Hubspot Inc: Form 10-K for the period ended Dec 31, 2024

An investment in our common stock involves a high degree of risk. You should carefully consider the risks described below and the other information in this Annual Report on Form 10-K and in our other public filings before making an investment decision. Our business, prospects, financial condition, or operating results could be harmed by any of these risks, as well as other risks not currently known to us or that we currently consider immaterial. If any such risks and uncertainties actually occurs, our business, financial condition or operating results could differ materially from the plans, projections and other forward-looking statements included in the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and elsewhere in this report and in our other public filings. The trading price of our common stock could decline due to any of these risks, and, as a result, you may lose all or part of your investment.

Risks Related to Our Business and Strategy

We are dependent upon customer renewals, the addition of new customers, increased revenue from existing customers and the continued growth of the market for a customer platform.

We derive, and expect to continue to derive, a substantial portion of our revenue from the sale of subscriptions to our customer platform. The market for marketing, sales, service, operations, commerce and customer management products is still evolving, and competitive dynamics may cause pricing levels to change as the market matures and as existing and new market participants introduce new types of point applications and different approaches to enable businesses to address their respective needs. As a result, we may be forced to, or strategically choose to, reduce the prices we charge for our platform and may be unable to renew existing customer agreements or enter into new customer agreements at the same prices and upon the same terms that we have historically. In addition, our growth strategy involves a scalable pricing model (including freemium versions of our products and our recent seats-based pricing model changes) intended to provide opportunities to increase the value of our customer relationships over time, including as customers expand their use of our platform, or we sell to other parts of their organizations, cross-sell additional products and seats through touchless or low touch in product purchases, and upsell additional offerings and features. If our scalable pricing and cross-selling efforts are unsuccessful or if our existing customers do not expand their use of our platform or adopt additional offerings and features, or if the anticipated benefits from scalable pricing take longer to realize or are not realized at all, our revenue and operating results may suffer.

Our subscription renewal rates may decrease, and any decrease could harm our future revenue and operating results.

Our customers have no obligation to renew their subscriptions for our platform after the expiration of their subscription periods, substantially all of which are one year or less. In addition, our customers may seek to renew for lower subscription tiers, for fewer contacts or seats, or for shorter contract lengths. Also, customers may choose not to renew their subscriptions for a variety of reasons. Our renewal rates may decline or fluctuate as a result of a number of factors, including limited customer resources, pricing changes, the prices of services offered by our competitors, adoption and utilization of our platform and add-on applications by our customers, adoption of our new products, customer satisfaction with our platform, mergers and acquisitions affecting our customer base, reductions in our customers’ spending levels or declines in customer activity as a result of economic downturns or uncertainty in financial markets. If our customers do not renew their subscriptions for our platform or decrease the amount they spend with us, our revenue will decline and our business will suffer.

In addition, a subscription model creates certain risks related to the timing of revenue recognition and potential reductions in cash flows. A portion of the subscription-based revenue we report each quarter results from the recognition of deferred revenue relating to subscription agreements entered into during previous quarters. In addition, we do not record deferred revenue beyond amounts invoiced as a liability on our consolidated balance sheets. A decline in new or renewed subscriptions in any period may not be immediately reflected in our reported financial results for that period, but may result in a decline in our revenue in future quarters. If we were to experience significant downturns in subscription sales and renewal rates, our reported financial results might not reflect such downturns until future periods.

We face significant competition from both established and new companies in the software market in which we operate, which may harm our ability to add new customers, retain existing customers and grow our business.

The software market in which we operate is evolving, highly competitive and significantly fragmented. With the introduction of new technologies and the potential entry of new competitors into the market, we expect competition to persist and intensify in the future, which could harm our ability to increase sales, maintain or increase renewals and maintain our prices.

We face intense competition from other software companies in the market we operate that provide interactive marketing services. Competition could significantly impede our ability to sell subscriptions to our customer platform on terms favorable to us.

Our current and potential competitors may develop and market new technologies including as a result of new or better use of evolving AI technologies that render our existing or future products less competitive, or obsolete. In addition, if these competitors develop products with similar or superior functionality to our platform, we may need to decrease the prices or accept less favorable terms for our platform subscriptions in order to remain competitive. If we are unable to maintain our pricing due to competitive pressures, our margins will be reduced and our operating results will be negatively affected.

Our competitors include:

• cloud-based marketing automation providers;
• email marketing software vendors;
• sales force automation and CRM software vendors;
• large-scale enterprise suites;
• customer service software providers; and
• content management systems.

In addition, instead of using our platform, some prospective customers may elect to combine disparate point applications, such as content management, marketing automation, CRM, analytics and social media management. We expect that new competitors, such as enterprise software vendors that have traditionally focused on enterprise resource planning or other applications supporting back office functions, will develop and introduce applications serving customer-facing and other front office functions. This development could have an adverse effect on our business, operating results and financial condition. In addition, sales force automation and CRM vendors could acquire or develop applications that compete with our sales and CRM offerings. Some of these companies have acquired social media marketing and other marketing software providers to integrate with their broader offerings.

Our current and potential competitors may have significantly more financial, technical, marketing and other resources than we have, be able to devote greater resources to the development, promotion, sale and support of their products and services, may have more extensive customer bases and broader customer relationships than we have, and may have longer operating histories and greater name recognition than we have. As a result, these competitors may respond faster to new technologies and undertake more extensive marketing campaigns for their products. In a few cases, these vendors may also be able to offer a customer platform at little or no additional cost by bundling it with their existing suite of applications. To the extent any of our competitors has existing relationships with potential customers for either marketing software or other applications, those customers may be unwilling to purchase our platform because of their existing relationships with our competitor. If we are unable to compete with such companies, the demand for our customer platform could substantially decline.

In addition, if one or more of our competitors were to merge or partner with another of our competitors, our ability to compete effectively could be adversely affected. Our competitors may also establish or strengthen cooperative relationships with our current or future strategic distribution and technology partners or other parties with whom we have relationships, thereby limiting our ability to promote and implement our platform. We may not be able to compete successfully against current or future competitors, and competitive pressures may harm our business, operating results and financial condition.

We have experienced rapid growth and organizational change in recent periods and expect growth of headcount and operations over the long-term. If we fail to manage growth and organizational change effectively, we may be unable to execute our business plan, maintain high levels of service or address competitive challenges adequately.

