Biggest changeRisk Factors Summary This summary provides an overview of the risks we face and should not be considered a substitute for the more fulsome risk factors discussed immediately following this summary. • Risks Related to Our Ability to Grow Our Business • Laws, regulations and customer expectations regarding the use, storage and movement of data may restrict our ability to continue to optimize our platform. • A failure to innovate in response to rapidly evolving technological changes and in the midst of an intensely competitive market may harm our competitive position and business prospects. • We may not successfully increase our penetration of international markets or manage risks associated with foreign markets. • Incorporating AI technology into our offerings may result in operational, legal, regulatory, ethical and other challenges. • We rely on our network of partners for an increasing portion of our revenues, and if these partners fail to perform, our business may be harmed. • Doing business with the public sector and heavily-regulated entities subjects us to risks related to government procurement processes, regulations and contracting requirements. • If we fail to comply with applicable anti-corruption and anti-bribery laws, export control laws, economic and trade sanctions laws, or other global trade laws, we could be subject to penalties and civil and/or criminal sanctions and our business could be materially adversely affected. • Our customer deals are becoming more complex, which tend to involve longer and more expensive sales cycles, increased pricing pressure and implementation and configuration challenges. • As we acquire or invest in companies and technologies, we may not realize the expected business or financial benefits and the acquisitions and investments may divert our management’s attention and result in additional shareholder dilution or costs. • Risks Related to the Operation of Our Business • Actual or perceived cybersecurity events experienced by us or our third-party service providers may create the perception that our platform is not secure, and we may lose customers or incur significant liabilities. • We may lose key members of our management team or qualified employees or may not be able to attract and retain employees we need. • Delays in the release of, or actual or perceived defects in, our products may slow the adoption of our latest technologies, reduce our ability to efficiently provide services, decrease customer satisfaction, and adversely impact future product sales. • Disruptions or defects in our services could damage our customers’ businesses, subject us to substantial liability and harm our business. • Delays in improving our information systems and processes could interfere with our ability to support our existing and growing customer and employee base as we scale. • We may not be able to protect or enforce our intellectual property rights. • Our use of open-source software could harm our ability to sell our products and services and subject us to possible litigation. • Various factors, including our customers’ business, integration, migration, compliance and security requirements, or errors by us, our partners, or our customers, may cause implementations of our products to be delayed, inefficient or otherwise unsuccessful. • Our failure or perceived failure to achieve our ESG goals or maintain ESG practices that meet evolving stakeholder expectations could adversely affect us. • We may face natural disasters, including climate change, and other events beyond our control. 14 Table of Contents • Risks Related to the Financial Performance or Financial Position of Our Business • Because we generally recognize revenues from our subscription service over the subscription term, a decrease in new subscriptions or renewals may not be immediately reflected in our operating results. • As our business grows, we expect our revenue growth rate to decline over the long term. • Changes in our effective tax rate or disallowance of our tax positions may adversely affect our business. • We may be adversely affected by our debt service obligations. • Risks Related to General Economic Conditions • Our industry and business may be harmed by global economic conditions. • We may be harmed by foreign currency exchange rate fluctuations. • Risks Related to Ownership of Our Common Stock • Our stock price is likely to continue to be volatile. • Provisions in our governing documents or Delaware law might discourage, delay or prevent a change of control or changes in our management and, therefore, depress our stock price.
Biggest changeRisks Related to Our Ability to Grow Our Business • Laws, regulations and customer expectations regarding the use, storage and movement of data may restrict our ability to continue to optimize our platform. • A failure to innovate and adapt how we offer our products in response to rapidly evolving technological changes and in the midst of an intensely competitive market may harm our competitive position and business prospects. • We may not successfully increase our penetration of international markets or manage risks associated with foreign markets. • Incorporating AI technology into our offerings may result in operational, legal, regulatory, ethical and other challenges. • We rely on our network of partners for an increasing portion of our revenues, and if these partners fail to perform, our business may be harmed. • Doing business with the public sector and heavily-regulated entities subjects us to risks related to government procurement processes, regulations and contracting requirements. • If we fail to comply with applicable anti-corruption and anti-bribery laws, export control laws, economic and trade sanctions laws, or other global trade laws, we could be subject to penalties and civil and/or criminal sanctions and our business could be materially adversely affected. • Our customer deals are becoming more complex, which tend to involve longer, more expensive sales cycles, increased pricing pressure, and implementation and configuration challenges. • As we acquire or invest in companies and technologies, we may not realize the expected business or financial benefits and the acquisitions and investments may divert our management’s attention and result in additional shareholder dilution or costs.
Our customer deals are becoming more complex, which tend to involve longer and more expensive sales cycles, increased pricing pressure and implementation and configuration challenges. The customer deals we pursue are becoming more complex as we engage with increasingly larger enterprise customers with multiple workflow products that span the enterprise.
Our customer deals are becoming more complex, which tend to involve longer, more expensive sales cycles, increased pricing pressure, and implementation and configuration challenges. The customer deals we pursue are becoming more complex as we engage with increasingly larger enterprise customers with multiple workflow products that span the enterprise.
Geopolitical destabilization and warfare have impacted and may continue to impact global currency exchange rates, commodity prices, energy markets, trade and movement of resources, which may adversely affect the buying power of our customers, our access to and cost of resources from our suppliers, and ability to operate or grow our business.
Geopolitical destabilization and warfare have impacted and may continue to impact global currency exchange rates, commodity prices, energy markets, trade and movement of resources, which may adversely affect the buying power of our customers and our access to and cost of resources from our suppliers and ability to operate or grow our business.
