Biggest changeOperational, performance and internal control issues with our platform and related offerings, which we may experience and have experienced in the past, could include the failure of our user interface, outages, errors, discrepancies in costs billed versus costs paid, unauthorized bidding, cessation of our ability to bid or deliver impressions, deletion of our reporting information, unanticipated volume overwhelming our databases, server failure or catastrophic events affecting one or more server farms.
Biggest changeOperational, performance and internal control issues with our platform and related offerings, which we may experience and have experienced in the past, could include the failure of our user interface, outages, errors, discrepancies in costs billed versus costs paid, unauthorized bidding, cessation of our ability to bid or deliver impressions, deletion of our reporting information, unanticipated volume overwhelming our databases, server failure or catastrophic events affecting one or more server farms. 25 Table o f Contents Operational, performance, design, and internal control issues with our platform and related offerings, whether real or perceived, could also result in negative publicity, damage to our brand and reputation, government investigations, loss of clients, loss of data, loss of or delay in market acceptance or market share of our platform or related offerings, increased costs or loss of revenue, loss of the ability to access our platform or related offerings, loss of competitive position, claims by clients for losses sustained by them and loss of stockholder confidence in the accuracy and completeness of our financial reports.
Laws governing the processing of personal data in Europe (including the U.K. and EEA) also continue to impact us and continue to evolve. For example, the GDPR defines “personal data” broadly and enhances data protection obligations for controllers of such data and for service providers processing the data.
Laws governing the processing of personal data in Europe (including the U.K. and EEA) also continue to impact us and to evolve. For example, the GDPR defines “personal data” broadly and enhances data protection obligations for controllers of such data and for service providers processing the data.
For example, Apple has shifted to require user opt-in before permitting access to Apple’s unique identifier, or IDFA, and Google has announced that it will eventually deprecate the mobile advertising identifier used on Android devices entirely.
For example, Apple has shifted to require user opt-in before permitting access to Apple’s unique advertising identifier, or IDFA, and Google has announced that it will eventually deprecate the mobile advertising identifier used on Android devices entirely.
Our international operations and expansion subject us to a variety of additional risks, including: • risks related to local advertising markets, where adoption of programmatic ad buying may be slower than in the United States, advertising buyers and inventory and data providers may be less familiar with demand-side platforms and our brand, and business models may not support our value proposition; • exposure to public health issues and to travel restrictions and other measures undertaken by governments in response to such issues; • risks related to compliance with local laws and regulations, including those relating to privacy, cybersecurity, data security, antitrust, data localization, anti-bribery, import and export controls, economic sanctions (including to existing and potential partners and clients), tax and withholding (including overlapping of different tax regimes), and varied labor and employment laws (including those relating to termination of employees); corporate formation, partnership, restrictions on foreign ownership or investment and other regulatory limitations or obligations on our operations (such as obtaining requisite licenses or other governmental requirements); and the increased administrative costs and risks associated with such compliance; • operational and execution risk, and other challenges caused by distance, language and cultural differences, which may burden management, increase travel, infrastructure and legal compliance costs, and add complexity to our enforcement of advertising standards across languages and countries; 30 Table of Contents • geopolitical and social factors, such as concerns regarding negative, unstable or changing economic conditions in the countries and regions where we operate, recessions, armed conflicts and wars, political instability and trade disputes; • risks related to pricing structure, payment and currency, including aligning our pricing model and payment terms with local norms, higher levels of credit risk and payment fraud, difficulties in invoicing and collecting in foreign currencies and associated foreign currency exposure, and difficulties in repatriating or transferring funds from or converting currencies; and • reduced protection for intellectual property rights in some countries and practical difficulties in enforcing contractual and intellectual property rights abroad.
Our international operations and expansion subject us to a variety of additional risks, including: • risks related to local advertising markets, where adoption of programmatic ad buying may be slower than in the United States, advertising buyers and inventory and data providers may be less familiar with demand-side platforms and our brand, and business models may not support our value proposition; • exposure to public health issues and to travel restrictions and other measures undertaken by governments in response to such issues; • risks related to compliance with local laws and regulations, including those relating to privacy, cybersecurity, data security, antitrust, data localization, anti-bribery, import and export controls, economic sanctions (including to existing and potential partners and clients), tax and withholding (including overlapping of different tax regimes), and varied labor and employment laws (including those relating to termination of employees); corporate formation, partnership, restrictions on foreign ownership or investment and other regulatory limitations or obligations on our operations (such as obtaining requisite licenses or other governmental requirements); and the increased administrative costs and risks associated with such compliance; • operational and execution risk, and other challenges caused by distance, language and cultural differences, which may burden management, increase travel, infrastructure and legal compliance costs, and add complexity to our enforcement of advertising standards across languages and countries; • geopolitical and social factors, such as concerns regarding negative, unstable or changing economic conditions in the countries and regions where we operate, recessions, armed conflicts and wars, political instability and trade disputes; • risks related to pricing structure, payment and currency, including aligning our pricing model and payment terms with local norms, higher levels of credit risk and payment fraud, difficulties in invoicing and collecting in foreign currencies and associated foreign currency exposure, and difficulties in repatriating or transferring funds from or converting currencies; and • reduced protection for intellectual property rights in some countries and practical difficulties in enforcing contractual and intellectual property rights abroad.
For example, Washington’s My Health, My Data Act (“MHMD”) introduced a host of requirements related to a very broadly-defined notion of consumer health data that impacts the advertising industry in part because MHMD is subject to a private right of action (unlike other state privacy laws), so plaintiffs’ attorneys could explore claims that stretch the bounds of the law’s text.
For example, Washington’s My Health, My Data Act (“MHMD”) introduced a host of requirements related to a very broadly-defined notion of consumer health data that impacts the advertising industry in part because MHMD is subject to a private right of action (unlike most other state privacy laws), so plaintiffs’ attorneys could explore claims that stretch the bounds of the law’s text.
