Skip to main content

EverCommerce Inc.

For the period ended Dec 31, 2025. Filed Mar 12, 2026.

View on SEC.gov

About this filing

A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.

FY2025 · Filed Mar 12, 2026

EVCM$8.12-1.2%Stored close · as of Nov 9, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-K

Period ended 2024-12-31; filed 2025-03-13.

0001853145-25-000009

Item 1A. Risk Factors

Current report: 10-K

Period ended 2025-12-31; filed 2026-03-12.

0001853145-26-000010

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 300 previous paragraphs and 301 current paragraphs.

249 unchanged; 43 reworded; 7 added; 8 removed; 0 previous and 2 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (7)

Current report

We and our third-party providers are exposed to cybersecurity risks and incidents which may result in damage to our brand and reputation, material financial penalties, and legal liability, which could in turn materially adversely affect our business, results of operations, and financial condition.

Current report

We rely on computer systems, hardware, software, technology infrastructure and online sites and networks for both internal and external operations that are critical to our business (collectively, “IT Systems”). We own and manage some of these IT Systems but also rely on third parties for a range of IT Systems and related products and services. We and certain of our third-party providers collect, maintain and process data about customers, employees, business partners and others, including information about individuals such as payment card information, as well as proprietary information belonging to our business such as trade secrets (collectively, “Confidential Information”).

Current report

Our IT Systems, Confidential Information, products and services have been and will continue to be targets of cyber-attacks aimed at sabotage, disruption and/or compromise. Threats come from diverse sources, including criminal hackers, hacktivists, state-sponsored groups, industrial espionage actors and insiders. These actors leverage numerous tactics, such as cyber-extortion, ransomware, social engineering (e.g., phishing), the introduction of computer viruses or other malware and even the physical intrusion and/or destruction of IT and infrastructure assets.

Current report

We have experienced cyber-attacks and other security incidents involving access to IT Systems and Confidential Information, and will continue to experience such attacks and incidents to varying degrees. To date, no attacks or incidents either individually or in the aggregate has materially impacted our operations, financial condition or business. Although we and our service providers deploy security measures in relation to our IT Systems and Confidential Information, no measures can guarantee protection against all cyber-attacks and security incidents. A serious breach of our IT Systems, Confidential Information, or a third-party system upon which we rely may subject us to material losses or liability, including, for example, as a result of the following: payment network fines; assessments and claims for unauthorized purchases with misappropriated credit, debit or card information; impersonation or other similar fraud claims; regulatory investigations, fines and penalties; litigation (including class action) costs, damages and injunctive relief; significant harm to our brand and reputation; loss of existing clients and potential clients from using electronic payments generally and our solutions and services specifically, thus reducing our revenue; costs to correct any breaches or failures; and significant uninsured liabilities and costs.

Current report

Our use of AI Technologies could adversely affect our ability to obtain intellectual property protection in our solutions.

Current report

We use generative AI tools provided by third parties to develop and assist in the development of our own software code. While use of these tools makes our development processes more efficient, generative AI tools have sometimes generated content that is similar to proprietary or open source code on which the tools were trained. We could be subject to intellectual property infringement claims if the generative AI tools we use generate source code that is too similar to other proprietary code, or to software-implemented processes that are patent protected. We may also not be able to anticipate and detect security vulnerabilities in AI generated source code. If our tools generate code that is too similar to open source software code, we risk losing intellectual property protection of our own proprietary code that is commingled with the generated code. Courts in the United States have denied copyright protection for content generated by AI Technologies, and denied patent protection for inventions created solely by AI Technologies. The law is unfavorable or uncertain in many jurisdictions as to whether content that is generated in whole or in part by AI tools is patentable or subject to copyright protection. If we fail to obtain intellectual property protection in our solutions, or later have our intellectual property rights invalidated or otherwise diminished, our competitors may be able to take advantage of our research and development efforts to develop competing products which could adversely affect our business, reputation and financial condition.

Current report

Already, certain existing legal regimes (e.g., relating to data privacy) regulate certain aspects of AI Technologies, and new laws regulating AI Technologies continue to enter into force in the United States and the EU. In the United States, the Trump administration has rescinded an executive order relating to the safe and secure development of AI Technologies that was previously implemented by the Biden administration. The Trump administration then issued a new executive order that, among other things, requires certain agencies to develop and submit to the president action plans to “sustain and enhance America’s global AI dominance,” and to specifically review and, if possible, rescind rulemaking taken pursuant to the rescinded Biden executive order. Thus, the Trump administration may continue to rescind other existing federal orders and/or administrative policies relating to AI Technologies, or may implement new executive orders and/or other rule making relating to AI Technologies in the future. Any such changes at the federal level could require us to expend significant resources to modify our products, services, or operations to ensure compliance or remain competitive. U.S. legislation related to AI technologies has also been enacted at the state level. For example, California enacted new laws in 2025 that regulate use of AI technologies and provide consumers with additional protections around companies’ use of AI technologies, such as requiring companies to address issues relating to companion chatbots, algorithmic pricing, and deepfakes and to disclose certain uses of generative AI and the California Privacy Protection Agency recently finalized regulations under the California Consumer Privacy Act regarding the use of automated decision making, which may apply to the AI technologies that we use. Other states have also passed AI focused legislation, such as Colorado’s Artificial Intelligence Act, which will require developers and deployers of “high risk” AI systems to implement certain safeguards against algorithmic discrimination, and Utah’s Artificial Intelligence Policy Act, which establishes disclosure requirements and accountability measures for the use of generative AI in certain consumer interactions. Such additional regulations may impact our ability to develop, use, and commercialize AI technologies in the future.
Removed paragraphs (8)

Previous report

Unauthorized disclosure, destruction or modification of data, disruption of our software or services or cyber breaches could expose us to liability, protracted and costly litigation and damage our reputation.

Previous report

In addition, our products and services have been and may in the future be targets of cyber-attacks that attempt to sabotage or otherwise disable them, and the defensive and preventative measures we take ultimately may not be able to effectively detect, prevent, or protect against or otherwise mitigate losses from all cyber-attacks. Threats can come from a variety of sources, including criminal hackers, hacktivists, state-sponsored intrusions, industrial espionage and insider threats. Certain efforts may be supported by significant financial and technological resources, making them even more sophisticated and difficult to detect. Numerous and evolving cybersecurity threats, including advanced and persisting cyber-attacks, cyber-extortion, ransomware attacks, spear phishing and social engineering schemes, the introduction of computer viruses or other malware and the physical destruction of all or portions of our information technology and infrastructure could compromise the confidentiality, availability and integrity of the data in our systems. Despite our efforts to create security barriers against such threats, it is virtually impossible for us to eliminate these risks entirely. Any such breach could compromise our networks or the products we offer our customers, creating system disruptions or slowdowns and exploiting security vulnerabilities of our products. Additionally, the information stored on our networks could be accessed, publicly disclosed, lost or stolen, any of which could subject us to liability and cause us financial harm. These breaches, or any perceived breach, may also result in reporting obligations, damage to our reputation, negative publicity, loss of key partners, customers and transactions, increased remedial costs, or costly litigation, and may therefore adversely impact market acceptance of our products and services and may seriously affect our business, financial condition or results of operations.

Previous report

We have been and could in the future be subject to breaches of security by hackers or other malicious actors. Although we proactively employ multiple measures to defend our systems against intrusions and attacks and to protect the data we collect, our measures may not prevent unauthorized access or use of sensitive data. We experience cyber-attacks and other security incidents of varying degrees from time to time, though none which individually or in the aggregate has led to costs or consequences which have materially impacted our operations or business. We may be required to expend significant additional resources in our efforts to modify or enhance our protective measures against evolving threats. A breach of our system or a third-party system upon which we rely may subject us to material losses or liability, including payment network fines, assessments and claims for unauthorized purchases with misappropriated credit, debit or card information, impersonation or other similar fraud claims. A misuse of such data or a cybersecurity breach could harm our reputation and deter our clients and potential clients from using electronic payments generally and our solutions and services specifically, thus reducing our revenue. In addition, any such misuse or breach could cause us to incur costs to correct the breaches or failures, expose us to uninsured liability, increase our risk of regulatory scrutiny, subject us to lawsuits and result in the imposition of material penalties and fines under state and federal laws or by the payment networks. While we maintain insurance coverage that may, subject to policy terms and conditions, cover certain aspects of cyber risks, such insurance coverage may be insufficient to cover all losses.

Previous report

During the fourth quarter of 2023, the Company evaluated the recoverability of our fitness asset group. As a result of our evaluation, we determined that the estimated fair value of our fitness asset group was insufficient to recover the net carrying value of the asset group resulting in an impairment charge of approximately $5.1 million during the three months ended December 31, 2023, of which $3.1 million related to intangible assets.

Previous report

If we are unable to improve our margin, in particular within Marketing Technology Solutions, we may experience lower aggregate profitability and margins.