Factors affecting our stock price, some of which are beyond our control, include, among other factors: • changes in the estimates of our operating results, revenue growth, or changes in recommendations by securities analysts; • changes in the average contract term of our customer agreements, timing of renewals and renewal rates; • our ability to meet our financial guidance or financial performance expectations of the securities analysts or investors; • announcements of new products, services or technologies, new applications or enhancements to services, strategic alliances, acquisitions, or other significant events by us or by our competitors; • fluctuations in company valuations, such as high-growth or cloud companies, perceived to be comparable to us; • changes to our management team; • trading activity by directors, executive officers and significant shareholders, or the market’s perception that large shareholders intend to sell their shares; • the inclusion, exclusion, or removal of our stock from any major trading indices; • the size of our market float; • the trading volume of our common stock, including sales following the exercise of outstanding options or vesting of equity awards; • our issuance or repurchase of shares of our common stock; • changes in laws or regulations impacting the delivery of our services; • significant litigation or regulatory actions; • the amount and timing of customer payments, payment defaults, operating costs and capital expenditures • the amount and timing of equity awards and the related financial statement expenses; • the impact of new accounting pronouncements; • the inability to conclude that our internal controls over financial reporting are effective; • our ability to accurately estimate the total addressable market for our products and services; and • overall performance of the equity markets.
Factors affecting our stock price, some of which are beyond our control, include, among others: • changes in the estimates of our operating results, revenue growth or changes in recommendations by securities analysts; • changes in the average contract term of our customer agreements, timing of renewals and renewal rates; • our ability to meet our financial guidance or financial performance expectations of the securities analysts or investors; • announcements of new products, services or technologies, new applications or enhancements to services, strategic alliances, acquisitions or other significant events by us or by our competitors; • fluctuations in company valuations, such as high-growth or cloud companies, perceived to be comparable to us; • changes to our management team; • trading activity by directors, executive officers and significant shareholders or the market’s perception that large shareholders intend to sell their shares; • the inclusion, exclusion or removal of our stock from any major trading indices; • the size of our market float; • the trading volume of our common stock, including sales following the exercise of outstanding options or vesting of equity awards; • our issuance or repurchase of shares of our common stock; • changes in laws or regulations impacting the delivery of our services; • significant litigation or regulatory actions; • the amount and timing of customer payments, payment defaults, operating costs and capital expenditures; • the amount and timing of equity awards and the related financial statement expenses; • the impact of new accounting pronouncements; • the inability to conclude that our internal controls over financial reporting are effective; • our ability to accurately estimate the total addressable market for our products and services; and • overall performance of the equity markets.
Accordingly, to compete effectively, we must: • identify and innovate in the right technologies; • keep pace with rapidly changing technological developments, such as AI, which may disrupt resource and talent needs and the enterprise software marketplace; • accurately predict and meet our customers’ changing digital transformation needs, priorities and adoption practices, including their technology infrastructures and buying and budgetary practices; • invest in and continually optimize our own technology platform so that we continue to meet the very high-performance expectations of our customers; • successfully deliver and promote new, scalable technologies and products to meet customer needs and priorities; • efficiently integrate with technologies within our customers’ digital environments; • expand our offerings into new and adjacent industries and comply with regulations in such industries; • successfully sell to buyers who are not familiar with our offerings; • profitably and efficiently market and sell our new and existing products; • effectively scale our business processes and operations as we grow; • successfully adapt new pricing models; • promote ongoing customer relationships and customer value realization; • effectively secure our platform, data and customers’ data; and • effectively deliver, directly or through our partner ecosystem, the digital transformation process planning, IT systems architecture planning, and product implementation services that our customers require to be successful.
Accordingly, to compete effectively, we must: • identify and innovate in the right technologies; • keep pace with rapidly changing technological developments, such as AI, which may disrupt resource and talent needs and the enterprise software marketplace; • accurately predict and meet our customers’ changing digital transformation needs, priorities and adoption practices, including their technology infrastructures and buying and budgetary practices; • invest in and continually optimize our own technology platform so that we continue to meet the high-performance expectations of our customers; • successfully deliver and promote new, scalable technologies and products, such as AI, to meet customer needs and priorities; • efficiently integrate with technologies within our customers’ digital environments; • expand our offerings into new and adjacent industries and comply with regulations in such industries; • successfully sell to buyers who are not familiar with our offerings; • profitably and efficiently market and sell our new and existing products; • effectively scale our business processes and operations as we grow; • successfully adapt new pricing models; • promote ongoing customer relationships and customer value realization; • effectively secure our platform, data and customers’ data; and • effectively deliver, directly or through our partner ecosystem, the digital transformation process planning, IT systems architecture planning, and product implementation services that our customers require to be successful.
Our competitors could also independently develop services equivalent to ours, and our IP rights may not be broad enough for us to prevent competitors from utilizing their developments to compete with us. Reverse engineering, unauthorized copying or other misappropriation of our proprietary technology could enable third parties to benefit from our technology without paying us for it.
Our competitors could also independently develop services equivalent to ours, and our IP rights may not be broad enough for us to prevent them from utilizing their developments to compete with us. Reverse engineering, unauthorized copying or other misappropriation of our proprietary technology could enable third parties to benefit from our technology without paying us for it.
Delays in the release of, or actual or perceived defects in, our products may slow the adoption of our latest technologies, reduce our ability to efficiently provide services, decrease customer satisfaction, and adversely impact future product sales. We must successfully continue to release new products and updates to existing products.
Delays in the release of, or actual or perceived defects in, our products may slow the adoption of our latest technologies, reduce our ability to efficiently provide services, decrease customer satisfaction and adversely impact future product sales. We must successfully continue to release new products and updates and features to existing products.
These and other laws or regulations may cause us to modify our data handling and compliance practices, which could be costly or disruptive to our operations, and may also impact our ability to use certain data to support our products or our product development efforts or hinder our customers’ ability to adopt or continue to use our products.
These and other laws or regulations or enforcement practices may cause us to modify our data handling and compliance practices, which could be costly or disruptive to our operations, and may also impact our ability to use certain data to support our products or our product development efforts or hinder our customers’ ability to adopt or continue to use our products.
Additionally, the IP ownership and license rights of new technologies and the use of outputs therefrom, such as AI, which we are increasingly building into our product offerings, have not been fully addressed by U.S. courts interpreting current and new laws or regulations, and the use or adoption of such technologies in our products and services may expose us to potential intellectual property claims; breach of a data license, software license, or website terms of service allegations; claimed violations of privacy rights; and other tort claims.