Privacy and data protection laws to which we and our clients, inventory partners, and third-party data providers are subject may cause us to incur additional or unexpected costs, subject us to investigations or enforcement actions for alleged compliance failures, result in less demand for our offerings, or cause us to change our platform, related offerings or business model, which may have a material adverse effect on our business.
Privacy and data protection laws to which we and our clients, inventory partners, and third-party data providers are subject may cause us to incur additional or unexpected costs, subject us to litigation, investigations or enforcement actions for alleged compliance failures, result in less demand for our offerings, or cause us to change our platform, related offerings or business model, which may have a material adverse effect on our business.
For example, perception that our practices involve an invasion of privacy or are designed with insufficient protections, whether or not such practices are consistent with current or future laws, regulations, or industry practices, may subject us to public criticism, private class actions, reputational harm, or claims by regulators, which could disrupt our business and expose us to increased liability.
For example, perception that our practices involve an invasion of privacy or are designed with insufficient protections, whether or not such practices are consistent with current or future laws, regulations, or industry practices, may subject us to public criticism, additional private class actions, reputational harm, or claims by regulators, which could disrupt our business and expose us to increased liability.
Information relating to individuals and their devices (commonly called “personal information” or “personal data”) is regulated under a wide variety of local, state, national and international laws and regulations that apply to its collection, use, retention, protection, disclosure, transfer (including transfer across national boundaries) and other processing.
Information relating to individuals, households and their devices (commonly called “personal information” or “personal data”) is regulated under a wide variety of local, state, national and international laws and regulations that apply to its collection, use, retention, protection, disclosure, transfer (including across national boundaries) and other processing.
A breach of our security, a flawed design, and/or our failure to respond sufficiently to a security incident could disrupt our services and result in theft, misuse, loss, corruption, or improper use or disclosure of data.
A breach of our security, a flawed design, and/or our failure to respond sufficiently to a security incident could disrupt our services and result in theft, misuse, loss, corruption, or improper use or disclosure of our systems or data.
Although we have attempted to mitigate certain risks posed by these laws through contractual, platform and offering changes, we cannot predict with certainty the effect of these laws and their implementing regulations, many of which are not yet finalized, on our business, nor the share of consumers who will carry out their opt-out and other rights and how these actions will impact us, our clients, inventory sources, and our industry.
Although we have attempted to mitigate certain risks posed by these laws through contractual, platform and offering changes, we cannot predict with certainty the effect of these laws and their implementing regulations, some of which are not yet finalized, on our business, nor the share of consumers who will carry out their opt-out and other rights and how these actions will impact us, our clients, inventory sources, and our industry.
The market price of our Class A common stock has fluctuated and may fluctuate significantly in response to numerous factors, some of which are beyond our control and may not be related to our operating performance, including: • announcements of new offerings, products, services or technologies, commercial relationships, acquisitions, or other events by us or our competitors; • price and volume fluctuations in the overall stock market from time to time; • significant volatility in the market price and trading volume of technology companies in general and of companies in the digital advertising industry in particular; • fluctuations in the trading volume of our shares or the size of our public float; • trading activity in our share repurchase program; • actual or anticipated changes or fluctuations in our results of operations; • whether our results of operations meet the expectations of securities analysts or investors; • actual or anticipated changes in the expectations of investors or securities analysts; • litigation involving us, our industry, or both; • regulatory developments in the United States, foreign countries, or both; • general economic conditions and trends; • terrorist attacks, political upheaval, natural disasters, war, public health crises, or other major catastrophic events; • sales of large blocks of our common stock; • departures of key employees; or • an adverse impact on us from any of the other risks cited herein.
The market price of our Class A common stock has fluctuated and may fluctuate significantly in response to numerous factors, some of which are beyond our control and may not be related to our operating performance, including: • announcements of new offerings, products, services or technologies, commercial relationships, acquisitions, or other events by us or our competitors; • price and volume fluctuations in the overall stock market from time to time; • significant volatility in the market price and trading volume of technology companies in general and of companies in the digital advertising industry in particular; • fluctuations in the trading volume of our shares or the size of our public float; • trading activity in our share repurchase program; • actual or anticipated changes or fluctuations in our results of operations; • whether our results of operations meet the expectations of securities analysts or investors; • actual or anticipated changes in the expectations of investors or securities analysts; • litigation involving us, our industry, or both; • regulatory developments in the United States, foreign countries, or both; 34 Table o f Contents • general economic conditions and trends; • terrorist attacks, political upheaval, natural disasters, war, public health crises, or other major catastrophic events; • sales of large blocks of our common stock; • departures of key employees; or • an adverse impact on us from any of the other risks cited herein.
These laws and their implementing regulations will likely also increase compliance costs and obligations on us, our clients, and other companies in the advertising industry.
These laws and their implementing regulations have and will likely also increase compliance costs and obligations on us, our clients, and other companies in the advertising industry.
Although we have implemented work-from-home protocols and provide work-issued devices to employees, the actions of our employees while working from home may have a greater effect on the security of our systems, platform, related offerings and the data we process, including by increasing the risk of compromise to our systems, confidential 18 Table of Contents information or data arising from employees’ combined personal and private use of devices, accessing our systems or data using wireless networks that we do not control or the ability to transmit or store company-controlled data outside of our secured network.
Although we have implemented work-from-home protocols and provide work-issued devices to employees, the actions of our employees while working from home may have a greater effect on the security of our systems, platform, related offerings and the data we process, including by increasing the risk of compromise to our systems, confidential information or data arising from employees’ combined personal and private use of devices, accessing our systems or data using wireless networks that we do not control or the ability to transmit or store company-controlled data outside of our secured network.
Furthermore, even if we believe that our investments improve upon our platform and related offerings, such as updates to our various platform features and user interface, they may nevertheless fail to meet new or existing client expectations or preferences, which could result in decreased client adoption or use of our platform.
Furthermore, even if we believe that our investments improve or supplement our platform and related offerings, such as updates to our various platform features and user interface, they may nevertheless fail to meet new or existing client expectations or preferences, which could result in decreased client adoption or use of our platform and related offerings.