Previous report

While we have experienced significant revenue growth across our offering of solutions and services, certain solutions and services, such as our Marketing Technology Solutions, have lower margins as compared to our subscription and transaction fee services, such as our vertical Business Management Software and integrated payment solutions. For the year ended December 31, 2024, subscription and transaction fees and Marketing Technology Solutions generated 78.5% and 18.5%, respectively, of our total revenues. To the extent our lower margin solutions and services grow as a portion of our overall business, there is an adverse impact on our aggregate profitability and margins.

Previous report

In addition, we may be unable to achieve satisfactory prices for our offerings or maintain prices at competitive levels across our offering of solutions and services. If we are unable to maintain our prices, or if our costs increase and we are unable to offset such an increase with a commensurate increase in our prices, our margins could decline. We will continue to be subject to significant pricing pressure and expect that we will continue to experience growth across our offerings, including in respect of our lower margin solutions, such as our Marketing Technology Solutions, which will likely have a material adverse effect on our margins.

Previous report

Already, certain existing legal regimes (e.g., relating to data privacy) regulate certain aspects of AI Technologies, and new laws regulating AI Technologies are expected to enter into force in the United States and the EU in 2024. In the United States, the Biden administration issued a broad Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence (the “2023 AI Order”) that sets out principles intended to guide AI design and deployment for the public and private sector and signals the increase in governmental involvement and regulation over AI Technologies. The 2023 AI Order established certain new requirements for the training, testing and cybersecurity of sophisticated AI models and large-scale compute centers used to train AI models. The 2023 AI Order also instructed several other federal agencies to promulgate additional regulations within specific timeframes from the date of the 2023 AI Order regarding the use and development of AI Technologies. Legislation related to AI Technologies has also been introduced at the federal level and is advancing at the state level.
Reworded paragraphs (43)

Previous wording

Our recent growth rates may not be sustainable or indicative of future growth.

Current wording

Our historical growth rates may not be sustainable or indicative of future growth.

Previous wording

Since our founding, we have generated revenue growth through acquisitions and by driving organic growth of our business. Our revenue has grown at a CAGR of 12.5% from 2021 to 2024, and reached $698.8 million for the year ended December 31, 2024, up from $675.4 million for the year ended December 31, 2023, which represents revenue growth of 3.5% from 2023 to 2024. Our historical rate of growth may not be sustainable or indicative of our future rate of growth. For example, while acquisitions have significantly contributed to our growth to date, we may make fewer or no acquisitions in the future. We believe that our continued growth in revenue, as well as our ability to improve or maintain margins and profitability, will depend upon, among other factors, our ability to address the challenges, risks and difficulties described elsewhere in this “Risk Factors” section and the extent to which our various offerings grow and contribute to our results of operations. We cannot provide assurance that we will be able to successfully manage any such challenges or risks to our future growth. In addition, our base of customers may not continue to grow or may decline due to a variety of possible risks, including changes in macroeconomic conditions, such as inflation, interest rates and tariffs, increased competition, changes in the regulatory landscape and the maturation of our business. Any of these factors could cause our revenue growth to decline and may adversely affect our margins and profitability. Failure to continue our revenue growth or improve margins would have a material adverse effect on our business, financial condition and results of operations. You should not rely on our historical rate of revenue growth as an indication of our future performance.

Current wording

Since our founding, we have generated revenue growth through acquisitions and by driving organic growth of our business. Our revenue has grown at a CAGR of 7.1% from 2022 to 2025, and reached $588.9 million for the year ended December 31, 2025, up from $562.2 million for the year ended December 31, 2024, which represents revenue growth of 4.8% from 2024 to 2025. Our historical rate of growth may not be sustainable or indicative of our future rate of growth. For example, while acquisitions have significantly contributed to our growth to date, we may make fewer or no acquisitions in the future. We believe that our continued growth in revenue, as well as our ability to improve or maintain margins and profitability, will depend upon, among other factors, our ability to address the challenges, risks and difficulties described elsewhere in this “Risk Factors” section and the extent to which our various offerings grow and contribute to our results of operations. We cannot provide assurance that we will be able to successfully manage any such challenges or risks to our future growth. In addition, our base of customers may not continue to grow or may decline due to a variety of possible risks, including changes in macroeconomic conditions, such as inflation, interest rates and tariffs, increased competition, changes in the regulatory landscape and the maturation of our business. Any of these factors could cause our revenue growth to decline and may adversely affect our margins and profitability. Failure to continue our revenue growth or improve margins would have a material adverse effect on our business, financial condition and results of operations. You should not rely on our historical rate of revenue growth as an indication of our future performance.

Previous wording

We have incurred significant operating losses since our inception. Our net loss was $41.1 million and $45.6 million for the years ended December 31, 2024 and 2023, respectively. Our operating expenses may increase substantially in the foreseeable future as we continue to invest to grow our business and build relationships with or clients and partners, develop new solutions and comply with requirements of being a public company. These efforts may prove to be more expensive than we currently anticipate, and we may not succeed in increasing our revenue sufficiently to offset these higher expenses. If we are unable to effectively manage the risks and difficulties of investing to grow our business, building relationships and developing new solutions as we encounter them, our business, financial condition and results of operations may suffer.

Current wording

We have incurred significant operating losses since our inception. Our net income from continuing operations was $18.2 million and a net loss from continuing operations of $15.2 million for the years ended December 31, 2025 and 2024, respectively. Our operating expenses may increase substantially in the foreseeable future as we continue to invest to grow our business and build relationships with or clients and partners, develop new solutions and comply with requirements of being a public company. These efforts may prove to be more expensive than we currently anticipate, and we may not succeed in increasing our revenue sufficiently to offset these higher expenses. If we are unable to effectively manage the risks and difficulties of investing to grow our business, building relationships and developing new solutions as we encounter them, our business, financial condition and results of operations may suffer.

Previous wording

Our operations have consumed substantial amounts of cash since inception and we intend to continue to make significant investments to support our business growth, acquire complementary businesses and technologies, respond to business challenges or opportunities, develop new solutions and services and enhance our existing solutions and services and operating infrastructure. Our net cash provided by operating activities was $113.2 million in 2024 and $104.6 million in 2023. We had cash and cash equivalents of $135.8 million and no restricted cash as of December 31, 2024.

Current wording

Our operations have consumed substantial amounts of cash since inception and we intend to continue to make significant investments to support our business growth, acquire complementary businesses and technologies, respond to business challenges or opportunities, develop new solutions and services and enhance our existing solutions and services and operating infrastructure. Our net cash provided by operating activities was $111.5 million in 2025 and $113.2 million in 2024. We had cash and cash equivalents of $129.7 million and no restricted cash as of December 31, 2025.

Previous wording

Accordingly, we may need to engage in equity or debt financings or collaborative arrangements to secure additional funds. Additional financing may not be available on terms favorable to us, or at all. If we raise additional funds through further issuances of equity or convertible securities, our existing stockholders could suffer significant dilution, and any new equity securities we issue could have rights, preferences and privileges superior to those of holders of our ordinary shares. Any debt financing secured by us in the future could involve additional restrictive covenants relating to our capital-raising activities and other financial and operational matters, which may make it more difficult for us to obtain additional capital and to pursue business opportunities, including potential acquisitions. In addition, during times of economic instability, it has been difficult for many companies to obtain financing in the public markets or to obtain debt financing, and we may not be able to obtain additional financing on commercially reasonable terms, if at all. If we are unable to obtain adequate financing or financing on terms satisfactory to us, it could have a material adverse effect on our business, financial condition and results of operations. Further, the Company maintains the majority of its cash and cash equivalents in accounts with major U.S. and multi-national financial institutions, and our deposits at certain of these institutions exceed insured limits. Market conditions can impact the viability of these institutions. In the event of failure of any of the financial institutions where we maintain our cash and cash equivalents, there can be no assurance that we will be able to access uninsured funds in a timely manner or at all.

Current wording

Accordingly, we may need to engage in equity or debt financings or collaborative arrangements to secure additional funds. Additional financing may not be available on terms favorable to us, or at all. If we raise additional funds through further issuances of equity or convertible securities, our existing stockholders could suffer significant dilution, and any new equity securities we issue could have rights, preferences and privileges superior to those of holders of our ordinary shares. Any debt financing secured by us in the future could involve additional restrictive covenants relating to our capital-raising activities and other financial and operational matters, which may make it more difficult for us to obtain additional capital and to pursue business opportunities, including potential acquisitions. In addition, during times of economic instability, it has been difficult for many companies to obtain financing in the public markets or to obtain debt financing, and we may not be able to obtain additional financing on commercially reasonable terms, if at all. If we are unable to obtain adequate financing or financing on terms satisfactory to us, it could have a material adverse effect on our business, financial condition and results of operations. Further, we maintain the majority of our cash and cash equivalents in accounts with major U.S. and multi-national financial institutions, and our deposits at certain of these institutions exceed insured limits. Market conditions can impact the viability of these institutions. In the event of failure of any of the financial institutions where we maintain our cash and cash equivalents, there can be no assurance that we will be able to access uninsured funds in a timely manner or at all.

