Biggest changeRisk Factors Summary This summary provides an overview of the risks we face and should not be considered a substitute for the more fulsome risk factors discussed immediately following this summary. • Risks Related to Our Ability to Grow Our Business • Laws, regulations and customer expectations regarding the use, storage and movement of data may restrict our ability to continue to optimize our platform and adversely affect our business. • We participate in intensely competitive markets, and if we do not compete effectively, our business and operating results will be harmed. • If we fail to innovate in response to rapidly evolving technological and market developments and customer needs, our competitive position and business prospects may be harmed. • If we are unsuccessful in increasing our penetration of international markets or managing the risks associated with foreign markets, our business and operating results will be adversely affected. • We rely on our network of partners for an increasing portion of our revenues, and if these partners fail to perform, our ability to sell and distribute our products may be impacted, and our operating results and growth rate may be harmed. • Doing business with the public sector and heavily-regulated entities subjects us to risks related to government procurement processes, regulations and contracting requirements. • If we fail to comply with applicable anti-corruption and anti-bribery laws, export control laws, economic and trade sanctions laws, or other global trade laws, we could be subject to penalties and civil and/or criminal sanctions and our business could be materially adversely affected. • Targeting larger enterprise customers may result in longer and more expensive sales cycles, increased pricing pressure and implementation and configuration challenges. • As we acquire or invest in companies and technologies, we may not realize the expected business or financial benefits and the acquisitions and investments may divert our management’s attention and result in additional shareholder dilution. • Risks Related to the Operation of Our Business • Actual or perceived cybersecurity events experienced by us or our third-party service providers may create the perception that our platform is not secure, and we may lose customers or incur significant liabilities, which would harm our business, financial condition and operating results. • If we lose key members of our management team or qualified employees or are unable to attract and retain the employees we need, our costs may increase and our business and operating results may be adversely affected. • Delays in the release of, or actual or perceived defects in, our products may slow the adoption of our latest technologies, reduce our ability to efficiently provide services, decrease customer satisfaction, and adversely impact future product sales. • Disruptions or defects in our services could damage our customers’ businesses, subject us to substantial liability and harm our reputation and financial results. • Delays in improving our information systems and processes could interfere with our ability to support our existing and growing customer and employee base and could adversely impact our business. • Lawsuits by third parties that allege we infringe their intellectual property rights could harm our business and operating results. • Our intellectual property protections may not provide us with a competitive advantage, and defending our intellectual property may result in substantial expenses that harm our operating results. • Our use of open-source software could harm our ability to sell our products and services and subject us to possible litigation. • Various factors, including our customers’ business, integration, migration, compliance and security requirements, or errors by us, our partners, or our customers, may cause implementations of our products to be delayed, inefficient or otherwise unsuccessful. 13 Table of Contents • Our failure or perceived failure to achieve our ESG goals or maintain ESG practices that meet evolving stakeholder expectations could adversely affect us. • Natural disasters, including climate change, and other events beyond our control could harm our business. • Risks Related to the Financial Performance or Financial Position of Our Business • Because we generally recognize revenues from our subscription service over the subscription term, a decrease in new subscriptions or renewals may not be immediately reflected in our operating results. • As our business grows, we expect our revenue growth rate to decline over the long term. • Changes in our effective tax rate or disallowance of our tax positions may adversely affect our financial position and results. • Our debt service obligations may adversely affect our financial condition. • Risks Related to General Economic Conditions • Global economic conditions may harm our industry, business and results of operations. • Foreign currency exchange rate fluctuations could harm our financial results. • Risks Related to Ownership of Our Common Stock • Our stock price is likely to continue to be volatile and could subject us to litigation. • Provisions in our governing documents, Delaware law or 2030 Notes might discourage, delay or prevent a change of control or changes in our management and, therefore, depress our stock price.
Biggest changeRisk Factors Summary This summary provides an overview of the risks we face and should not be considered a substitute for the more fulsome risk factors discussed immediately following this summary. • Risks Related to Our Ability to Grow Our Business • Laws, regulations and customer expectations regarding the use, storage and movement of data may restrict our ability to continue to optimize our platform. • A failure to innovate in response to rapidly evolving technological changes and in the midst of an intensely competitive market may harm our competitive position and business prospects. • We may not successfully increase our penetration of international markets or manage risks associated with foreign markets. • Incorporating AI technology into our offerings may result in operational, legal, regulatory, ethical and other challenges. • We rely on our network of partners for an increasing portion of our revenues, and if these partners fail to perform, our business may be harmed. • Doing business with the public sector and heavily-regulated entities subjects us to risks related to government procurement processes, regulations and contracting requirements. • If we fail to comply with applicable anti-corruption and anti-bribery laws, export control laws, economic and trade sanctions laws, or other global trade laws, we could be subject to penalties and civil and/or criminal sanctions and our business could be materially adversely affected. • Our customer deals are becoming more complex, which tend to involve longer and more expensive sales cycles, increased pricing pressure and implementation and configuration challenges. • As we acquire or invest in companies and technologies, we may not realize the expected business or financial benefits and the acquisitions and investments may divert our management’s attention and result in additional shareholder dilution or costs. • Risks Related to the Operation of Our Business • Actual or perceived cybersecurity events experienced by us or our third-party service providers may create the perception that our platform is not secure, and we may lose customers or incur significant liabilities. • We may lose key members of our management team or qualified employees or may not be able to attract and retain employees we need. • Delays in the release of, or actual or perceived defects in, our products may slow the adoption of our latest technologies, reduce our ability to efficiently provide services, decrease customer satisfaction, and adversely impact future product sales. • Disruptions or defects in our services could damage our customers’ businesses, subject us to substantial liability and harm our business. • Delays in improving our information systems and processes could interfere with our ability to support our existing and growing customer and employee base as we scale. • We may not be able to protect or enforce our intellectual property rights. • Our use of open-source software could harm our ability to sell our products and services and subject us to possible litigation. • Various factors, including our customers’ business, integration, migration, compliance and security requirements, or errors by us, our partners, or our customers, may cause implementations of our products to be delayed, inefficient or otherwise unsuccessful. • Our failure or perceived failure to achieve our ESG goals or maintain ESG practices that meet evolving stakeholder expectations could adversely affect us. • We may face natural disasters, including climate change, and other events beyond our control. 14 Table of Contents • Risks Related to the Financial Performance or Financial Position of Our Business • Because we generally recognize revenues from our subscription service over the subscription term, a decrease in new subscriptions or renewals may not be immediately reflected in our operating results. • As our business grows, we expect our revenue growth rate to decline over the long term. • Changes in our effective tax rate or disallowance of our tax positions may adversely affect our business. • We may be adversely affected by our debt service obligations. • Risks Related to General Economic Conditions • Our industry and business may be harmed by global economic conditions. • We may be harmed by foreign currency exchange rate fluctuations. • Risks Related to Ownership of Our Common Stock • Our stock price is likely to continue to be volatile. • Provisions in our governing documents or Delaware law might discourage, delay or prevent a change of control or changes in our management and, therefore, depress our stock price.