We may be required to, or otherwise may determine that it is advisable to, make significant changes in our business operations and offerings to 23 Table of Contents obtain user opt-in for cookies and use of cookie data, or develop or obtain additional tools and technologies to compensate for a lack of cookie data.
We may be required to, or otherwise may determine that it 23 Table o f Contents is advisable to, make significant changes in our business operations and offerings to obtain user opt-in for cookies and use of cookie data, or develop or obtain additional tools and technologies to compensate for a lack of cookie data.
Increased transparency into the collection and use of data for digital advertising, introduced both through features in browsers and devices and regulatory requirements, such as the GDPR, U.S. state privacy laws and regulations, “Global Privacy Control” or similar opt-out signals and the ePrivacy Directive, as well as compliance with such requirements, may create operational burdens to implement and may lead more users to choose to block the collection and use of data about them.
Increased transparency and scrutiny regarding the collection and use of data for digital advertising, introduced both through features in browsers and devices and regulatory requirements, such as the GDPR, U.S. state privacy laws and regulations, “Global Privacy Control” or similar opt-out signals and the ePrivacy Directive, as well as compliance with such requirements, may create operational burdens to implement and may lead more users to choose to block the collection and use of data about them.
We could also be required to notify regulators, customers or other third parties. Our platform may also receive data in aggregated or pseudonymized form, and if our systems are breached and such data or information is compromised, it could be damaging to our brand, reputation, and business.
We could also be required to notify regulators, clients or other third parties. Our platform may also receive data in aggregated or pseudonymized form, and if our systems are breached and such data or information is compromised, it could be damaging to our brand, reputation, and business.
These state laws define “personal information” broadly enough to include many online identifiers provided by individuals’ devices, applications, and protocols (such as IP addresses, mobile application identifiers and unique cookie identifiers), individuals’ location data, and hashed versions of email addresses and phone numbers.
These state laws define “personal information” broadly enough to include many online identifiers provided by individuals’ devices, applications, and protocols (such as IP addresses, mobile advertising identifiers and unique cookie identifiers), individuals’ location data, and hashed versions of email addresses and phone numbers.
These laws generally require covered businesses to meet numerous data privacy-related obligations and establish data privacy rights for consumers in such states (including rights to opt out of certain processing of their personal data and to request correction, deletion of and access to personal data), imposing special rules on the collection of personal data from minors and other personal data deemed “sensitive” under the laws, and creating new notice obligations.
These laws generally require covered businesses to meet numerous data privacy-related obligations and establish data privacy rights for consumers in such states (including rights to opt out of certain processing of their personal data and to request correction, deletion of and access to personal data), imposing special rules on the collection of personal data from minors, precise location data and other personal data deemed “sensitive” under the laws, and creating new notice and consent obligations.
Factors that may cause our results of operations to fluctuate include the following: • changes in demand for programmatic advertising and for our platform, including those related to the seasonal nature of our clients’ spend on digital advertising campaigns; • changes to availability of and pricing of competitive products and services, and their effects on our pricing; • changes in the pricing, cost or availability of supplier-provided components of value-added services and data, including pricing structure changes and the alignment of our pricing model with our data partners; • changes in our platform or related offerings, their features, and the mix of offerings that are adopted by our clients; • the addition or loss of advertising agencies and advertisers as clients and other changes in our client base; • changes in advertising budget allocations, agency affiliations or marketing strategies; • changes to our media, client or channel mix; • changes and uncertainty in the regulatory environment for us, advertisers, inventory providers, or others in the advertising industry, and the effects of our efforts and those of our clients and partners to address changes and uncertainty in the regulatory environment; • changes in the economic prospects of advertisers or the economy generally, which could alter advertisers’ budgets or spend priorities, or could increase the time or costs required to complete advertising inventory sales; • changes in the pricing and availability of advertising inventory, including through real-time advertising exchanges or in the cost of reaching end consumers through digital advertising; • disruptions, outages, vulnerabilities or technological issues uncovered on our platform or related offerings; • factors beyond our control, such as natural disasters, terrorism, war and public health crises; • the introduction of new technologies or offerings by our competitors or others in the advertising marketplace; • changes in our capital expenditures as we acquire the hardware, equipment and other assets required to support our business; • timing differences between our payments for advertising inventory and our collection of related advertising revenue; • the length and unpredictability of our sales cycle; • costs related to acquisitions of businesses or technologies and development of new offerings; 24 Table of Contents • cost of employee recruiting and retention; and • changes to the cost of infrastructure, including real estate and information technology.
Factors that may cause our results of operations to fluctuate include the following: • changes in demand for programmatic advertising and for our platform, including those related to the seasonal nature of our clients’ spend on digital advertising campaigns; • changes to our pricing or to the availability of and pricing of competitive products and services; • changes in the pricing, cost or availability of third-party supplier-provided components of value-added services and data, including pricing structure changes and the alignment of our pricing model with our data partners, and our ability to successfully implement and rollout such changes; • changes in our platform or related offerings, their features or their underlying components and design, and the mix of offerings that are adopted by our clients; • the addition or loss of advertising agencies and advertisers as clients and other changes in our client base; • changes in advertising budget allocations, agency affiliations or marketing strategies; • changes to our media, client or channel mix; • changes and uncertainty in the regulatory environment for us, advertisers, inventory providers, or others in the advertising industry, and the effects of our efforts and those of our clients and partners to address changes and uncertainty in the regulatory environment; • changes in the economic prospects of advertisers or the economy generally, which could alter advertisers’ budgets or spend priorities, or could increase the time or costs required to complete advertising inventory sales; • changes in the pricing and availability of advertising inventory, including through real-time advertising exchanges or in the cost of reaching end consumers through digital advertising; • disruptions, outages, vulnerabilities or technological issues uncovered on our platform or related offerings; • factors beyond our control, such as natural disasters, terrorism, war and public health crises; • the introduction of new technologies or offerings by our competitors or others in the advertising marketplace; • changes in our capital expenditures as we acquire the hardware, equipment and other assets required to support our business; • timing differences between our payments for advertising inventory and our collection of related advertising revenue; • the length and unpredictability of our sales cycle; • costs related to acquisitions of businesses or technologies and development of new offerings; 24 Table o f Contents • cost of employee recruiting and retention; and • changes to the cost of infrastructure, including real estate and information technology.
