Biggest changeIn such an event, we could face material liability and exposure from litigation and investigations, fail to meet service level agreements, or be at risk for loss of various security and standards-based compliance certifications needed for operation of our businesses, and customers could be reluctant to use our services, any of which could also adversely affect our reputation and harm our business or cause financial losses that are either not insured against or not fully covered through any insurance. 12 Table of Contents We face risks from the operation of the root server system and our performance of the Root Zone Maintainer functions under the RZMA.
Biggest changeAny such outcomes could also adversely affect our reputation and harm our business or cause financial losses that are either not insured against or not fully covered through any insurance. 12 Table of Contents We face risks from the operation of the root server system and our performance of the Root Zone Maintainer functions under the RZMA.
In addition to this contractual right, we are entitled to increase the annual fee of each .com domain name registration or renewal by up to 7% due to the imposition of any new specifications or policies adopted by ICANN pursuant to the procedures set forth in its bylaws and due process (“Consensus Policies”) or documented extraordinary expense resulting from an attack or threat of attack on the security and stability of the DNS (an “Extraordinary Expense”).
In addition to this contractual right, we are entitled to increase the annual fee of each .com domain name registration or renewal by up to 7% due to the imposition of any new specifications or policies adopted by ICANN pursuant to the procedures set forth in its bylaws and due process (“Consensus Policies”) or to a documented extraordinary expense resulting from an attack or threat of attack on the security and stability of the DNS (an “Extraordinary Expense”).
In addition, our new gTLDs may face additional universal acceptance and usability challenges and it is possible that resolution of domain names within some of these new gTLDs may be blocked within certain state or organizational environments, challenging universal resolvability of these strings and their general acceptance and usability.
In addition, our new gTLDs may face additional universal acceptance and usability challenges and it is possible that resolution of domain names within some of these new gTLDs may be blocked within certain state or organizational environments, challenging universal resolvability of these domain names and their general acceptance and usability.
Some of the software and protocols used in our business are in the public domain or may otherwise become publicly available, which means that such software and protocols are or may become equally available to our competitors. We rely on the strength of our Verisign brand to help differentiate Verisign in the marketing of our products.
Some of the software and protocols used in our business are in the public domain or may otherwise become publicly available, which means that such software and protocols are or may become equally available to our competitors. We rely on the strength of our Verisign brand to help differentiate our products.
Factors that may affect acceptance or adoption of our services in these locations include: • regional internet infrastructure development, expansion, penetration and adoption, and the development, maturity and depth of our sales channels; • acceptance and adoption of substitute products and services that enable online presence without a domain name, including social media, e-commerce platforms, website builders and mobile applications; 17 Table of Contents • increased acceptance and adoption of other substitute products and services, including ccTLDs or other gTLDs; • public perception of the security of our products and services; • the use of mobile applications as the primary engagement mechanism for navigating the internet; and • government regulations affecting the internet, internet access and availability, domain name registrations or the provision of registry services, data security, privacy, or data localization, e-commerce or telecommunications.
Factors that may affect acceptance or adoption of our services in these locations include: • regional internet infrastructure development, expansion, penetration and adoption, and the development, maturity and depth of our sales channels; • acceptance and adoption of substitute products and services that enable online presence without a domain name, including social media, e-commerce platforms, website builders and mobile applications; • increased acceptance and adoption of other substitute products and services, including ccTLDs or other gTLDs; • public perception of the security of our products and services; • the use of mobile applications as the primary engagement mechanism for navigating the internet; and • government regulations affecting the internet, internet access and availability, domain name registrations or the provision of registry services, data security, privacy, or data localization, e-commerce or telecommunications.
A failure to seek and obtain a price increase due to a Consensus Policy or Extraordinary Expense, when available, could negatively affect our operating results. We also have the right under the Cooperative Agreement to seek the removal of these pricing restrictions on the .com gTLD if we demonstrate to the DOC that market conditions no longer warrant these restrictions.
A failure to seek and obtain a price increase due to a Consensus Policy or Extraordinary Expense, when applicable, could negatively affect our operating results. We also have the right under the Cooperative Agreement to seek the removal of these pricing restrictions on the .com gTLD if we demonstrate to the DOC that market conditions no longer warrant these restrictions.
Under the terms of the .com Registry Agreement, we may increase the annual fee of each .com domain name registration or renewal by up to 7% over the previous year in each of the final four years of each six-year period. We can provide no assurance that we will exercise such right to increase the annual fee.