Additionally, the IP ownership and license rights of new technologies and the use of outputs therefrom, such as AI, which we are increasingly building into our product offerings, have not been fully addressed by U.S. and foreign courts interpreting current and new laws or regulations, and the use or adoption of such technologies in our products and services may expose us to potential IP claims; breach of a data license, software license, or website terms of service allegations; claimed violations of privacy rights; and other tort claims.
In addition, the relatively new Trans-Atlantic Data Privacy Framework, which facilitates the transfer of data between the United States (“U.S.”) and European Union (“EU”), may be subject to legal challenges and regulatory interpretations that could create uncertainties and impact our operations and compliance obligations.
In addition, the Trans-Atlantic Data Privacy Framework, which facilitates the transfer of data between the United States (“U.S.”) and European Union (“EU”), may be subject to legal challenges and regulatory interpretations that could create uncertainties and impact our operations and compliance obligations.
Disruptions or defects in our services could damage our customers’ businesses, subject us to substantial liability and harm our business. Our business depends on our platform to be available without disruption. From time to time, we have experienced and expect to continue to experience defects, disruptions, outages and other performance and quality problems with our platform.
Disruptions or defects in our services could damage our customers’ businesses, subject us to substantial liability and harm our business. Our business depends on our platform to be available without disruption. From time to time, we have experienced and expect to continue to experience defects, disruptions, data loss, outages and other performance and quality problems with our platform.
While we maintain crisis management and disaster response plans, such planning may not account for all possible events and the occurrence of such events could make it difficult or impossible for us to deliver our services to our customers, could decrease demand for our services, and could cause us to incur substantial expense.
While we maintain crisis management, business continuity and disaster response plans, such planning may not account for all possible events and the occurrence of such events could make it difficult or impossible for us to deliver our services to our customers, could decrease demand for our services, and could cause us to incur substantial expense.
New defects may be detected in the future and may arise from our increasing use of the public cloud. For example, we provide regular updates to our services, which can contain undetected defects. Defects may also be introduced by our use of third-party software, including open-source software.
New defects may be detected in the future and may arise from our increasing use of public cloud service providers. For example, we provide regular updates to our services, which can contain undetected defects. Defects may also be introduced by our use of third-party software, including open-source software.
Risks Related to the Financial Performance or Financial Position of Our Business Because we generally recognize revenues from our subscription service over the subscription term, a decrease in new subscriptions or renewals may not be immediately reflected in our operating results. We generally recognize revenues from customers ratably over the terms of their subscriptions.
Risks Related to the Financial Performance or Financial Position of Our Business Because we generally recognize revenues from our subscription services over the subscription term, a decrease in new subscriptions or renewals may not be immediately reflected in our operating results. We generally recognize revenues from customers ratably over the terms of their subscriptions.
Moreover, even if a breach is unrelated to our security programs or practices, it could still cause us reputational harm and require us to undertake significant efforts to assess and respond to the breach, including further protecting our customers from their own vulnerabilities.
Moreover, even if a breach is unrelated to our security programs or practices, it could still cause us reputational harm and require us to undertake significant efforts to assess and respond to the breach, including further protecting our customers from their own security risks.
For example, our partners could misrepresent to our customers the functionality of our platform or products, fail to perform services to our customers’ expectations, or violate laws or our corporate policies. Further, changes to our direct go-to-market models may cause friction with our partners.
For example, our partners could misrepresent to our customers the functionality of our platform or products, fail to perform services that meet our customers’ expectations, or violate laws or our corporate policies. Further, changes to our direct go-to-market models may cause friction with our partners.
Disruptions or defects in our services may reduce our revenues, cause us to issue credits or pay penalties, subject us to claims and litigation, cause our customers to delay payment or terminate or fail to renew their subscriptions, and adversely affect our ability to attract new customers.
Disruptions or defects in our services may reduce our revenues, cause us to issue credits or pay penalties, subject us to claims and litigation, cause our customers to delay payment or terminate or decline to renew their subscriptions, and adversely affect our ability to attract new customers.
They may utilize acquisitions, integrations or consolidations to offer integrated or bundled products, enhanced 15 Table of Contents functionality or other advantages. Some of our existing competitors and potential competitors are larger and have greater name recognition, the ability to more efficiently scale their business, more established operations and customer relationships, and greater financial and technical resources than we do.
They may utilize acquisitions, integrations or consolidations to offer integrated or bundled products, enhanced functionality or other advantages. Some of our existing competitors and potential competitors are larger and have greater name recognition, the ability to more efficiently scale their business, more established operations and customer relationships and greater financial and technical resources than we do.
In addition, we grant equity awards to our employees and sustained declines in our stock price or lower stock price performance relative to our competitors reduces the retention value of such awards, which can impact the competitiveness of our compensation.
In addition, we grant equity awards to our employees and sustained declines in our stock price or lower stock price performance relative to our competitors reduces the retention value of such awards, which can impact the attractiveness of our compensation.
Further, security researchers and other individuals have in the past actively searched for, published and/or exploited actual and potential vulnerabilities in our products or services and will likely continue to do so in the future.
Further, security researchers and other entities and individuals have actively searched for, published and/or exploited actual and potential vulnerabilities in our products or services and will likely continue to do so in the future.
We are continually evaluating and, as appropriate, enhancing the attractiveness of our compensation packages and benefit programs. As a result, we have experienced and may continue to 21 Table of Contents experience increased costs that may not be offset by either improved productivity or higher sales, potentially resulting in a reduction in our profitability.
We are continually evaluating and, as appropriate, enhancing the attractiveness of our compensation packages and benefit programs. As a result, we have experienced and may continue to experience increased costs that may not be offset by either improved productivity or higher sales, potentially resulting in a reduction in our profitability.
If we fail to effectively manage and grow our network of partners, our ability to sell our products and efficiently provide our services may be impacted and our business may be harmed. 17 Table of Contents Doing business with the public sector and heavily-regulated entities subjects us to risks related to government procurement processes, regulations and contracting requirements.