Our headcount and operations continue to grow. For example, we had 8,246 full-time employees as of December 31, 2024 and 7,663 as of December 31, 2023. To date, we have opened several international offices. This growth has placed, and will continue to place, a significant strain on our management, administrative, operational and financial infrastructure. We expect to continue to grow headcount and operations over the long-term. We anticipate future growth will be required over the long term to address increases in our product offerings and continued expansion. Our success will depend in part upon our ability to recruit, hire, train, manage and integrate qualified managers, technical personnel and employees in specialized roles within our company, including in technology, sales and marketing. Furthermore, as many of our employees work remotely from geographic areas across jurisdictions where we have offices pursuant to our hybrid workplace model, which provides our employees with the option to be fully remote, work full-time from one of our offices, or have the flexibility to work both in the office and remotely, we may need to reallocate our investment of resources and closely monitor a variety of local regulations and requirements, including local tax laws. We may experience unpredictability in our expenses and employee work culture. If we experience any of these effects in connection with future growth, if our new employees perform poorly, or if we are unsuccessful in recruiting, hiring, training, managing and integrating new employees, or retaining our existing employees, it could materially impair our ability to attract new customers, retain existing customers and expand their use of our platform, all of which would materially and adversely affect our business, financial condition and results of operations.

Failure to effectively develop and expand our customer platform capabilities could harm our ability to increase our customer base and achieve broader market acceptance of our platform.

To increase customers and achieve broader market acceptance of our customer platform, we will need to continue to expand our customer platform capabilities, including our sales force and third-party channel partners. We will continue to dedicate significant resources to sales and marketing programs. The effectiveness of our sales and marketing and third-party channel partners has varied over time and may vary in the future and depends on our ability to maintain and improve our customer platform including with respect to AI and machine learning. All of these efforts will require us to invest significant financial and other resources. Our business will be seriously harmed if our efforts do not generate a correspondingly significant increase in revenue. We may not achieve anticipated revenue growth from expanding our sales force if we are unable to hire, develop and retain talented sales personnel, if our new sales personnel are unable to achieve desired productivity levels in a reasonable period of time or if our sales and marketing programs are not effective.

The rate of growth of our business depends on the continued participation and level of service of our Solutions Partners.

We rely on our Solutions Partners to provide certain services to our customers, as well as pursue sales of our customer platform to customers. To the extent we do not attract new Solutions Partners, or existing or new Solutions Partners do not refer a growing number of customers to us, due to changes in our Solutions Partner relationship models or otherwise, our revenue and operating results would be harmed. In addition, if our Solutions Partners do not continue to provide services to our customers, we would be required to provide such services ourselves either by expanding our internal team or engaging other third-party providers, which would increase our operating costs.

If we fail to maintain our thought leadership position, our business may suffer.

We believe that maintaining our thought leadership position in the customer platform space is an important element in attracting new customers. We devote significant resources to develop and maintain our thought leadership position, with a focus on identifying and interpreting emerging trends, shaping and guiding industry dialog and creating and sharing the best practices. Our activities related to developing and maintaining our thought leadership may not yield increased revenue, and even if they do, any increased revenue may not offset the expenses we incurred in such effort. We rely upon the continued services of our management and employees with domain expertise with marketing, sales, services, operations, commerce and content management, and the loss of any key employees in this area could harm our competitive position and reputation. If we fail to successfully grow and maintain our thought leadership position, we may not attract enough new customers or retain our existing customers, and our business could suffer.

If we fail to further enhance our brand and maintain our existing strong brand awareness, our ability to expand our customer base will be impaired and our financial condition may suffer.

We believe that our development of the HubSpot brand is critical to achieving widespread awareness of our existing and future solutions, and, as a result, is important to attracting new customers and maintaining existing customers. In the past, our efforts to build our brand have involved significant expenses, and we believe that this investment has resulted in strong brand recognition in the B2B market. Successful promotion and maintenance of our brands will depend largely on the effectiveness of our marketing efforts and on our ability to provide a reliable and useful customer platform at competitive prices. Brand promotion activities may not yield increased revenue, and even if they do, any increased revenue may not offset the expenses we incurred in building our brand. If we fail to successfully promote and maintain our brand, our business could suffer.

If we fail to adapt and respond effectively to rapidly changing technology, evolving industry standards and changing customer needs or requirements, our customer platform may become less competitive.

Our future success depends on our ability to adapt and innovate our customer platform. To attract new customers and increase revenue from existing customers, we need to continue to enhance and improve our offerings to meet customer needs at prices that our customers are willing to pay. Such efforts will require adding new functionality and responding to technological advancements, including AI and machine learning, which will increase our research and development costs. If we are unable to develop new applications that address our customers’ needs, or to enhance and improve our platform in a timely manner, we may not be able to maintain or increase market acceptance of our platform. Our ability to grow is also subject to the risk of future disruptive technologies. Access and use of our customer platform is provided via the cloud, which, itself, was disruptive to the previous enterprise software model. If new technologies emerge that are able to deliver marketing software and related applications at lower prices, more efficiently, more conveniently or more securely, such technologies could adversely affect our ability to compete.

If we fail to offer high-quality customer support, our business and reputation may suffer.

High-quality education, training and customer support are important for the successful marketing, sale and use of our customer platform and for the renewal of existing customers. Providing this education, training and support requires that our personnel who manage our online training resource, HubSpot Academy, or provide customer support have specific domain knowledge and expertise, making it more difficult for us to hire qualified personnel and to scale up our support operations. The importance of high-quality customer support will increase as we expand our business and pursue new customers. If we do not help our customers use multiple applications within our customer platform and provide effective ongoing support, our ability to sell additional functionality and services to, or to retain, existing customers may suffer and our reputation with existing or potential customers may be harmed.

We may not be able to scale our business quickly enough to meet our customers’ growing needs and if we are not able to grow efficiently, our operating results could be harmed.

As usage of our customer platform grows and as customers use our platform for additional applications, such as sales and services, we will need to devote additional resources to improving our application architecture, integrating with third-party systems and maintaining infrastructure performance. In addition, we will need to appropriately scale our internal business systems and our services organization, including customer support and professional services, to serve our growing customer base, particularly as our customer demographics change over time. Any failure of or delay in these efforts could cause impaired system performance and reduced customer satisfaction. These issues could reduce the attractiveness of our customer platform to customers, resulting in decreased sales to new customers, lower renewal rates by existing customers, the issuance of service credits, or requested refunds, which could impede our revenue growth and harm our reputation. Even if we are able to upgrade our systems and expand our staff, any such expansion will be expensive and complex, requiring management’s time and attention. We could also face inefficiencies or operational failures as a result of our efforts to scale our infrastructure. Moreover, there are inherent risks associated with upgrading, improving and expanding our information technology systems. We cannot be sure that the expansion and improvements to our infrastructure and systems will be fully or effectively implemented on a timely basis, if at all.