You should consider carefully the risks and uncertainties described below, together with all of the other information contained in this Annual Report on Form 10-K, 14 Table of Contents including the consolidated financial statements and the related notes and Management’s Discussion and Analysis of Financial Condition and Results of Operations, before making investment decisions related to our Class A common stock.
You should consider carefully the risks and uncertainties described below, together with all of the other information contained in this Annual Report on Form 10-K, including the consolidated financial statements and the related notes and Management’s Discussion and Analysis of Financial Condition and Results of Operations, before making investment decisions related to our Class A common stock.
We typically collect and store IP addresses and other device identifiers (such as unique cookie identifiers and mobile application identifiers), which are or may be considered personal data or personal information in many jurisdictions or otherwise subject to regulation.
We typically collect and store IP addresses and other device identifiers (such as unique cookie identifiers and mobile advertising identifiers), which are or may be considered personal data or personal information in many jurisdictions or otherwise subject to regulation.
Because many state privacy laws require businesses to permit end users to opt out of processing their personal data for purposes of targeted advertising, including, in some states through automated signals, we expect that more opt-out solutions will become available that may ultimately be used by end users, which may reduce our clients’ use of our platform and related offerings, and our business, financial condition, and results of operations could be adversely affected.
Because many state privacy laws require businesses to permit end users to opt out of processing their personal data for purposes of targeted advertising, including, in some states, through device-based preference signals, we expect that more opt-out solutions will become available that may ultimately be used by end users, which may reduce our clients’ use of our platform and related offerings, and our business, financial condition, and results of operations could be adversely affected.
Stock prices of many technology companies have fluctuated in a manner unrelated or disproportionate to the operating performance of those companies. The trading price of our Class A common stock might also decline in reaction to events that affect other companies in our industry even if these events do not directly 34 Table of Contents affect us.
Stock prices of many technology companies have fluctuated in a manner unrelated or disproportionate to the operating performance of those companies. The trading price of our Class A common stock might also decline in reaction to events that affect other companies in our industry even if these events do not directly affect us.
If we or our clients or partners make mistakes in the implementation of these principles, if self-regulatory bodies expand these guidelines, if government authorities issue different guidelines regarding targeted advertising, if opt out mechanisms fail to work as designed, or if Internet users misunderstand our technology or our commitments with respect to these principles, we could be subject to negative publicity, government investigation, government or private litigation or investigation by self-regulatory bodies or other accountability groups.
If we or our clients or partners make mistakes in the implementation of these principles, if self-regulatory bodies expand these guidelines, if government authorities issue different guidelines regarding targeted advertising, if litigation results in changes to industry practices, if opt out mechanisms fail to work as designed, or if Internet users misunderstand our technology or our commitments with respect to these principles, we could be subject to negative publicity, government investigation, government or private litigation or investigation by self-regulatory bodies or other accountability groups.
We face various and evolving cybersecurity risks that threaten the confidentiality, integrity and availability of our systems and the data that we process. Our offerings involve the storage and transmission of significant amounts of data from users, clients, and inventory and data providers, a large volume of which is hosted by third-party service providers.
We face various and evolving cybersecurity risks that threaten the confidentiality, integrity and availability of our systems and the data that we process. Our offerings involve the storage and transmission of significant amounts of data, including personal information from users, clients, and inventory and data providers, a large volume of which is hosted by third-party service providers.
We may be unable to make such changes and modifications in a commercially reasonable manner or at all, and our ability to develop new offerings or certain features could be limited.
We may be unable to make changes and modifications to our business and offerings in a commercially reasonable manner or at all, and our ability to develop new offerings or certain features could be limited.
As some of our newer offerings involve the receipt and processing of identifiable information, the risks associated with data, including risks to breach of our systems increases, and we could be subject to contractual breach and indemnification claims from other clients and partners and otherwise suffer damage to our reputation, brand, and business.
As some of our offerings involve the receipt and processing of identifiable information, the risks associated with data, including risks related to a breach of our systems increases, and we could be subject to contractual breach and indemnification claims from other clients and partners and otherwise suffer damage to our reputation, brand, and business.
We are 25 Table of Contents also vulnerable to unintentional errors or malicious or improper actions by persons with authorized access to our systems that exceed the scope of their access rights, distribute data erroneously, or, unintentionally or intentionally, interfere with the intended operations and functioning of our platform and related offerings.
We are also vulnerable to unintentional errors or malicious or improper actions by persons with authorized access to our systems that exceed the scope of their access rights, distribute data erroneously, or, unintentionally or intentionally, interfere with the intended operations and functioning of our platform and related offerings.
If a client with a high credit limit enters the wrong daily cap with a campaign set to a rapid pace, it is possible for a campaign to accidently go significantly over budget.
If a client with a high credit limit enters the wrong daily cap with a campaign set to a rapid pace, it is possible for a campaign to accidentally go significantly over budget.
We have a U.K. entity through which we have entered into international client and partner agreements, including with those in the EU, which are governed by English Law, and some of our clients and partners pay us in British Pounds and Euros.
We have a U.K. entity through which we have entered into international client and partner agreements, including with those in the EU, which are governed by English Law, and some of our clients and partners pay us in Euros, British Pounds and other foreign currencies.
In the event that these third-party providers experience any interruption in operations or cease business for any reason, or if we are unable to agree on satisfactory terms for continued hosting relationships, we would be forced to enter into a relationship with other service 29 Table of Contents providers or assume some hosting responsibilities ourselves.