Further, during times of war and other major conflicts, we and our third-party providers may be vulnerable to a heightened risk of geopolitically motivated attacks, including cyberattacks, that could materially disrupt our systems and operations, supply chain and ability to provide our services. The cybersecurity threats are not limited to actors operating in the systems we control directly.
Further, during times of war and other major conflicts, we and our third-party providers may be vulnerable to a heightened risk of geopolitically motivated attacks, including cyberattacks, that could materially disrupt our systems and operations, supply chain and ability to provide our services. Cybersecurity threats are not limited to actors operating in the systems we control directly.
As our business grows, we expect our revenue growth rate to decline over the long term. You should not rely on our prior revenue growth as an indication of our future revenue growth.
As our business grows, we expect our revenue growth rate to decline over the long term. You should not rely on our prior revenue growth rate as an indication of our future revenue growth rate.
We have an established compliance program, but there is a risk that our employees, partners, customers and agents, as well as those companies to which we outsource certain of our business operations, could violate our policies and applicable law, exposing us to additional scrutiny and potential liability.
We have an established compliance program, but there is a risk that our employees, partners, vendors, customers and agents, as well as those companies to which we outsource certain of our business operations, could violate our policies and applicable law, exposing us to additional scrutiny and potential liability.
Strategic transactions involve numerous risks, including: • difficulties assimilating or integrating the businesses, technologies, products, personnel or operations of the acquired companies; • failing to achieve the expected benefits of the acquisition or investment; • potential loss of employees of the acquired company; • inability to maintain relationships with customers, suppliers and partners of the acquired business; • potential adverse tax consequences; • disruption to our business and diversion of management attention and other resources; • potential financial, credit or regulatory risks associated with acquired customers, suppliers and partners of the acquired business; • dependence on acquired technologies or licenses for which alternatives may not be available to us or which may involve significant cost or complexity; • in the case of foreign acquisitions, the challenges associated with integrating operations across different cultures, languages, and legal regimes and any currency and regulatory risks associated with specific countries; • introducing increased complexity and burden to maintain the technology platform; • introducing vulnerabilities or threats by integrating acquired technologies or businesses; • data security or privacy risks, compliance requirements, or integration costs from the acquired technology or company; • impairment of our investments or the possibility our investees will be unable to obtain future funding on favorable terms or at all; and • potential unknown liabilities or disputes associated with the acquired businesses.
Strategic transactions involve numerous risks, including: • difficulties assimilating or integrating the businesses, technologies, products, personnel or operations of the acquired companies; • failing to achieve the expected benefits of the acquisition or investment; • potential loss of employees of the acquired company; • inability to maintain relationships with customers, suppliers and partners of the acquired business; 19 Table of Contents • introducing vulnerabilities or threats by integrating acquired technologies or businesses; • introducing increased complexity and burden to maintain the technology platform; • potential adverse tax consequences; • disruption to our business and diversion of management attention and other resources; • potential financial, credit or regulatory risks associated with acquired customers, suppliers and partners of the acquired business; • dependence on acquired technologies or licenses for which alternatives may not be available to us or which may involve significant cost or complexity; • in the case of foreign acquisitions, the challenges associated with integrating operations across different cultures, languages, and legal regimes and any currency and regulatory risks associated with specific countries; • data security or privacy risks, compliance requirements, or integration costs from the acquired technology or company; • impairment of our investments or the possibility our investees will be unable to obtain future funding on favorable terms or at all; and • potential unknown liabilities or disputes associated with the acquired businesses.
While we have experienced significant revenue growth in prior periods, we expect it to decline over the long term due to increasing competition, a decrease in the growth rate of our overall market or other reasons.
While we have experienced significant revenue growth in prior periods, we expect the growth rate to decline over the long term due to increasing competition, a decrease in the growth rate of our overall market or other reasons.
Factors affecting our stock price, some of which are beyond our control, include, among other factors: • changes in the estimates of our operating results, revenue growth, or changes in recommendations by securities analysts; • changes in the average contract term of our customer agreements, timing of renewals and renewal rates; • our ability to meet our financial guidance or financial performance expectations of the securities analysts or investors; • announcements of new products, services or technologies, new applications or enhancements to services, strategic alliances, acquisitions, or other significant events by us or by our competitors; • fluctuations in company valuations, such as high-growth or cloud companies, perceived to be comparable to us; 25 Table of Contents • changes to our management team; • trading activity by directors, executive officers and significant shareholders, or the market’s perception that large shareholders intend to sell their shares; • the inclusion, exclusion, or removal of our stock from any major trading indices; • the size of our market float; • the trading volume of our common stock, including sales following the exercise of outstanding options or vesting of equity awards; • changes in laws or regulations impacting the delivery of our services; • significant litigation or regulatory actions; • the amount and timing of customer payments, payment defaults, operating costs and capital expenditures • the amount and timing of equity awards and the related financial statement expenses; • the impact of new accounting pronouncements; • the inability to conclude that our internal controls over financial reporting are effective; • our ability to accurately estimate the total addressable market for our products and services; and • overall performance of the equity markets.