Under the terms of the .com Registry Agreement, we may increase the annual fee of each .com domain name registration or renewal by up to 7% over the previous year in each of the final four years of each six-year period. We can provide no assurances that we will exercise such right to increase the annual fee.
New technologies that encourage internet users to expand the use of third-level domains or alternate identifiers, such as identifiers from social networking, e-commerce platforms and microblogging sites, could also negatively impact the demand for domain names in the gTLDs we operate.
New technologies that encourage internet users to expand the use of third-level domains or alternative identifiers, such as identifiers from social networking, e-commerce platforms and microblogging sites, could also negatively impact the demand for domain names in the gTLDs we operate.
A failure in the operation of our Shared Registration System could also impact our ability to provide up-to-date information in our resolution systems, which could result in breaches of our service level agreements pertaining to our resolution services and impact the resolution of domain names on the internet.
A failure in the operation of our Shared Registration System could also impact our ability to provide up-to-date information in our globally distributed resolution systems, which could result in breaches of our service level agreements pertaining to our resolution services and impact the resolution of domain names on the internet.
If the providers that our connections depend upon do not protect, maintain, improve, and reinvest in their networks or present inconsistent, incorrect, or invalid data regarding DNS responses through their networks, our business could be harmed.
If the providers that our connections depend upon do not protect, maintain, improve, and reinvest in their networks or present inconsistent, incorrect, or invalid data regarding routing information or DNS responses through their networks, our business could be harmed.
The systemic dependencies introduced by RPKI and the relying parties of the RPKI system, including network service providers, are outside of our control, and systems that depend upon the RPKI may be only as secure as the weakest elements of the RPKI system.
The systemic dependencies introduced by the RPKI system and by the relying parties of the RPKI system, including internet service providers, are outside of our control, and systems that depend upon the RPKI may be only as secure as the weakest elements of the RPKI system.
Despite our precautions, it may be possible for an external party to copy or otherwise obtain and use our intellectual property without authorization. Furthermore, the laws of other countries may not protect our proprietary rights in those countries to the same extent U.S. law protects these rights in the U.S.
Despite our precautions, it may be possible for an external party to copy or otherwise obtain and use our intellectual property without authorization. Furthermore, the laws of other countries may not protect our proprietary rights in those countries to the same 18 Table of Contents extent U.S. law protects these rights in the U.S.
Any of these problems or outages could create potential liability and exposure, including from a failure to meet our service level agreements, and could decrease customer satisfaction, harming our business, or resulting in adverse publicity and damage to our reputation or call into question our ability to preserve the security and stability of the internet.
Any of these scenarios could create potential liability and exposure, including from a failure to meet our service level agreements, and could decrease customer satisfaction, harming our business, or resulting in adverse publicity and damage to our reputation or call into question our ability to preserve the security and stability of the internet.
Additionally, each of the .com and .net Registry Agreements provide that if certain terms of these agreements are not similar to such terms generally in effect in the registry agreements of the five largest gTLDs, then a renewal of these agreements would be upon terms reasonably necessary to render such terms to be similar to the registry agreements for those other gTLDs.
Additionally, each of the .com and .net Registry Agreements provide that if certain terms of these agreements are not similar to such terms generally in effect in the registry agreements of the five largest gTLDs, then a renewal of these agreements would be upon terms reasonably necessary to render such terms to be similar to the registry 13 Table of Contents agreements for those other gTLDs.
For example, following the invalidation of the U.S.-EU Safe Harbor by the European Court of Justice (“EUCJ”) in 2015, the European Union and United States agreed to an alternative framework for data transferred from the European Union to the United States, called Privacy Shield. In 2018, Privacy Shield was also invalidated by the EUCJ.
For example, following the invalidation of the U.S.-EU Safe Harbor by the European Court of Justice (“EUCJ”) in 2015, the European Union and United States agreed to an alternative framework for data transferred from the European Union to the United States, called Privacy Shield. In 2018, Privacy Shield 14 Table of Contents was also invalidated by the EUCJ.
Violations of laws, regulations or internal policies and procedures by our employees, contractors or agents could result in financial reporting problems, investigations, fines, penalties, or prohibition on 14 Table of Contents the importation or exportation of our products and services and could have a material adverse effect on our business.
Violations of laws, regulations or internal policies and procedures by our employees, contractors or agents could result in financial reporting problems, investigations, fines, penalties, or prohibition on the importation or exportation of our products and services and could have a material adverse effect on our business.