In the event that these third-party providers experience any interruption in operations or cease business for any reason, or if we are unable to agree on satisfactory terms for continued hosting relationships, we would be forced to enter into a relationship with other service providers or assume some hosting responsibilities ourselves.
There can be no assurance that we will be in compliance with U.S. export control or economic sanctions laws and regulations in the future. Any such violation could 33 Table of Contents result in significant criminal or civil fines, penalties or other sanctions and repercussions, including reputational harm that could materially adversely impact our business.
There can be no assurance that we will be in compliance with U.S. export control or economic sanctions laws and regulations in the future. Any such violation could result in significant criminal or civil fines, penalties or other sanctions and repercussions, including reputational harm that could materially adversely impact our business.
Consequently, our reputation depends in part on providing services 26 Table of Contents that our advertisers and inventory suppliers trust, and we have contractual obligations to meet content and inventory standards. We contractually prohibit the misuse of our platform by our clients and inventory suppliers.
Consequently, our reputation depends in part on providing services that our advertisers and inventory suppliers trust, and we have contractual obligations to meet content and inventory standards. We contractually prohibit the misuse of our platform by our clients and inventory suppliers.
Further, the FTC uses its enforcement powers under Section 5 of the Federal Trade Commission Act (the “FTC Act”) (which prohibits “unfair” and “deceptive” trade practices) to investigate companies engaging in online tracking.
For example, the FTC uses its enforcement powers under Section 5 of the Federal Trade Commission Act (the “FTC Act”) (which prohibits “unfair” and “deceptive” trade practices) to investigate companies engaging in online tracking.
Further, we can expect that the deployment of techniques to circumvent our security measures may occur with more frequency and sophistication and may not be recognized until launched against a target. Accordingly, we may be unable to anticipate or detect these techniques or to implement adequate preventative measures.
Further, we can expect that the deployment of techniques to circumvent our security measures may occur with more frequency and sophistication and may not be recognized until launched against a target, including through the use of AI. Accordingly, we may be unable to anticipate or detect these techniques or to implement adequate preventative measures.
For example, if publishers or supply-side platforms decide to limit the data that we receive in order to comply (in their view) with state privacy laws or a potential federal privacy law, then our service may prove to be less valuable to our clients and we may find it more difficult to generate revenue.
For example, if publishers or supply-side platforms decide to limit the data that we receive in order to comply (in their view) with state privacy laws, a potential federal privacy law or in response to other legal or industry developments, then our service may prove to be less valuable to our clients and we may find it more difficult to generate revenue.
Even if we are not paid by our clients on time or at all, we are still obligated to pay suppliers for the cost of advertising inventory, value-added services and data that clients purchase on our platform, and as a consequence, our business, financial condition and results of operations would be adversely impacted.
Even if we are not paid by our clients on time or at all, we are still obligated to pay suppliers for the cost of advertising 29 Table o f Contents inventory, value-added services and data that clients purchase on our platform, and as a consequence, our business, financial condition and results of operations would be adversely impacted.
We also use device and other identifiers to help us achieve our advertisers’ campaign goals, including to limit the instances that an Internet user sees the same advertisement, report information to our advertisers regarding the performance of their advertising campaigns, and detect and prevent malicious behavior and invalid traffic throughout our network of inventory.
We also use device and other identifiers to help us achieve our advertisers’ campaign goals, including to limit the instances that an Internet user sees the same advertisement, report information to our advertisers regarding the 22 Table o f Contents performance of their advertising campaigns, and detect and prevent malicious behavior and invalid traffic throughout our network of inventory.
Noncompliance with these laws could subject us to investigations, sanctions, settlements, prosecution, other enforcement actions, disgorgement of profits, significant fines, damages, other civil and criminal penalties or injunctions, suspension and/or debarment from contracting with specified persons, the loss of export privileges, reputational harm, adverse media coverage, and other collateral consequences.
Noncompliance with these laws could subject us to investigations, sanctions, settlements, prosecution, other enforcement actions, disgorgement of profits, significant fines, damages, other civil and criminal penalties or injunctions, suspension and/or debarment from contracting with specified persons, the loss of export privileges, reputational harm, 33 Table o f Contents adverse media coverage, and other collateral consequences.
As new types of inventory become available, we will need to expend significant resources to ensure we have access to such new inventory. For example, although television advertising is a large market, only a very small percentage of it is currently purchased through digital advertising exchanges.
As new types of inventory become available, we will need to expend significant resources to ensure we have access to such new inventory. For example, although television advertising is a large market, only a very small percentage 16 Table o f Contents of it is currently purchased through digital advertising exchanges.
Additionally, the process of obtaining patent protection is expensive and time-consuming, and we may not be able to prosecute all necessary or desirable patent applications at a reasonable cost or in a timely manner. Policing unauthorized use of our technology is difficult.
Additionally, the process 32 Table o f Contents of obtaining patent protection is expensive and time-consuming, and we may not be able to prosecute all necessary or desirable patent applications at a reasonable cost or in a timely manner. Policing unauthorized use of our technology is difficult.
Macroeconomic conditions beyond our control could harm the overall demand for advertising and the economic health of advertisers, which could adversely affect our business, financial condition and results of operations. Our business depends on the overall demand for advertising and on the economic health of advertisers that benefit from our platform.
Macroeconomic conditions beyond our control could harm the overall demand for advertising and the economic health of agencies and advertisers, which could adversely affect our business, financial condition and results of operations. Our business depends on the overall demand for advertising and on the economic health of the agencies and advertisers that use our platform.
As of December 31, 2024, stockholders who held shares of Class B common stock, including our executive officers, employees, and directors and their affiliates, together held approximately 49.3% of the voting power of our outstanding capital stock.
As of December 31, 2025, stockholders who held shares of Class B common stock, including our executive officers, employees, and directors and their affiliates, together held approximately 49.9% of the voting power of our outstanding capital stock.
We deploy technical and security measures, internal policy controls, and contractual measures to limit how such identifying information is used and shared and to help honor consumer choices. Nevertheless, we cannot guarantee any such measures or controls will be effective and handling identifying information increases our exposure under privacy and data protection laws.