If we fail to effectively manage and grow our network of partners, our ability to sell our products and efficiently provide our services may be impacted and our business may be harmed. Doing business with the public sector and heavily-regulated entities subjects us to risks related to government procurement processes, regulations and contracting requirements.
Techniques used to sabotage or to obtain unauthorized access to systems are constantly evolving and may go undetected until a successful attack occurs. Moreover, we have experienced security incidents, which may reoccur in the future, that resulted in unauthorized access to, loss, or inadvertent disclosure of confidential, proprietary and sensitive information.
Techniques used to sabotage or to obtain unauthorized access to systems are constantly evolving and may go undetected until we become aware of a successful attack. Moreover, we have experienced security incidents, which may reoccur in the future, that resulted in unauthorized access to, loss or inadvertent disclosure of confidential, proprietary and sensitive information.
In addition, our subscription agreements generally require us to defend our customers against claims that our technology infringes the intellectual property rights of third parties. Any claim or litigation, whether or not resolved in our favor, could result in significant expense to us, divert the efforts of our personnel and may result in counterclaims against us.
In addition, our subscription agreements generally require us to defend our customers against claims that our technology infringes the IP rights of third parties. Any claim or litigation, whether or not resolved in our favor, could result in significant expense to us, divert the efforts of our personnel and may result in counterclaims against us.
Our insurance may not be sufficient to cover losses or additional expenses we may sustain. In the event of major natural disasters or catastrophic events, our backup systems could fail, customer data could be lost, and resumption of operations could require significant time.
Our insurance may not be sufficient to cover losses or additional expenses we may sustain. In the event of major natural disasters or catastrophic events, our backup systems could fail, critical teams could be impacted, customer data could be lost and resumption of operations could require significant time.
If this conflict continues or if serious conflict arises elsewhere, the U.S. and other jurisdictions could impose wider economic and trade sanctions as well as export restrictions, which could impact our business opportunities and operations. Any violation of the U.S.
For so long as this conflict continues or if serious conflict arises elsewhere, the U.S. and other jurisdictions could impose wider economic and trade sanctions as well as export restrictions, which could impact our business opportunities and operations. Any violation of the U.S.
Our data security system and data governance framework, designed to protect our and our customers’ information and prevent data loss, may not be effective at preventing material breaches caused by intentional or unintentional actions or inactions by employees, contractors or third parties.
Our data security system and data governance framework, designed to protect our and our customers’ information and prevent data loss, may not be effective at preventing, detecting, responding to or remediating material breaches caused by intentional or unintentional actions or inactions by employees, contractors or third parties.
This might lead to disruptions to our operations, loss of customers, loss of revenue, or damage to our reputation, all of which could harm our business plan to successfully scale our operations and enhance productivity. We may not be able to protect or enforce our intellectual property rights.
This might lead to disruptions to our operations, loss of customers, loss of revenue, or damage to our reputation, all of which could harm our business plan to successfully scale our operations and enhance productivity. We may not be able to protect or enforce our IP rights.
Further, Section 203 of the Delaware General Corporation Law may discourage, delay or prevent a change in control of our company. Section 203 imposes certain restrictions on merger, business combinations and other transactions between us and certain shareholders. 28 Table of Contents
Further, Section 203 of the Delaware General Corporation Law may discourage, delay or prevent a change in control of our Company. Section 203 imposes certain restrictions on merger, business combinations and other transactions between us and certain shareholders.
Risks associated with making our products and services available in international markets include, for example: • compliance with multiple, conflicting and changing governmental laws and regulations; • requirements to have local partner(s), local entity ownership limitations or technology transfer or sharing requirements, or to comply with data residency and transfer laws and regulations, privacy and data protection laws and regulations, which may increase operational costs and restrictions; • the possibility that illegal or unethical activities of our local employees or business partners will be attributed to us or cause us harm; • longer and potentially more complex sales and payment receipt cycles and other collection difficulties; • different pricing and distribution environments; • potential changes in international trade policies, tariffs, agreements and practices, including the adoption and expansion of formal or informal trade restrictions or regulatory frameworks that may favor local competitors; 16 Table of Contents • governmental direction, business practices and/or cultural norms that may favor local competitors; • more prevalent cybersecurity, intellectual property and AI risks; and • localization of our services, including translation into foreign languages and associated expenses.
Risks associated with making our products and services available in international markets include, for example: • compliance with multiple, conflicting and changing governmental laws and regulations, including antitrust and competition regulations; • requirements to have local partner(s), local entity ownership limitations or technology transfer or sharing requirements, or to comply with data residency and transfer laws and regulations, privacy and data protection laws and regulations, which may increase operational costs and restrictions; • the possibility that illegal or unethical activities of our local employees or business partners will be attributed to us or cause us harm; • longer and potentially more complex sales and payment receipt cycles and other collection difficulties; • different pricing and distribution environments; • potential changes in international trade policies, tariffs, agreements and practices, including the adoption and expansion of formal or informal trade restrictions or regulatory frameworks that may favor local companies; • governmental direction, business practices and/or cultural norms that may favor local companies; • more prevalent cybersecurity, IP and AI risks; and • localization of our services, including translation into foreign languages and associated expenses.
For example, as disclosed in Note 17 in the notes to our consolidated financial statements, the Company informed certain U.S. government agencies of an internal investigation and preliminary findings and is cooperating with, among others, the Department of Justice, which commenced its own investigation into the matters.
For example, as disclosed in Note 18 “Commitments and Contingencies” in the notes to our consolidated financial statements, the Company informed certain U.S. government agencies of an internal investigation and preliminary findings and is cooperating with, among others, the Department of Justice, which commenced its own investigation into the matters.
Our failure or perceived failure to achieve our ESG goals or maintain ESG practices that meet evolving stakeholder expectations or regulatory requirements could harm our reputation, adversely impact our ability to attract and retain employees or customers and expose us to increased scrutiny from the investment community, regulatory authorities and others or subject us to liability.
