate us for losses that may occur as a result of any events that cause interruptions in our service.

Previous wording

In addition, many jurisdictions have enacted data localization laws and cross-border personal data transfer laws. These laws may make it more difficult for us to transfer personal data across jurisdictions, which could impede our business. For example, legal developments in the EEA have created complexity and uncertainty regarding processing and transfers of personal data from the EEA to the United States and other countries outside the EEA. Similar complexities and uncertainties also apply to transfers from the U.K. to third countries. While we have taken steps to mitigate the impact on us, such as implementing the European Commission’s updated standard contractual clauses, or the SCCs, and the U.K.’s international Data Transfer Agreement (or the U.K.’s international data transfer addendum that can be used with the SCCs), the validity of relying on the SCCs as a transfer mechanism has been, and is expected to continue to be, the subject of further litigation in the EU. For example, on May 22, 2023, Ireland’s Data Protection Commission fined Meta Platforms Ireland Ltd. 1.2 billion euros for violating the EU GDPR’s data transfer requirements by unlawfully transferring the personal data of Facebook users from the EEA to the United States, and ordered Meta to suspend any future transfers of such personal data to the United States within five months and to stop further processing and storing of such personal data in the U.S. within six months, finding that Meta did not have adequate supplementary measures in place in addition to the SCCs. This decision is subject to appeal and applies solely to Meta, however it is possible that, as a result of such decision, where Braze relies on the SCCs for international transfers, that the supplementary measures we have implemented in addition to the SCCs will not be deemed adequate. Since this Meta decision, the EU, U.K. and Switzerland have agreed to a ‘Data Privacy Framework’ for transfers of personal data from Europe to the U.S. For the time being, this provides an additional valid mechanism for the international transfer of personal data. Privacy activists are expected to challenge the adequacy of this transfer mechanism, and therefore we cannot guarantee that such mechanism will remain available to us indefinitely.

Current wording

In addition, many jurisdictions have enacted data localization laws and cross-border personal data transfer laws. These laws may make it more difficult for us to transfer personal data across jurisdictions, which could impede our business. For example, legal developments in the EEA have created complexity and uncertainty regarding processing and transfers of personal data from the EEA to the United States and other countries outside the EEA. Similar complexities and uncertainties also apply to transfers from the U.K. to third countries. For example, the EU, U.K. and Switzerland have agreed to a ‘Data Privacy Framework’ for transfers of personal data from Europe to the U.S which we rely on. For the time being, this provides a valid mechanism for the international transfer of personal data. Privacy activists have challenged, and are expected to continue to challenge, the adequacy of this transfer mechanism, and therefore we cannot guarantee that such mechanism will remain available to us indefinitely. While we have taken additional steps to mitigate the impact on us, such as implementing the European Commission’s updated standard contractual clauses, or the SCCs, and the U.K.’s international Data Transfer Agreement (or the U.K.’s international data transfer addendum that can be used with the SCCs), the validity of relying on the SCCs as a transfer mechanism has been, and is expected to continue to be, the subject of further litigation in the EU. For example, on May 22, 2023, Ireland’s Data Protection Commission fined Meta Platforms Ireland Ltd. 1.2 billion euros for violating the EU GDPR’s data transfer requirements by unlawfully transferring the personal data of Facebook users from the EEA to the United States, and ordered Meta to suspend any future transfers of such personal data to the United States within five months and to stop further processing and storing of such personal data in the U.S. within six months, finding that Meta did not have adequate supplementary measures in place in addition to the SCCs. While Meta has appealed this decision, and it applies solely to Meta, it is possible that, as a result of such decision, if Braze is forced to rely on the SCCs for international transfers, that the supplementary measures we have implemented in addition to the SCCs will not be deemed adequate.

Previous wording

We enter into agreements with our customers regarding our collection, use, disclosure and other processing of personal data in relation to the services we provide to them. Although we endeavor to comply with such agreements, we may at times fail to do so or may be perceived to have failed to do so, including due to the errors or omissions of our personnel and third-party service providers. Such failures or perceived failures can subject us to customer lawsuits, termination of customer agreements and governmental enforcement actions. Even if we eventually prevail in any such dispute, resolving them could be expensive and time-consuming to defend and could result in adverse publicity and reputational harm that could adversely affect our business, financial condition and results of operations.