Factors affecting our stock price, some of which are beyond our control, include, among other factors: • changes in the estimates of our operating results, revenue growth, or changes in recommendations by securities analysts; • changes in the average contract term of our customer agreements, timing of renewals and renewal rates; • our ability to meet our financial guidance or financial performance expectations of the securities analysts or investors; • announcements of new products, services or technologies, new applications or enhancements to services, strategic alliances, acquisitions, or other significant events by us or by our competitors; • fluctuations in company valuations, such as high-growth or cloud companies, perceived to be comparable to us; • changes to our management team; • trading activity by directors, executive officers and significant shareholders, or the market’s perception that large shareholders intend to sell their shares; • the inclusion, exclusion, or removal of our stock from any major trading indices; • the size of our market float; • the trading volume of our common stock, including sales following the exercise of outstanding options or vesting of equity awards; • our issuance or repurchase of shares of our common stock; • changes in laws or regulations impacting the delivery of our services; • significant litigation or regulatory actions; • the amount and timing of customer payments, payment defaults, operating costs and capital expenditures • the amount and timing of equity awards and the related financial statement expenses; • the impact of new accounting pronouncements; • the inability to conclude that our internal controls over financial reporting are effective; • our ability to accurately estimate the total addressable market for our products and services; and • overall performance of the equity markets.
The mere existence of any lawsuit, or any interim or final outcomes, and the public statements related to it (or absence of such statements) by the press, analysts and litigants could be unsettling to our customers and prospective customers.
Further, the mere existence of any lawsuit, or any interim or final outcomes, and the public statements related to it (or absence of such statements) by the press, analysts and litigants could be unsettling to our customers and prospective customers.
In addition, the assessment and response to security incidents, as well as implementation of appropriate safeguards to protect against future incidents, can lead to material economic and operational consequences. These consequences can result regardless of whether the incident is suffered by us, affects our third-party service providers or stems from customers action or inaction.
In addition, the assessment and response to security incidents, as well as implementation of appropriate safeguards to protect against future incidents, can lead to material economic and operational consequences. These consequences can result regardless of whether the incident is suffered by us, affects our third-party service providers or stems from customers’ action or inaction.
Our competitors, other third parties, including practicing entities and non-practicing entities, own large numbers of patents, copyrights, trademarks and trade secrets, which they may use and have used to assert claims of infringement, misappropriation or other violations of IP rights against us. Moreover, the patent portfolios of many of our competitors and other third parties are larger than ours.
Our competitors, other third parties, including practicing entities and non-practicing entities, own large numbers of patents, copyrights, trademarks and trade secrets, which they may use and have used to assert claims of infringement, misappropriation or other violations of IP rights against us. Moreover, the patent portfolios of many of our competitors and other third parties may be larger than ours.
In addition, public sector customers may have contractual, statutory or regulatory rights to terminate current contracts with us or our third-party distributors or resellers for convenience or due to a default, though such risk may be assumed by such third-party distributor or reseller.
Our public sector customers may have contractual, statutory or regulatory rights to terminate current contracts with us or our third-party distributors or resellers for convenience or due to a default, though such risk may be assumed by such third-party distributor or reseller.
An actual or perceived security breach can have a material effect on ServiceNow’s operations, finances and reputation.
An actual or perceived security breach or compromise can have a material effect on ServiceNow’s operations, finances and reputation.
We operate globally and as a result, our business, revenues and profitability are impacted by global macroeconomic conditions.
We operate globally and as a result, our business, revenues and profitability are impacted by global macroeconomic and political conditions.
Our products incorporate software licensed to us by third-party authors under open-source licenses, and we expect to continue to incorporate open-source software into our products and services in the future. We monitor our use of open-source software in an effort to avoid subjecting our products and services to adverse licensing conditions.
Our products incorporate software licensed to us by third-party authors under open-source licenses, and we expect to continue to incorporate open-source software into our products and services in the future. We monitor our use of open-source software to avoid subjecting our products and services to adverse licensing conditions.
The adverse consequences can include accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to data; disruptions to our services; diversion of funds; litigation; indemnification and other contractual obligations; regulatory investigations; government fines and penalties; reputational damage; negative publicity; loss of sales, customers, and partners; mitigation and remediation expenses; and other material costs and liabilities.
The adverse consequences can include accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to data; disruptions to our services; diversion of funds; litigation; indemnification and other contractual obligations; regulatory investigations; government fines and penalties; reputational damage; negative publicity; business and operational interruptions; loss of sales, customers, and partners; mitigation and remediation expenses; and other material costs and liabilities.
Risks associated with making our products and services available in international markets include, for example: • compliance with multiple, conflicting and changing governmental laws and regulations; • requirements to have local partner(s), local entity ownership limitations or technology transfer or sharing requirements, or to comply with data residency and transfer laws and regulations, privacy and data protection laws and regulations, which may increase operational costs and restrictions; • the possibility that illegal or unethical activities of our local employees or business partners will be attributed to us or cause us harm; • longer and potentially more complex sales and accounts receivable payment cycles and other collection difficulties; • different pricing and distribution environments; • potential changes in international trade policies, tariffs, agreements and practices, including the adoption and expansion of formal or informal trade restrictions or regulatory frameworks that may favor local competitors; • governmental direction, business practices and/or cultural norms that may favor local competitors; • more prevalent cybersecurity and intellectual property risks; and • localization of our services, including translation into foreign languages and associated expenses.
Risks associated with making our products and services available in international markets include, for example: • compliance with multiple, conflicting and changing governmental laws and regulations; • requirements to have local partner(s), local entity ownership limitations or technology transfer or sharing requirements, or to comply with data residency and transfer laws and regulations, privacy and data protection laws and regulations, which may increase operational costs and restrictions; • the possibility that illegal or unethical activities of our local employees or business partners will be attributed to us or cause us harm; • longer and potentially more complex sales and payment receipt cycles and other collection difficulties; • different pricing and distribution environments; • potential changes in international trade policies, tariffs, agreements and practices, including the adoption and expansion of formal or informal trade restrictions or regulatory frameworks that may favor local competitors; 16 Table of Contents • governmental direction, business practices and/or cultural norms that may favor local competitors; • more prevalent cybersecurity, intellectual property and AI risks; and • localization of our services, including translation into foreign languages and associated expenses.
Any of our primary locations may be vulnerable to the adverse effects of climate change. For example, our California headquarters have experienced, and may continue to experience, climate-related events at an increasing frequency and severity, including drought, water scarcity, heat waves, wildfires and air quality impacts and power shutoffs associated with wildfires.