Our ability to introduce new products and features, including new products and features that utilize artificial intelligence, is dependent on adequate research and development resources. If we do not adequately fund our research and development efforts, we may not be able to compete effectively and our business and operating results may be harmed.

To remain competitive, we must continue to develop new product offerings, applications, features and enhancements to our existing customer platform. Maintaining adequate research and development personnel and resources to meet the demands of the market is essential. If we are unable to develop our platform internally due to certain constraints, such as high employee turnover, lack of management ability or a lack of other research and development resources, we may miss market opportunities. Further, many of our competitors expend a considerably greater amount of funds on their research and development programs, and those that do not may be acquired by larger companies that would allocate greater resources to our competitors’ research and development programs. Our failure to maintain adequate research and development resources or to compete effectively with the research and development programs of our competitors could materially adversely affect our business.

The development of next-generation solutions that utilize new and advanced features, including AI and machine learning, such as Breeze, involves making predictions regarding the willingness of the market to adopt such technologies over legacy solutions. The Company may be required to commit significant resources to developing new products, software and services, such as Breeze, before knowing whether such investment will result in products or services that the market will accept.

The Company’s inability, for technological or other reasons, some of which may be beyond the Company’s control, to enhance, develop, introduce and monetize products and services in a timely manner, or at all, in response to changing market conditions or customer requirements could have a material adverse effect on the Company’s business, results of operations and financial condition or could result in its products and services not achieving market acceptance or becoming obsolete. In addition, if the Company fails to deliver a compelling customer experience or accurately predict emerging technological trends and the changing needs of customers and end users, or if the features of its new products and services do not meet the demands of its customers or are not sufficiently differentiated from those of its competitors, the Company’s business, results of operations and financial condition could be materially harmed.

Uncertainty around new and emerging AI applications such as generative AI content creation, including Breeze, may require additional investment in the development or acquisition of proprietary datasets, machine learning models and systems to test for accuracy, bias and other variables, which are often complex. Development of new approaches and processes to provide attribution or remuneration to content creators and building and/or integrating systems that enable creatives to have greater control over the use of their work in the development of AI may be costly and could impact our profit margin if we are unable to monetize such assets. In addition, AI technologies, including generative AI, may create content that appears correct but is factually inaccurate or flawed, or contains copyrighted or other protected material, and if our customers or others use this flawed content to their detriment, we may be exposed to brand or reputational harm, competitive harm, and/or legal liability. Developing, testing and deploying AI systems may also increase the cost profile of our offerings due to the nature of the computing costs involved in such systems.

Changes in the sizes or types of businesses that purchase our platform or in the applications within our customer platform purchased or used by our customers could negatively affect our operating results.

Our strategy is to sell subscriptions to our customer platform to mid-sized businesses, but we have sold and will continue to sell to organizations ranging from small businesses to enterprises. Our gross margins can vary depending on numerous factors related to the implementation and use of our customer platform, including the sophistication and intensity of our customers’ use of our platform and the level of professional services and support required by a customer. Sales to enterprise customers may entail longer sales cycles and more significant selling efforts. Selling to small businesses may involve greater credit risk and uncertainty. If there are changes in the mix of businesses that purchase our platform or the mix of the product plans purchased by our customers, our gross margins could decrease and our operating results could be adversely affected.

We have in the past completed acquisitions and may continue to acquire or invest in other companies or technologies in the future, which could divert management’s attention, fail to meet our expectations, result in additional dilution to our stockholders, increase expenses, disrupt our operations or harm our operating results.

We have in the past acquired, and we may in the future acquire or invest in, businesses, products or technologies that we believe could complement or expand our platform, enhance our technical capabilities or otherwise offer growth opportunities. For example, in December 2023, we acquired APIHub, Inc. d.b.a Clearbit (“Clearbit”), a B2B data provider, in October 2024, we acquired Cacheflow Inc. (“Cacheflow”), a B2B subscription billing management and CPQ solution, and in January 2025, we acquired Frame AI, an AI-powered conversation intelligence platform. We may not be able to fully realize the anticipated benefits of historical or any future acquisitions. The pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses related to identifying, investigating and pursuing suitable acquisitions, whether or not they are consummated.

There are inherent risks in integrating and managing acquisitions. If we acquire additional businesses, we may not be able to assimilate or integrate the acquired personnel, operations and technologies successfully or effectively manage the combined business following the acquisition and our management may be distracted from operating our business. We also may not achieve the anticipated benefits from the acquired business due to a number of factors, including: unanticipated costs or liabilities associated with the acquisition; incurrence of acquisition-related costs, which would be recognized as a current period expense; the inability to generate sufficient revenue to offset acquisition or investment costs; the inability to maintain relationships with customers and partners of the acquired business; the difficulty of incorporating acquired technology and rights into our platform and of maintaining quality and security standards consistent with our brand; delays in customer purchases due to uncertainty related to any acquisition; the need to integrate or implement additional controls, procedures and policies; challenges caused by distance, language and cultural differences; harm to our existing business relationships with business partners and customers as a result of the acquisition; the potential loss of key employees; use of resources that are needed in other parts of our business and diversion of management and employee resources; and use of substantial portions of our available cash or the incurrence of debt to consummate the acquisition. Acquisitions also increase the risk of unforeseen legal and compliance liabilities, including for potential violations of applicable law or industry rules and regulations, arising from prior or ongoing acts or omissions by the acquired businesses which are not discovered by due diligence during the acquisition process, including data handling and privacy violations. Generally, if an acquired business fails to meet our expectations, our operating results, business and financial condition may suffer. Acquisitions could also result in dilutive issuances of equity securities or the incurrence of debt, which could adversely affect our business, results of operations or financial condition.

In addition, a significant portion of the purchase price of companies we acquire may be allocated to goodwill and other intangible assets, which must be assessed for impairment at least annually. If our acquisitions do not ultimately yield expected returns, we may be required to make charges to our operating results based on our impairment assessment process, which could harm our results of operations.

We are subject to risks associated with our strategic investments, including partial or complete loss of invested capital. Significant changes in the fair value of this portfolio, including changes in the valuation of our investments in privately held companies, could negatively impact our financial results.