Previous wording

The market for our solutions and services is highly competitive and subject to rapidly changing technology, shifting customer needs and frequent introductions of new products and services. As our platform is utilized across industries, we compete in a variety of highly fragmented markets and face competition from a variety of sources, including manual processes, basic PC tools, homegrown solutions, as well as from vertically-specialized and horizontal competitors. Vertically-specialized competitors include mobile sales applications and field service management platforms in Home Services, EHR / EMR and practice management platforms in Health Services and scheduling and management in Wellness Services. Horizontal competitors include Salesforce for CRM, Intuit for financial products, Square for payments and HubSpot for marketing-related solutions.

Current wording

The market for our solutions and services is highly competitive and subject to rapidly changing technology, shifting customer needs and frequent introductions of new products and services. As our platform is utilized across industries, we compete in a variety of highly fragmented markets and face competition from a variety of sources, including manual processes, basic PC tools, homegrown solutions, as well as from vertically-specialized and horizontal competitors. Vertically-specialized competitors include mobile sales applications and field service management platforms in Home Services, EHR / EMR and practice management platforms in Health Services and scheduling and management in Wellness Services. Horizontal competitors include Salesforce for CRM, Intuit for financial products, and Square for payments.

Previous wording

Payment-related transactions comprised approximately 17% of our revenue in 2024. The electronic payments market is subject to constant and significant changes. This market is characterized by rapid technological evolution, new product and service introductions, evolving industry standards, changing client needs and the entrance of non-traditional competitors, including products and services that enable card networks and banks to transact with consumers directly. To remain competitive, we continually pursue initiatives to develop new solutions and services to compete with these new market entrants. These projects carry risks, such as cost overruns, delays in delivery, performance problems and lack of client acceptance. In addition, new solutions and offerings may not perform as intended or generate the business or revenue growth expected. Any delay in the delivery of new solutions and services or the failure to differentiate our solutions and services or to accurately predict and address market demand could render our solutions and services less desirable, or even obsolete, to our clients and to our distribution partners. Furthermore, even though the market for integrated payment processing solutions and services is evolving, it may develop too rapidly or not rapidly enough for us to recover the costs we have incurred in developing new solutions and services targeted at this market. Any of the foregoing could have a material and adverse effect on our operating results and financial condition.

Current wording

Payment-related transactions comprised approximately 20% of our revenue in 2025. The electronic payments market is subject to constant and significant changes. This market is characterized by rapid technological evolution, new product and service introductions, evolving industry standards, changing client needs and the entrance of non-traditional competitors, including products and services that enable card networks and banks to transact with consumers directly. To remain competitive, we continually pursue initiatives to develop new solutions and services to compete with these new market entrants. These projects carry risks, such as cost overruns, delays in delivery, performance problems and lack of client acceptance. In addition, new solutions and offerings may not perform as intended or generate the business or revenue growth expected. Any delay in the delivery of new solutions and services or the failure to differentiate our solutions and services or to accurately predict and address market demand could render our solutions and services less desirable, or even obsolete, to our clients and to our distribution partners. Furthermore, even though the market for integrated payment processing solutions and services is evolving, it may develop too rapidly or not rapidly enough for us to recover the costs we have incurred in developing new solutions and services targeted at this market. Any of the foregoing could have a material and adverse effect on our operating results and financial condition.

Previous wording

An increasing number of organizations, including large merchants, businesses, technology companies and financial institutions, as well as government institutions, have disclosed breaches of their information security systems, some of which have involved sophisticated and highly targeted attacks on their websites, mobile applications and infrastructure. The techniques used to obtain unauthorized, improper, or illegal access to systems and information (including customers’ personal data), disable or degrade service, or sabotage systems are constantly evolving and have become increasingly complex and sophisticated, may be difficult to detect quickly, and often are not recognized or detected until after they have been launched against a target. Even if identified, we may be unable to adequately investigate or remediate incidents or breaches due to attackers increasingly using tools and techniques that are designed to circumvent controls, avoid detection, and remove or obfuscate forensic evidence.

Current wording

The techniques used to gain unauthorized, improper, or illegal access to systems and information (including personal data), disable or degrade services, or sabotage systems are constantly evolving and have become increasingly complex and sophisticated. These techniques are difficult to detect quickly, and often are not recognized or detected until after they have been launched against a target. Even if identified, we may be unable to adequately investigate or remediate incidents or breaches due to attackers increasingly using tools, such as artificial intelligence (“AI”), that are designed to circumvent controls, avoid detection, and remove or obfuscate forensic evidence. In addition, we identify and track known security vulnerabilities in our (and third-party) software and services that are deployed in our business, and we cannot guarantee that patches or other measures will be comprehensively applied before such vulnerabilities can be exploited by a threat actor. Because certain of our products are integrated with our customers’ systems, the circumvention or failure of our protective measures could compromise the confidentiality, integrity, and availability of our customers’ own systems and/or information. In addition, there can be no assurance that our cybersecurity risk management program and processes, including our policies, controls or procedures, will be fully implemented, complied with or effective in protecting our IT systems and Confidential Information.

Previous wording

Although we generally require that our agreements with our distribution partners and service providers who have access to client and customer data include confidentiality obligations that restrict these parties from using or disclosing any client or customer data except as necessary to perform their services under the applicable agreements, there can be no assurance that these contractual measures will prevent the unauthorized disclosure of business or client data, nor can we be sure that such third parties would be willing or able to satisfy liabilities arising from their breach of these agreements. Any failure by such third parties to adequately take these protective measures could result in protracted or costly litigation.

Current wording

Although we generally require that our agreements with our distribution partners and service providers who have access to our IT Systems and/or Confidential Information include confidentiality obligations that restrict these parties from using such access or disclosing such information except as necessary to perform their services under the applicable agreements, there can be no assurance that these contractual measures will prevent the unauthorized use or disclosure of Confidential Information, nor can we be sure that such third parties would be willing or able to satisfy liabilities arising from their breach of these agreements. Any failure by such third parties to adequately take these protective measures could result in protracted or costly litigation.

Previous wording

In addition, our agreements with our bank sponsors (as well as payment network requirements) require us to take certain protective measures to ensure the confidentiality of business and consumer data. Any failure to adequately comply with these protective measures could result in fees, penalties, litigation or termination of our bank sponsor agreements, and/or registration with the payment card networks.

Current wording

In addition, our agreements with our bank sponsors (as well as payment network requirements) require us to take certain protective measures to ensure the confidentiality of Confidential Information. Any failure to adequately comply with these protective measures could result in fees, penalties, litigation or termination of our bank sponsor agreements, and/or registration with the payment card networks.

Previous wording

Our existing general liability and cyber liability insurance policies may not cover, or may cover only a portion of, any potential claims related to security breaches to which we are exposed or may not be adequate to indemnify us for all or any portion of liabilities that may be imposed. We also cannot be certain that our existing insurance coverage will continue to be available on acceptable terms or in amounts sufficient to cover the potentially significant losses that may result from a security incident or breach or that the insurer will not deny coverage of any future claim. Accordingly, if our cybersecurity measures and those of our service providers, fail to protect against unauthorized access, attacks (which may include sophisticated cyber-attacks) and the mishandling of data by our employees and contractors, then our reputation, business, results of operations and financial condition could be adversely affected. In addition, there can be no assurance that our cybersecurity risk management program and processes, including our policies, controls or procedures, will be fully implemented, complied with or effective in protecting our systems and information.

Current wording

Our existing general liability and cyber liability insurance policies may not cover, or may cover only a portion of, any potential claims related to security breaches to which we are exposed or may not be adequate to indemnify us for all or any portion of liabilities that may be imposed. We also cannot be certain that our existing insurance coverage will continue to be available on acceptable terms or in amounts sufficient to cover the potentially significant losses that may result from a security incident or breach or that the insurer will not deny coverage of any future claim. We attempt to limit by contract our liability, however, the limitations of liability set forth in the contracts may not be enforceable or otherwise protect us from liability, and we may also be subject to claims that are not covered by contract.