Any of our primary locations may be vulnerable to the adverse effects of climate change. For example, our California headquarters have experienced, and may continue to experience, climate-related events at an 24 Table of Contents increasing frequency and severity, including drought, water scarcity, heat waves, wildfires and air quality impacts and power shutoffs associated with wildfires.
Our failure or perceived failure to achieve some or all of our ESG goals or maintain ESG practices that meet evolving stakeholder expectations or regulatory requirements could harm our reputation, adversely impact our ability to attract and retain employees or customers and expose us to increased scrutiny from the investment community, regulatory authorities and others or subject us to liability.
Our failure or perceived failure to achieve our ESG goals or maintain ESG practices that meet evolving stakeholder expectations or regulatory requirements could harm our reputation, adversely impact our ability to attract and retain employees or customers and expose us to increased scrutiny from the investment community, regulatory authorities and others or subject us to liability.
While our work model, where a substantial portion of our employees work partially or fully remote, increased our access to talent, we may not be able to take advantage of a broader talent pool if our competitors offer the same work model or if we continue to lean heavily on our primary operating locations for talent.
While our work model, where a substantial portion of our employees work partially or fully remote, increased our access to talent, we may not be able to take advantage of a broader talent pool if our competitors offer the same work model or if we continue to rely on our primary operating locations for talent.
Our failure or perceived failure to achieve our ESG goals or maintain ESG practices that meet evolving stakeholder expectations could adversely affect us. We have published environmental, social, and governance (“ESG”) initiatives, goals and commitments. Our ability to achieve our objectives is subject to numerous factors both within and outside of our control.
Our failure or perceived failure to achieve our ESG goals or maintain ESG practices that meet evolving stakeholder expectations could adversely affect us. Our ability to achieve published environmental, social, and governance (“ESG”) initiatives, goals and commitments is subject to numerous factors both within and outside of our control.
Risks Related to Our Ability to Grow Our Business Laws, regulations and customer expectations regarding the use, storage and movement of data may restrict our ability to continue to optimize our platform and adversely affect our business.
Risks Related to Our Ability to Grow Our Business Laws, regulations and customer expectations regarding the use, storage and movement of data may restrict our ability to continue to optimize our platform.
Further, if we or our partners are successful in receiving a contract award, that award could be challenged during a bid protest process. 16 Table of Contents Bid protests may result in an increase in expenses related to obtaining contract awards or an unfavorable modification or loss of an award.
Further, if we or our partners are successful in receiving a contract award, that award could be challenged during a bid protest process. Bid protests may result in an increase in expenses related to obtaining contract awards or an unfavorable modification or loss of an award.
Provisions in our governing documents, Delaware law or 2030 Notes might discourage, delay or prevent a change of control or changes in our management and, therefore, depress our stock price.
Provisions in our governing documents or Delaware law might discourage, delay or prevent a change of control or changes in our management and, therefore, depress our stock price.
The occurrence of any of the following risks, or additional risks and uncertainties not presently known to us or that we currently believe to be immaterial, could materially and adversely affect our business, financial condition or results of operations or cause our stock price to decline.
The occurrence of any of the following risks, or additional risks and uncertainties not presently known to us or that we currently believe to be immaterial, could materially and adversely affect our business, financial condition, results of operations, stock price or reputation.
Further, Section 203 of the Delaware General Corporation Law may discourage, delay or prevent a change in control of our company. Section 203 imposes certain restrictions on merger, business combinations and other transactions between us and certain shareholders.
Further, Section 203 of the Delaware General Corporation Law may discourage, delay or prevent a change in control of our company. Section 203 imposes certain restrictions on merger, business combinations and other transactions between us and certain shareholders. 28 Table of Contents
If this conflict continues or if conflict arises in other jurisdictions, the U.S. and other jurisdictions could impose wider economic and trade sanctions as well as export restrictions, which could impact our business opportunities and operations. Any violation of the U.S.
If this conflict continues or if serious conflict arises elsewhere, the U.S. and other jurisdictions could impose wider economic and trade sanctions as well as export restrictions, which could impact our business opportunities and operations. Any violation of the U.S.
In most instances, our customers are responsible for administering access to the data held in their particular instance for their employees and service providers. While our software is delivered with certain preset configurations, we understand that our customers require flexibility to configure the Now Platform to their specific business needs.
In most instances, our customers are responsible for administering access to the data held in their particular instance for their employees and service providers. While our software is delivered with certain preset configurations, we 20 Table of Contents understand that our customers require flexibility to configure the Now Platform to their specific business needs.
Our business operations are subject to interruption by natural disasters, flooding, fire, extreme heat, power shortages, pandemics such as COVID-19, terrorism, political unrest, telecommunications failure, vandalism, cyberattacks, geopolitical instability, war, the effects of climate change and other events beyond our control.
Our business operations are subject to interruption by natural disasters, flooding, fire, extreme heat, power shortages, pandemics, terrorism, political unrest, telecommunications failure, vandalism, cyberattacks, geopolitical instability, war, the effects of climate change and other events beyond our control.
The growth of our business and future prospects depend on our ability to increase our sales outside of the U.S. as a percentage of our total revenues. Additionally, operating in international markets requires significant investment and management attention and subjects us to varying regulatory, political and economic risks.
The growth of our business depends on our ability to increase our sales outside of the U.S. as a percentage of our total revenues. Additionally, operating in international markets requires significant investment and management attention and subjects us to varying regulatory, political and economic risks.
Our insurance may not be sufficient to cover losses or additional expenses we may sustain. Although we have backup systems in place, in the event of major natural disasters or catastrophic events, customer data could be lost, and resumption of operations could require significant time.
Our insurance may not be sufficient to cover losses or additional expenses we may sustain. In the event of major natural disasters or catastrophic events, our backup systems could fail, customer data could be lost, and resumption of operations could require significant time.
In addition, from time to time, the U.S. and other key international economies have been impacted and may continue to be impacted by geopolitical and economic instability, high levels of credit defaults, international trade disputes, changes in demand for various goods and services, high levels of persistent unemployment, wage and income stagnation, restricted credit, poor liquidity, reduced corporate profitability, volatility in credit, equity and foreign exchange markets, inflation, bankruptcies, international trade agreements, export controls, economic and trade sanctions, health crisis such as the COVID-19 pandemic and overall economic uncertainty.