We have made, and expect in the future to make, strategic investments in privately held companies and private limited partnerships. While we invest in companies that we believe have the potential to transform their industries, improve customer experiences, help us expand our solution ecosystem or support other corporate initiatives, we may still experience unforeseen brand or reputational harm associated with our investments. We may also experience challenges from regulatory authorities in connection with our investments, including from antitrust authorities who are increasingly scrutinizing technology investments, and which may lead to unforeseen expenditures or which may block, delay or impose undesirable conditions on transactions involving our investment portfolio. Our investments range from early-stage companies to more mature companies with established revenue streams and business models. Many such companies generate net losses and the market for their products, services or technologies may be slow to develop, and, therefore, they are dependent on the availability of later rounds of financing from banks or investors on favorable terms to continue their operations. Investments in early-stage companies are inherently speculative, as these companies may not yet be revenue-generating and could still be in the process of developing their products and services at the time of our investment. The financial success of our investment in any company or partnership is typically dependent on a liquidity event, such as a public offering, acquisition or other favorable market event reflecting appreciation to the cost of our initial investment. In certain cases, our ability to sell these investments may be impacted by contractual obligations to hold the securities for a set period of time after a public offering. All of our investments are subject to a risk of partial or total loss of invested capital.

We anticipate future volatility in our consolidated statements of operations due to changes in market prices, observable price changes and impairments of our strategic investments. The resulting gains or losses could be material depending on market conditions and events, particularly in periods with economic uncertainty, inflation, geopolitical conflict, volatile public equity markets or unsettled global market conditions.

Because our long-term growth strategy involves further expansion of our sales to customers outside the United States, our business will be susceptible to risks associated with international operations.

A component of our growth strategy involves the further expansion of our operations and customer base internationally. We have formed several international entities and may plan to form additional entities in the future. These international operations focus primarily on sales, professional services and support, and select international locations have development teams. Our current international operations and future initiatives will involve a variety of risks, including:

• difficulties in maintaining our company culture with a dispersed and distant workforce;
• more stringent regulations relating to data security and the unauthorized use of, or access to, commercial and personal data, particularly in the European Union;
• unexpected changes in regulatory requirements, taxes or trade laws;
• differing labor regulations, especially in the European Union, where labor laws are generally more advantageous to employees as compared to the United States, including deemed hourly wage and overtime regulations in these locations;
• challenges inherent in efficiently managing an increased number of employees over large geographic distances, including the need to implement appropriate systems, policies, benefits and compliance programs;
• difficulties in managing a business in new markets with diverse cultures, languages, customs, legal systems, alternative dispute systems and regulatory systems;
• currency exchange rate fluctuations and the resulting effect on our revenue and expenses, and the cost and risk of entering into hedging transactions;
• global economic uncertainty caused by global political events;
• limitations on our ability to reinvest earnings from operations in one country to fund the capital needs of our operations in other countries;
• limited or insufficient intellectual property protection;
• international disputes, wars, political instability or terrorist activities and resulting economic instability;
• likelihood of potential or actual violations of domestic and international anticorruption laws, such as the U.S. Foreign Corrupt Practices Act and the U.K. Bribery Act, or of U.S. and international export control and sanctions regulations, which likelihood may increase with an increase of sales or operations in foreign jurisdictions and operations in certain industries; and
• adverse tax burdens and foreign exchange controls that could make it difficult to repatriate earnings and cash.

Our limited experience in operating our business internationally increases the risk that any potential future expansion efforts that we may undertake will not be successful. If in the future, we invest substantial time and resources to expand our international operations and are unable to do so successfully and in a timely manner, our business and operating results will suffer. We continue to implement policies and procedures to facilitate our compliance with U.S. laws and regulations applicable to or arising from our international business. Inadequacies in our past or current compliance practices may increase the risk of inadvertent violations of such laws and regulations, which could lead to financial and other penalties that could damage our reputation and impose costs on us.

Social and ethical issues relating to the use of new and evolving technologies, such as AI, in our offerings may result in reputational harm and liability.

Social and ethical issues relating to the use of new and evolving technologies such as AI in our offerings, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. We are increasingly building AI into many of our offerings, including early-stage generative AI features. As with many innovations, AI presents risks and challenges that could affect its adoption, and therefore our business. If we enable or offer solutions that draw controversy due to their perceived or actual impact on human rights, privacy, employment, or in other social contexts, we may experience brand or reputational harm, competitive harm or legal liability. Potential government regulation related to AI use and ethics may also increase the burden and cost of research and development in this area, and failure to properly remediate AI usage or ethics issues may cause public confidence in AI to be undermined, which could slow adoption of AI in our products and services. The rapid evolution of AI will require the application of resources to develop, test and maintain our products and services to help ensure that AI is implemented ethically in order to minimize unintended, harmful impact.

Risks Related to Employee Matters

If we cannot maintain our company culture as we experience changes in our workforce, we could lose the innovation, teamwork, passion and focus on execution that we believe contribute to our success and our business may be harmed.

We believe that a critical component to our success has been our company culture, which is based on transparency and personal autonomy. We have invested substantial time and resources in building our team within this company culture. In 2020, we made the decision to permanently move to a hybrid workplace model, which means our employees have the option to be fully remote, work full-time from one of our offices, or work both in the office and remotely. Preservation of our corporate culture has been made more difficult as the majority of our workforce works from home. Any failure to preserve our culture could negatively affect our ability to retain and recruit personnel and to effectively focus on and pursue our corporate objectives. As we grow and continue to develop our company infrastructure, and experience organizational change, we may find it difficult to maintain these important aspects of our company culture and our business may be adversely impacted.

We rely on our management team and other key employees, and the loss of one or more key employees could harm our business.

Our success and future growth depend upon the continued services of our management team, including our co-founders, Brian Halligan and Dharmesh Shah, our chief executive officer, Yamini Rangan, and other key employees in the areas of research and development, marketing, sales, services, operations, and general and administrative functions. From time to time, there may be changes in our management team resulting from the hiring or departure of executives, which could disrupt our business. We also are dependent on the continued service of our existing software engineers and information technology personnel because of the complexity of our platform, technologies and infrastructure. We may terminate any employee’s employment at any time, with or without cause, and any employee may resign at any time, with or without cause. We do not have employment agreements with any of our key personnel. The loss of one or more of our key employees could harm our business.

The failure to attract and retain additional qualified personnel could prevent us from executing our business strategy.

To execute our business strategy, we must attract and retain highly qualified personnel. In particular, we compete with many other companies for software developers with high levels of experience in designing, developing and managing cloud-based software, as well as for skilled information technology, marketing, sales and operations professionals, and we may not be successful in attracting and retaining the professionals we need. Also, our customer platform domain experts are very important to our success and are difficult to replace. We have from time to time in the past experienced, and we expect to continue to experience in the future, difficulty in hiring and difficulty in retaining highly skilled employees with appropriate qualifications worldwide. Many of the companies with which we compete for experienced personnel have greater resources than we do. Other companies that continue to offer a remote or hybrid work environment may increase the competition for such employees from employers outside of our traditional office locations. In addition, if we choose to no longer offer a remote or hybrid work environment, we may face more difficulty in retaining our workforce. Further, labor is subject to external factors that are beyond our control, including our industry’s highly competitive market for skilled workers and leaders, cost inflation, and workforce participation rates. In addition, if our reputation were to be harmed, whether as a result of media, legislative, or regulatory scrutiny or otherwise, it could make it more difficult to attract and retain personnel that are critical to the success of our business.