Our . com and . net Registry Agreements contain “presumptive” rights of renewal upon the expiration of their current terms on November 30, 2024 and June 30, 2023, respectively.
Our . com and . net Registry Agreements contain “presumptive” rights of renewal upon the expiration of their current terms on November 30, 2024 and June 30, 2029, respectively.
To the extent any of our patents are considered “standards essential patents,” in some cases we 18 Table of Contents may be required to license such patents to our competitors on reasonable and non-discriminatory terms or otherwise be limited in our ability to assert such patents.
To the extent any of our patents are considered “standards essential patents,” in some cases we may be required to license such patents to our competitors on reasonable and non-discriminatory terms or otherwise be limited in our ability to assert such patents.
These problems could also result in adverse publicity, decrease the public’s trust in the security of e-commerce, or call into question our ability to preserve the security and stability of the internet. We retain certain customer and employee information in our data centers and various domain name registration systems.
These problems could also result in adverse publicity, decrease the public’s trust in the security of e-commerce and other forms of online presence, or call into question our ability to preserve the security and stability of the internet. We retain certain customer and employee information in our data centers and various domain name registration systems.
In addition, we are subject to social engineering attacks including phishing, spear phishing, whaling, vishing, smishing, and domain spoofing, which are designed to entice people to divulge sensitive information or take actions that, if successful, could pose a material risk to our operations. The number of such attacks is increasing. Social engineering attacks have occurred in concert with ransomware attacks.
In addition, we are subject to social engineering attacks including phishing, spear phishing, whaling, vishing, smishing, and domain spoofing, which are designed to entice people to divulge sensitive information or take actions that, if successful, could pose a material risk to our operations. The number of such attacks is increasing.
ICANN could impose requirements on us through changes to these IETF standards, or new standards, that are inconsistent with our current or future plans, that impose substantial 15 Table of Contents costs on our business, that subject the Company to additional legal risks, or that affect our competitive position.
ICANN could impose requirements on us through changes to these IETF standards, or new standards, that are inconsistent with our current or future plans, that impose substantial costs on our business, that subject the Company to additional legal risks, or that affect our competitive position.
These data centers are vulnerable to damage or interruption, including from natural disasters, such as fires, earthquakes, hurricanes, and floods, power loss, hardware or system failures, physical or electronic break-ins, human error or interference. We are also updating our network architecture in several of our new and existing data centers.
These data centers are vulnerable to damage or interruption, including from natural disasters, such as fires, earthquakes, hurricanes, and floods, power loss, hardware or system failures, physical or electronic break-ins, human error or interference. We are also regularly updating and enhancing our network architecture in several of our new and existing data centers and globally distributed resolution systems.
In addition, we must ensure that our employees stay focused on cybersecurity threats especially in our hybrid work environment, or our ability to effectively manage cybersecurity risks could be impacted.
In addition, we must ensure that our employees stay focused on protecting the Company against cybersecurity threats especially in our hybrid work environment, or our ability to effectively manage cybersecurity risks could be impacted.
While we strive to remediate known vulnerabilities on a timely basis, such vulnerabilities could be exploited before our remediation is effective and if so, could cause systems and service interruptions, data loss and other damages.
While we strive to remediate known vulnerabilities on a timely basis, such vulnerabilities could be exploited before a vulnerability has been disclosed or before our remediation is effective and if so, could cause systems and service interruptions, data loss and other damages.
These and future government actions impacting our ability to operate in China may cause our management’s attention to be diverted, our reputation to be damaged, or our business in China to be adversely affected. Changes in, or interpretations of, tax rules and regulations or our tax positions may materially and adversely affect our income taxes.
These and future government actions could impact our ability to operate in China and may cause our management’s attention to be diverted, our reputation to be damaged, or our business in China to be adversely affected. 15 Table of Contents Changes in, or interpretations of, tax rules and regulations or our tax positions may materially and adversely affect our income taxes.
To the extent we increase our prices, there could be a decrease in the demand and/or renewal rates for .com or .net domain names. If we fail to expand our services into developing and emerging economies in international locations, our business may not grow. We seek to serve new, developing, and emerging economies in international locations to grow our business.
To the extent we increase our prices, there could be a decrease in the demand and/or renewal rates for .com or .net domain names. 17 Table of Contents If we fail to expand our services into developing and emerging economies in international locations, our business may not grow.
