Biggest changeRisks Related to Cybersecurity Cyberattacks, including the Cyber Incident, and other security incidents have resulted, and in the future may result, in compromises or breaches of our, our MSP partners’, or their SME customers’ systems, the insertion of malicious code, malware, ransomware or other vulnerabilities into our, our MSP partners’, or their SME customers’ systems, the exploitation of vulnerabilities in our, our MSP partners’, or their SME customers’ environments, the theft or misappropriation of our, our MSP partners’, or their SME customers’ proprietary and confidential information, and interference with our, our MSP partners’, or their SME customers’ operations, exposure to legal and other liabilities, higher MSP partner and employee attrition and the loss of key personnel, negative impacts to our sales, renewals and upgrades and reputational harm and other serious negative consequences, any or all of which could materially harm our business.
Biggest changeAny of these risks could be difficult to eliminate or manage, and if not addressed, could have a negative effect on our business, operating results and financial condition. 37 Table of Contents Risks Related to Cybersecurity Cyberattacks, including the Cyber Incident, and other security incidents have resulted, and in the future may result, in compromises or breaches of our, our IT services provider customers’, or their SMB and mid-market customers’ systems, the insertion of malicious code, malware, ransomware or other vulnerabilities into our, our IT services provider customers’, or their SMB and mid-market customers’ systems, the exploitation of vulnerabilities in our, our T services provider customers’, or their SMB and mid-market customers’ environments, the theft or misappropriation of our, our IT services provider customers’, or their SMB and mid-market customers’ proprietary and confidential information, and interference with our, our IT services provider customers’, or their SMB and mid-market customers’ operations, exposure to legal and other liabilities, higher customer and employee attrition and the loss of key personnel, negative impacts to our sales, renewals and upgrades and reputational harm and other serious negative consequences, any or all of which could materially harm our business.
SolarWinds has informed us that it has notified the applicable regulators in the European Union and the United States, as well as the impacted individuals where required, with respect to the personal information contained in the email accounts of certain current and former employees and customers to which the threat actor gained access.
SolarWinds has informed us that it notified the applicable regulators in the European Union and the United States, as well as the impacted individuals where required, with respect to the personal information contained in the email accounts of certain current and former employees and customers to which the threat actor gained access.
Under the NYSE rules, a company of which more than 50% of the voting power is held by another person or group of persons acting together is a controlled company and may elect not to comply with certain NYSE corporate governance requirements, including the requirements that: • a majority of the board of directors consist of independent directors as defined under the rules of the NYSE; • the nominating and governance committee be composed entirely of independent directors with a written charter addressing the committee’s purpose and responsibilities; and • the compensation committee be composed entirely of independent directors with a written charter addressing the committee’s purpose and responsibilities.
Under the NYSE rules, a company of which more than 50% of the voting power is held by another person or group of persons acting together is a controlled company and may elect not to comply with certain NYSE corporate governance requirements, including the requirements that: • a majority of the board of directors consist of independent directors as defined under the rules of the NYSE; and • the nominating and governance committee and compensation committee be composed entirely of independent directors with a written charter addressing the committee’s purpose and responsibilities.
Additionally, the U.S. Tax Cuts and Jobs Act of 2017 (the “Tax Act”), which was enacted on December 22, 2017, requires complex computations to be performed, significant judgments to be made in the interpretation of the provisions of the Tax Act, significant estimates in calculations and the preparation and analysis of information not previously relevant or regularly produced. The U.S.
Tax Cuts and Jobs Act of 2017 (the “Tax Act”), which was enacted on December 22, 2017, requires complex computations to be performed, significant judgments to be made in the interpretation of the provisions of the Tax Act, significant estimates in calculations and the preparation and analysis of information not previously relevant or regularly produced. The U.S.
Our substantial indebtedness incurred under the credit agreement, combined with our other financial obligations and contractual commitments could have important consequences, including: • requiring us to dedicate a substantial portion of our cash flows from operations to payments on our indebtedness, thereby reducing the funds available for operations, working capital, capital expenditures, acquisitions, product development and other purposes; • increasing our vulnerability to adverse economic and industry conditions, which could place us at a competitive disadvantage compared to our competitors that have relatively less indebtedness; • limiting our flexibility in planning for, or reacting to, changes in our business and the industries in which we operate; • restricting us from making investments or strategic acquisitions or causing us to make non-strategic divestitures; • requiring us under certain circumstances to repatriate earnings from our international operations in order to make payments on our indebtedness, which could subject us to local country income and withholding taxes and/or state income taxes that are not currently accrued in our financial statements; 33 Table of Contents • requiring us to liquidate short-term or long-term investments in order to make payments on our indebtedness, which could generate losses; • exposing us to the risk of increased interest rates as borrowings under the credit agreement are subject to variable rates of interest; and • limiting our ability to borrow additional funds, or to dispose of assets to raise funds, if needed, for working capital, capital expenditures, acquisitions, product development and other corporate purposes.
Our substantial indebtedness incurred under the credit agreement, combined with our other financial obligations and contractual commitments could have important consequences, including: • requiring us to dedicate a substantial portion of our cash flows from operations to payments on our indebtedness, thereby reducing the funds available for operations, working capital, capital expenditures, acquisitions, product development and other purposes; • increasing our vulnerability to adverse economic and industry conditions, which could place us at a competitive disadvantage compared to our competitors that have relatively less indebtedness; • limiting our flexibility in planning for, or reacting to, changes in our business and the industries in which we operate; • restricting us from making investments or strategic acquisitions or causing us to make non-strategic divestitures; • requiring us under certain circumstances to repatriate earnings from our international operations in order to make payments on our indebtedness, which could subject us to local country income and withholding taxes and/or state income taxes that are not currently accrued in our financial statements; • requiring us to liquidate short-term or long-term investments in order to make payments on our indebtedness, which could generate losses; • exposing us to the risk of increased interest rates as borrowings under the credit agreement are subject to variable rates of interest; and • limiting our ability to borrow additional funds, or to dispose of assets to raise funds, if needed, for working capital, capital expenditures, acquisitions, product development and other corporate purposes.
Furthermore, because we have ceased to be an emerging growth company as of December 31, 2023, we are now required to have our independent registered public accounting firm attest to the effectiveness of our internal controls.
Furthermore, because we ceased to be an emerging growth company as of December 31, 2023, we are required to have our independent registered public accounting firm attest to the effectiveness of our internal controls.