In addition, in making employment decisions, particularly in the software industry, job candidates often consider the value of equity incentives they are to receive in connection with their employment. If the price of our stock declines, or experiences significant volatility, our ability to attract or retain key employees will be adversely affected. If we fail to attract new personnel or fail to retain and motivate our current personnel, our growth prospects could be severely harmed.

Risks Related to Global Economic Conditions

We are exposed to fluctuations in currency exchange rates that could adversely affect our financial results.

We face exposure to movements in currency exchange rates, which may cause our revenue and operating results to differ materially from expectations. As we have expanded our international operations, our exposure to exchange rate fluctuations has increased. Fluctuations in the value of the U.S. dollar versus foreign currencies may impact our operating results when translated into U.S. dollars. Thus, our results of operations and cash flows are subject to fluctuations due to changes in foreign currency exchange rates and may be adversely affected in the future due to changes in foreign currency exchange rates. As exchange rates vary, revenue, cost of revenue, operating expenses and other operating results, when re-measured, may differ materially from expectations. In addition, our operating results are subject to fluctuation if our mix of U.S. and foreign currency denominated transactions and expenses changes in the future. In the first quarter of 2024, we implemented a hedging program intended to allow us to mitigate foreign exchange impacts, such as exposure to currency exchange rates in connection with significant transactions denominated in currencies other than the U.S. dollar, by entering into derivatives transactions such as foreign exchange forwards. We may also employ certain other strategies in the future to mitigate foreign currency risk. There can be no guarantee or assurance that such hedging program and the strategies we employ pursuant thereto will be effective to reduce or eliminate our exposure to foreign exchange rate fluctuations to the extent we anticipate, or at all. Furthermore, the hedging program and the derivatives transactions employed as part thereof involve costs and risks of their own, including ongoing management time and expertise, external costs to implement the programs and strategies, potential counterparty credit risk and liquidity risk, and potential accounting implications. Additionally, as we anticipate growing our business further outside of the United States, the effects of movements in currency exchange rates will increase as our transaction volume outside of the United States increases.

Weakened global economic conditions may harm our industry, business and results of operations.

Our overall performance depends in part on worldwide economic conditions. Global financial developments and downturns seemingly unrelated to us or the software industry may harm us. The United States and other key international economies have been affected from time to time by falling demand for a variety of goods and services, restricted credit, poor liquidity, reduced corporate profitability, volatility in credit, equity and foreign exchange markets, volatility in the banking sector, changes in the labor market, supply chain disruptions, bankruptcies, inflation and overall uncertainty with respect to the economy, including with respect to tariff and trade issues. Moreover, the potential for a U.S. federal government shutdown resulting from budgetary decisions, a prolonged continuing resolution, breach of the federal debt ceiling, or a potential U.S. sovereign default may increase uncertainty and volatility in the global economy and financial markets. Weak economic conditions or significant uncertainty regarding the stability of financial markets related to stock market volatility, inflation, recession, changes in tariffs, trade agreements or governmental fiscal, monetary and tax policies, among others, could adversely impact our business, financial condition and operating results. Further, weak market conditions have, and could in the future result in, impairment of our investments and long-lived assets.

Further, the economies of countries in Europe have been experiencing weakness associated with high sovereign debt levels, weakness in the banking sector, uncertainty over the future of the Eurozone and volatility in the value of the pound sterling and the Euro and instability resulting from the ongoing conflict between Russia and Ukraine. The effect of the conflict between Russia and Ukraine, including any resulting sanctions, export controls or other restrictive actions that may be imposed against governmental or other entities in, for example, Russia, have in the past contributed and may in the future contribute to disruption, instability and volatility in the global markets. We have operations, as well as current and potential new customers, throughout Europe. If economic conditions in Europe and other key markets for our platform continue to remain uncertain or deteriorate further, it could adversely affect our customers’ ability or willingness to subscribe to our platform, delay prospective customers’ purchasing decisions, reduce the value or duration of their subscriptions or affect renewal rates, all of which could harm our operating results.

More recently, global inflation rates have increased to levels not seen in several decades, which may result in decreased demand for our products and services, increases in our operating costs, including our labor costs, constrained credit and liquidity, reduced government spending and volatility in financial markets. The Federal Reserve and other international government agencies have raised, and may again raise, interest rates in response to concerns over inflation risk. Increases in interest rates on credit and debt that would increase the cost of any borrowing that we may make from time to time and could impact our ability to access the capital markets. Increases in interest rates, especially if coupled with reduced government spending and volatility in financial markets, may have the effect of further increasing economic uncertainty and heightening these risks. In an inflationary environment, we may be unable to raise the sales prices of our products and services at or above the rate at which our costs increase, which could/would reduce our profit margins and have a material adverse effect on our financial results and net income. We also may experience lower than expected sales and potential adverse impacts on our competitive position if there is a decrease in consumer spending or a negative reaction to our pricing. A reduction in our revenue would be detrimental to our profitability and financial condition and could also have an adverse impact on our future growth.

There continues to be uncertainty in the changing market and economic conditions, including the possibility of additional measures that could be taken by the Federal Reserve and other domestic and international government agencies, related to concerns over inflation risk. A sharp rise in interest rates could have an adverse impact on the fair market value of certain securities in our portfolio and investments in some financial instruments could pose risks arising from market liquidity and credit concerns, which could adversely affect our financial results.

Economic uncertainty may lead to decreased demand for our products and services and otherwise harm our business and results of operations.

Our overall performance depends, in part, on worldwide economic conditions. Impacts of economic weakness include:

• falling overall demand for goods and services, leading to reduced profitability;
• reduced credit availability;
• higher borrowing costs;
• reduced liquidity;
• changes in the labor market;
• supply chain disruptions;
• volatility in credit, equity and foreign exchange markets; and
• bankruptcies.

Economic weakness could lead to inflation, higher interest rates, and uncertainty about business continuity, which may adversely affect our business and our results of operations. As our customers react to global economic conditions and the potential for a global recession, we may see them reduce spending on our products and take additional precautionary measures to limit or delay expenditures and preserve capital and liquidity. Reductions in spending on our solutions, delays in purchasing decisions, lack of renewals, inability to attract new customers, as well as pressure for extended billing terms or pricing discounts, would limit our ability to grow our business and could negatively affect our operating results and financial condition.