We deploy technical and security measures, internal policy controls, and contractual measures designed to limit how such identifying information is used and shared. Nevertheless, we cannot guarantee any such measures or controls will be effective and handling identifying information increases our exposure under privacy and data protection laws.
Our historical revenue growth has lessened the impact of seasonality; however, seasonality could have a more significant impact on our revenue, cash flow and results of operations from period to period if our growth rate declines, if seasonal spend becomes more pronounced, or if seasonality otherwise differs from our expectations.
Our historical revenue growth has lessened the impact of seasonality; however, seasonality could have a more significant 27 Table o f Contents impact on our revenue, cash flow and results of operations from period to period if our growth rate declines, if seasonal spend becomes more pronounced, or if seasonality otherwise differs from our expectations.
From time to time, we may receive claims from third parties that our platform and underlying technology infringe or violate such third parties’ intellectual property rights. To the extent we gain greater public recognition, we may face a higher risk of being the subject of intellectual property claims.
Our success depends on the continual development of our platform. From time to time, we may receive claims from third parties that our platform and underlying technology infringe or violate such third parties’ intellectual property rights. To the extent we gain greater public recognition, we may face a higher risk of being the subject of intellectual property claims.
If all of our individual client contractual relationships were aggregated at the holding company level, one holding company would have represented more than 10% of our gross billings for 2024. In most cases, we enter into separate contracts and billing relationships with the individual agencies and account for them as separate clients.
If all of our individual client contractual relationships were aggregated at the holding company level, two holding companies would have each represented more than 10% of our gross billings for 2025. In most cases, we enter into separate contracts and billing relationships with the individual agencies and account for them as separate clients.
Supporting our continued growth may require substantial financial and other resources to, among other things: • develop our platform and related offerings, including by investing in our engineering team, creating, acquiring or licensing new offerings or certain features, and improving the availability and security of our platform and related offerings; • continue to expand internationally by growing our sales force and client services team in an effort to increase our client base and spend through our platform, and by adding inventory and data from countries our clients are seeking; • improve our technology infrastructure, including investing in internal technology development and acquiring outside technologies; • expand our platform’s reach in new and growing channels such as CTV, including expanding the supply of CTV inventory; • cover general and administrative expenses, including legal, accounting and other expenses necessary to support a larger organization; • cover sales and marketing expenses, including a significant expansion of our direct sales organization; • cover expenses relating to data collection and use and consumer privacy compliance, including additional infrastructure, certain features, security, automation and personnel; and • explore strategic acquisitions.
Supporting our continued growth may require substantial financial and other resources to, among other things: • develop our platform and related offerings, including by investing in our engineering team, creating, acquiring or licensing new offerings or certain features, and improving the availability and security of our platform and related offerings; • continue to expand internationally by growing our sales force and client services team in an effort to increase our client base and spend through our platform, and by adding inventory and data from countries our clients are seeking; 28 Table o f Contents • improve our technology, including investing in internal technology development and acquiring outside technologies and investing in hosting infrastructure in an environment where a shortage of hosting capacity and hardware components is causing costs to increase; • expand our platform’s reach in new and growing channels such as CTV, including expanding the supply of CTV inventory; • cover general and administrative expenses, including legal, accounting and other expenses necessary to support a larger organization; • cover sales and marketing expenses, including a significant expansion of our direct sales organization; • cover expenses relating to data collection and use and consumer privacy compliance, including additional infrastructure, certain features, security, automation and personnel; and • explore strategic acquisitions.
New client demands, superior competitive offerings or new industry standards could require us to make unanticipated and costly changes to our platform or business model. We must constantly make investment decisions regarding offerings and technology to meet client demand and evolving industry and legal standards. We may make bad decisions regarding these investments.
New client demands, superior competitive offerings or new industry standards could require us to make unanticipated and costly changes to our platform or business model. We must constantly make investment decisions regarding new and existing offerings and technology to meet client demand and evolving industry and legal standards.
Failure of the industry to adapt to changes required for operating under existing and future data privacy laws, industry approaches that disfavor our platform and related offerings, and user response to such changes could negatively impact inventory, data, and demand.
Failure of the industry to adapt to changes required 21 Table o f Contents for operating under existing and future data privacy laws, industry approaches that disfavor our platform and related offerings, and user response to such changes could negatively impact inventory, data, and demand.
Online political advertising laws are rapidly evolving and, in 21 Table of Contents certain jurisdictions, impose varying substantive transparency and disclosure requirements on advertisers, publishers, and/or others in the ecosystem.
Online political advertising laws are rapidly evolving and, in certain jurisdictions, impose varying substantive transparency and disclosure requirements on advertisers, publishers, and/or others in the ecosystem.
Some of our competitors undertake human review of content, but because our platform is self-service, and because such means are cost-intensive, we do not utilize all means available to decrease these risks.
Some of our competitors undertake 26 Table o f Contents human review of content, but because our platform is self-service, and because such means are cost-intensive, we do not utilize all means available to decrease these risks.
However, such measures cannot provide absolute security and could, among other issues, fail to be adequate or accurately assess the incident severity, not proceed quickly enough, or fail to sufficiently remediate an incident.
However, such measures cannot provide absolute security and could, among other issues, fail to be adequate or accurately assess the 18 Table o f Contents incident severity, not proceed quickly enough, or fail to sufficiently remediate an incident.
We have spent significant effort in cultivating our relationships with advertising agencies and advertisers, which has resulted in an increase in the budgets allocated to, and the amount of advertising purchased on, our platform.
We have spent 14 Table o f Contents significant effort in cultivating our relationships with advertising agencies and advertisers, which has resulted in an increase in the budgets allocated to, and the amount of advertising purchased on, our platform.
Our articles of incorporation provide that all Class B common stock will convert automatically into Class A common stock on December 22, 2025, unless converted prior to such date.