In addition, from time to time, the U.S. and other key international economies have been impacted and may continue to be impacted by geopolitical and economic instability, high levels of credit defaults, international trade disputes, changes in demand for various goods and services, high levels of persistent unemployment, wage and income stagnation, restricted credit, poor liquidity, reduced corporate profitability, volatility in credit, equity and foreign exchange markets, inflation, bankruptcies, international trade agreements, export controls, economic and trade sanctions, health crises and overall economic uncertainty.
While we have a vendor security review process, we cannot guarantee that our third-party service providers or our supply chain infrastructure have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our platform, systems and network or the systems and networks of third parties that support us and our business.
We cannot guarantee that our third-party service providers or our supply chain infrastructure have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our platform, systems and network or the systems and networks of third parties that support us and our business.
Foreign Corrupt Practices Act of 1977, as amended, the UK Bribery Act, other applicable anti-corruption and anti-bribery laws, or applicable export control or economic and trade sanctions laws by our employees or third-party intermediaries could 17 Table of Contents subject us to significant risks such as adverse media coverage and/or severe criminal or civil sanctions, which could materially adversely affect our reputation, business, operating results, and prospects.
Foreign Corrupt Practices Act of 1977, as amended, the UK Bribery Act, other applicable anti-corruption and anti-bribery laws, or applicable export control or economic and trade sanctions laws by our employees or third-party intermediaries could subject us to significant risks such as adverse media coverage and/or severe criminal or civil sanctions, which could materially adversely affect our reputation and business.
These key individual contributors are critical to our success and can command very significant compensation in the market. Our ability to achieve significant revenue growth may depend on our success in recruiting, training and retaining sufficient qualified personnel to support our growth.
These key individual contributors are critical to our success, can command very significant compensation in the market and are actively recruited by our key competitors. Our ability to achieve significant revenue growth may depend on our success in recruiting, training and retaining sufficient qualified personnel to support our growth.
We are continually evaluating and, as appropriate, enhancing the attractiveness of our compensation packages. As a result, we have experienced and may continue to experience increased costs that may not be offset by either improved productivity or higher sales, potentially resulting in a reduction in our profitability.
We are continually evaluating and, as appropriate, enhancing the attractiveness of our compensation packages and benefit programs. As a result, we have experienced and may continue to 21 Table of Contents experience increased costs that may not be offset by either improved productivity or higher sales, potentially resulting in a reduction in our profitability.
We 15 Table of Contents have made, and will continue to make, substantial investments in data centers, geographic-specific service delivery models, advisory councils, cloud computing infrastructure, sales, marketing, partnership arrangements, personnel and facilities in new geographic markets.
We have made, and will continue to make, substantial investments in data centers, geographic-specific service delivery models, advisory councils, cloud computing infrastructure, sales, marketing, partnership arrangements, personnel and facilities in new geographic markets.
We may not have insurance sufficient to compensate us for potentially significant losses that may result from claims arising from disruptions to our services. Delays in improving our information systems and processes could interfere with our ability to support our existing and growing customer and employee base and could adversely impact our business.
We may not have insurance sufficient to compensate us for potentially significant losses that may result from claims arising from disruptions to our services. Delays in improving our information systems and processes could interfere with our ability to support our existing and growing customer and employee base as we scale.
In addition, while we maintain insurance coverage, we cannot be certain that such coverage will continue to be available on acceptable terms or 19 Table of Contents in sufficient amounts to cover potential losses from a security incident or that an insurer will not deny coverage as to any future claim.
In addition, while we maintain insurance coverage to cover potential financial losses, we cannot be certain that such coverage will continue to be available on acceptable terms or in sufficient amounts to cover potential financial losses from a security incident or that an insurer will not deny coverage as to any future claim.
In addition, our partners may use our platform to develop products and services that compete with our products and services, which could raise IP ownership concerns and strain these partnerships.
Our partners may also use our platform to develop products and services that compete with our products and services, which could raise IP ownership concerns and strain these partnerships.
As a result, these sales opportunities may require us to devote significant sales support and professional services to a smaller number of larger transactions, diverting those resources from other sales opportunities. If we fail to effectively manage these risks, our business, financial condition, and results of operations may be negatively affected.
As a result, these sales opportunities may require us to devote significant sales support and professional services to a smaller number of transactions, diverting those resources from other sales opportunities. If we fail to effectively manage these risks, our business may be negatively affected.
These obligations may apply to us and/or our third-party resellers or distributors whose practices we may not control. Such parties’ non-compliance could create contractual and customer satisfaction issues. In addition, governments routinely investigate and audit contractors for compliance with contractual and regulatory requirements.
These obligations may apply to us and/or our third-party resellers or distributors whose practices we may not control. Such parties’ non-compliance could create legal, contractual and customer satisfaction issues. We and governments routinely investigate and audit compliance with contractual and regulatory requirements.
We currently serve our customers primarily using equipment managed by us and co-located in third-party data centers operated by several different providers located around the world, and we serve certain of our customers that are primarily in highly regulated markets, using data center facilities operated by public cloud service providers.
We currently serve our customers primarily using equipment managed by us and co-located in third-party data centers operated by several different providers located around the world, and we serve certain of our customers using data center facilities operated by public cloud service providers.
We have observed attempts by third parties to induce or deceive our employees, contractors or users to fraudulently obtain access to our or our customers’ data or assets. Further, our employees have fallen victim to phishing attacks in the past and may again in the future.
We have observed attempts by third parties to induce or deceive our employees, contractors or users to fraudulently obtain access to our or our customers’ data or assets. In addition, our employees have fallen victim to phishing attacks in the past and are likely to again in the future.
In any IP litigation, regardless of the scope or merit, we may incur substantial costs and attorney’s fees and, if the claims are successfully asserted against us and we are found to be infringing upon, misappropriating or otherwise violating the IP rights of others, we could be required to pay substantial damages and/or make substantial ongoing royalty payments; comply with an injunction and cease offering or modify our products and services; comply with other unfavorable terms, including settlement terms; and indemnify our customers and business partners, obtain costly licenses on their behalf, and/or refund fees or other payments previously paid to us.
If claims are successfully asserted against us and we are found to be infringing upon, misappropriating or otherwise violating the IP rights of others, we could be required to pay substantial damages and/or make substantial ongoing royalty payments; comply with an injunction and cease offering or modify our products and services; comply with other unfavorable terms, including settlement terms; and indemnify our customers and business partners, obtain costly licenses on their behalf, and/or refund fees or other payments previously paid to us.