Moreover, because many of the features of our offerings use, store and report on SME data, which may contain personal data, any inability to adequately address privacy concerns, to honor a data subject request, to delete stored data at the relevant times, or to comply with applicable privacy laws, regulations and policies could, even if unfounded, result in liability to us and, damage to our reputation, loss of sales and harm to our business.
Moreover, because many of the features of our offerings use, store and report on SMB data, which may contain personal data, any inability to adequately address privacy concerns, to honor a data subject request, to delete stored data at the relevant times, or to comply with applicable privacy laws, regulations and policies could, even if unfounded, result in liability to us and, damage to our reputation, loss of sales and harm to our business.
The discovery of new or different information regarding the Cyber Incident, including with respect to its scope, the activities of the threat actor within the shared SolarWinds environment and the related impact on any of our systems, solutions, current or former employees and MSP partners, could increase our costs and liabilities related to the Cyber Incident and expose us to claims, investigations by U.S. federal and state and foreign governmental officials and agencies, civil and criminal litigation, including securities class action and other lawsuits, and other liability, resulting in material remedial and other expenses which may not be covered by insurance, including fines and further damage to our business, reputation, intellectual property, results of operations and financial condition.
The discovery of new or different information regarding the Cyber Incident, including with respect to its scope, the activities of the threat actor within the shared SolarWinds environment and the related impact on any of our systems, solutions, current or former employees and customers, could increase our costs and liabilities related to the Cyber Incident and expose us to claims, investigations by U.S. federal and state and foreign governmental officials and agencies, civil and criminal litigation, including securities class action and other lawsuits, and other liability, resulting in material remedial and other expenses which may not be covered by insurance, including fines and further damage to our business, reputation, intellectual property, results of operations and financial condition.
The covenants, among other things, limit our and certain of our subsidiaries’ abilities to: • incur additional indebtedness; • create or incur liens; • engage in mergers, consolidations, amalgamations, liquidations, dissolutions or dispositions; • make investments, acquisitions, loans (including guarantees), advances or capital contributions; • sell, transfer or otherwise dispose of assets, including capital stock of subsidiaries; • conduct, transact or otherwise engage in certain business or operations; • create negative pledges or restrictions on the payment of dividends or payment of other amounts owed from subsidiaries; • make prepayments or repurchases of debt that is subordinated with respect to right of payment; • modify certain documents governing debt that is subordinated with respect to right of payment; • pay dividends and distributions on, or redeem, repurchase or retire our capital stock; and • engage in certain transactions with affiliates.
The covenants, among other things, limit our and certain of our subsidiaries’ abilities to: • incur additional indebtedness; • create or incur liens; • engage in mergers, consolidations, amalgamations, liquidations, dissolutions or dispositions; • make investments, acquisitions, loans (including guarantees), advances or capital contributions; • sell, transfer or otherwise dispose of assets, including capital stock of subsidiaries; • conduct, transact or otherwise engage in certain business or operations; • create negative pledges or restrictions on the payment of dividends or payment of other amounts owed from subsidiaries; • make prepayments or repurchases of debt that is subordinated with respect to right of payment; • modify certain documents governing debt that is subordinated with respect to right of payment; • pay dividends and distributions on, or redeem, repurchase or retire our capital stock; and 35 Table of Contents • engage in certain transactions with affiliates.
Cyberattacks, including the Cyber Incident, and other security incidents have resulted, and in the future may result, in numerous risks and adverse consequences to our business, including that (a) our prevention, mitigation and remediation efforts may not be successful or sufficient, (b) our confidential and proprietary information, including our source code, as well as personal information related to current or former employees and MSP partners, may be accessed, exfiltrated, misappropriated, compromised or corrupted, (c) we incur significant financial, legal, reputational and other harms to our business, including, loss of business, decreased sales, severe reputational damage adversely affecting current and prospective customer, employee or vendor relations and investor confidence, U.S. or foreign regulatory investigations and enforcement actions, litigation, indemnity obligations, damages for contractual breach, penalties for violation of applicable laws or regulations, including laws and regulations in the United States and other jurisdictions relating to the collection, use and security of user and other personally identifiable information and data, significant costs for remediation, impairment of our ability to protect our intellectual property, stock price volatility and other significant liabilities, (d) our insurance coverage, including coverage relating to certain security and privacy damages and claim expenses, may not be available or sufficient to compensate for all liabilities we incur related to these matters or that we may face increased costs to obtain and maintain insurance in the future, and (e) our steps to secure our internal environment, adapt and enhance our software development and build environments and ensure the security and integrity of the solutions that we deliver to our MSP partners may not be successful or sufficient to protect against future threat actors or cyberattacks.
Cyberattacks, including the Cyber Incident, and other security incidents have resulted, and in the future may result, in numerous risks and adverse consequences to our business, including that (a) our prevention, mitigation and remediation efforts may not be successful or sufficient, (b) our confidential and proprietary information, including our source code, as well as personal information related to current or former employees and customers, may be accessed, exfiltrated, misappropriated, compromised or corrupted, (c) we incur significant financial, legal, reputational and other harms to our business, including, loss of business, decreased sales, severe reputational damage adversely affecting current and prospective customer, employee or vendor relations and investor confidence, U.S. or foreign regulatory investigations and enforcement actions, litigation, indemnity obligations, damages for contractual breach, penalties for violation of applicable laws or regulations, including laws and regulations in the United States and other jurisdictions relating to the collection, use and security of user and other personally identifiable information and data, significant costs for remediation, impairment of our ability to protect our intellectual property, stock price volatility and other significant liabilities, (d) our insurance coverage, including coverage relating to certain security and privacy damages and claim expenses, may not be available or sufficient to compensate for all 38 Table of Contents liabilities we incur related to these matters or that we may face increased costs to obtain and maintain insurance in the future, and (e) our steps to secure our internal environment, adapt and enhance our software development and build environments and ensure the security and integrity of the solutions that we deliver to our customers may not be successful or sufficient to protect against future threat actors or cyberattacks.
As a part of SolarWinds and our prior branding as “SolarWinds MSP,” the Cyber Incident has harmed, and may continue to harm, our reputation, our MSP partner and employee relations and our operations and business as a result of both the impact it has had on our relationships with existing and prospective customers and the significant time and resources that our personnel have had and may have to devote to investigating and responding to the Cyber Incident.