Our failure or perceived failure to achieve our corporate sustainability goals or maintain corporate sustainability practices that meet stakeholder expectations or regulatory requirements could harm our reputation, adversely impact our ability to attract and retain employees or customers and expose us to increased scrutiny from the investment community, regulatory authorities and others or subject us to liability.
As we continue to expand our business internationally, we will inevitably do more business with large private enterprises and the public sector in countries outside of the U.S. Increased business in countries with heightened levels of corruption subjects us and our officers and directors to increased scrutiny and potential liability from our business operations.
As we continue to expand our business internationally, we will inevitably do more business with large private enterprises and the public sector in countries outside of the U.S. Increased business in countries with heightened trade controls and levels of corruption subjects us and our officers and directors to increased scrutiny and potential liability.
Further, unanticipated changes in foreign currency exchange rates may result in poorer overall financial performance than if we had not engaged in any hedging transactions, as the hedging instrument we use may not be aligned with the exposures being hedged. Risks Related to Ownership of Our Common Stock Our stock price is likely to continue to be volatile.
Further, unanticipated changes in foreign currency exchange rates may result in poorer overall financial performance than if we had not engaged in any hedging transactions, as the hedging instrument we use may not be aligned with the exposures being hedged. 38 Table of Contents Part I Risks Related to Ownership of Our Common Stock Our stock price is likely to continue to be volatile.
Further, due to heightened concerns relating to privacy and security regulatory matters, our customers may request certain certifications and failure to obtain, or consistently maintain, those certifications may adversely impact our reputation and business.
Further, due to heightened concerns relating to privacy and security regulatory matters, our customers from time to time request certain certifications, and a failure to obtain or consistently maintain those certifications may adversely impact our reputation and business.
If such laws or regulations require increased transparency, it may impair protection of our trade secrets or other IP. 23 Table of Contents Our use of open-source software could harm our ability to sell our products and services and subject us to possible litigation.
If such laws or regulations require increased transparency, it may impair protection of our trade secrets or other IP. 34 Table of Contents Part I Our use of open-source software could harm our ability to sell our products and services and subject us to possible litigation.
Any of our primary locations may be vulnerable to the adverse effects of climate change. For example, our California headquarters have experienced, and may continue to experience, climate-related events at an 24 Table of Contents increasing frequency and severity, including drought, water scarcity, heat waves, wildfires and air quality impacts and power shutoffs associated with wildfires.
Any of our primary locations may be vulnerable to the adverse effects of climate-related risks. For example, our California headquarters have experienced and may continue to experience climate-related events at an increasing frequency and severity, including drought, water scarcity, heat waves, wildfires and air quality impacts and power shutoffs associated with wildfires.
We offer region-specific services, by which customer data is hosted locally and customers may elect to receive support from locally-based ServiceNow teams. Setting up and maintaining these region-specific services require significant investment, including to comply with applicable laws and regulations.
We offer some region-specific services where customer data is hosted locally and customers may elect to receive support from locally-based ServiceNow teams. Setting up and maintaining these region-specific services require significant investment, including to comply with applicable laws and regulations.
In addition, compliance with complex regulations and contracting provisions in a variety of jurisdictions can be expensive and consume significant management resources. In certain jurisdictions, our ability to win business may be constrained by political and other factors unrelated to our competitive position in the market.
In addition, compliance with complex regulations and contracting provisions in a variety of jurisdictions can be expensive and consume significant management resources. In certain jurisdictions, our ability to win business may be constrained by political and other factors unrelated to our market offerings.
While we believe that our position is appropriate 25 Table of Contents and well founded, if our position were successfully challenged by taxing authorities in other jurisdictions, we may become subject to significant tax liabilities. We may be adversely affected by our debt service obligations.
While we believe that our position is appropriate and well founded, if our position were successfully challenged by taxing authorities in other jurisdictions, we may become subject to significant tax liabilities. We may be adversely affected by our debt service obligations.
If we breach any of the covenants and do not obtain a waiver from the note holders or lenders, then, subject to applicable cure periods, any outstanding indebtedness may be declared immediately due and payable. In addition, changes by any rating agency to our credit rating may negatively impact the value and liquidity of our securities.
If we breach any of the covenants and do not obtain a waiver from the note holders or lenders, then, subject to applicable cure periods, any outstanding indebtedness may be declared immediately due and payable. In addition, a rating agency’s change to our credit rating may negatively impact the value and liquidity of our securities.
We use derivative instruments, such as foreign currency forward contracts, to hedge exposures that certain of our balance sheet and income statement items have to changes in foreign currency exchange rates. These hedging contracts have reduced and may continue to reduce, but they have not and cannot entirely eliminate, the impact of adverse foreign currency exchange rate movements.
We use derivative instruments, such as foreign currency forward contracts, to hedge certain balance sheet and income statement exposures to foreign currency exchange rates. These hedging contracts have reduced and may continue to reduce, but they have not and cannot entirely eliminate, the impact of adverse foreign currency exchange rate movements.
Strategic transactions involve numerous risks, including: • difficulties assimilating or integrating the businesses, technologies, products, personnel or operations of the acquired companies; • failing to achieve the expected benefits of the acquisition or investment; • potential loss of employees of the acquired company; • inability to maintain relationships with customers, suppliers and partners of the acquired business; 19 Table of Contents • introducing vulnerabilities or threats by integrating acquired technologies or businesses; • introducing increased complexity and burden to maintain the technology platform; • potential adverse tax consequences; • disruption to our business and diversion of management attention and other resources; • potential financial, credit or regulatory risks associated with acquired customers, suppliers and partners of the acquired business; • dependence on acquired technologies or licenses for which alternatives may not be available to us or which may involve significant cost or complexity; • in the case of foreign acquisitions, the challenges associated with integrating operations across different cultures, languages, and legal regimes and any currency and regulatory risks associated with specific countries; • data security or privacy risks, compliance requirements, or integration costs from the acquired technology or company; • impairment of our investments or the possibility our investees will be unable to obtain future funding on favorable terms or at all; and • potential unknown liabilities or disputes associated with the acquired businesses.