Previous wording

We are responsible both for our own business and to a significant degree for acts and omissions by certain of our distribution partners and third-party vendors under the rules and regulations established by the payment networks, such as Visa, MasterCard, Discover and American Express and the debit networks. We and other third parties collect, process, store and transmit sensitive data, such as names, addresses, social security numbers, credit or debit card numbers and expiration dates or other payment card information, drivers’ license numbers and bank account numbers, and we have ultimate liability to the payment networks and member financial institutions that register us with the payment networks for our failure, or the failure of certain distribution partners and third parties with whom we contract, to protect this data in accordance with payment network requirements. Certain of our software and technology-enabled services are intended for use in collecting, storing and displaying clinical and health care-related information used in the diagnosis and treatment of patients and in related health care settings such as registration, scheduling and billing. We attempt to limit by contract our liability, however, the limitations of liability set forth in the contracts may not be enforceable or otherwise protect us from liability, and we may also be subject to claims that are not covered by contract. Although we maintain liability insurance coverage, there can be no assurance that such coverage will cover any claim, prove to be adequate or continue to remain available on acceptable terms, if at all. The loss, destruction or unauthorized modification of client or cardholder data could result in significant fines, sanctions and proceedings or actions against us by the payment networks, payment processors, sponsor banks, governmental bodies, our customers, our clients’ customers or others, which could have a material adverse effect on our business, financial condition and results of operations. Any such sanction, fine, proceeding or action could result in significant damage to our reputation or the reputation of our customers, negatively impact our ability to attract or retain customers, force us to incur significant expenses in defense of these proceedings, disrupt our operations, distract our management, increase our costs of doing business and may result in the imposition of monetary liability. A significant cybersecurity breach could also result in payment networks prohibiting us from processing transactions on their networks or the loss of our financial institution sponsorship that facilitates our participation in the payment networks, either of which could materially impede our ability to conduct business.

Current wording

Additionally, we are responsible both for our own business and to a significant degree for acts and omissions by certain of our distribution partners and third-party vendors under the rules and regulations established by the payment networks, such as Visa, MasterCard, Discover and American Express and the debit networks. We and other third parties collect, process, store and transmit Confidential Information, including financial and payment card information, and we have ultimate liability to the payment networks and member financial institutions that register us with the payment networks for our failure, or the failure of certain distribution partners and third parties with whom we contract, to protect this Confidential Information, in accordance with payment network requirements. Additionally, certain of our software and technology-enabled services are intended for use in collecting, storing and displaying clinical and health care-related information used in the diagnosis and treatment of patients and in related health care settings such as registration, scheduling and billing. The loss, destruction or unauthorized modification of Confidential Information could result in significant fines, sanctions and proceedings or actions against us by the payment networks, payment processors, sponsor banks, governmental bodies, our customers, our clients’ customers or others, which could have a material adverse effect on our business, financial condition and results of operations. Any such sanction, fine, proceeding or action could result in significant damage to our reputation or the reputation of our customers, negatively impact our ability to attract or retain customers, force us to incur significant expenses in defense of these proceedings, disrupt our operations, distract our management, increase our costs of doing business and may result in the imposition of monetary liability. A significant cybersecurity breach could also result in payment networks prohibiting us from processing transactions on their networks or the loss of our financial institution sponsorship that facilitates our participation in the payment networks, either of which could materially impede our ability to conduct business.

Previous wording

Our use of artificial intelligence technologies may not be beneficial to our business, and may cause the performance of our products, services and business, as well as our reputation and the reputations of our customers, to suffer or cause us to incur liability resulting from the violation of laws or contracts to which we are a party.

Current wording

Our use of AI technologies may not be beneficial to our business, and may cause the performance of our products, services and business, as well as our reputation and the reputations of our customers, to suffer or cause us to incur liability resulting from the violation of laws or contracts to which we are a party.

Previous wording

We are developing and/or implementing artificial intelligence (“AI”), machine learning, and automated decision-making technologies (collectively, “AI Technologies”) throughout our business, and are making significant investments in this area.

Current wording

We are developing and/or implementing artificial intelligence, machine learning, and automated decision-making technologies (collectively, “AI Technologies”) throughout our business, and are making significant investments in this area.

Previous wording

In particular, if the models underlying our AI Technologies are: incorrectly designed or implemented; trained or reliant on incomplete, inadequate, inaccurate, biased or otherwise poor quality data, or on data to which we do not have sufficient rights or in relation to which we and/or the providers of such data have not implemented sufficient legal compliance measures; used without sufficient oversight and governance to ensure their responsible use; and/or adversely impacted by unforeseen defects, technical challenges, cybersecurity threats or material performance issues, the performance of our products, services and business, as well as our reputation and the reputations of our customers, could suffer or we could incur liability resulting from the violation of laws or contracts to which we are a party or civil claims.

Current wording

In particular, if the models underlying the AI Technologies we use are: incorrectly designed or implemented; trained or reliant on incomplete, inadequate, inaccurate, biased or otherwise poor quality data, or on data to which we do not have sufficient rights or in relation to which we and/or the providers of such data have not implemented sufficient legal compliance measures; used without sufficient oversight and governance to ensure their responsible use; and/or adversely impacted by unforeseen defects, technical challenges, cybersecurity threats or material performance issues, the performance of our products, services and business, as well as our reputation and the reputations of our customers, could suffer or we could incur liability resulting from the violation of laws or contracts to which we are a party or civil claims.

Previous wording

With respect to our products or services that incorporate AI Technology, the market for such products and services is rapidly evolving and unproven in many industries, including our own, and important assumptions about the characteristics of targeted markets, pricing, sales cycles, cost, performance, and perceived value associated with our services or products may be inaccurate. We cannot be sure that the market will continue to grow or that it will grow in ways we anticipate. In addition, market acceptance of products and services that incorporate AI Technology is uncertain. Our failure to successfully develop and commercialize our products or services involving AI Technologies could depress the market price of our stock and impair our ability to: raise capital; expand our business; provide, improve and diversify our product offerings; continue our operations and efficiently manage our operating expenses; and respond effectively to competitive developments.

Current wording

With respect to our products or services that incorporate AI Technology, the market for such products and services is rapidly evolving and unproven in many industries, including our own, and important assumptions about the characteristics of targeted markets, pricing, sales cycles, cost, performance, and perceived value associated with our services or products may be inaccurate. We cannot be sure that the market will continue to grow or that it will grow in ways we anticipate. In addition, market acceptance of products and services that incorporate AI Technology is uncertain. Our failure to successfully develop and commercialize our products or services involving AI Technologies could depress the market price of our stock and impair our ability to: raise capital; expand our business; provide, improve and diversify our product offerings; continue our operations and efficiently manage our operating expenses; and compete effectively in the marketplace.

Previous wording

We use AI Technologies licensed from third parties in our technologies and our ability to continue to use such technologies at the scale we need may be dependent on access to specific third-party software and infrastructure. We cannot control the availability or pricing of such third-party AI Technologies, especially in a highly competitive environment, and we may be unable to negotiate favorable economic terms with the applicable providers. If any such third-party AI Technologies become incompatible with our solutions or unavailable for use, or if the providers of such models unfavorably change the terms on which their AI Technologies are offered or terminate their relationship with us, our solutions may become less appealing to our customers and our business will be harmed. In addition, to the extent any third party AI Technologies are used as a hosted service, any disruption, outage, or loss of information through such hosted services could disrupt our operations or solutions, damage our reputation, cause a loss of confidence in our solutions, or result in legal claims or proceedings, for which we may be unable to recover damages from the affected provider.

Current wording

We use AI Technologies licensed from third parties in our technologies and our ability to continue to use such technologies at the scale we need may be dependent on access to specific third-party software and infrastructure. We cannot control the availability or pricing of such third-party AI Technologies, especially in a highly competitive environment, and we may be unable to negotiate favorable economic terms with the applicable providers. If any such third-party AI Technologies become incompatible with our solutions or unavailable for use, or if the providers of such models unfavorably change the terms on which their AI Technologies are offered or terminate their relationship with us, our solutions may become less appealing to our customers and our business will be harmed. In addition, to the extent any AI Technologies are used as a hosted service, the service may be subject to disruption, outage, or loss of information. Moreover, our own and third-party AI Technologies may have bugs or errors, which could also lead to disruption, outage, or loss of information, unexpected, unreliable or unsatisfactory results, or degradation of our customers’ user experience with our services. In relation to third-party technologies, we may have limited ability to fix any bugs or errors ourselves, and we may not be able to rely on the corresponding providers or others to fix bug and errors in a timely manner or at all. Any of the foregoing could disrupt our operations or solutions, damage our reputation, cause a loss of confidence in our solutions, or result in legal claims or proceedings, for which we may be unable to recover damages from the AI Technology, software, or infrastructure provider.

Previous wording

We record goodwill and intangible assets at fair value upon the acquisition of a business. Goodwill represents the excess of amounts paid for acquiring businesses over the fair value of the net assets acquired. The carrying value of goodwill is evaluated for impairment at least annually, or more frequently if conditions warrant, by comparing the carrying value of a reporting unit to its estimated fair value. Intangible assets with definite lives are reviewed for impairment whenever events or circumstances indicate that their carrying value may not be recoverable. Declines in operating results, divestitures, sustained market declines and other factors that impact the fair value of our reporting unit has and may in the future result in an impairment of goodwill or intangible assets and, in turn, a charge to net income (loss). These charges in the years ended December 31, 2024 and 2023 and any future charges have, and may in the future have a material adverse effect on our results of operations or financial condition.