As a part of SolarWinds and our prior branding as “SolarWinds MSP,” the Cyber Incident has harmed, and may continue to harm, our reputation, our customer and employee relations and our operations and business as a result of both the impact it has had on our relationships with existing and prospective customers and the significant time and resources that our personnel have had and may have to devote to investigating and responding to the Cyber Incident.
We expect that there will continue to be new proposed laws, regulations and industry standards concerning privacy, data protection and information security in the United States, the European Union and other jurisdictions, and we cannot yet determine the impact such future laws, regulations and standards will have on our business or the businesses of our MSP partners, including, but not limited to the European Union’s General Data Protection Regulation, the UK’s General Data Protection Regulation and U.S. state privacy laws, which created a range of new compliance obligations, and significantly increased financial penalties for noncompliance.
We expect that there will continue to be new proposed laws, regulations and industry standards concerning privacy, data protection and information security in the United States, the European Union and other jurisdictions, and we cannot yet determine the impact such future laws, regulations and standards will have on our business or the businesses of our customers, including, but not limited to the European Union’s General Data Protection Regulation, the UK’s General Data Protection Regulation and U.S. state privacy laws, which created a range of new compliance obligations, and significantly increased financial penalties for noncompliance.
Our restated charter also contains a provision that provides us with protections similar to Section 203 of the Delaware General Corporation Law (the “DGCL”), and prevents us from engaging in a business combination, such as a merger, with an 47 Table of Contents interested stockholder (i.e., a person or group that acquires at least 15% of our voting stock) for a period of three years from the date such person became an interested stockholder, unless (with certain exceptions) the business combination or the transaction in which the person became an interested stockholder is approved in a prescribed manner.
Our restated charter also contains a provision that provides us with protections similar to Section 203 of the Delaware General Corporation Law (the “DGCL”), and prevents us from engaging in a business combination, such as a merger, with an interested stockholder (i.e., a person or group that acquires at least 15% of our voting stock) for a period of three years from the date such person became an interested stockholder, unless (with certain exceptions) the business combination or the transaction in which the person became an interested stockholder is approved in a prescribed manner.
As of December 31, 2023, the Sponsors collectively owned in the aggregate approximately 111,564,512 shares of our common stock. We granted registration rights to the Sponsors with respect to shares of our common stock. Any shares registered pursuant to the registration rights agreement will be freely tradable in the public market, subject to compliance with applicable restrictions.
As of December 31, 2024, the Sponsors collectively owned in the aggregate approximately 111,564,512 shares of our common stock. We granted registration rights to the Sponsors with respect to shares of our common stock. Any shares registered pursuant to the registration rights agreement will be freely tradable in the public market, subject to compliance with applicable restrictions.
We are a controlled company within the meaning of the NYSE rules and, as a result, qualify for and may rely on exemptions from certain corporate governance requirements. As of December 31, 2023, the Sponsors beneficially owned a majority of the combined voting power of all classes of our outstanding voting stock.
We are a controlled company within the meaning of the NYSE rules and, as a result, qualify for and may rely on exemptions from certain corporate governance requirements. As of December 31, 2024, the Sponsors beneficially owned a majority of the combined voting power of all classes of our outstanding voting stock.
In doing so, they have been, and may in the future be, able to breach or compromise our IT systems, including those which we use to design, develop, deploy and support our products, and access and misappropriate our, our current and former employees’ and our MSP partners’ proprietary and confidential information, including our software source code, introduce malware, ransomware or vulnerabilities into our products and systems and create system disruptions or shutdowns.
In doing so, they have been, and may in the future be, able to breach or compromise our IT systems, including those which we use to design, develop, deploy and support our products, and access and misappropriate our, our current and former employees’ and our customers’ proprietary and confidential information, including our software source code, introduce malware, ransomware or vulnerabilities into our products and systems and create system disruptions or shutdowns.
If we were required to pay any significant amount of money in satisfaction of claims under these laws, or any similar laws enacted by other jurisdictions, or if we were forced to cease our business operations for any length of time as a result of our inability to comply fully with any of these laws, our business, operating results and financial condition could be 41 Table of Contents adversely affected.
If we were required to pay any significant amount of money in satisfaction of claims under these laws, or any similar laws enacted by other jurisdictions, or if we were forced to cease our business operations for any length of time as a result of our inability to comply fully with any of these laws, our business, operating results and financial condition could be adversely affected.
Although we take precautions to prevent violations of these laws, our exposure for violating these laws increases as our international presence expands and as we increase sales and operations in foreign jurisdictions. Government regulation of the Internet and e-commerce is evolving, and unfavorable changes or our failure to comply with regulations could harm our operating results.
Although we take precautions to prevent violations of these laws, our exposure for violating these laws increases as our international presence expands and as we increase sales and operations in foreign jurisdictions. 43 Table of Contents Government regulation of the Internet and e-commerce is evolving, and unfavorable changes or our failure to comply with regulations could harm our operating results.
The threat actor also created and moved additional files, including files that may have contained data about our MSP partners and files that may have contained data relating to trial and product activation of our N-central On Demand solution.
The threat actor also created and moved additional files, including files that may have contained data about our customers partners and files that may have contained data relating to trial and product activation of our N-central On Demand solution.
Despite our implementation of security measures and controls, our systems, the systems of our third-party service providers upon which we rely, the systems of our MSP partners and the virtualized systems of our MSP partners, as well as the information that those systems store and process are vulnerable to attack from numerous threat actors, including sophisticated nation-state and nation-state-supported actors (including advanced persistent threat intrusions).
Despite our implementation of security measures and controls, our systems, the systems of our third-party service providers upon which we rely, the systems of our customers and the virtualized systems of our customers, as well as the information that those systems store and process are vulnerable to attack from numerous threat actors, including sophisticated nation-state and nation-state-supported actors (including advanced persistent threat intrusions).
In addition, the legal standards, both in the United States and in foreign countries, relating to the validity, enforceability and scope of protection of intellectual 35 Table of Contents property rights are uncertain and still evolving. Accordingly, despite our efforts, we may be unable to prevent third parties from infringing upon or misappropriating our intellectual property.
In addition, the legal standards, both in the United States and in foreign countries, relating to the validity, enforceability and scope of protection of intellectual property rights are uncertain and still evolving. Accordingly, despite our efforts, we may be unable to prevent third parties from infringing upon or misappropriating our intellectual property.