Risks Related to Our Technical Operations Infrastructure and Dependence on Third Parties

Interruptions or delays in service from our third-party data center providers could impair our ability to deliver our platform to our customers, resulting in customer dissatisfaction, damage to our reputation, loss of customers, limited growth and reduction in revenue.

We currently serve the majority of our platform functions from third-party data center hosting facilities operated by Amazon Web Services (“AWS”) in the United States and Europe. We also have several colocations which host certain critical services (for example, VPN access) in various locations around the world. In addition, we use Cloudflare Global CDN to optimize content delivery across our locations.

Any damage to, or failure of, the systems of our third-party providers could result in interruptions to our platform. Despite precautions taken at our data centers, the occurrence of spikes in usage volume, a natural disaster, such as earthquakes or hurricane, an act of terrorism, geopolitical conflict, vandalism or sabotage, a disruptive cyber attack, a decision to close a facility without adequate notice, power or telecommunications failures or other unanticipated problems at a facility could result in lengthy interruptions in the availability of our on-demand software. In the event that any of our third-party facilities arrangements is terminated, or if there is a lapse of service or damage to a facility, we could experience interruptions in our platform as well as delays and additional expenses in arranging new facilities and services. Even with current and planned disaster recovery arrangements, our business could be harmed. Also, in the event of damage or interruption, our insurance policies may not adequately compensate us for any losses that we may incur. These factors in turn could further reduce our revenue, subject us to liability and cause us to issue credits or cause customers to fail to renew their subscriptions, any of which could materially adversely affect our business.

If our customer platform has outages or fails due to defects or similar problems, and if we fail to correct any defect or other software problems, we could lose customers, become subject to service performance or warranty claims or incur significant costs.

Our customer platform and its underlying infrastructure are inherently complex and may contain material defects or errors. We release modifications, updates, bug fixes and other changes to our software several times per day, without traditional human-performed quality control reviews for each release. We have from time to time found defects in our software and may discover additional defects in the future. We may not be able to detect and correct defects or errors before customers begin to use our platform or its applications. Consequently, we or our customers may discover defects or errors after our platform has been implemented. Defects or errors could result in product outages and could also cause inaccuracies in the data we collect and process for our customers, or even the loss, damage or inadvertent release of such confidential data. We implement bug fixes and upgrades as part of our regular system maintenance, which may lead to system downtime. Even if we are able to implement the bug fixes and upgrades in a timely manner, any history of product outages, defects or inaccuracies in the data we collect for our customers, or the loss, damage or inadvertent release of confidential data could cause our reputation to be harmed, and customers may elect not to purchase or renew their agreements with us. Furthermore, these issues could subject us to service performance credits (whether offered by us or required by contract), warranty claims or increased insurance costs. The costs associated with product outages, any material defects or errors in our platform or other performance problems may be substantial and could materially adversely affect our operating results.

In addition, third-party applications and features on our customer platform may not meet the same quality standards that we apply to our own development efforts and, to the extent they contain bugs, vulnerabilities or defects, they may create disruptions in our customers’ use of our products, lead to data loss, unauthorized access to customer data, damage our brand and reputation and affect the continued use of our products, any of which could harm our business, results of operations and financial condition.

If our information technology systems, including our customer platform, have outages or fail due to defects or similar problems, and if we fail to correct any defect or other software problems, it could disrupt our internal operations or services provided to customers, and could reduce our revenue, increase our expenses, damage our reputation and adversely affect our cash flows and stock price.

We rely on our information technology systems, including the sustained and uninterrupted performance of our customer platform, to manage numerous aspects of our business, including marketing, sales, content management, customer service and other internal operations. Our information technology systems are an essential component of our business and any disruption could significantly limit our ability to manage and operate our business efficiently.

Our customer platform and its underlying infrastructure are inherently complex and may contain material defects or errors. We release modifications, updates, bug fixes and other changes to our software several times per day, without traditional human-performed quality control reviews for each release. While we seek to implement secure development practices, we cannot eliminate the risk that our applications may have vulnerabilities. We have from time to time found defects in our software and may discover in the future additional defects, outages, delays or cessations of service, performance and quality problems or may produce errors in connection with systems integrations, migration work or other causes, which could result in business disruptions and the process of remediating them could be more expensive, time-consuming, disruptive and resource intensive than planned. Such disruptions could adversely impact our internal operations and interrupt other processes. Delayed sales, lower margins or lost customers resulting from these disruptions could reduce our revenue, increase our expenses, damage our reputation and adversely affect our cash flows and stock price.

We are dependent on the continued availability of third-party data hosting and transmission services.

A significant portion of our operating cost is from our third-party data hosting and transmission services, including AWS, which hosts the substantial majority of our products and platform. If the costs for such services increase due to vendor consolidation, regulation, contract renegotiation, or otherwise, we may not be able to increase the fees for our customer platform or services to cover the changes, which could have a negative impact on our operating results.

Additionally, our customers need to be able to access our platform at any time, without interruption or degradation of performance. AWS runs its own platform that we access, and we are, therefore, vulnerable to service interruptions at AWS. We have experienced, and expect that in the future we may experience interruptions, delays and outages in service and availability due to a variety of factors, including infrastructure changes, human or software errors, website hosting disruptions and capacity constraints. In some instances, including because we do not control our service providers, we may not be able to identify the cause or causes of these problems within a period of time acceptable to our customers. Additionally, as our business continues to grow, to the extent that we do not effectively address capacity constraints, through our providers of cloud infrastructure, our results of operations may be adversely affected. In addition, any changes in service levels from our service providers may adversely affect our ability to meet our customers’ requirements, result in negative publicity which could harm our reputation and brand and may adversely affect the usage of our platform.

If we do not or cannot maintain the compatibility of our customer platform with third-party applications that our customers use in their businesses, our revenue will decline.

A significant percentage of our customers choose to integrate our platform with certain capabilities provided by third-party application providers using application programming interfaces (“APIs”) published by these providers. The functionality and popularity of our customer platform depends, in part, on our ability to integrate our platform with third-party applications and platforms, including CRM, CMS, e-commerce, call center, analytics and social media sites that our customers use and from which they obtain data. Third-party providers of applications and APIs may change the features of their applications and platforms, restrict our access to their applications and platforms, or alter the terms governing use of their applications and APIs and access to those applications and platforms in an adverse manner. Such changes could functionally limit or terminate our ability to use these third-party applications and platforms in conjunction with our platform, which could negatively impact our offerings and harm our business. If we fail to integrate our platform with new third-party applications and platforms that our customers use for marketing, sales, services, operations, commerce, or content management purposes, or fail to renew existing relationships pursuant to which we currently provide such integration, we may not be able to offer the functionality that our customers need, which would negatively impact our ability to generate new revenue or maintain existing revenue and adversely impact our business.