Current wording

We record goodwill and intangible assets at fair value upon the acquisition of a business. Goodwill represents the excess of amounts paid for acquiring businesses over the fair value of the net assets acquired. The carrying value of goodwill is evaluated for impairment at least annually, or more frequently if conditions warrant, by comparing the carrying value of a reporting unit to its estimated fair value. Intangible assets with definite lives are reviewed for impairment whenever events or circumstances indicate that their carrying value may not be recoverable. Declines in operating results, divestitures, sustained market declines and other factors that impact the fair value of our reporting unit has and may in the future result in an impairment of goodwill or intangible assets and, in turn, a charge to net income (loss). These charges in the years ended December 31, 2025 and 2024 have adversely impacted and any future charges may have a material adverse effect on our results of operations and financial condition.

Previous wording

During the fourth quarter 2024, in conjunction with our review of strategic alternatives for our Marketing Technology Solutions, and as a result of lower than expected financial performance and future forecasted growth rates we determined that the estimated fair value of our marketing technology solutions reporting unit was insufficient to recover the net carrying value of the reporting unit resulting in an impairment of goodwill of approximately $28.1 million. In connection with the definitive sale and purchase agreements to sell our Fitness Solutions, we tested the goodwill balance for impairment as of March 31, 2024. During the year ended December 31, 2024, we recognized $6.4 million of goodwill impairment charges representing the allocated goodwill to Fitness Solutions.

Current wording

During the fourth quarter 2024, in conjunction with our review of strategic alternatives for our marketing technology solutions, and as a result of lower than expected financial performance and future forecasted growth rates we determined that the estimated fair value of our marketing technology solutions reporting unit was insufficient to recover the net carrying value of the reporting unit resulting in an impairment of goodwill of approximately $28.1 million. Additionally, during the year ended December 31, 2025, we recognized a goodwill impairment charge of $6.9 million, related to the sale of marketing technology solutions. In connection with the definitive sale and purchase agreements to sell our Fitness Solutions, we tested the goodwill balance for impairment as of March 31, 2024. During the year ended December 31, 2024, we recognized $6.4 million of goodwill impairment charges representing the allocated goodwill to Fitness Solutions.

Previous wording

Our information technology systems and operations or those of our third-party technology vendors could be exposed to damage or interruption from, among other things, fire, extreme weather events (including floods, storms, droughts and extreme temperatures) and other natural disasters, power loss, telecommunications failure, unauthorized entry, computer viruses, denial-of-service attacks, acts of terrorism, human error, vandalism or sabotage, financial insolvency and similar events. Extreme weather events, changing water levels, as well as changes in ambient temperature and precipitation patterns, may become more frequent or severe as a result of climate change. Our property and business interruption insurance may not be adequate to compensate us for all losses or failures that may occur, and the cost and availability of such insurance may be adversely impacted to the extent events become more frequent or severe. While we and the third parties upon whom we rely have certain backup systems in place for certain aspects of our respective frameworks, none of our frameworks are fully redundant and disaster recovery planning is not sufficient for all eventualities, particularly given some of the uncertainties associated with longer term projections, including those associated with climate change. Defects in our information technology systems or those of third parties, errors or delays in the processing of payment transactions, telecommunications failures or other difficulties could result in:

Current wording

Our information technology systems and operations or those of our third-party technology vendors could be exposed to damage or interruption from, among other things, fire, extreme weather events (including floods, storms, droughts and extreme temperatures) and other natural disasters, power loss, telecommunications failure, unauthorized entry, computer viruses, denial-of-service attacks, acts of terrorism, human error, vandalism or sabotage, financial insolvency and similar events. Certain of these events may become more frequent or severe as a result of climate change or other environmental or social pressures, which may also result in chronic changes (e.g. in meteorological or hydrological patterns) which may have similar effects. Our property and business interruption insurance may not be adequate to compensate us for all losses or failures that may occur, and the cost and availability of such insurance may be adversely impacted to the extent events become more frequent or severe. While we and the third parties upon whom we rely have certain backup systems in place for certain aspects of our respective frameworks, none of our frameworks are fully redundant and disaster recovery planning is not sufficient for all eventualities, particularly given some of the uncertainties associated with longer term projections, including those associated with climate change. Defects in our information technology systems or those of third parties, errors or delays in the processing of payment transactions, telecommunications failures or other difficulties could result in:

Previous wording

Conversely, pandemics, epidemics and outbreaks may significantly and temporarily increase demand in certain industries and markets in which we operate. For example, COVID-19 generally increased demand for, and utilization of, telehealth services, and increased demand from customers shifting to technology-focused, digital-first business models. While such increases may help to offset the decline of business and demand in other industries, there can be no assurance that these levels of interest, demand and use will be similar in any future public health crisis. Federal and state budget shortfalls as a result of a public health crisis could lead to potential reductions in funding for Medicare and Medicaid. Further reductions in reimbursements from Medicare and Medicaid could lead to our Health Services customers postponing expenditures on information technology and related services.

Current wording

Conversely, pandemics, epidemics and outbreaks may significantly and temporarily increase demand in certain industries and markets in which we operate. For example, COVID-19 generally increased demand for, and utilization of, telehealth services, and increased demand from customers shifting to technology-focused, digital-first business models. While such increases helped to offset the decline of business and demand in other industries, there can be no assurance that these levels of interest, demand and use will be similar in any future public health crisis. Federal and state budget shortfalls as a result of a public health crisis could lead to potential reductions in funding for Medicare and Medicaid. Further reductions in reimbursements from Medicare and Medicaid could lead to our Health Services customers postponing expenditures on information technology and related services.

Previous wording

General inflation, including wage inflation, increases in interest rates, currency volatility as well as monetary, fiscal and policy interventions by national or regional governments in anticipation of or reaction to such events could have negative impacts on our business by increasing our operating costs and our borrowing costs as well as decreasing the capital available for our customers to purchase our solutions and services or the levels of cash we maintain for working capital. The change in the United States presidential administration may result in economic volatility or other consequences that adversely impact SMBs or consumer spending and consequently negatively impact our business and results of operations.

Current wording

General inflation, including wage inflation, increases in interest rates, currency volatility as well as monetary, fiscal and policy interventions by national or regional governments in anticipation of or reaction to such events could have negative impacts on our business by increasing our operating costs and our borrowing costs as well as decreasing the capital available for our customers to purchase our solutions and services or the levels of cash we maintain for working capital. The policies of the United States presidential administration may result in economic volatility or other consequences that adversely impact SMBs or consumer spending and consequently negatively impact our business and results of operations.

Previous wording

Since April 2017, we have consummated 53 acquisitions and have generated significant growth through acquisitions. Although we expect to continue to acquire companies and other assets in the future, such acquisitions pose a number of challenges and risks, including the following:

Current wording

Since April 2017, we have consummated 54 acquisitions and have generated significant growth through acquisitions. Although we expect to continue to acquire companies and other assets in the future, such acquisitions pose a number of challenges and risks, including the following:

Previous wording

In addition, we may pursue dispositions and other strategic transactions, which could be material. For example, we have announced a strategic review of our Marketing Technology Solutions, which may not result in a successful sale or other dispositions. Dispositions and other strategic transactions may not have the anticipated impact on our business, may negatively impact revenues and may make it difficult to generate cash flows to meet our cash requirements.

Current wording

In addition, we may pursue dispositions and other strategic transactions, which could be material. For example, we completed the sale of our Marketing Technology Solutions in the fourth quarter of 2025. Dispositions and other strategic transactions may not have the anticipated impact on our business, may negatively impact revenues and may make it difficult to generate cash flows to meet our cash requirements.

Previous wording

As of December 31, 2024, we had cash, cash equivalents and restricted cash of $135.8 million, $190.0 million of available borrowing capacity under our New Revolver (as defined in Part II. Item 7.“Management’s Discussion and Analysis of Results of Operation and Financial Condition-Liquidity and Capital Resources”) and $532.1 million outstanding under our Credit Facilities (as defined in Part II. Item 7.“Management’s Discussion and Analysis of Results of Operation and Financial Condition-Liquidity and Capital Resources”). To service this debt and any additional debt we may incur in the future, we need to generate cash. Our ability to generate cash is subject, to a certain extent, to our ability to successfully execute our business strategy, including acquisition activity, as well as general economic, financial, competitive, regulatory and other factors beyond our control. There can be no assurance that our business will be able to generate sufficient cash flow from operations or that future borrowings or other financing will be available to us in an amount sufficient to enable us to service our debt and fund our other liquidity needs. To the extent we are required to use our cash flow from operations or the proceeds of any future financing to service our debt instead of funding working capital, capital expenditures, acquisition activity or other general corporate purposes, we will be less able to plan for, or react to, changes in our business, industry and in the economy generally. This will place us at a competitive disadvantage compared to our competitors that have less debt. There can be no assurance that we will be able to refinance any of our debt on commercially reasonable terms or at all, or that the terms of that debt will allow any of the above alternative measures or that these measures would satisfy our scheduled debt service obligations. If we are unable to generate sufficient cash flow to repay or refinance our debt on favorable terms, it could significantly adversely affect our financial condition and the value of our outstanding debt. Our ability to restructure or refinance our debt will depend on the condition of the capital markets and our financial condition. Any refinancing of our debt could be at higher interest rates and may require us to comply with more onerous covenants, which could further restrict our business operations.