With respect to the files that may have contained data relating to trial and product activation of our N-central On Demand solutions, although we are unable to determine the actual content of such files, the information included in such files could have contained MSP partner usernames and N-central On Demand initial passwords generated by N-able.
With respect to the files that may have contained data relating to trial and product activation of our N-central On Demand solutions, although we are unable to determine the actual content of such files, the information included in such files could have contained customer usernames and N-central On Demand initial passwords generated by N-able.
In addition, we could suffer adverse publicity and loss of customer confidence were it alleged or found that we did not take adequate measures to assure the confidentiality of the personal data that our MSP partners had given to us. This could result in a loss of MSP partners and revenue that could jeopardize our success.
In addition, we could suffer adverse publicity and loss of customer confidence were it alleged or found that we did not take adequate measures to assure the confidentiality of the personal data that our customers had given to us. This could result in a loss of customers and revenue that could jeopardize our success.
Further, complying with the applicable notice requirements in the event of a security breach could result in significant costs. Additionally, our business efficiencies and economies of scale depend on generally uniform solutions offerings and uniform treatment of MSP partners across all jurisdictions in which we operate.
Further, complying with the applicable notice requirements in the event of a security breach could result in significant costs. Additionally, our business efficiencies and economies of scale depend on generally uniform solutions offerings and uniform treatment of customers across all jurisdictions in which we operate.
Factors that could cause fluctuations in the trading price of our common stock include the following: • announcements of new solutions or technologies, commercial relationships, acquisitions or other events by us or our competitors; • changes in how MSP partners perceive the benefits of our offerings; • changes in subscription revenue from quarter to quarter; • departures of key personnel; • price and volume fluctuations in the overall stock market from time to time; • fluctuations in the trading volume of our shares or the size of our public float; • sales of large blocks of our common stock, including sales by our Sponsors; • actual or anticipated changes or fluctuations in our operating results; • whether our operating results meet the expectations of securities analysts or investors; • changes in actual or future expectations of investors or securities analysts; • litigation involving us, our industry or both; • cybersecurity incidents; • regulatory developments in the United States, foreign countries or both; • general macroeconomic conditions and trends, including market impacts related to the wars in Ukraine and the Middle East, geopolitical tensions in China, inflation, changes in interest rates and the COVID-19 pandemic; • major catastrophic events in our domestic and foreign markets; and • “flash crashes,” “freeze flashes” or other glitches that disrupt trading on the securities exchange on which we are listed.
Factors that could cause fluctuations in the trading price of our common stock include the following: • announcements of new solutions or technologies, commercial relationships, acquisitions or other events by us or our competitors; • changes in how customers perceive the benefits of our offerings; • changes in subscription revenue from quarter to quarter; • departures of key personnel; • price and volume fluctuations in the overall stock market from time to time; • fluctuations in the trading volume of our shares or the size of our public float; 46 Table of Contents • sales of large blocks of our common stock, including sales by our Sponsors; • actual or anticipated changes or fluctuations in our operating results; • whether our operating results meet the expectations of securities analysts or investors; • changes in actual or future expectations of investors or securities analysts; • litigation involving us, our industry or both; • cybersecurity incidents; • regulatory developments in the United States, foreign countries or both; • general macroeconomic conditions and trends, including market impacts related to the wars in Ukraine and the Middle East, geopolitical tensions in China, inflation, and changes in interest rates; • major catastrophic events in our domestic and foreign markets; and • “flash crashes,” “freeze flashes” or other glitches that disrupt trading on the securities exchange on which we are listed.
The Sponsors and their affiliated funds are in the business of making or advising on investments in companies and hold (and may from time to time in the future acquire) interests in or provide advice to businesses that directly or indirectly compete with certain portions of our business or are suppliers or MSP partners of ours.
The Sponsors and their affiliated funds are in the business of making or advising on investments in companies and hold (and may from time to time in the future acquire) interests in or provide advice to businesses that directly or indirectly compete with certain portions of our business or are suppliers or customers of ours.
We have incurred and expect to continue to incur significant expenses related to our cybersecurity initiatives. The Cyber Incident has had and may continue to have an adverse effect on our business, reputation, MSP partner and employee relations, results of operations, financial condition or cash flows.
We have incurred and expect to continue to incur significant expenses related to our cybersecurity initiatives. The Cyber Incident has had and may continue to have an adverse effect on our business, reputation, customer and employee relations, results of operations, financial condition or cash flows.
Although we are unable to determine the actual contents of these files, with respect to the files that may have contained data about our MSP partners, we believe the information included in such files would not have contained highly sensitive personal information, such as credit card, social security, passport or bank account numbers, but could have contained other information such as MSP partner IDs, business email addresses and encrypted MSP partner portal login credentials.
Although we are unable to determine the actual contents of these files, with respect to the files that may have contained data about our customers, we believe the information included in such files would not have contained highly sensitive personal information, such as credit card, social security, passport or bank account numbers, but could have contained other information such as customer IDs, business email addresses and encrypted customer portal login credentials.
The allocation of intellectual property rights and data between SolarWinds and us as part of the Separation and Distribution, the shared use of certain intellectual property rights and data following the Separation and Distribution and 44 Table of Contents restrictions on the use of intellectual property rights, could adversely impact our reputation, our ability to enforce certain intellectual property rights and our competitive position.
The allocation of intellectual property rights and data between SolarWinds and us as part of the Separation and Distribution, the shared use of certain intellectual property rights and data following the Separation and Distribution and restrictions on the use of intellectual property rights, could adversely impact our reputation, our ability to enforce certain intellectual property rights and our competitive position.
We have expended significant costs and expenses related to the Cyber Incident including in connection with investigations, our remediation efforts, our compliance with applicable laws and regulations in connection with the threat actor’s access to and exfiltration of information related to our current or former employees and MSP partners, and our measures to address the damage to our reputation and MSP partner and employee relations.
We have expended significant costs and expenses related to the Cyber Incident including in connection with investigations, our remediation efforts, our compliance with applicable laws and regulations in connection with the threat actor’s access to and exfiltration of information related to our current or former employees and customers, and our measures to address the damage to our reputation and customers and employee relations.
We rely primarily on a combination of patent, copyright, trademark, trade dress, unfair competition and trade secret laws, as well as confidentiality procedures and contractual restrictions, to establish and protect our proprietary rights. These laws, procedures and restrictions provide only limited protection. As of December 31, 2023, we had six issued patents.