We rely on data provided by third parties, the loss of which could limit the functionality of our platform and disrupt our business.

Select functionality of our customer platform depends on our ability to deliver data, including search engine results and social media updates, provided by unaffiliated third parties, such as Meta, Google, LinkedIn and X. Some of this data is provided to us pursuant to third-party data sharing policies and terms of use, under data sharing agreements by third-party providers or by customer consent. In the future, any of these third parties could change its data sharing policies, including making them more restrictive, or alter its algorithms that determine the placement, display, and accessibility of search results and social media updates, any of which could result in the loss of, or significant impairment to, our ability to collect and provide useful data to our customers. These third parties could also interpret our, or our service providers’ data collection policies or practices as being inconsistent with their policies, which could result in the loss of our ability to collect this data for our customers. Any such changes could impair our ability to deliver data to our customers and could adversely impact select functionality of our platform, impairing the return on investment that our customers derive from using our solution, as well as adversely affecting our business and our ability to generate revenue.

Privacy concerns and end users’ acceptance of Internet behavior tracking may limit the applicability, use and adoption of our customer platform.

Privacy concerns may cause end users to resist providing the personal data necessary to allow our customers to use our platform effectively. We have implemented various features intended to enable our customers to better protect end user privacy, but these measures may not alleviate all potential privacy concerns and threats. Even the perception of privacy concerns, whether or not valid, may inhibit market adoption of our platform. Privacy advocacy groups and the technology and other industries are considering various new, additional or different self-regulatory standards that may place additional burdens on us. The costs of compliance with, and other burdens imposed by these groups’ policies and actions may limit the use and adoption of our customer platform and reduce overall demand for it, or lead to significant fines, penalties or liabilities for any noncompliance or loss of any such action.

If our or our customers’ security measures are compromised or unauthorized access to data of our customers or their customers is otherwise obtained, our customer platform may be perceived as not being secure, our customers may be harmed and may curtail or cease their use of our platform, our reputation may be damaged and we may incur significant liabilities.

Our operations involve the storage and transmission of data of our customers and their customers, including personal data. Our storage is typically the sole source of record for portions of our customers’ businesses and end user data, such as initial contact information and online interactions. Security incidents could result in unauthorized access to, loss of or unauthorized disclosure of this information, litigation, indemnity obligations and other possible liabilities, as well as negative publicity, which could damage our reputation, impair our sales and harm our customers and our business. Cyber-attacks and other malicious Internet-based activity continue to increase generally, and cloud-based platform providers of marketing services have been targeted. If our security measures, or those of our service providers, are compromised as a result of third-party action, employee or customer error, malfeasance, stolen or fraudulently obtained log-in credentials or otherwise, our reputation could be damaged, our business may be harmed and we could incur significant liability. Additionally, if third parties with whom we work, such as vendors or developers, violate applicable laws, our security policies or our acceptable use policy, such violations may also put our customers’ information at risk and could in turn have an adverse effect on our business. In addition, if the security measures of our customers or our service providers are compromised, even without any actual compromise of our own systems, we may face negative publicity or reputational harm if our customers or anyone else incorrectly attributes the blame for such security breaches to us or our systems. We may be unable to anticipate or prevent techniques used to obtain unauthorized access or to sabotage systems because they change frequently and generally are not detected until after an incident has occurred. As we increase our customer base and our brand becomes more widely known and recognized, we may become more of a target for third parties seeking to compromise our security systems or gain unauthorized access to our customers’ data. Additionally, we provide our employees with limited access restricted via just-in-time-access controls and least privilege access models to our databases, which store our customer data, and to our APIs to facilitate our rapid pace of product development and to support our customers. If such access, unauthorized access or our own operations, cause the loss, damage, destruction or loss (including, without limitation, because of actions by a bad actor, attempts to exfiltrate customer data which attempts we have experienced in the past and could experience in the future), our systems being compromised or unintentional or accidental disclosure, or destruction of our customers’ business data, their sales, lead generation, support and other business operations may be permanently harmed. As a result, our customers may bring claims against us for lost profits and other damages, or such concerns may cause us to further limit access by our development team. Additionally, in certain of our subscription agreements with our customers, we agree to indemnify these customers against claims by a third party alleging our breach of confidentiality obligations or our misuse of customer data in violation of the subscription agreement.

Cyber-attacks, denial-of-service attacks, ransomware attacks, business email compromises, computer malware, viruses, social engineering (including phishing), and other compromises are prevalent in our industry, the industries of certain of our service providers and our customers' industries. We have in the past experienced threats and security incidents related to our data and systems, and we may in the future experience other threats, compromises, breaches, or incidents. Our internal computer systems and those of our current and any future strategic collaborators, vendors, and other contractors or consultants are vulnerable to damage from cyber-attacks, computer viruses, unauthorized access, natural disasters, cybersecurity threats, terrorism, geopolitical conflict, war and telecommunication and electrical failures. Accordingly, if our cybersecurity measures or those of our service providers fail to protect against unauthorized access, attacks (which may include sophisticated cyber-attacks), compromise or the mishandling of data by our employees and contractors, then our reputation, customer trust, business, results of operations and financial condition could be adversely affected. Cyber incidents have been increasing in sophistication and frequency and can include third parties gaining access to employee or customer data using stolen or inferred credentials, computer malware, viruses, spamming, phishing attacks, ransomware, vulnerabilities in first- or third-party code, card skimming code, and other deliberate attacks and attempts to gain unauthorized access. This risk is increased by the difficulty of balancing rapid vulnerability patching and system availability in a large and rapidly-changing production environment. At times, we may be unable to patch all of our systems in a manner that strictly adheres to our internally prescribed timelines. The techniques used to sabotage or to obtain unauthorized access to our platform, systems, networks, or physical facilities in which data is stored or through which data is transmitted change frequently, and we may be unable to implement adequate preventative measures or stop security breaches while they are occurring. Because the techniques used by threat actors who may attempt to penetrate and sabotage our computer systems change frequently and may not be recognized until launched against a target, we may be unable to anticipate these techniques. Additionally, as remote work and resource access expand, there is an increased risk that we may experience cybersecurity-related events such as phishing attacks, exploitation of any cybersecurity flaws that may exist, an increase in the number of cybersecurity threats or attacks, and other security challenges as a result of most of our employees and our service providers continuing to work remotely from non-corporate managed networks. There is also a risk of potential increase in such attacks due to cyberwarfare in connection with the ongoing global conflicts, and this could adversely affect our and our suppliers' ability to maintain or enhance key cybersecurity and data protection measures. We have previously been, and may in the future become, the target of cyber-attacks, incidents, or compromises by third parties seeking unauthorized access to our or our customers' data, systems, or infrastructure, or to disrupt our operations or ability to provide our services.