Current wording

As of December 31, 2025, we had cash, cash equivalents and restricted cash of $129.7 million, $155.0 million of available borrowing capacity under our Revolver (as defined in Part II. Item 7.“Management’s Discussion and Analysis of Results of Operation and Financial Condition-Liquidity and Capital Resources”) and $526.6 million outstanding under our Credit Facilities (as defined in Part II. Item 7.“Management’s Discussion and Analysis of Results of Operation and Financial Condition-Liquidity and Capital Resources”). To service this debt and any additional debt we may incur in the future, we need to generate cash. Our ability to generate cash is subject, to a certain extent, to our ability to successfully execute our business strategy, including acquisition activity, as well as general economic, financial, competitive, regulatory and other factors beyond our control. There can be no assurance that our business will be able to generate sufficient cash flow from operations or that future borrowings or other financing will be available to us in an amount sufficient to enable us to service our debt and fund our other liquidity needs. To the extent we are required to use our cash flow from operations or the proceeds of any future financing to service our debt instead of funding working capital, capital expenditures, acquisition activity or other general corporate purposes, we will be less able to plan for, or react to, changes in our business, industry and in the economy generally. This will place us at a competitive disadvantage compared to our competitors that have less debt. There can be no assurance that we will be able to refinance any of our debt on commercially reasonable terms or at all, or that the terms of that debt will allow any of the above alternative measures or that these measures would satisfy our scheduled debt service obligations. If we are unable to generate sufficient cash flow to repay or refinance our debt on favorable terms, it could significantly adversely affect our financial condition and the value of our outstanding debt. Our ability to restructure or refinance our debt will depend on the condition of the capital markets and our financial condition. Any refinancing of our debt could be at higher interest rates and may require us to comply with more onerous covenants, which could further restrict our business operations.

Previous wording

This assessment includes disclosure of any material weaknesses identified by our management in our internal control over financial reporting, as well as a statement that our independent registered public accounting firm has issued an opinion on the effectiveness of our internal control over financial reporting, provided that our independent registered public accounting firm will not be required to attest to the effectiveness of our internal control over financial reporting until our first annual report required to be filed with the SEC following the date (i) we are either an “accelerated filer” or a “large accelerated filer,” each as defined in the Exchange Act, and (ii) we are no longer an emerging growth company, as defined in the JOBS Act. We could be an emerging growth company for up to five years. An independent assessment of the effectiveness of our internal controls could detect problems that our management’s assessment might not. Undetected material weaknesses in our internal controls could lead to financial statement restatements and require us to incur the expense of remediation. We are also required to disclose changes made in our internal control and procedures on a quarterly basis. To comply with the requirements of being a public company, we may need to undertake various actions, such as implementing new internal controls and procedures and hiring accounting or internal audit staff.

Current wording

This assessment includes disclosure of any material weaknesses identified by our management in our internal control over financial reporting, as well as a statement that our independent registered public accounting firm has issued an opinion on the effectiveness of our internal control over financial reporting, provided that our independent registered public accounting firm will not be required to attest to the effectiveness of our internal control over financial reporting until our first annual report required to be filed with the SEC following the date (i) we are either an “accelerated filer” or a “large accelerated filer,” each as defined in the Exchange Act, and (ii) we are no longer an emerging growth company, as defined in the Jumpstart Our Business Startups Act of 2012 (“JOBS Act”). We could be an emerging growth company for up to five years. An independent assessment of the effectiveness of our internal controls could detect problems that our management’s assessment might not. Undetected material weaknesses in our internal controls could lead to financial statement restatements and require us to incur the expense of remediation. We are also required to disclose changes made in our internal control and procedures on a quarterly basis. To comply with the requirements of being a public company, we may need to undertake various actions, such as implementing new internal controls and procedures and hiring accounting or internal audit staff.

Previous wording

While we may, from time to time, engage in certain voluntary initiatives (which may include disclosures, policies, and targets, among others) to improve the ESG profile of our operations and/or products or respond to stakeholder considers, such initiatives may be costly and may not have the desired effect. Expectations around companies’ management of ESG matters continues to evolve rapidly, in many instances due to factors that are out of our control. In particular, we may make statements or actions based on various frameworks, methodologies, or data that we believe to be reasonable but which may ultimately be determined to be erroneous or inconsistent with future regulatory requirements or best practices. Even if this is not the case, our current actions may subsequently be determined to be insufficient or not aligned to best practices by various stakeholders. If we are not effective in addressing ESG matters affecting our business, or setting and meeting relevant sustainability goals, we may be subject to various adverse impacts, including reputational damage and potential stakeholder engagement and/or litigation.

Current wording

While we may, from time to time, engage in certain voluntary initiatives (which may include disclosures, policies, and targets, among others) to improve the ESG profile of our operations and/or products or respond to stakeholder considerations, such initiatives may be costly and may not have the desired effect. For example, identification, assessment, management, and disclosure of such matters is complex and can require substantial discretion. As with other companies, our approach to ESG practices and disclosures is likely to evolve, and we cannot guarantee that our approach will align with the preferences or interpretations of any particular stakeholder. Expectations around companies’ management of ESG matters continues to evolve rapidly, in many instances due to factors that are out of our control.

Previous wording

In addition, this emphasis on ESG matters has resulted and may result in the adoption of new laws and regulations, including new reporting requirements. For example, various policymakers, such as the SEC, European Union and State of California, have adopted (or are considering adopting) requirements for companies to provide significantly expanded disclosures on, or take other actions regarding climate and/or other ESG topics. These requirements are not uniform across jurisdictions, and may be inconsistently applied, which can increase the complexity and cost of compliance, and increase the risk of enforcement or litigation relating to our ESG disclosures and initiatives. Moreover, some investors and financial institutions use ESG or sustainability scores, ratings or benchmarks to make financing, investment and voting decisions. Any reputational damage associated with ESG factors may also adversely impact our ability to recruit and retain employees, customers, and business partners. Simultaneously, there are efforts by some stakeholders to reduce companies’ efforts relating to certain ESG-related matters. Both advocates and opponents to certain ESG matters are increasingly resorting to a range of activism forms, including media campaigns and litigation, to advance their perspectives. To the extent we are subject to such activism, it may require us to incur costs or otherwise adversely impact our business. This and other stakeholder expectations will likely lead to increased costs as well as scrutiny that could heighten all of the risks identified in this risk factor. Such ESG matters may also impact our suppliers, customers, capital providers, and other stakeholders, which may compound or cause new impacts on our business, financial condition, or results of operations.

Current wording

Various stakeholders have different, and at times conflicting, expectations regarding such matters. For example, various policymakers, such as the European Union and State of California, have adopted (or are considering adopting) requirements for companies to provide significantly expanded disclosures on, or take other actions regarding climate and/or other ESG topics. These requirements are not uniform across jurisdictions, and may be inconsistently applied, which can increase the complexity and cost of compliance, and increase the risk of enforcement or litigation relating to our ESG disclosures and initiatives. Moreover, some investors, financial institutions and customers use ESG or sustainability considerations (including scores or benchmarks) to inform their decision-making. Simultaneously, there are efforts by some stakeholders to reduce companies’ efforts relating to certain ESG-related matters. Both advocates and opponents to certain ESG matters are increasingly resorting to a range of activism forms, including media campaigns and litigation, to advance their perspectives. Failure to successfully navigate such evolving expectations (including any new legal requirements or evolving expectations of existing laws) may result in reputational harm, employee disengagement, loss of customers or business partners, regulatory or investor engagement, or other adverse impacts to our business. This and other stakeholder expectations will likely lead to increased costs as well as scrutiny that could heighten all of the risks identified in this risk factor. Such ESG matters may also impact our suppliers, customers, capital providers, and other stakeholders, which may compound or cause new impacts on our business, financial condition, or results of operations.

Previous wording

We are subject to governmental regulation and other legal obligations, particularly related to privacy, data protection and information security and our actual or perceived failure to comply with such obligations could harm our business. Compliance with such laws could also impair our efforts to maintain and expand our customer and user bases, and thereby decrease our revenue.

Current wording

We are subject to governmental regulation and other legal obligations, particularly related to privacy, data protection and information security and our actual or perceived failure to comply with such obligations could materially harm our business. Compliance with such laws could also impair our efforts to maintain and expand our customer and user bases, and thereby decrease our revenue.

Previous wording

Our handling of data is subject to a variety of laws and regulations, including regulation by various government agencies, including the U.S. Federal Trade Commission (the “FTC”), and various state, local and foreign agencies. We collect personally identifiable information and other data from our customers and the end-customers they serve and use this information to provide services to such customers and end-customers, as well as to support, expand and improve our business.