We rely primarily on a combination of patent, copyright, trademark, trade dress, unfair competition and trade secret laws, as well as confidentiality procedures and contractual restrictions, to establish and protect our proprietary rights. These laws, procedures and restrictions provide only limited protection. As of December 31, 2024, we had ten issued patents.
Additionally, these events could require us or our MSP partners to pay additional tax amounts on a prospective or retroactive basis, as well as require us or our MSP partners to pay fines and/or penalties and interest for past amounts deemed to be due.
Additionally, these events could require us or our customers to pay additional tax amounts on a prospective or retroactive basis, as well as require us or our customers to pay fines and/or penalties and interest for past amounts deemed to be due.
Customers have and may in the future defer purchasing or choose to cancel 37 Table of Contents or not renew their agreements or subscriptions with us as a result of the Cyber Incident.
Customers have and may in the future defer purchasing or choose to cancel or not renew their agreements or subscriptions with us as a result of the Cyber Incident.
In some instances, we could reasonably use different estimates and assumptions, and changes in estimates are likely to occur from period to period. See the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations-Critical Accounting Policies and Estimates-Revenue Recognition” included in Part II, Item 7 of this Annual Report.
In some instances, we could reasonably use different estimates and assumptions, and changes in estimates are likely to occur from period to period. See the section titled “ Management’s Discussion and Analysis of Financial Condition and Results of Operations-Critical Accounting Policies and Estimates-Revenue Recognition ” included in Part II, Item 7 of this Annual Report.
If we are unable to maintain the trust of our current and prospective MSP partners and their SME customers, negative publicity continues and/or our personnel continue to have to devote significant time to the Cyber Incident, our business, market share, results of operations and financial condition will be negatively affected.
If we are unable to maintain the trust of our current and prospective customers and their SMB and mid-market customers, negative publicity continues and/or our personnel continue to have to devote significant time to the Cyber Incident, our business, market share, results of operations and financial condition will be negatively affected.
In connection with the Cyber Incident, SolarWinds’ investigations have revealed that the threat actor accessed the email accounts of certain of our personnel, some of which contained information related to current or former employees and MSP partners.
In connection with the Cyber Incident, SolarWinds’ investigations revealed that the threat actor accessed the email accounts of certain of our personnel, some of which contained information related to current or former employees and customers.
Any such indemnity obligations could be material and could materially affect our business and financial statements. We may not be able to engage in desirable strategic or capital-raising transactions following the Distribution.
Any such indemnity obligations could be material and could materially affect our business and financial statements. 44 Table of Contents We may not be able to engage in desirable strategic or capital-raising transactions following the Distribution.
In addition, although our premiums for the current year decreased, being a public company subject to these rules and regulations may make it more difficult and more expensive for us to obtain director and officer liability insurance and we may be required to accept reduced policy limits and coverage or incur substantially higher costs to obtain the same or similar coverage.
In addition, being a public company subject to these rules and regulations may make it more difficult and more expensive for us to obtain director and officer liability insurance and we may be required to accept reduced policy limits and coverage or incur substantially higher costs to obtain the same or similar coverage.
We attributed this deceleration primarily to increased churn and downgrades from existing MSP partners and slower MSP partner adds. Future pandemics or health epidemics may also adversely affect our productivity, employee morale, future sales, operating results, and overall financial performance.
We attributed this deceleration primarily to increased churn and downgrades from existing customers and slower customer adds. Future pandemics or health epidemics may also adversely affect our productivity, employee morale, future sales, operating results, and overall financial performance.
Failure to comply with laws concerning privacy, data protection and information security could result in enforcement action against us, including fines, imprisonment of company officials and public censure, claims for damages by our MSP partners, their SME customers, and other affected individuals, damage to our reputation and loss of goodwill (both in relation to existing MSP partners and their SME customers and prospective MSP partners and their SME customers), any of which could have a material adverse effect on our operations, financial performance and business.
Failure to comply with laws concerning privacy, data protection and information security could result in enforcement action against us, including fines, imprisonment of company officials and public censure, claims for damages by our customers, their SMB and mid-market customers, and other affected individuals, damage to our reputation and loss of goodwill (both in relation to existing IT services provider customers and their SMB and mid-market customers and prospective IT services provider customers and their SMB and mid-market customers), any of which could have a material adverse effect on our operations, financial performance and business.
It is possible that the decision will restrict the ability to transfer personal data from the European Union to the United States, and we may, in addition to other impacts, experience additional costs associated with increased compliance burdens, and we, our MSP partners, and their SME customers face the potential for regulators in the EEA to apply different standards to the transfer of personal data from the EEA to the United States, and to block, or require ad hoc verification of measures taken with respect to, certain data flows from the EEA to the United States.
It is possible that the decision will restrict the ability to transfer personal data from the European Union to the United States, and we may, in addition to other impacts, experience additional costs associated with increased compliance burdens, and we, our customers, and their 42 Table of Contents SMB and mid-market customers face the potential for regulators in the EEA to apply different standards to the transfer of personal data from the EEA to the United States, and to block, or require ad hoc verification of measures taken with respect to, certain data flows from the EEA to the United States.
As of December 31, 2023, Silver Lake and Thoma Bravo, together with their respective funds and, as applicable, their co-investors (collectively, the “Sponsors”) collectively owned in the aggregate approximately 111,564,512 shares of our common stock, representing approximately 60.9% of the voting power of our common stock as of such time.
As of December 31, 2024, Silver Lake and Thoma Bravo, together with their respective funds and, as applicable, their co-investors (collectively, the “Sponsors”) collectively owned in the aggregate approximately 111,564,512 shares of our common stock, representing approximately 59.5% of the voting power of our common stock as of such time.
If material weaknesses in our internal control over financial reporting are discovered or occur in the future, our consolidated financial statements may contain material misstatements and we could be required to restate our financial results, which could materially and adversely affect our business, results of operations, and financial condition, restrict our ability to access the capital markets, require us to expend significant resources to correct the material weakness, subject us to fines, penalties or judgments, harm our reputation, or otherwise cause a decline in investor confidence.
If material weaknesses in our internal control over financial reporting are discovered or occur in the future, our consolidated financial statements may contain material misstatements and we could be required to restate our financial results, which could materially and adversely affect our business, results of operations, and financial condition, restrict our ability to access the capital markets, require us to expend significant resources to correct the material weakness, subject us to fines, penalties or judgments, harm our reputation, or otherwise cause a decline in investor confidence. 40 Table of Contents Changes in financial accounting standards or practices may cause adverse, unexpected financial reporting fluctuations and affect our reported results of operations.