Strategic transactions involve numerous risks, including: • difficulties assimilating or integrating the businesses, technologies, products, personnel or operations of the acquired companies; • failing to achieve the expected benefits of the acquisition or investment; • potential loss of employees of the acquired company; • inability to maintain relationships with customers, suppliers and partners of the acquired business; • introducing vulnerabilities or threats by integrating acquired technologies or businesses; • introducing increased complexity and burden to maintain the technology platform; • potential adverse tax consequences; • disruption to our business and diversion of management attention and other resources; • potential financial, credit or regulatory risks associated with acquiring a business or a part thereof, including risks of delayed, conditioned or denied regulatory clearances and risks relating to customers, suppliers and partners of the acquired business; • dependence on acquired technologies or licenses for which alternatives may not be available to us or which may involve significant cost or complexity; • in the case of foreign acquisitions, the challenges associated with integrating operations across different cultures, languages, legal regimes and any currency, tax and regulatory risks associated with specific countries; • data security or privacy risks, compliance requirements or integration costs from the acquired technology or company; 2025 Annual Report 29 Table of Contents Part I • impairment of our investments or the possibility our investees will be unable to obtain future funding on favorable terms or at all; and • potential unknown liabilities or disputes associated with the acquired businesses.
We may not have insurance sufficient to compensate us for potentially significant losses that may result from claims arising from disruptions to our services. Delays in improving our information systems and processes could interfere with our ability to support our existing and growing customer and employee base as we scale.
We may not have insurance sufficient to compensate us for potentially significant losses that may result from claims arising from disruptions to our services. Delays in improving our information systems and processes could interfere with our ability to support our existing and growing base of customers and employees as we scale.
Unanticipated currency 26 Table of Contents fluctuations have adversely affected and could continue to adversely affect our financial results or cause our results to differ from investor expectations or our own guidance in any future periods. Volatility in foreign currency exchange rates and global financial markets is expected to continue due to political and economic uncertainty globally.
Unanticipated currency fluctuations have adversely affected and could continue to adversely affect our financial results or cause our results to differ from investor expectations or our own guidance in any future periods. Volatility in foreign currency exchange rates and global financial markets is expected to continue due to global political and economic uncertainty.
If we are unable to manage these risks, our business will be adversely affected. Incorporating AI technology into our offerings may result in operational, legal, regulatory, ethical and other challenges. We are increasingly innovating and expanding offerings on our platform by integrating AI technology.
If we are unable to manage these risks, our business will be adversely affected. Incorporating AI technology into our offerings may result in operational, legal, regulatory, ethical and other challenges. We are increasingly innovating and expanding offerings on our platform by integrating AI technology into our customer-facing products and internal operations.
Governments have adopted, and likely will continue to adopt, laws and regulations affecting the use, storage and movement of data, including laws related to data privacy and security, the use of machine learning and artificial intelligence (“AI”), and data sovereignty or residency requirements.
Governments have adopted, and likely will continue to adopt, laws and regulations affecting the use, storage and movement of data, including laws related to data privacy and security, the use of machine learning and AI, and data sovereignty or residency requirements.
As a result of the Russia-Ukraine conflict, for example, the U.S. and other jurisdictions have imposed economic and trade sanctions and export control restrictions against Russia and Belarus, as well as certain persons, assets and interests associated with those countries.
As a result of the Russia-Ukraine conflict, for example, the U.S. and other jurisdictions have imposed economic and trade sanctions and export control restrictions against Russia and Belarus, as well as certain persons, assets and interests associated with 28 Table of Contents Part I those countries.
These provisions, among other things: • permit our board to establish the number of directors; • require super-majority voting to amend certain provisions in our certificate of incorporation and bylaws; • authorize issuance of “blank check” preferred stock that our board could use to implement a shareholder rights plan; • prohibit shareholder action by written consent, which requires all shareholder actions to be taken at a meeting; • permit our board to make, alter or repeal our bylaws; and 27 Table of Contents • require advance notice for shareholders to submit director nominations or other business at annual shareholders meetings (although our bylaws permit shareholders proxy access).
These provisions, among other things: • permit our board to establish the number of directors; • authorize issuance of “blank check” preferred stock that our board could use to implement a shareholder rights plan; • prohibit shareholder action by written consent, which requires all shareholder actions to be taken at a meeting; • permit our board to make, alter or repeal our bylaws; and • require advance notice for shareholders to submit director nominations or other business at annual shareholders meetings (although our bylaws permit shareholders proxy access).
Moreover, the incorporation of third-party or open-source software code into our or our customers’ systems increases the risk of exploitation of vulnerabilities. We also have inherited and may in the future inherit additional security risks from acquiring or partnering with other companies.
Moreover, the incorporation of third-party, AI-generated or open-source software code into our or our customers’ systems increases the risk of exploitation of 30 Table of Contents Part I vulnerabilities. We also have inherited and may in the future inherit additional security risks from acquiring or partnering with other companies.
Our business operations are subject to interruption by natural disasters, flooding, fire, extreme heat, power shortages, pandemics, terrorism, political unrest, telecommunications failure, vandalism, cyberattacks, geopolitical instability, war, the effects of climate change and other events beyond our control.
Our business operations are subject to interruption by natural disasters, flooding, fire, extreme heat, power shortages, pandemics, terrorism, political 2025 Annual Report 35 Table of Contents Part I unrest, telecommunications failure, vandalism, cyberattacks, geopolitical instability, war, the effects of climate change and other events beyond our control.
Further, we are required to comply with a variety of complex laws, regulations, and contractual provisions relating to the formation, administration, or performance of government contracts that give public sector customers substantial rights and remedies, many of which are not typically found in commercial contracts.
In addition, we could be precluded from doing further business with governmental entities. Further, we are required to comply with a variety of complex laws, regulations and contractual provisions relating to the formation, administration or performance of government contracts that give public sector customers substantial rights and remedies, many of which are not typically found in commercial contracts.
Downgrades in our credit ratings could restrict our ability to obtain additional financing in the future and could affect the terms of any such financing. Risks Related to General Economic and Political Conditions Our industry and business may be harmed by global economic and political conditions.