Although we carry insurance, we do not carry insurance or designated financial reserves for such interruptions. In addition, our services depend on the secure and efficient operation of the internet connections to and from customers to our Shared Registration System residing in our secure data centers.
We do not carry insurance or designated financial reserves for such interruptions. In addition, our services depend on the secure and efficient operation of the internet connections to and from customers to our Shared Registration System residing in our secure data centers as well as our globally distributed resolution systems.
Escalating political tensions between the United States and China in particular may pose additional risks to our business in China. In 2020 and 2021, the U.S. government announced restrictions on trading with certain Chinese companies. The Chinese government subsequently announced actions that, if implemented, could impose additional restrictions on the Chinese operations of non-Chinese companies.
Political tensions between the United States and China in particular may pose additional risks to our business in China. The U.S. government has imposed restrictions on certain Chinese companies and on trading in certain technologies. The Chinese government has announced actions that, if implemented, could impose additional restrictions on the operations of non-Chinese companies in China.
If we make errors in the publication of the root zone, we may be subject to material claims challenging the RZMA or our performance under it, including tort claims, and we may not have immunity from, or sufficient indemnification or insurance for, such claims.
If we make errors in the publication of the root zone or experience operational issues that impact the timeliness of updates to the root zone data, we may be subject to material claims challenging the RZMA or our performance under it, including tort claims, and we may not have immunity from, or sufficient indemnification or insurance for, such claims.
If our data center facilities or the updated network architecture do not operate as expected, including the ability to quickly switch over between sites, we could experience service interruptions or outages.
If our data center facilities or the updated network architectures, hardware or software upgrades, or security controls do not operate as expected, including the ability to quickly switch over between sites, we could experience service interruptions or outages.
Such undertakings, including our efforts to acquire the .web gTLD, may be unsuccessful and costly. In addition, competing technologies developed by others or the emergence of new industry standards may adversely affect our competitive position or render our services or technologies noncompetitive or obsolete.
Such undertakings, including our efforts to acquire the .web gTLD, may be unsuccessful and costly. In addition, competing technologies developed by others or the emergence of new industry standards may adversely affect our competitive position or render our services or technologies noncompetitive or obsolete. Finally, consolidation within our industry has occurred and is likely to continue to occur.
In addition, proceedings that we initially view as immaterial could prove to be material. Adverse outcomes in lawsuits, audits and investigations, could result in significant monetary damages, including indemnification payments, or injunctive relief that could adversely affect our ability to conduct our business, and may have a material adverse effect on our financial condition, results of operations and cash flows.
Adverse outcomes in 16 Table of Contents lawsuits, audits and investigations, could result in significant monetary damages, including indemnification payments, or injunctive relief that could adversely affect our ability to conduct our business, and may have a material adverse effect on our financial condition, results of operations and cash flows.
These economies are rapidly evolving and may not grow or even if they do grow, our services may not be widely used or accepted there. Accordingly, the demand for our services in these locations is uncertain.
We seek to serve new, developing, and emerging economies in international locations to grow our business. These economies are rapidly evolving and may not grow or even if they do grow, our services may not be widely used or accepted there. Accordingly, the demand for our services in these locations is uncertain.
We depend on the uninterrupted operation of our various systems, secure data centers, and other computer and communication networks. Our systems and operations are vulnerable to damage or interruption from power loss, transmission cable cuts and other telecommunications failures, damage or interruption caused by fire, earthquake, and other natural disasters, intentional acts of vandalism, terrorist attacks, unintentional mistakes, or errors.
Our systems and operations are vulnerable to damage or interruption from power loss, transmission cable cuts and other telecommunications failures, damage or interruption caused by fire, earthquake, and other natural disasters, intentional acts of vandalism, terrorist attacks, unintentional mistakes, or errors.
The severity and duration of a these economic conditions, as well as the timing, strength, and sustainability of any recovery, are unknown and are not within the Company’s control.
The overall economic impact, severity and duration of these conditions, as well as the timing, strength, and sustainability of any recovery, are not known at this time, and are not within the Company’s control.
For example, the government of China has indicated that it will issue, and has issued, new regulations, and has begun to enforce existing regulations, that impose additional costs on, and risks to, our provision of registry services in China and could impact the demand for domain name registrations in China.
For example, the government of China has indicated that it will issue, and has issued, new regulations, and it has begun to enforce existing regulations differently, including by directing certain implementation models for registry services, that impose additional costs on, and risks to, our provision of registry services in China.