In addition, in connection with the private placement completed just prior to the Separation and Distribution, we granted registration rights to certain investors with respect to the 20,623,282 aggregate shares of our common stock purchased by them in the Private Placement, of which 8,314,146 remain unsold by the selling stockholders as of December 31, 2023.
In addition, in connection with the private placement completed just prior to the Separation and Distribution, we granted registration rights to certain investors with respect to the 20,623,282 aggregate shares of our common stock purchased by them in the Private Placement, of which 4,837,521 remain unsold by the selling stockholders as of December 31, 2024.
We are heavily dependent on our technology infrastructure to operate our business, and our MSP partners rely on our solutions to help manage and secure their IT infrastructure and environments, and that of their SME customers, including the protection of confidential information.
We are heavily dependent on our technology infrastructure to operate our business, and our customers rely on our solutions to help manage and secure their IT infrastructure and environments, and that of their SMB and mid-market customers, including the protection of confidential information.
Likewise, even once a vulnerability has been addressed, for certain of our products, the fix will only be effective once an MSP partner has updated the impacted product with the latest release, and MSP partners that do not install and run the remediated versions of our products, and their SME customers, may remain vulnerable to attack.
Likewise, even once a vulnerability has been addressed, for certain of our products, the fix will only be effective once a customer has updated the impacted product with the latest release, and customers that do not install and run the remediated versions of our products, and their SMB and mid-market customers, may remain vulnerable to attack.
The COVID-19 pandemic and policies and regulations implemented by governments in response to the COVID-19 pandemic, most of which have been lifted, have had a significant impact, both directly and indirectly, on global businesses and commerce and indirect effects such as worker shortages and supply chain constraints continue to impact segments of the economy.
The COVID-19 pandemic and policies and regulations implemented by governments in response to the COVID-19 pandemic had a significant impact, both directly and indirectly, on global businesses and commerce and indirect effects such as worker shortages and supply chain constraints.
We have experienced, and may in the future experience, security breaches that may remain undetected for an extended period and, therefore, have a greater impact on our solutions, our proprietary data or the data of our MSP partners or their SME customers, and ultimately on our business.
We have experienced, and may in the future experience, security breaches that may remain undetected for an extended period and, therefore, have a greater impact on our solutions, our proprietary data or the data of our IT services provider customers or their SMB and mid-market customers, and ultimately on our business.
We do not believe that any information of the customers of our MSP Partners would have been included in the files that were created by the threat actor.
We do not believe that any information of the SMB and mid-market customers of our customers would have been included in the files that were created by the threat actor.
The Sponsors have entered into a stockholders’ agreement whereby they each agreed, among other things, to vote the shares each beneficially owns in favor of the director nominees designated by Silver Lake and Thoma Bravo, respectively.
The Sponsors have entered into a stockholders’ agreement whereby they each agreed, among other things, to vote the shares each beneficially owns in favor of the director nominees designated by Silver Lake and Thoma Bravo, respectively. Notwithstanding the decision of the Court of Chancery of the State of Delaware, discussed in Note 15.
The Sponsors and their affiliated funds may also pursue acquisitions that may be complementary to our business and, as a result, those acquisition opportunities may not be available to us. 48 Table of Contents Our restated charter provides that no officer or director of the Company who is also an officer, director, employee, partner, managing director, principal, independent contractor or other affiliate of either of the Sponsors will be liable to us or our stockholders for breach of any fiduciary duty by reason of the fact that any such individual pursues or acquires a corporate opportunity for its own account or the account of an affiliate, as applicable, instead of us, directs a corporate opportunity to any other person instead of us or does not communicate information regarding a corporate opportunity to us.
Our restated charter provides that no officer or director of the Company who is also an officer, director, employee, partner, managing director, principal, independent contractor or other affiliate of either of the Sponsors will be liable to us or our stockholders for breach of any fiduciary duty by reason of the fact that any such individual pursues or acquires a corporate opportunity for its own account or the account of an affiliate, as applicable, instead of us, directs a corporate opportunity to any other person instead of us or does not communicate information regarding a corporate opportunity to us.
These restrictions could limit our ability to pursue certain strategic transactions, equity issuances or repurchases or other transactions that we believe may be in the best interests of our stockholders or that might increase the value of our business.
These restrictions could limit our ability to pursue certain strategic transactions, equity issuances or repurchases or other transactions that we believe may be in the best interests of our stockholders or that might increase the value of our business. SolarWinds has agreed to indemnify us, and we have agreed to indemnify SolarWinds, for certain liabilities.
We cannot assure that our internal control over financial reporting will be effective in the future or that a material weakness will not be discovered with respect to a prior period for which we had previously believed that internal controls were effective.
While we believe these controls are effective, they rely substantially on manual processes. We cannot assure that our internal control over financial reporting will be effective in the future or that a material weakness will not be discovered with respect to a prior period for which we had previously believed that internal controls were effective.
However, our restated charter also provides that the Sponsors, including the Silver Lake Funds and the Thoma Bravo Funds and any persons to whom any Silver Lake Fund or Thoma Bravo Fund or any of their respective affiliates sells its common stock, will not constitute “interested stockholders” for purposes of this provision.
However, our restated charter also provides that the Sponsors, including the Silver Lake Funds and the Thoma Bravo Funds and any persons to whom any Silver Lake Fund or Thoma Bravo Fund or any of their respective affiliates sells its common stock, will not constitute “interested stockholders” for purposes of this provision. 48 Table of Contents The Sponsors have a controlling influence over matters requiring stockholder approval.
It is possible that the decision will restrict the ability to transfer personal data from the European Union to the United States and we may, in addition to other impacts, experience additional costs associated with increased compliance burdens, and we, our MSP partners and their SME customers face the potential for regulators in the European Economic Area (the “EEA”) to apply different standards to the transfer of personal data from the EEA to the United States, and to block, or require ad hoc verification of measures taken with respect to, certain data flows from the EEA to the United States.
We may, in addition to other impacts, experience additional costs associated with increased compliance burdens relative to transfers of personal data from the European Union to the United States, and we, our customers and their SMB and mid-market customers face the potential for regulators in the European Economic Area (the “EEA”) to apply different standards to the transfer of personal data from the EEA to the United States, and to block, or require ad hoc verification of measures taken with respect to, certain data flows from the EEA to the United States.