Current wording

We enter into agreements with our customers regarding our collection, use, storage, transfer, sharing and other processing of personal data in relation to the services we provide to them. We also publish public privacy policies and make other public statements about our privacy, data security and data protection practices. Although we endeavor to comply with such agreements, policies and public statements, we may at times fail to do so or may be perceived to have failed to do so, including due to the errors or omissions of our personnel and third-party service providers and vendors. Such failures or perceived failures can subject us to customer lawsuits, termination of customer agreements and governmental enforcement actions. Even if we eventually prevail in any such dispute, resolving them could be expensive and time-consuming to defend and could result in adverse publicity and reputational harm that could adversely affect our business, financial condition and results of operations.

Previous wording

If we or our third-party service providers experience a security breach or unauthorized parties otherwise obtain access to our customers’ data, our data or our platform, our solution may be perceived as not being secure, our reputation may be harmed, demand for our platform and products may be reduced and we may incur significant liabilities.

Current wording

If we or our third-party service providers or vendors experience a security breach or unauthorized third parties otherwise obtain access to our customers’ data, our data or our platform, our solution may be perceived as not being secure, our reputation may be harmed, demand for our platform and products may be reduced and we may incur significant liabilities.

Previous wording

Operating our business and platform involves the collection, storage, transmission and other processing of sensitive, regulated, proprietary and confidential information, including personal data of our customers, their users and our personnel and our customers’ proprietary and confidential information. We may rely upon third parties (such as service providers) for our data storage- and data processing–related activities. We may share or receive sensitive data with or from third parties. Cyberattacks, malicious internet-based activity, and online and offline fraud are prevalent and continue to increase in frequency and severity. These threats are becoming increasingly difficult to detect, and these threats come from a variety of sources. In addition to traditional computer “hackers,” threat actors, personnel (such as through theft or misuse), sophisticated nation-states, and nation-state-supported actors now engage in cyberattacks, including, without limitation, nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. We may be subject to a variety of evolving threats, including, but not limited to, social-engineering attacks (including through phishing, vishing and hybrid phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks (such as credential stuffing), personnel misconduct or error by us or third-party service providers, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, earthquakes, fires, floods, and other similar threats. Additionally, our customers have been and may be in the future, targeted by similar cyberthreats, and bad actors have accessed, and may in the future, access our platform and services using such customer’s credentials. Accordingly, the failure of our customers to use appropriate cybersecurity technology and practices can result in unauthorized parties obtaining access to our platform and customer data. Ransomware attacks, including those perpetrated by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Threat actors could also use artificial intelligence technology for malicious purposes, increasing the frequency and complexity of their attacks, e.g., phishing attacks, fraud, social engineering, and other possible malicious uses, such as with writing malware. Code, including code generated by generative …

Excerpt shortened here; the source contains the full paragraph.

Current wording

Operating our business and platform involves the collection, storage, transmission and other processing of sensitive, regulated, proprietary and confidential information, including personal data of our customers, their users and our personnel and our customers’ proprietary and confidential information. We may rely upon third parties (such as service providers or vendors) for our data storage- and data processing–related activities. We may share or receive sensitive , regulated, proprietary and confidential information, including personal data, with or from third parties. Cyberattacks, malicious internet-based activity, and online and offline fraud are prevalent and continue to increase in frequency and severity. These threats are becoming increasingly difficult to detect, and these threats come from a variety of sources. In addition to traditional computer “hackers,” threat actors, personnel (such as through theft or misuse), sophisticated nation-states, and nation-state-supported actors now engage in cyberattacks, and nation-state actors may do so for geopolitical reasons and in conjunction with military conflicts and defense activities. We may be subject to a variety of evolving threats, including, but not limited to, social-engineering attacks (including through phishing, vishing and hybrid phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks (such as credential stuffing), personnel misconduct or error by us or third-party service providers or vendors, ransomware attacks, supply-chain attacks, service outages, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, earthquakes, fires, floods, and other similar threats. Additionally, our customers have been and may be in the future, targeted by similar cybersecurity threats, and bad actors have accessed, and may in the future, access our platform and services using such customer’s credentials. Accordingly, the failure of our customers to use appropriate cybersecurity technology and practices can result in unauthorized parties obtaining access to our platform and customer data. Ransomware attacks, including those perpetrated by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Threat actors could also use artificial intelligence technology for malicious purposes, increasing the frequency and complexity of their attacks, e.g., phishing attacks, fraud, social engineering, and …

Excerpt shortened here; the source contains the full paragraph.