Contractual, Regulatory, Legal and Compliance Risk Factors Any loss or modification of our right to operate the . com and . net gTLDs could have a material adverse impact on our business and result in loss of revenues.
See the “Competition” section in Part I, Item 1 of this Form 10-K for further information. Contractual, Regulatory, Legal and Compliance Risk Factors Any loss or modification of our right to operate the . com and . net gTLDs could have a material adverse impact on our business and result in loss of revenues.
However, we can provide no assurances whether we will seek the removal of these restrictions, or whether the DOC would approve the removal of these restrictions. 13 Table of Contents Our .com Registry Agreement, including its pricing provisions, has faced, and could face in the future, challenges, including possible legal challenges, or challenges under ICANN’s accountability mechanisms, from ICANN, registrars, registrants, and others, and any adverse outcome from these challenges could have a material adverse effect on our business.
Our .com Registry Agreement, including its pricing provisions, has faced, and could face in the future, challenges, including possible legal challenges, or challenges under ICANN’s accountability mechanisms, from ICANN, registrars, registrants, and others, and any adverse outcome from these challenges could have a material adverse effect on our business.
Registries, including us, and China-based registrars are also required by some of these regulations to obtain a government-issued license for each gTLD or ccTLD operating in China.
These regulations are impacting the demand for domain name registrations in China. These regulations require registries, including us, and China-based registrars, to obtain a government-issued license for each gTLD or ccTLD operating in China.
In addition, such claims, lawsuits, audits and investigations could involve significant expense and diversion of management’s attention and resources from other matters. Strategic, Business and Operating Risk Factors Deterioration of economic conditions could materially harm our business.
In addition, such claims, lawsuits, audits and investigations could involve significant expense and diversion of management’s attention and resources from other matters.
See the “Competition” section in Part I, Item 1 of this Form 10-K for further information. The evolution of technologies or internet practices and behaviors, the adoption of substitute technologies, or wholesale price increases of domain names in the gTLDs we operate may materially and negatively impact the demand for the domain names for which we are the registry operator.
Strategic, Business and Operating Risk Factors The evolution of technologies or internet practices and behaviors, the adoption of substitute technologies, or wholesale price increases of domain names in the gTLDs we operate may materially and negatively impact the demand for the domain names for which we are the registry operator.
We have been designated as the registry operator for certain new gTLDs, including certain IDN gTLDs. Our new gTLDs may not be as or more successful than the new gTLDs obtained by our competitors.
Our new gTLDs may not be as or more successful than the new gTLDs obtained by our competitors.
Any failure to obtain or renew the required licenses, or to comply with any license requirements or any updates thereto, by us or our China-based registrars could impact our current and future business in China.
Any failure to obtain or renew the required licenses, or to comply with any license requirements or any updates thereto, or any failure to comply with these regulations or directives, by us or our China-based registrars, could result in significant harm to our business in China including the suspension of some or all of our registry services in China.
The Organization for Economic Cooperation and Development (“OECD”) continues to issue guidance that will provide a long-term, multilateral proposal on the taxation of the digital economy. Similarly, some international tax jurisdictions, independent of the OECD, have enacted or may enact new tax regimes aimed at income resulting from digital services.
The Organization for Economic Cooperation and Development (“OECD”) continues to issue guidance that will provide a long-term, multilateral proposal on the taxation of the digital economy. Certain countries have enacted and other countries may enact legislation based on the OECD’s guidance that could impact the taxation of the digital economy.
Our business is, and could continue to be, adversely affected by the deterioration in national or global economic conditions, including high inflation rates, increasing interest rates, disruption in the supply chain, and currency fluctuations, resulting from the continuing economic effects of the COVID-19 pandemic, war and civil unrest, and other political and economic developments.
Economic and Competition Risk Factors Deterioration of economic conditions, particularly in China, continues to negatively impact our business. Our business is, and will likely continue to be, adversely affected by the deterioration in global economic conditions, including high inflation, interest rates, and currency fluctuations, as well as impacts from war, civil unrest, and other political and economic developments.
Finally, consolidation within our 16 Table of Contents industry has occurred and is likely to continue to occur. Our ability to participate and benefit from such consolidations may be limited and consolidation within our industry among our competitors could harm our competitive position and adversely impact our business.
Our ability to participate and benefit from such consolidations may be limited and consolidation within our industry among our competitors could harm our competitive position and adversely impact our business. We have been designated as the registry operator for certain new gTLDs, including certain IDN gTLDs.