These requirements will not apply to us as long as we remain a controlled company. We may take advantage of these exemptions. Accordingly, you may not have the same protections afforded to stockholders of companies that are subject to all of the corporate governance requirements of the NYSE. 49 Table of Contents ITEM 1B. UNRESOLVED STAFF COMMENTS None.
These requirements will not apply to us as long as we remain a controlled company. Although we do not currently take advantage of these exemptions, we may do so in the future. Accordingly, you may not have the same protections afforded to stockholders of companies that are subject to all of the corporate governance requirements of the NYSE. ITEM 1B.
In October 2023, the SEC filed a complaint against SolarWinds and its chief information officer alleging violations of the Exchange Act and Securities Act relating to SolarWinds’ cybersecurity disclosures and public statements, as well as its internal controls and disclosure controls and procedures. This brought renewed attention to the Cyber Incident and questions from some of our MSP partners.
In October 2023, the SEC filed a complaint against SolarWinds and its chief information officer alleging violations of the Exchange Act and Securities Act relating to SolarWinds’ cybersecurity disclosures and public statements, as well as its internal controls and disclosure controls and procedures.
Given the foregoing factors, our actual results could differ significantly from our estimates, comparing our revenue and operating results on a period-to-period basis may not be meaningful, and our past results may not be indicative of our future performance.
Given the foregoing factors, our actual results could differ significantly from our estimates, comparing our revenue and operating results on a period-to-period basis may not be meaningful, and our past results may not be indicative of our future performance. Our business and financial performance could be negatively impacted by changes in tax laws or regulations.
Our restated charter and restated bylaws contain anti-takeover provisions that could delay or discourage takeover attempts that stockholders may consider favorable. Our amended and restated certificate of incorporation, or our restated charter, and our amended and restated bylaws, or our restated bylaws, contain provisions that could delay or prevent a change in control of our company.
Our amended and restated certificate of incorporation, or our restated charter, and our amended and restated bylaws, or our restated bylaws, contain provisions that could delay or prevent a change in control of our company.
Risks Related to Ownership of Our Common Stock and Our Organizational Structure The requirements of being a public company, including compliance with the reporting requirements of the Exchange Act, the requirements of the Sarbanes-Oxley Act and the requirements of the NYSE, may strain our resources, increase our costs and distract management, and we may be unable to comply with these requirements in a timely or cost-effective manner.
These circumstances could adversely affect our ability to protect our competitive position in the industry and otherwise adversely affect our business, financial condition and results of operations. 45 Table of Contents Risks Related to Ownership of Our Common Stock and Our Organizational Structure The requirements of being a public company, including compliance with the reporting requirements of the Exchange Act, the requirements of the Sarbanes-Oxley Act and the requirements of the NYSE, may strain our resources, increase our costs and distract management, and we may be unable to comply with these requirements in a timely or cost-effective manner.
The market price of our common stock may be higher or lower than the price you pay for our common stock, depending on many factors, some of which are beyond our control and may not be related 45 Table of Contents to our operating performance.
The market price of our common stock may be higher or lower than the price you pay for our common stock, depending on many factors, some of which are beyond our control and may not be related to our operating performance. These fluctuations could cause you to lose all or part of your investment in our common stock.
Our restated charter designates the Court of Chancery of the State of Delaware as the sole and exclusive forum for certain types of actions and proceedings that may be initiated by our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers, employees or agents.
Similarly, the repurchase or redemption rights or liquidation preferences we might assign to holders of preferred stock could affect the residual value of our common stock. 49 Table of Contents Our restated charter designates the Court of Chancery of the State of Delaware as the sole and exclusive forum for certain types of actions and proceedings that may be initiated by our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers, employees or agents.
Our corporate structure and intercompany arrangements are subject to the tax laws of various jurisdictions, and we could be obligated to pay additional taxes, which would harm our operating results. Based on our current corporate structure, we are subject to taxation in several jurisdictions around the world with increasingly complex tax laws, the application of which can be uncertain.
Based on our current corporate structure, we are subject to taxation in several jurisdictions around the world with increasingly complex tax laws, the application of which can be uncertain.
Although we have and expect to continue to deploy significant resources as part of our security infrastructure, we cannot ensure that our steps to secure our internal environment, improve our software development and build environments and protect the security and integrity of the solutions that we deliver will be successful or sufficient to protect against future threat actors or cyberattacks or perceived by existing and prospective MSP partners as sufficient to address the harm caused by the Cyber Incident. 38 Table of Contents Risks Related to Accounting and Taxation Failure to maintain proper and effective internal controls could have a material adverse effect on our business, operating results and stock price.
Although we have and expect to continue to deploy significant resources as part of our security infrastructure, we cannot ensure that our steps to secure our internal environment, improve our software development and build environments and protect the security and integrity of the solutions that we deliver will be successful or sufficient to protect against future threat actors or cyberattacks or perceived by existing and prospective customers partners as sufficient to address the harm caused by the Cyber Incident.
Even if our credit agreement is terminated, any additional debt that we incur in the future could subject us to similar or additional covenants. 34 Table of Contents The credit agreement includes customary events of default, including, among others, failure to pay principal, interest or other amounts; material inaccuracy of representations and warranties; violation of covenants; specified cross-default and cross-acceleration to other material indebtedness; certain bankruptcy and insolvency events; certain ERISA events; certain undischarged judgments; material invalidity of guarantees or grant of security interest; and change of control.
The credit agreement includes customary events of default, including, among others, failure to pay principal, interest or other amounts; material inaccuracy of representations and warranties; violation of covenants; specified cross-default and cross-acceleration to other material indebtedness; certain bankruptcy and insolvency events; certain ERISA events; certain undischarged judgments; material invalidity of guarantees or grant of security interest; and change of control.
Changes in financial accounting standards or practices may cause adverse, unexpected financial reporting fluctuations and affect our reported results of operations. A change in accounting standards or practices can have a significant effect on our reported results and may even affect our reporting of transactions completed before the change is effective.
A change in accounting standards or practices can have a significant effect on our reported results and may even affect our reporting of transactions completed before the change is effective. New accounting pronouncements and varying interpretations of accounting pronouncements have occurred and may occur in the future.