Downgrades in our credit ratings could restrict our ability to obtain additional financing in the future and could affect the terms of any such financing. 2025 Annual Report 37 Table of Contents Part I Risks Related to General Economic and Political Conditions Our industry and business may be harmed by global economic and political conditions.
Some customers may lack the internal resources to manage a digital transformation such as our offering and, as a consequence, may be unable to see the benefits of our products. Unsuccessful, lengthy, or costly implementations and integrations could result in claims from customers, reputational harm, and opportunities for competitors to displace our products.
Some customers may lack the resources to effectively manage a digital transformation using our products and, as a consequence, may be unable to see the benefits of our products. Unsuccessful, lengthy or costly implementations and integrations could result in claims from customers, reputational harm and opportunities for other market participants to displace our products.
Such changes may restrict our ability to use, store or otherwise process customer data in connection with providing services and could alter or increase our compliance requirements. In some cases, this could impact our ability to offer our services in certain locations or our customers’ ability to deploy our services globally.
Such changes may restrict our ability 2025 Annual Report 23 Table of Contents Part I to use, store or otherwise process customer data in connection with providing services and could alter or increase our compliance requirements. In some cases, this could impact our ability to offer our services in certain locations or our customers’ ability to deploy our services globally.
Increases in our effective tax rate would reduce our profitability or in some cases increase our losses. Additionally, our future effective tax rate could be impacted by changes in accounting principles or changes in federal, state or international tax laws or tax rulings and these changes may have a retroactive effect. The U.S.
Increases in our effective tax rate would reduce our profitability or in some cases increase our losses. 36 Table of Contents Part I Additionally, our future effective tax rate could be impacted by changes in accounting principles or changes in federal, state or international tax laws or tax rulings and these changes may have a retroactive effect.
Our failure or perceived failure to achieve our ESG goals or maintain ESG practices that meet evolving stakeholder expectations could adversely affect us. Our ability to achieve published environmental, social, and governance (“ESG”) initiatives, goals and commitments is subject to numerous factors both within and outside of our control.
Our failure or perceived failure to achieve our corporate sustainability goals or maintain corporate sustainability practices that meet evolving stakeholder expectations could adversely affect us. Our ability to achieve published corporate sustainability goals and commitments is subject to numerous factors both within and outside of our control.
Our public sector customers may have contractual, statutory or regulatory rights to terminate current contracts with us or our third-party distributors or resellers for convenience or due to a default, though such risk may be assumed by such third-party distributor or reseller.
Our public sector customers may have contractual, statutory or regulatory rights to terminate current contracts with us or our third-party distributors or resellers for convenience or due to a default, though such risk may be 2025 Annual Report 27 Table of Contents Part I assumed by such third-party distributor or reseller.
Our success depends substantially upon the continued services of our management team, particularly our chief executive officer, chief operating officer and the other members of our executive staff. From time to time in the ordinary course of business, there have been and may continue to be changes in our management team.
Our success depends substantially upon the continued services of our management team, particularly our chief executive officer and the other members of our executive staff. From time to time in the ordinary course of business, there have been and may 2025 Annual Report 31 Table of Contents Part I continue to be changes in our management team.
We are also subject to global trade laws that apply to our worldwide operations, including prohibitions or restrictions on conducting business in certain geographies or involving certain counterparties, end-users or end-use cases.
Higher tariffs on imports related to our operations could increase our operating costs. We are also subject to global trade laws that apply to our worldwide operations, including prohibitions or restrictions on conducting business in certain geographies or involving certain counterparties, end-users or end-use cases.
The occurrence of payment delays, service credit, warranty or termination for material breach or other claims against us could result in an increase in our bad debt expense, an increase in collection cycles, an increase to our service level credit accruals, other increased expenses or risks of litigation.
The occurrence of payment delays, service credit, warranty or termination for material breach or other claims against us could result in an increase in our bad debt expense, longer aggregate collection cycles, service level credit accruals and other expenses and a heightened risk of litigation.
In most instances, our customers are responsible for administering access to the data held in their particular instance for their employees and service providers. While our software is delivered with certain preset configurations, we 20 Table of Contents understand that our customers require flexibility to configure the Now Platform to their specific business needs.
In most instances, our customers are responsible for configuring and determining access levels to the data held in their particular instance for their employees and service providers. While our software is delivered with certain preset configurations, we understand that our customers require flexibility to configure the ServiceNow AI Platform to their specific business needs.
These may also include rights with respect to price protection, refund and setoff, performance of services in languages other than English, the accuracy of information provided to the government, contractor compliance with supplier diversity policies, constraints on sales practices and other obligations that are particular to government contracts.
These laws, regulations and contractual provisions may encompass rights with respect to price protection, refund and setoff, the provision of services in languages other than English, the accuracy of information provided to the government, contractor compliance with supplier diversity policies, constraints on certain business and sales practices, and other obligations that are particular to government contracts.
However, there can be no assurance that our efforts have been or will be successful. There is little or no legal precedent governing the interpretation of the terms of open-source licenses, and therefore the potential impact of these terms on our business is uncertain and enforcement of these terms may result in unanticipated obligations regarding our products and services.
There is little or no legal precedent governing the interpretation of the terms of open-source licenses, and therefore the potential impact of these terms on our business is uncertain and enforcement of these terms may result in unanticipated obligations regarding our products and services.
Our certificate of incorporation and bylaws contain provisions that could depress our stock price by acting to discourage, delay or prevent a change in control or changes in our management that our shareholders may deem advantageous.
Our certificate of incorporation and bylaws contain provisions that could depress our stock price by discouraging, delaying or preventing a change in control or changes in our management that our shareholders may deem advantageous.
We may be subject to increased costs, regulations, reporting requirements, standards or expectations regarding climate change-driven impacts on our business. While we seek to mitigate our business risks associated with climate change by establishing robust environmental programs as part of our ESG strategy, certain of those risks are inherent wherever business is conducted.