Our amended and restated articles of incorporation provide that all Class B common stock will convert automatically into Class A common stock on December 22, 2035, unless converted prior to such date.
Any such legal proceedings, regardless of outcome or merit, may divert management’s time and attention and may result in the incurrence of significant expense, including legal fees. For additional information regarding the pending legal proceedings , refer to “
Any such legal proceedings, regardless of outcome or merit, may divert management’s time and attention and may result in the incurrence of significant expense, including legal fees. For additional information regarding the pending legal proceedings , refer to Note 13—Commitments and Contingencies—Litigation.
In addition, in the EU, Directive 2002/58/EC (as amended by Directive 2009/136/EC), commonly referred to as the ePrivacy or Cookie Directive, directs EU member states to ensure that accessing information on an Internet user’s computer, such as through a cookie and other similar technologies, is allowed only if the Internet user has been informed about such access and given his or her consent.
In addition, in the EU and UK, national laws derived from Directive 2002/58/EC (as amended by Directive 2009/136/EC), commonly referred to as the ePrivacy or Cookie Directive, provide that accessing information on an Internet user’s computer, such as through a cookie and other similar technologies, is allowed only if the Internet user has been informed about such access and given his or her consent.
(state, federal and local) and foreign governments continue to consider and enact additional legislation and rulemaking related to privacy and data protection, often with a particular focus on intermediaries in the online advertising ecosystem, including those that engage in targeted advertising, “sell” or “share” personal data, and act as “data brokers.” We expect to see an increase in, or changes to, privacy and data protection legislation and regulation in this area for the foreseeable future.
(state, federal and local) and foreign governments continue to consider and enact additional legislation and rulemaking related to privacy and data protection, often with a particular focus on intermediaries in the online advertising ecosystem, including those that engage in targeted advertising, “sell” or “share” personal data, and act as “data brokers.” While a significant volume of laws has already been enacted, we expect to see additional data protection legislation and regulation in this area for the foreseeable future.
Market uncertainties or downturns, whether global, local or industry or sector specific, and associated macroeconomic conditions, such as growing inflation, changes in interest rates, recessionary fears, changes in foreign currency exchange rates, supply chain disruptions, the impact of global instability in many parts of the world and public health crises, may disrupt the operations of our clients and partners and cause advertisers to decrease or pause their advertising budgets, which could reduce spend though our platform and adversely affect our business, financial condition 16 Table of Contents and results of operations.
Market uncertainties or downturns, whether global, local or industry or sector specific, and any associated macroeconomic conditions, such as growing inflation, concerns around a potential recession, changes in interest rates, changes in foreign currency exchange rates, changes in trade policies and practices, supply chain disruptions, the impact of global instability in many parts of the world and public health crises, may disrupt the operations of our clients and partners and cause agencies and advertisers to decrease or pause their advertising budgets, which could reduce spend though our platform and adversely affect our business, financial condition and results of operations.
Although we believe our platform is well-positioned to adapt to such changes, particularly with our Unified ID 2.0 offering, the impact of such changes remains uncertain and could be more disruptive than we anticipate, including to the display advertising ecosystem in particular, where such changes could adversely impact our growth in that channel.
Although we believe our platform is well-positioned to adapt to browsers’ blocking or limitation of some cookies, particularly with our Unified ID 2.0 offering, the impact of such changes — and broader scrutiny on the advertising technology ecosystem — remains uncertain and could be more disruptive than we anticipate, including to the display advertising ecosystem in particular, where such changes could adversely impact our growth in that channel.
Our credit facility contains, and any future credit facility may contain, various covenants that limit our ability to engage in specified types of transactions.
Our credit facility contains, and any future credit facility may contain, various 31 Table o f Contents covenants that limit our ability to engage in specified types of transactions.
Any of these developments would make it more difficult for us to sell our platform or related offerings and could result in increased pricing pressure, increased development, sales and marketing expense, or the loss of market share.
Any of these developments would make it more difficult for us to sell our platform or related offerings and could result in increased pricing pressure, increased development, sales and marketing expense, or the loss of market share. The market for programmatic buying for advertising campaigns is relatively new and evolving.
If we are unable to hire and train sufficient numbers of effective sales personnel, or the sales personnel are not successful in obtaining new clients or increasing our existing clients’ spend with us, our business will be adversely affected.
If we are unable to hire and train sufficient numbers of effective sales personnel, or the sales personnel are not successful in obtaining new clients or increasing our existing clients’ spend with us, our business will be adversely affected. As our costs increase, we may not be able to generate sufficient revenue to sustain profitability.
For example, the FTC has recently finalized an update to the Children Online Privacy Protection Act, modifying requirements regarding the use of children’s data for targeted advertising and several states have enacted laws that would substantially impact activities that involve showing targeted advertisements to individuals under 18 through a variety of new restrictions, or in some cases prohibit it altogether.
For example, the FTC finalized an update to rules adopted pursuant to the Children Online Privacy Protection Act, modifying some requirements relating to the use of children’s data for targeted advertising and several states have enacted laws that would substantially impact activities that involve showing targeted advertisements to individuals under 18 years of age 20 Table o f Contents through a variety of new restrictions, or in some cases prohibit it altogether.
New technologies and methods of buying advertising present a dynamic competitive challenge, as market participants develop and offer new products and services aimed at capturing advertising spend or disrupting the digital marketing landscape, such as analytics, automated media buying and exchanges.
New technologies and methods of buying advertising present a dynamic competitive challenge, as market participants develop and offer new products and services aimed at capturing advertising spend or disrupting the digital marketing landscape, such as analytics, automated media buying and exchanges. Additionally, the impact of AI on our industry is still emerging and uncertain.
We expect that spend on programmatic ad buying will continue to be our primary source of revenue for the foreseeable future and that our revenue growth will largely depend on increasing spend through our platform.
We expect that programmatic ad buying will continue to be our primary source of revenue for the 17 Table o f Contents foreseeable future and that our revenue growth will largely depend on increasing spend on our platform and related offerings.