If we fail to effectively manage and grow our network of partners, our ability to sell our products and efficiently provide our services may be impacted, and our operating results and growth rate may be harmed. Doing business with the public sector and heavily-regulated entities subjects us to risks related to government procurement processes, regulations and contracting requirements.
If we fail to effectively manage and grow our network of partners, our ability to sell our products and efficiently provide our services may be impacted and our business may be harmed. 17 Table of Contents Doing business with the public sector and heavily-regulated entities subjects us to risks related to government procurement processes, regulations and contracting requirements.
Additionally, the IP ownership and license rights of new technologies such as AI have not been fully addressed by U.S. courts interpreting current and new laws or regulations, and the use or adoption of such technologies in our products and services may expose us to potential intellectual property claims; breach of a data license, software license, or website terms of service allegations; claimed violations of privacy rights; and other tort claims.
Additionally, the IP ownership and license rights of new technologies and the use of outputs therefrom, such as AI, which we are increasingly building into our product offerings, have not been fully addressed by U.S. courts interpreting current and new laws or regulations, and the use or adoption of such technologies in our products and services may expose us to potential intellectual property claims; breach of a data license, software license, or website terms of service allegations; claimed violations of privacy rights; and other tort claims.
Disruptions may result from errors we make in developing, delivering, configuring or hosting our services, or designing, installing, expanding or maintaining our cloud infrastructure. Disruptions in service can also result from incidents that are outside of our control, including denial of service or ransomware attacks.
Disruptions may result from errors we make in developing, delivering, configuring or hosting our services, or designing, installing, expanding or maintaining our cloud infrastructure. Disruptions in service can also result from incidents outside of our control, including third-party incidents or denial of service or ransomware attacks, among others.
Risks Related to the Operation of Our Business Actual or perceived cybersecurity events experienced by us or our third-party service providers may create the perception that our platform is not secure, and we may lose customers or incur significant liabilities, which would harm our business, financial condition and operating results.
Risks Related to the Operation of Our Business Actual or perceived cybersecurity events experienced by us or our third-party service providers may create the perception that our platform is not secure, and we may lose customers or incur significant liabilities.
Disruptions or defects in our services could damage our customers’ businesses, subject us to substantial liability and harm our reputation and financial results. Our business depends on our platform to be available without disruption. From time to time, we experience defects, disruptions, outages and other performance and quality problems with our platform.
Disruptions or defects in our services could damage our customers’ businesses, subject us to substantial liability and harm our business. Our business depends on our platform to be available without disruption. From time to time, we have experienced and expect to continue to experience defects, disruptions, outages and other performance and quality problems with our platform.
These provisions, among other things: • permit our board to establish the number of directors; • provide that directors may only be removed “for cause” and only with the approval of 66 2/3% of our shareholders; • require super-majority voting to amend certain provisions in our certificate of incorporation and bylaws; • authorize issuance of “blank check” preferred stock that our board could use to implement a shareholder rights plan; • prohibit shareholder action by written consent, which requires all shareholder actions to be taken at a meeting; • permit our board to make, alter or repeal our bylaws; and • require advance notice for shareholders to submit director nominations or other business at annual shareholders meetings (although our bylaws permit shareholders proxy access).
These provisions, among other things: • permit our board to establish the number of directors; • require super-majority voting to amend certain provisions in our certificate of incorporation and bylaws; • authorize issuance of “blank check” preferred stock that our board could use to implement a shareholder rights plan; • prohibit shareholder action by written consent, which requires all shareholder actions to be taken at a meeting; • permit our board to make, alter or repeal our bylaws; and 27 Table of Contents • require advance notice for shareholders to submit director nominations or other business at annual shareholders meetings (although our bylaws permit shareholders proxy access).
As digital transformation accelerates across a customer’s enterprise, cutting-edge capabilities such as AI, machine learning, hyper automation, low-code/no-code application development, system observability and predictive insights become increasingly relevant to the customer’s evolving needs.
Cutting-edge capabilities such as AI, machine learning, hyper automation, low-code/no-code application development, system observability and predictive insights become increasingly relevant to the customer’s evolving needs.
Our growing business operations increase our exposure to cyberattacks by a range of actors, who have used and will continue to use assorted tactics, techniques, and 18 Table of Contents procedures, including malicious code, ransomware, social engineering, business email compromises, supply chain attacks, denial of service attacks and similar internet-enabled, fraudulent activity.
Our growing business operations increase our exposure to cyberattacks by a range of actors, who have used and will continue to use assorted tactics, techniques, and procedures, including malicious code, ransomware, social engineering, business email compromises, supply chain attacks, denial of service attacks and similar internet-enabled, fraudulent activity, and the frequency of those attacks have become more common.
Accordingly, to compete effectively, we must: • identify and innovate in the right technologies; • keep pace with rapidly changing technological developments, such as AI, which may disrupt talent needs and the enterprise software marketplace; • accurately predict our customers’ changing digital transformation needs, priorities and adoption practices, including their technology infrastructures and buying and budgetary practices; • invest in and continually optimize our own technology platform so that we continue to meet the very high-performance expectations of our customers; • successfully deliver new, scalable technologies and products to meet customer needs and priorities; • efficiently integrate with technologies within our customers’ digital environments; • expand our offerings into industries and to buyers who are not familiar with our offerings; • profitably and efficiently market and sell products in markets where our sales and marketing teams have less experience; • successfully adapt new pricing models; • effectively secure our platform, data and customers’ data; and • effectively deliver, directly or through our partner ecosystem, the digital transformation process planning, IT systems architecture planning, and product implementation services that our customers require to be successful.