We may be subject to increased costs, regulations, reporting requirements, standards or expectations regarding climate-related impacts on our business. While we seek to mitigate our business risks associated with climate-related risks by establishing environmental sustainability and enterprise risk programs, certain of those risks are inherent wherever business is conducted.
In addition, new partners may require extensive training and/or significant time and resources to become productive. Additionally, our relationships with partners may require us, along with our partners, to comply with complex regulations, contractual requirements and government procurement rules. Failure to adhere to these requirements could result in the loss of business opportunities, potential liabilities or penalties.
Separately, our relationships with partners may require us, along with our partners, to comply with complex regulations, contractual requirements and government procurement rules. Failure to adhere to these requirements could result in the loss of business opportunities, potential liabilities or penalties.
We have experienced, and may continue to experience, difficulties in new geographic markets, including hiring qualified sales management personnel, penetrating the target market, and managing local operations.
We have experienced and may continue to experience difficulties in new geographic markets, including hiring qualified sales management personnel, penetrating the target market and 2025 Annual Report 25 Table of Contents Part I managing local operations.
We currently serve our customers primarily using equipment managed by us and co-located in third-party data centers operated by several different providers located around the world, and we serve certain of our customers using data center facilities operated by public cloud service providers.
Although we currently serve our customers primarily using equipment managed by us and co-located in third-party data centers operated by several different providers worldwide, we expect to increasingly serve our customers using data center facilities operated by public cloud service providers.
In addition to data center providers, we also have a large ecosystem of vendors and service providers that we use for our products. If there is a compromise to data, supply chain issue or other incident with our critical service providers, it may impact our ability to provide our services and reduce our productivity.
We also have a large ecosystem of vendors and service providers that we use for our products, and a data compromise, supply chain issue or other incident involving a critical service provider could impact our ability to provide our services and reduce our productivity.
For example, as customers increasingly adopt a hybrid (on-premises and off-premises/hyperscale cloud) approach for their IT workloads, our cloud services may fail to address evolving customer requirements, including data localization.
We will also need to continually adapt to customer privacy and security requirements as they change over time. For example, as customers increasingly adopt a hybrid (on-premises and off-premises/hyperscale cloud) approach for their IT workloads, our cloud services may fail to address evolving customer requirements, including data localization.
We cannot be certain that we will be able to identify all vulnerabilities or address the vulnerabilities of which we become aware. There have been delays and may continue to be delays in developing patches that can be effectively deployed to address vulnerabilities.
In addition, we cannot be certain that we will be able to prevent, detect or remediate all vulnerabilities, and there have been delays and may continue to be delays in developing patches that can be effectively deployed to address vulnerabilities.
For example, the EU Data Act has significant requirements regarding data portability, interoperability and accessibility and unclear data transfer restrictions, any of which could impact our operations.
For example, the EU Data Act has data portability, interoperability and accessibility requirements, as well as unclear data transfer restrictions that could impact our operations.
These data centers are vulnerable to damage or interruption from earthquakes, hurricanes, floods, fires, power failures and similar events. They may also be subject to break-ins, sabotage, intentional acts of vandalism and similar misconduct, equipment failure and adverse events caused by operator error or negligence. In addition, an increased use of the public cloud increases our vulnerability to cyberattacks.
These data centers, whether managed by us or third parties, are vulnerable to damage or interruption from earthquakes, hurricanes, floods, fires, power failures and similar events. They may also be subject to break-ins, sabotage, intentional acts of vandalism and similar misconduct, equipment failure and adverse events caused by operator error or negligence.
Provisions in our governing documents or Delaware law might discourage, delay or prevent a change of control or changes in our management and, therefore, depress our stock price.
Risks Related to Ownership of Our Common Stock • Our stock price is likely to continue to be volatile. • Provisions in our governing documents or Delaware law might discourage, delay or prevent a change of control or changes in our management and, therefore, depress our stock price.
If one of those third parties is limited in its ability to do business with the government due to a regulatory or legal issue arising from their own conduct and we are not able to move our business to another third party, our business could be negatively impacted. 18 Table of Contents Further, we are increasingly doing business in heavily regulated industries, such as financial services, telecommunication, media and television, and health care.
If one of those third parties is limited in its ability to do business with the government due to a regulatory or legal issue arising from their own conduct and we are not able to move our business to another third party, our business could be negatively impacted.
Current and prospective customers in those industries may be required to comply with more stringent regulations to subscribe to and/or implement our services. In addition, regulatory agencies may impose requirements on third-party vendors that we may not meet.
Further, we are increasingly doing business in heavily regulated industries, such as financial services, telecommunication, media and television and health care. Current and prospective customers in those industries may be required to comply with more stringent regulations to subscribe to and/or implement our services. In addition, regulatory agencies may impose requirements on third-party vendors that we may not meet.
If a contract is terminated for convenience, we may only be able to collect fees for products or services delivered prior to termination and settlement expenses.
If a contract is terminated for convenience, we may only be able to collect fees for products or services delivered prior to termination and settlement expenses. If a contract is terminated due to a default, we may be liable for excess costs incurred by the customer for procuring alternative products or services.
We have made and continue to make investments to improve our information systems to support the needs of our growing customer and employee base, increase productivity, develop and enhance our services, expand into new geographic areas, and scale with 22 Table of Contents our overall growth. Such improvements are often complex, costly, and time consuming.
We have made and continue to make investments to improve our information systems to support the needs of our growing base of customers and employees, increase productivity, develop and enhance our services, expand into new geographic areas, and scale with our overall growth.
Disruptions may result from errors we make in developing, delivering, configuring or hosting our services, or designing, installing, expanding or maintaining our cloud infrastructure. Disruptions in service can also result from incidents outside of our control, including third-party incidents or denial of service or ransomware attacks, among others.
Disruptions, data loss and service degradation may result from errors we make in developing, delivering, configuring or hosting our services, or designing, installing, expanding or maintaining our cloud infrastructure. They may also arise from incidents outside of our control, including third-party incidents, denial of service or ransomware attacks, as well as from our efforts to address vulnerabilities and security incidents.