Previous wording

We may expend significant resources or modify our business activities in an effort to protect against security incidents. Certain data privacy and security obligations require us to implement and maintain specific security measures, industry-standard or reasonable security measures to protect our information technology systems and data. While we have taken steps designed to protect the proprietary, regulated, sensitive, confidential and personal data in our control, our security measures or those of the third parties on which we rely may not be effective against current or future security risks and threats. Moreover, we or our third-party service providers may be more vulnerable to such attacks in remote work environments, which have increased in recent years and will likely continue into the foreseeable future.

Current wording

We may expend significant resources or modify our business activities in an effort to protect against security incidents. Certain data privacy and security obligations require us to implement and maintain specific security measures, industry-standard or reasonable security measures to protect our information technology systems and data. While we have taken steps designed to protect the proprietary, regulated, sensitive, confidential and personal data in our control, our security measures or those of the third parties on which we rely may not be effective against current or future security risks and threats. Moreover, we or our third-party service providers or vendors may be more vulnerable to such attacks in remote work environments, which have increased in recent years and will likely continue into the foreseeable future.

Previous wording

If we, our customers or our third-party service providers suffer, or are perceived to have suffered, a security breach or other security incident, we may experience adverse consequences. Applicable data privacy and security obligations may require us to notify relevant stakeholders or regulators of security incidents. We may also be required to publicly disclose certain cybersecurity incidents pursuant to the rules and regulations adopted by the SEC. Such disclosures are costly, and the disclosures or the failure to comply with such requirements could lead to adverse consequences. If we, our customers or a third party upon whom we rely experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences. These consequences may include, but are not limited to, government enforcement actions (for example, investigations, fines, penalties, audits, and inspections), additional reporting requirements or oversight, restrictions on processing data (including personal data), litigation (including class action claims), indemnification obligations, negative publicity, reputational harm, monetary fund diversions, interruptions in our operations (including availability of data to us and our customers), financial loss and other similar harms. Security incidents and attendant consequences may cause customers to stop using our platform, deter new customers for using our platform and negatively impact our ability to grow and operate our business.

Current wording

If we, our customers or our third-party service providers or vendors suffer, or are perceived to have suffered, a security breach or other security incident, we may experience adverse consequences. Applicable data privacy and security obligations may require us to notify relevant stakeholders or regulators of security incidents. We may also be required to publicly disclose certain cybersecurity incidents pursuant to the rules and regulations adopted by the SEC. The repercussions of such disclosures can be costly, and the disclosures or the failure to comply with such requirements could lead to adverse consequences. If we, our customers or a third party upon whom we rely experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences. These consequences may include, but are not limited to, government enforcement actions (for example, investigations, fines, penalties, audits, and inspections), additional reporting requirements or oversight, restrictions on processing data (including personal data), litigation (including class action claims), indemnification obligations, negative publicity, reputational harm, monetary fund diversions, interruptions in our operations (including availability of data to us and our customers), financial loss and other similar harms. Security incidents and attendant consequences may cause customers to stop using our platform, deter new customers for using our platform and negatively impact our ability to grow and operate our business.

Previous wording

As of July 31, 2024, we owned 25 granted patents related to our platform and its technology and had 5 patent applications pending for examination in the United States and no non-U.S. patents or patent applications pending. Our patent applications may not result in the issuance of a patent, or the examination process may require us to narrow our claims. Any patents that issue from any patent applications may not give us the protection that we seek or may be challenged, invalidated or circumvented. Any patents that may issue in the future from our pending or future patent applications may not provide sufficiently broad protection and may not be valid and enforceable in actions against alleged infringers or provide us with a competitive advantage. Any patents we have obtained or may obtain in the future may be found to be invalid or unenforceable in light of recent and future changes in the law, or because of technology developed prior to the inventions we have sought to patent or because of defects in our patent prosecution process. The United States Patent and Trademark Office, or the USPTO, and various foreign governmental patent agencies also require compliance with a number of procedural, documentary, fee payment and other similar provisions during the patent application process and after a patent has issued. There are situations in which noncompliance can result in abandonment or lapse of the patent or patent application, resulting in partial or complete loss of patent rights in the relevant jurisdiction.