Our business and financial performance could be negatively impacted by changes in tax laws or regulations. 39 Table of Contents New income, sales, use or other tax laws, statutes, rules, regulations or ordinances could be enacted at any time. Further, existing tax laws, statutes, rules, regulations or ordinances could be interpreted, changed, modified or applied adversely to us.
New income, sales, use or other tax laws, statutes, rules, regulations or ordinances could be enacted at any time. Further, existing tax laws, statutes, rules, regulations or ordinances could be interpreted, changed, modified or applied adversely to us.
As a result, Silver Lake and Thoma Bravo could exert significant influence over our operations and business strategy and would together have sufficient voting power to effectively control the outcome of matters requiring stockholder approval.
Commitments and Contingencies in the Notes to Consolidated Financial Statements wherein the Court invalidated certain provisions of the stockholders’ agreement, Silver Lake and Thoma Bravo could exert significant influence over our operations and business strategy and would together have sufficient voting power to effectively control the outcome of matters requiring stockholder approval.
We may issue additional capital stock in the future that will result in dilution to all other stockholders. We may also raise capital through equity financings in the future. As part of our business strategy, we may acquire or make investments in complementary companies, solutions or technologies and issue equity securities to pay for any such acquisition or investment.
As part of our business strategy, we may acquire or make investments in complementary companies, solutions or technologies and issue equity securities to pay for any such acquisition or investment.
If these tax benefits are changed, terminated, not extended or comparable new tax incentives are not introduced, we expect that our effective income tax rate and/or our operating expenses could increase significantly, which could materially adversely affect our financial condition and results of operations. 40 Table of Contents Risks Related to Governmental Regulation We are subject to various global data privacy and security regulations, which could result in additional costs and liabilities to us.
If these tax benefits are changed, terminated, not extended or comparable new tax incentives are not introduced, we expect that our effective income tax rate and/or our operating expenses could increase significantly, which could materially adversely affect our financial condition and results of operations.
Our business is subject to a wide variety of local, state, national and international laws, directives and regulations that apply to the collection, use, retention, protection, disclosure, transfer and other processing of personal data.
Risks Related to Governmental Regulation We are subject to various global data privacy and security regulations, which could result in additional costs and liabilities to us. Our business is subject to a wide variety of local, state, national and international laws, directives and regulations that apply to the collection, use, retention, protection, disclosure, transfer and other processing of personal data.
We intend to retain any earnings to finance the operation and expansion of our business, and we do not anticipate paying any cash dividends in the foreseeable future. As a result, you may receive a return on your investment in our common stock only if the market price of our common stock increases.
We currently do not intend to pay dividends on our common stock. We intend to retain any earnings to finance the operation and expansion of our business, and we do not anticipate paying any cash dividends in the foreseeable future.
Tax authorities could challenge our tax positions we historically have taken, or intend to take in the future, or may audit the tax filings we have made and assess additional taxes. Tax authorities may also assess taxes in jurisdictions where we have not made tax filings.
The taxing rules of the various jurisdictions in which we operate or do business are often complex and subject to differing interpretations. Tax authorities could challenge our tax positions we historically have taken, or intend to take in the future, or may audit the tax filings we have made and assess additional taxes.
Any assessments incurred could be material, and may also involve the imposition of substantial penalties and interest. Significant judgment is required in evaluating our tax positions and in establishing appropriate reserves, and the resolutions of our tax positions are unpredictable. The payment of additional taxes, penalties or interest resulting from any assessments could adversely impact our business and financial performance.
Tax authorities may also assess taxes in 41 Table of Contents jurisdictions where we have not made tax filings. Any assessments incurred could be material, and may also involve the imposition of substantial penalties and interest. Significant judgment is required in evaluating our tax positions and in establishing appropriate reserves, and the resolutions of our tax positions are unpredictable.
We endeavor to enter into agreements with our employees and contractors and with parties with which we do business in order to limit access to and disclosure of our trade secrets and other proprietary information. We cannot be certain that the steps we have taken will prevent unauthorized use, misappropriation or reverse engineering of our technology.
We cannot be certain that third parties do not have blocking patents that could be used to prevent us from marketing or practicing our patented software or technology. 36 Table of Contents We endeavor to enter into agreements with our employees and contractors and with parties with which we do business in order to limit access to and disclosure of our trade secrets and other proprietary information.
The threat actor also moved files to a jump server, which SolarWinds believes was intended to facilitate exfiltration of the files out of the shared environment. Investigations to date have also revealed that the threat actor accessed the email accounts of certain of our personnel, some of which contained information related to current or former employees and MSP partners.
Investigations to date have also revealed that the threat actor accessed the email accounts of certain of our personnel, some of which contained information related to current 39 Table of Contents or former employees and customers.
For term-based licenses bundled with coterminous support, we recognize revenue when the distinct license is made available to the customer, and support revenue is recognized ratably over the contract period.
For term-based licenses bundled with coterminous support, we recognize revenue when the distinct license is made available to the customer, and support revenue is recognized ratably over the contract period. During the year ended December 31, 2024, we began increasing the proportion of our subscriptions that are long-term committed contracts, as compared to month-to-month contracts.
If we fail to achieve some or all of the benefits that we expect to achieve as an independent company, or do not achieve them in the time we expect, our business, financial condition and results of operations could be adversely affected. 42 Table of Contents We could incur significant liability if the Separation and Distribution is determined to be a taxable transaction, and, in certain circumstances, we could be required to indemnify SolarWinds for material taxes and other related amounts pursuant to indemnification obligations under the tax matters agreement.
We could incur significant liability if the Separation and Distribution is determined to be a taxable transaction, and, in certain circumstances, we could be required to indemnify SolarWinds for material taxes and other related amounts pursuant to indemnification obligations under the tax matters agreement.
In addition, the Sarbanes-Oxley Act requires, among other things, that we establish and maintain effective internal controls and procedures for financial reporting and disclosure purposes.
In addition, the Sarbanes-Oxley Act requires, among other things, that we establish and maintain effective internal controls and procedures for financial reporting and disclosure purposes. We are also required to include an attestation report on internal control over financial reporting issued by our independent registered public accounting firm.
Internal control over financial reporting is complex and may be revised over time to adapt to changes in our business, or changes in applicable accounting rules.
Internal control over financial reporting is complex and may be revised over time to adapt to changes in our business, or changes in applicable accounting rules. As we increased the number of contracts that have terms of one or more years, we developed controls around the accounting for these contracts.