Accordingly, to compete effectively, we must: • identify and innovate in the right technologies; • keep pace with rapidly changing technological developments, such as AI, which may disrupt resource and talent needs and the enterprise software marketplace; • accurately predict and meet our customers’ changing digital transformation needs, priorities and adoption practices, including their technology infrastructures and buying and budgetary practices; • invest in and continually optimize our own technology platform so that we continue to meet the very high-performance expectations of our customers; • successfully deliver and promote new, scalable technologies and products to meet customer needs and priorities; • efficiently integrate with technologies within our customers’ digital environments; • expand our offerings into new and adjacent industries and comply with regulations in such industries; • successfully sell to buyers who are not familiar with our offerings; • profitably and efficiently market and sell our new and existing products; • effectively scale our business processes and operations as we grow; • successfully adapt new pricing models; • promote ongoing customer relationships and customer value realization; • effectively secure our platform, data and customers’ data; and • effectively deliver, directly or through our partner ecosystem, the digital transformation process planning, IT systems architecture planning, and product implementation services that our customers require to be successful.
Increases in our effective tax rate would reduce our profitability or in some cases increase our losses. Additionally, our future effective tax rate could be impacted by changes in accounting principles or changes in federal, state or international tax laws or tax rulings. The U.S.
Increases in our effective tax rate would reduce our profitability or in some cases increase our losses. Additionally, our future effective tax rate could be impacted by changes in accounting principles or changes in federal, state or international tax laws or tax rulings and these changes may have a retroactive effect. The U.S.
We are aware that, on occasion, our customers and ServiceNow have configured certain settings on our platform, or retained preset configurations, in a manner not aligned with their preferred security levels, which can result in, and has resulted in, information being made more widely accessible than intended.
We are aware that, on occasion, both our customers and ServiceNow have configured certain settings on our platform, or retained preset configurations, in ways that may not align with preferred or recommended security levels, which can result in, and has resulted in, information being made more widely accessible than intended.
Natural disasters, including climate change, and other events beyond our control could harm our business. Natural disasters or other catastrophic events may damage or disrupt our operations, international commerce and the global economy, and thus could have a negative effect on our business.
Natural disasters or other catastrophic events may damage or disrupt our operations, international commerce and the global economy, and thus could have a negative effect on our business.
Following periods of volatility in the market price of a company’s securities, securities class action litigation has often been brought against that company. Securities litigation could result in substantial costs and divert management’s attention and resources from our business. This could materially adversely affect our business, operating results, and financial condition.
Following periods of volatility in the market price of a company’s securities, securities class action litigation has often been brought against that company. Securities litigation could result in substantial costs and divert management’s attention and resources from our business.
Larger enterprise customers tend to require considerable time evaluating and testing our platform prior to making a purchasing decision, require multiple levels of review and approval, and demand more configuration, integration services and features, particularly when switching from legacy on-premises solutions.
These customers tend to require considerable time evaluating our portfolio of products and testing our platform prior to making a purchasing decision, require multiple levels of review and approval from a broader set of buyers and stakeholders, and demand more configuration, integration services and features, particularly when switching from legacy on-premises solutions.
In addition, technology companies in general have highly volatile stock prices, and the volatility in stock price and trading volume of securities is often unrelated or disproportionate to the financial performance of the companies issuing the securities.
Our stock price is likely to continue to be volatile and subject to wide fluctuations. In addition, technology companies in general have highly volatile stock prices, and the volatility in stock price and trading volume of securities is often unrelated or disproportionate to the financial performance of the companies issuing the securities.
While we have security measures and a data governance framework in place designed to protect our and our customers’ information and prevent data loss, these measures may not be effective at preventing material breaches caused by intentional or unintentional actions or inactions by employees, contractors or third parties.
Our data security system and data governance framework, designed to protect our and our customers’ information and prevent data loss, may not be effective at preventing material breaches caused by intentional or unintentional actions or inactions by employees, contractors or third parties.
Moreover, the incorporation of third-party or open-source software code into our or our customers’ systems increases the risk of exploitation of vulnerabilities, such as the vulnerability in the Java logging library known as “log4j” that affected our industry. We also have inherited and may in the future inherit additional security risks from acquiring or partnering with other companies.
Moreover, the incorporation of third-party or open-source software code into our or our customers’ systems increases the risk of exploitation of vulnerabilities. We also have inherited and may in the future inherit additional security risks from acquiring or partnering with other companies.
For example, the EU Data Act is a proposed law with potential significant requirements regarding data portability, interoperability and accessibility and unclear data transfer restrictions, any of which could impact our operations.
For example, the EU Data Act has significant requirements regarding data portability, interoperability and accessibility and unclear data transfer restrictions, any of which could impact our operations.
We also expect our costs to increase in 23 Table of Contents future periods as we continue to invest in our strategic priorities, which may not result in increased revenues or growth in our business. Changes in our effective tax rate or disallowance of our tax positions may adversely affect our financial position and results.
We also expect our costs to increase in future periods as we continue to invest in our strategic priorities, which may not result in a corresponding increase in revenues or growth in our business. Changes in our effective tax rate or disallowance of our tax positions may adversely affect our business.
Effective patent, trademark, copyright and trade secret protection may not be available in every country in which we offer services. The laws of some foreign countries may not offer effective protection for, or be as protective of, IP rights as those in the U.S., and mechanisms for enforcement of IP rights or available remedies may be inadequate, ineffective or scarce.
The laws of some foreign countries may not offer effective protection for, or be as protective of, IP rights as those in the U.S., and mechanisms for enforcement of IP rights or available remedies may be inadequate, ineffective or scarce.
Downgrades in our credit ratings could restrict our ability to obtain additional financing in the future and could affect the terms of any such financing. 24 Table of Contents Risks Related to General Economic Conditions Global economic conditions may harm our industry, business and results of operations.
Downgrades in our credit ratings could restrict our ability to obtain additional financing in the future and could affect the terms of any such financing. Risks Related to General Economic and Political Conditions Our industry and business may be harmed by global economic and political conditions.
As a result of the Russia-Ukraine conflict, for example, the U.S. and other countries have imposed economic and trade sanctions and export control restrictions against Russia and Belarus.
As a result of the Russia-Ukraine conflict, for example, the U.S. and other jurisdictions have imposed economic and trade sanctions and export control restrictions against Russia and Belarus, as well as certain persons, assets and interests associated with those countries.
Global tax developments applicable to multinational businesses and increased scrutiny under tax examinations could have a material impact on our business and negatively affect our financial results. Any changes in federal, state or international tax laws or tax rulings may increase our worldwide effective tax rate and harm our financial position and results of operations.
Global tax developments applicable to multinational businesses and increased scrutiny under tax examinations, as well as changes in federal, state or international tax laws or rulings that may increase our worldwide effective tax rate, could have a material impact on our business.