Current wording

In connection with running our business, we receive, store, use and otherwise process information that relates to individuals and/or constitutes “personal data,” “personal information,” “personally identifiable information,” or similar terms under applicable data privacy laws (collectively, “Personal Information”). Our handling of Personal Information is subject to a variety of laws and regulations, including regulation by various government agencies, including the U.S. Federal Trade Commission (the “FTC”), and various state, local and foreign agencies. We collect Personal Information and other data from our customers and the end-customers they serve and use this Personal Information for various purposes, including to provide services to such customers and end-customers, as well as to support, expand and improve our business.

Previous wording

U.S. and foreign governments have adopted or proposed limitations on the collection, distribution, use and storage of personal information of individuals. In the United States, the FTC and many state attorneys general are applying federal and state consumer protection laws as imposing standards for the online collection, use and dissemination of data, through websites or otherwise, and as regulating the presentation of website content. However, these obligations may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another and may conflict with other requirements or our practices. At the state level, lawmakers continue to pass new laws concerning privacy and data security. For example, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”) requires covered businesses that process the personal information of California residents to, among other things: (i) provide certain disclosures to California residents regarding the business’s collection, use, and disclosure of their personal information; (ii) receive and respond to requests from California residents to access, delete, and correct their personal information, or to opt out of certain disclosures of their personal information; and (iii) enter into specific contractual provisions with service providers that process California resident personal information on the business’s behalf.

Current wording

U.S. (including U.S. state) and foreign governments have adopted laws and regulations on the collection, distribution, use and storage of Personal Information of individuals. At the state level, lawmakers continue to enact new laws concerning privacy and data security. For example, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”) requires covered businesses that process the Personal Information of California residents to, among other things: (i) provide certain disclosures to California residents regarding the business’s collection, use, and disclosure of their Personal Information; (ii) receive and respond to requests from California residents to access, delete, and correct their Personal Information, or to opt out of certain disclosures of their Personal Information; and (iii) enter into specific contractual provisions with service providers that process California resident Personal Information on the business’s behalf.

Previous wording

Similar laws have passed in other states, and are continuing to be proposed at the state and federal level. Recent and new state and federal legislation relating to privacy may add additional complexity, variation in requirements, restrictions and potential legal risk, require additional investment in resources to compliance programs, could impact strategies and availability of previously useful data and could result in increased compliance costs and/or changes in business practices and policies.

Current wording

Similar laws have been enacted in other states, and are continuing to be proposed at the state and federal level. Recent and new state and federal legislation relating to privacy may add additional complexity, variation in requirements, restrictions and potential legal risk, require additional investment in resources to compliance programs, could impact strategies and availability of previously useful data and could result in increased compliance costs and/or changes in business practices and policies. Additionally, these obligations may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another and may conflict with other requirements or other practices.

Previous wording

HIPAA imposes privacy, security and breach notification obligations on “covered entities,” including certain health care providers, health plans, and health care clearinghouses, and their respective “business associates” that create, receive, maintain or transmit individually identifiable health information for or on behalf of a covered entity, with respect to safeguarding the privacy, security and transmission of individually identifiable health information, as well as their covered subcontractors. Entities that are found to be in violation of HIPAA, whether as the result of a breach of unsecured protected health information (“PHI”), a complaint about privacy practices, or an audit by the U.S. Department of Health and Human Services (“HHS”), may be subject to significant civil, criminal, and administrative fines and penalties and/or additional reporting and oversight obligations if required to enter into a resolution agreement and corrective action plan with HHS to settle allegations of HIPAA non-compliance. Additionally, if we or our subcontractor business associates fail to comply with HIPAA or contractual requirements, or are otherwise involved in a HIPAA data breach, we may face significant fines and penalties, ongoing compliance requirements, reputational harm, contractual reimbursement, recoupment or other obligations, FTC enforcement actions and private litigation brought by impacted individuals.

Current wording

Certain of our software and technology-enabled services are intended for use in collecting, storing and displaying clinical and health care-related information used in the diagnosis and treatment of patients and in related health care settings such as registration, scheduling and billing. HIPAA imposes privacy, security and breach notification obligations on “covered entities,” including certain health care providers, health plans, and health care clearinghouses, and their respective “business associates” that create, receive, maintain or transmit individually identifiable health information for or on behalf of a covered entity, with respect to safeguarding the privacy, security and transmission of individually identifiable health information, as well as their covered subcontractors. Entities that are found to be in violation of HIPAA, whether as the result of a breach of unsecured protected health information (“PHI”), a complaint about privacy practices, or an audit by the U.S. Department of Health and Human Services (“HHS”), may be subject to significant civil, criminal, and administrative fines and penalties and/or additional reporting and oversight obligations if required to enter into a resolution agreement and corrective action plan with HHS to settle allegations of HIPAA non-compliance. Additionally, if we or our subcontractor business associates fail to comply with HIPAA or contractual requirements, or are otherwise involved in a HIPAA data breach, we may face significant fines and penalties, ongoing compliance requirements, reputational harm, contractual reimbursement, recoupment or other obligations, FTC enforcement actions and private litigation brought by impacted individuals.

Previous wording

Furthermore, the FTC and many state Attorneys General continue to enforce federal and state consumer protection laws against companies for online collection, use, dissemination and security practices that appear to be unfair or deceptive. The FTC has authority to initiate enforcement actions against entities that make deceptive statements about privacy and data sharing in privacy policies, fail to limit third-party use of personal health information, fail to implement policies to protect personal health information or engage in other unfair practices that harm customers. For example, according to the FTC, failing to take appropriate steps to keep consumers’ personal information secure can constitute unfair acts or practices in or affecting commerce in violation of Section 5(a) of the Federal Trade Commission Act. The FTC expects a company’s data security measures to be reasonable and appropriate in light of the sensitivity and volume of consumer information it holds, the size and complexity of its business, and the cost of available tools to improve security and reduce vulnerabilities. Additionally, federal and state consumer protection laws are increasingly being applied by FTC and state Attorneys General to regulate the collection, use, storage, and disclosure of personal information, through websites or otherwise, and to regulate the presentation of website content.

Current wording

Furthermore, the FTC and many state Attorneys General continue to enforce federal and state consumer protection laws against companies for online collection, use, dissemination and security practices that appear to be unfair or deceptive. The FTC has authority to initiate enforcement actions against entities that make deceptive statements about privacy and data sharing in privacy policies, fail to limit third-party use of Personal Information, fail to implement policies to protect Personal Information or engage in other unfair practices that harm customers. For example, according to the FTC, failing to take appropriate steps to keep consumers’ Personal Information secure can constitute unfair acts or practices in or affecting commerce in violation of Section 5(a) of the Federal Trade Commission Act. The FTC expects a company’s data security measures to be reasonable and appropriate in light of the sensitivity and volume of Personal Information it holds, the size and complexity of its business, and the cost of available tools to improve security and reduce vulnerabilities.

Previous wording

Among other requirements, the GDPR regulates transfers of personal data subject to the GDPR to third countries that have not been found to provide adequate protection to such personal data, including the United States, and the efficacy and longevity of current transfer mechanisms between the EEA, and the United States remains uncertain. Case law from the Court of Justice of the European Union (“CJEU”) states that reliance on the standard contractual clauses - a standard form of contract approved by the European Commission as an adequate personal data transfer mechanism - alone may not necessarily be sufficient in all circumstances and that transfers must be assessed on a case-by-case basis. We expect the existing legal complexity and uncertainty regarding international personal data transfers to continue. As a result, we may have to make certain operational changes and we will have to implement revised standard contractual clauses and other relevant documentation for existing data transfers within required time frames.

Current wording

Among other requirements, the GDPR regulates transfers of Personal Information subject to the GDPR to third countries that have not been found to provide adequate protection to such Personal Information, including the United States, and the efficacy and longevity of current transfer mechanisms between the EEA, and the United States remains uncertain. Case law from the Court of Justice of the European Union (“CJEU”) states that reliance on the standard contractual clauses - a standard form of contract approved by the European Commission as an adequate Personal Information transfer mechanism - alone may not necessarily be sufficient in all circumstances and that transfers must be assessed on a case-by-case basis. We expect the existing legal complexity and uncertainty regarding international Personal Information transfers to continue. As a result, we may have to make certain operational changes and we will have to implement revised standard contractual clauses and other relevant documentation for existing data transfers within required time frames.

Previous wording

Privacy, security and data protection laws and regulations, and any other such changes or new laws or regulations, could impose significant limitations, require changes to our business, or restrict our use or storage of personal information, which may increase our compliance expenses and make our business more costly or less efficient to conduct. In addition, any such changes could compromise our ability to develop an adequate marketing strategy and pursue our growth strategy effectively, which, in turn, could adversely affect our business, financial condition, and results of operations. The interpretations and measures conducted by us in our efforts to comply with the applicable data protection laws may have been or may prove to be insufficient or incorrect. If our privacy or data security measures or practices fail to comply with current or future laws and regulations, we may be subject to claims, legal proceedings or other actions by individuals or governmental authorities based on privacy or data protection regulations and our commitments to customers and users, as well as negative publicity and a potential loss of business. As we continue to expand into other foreign countries and jurisdictions, we may also be subject to additional laws and regulations that may affect how we conduct business. Moreover, if future laws and regulations limit our customers and users’ ability to use and share personal information or our ability to store, process and share personal information, demand for our solutions could decrease, our costs could increase, and our business, results of operations and financial condition could be harmed.