Internet users can delete cookies from their computers at any time. Additionally, some browsers currently, or may in the future, block or limit some third-party cookies by default or may implement user control settings that algorithmically block or limit some cookies. Today, three major web browsers—Apple’s Safari, Mozilla’s Firefox and Microsoft’s Edge—block third-party cookies by default.
Additionally, some browsers currently, or may in the future, block or limit some third-party cookies by default or may implement user control settings that algorithmically block or limit some cookies. Today, three major web browsers—Apple’s Safari, Mozilla’s Firefox and Microsoft’s Edge—block third-party cookies by default.
Additionally, as the advertising industry evolves, and new ways of collecting, combining and using data are created, governments may enact legislation in response to technological advancements and changes that could result in our having to re-design features or functions of our platform and related offerings, therefore incurring unexpected compliance costs.
Additionally, as the advertising industry evolves, and new ways of collecting, combining and using data are created, governments may enact legislation and plaintiffs may explore novel legal theories that could result in us deciding to re-design features or functions of our platform and related offerings, therefore incurring unexpected compliance costs.
In addition, as we develop and introduce new offerings, including those incorporating or utilizing artificial intelligence and machine learning and new processing of personal information, including identifiable information, they may raise new, or heighten existing, technological, security, legal and other risks and challenges, which may cause unintended consequences, and they may not function properly or may be misused by our clients.
In addition, as we introduce new offerings and further develop existing ones, including in both cases those that increasingly incorporate or utilize AI and machine learning or the processing of personal information, including identifiable information, they may raise new, or heighten existing, technological, security, legal, commercial and other risks and challenges, which may cause unintended consequences, and they may not function properly or may be misused by our clients.
We may be sued by third parties for alleged infringement of their proprietary rights, which would result in additional expense and potential damages. There is significant patent and other intellectual property development activity in the digital advertising industry.
We may be sued by third parties for alleged infringement of their proprietary rights, which would result in additional expense and potential damages. There is significant patent and other intellectual property development activity in the digital advertising industry. Third-party intellectual property rights may cover significant aspects of our technologies or business methods or block us from expanding our offerings.
If competitors introduce lower cost or differentiated offerings that compete with or are perceived to compete with our offerings, our ability to sell our services to new or existing clients could be impaired.
If competitors introduce lower cost or differentiated offerings that compete with or are perceived to compete with our offerings, our ability to sell our services to new or existing clients could be impaired. We focus on the value of our platform and related offerings.
They foster our corporate culture, which has been instrumental to our ability to attract and retain new talent. We also rely on our ability to hire and retain qualified and motivated employees, particularly those employees in our product development, support, and sales teams that attract and keep key clients.
We also rely on our ability to hire and retain qualified and motivated employees, particularly those employees in our product development, support and sales teams that attract and keep key clients.
If we are unable to borrow on commercially acceptable terms, our working capital availability could be reduced, and as a consequence, our financial condition and results of operations would be adversely impacted.
This collections and payments cycle may increasingly consume working capital if we continue to be successful in growing our business. If we are unable to borrow on commercially acceptable terms, our working capital availability could be reduced, and as a consequence, our financial condition and results of operations would be adversely impacted.
IAB Europe previously collaborated with the digital advertising industry to create a user-facing framework (the Transparency and Control Framework, or “TCF”) for establishing and managing legal bases under the GDPR and other U.K. and EU privacy laws including the ePrivacy Directive.
It also provides certain rights, such as access and deletion, to the individuals about whom the personal data relates. IAB Europe previously collaborated with the digital advertising industry to create a user-facing framework (the Transparency and Control Framework, or “TCF”) for establishing and managing legal bases under the GDPR and other U.K. and EU privacy laws, including the ePrivacy Directive.
These laws and the heightened scrutiny associated with the enforcement of such laws may, in turn, ultimately lead to increased compliance and defense costs, and more obligations on us, our clients and other companies in the advertising industry.
A somewhat similar law enacted in Virginia is also backed by a private right of action. These laws and the heightened scrutiny associated with the enforcement of such laws may, in turn, ultimately lead to increased compliance and defense costs, and more obligations on us, our clients and other companies in the advertising industry.
For example, clients tend to devote more of their advertising budgets to the fourth calendar quarter to coincide with consumer holiday spending. Moreover, advertising inventory in the fourth quarter may be more expensive due to increased demand for it. Political advertising could also cause our revenue to increase during election cycles and decrease during other periods.
Moreover, advertising inventory in the fourth quarter may be more expensive due to increased demand for it. Political advertising could also cause our revenue to increase during election cycles and decrease during other periods.
As a result, these competitors may be better able to respond quickly to new technologies, develop superior solutions, develop deeper advertiser relationships or offer services at lower prices.
Some of our competitors may have a longer operating history and greater name recognition. As a result, these competitors may be better able to respond quickly to new technologies, develop superior solutions, develop deeper advertiser relationships or offer services at lower prices.
Green, and our ability to attract, hire, retain and motivate highly skilled employees in the future. Our future success depends on the continuing efforts of our executive officers and other key employees, including Jeff T. Green, our founder and Chief Executive Officer. We rely on the leadership, knowledge, and experience that our executive officers provide.
Our future success depends on the continuing efforts of our executive officers and other key employees, including Jeff T. Green, our founder and Chief Executive Officer. We rely on the leadership, knowledge and experience that our executive officers provide. They foster our corporate culture, which has been instrumental to our ability to attract and retain new talent.
Without such data, our clients may not have sufficient insight into an Internet user’s activity, which may compromise their and our ability to determine which inventory to purchase for a specific campaign and may undermine the effectiveness of our platform or our ability to improve our platform and remain competitive. 22 Table of Contents Today, digital advertising, including our platform, makes significant use of cookies to store device identifiers for the advertising activities described above.
Without such data, our clients may not have sufficient insight into an Internet user’s activity, which may compromise their and our ability to determine which inventory to purchase for a specific campaign and may undermine the effectiveness of our platform or our ability to improve our platform and remain competitive.