Our increasing reliance on third-party providers and public cloud infrastructure introduces new cybersecurity risks to our business operations. We rely on third-party service providers and technologies to operate business systems in a variety of contexts, and supply chain attacks have increased in frequency and severity.
Our increasing reliance on third-party providers and public cloud infrastructure introduces new cybersecurity risks to our business operations. Third-party security incidents have occurred in the past and are likely to continue, as we rely on third-party service providers and technologies to operate business systems in a variety of contexts. S upply chain attacks have also increased in frequency and severity.
Foreign currency exchange rate fluctuations could harm our financial results. We conduct significant transactions, including revenue transactions and intercompany transactions, in currencies other than the U.S. Dollar or the functional operating currency of the transactional entities. In addition, our international subsidiaries maintain significant net assets that are denominated in the functional operating currencies of these entities.
We conduct significant transactions, including revenue transactions and intercompany transactions, in currencies other than the U.S. Dollar or the functional operating currency of the transactional entities. In addition, our international subsidiaries maintain significant net assets that are denominated in the functional operating currencies of these entities. Accordingly, changes in the value of currencies relative to the U.S.
We will also need to continually adapt to customer privacy and security requirements as they change over time. For example, as customers increasingly adopt a hybrid (on-premises and off-premises/hyperscale cloud) approach for their IT workloads, our cloud services may fail to address evolving customer requirements, including data localization.
For example, as customers increasingly adopt a hybrid (on-premises and off-premises/hyperscale cloud) approach for their IT workloads, our cloud services may fail to address evolving customer requirements, including data localization.
If it is determined that we have failed to comply with these requirements, we may be subject to civil and criminal penalties and administrative sanctions, including termination of contracts, forfeiture of profits, cost associated with the triggering of price reduction clauses, fines, and suspensions or debarment from future government business, all of which may cause us to suffer reputational harm and adversely affect our business and operating results.
If it is determined that we or our third-party distributors, resellers or service providers have failed to comply with applicable contractual or regulatory requirements, we may be subject to civil and criminal penalties and administrative sanctions, including termination of contracts, forfeiture of profits, cost associated with the triggering of price reduction clauses, fines, and suspensions or debarment from future government business, among others, all of which may adversely affect our business.
Our customers also include non-U.S. governments, to which government procurement risks similar to those present in U.S. government contracting and regulatory compliance also apply, particularly in certain emerging markets where our customer base is less established. We have seen challenges to successful awards through bid protest procedures in jurisdictions outside the U.S.
Our customers also include non-U.S. governments, to which government procurement risks similar to those present in U.S. government contracting and regulatory compliance also apply, particularly in certain emerging markets where our customer base is less established.
While we believe that our position is appropriate and well founded, if our position were successfully challenged by taxing authorities in other jurisdictions, we may become subject to significant tax liabilities, which could harm our financial position and financial results. Our debt service obligations may adversely affect our financial condition.
While we believe that our position is appropriate 25 Table of Contents and well founded, if our position were successfully challenged by taxing authorities in other jurisdictions, we may become subject to significant tax liabilities. We may be adversely affected by our debt service obligations.
These conditions can arise suddenly and affect the rate of digital transformation spending and could adversely affect our customers’ or prospective customers’ ability or willingness to purchase our services, delay purchasing decisions, reduce the value or duration of their subscriptions, or affect renewal rates, all of which could harm our operating results.
These conditions can arise suddenly and affect the rate of digital transformation spending and could adversely affect our customers’ or prospective customers’ ability or willingness to purchase our services, delay purchasing decisions, reduce the value or duration of their subscriptions, or affect renewal rates. We may be harmed by foreign currency exchange rate fluctuations.
If we lose key members of our management team or qualified employees or are unable to attract and retain the employees we need, our costs may increase and our business and operating results may be adversely affected. There is increasingly intense competition for talent in the technology industry.
We may lose key members of our management team or qualified employees or may not be able to attract and retain the employees we need. There is increasingly intense competition for talent in the technology industry.
Further, upon expiration of the term of any agreements that allow us to use third-party IP, we may be unable to renew such agreements on favorable terms, if at all, in which case we may face IP litigation.
Further, upon expiration of any agreements that allow us to use third-party IP, we may be unable to renew such agreements on favorable terms, if at all, in which case we may face IP litigation or may need to cease offering or to modify our products and services to remove such components.
These data centers are vulnerable to damage or interruption from earthquakes, hurricanes, floods, fires, energy grid constraints resulting in power loss and similar events. They may also be subject to break-ins, sabotage, intentional acts of vandalism and similar misconduct, equipment failure and adverse events caused by operator error or negligence.
These data centers are vulnerable to damage or interruption from earthquakes, hurricanes, floods, fires, power failures and similar events. They may also be subject to break-ins, sabotage, intentional acts of vandalism and similar misconduct, equipment failure and adverse events caused by operator error or negligence. In addition, an increased use of the public cloud increases our vulnerability to cyberattacks.
Further, we are increasingly doing business in heavily regulated industries, such as financial services, telecommunication, media and television, and health care. Current and prospective customers in those industries may be required to comply with more stringent regulations to subscribe to and/or implement our services. In addition, regulatory agencies may impose requirements on third-party vendors that we may not meet.
Current and prospective customers in those industries may be required to comply with more stringent regulations to subscribe to and/or implement our services. In addition, regulatory agencies may impose requirements on third-party vendors that we may not meet.
If there is a compromise to data, supply chain issue or other incident with our critical service providers, it may impact our ability to provide our services and reduce our productivity.
In addition to data center providers, we also have a large ecosystem of vendors and service providers that we use for our products. If there is a compromise to data, supply chain issue or other incident with our critical service providers, it may impact our ability to provide our services and reduce our productivity.
Actual or perceived non-compliance with those laws and regulations could result in proceedings or investigations against us by regulatory authorities or others, lead to significant fines, damages, orders, litigation or reputational harm and may otherwise adversely impact our business, financial condition and operating results.
Actual or perceived non-compliance with those laws and regulations could result in proceedings or investigations against us by regulatory authorities or others, lead to significant fines, damages, orders, litigation or reputational harm and may otherwise adversely impact our business. We will also need to continually adapt to customer privacy and security requirements as they change over time.