Current wording

As of October 31, 2024, we owned 26 granted patents related to our platform and its technology and had four patent applications pending for examination in the United States and no non-U.S. patents or patent applications pending. Our patent applications may not result in the issuance of a patent, or the examination process may require us to narrow our claims. Any patents that issue from any patent applications may not give us the protection that we seek or may be challenged, invalidated or circumvented. Any patents that may issue in the future from our pending or future patent applications may not provide sufficiently broad protection and may not be valid and enforceable in actions against alleged infringers or provide us with a competitive advantage. Any patents we have obtained or may obtain in the future may be found to be invalid or unenforceable in light of recent and future changes in the law, or because of technology developed prior to the inventions we have sought to patent or because of defects in our patent prosecution process. The United States Patent and Trademark Office, or the USPTO, and various foreign governmental patent agencies also require compliance with a number of procedural, documentary, fee payment and other similar provisions during the patent application process and after a patent has issued. There are situations in which noncompliance can result in abandonment or lapse of the patent or patent application, resulting in partial or complete loss of patent rights in the relevant jurisdiction.

Previous wording

We have registered the “Braze” name, logo, and/or other marks as trademarks in Australia, Canada, EU, Japan, New Zealand, Singapore, Tonga, United Kingdom, and the United States. However, any pending or future trademark applications may not be approved, and any registered trademarks may not be enforceable or provide adequate protection of our proprietary rights. The USPTO and various foreign trademark offices also require compliance with a number of procedural, documentary, fee payment and other similar provisions during the trademark registration process and after a registration has issued. There are situations in which noncompliance can result in abandonment or cancellation of a trademark filing, resulting in partial or complete loss of trademark rights in the relevant jurisdiction. If this occurs, our competitors might be able to enter the market under identical or similar brands or we may be forced to abandon marks that we currently rely on.

Current wording

We have registered the “Braze” name, logo, and/or other marks as trademarks in Australia, Canada, the EU, Japan, New Zealand, Singapore, Tonga, the United Kingdom, and the United States. However, any pending or future trademark applications may not be approved, and any registered trademarks may not be enforceable or provide adequate protection of our proprietary rights. The USPTO and various foreign trademark offices also require compliance with a number of procedural, documentary, fee payment and other similar provisions during the trademark registration process and after a registration has issued. There are situations in which noncompliance can result in abandonment or cancellation of a trademark filing, resulting in partial or complete loss of trademark rights in the relevant jurisdiction. If this occurs, our competitors might be able to enter the market under identical or similar brands or we may be forced to abandon marks that we currently rely on.

Previous wording

In addition, we are subject to the risks of new or enhanced governmental or regulatory scrutiny, litigation, or other legal liability, ethical concerns, negative consumer perceptions as to automation and AI and machine learning technologies, any of which could adversely affect our business, reputation, or financial results. The technologies underlying AI and machine learning and their uses are subject to a variety of laws and regulations related to online services, intermediary liability, intellectual property rights, privacy, data security and data protection, consumer protection, competition and equal opportunity laws, and are expected to be subject to increased regulation and new laws or new applications of existing laws and regulations. AI and machine learning technologies are the subject of ongoing review by various federal, state and foreign governments and regulators, which are applying, or are considering applying, their platform moderation, privacy, data security and data protection laws and regulations to such technologies or are considering general legal frameworks for the appropriate use of AI and machine learning. As the legal, regulatory, and policy environments around AI and machine learning evolve, we may become subject to new legal and regulatory obligations in connection with our use of AI and machine learning technology, which could require us to make significant changes to our policies and practices, necessitating expenditure of significant time, expense, and other resources. We may not be able to anticipate how to respond to rapidly evolving legal frameworks, and we may have to expend resources to adjust our offerings in certain jurisdictions if the legal frameworks on AI and machine learning products are not consistent across jurisdictions. Accordingly, it is not possible to predict all of the risks related to the use of AI and machine learning solutions that we may face, and changes in laws, rules, directives, and regulations governing the use of AI and machine learning solutions may adversely affect our ability to use or sell these solutions or subject us to legal liability.

Current wording

In addition, we are subject to the risks of new or enhanced governmental or regulatory scrutiny, litigation, or other legal liability, ethical concerns, negative consumer perceptions as to automation and AI and machine learning technologies, any of which could adversely affect our business, reputation, or financial results. The technologies underlying AI and machine learning and their uses are subject to a variety of laws and regulations related to online services, intermediary liability, intellectual property rights, privacy, data security and data protection, consumer protection, competition and equal opportunity laws, and are expected to be subject to increased regulation and new laws or new applications of existing laws and regulations. AI and machine learning technologies are the subject of ongoing review by various federal, state and foreign governments and regulators, which are applying, or are considering applying, their platform moderation, privacy, data security and data protection laws and regulations to such technologies. Additionally, various federal, state and foreign governments and regulators have implemented, or are considering implementing, general legal and regulatory frameworks for the appropriate use of AI and machine learning, such as the EU AI Act which entered into force on August 1, 2024. As the legal, regulatory, and policy environments around AI and machine learning evolve, we may become subject to new legal and regulatory obligations in connection with our use of AI and machine learning technology, which could require us to make significant changes to our policies and practices, necessitating expenditure of significant time, expense, and other resources. We may not be able to anticipate how to respond to rapidly evolving legal and regulatory frameworks, and we may have to expend resources to adjust our offerings in certain jurisdictions if the legal and regulatory frameworks on AI and machine learning products are not consistent across jurisdictions. Accordingly, it is not possible to predict all of the risks related to the use of AI and machine learning solutions that we may face, and changes in laws, rules, directives, and regulations governing the use of AI and machine learning solutions may adversely affect our ability to use or sell these solutions or subject us to legal liability.