Current wording

Privacy, security and data protection laws and regulations, and any other such changes or new laws or regulations, could impose significant limitations, require changes to our business, or restrict our use or storage of Personal Information, which may increase our compliance expenses and make our business more costly or less efficient to conduct. In addition, any such changes could compromise our ability to develop an adequate marketing strategy and pursue our growth strategy effectively, which, in turn, could adversely affect our business, financial condition, and results of operations. The interpretations and measures conducted by us in our efforts to comply with the applicable data protection laws may have been or may prove to be insufficient or incorrect. If our privacy or data security measures or practices fail to comply with current or future laws and regulations, we may be subject to claims (including class action litigation), legal proceedings or other actions by individuals or governmental authorities based on privacy or data protection regulations and our commitments to customers and users, as well as negative publicity and a potential loss of business. As we continue to expand into other foreign countries and jurisdictions, we may also be subject to additional laws and regulations that may affect how we conduct business. Moreover, if future laws and regulations limit our customers and users’ ability to use and share Personal Information or our ability to store, process and share Personal Information, demand for our solutions could decrease, our costs could increase, and our business, results of operations and financial condition could be harmed.

Previous wording

In Europe, on May 21, 2024, the European Union legislators approved the EU Artificial Intelligence Act (the “EU AI Act”), which establishes a comprehensive, risk-based governance framework for AI in the EU market. The EU AI Act, as well as developing interpretation and application of the GDPR in respect of automated decision making, together with developing guidance and/or decisions in this area, may affect our use of AI Technologies and our ability to provide, improve or commercialize our services, require additional compliance measures and changes to our operations and processes, and result in increased compliance costs and potential increases in civil claims against us, and could adversely affect our business, operations and financial condition.

Current wording

In Europe, on May 21, 2024, the European Union legislators approved the EU Artificial Intelligence Act (the “EU AI Act”), which establishes a comprehensive, risk-based governance framework for AI in the EU market. The majority of the substantive requirements of the EU AI Act will come into force in August 2026. The EU AI Act applies to companies that develop, use and/or provide AI in the EU and, depending on the AI use case, includes requirements around transparency, conformity assessments and monitoring, risk assessments, human oversight, security, accuracy, general purpose AI and foundation models, and fines for breach of up to 7% of worldwide annual turnover. Once fully applicable, the EU AI Act will have a material impact on the way AI is regulated in the EU. The EU AI Act, as well as developing interpretation and application of the GDPR in respect of automated decision making, together with developing guidance and/or decisions in this area, may affect our use of AI Technologies and our ability to provide, improve or commercialize our services, require additional compliance measures and changes to our operations and processes, and result in increased compliance costs and potential increases in civil claims against us, and could adversely affect our business, operations and financial condition.

Previous wording

The parties to our sponsor stockholders agreement own approximately 83.0% of our common stock. We have agreed to nominate to our board of directors individuals designated by Providence Strategic Growth and Silver Lake in accordance with the sponsor stockholders agreement. Providence Strategic Growth and Silver Lake each retain the right to designate directors for so long as they beneficially own at least 5% of the aggregate number of shares of common stock outstanding. In addition, for so long as Providence Strategic Growth and Silver Lake collectively beneficially own at least 30% of the aggregate number of shares of common stock outstanding, certain actions by us or any of our subsidiaries require the prior written consent of each of Providence Strategic Growth and Silver Lake so long as such stockholder is entitled to designate at least two (2) directors for nomination to our board of directors. The actions that require prior written consent include: (i) change in control transactions, (ii) acquiring or disposing of assets or any business enterprise or division thereof for consideration in excess of $500.0 million in any single transaction or series of transactions, (iii) increasing or decreasing the size of our board of directors, (iv) terminating the employment of our chief executive officer or hiring a new chief executive officer, (v) initiating any liquidation, dissolution, bankruptcy or other insolvency proceeding involving us or any of our significant subsidiaries and (vi) any transfer, issue, issuance, sale or disposition of any shares of common stock, other equity securities, equity-linked securities or securities that are convertible into equity securities of us or our subsidiaries to any person or entity that is a non-strategic financial investor in a private placement transaction or series of transactions.

Current wording

The parties to our sponsor stockholders agreement own approximately 85.7% of our common stock. We have agreed to nominate to our board of directors individuals designated by Providence Strategic Growth and Silver Lake in accordance with the sponsor stockholders agreement. Providence Strategic Growth and Silver Lake each retain the right to designate directors for so long as they beneficially own at least 5% of the aggregate number of shares of common stock outstanding. In addition, for so long as Providence Strategic Growth and Silver Lake collectively beneficially own at least 30% of the aggregate number of shares of common stock outstanding, certain actions by us or any of our subsidiaries require the prior written consent of each of Providence Strategic Growth and Silver Lake so long as such stockholder is entitled to designate at least two (2) directors for nomination to our board of directors. The actions that require prior written consent include: (i) change in control transactions, (ii) acquiring or disposing of assets or any business enterprise or division thereof for consideration in excess of $500.0 million in any single transaction or series of transactions, (iii) increasing or decreasing the size of our board of directors, (iv) terminating the employment of our chief executive officer or hiring a new chief executive officer, (v) initiating any liquidation, dissolution, bankruptcy or other insolvency proceeding involving us or any of our significant subsidiaries and (vi) any transfer, issue, issuance, sale or disposition of any shares of common stock, other equity securities, equity-linked securities or securities that are convertible into equity securities of us or our subsidiaries to any person or entity that is a non-strategic financial investor in a private placement transaction or series of transactions.

Previous wording

The parties to our stockholders agreements collectively own approximately 88.0% of our outstanding shares of common stock. In addition to the limitations on the sale and transfer of shares of common stock held by such stockholders as set forth in the stockholders agreements, subject to the restrictions described in the paragraph below, future sales of these shares in the public market will be subject to the volume and other restrictions of Rule 144 under the Securities Act, for so long as such parties are deemed to be our affiliates, unless the shares to be sold are registered with the SEC. These stockholders are entitled to rights with respect to the registration of their shares. We are unable to predict with certainty whether or when such parties will sell a substantial number of shares of our common stock. The sale by the parties to our stockholders agreements of a substantial number of shares, or a perception that such sales could occur, could significantly reduce the market price of our common stock.

Current wording

The parties to our stockholders agreements collectively own approximately 90.1% of our outstanding shares of common stock. In addition to the limitations on the sale and transfer of shares of common stock held by such stockholders as set forth in the stockholders agreements, subject to the restrictions described in the paragraph below, future sales of these shares in the public market will be subject to the volume and other restrictions of Rule 144 under the Securities Act, for so long as such parties are deemed to be our affiliates, unless the shares to be sold are registered with the SEC. These stockholders are entitled to rights with respect to the registration of their shares. We are unable to predict with certainty whether or when such parties will sell a substantial number of shares of our common stock. The sale by the parties to our stockholders agreements of a substantial number of shares, or a perception that such sales could occur, could significantly reduce the market price of our common stock.

Previous wording

We filed registration statements on Form S-8 registering under the Securities Act the shares of our common stock reserved for issuance under our incentive plan. If equity securities granted under our incentive plan are sold or it is perceived that they will be sold in the public market, the trading price of our common stock could decline substantially. These sales also could impede our ability to raise future capital.

Current wording

We have filed registration statements on Form S-8 registering under the Securities Act the shares of our common stock reserved for issuance under our incentive plans. If equity securities granted under our incentive plans are sold or it is perceived that they will be sold in the public market, the trading price of our common stock could decline substantially. These sales also could impede our ability to raise future capital.

Showing the first 40 of 43 pairs. Open the source sections for the rest.

Rearranged current paragraphs (2)

Current report — wording carried from elsewhere

Moreover, we rely on third parties, such as Worldpay, PayPal and other payment processing partners, for specific services, software and hardware used in providing our solutions and services. Some of these organizations and service providers are our competitors or provide similar services and technology to our competitors, and we may not have long-term contracts with them. If these contracts are canceled or we are unable to renew them on commercially reasonable terms, or at all, our business, financial condition and results of operation could be adversely impacted. The termination by our service or technology providers of their agreements with us or their failure to perform their services efficiently and effectively may adversely affect our relationships with our clients and, if we cannot find alternate providers quickly, may cause those clients to terminate their processing agreements with us.

Current report — wording carried from elsewhere

The regulatory framework for AI Technologies is rapidly evolving as many federal, state and foreign government bodies and agencies have introduced or are currently considering additional laws and regulations. Additionally, existing laws and regulations may be interpreted in ways that would affect the operation of our AI Technologies. As a result, implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and we cannot yet determine the impact future laws, regulations, standards, or market perception of their requirements may have on our business and may not always be able to anticipate how to respond to these laws or regulations.