Previous wording

In response to the COVID-19 pandemic, governments previously instituted shelter-in-place orders, social distancing requirements, travel restrictions and similar measures to slow infection rates. These restrictions prompted shifts from physical commerce to e-commerce, from in-room dining to take out and delivery, from gyms to at home health and fitness and from the theaters to in-home media streaming services. Despite our penetration in these industries that benefited from increased demand during the COVID-19 pandemic, this trend may not continue over the long term. Some of our customers may experience decreases or decreased growth rates in transactions, which would negatively affect our business, financial condition and results of operations. We may also experience decreases or decreased growth rates in sales of new subscriptions to some of our customers, which would adversely affect our business, financial condition and results of operations.

Current wording

In response to the COVID-19 pandemic, governments previously instituted shelter-in-place orders, social distancing requirements, travel restrictions and similar measures to slow infection rates. These restrictions prompted shifts from physical commerce to e-commerce, from in-room dining to take out and delivery, from gyms to at home health and fitness and from the theaters to in-home media streaming services. Despite our penetration in these industries that benefited from increased demand during the COVID-19 pandemic, this trend may not continue over the long term. Some of our customers have experienced, and may continue to experience, decreases or decreased growth rates in transactions, which would negatively affect our business, financial condition and results of operations. We may also continue to experience decreases or decreased growth rates in sales of new subscriptions to some of our customers, which would adversely affect our business, financial condition and results of operations.

Previous wording

Our Class B common stock has ten votes per share and our Class A common stock, which is the stock listed on the Nasdaq Global Select Market, has one vote per share. As a result, as of July 31, 2024, holders of our Class B common stock collectively beneficially owned, in the aggregate, shares representing approximately 71.3% of the voting power of our outstanding capital stock, and our executive officers, directors and holders of 5% or more of our common stock (by voting power) collectively beneficially owned, in the aggregate, outstanding shares representing approximately 76.9% of the total voting power of our outstanding capital stock. As a result, the holders of our Class B common stock, and in particular our executive officers, directors and holders of 5% or more of our common stock (by voting power), will be able to exercise considerable influence over matters requiring stockholder approval, including the election of directors and approval of significant corporate transactions, such as a merger or other sale of our company or our assets, even if their stock holdings represent less than 50% of the outstanding shares of our capital stock. This concentration of ownership will limit the ability of other stockholders to influence corporate matters and may cause us to make strategic decisions that could involve risks to holders of our Class A common stock or that may not be aligned with the interests of holders of our Class A common stock. This control may adversely affect the market price of our Class A common stock.

Current wording

Our Class B common stock has ten votes per share and our Class A common stock, which is the stock listed on the Nasdaq Global Select Market, has one vote per share. As a result, as of October 31, 2024, holders of our Class B common stock collectively beneficially owned, in the aggregate, shares representing approximately 71.1% of the voting power of our outstanding capital stock, and our executive officers, directors and holders of 5% or more of our common stock (by voting power) collectively beneficially owned, in the aggregate, outstanding shares representing approximately 75.8% of the total voting power of our outstanding capital stock. As a result, the holders of our Class B common stock, and in particular our executive officers, directors and holders of 5% or more of our common stock (by voting power), will be able to exercise considerable influence over matters requiring stockholder approval, including the election of directors and approval of significant corporate transactions, such as a merger or other sale of our company or our assets, even if their stock holdings represent less than 50% of the outstanding shares of our capital stock. This concentration of ownership will limit the ability of other stockholders to influence corporate matters and may cause us to make strategic decisions that could involve risks to holders of our Class A common stock or that may not be aligned with the interests of holders of our Class A common stock. This control may adversely affect the market price of our Class A common stock.