Additionally, it is also possible that unauthorized access to sensitive customer and business data may be obtained through inadequate use of security controls by our customers, suppliers or other vendors, using social engineering to cause an employee or contractor to install malware or exploiting known vulnerabilities. Like other businesses, we rely on hardware and software supplied by third-parties and, therefore, are susceptible to supply chain attacks. Such attacks are becoming increasingly common, and we may not be able to anticipate and prevent negative impacts from such an attack. If we are impacted by a supply chain attack, we could incur liability, our competitive position could be harmed and the further development and commercialization of our product and services could be hindered or delayed.

Recent cybersecurity incidents and compromises affecting large institutions, including an incident that affected us in 2024, suggest that the risk of such events is significant, even if privacy protection and security measures are implemented and enforced. A cyber-attack, incident, or compromise could result in a material disruption of our development programs and our business operations, whether due to a loss of our trade secrets or other proprietary information or other disruptions. These cyber-attacks could be carried out by threat actors of all types (including but not limited to nation states, organized crime, other criminal enterprises, individual actors and/or advanced persistent threat groups). In addition, we may experience intrusions on our physical premises by any of these threat actors. To the extent that any compromise, disruption or security breach were to result in a loss of, or damage to, our data or applications, or inappropriate disclosure of confidential or proprietary information, we could incur liability, incur significant costs associated with remediation and the implementation of additional security measures, including costs to deploy additional personnel and protection technologies, train employees, and engage third-party experts and consultants, and our competitive position could be harmed. Any breach, loss, or compromise of personal data may also subject us to civil fines and penalties, or claims for damages either under the General Data Protection Regulation (the “EU GDPR”), the EU GDPR as incorporated into United Kingdom law, and relevant member state law in the European Union, other foreign laws, and other relevant state and federal privacy laws in the United States.

Many governments have enacted laws requiring companies to notify individuals of security incidents, including unauthorized access and transfers of certain types of personal data. In addition, the data processing agreement we execute with our customers contractually requires us to notify them of any personal data breach. Under payment card network rules and our contracts with our payment processors, if there is a data breach of payment resulting in the compromise of cardholder payment information that is stored by our direct payment card processing vendors, we could be liable to the payment card issuing banks for their cost of issuing new cards and related expenses depending on the cause of such data breach. Data breaches and other data security compromises experienced by our competitors, by our customers or by us may lead to public disclosures, which may lead to widespread negative publicity. Any security compromise in our industry, whether actual or perceived, could harm our reputation, erode customer confidence in the effectiveness of our security measures, negatively impact our ability to attract new customers, cause existing customers to elect not to renew their subscriptions or subject us to third-party lawsuits, regulatory fines or other action or liability, which could materially and adversely affect our business and operating results.

There can be no assurance that any limitations of liability provisions in our contracts for a security breach would be enforceable or adequate or would otherwise protect us from any such liabilities or damages with respect to any particular claim. We also cannot be sure that our existing insurance coverage will continue to be available on acceptable terms or will be available in sufficient amounts to cover one or more large claims, or that the insurer will not deny coverage as to any future claim. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could have a material adverse effect on our business, financial condition and operating results.

Risks Related to Intellectual Property

Our business may suffer if it is alleged or determined that our technology infringes the intellectual property rights of others.

The software industry is characterized by the existence of a large number of patents, copyrights, trademarks, trade secrets and other intellectual and proprietary rights. Companies in the software industry are often required to defend against litigation claims based on allegations of infringement or other violations of intellectual property rights. Many of our competitors and other industry participants have been issued patents and/or have filed patent applications and may assert patent or other intellectual property rights within the industry. Moreover, in recent years, individuals and groups that are non-practicing entities, commonly referred to as “patent trolls,” have purchased patents and other intellectual property assets for the purpose of making claims of infringement in order to extract settlements. From time to time, we may receive threatening letters or notices or may be the subject of claims that our services and/or platform and underlying technology infringe or violate the intellectual property rights of others. Responding to such claims, regardless of their merit, can be time consuming, costly to defend in litigation, divert management’s attention and resources, damage our reputation and brand and cause us to incur significant expenses. Our technologies may not be able to withstand any third-party claims against their use. Claims of intellectual property infringement, even those without merit, could require us to redesign our application, delay releases, enter into costly settlement or license agreements or pay costly damage awards, or face a temporary or permanent injunction prohibiting us from marketing or selling our platform. If we cannot or do not license the infringed technology on reasonable terms or at all, or substitute similar technology from another source, our revenue and operating results could be adversely impacted. Additionally, our customers may not purchase our customer platform if they are concerned that they may infringe third-party intellectual property rights. The occurrence of any of these events may have a material adverse effect on our business.

In certain of our subscription agreements with customers, we agree to indemnify these customers against claims by a third party alleging infringement of a valid patent, registered copyright or registered trademark. However, whether or not a subscription agreement includes an indemnity obligation in favor of a customer, there can be no assurance that customers will not assert a common law indemnity claim or that any existing limitations of liability provisions in our contracts would be enforceable or adequate, or would otherwise protect us from any such liabilities or damages with respect to any particular claim. Our customers who are accused of intellectual property infringement may in the future seek indemnification from us under common law or other legal theories. If such claims are successful, or if we are required to indemnify or defend our customers from these or other claims, these matters could be disruptive to our business and management and have a material adverse effect on our business, operating results and financial condition.

If we fail to adequately protect our proprietary rights, in the United States and abroad, our competitive position could be impaired and we may lose valuable assets, experience reduced revenue and incur costly litigation to protect our rights.

Our success is dependent, in part, upon protecting our proprietary technology. We rely on a combination of patents, copyrights, trademarks, service marks, trade secret laws and contractual restrictions to establish and protect our proprietary rights in our products and services. However, the steps we take to protect our intellectual property may be inadequate. We will not be able to protect our intellectual property if we are unable to enforce our rights or if we do not detect unauthorized use of our intellectual property. Any of our trademarks or other intellectual property rights may be challenged by others or invalidated through administrative process or litigation. Furthermore, legal standards relating to the validity, enforceability and scope of protection of intellectual property rights are uncertain. Additionally, the intellectual property ownership and license rights, including copyrights and patents surrounding AI technologies, which we are increasingly building into our product offerings, has not been fully addressed by U.S. courts or other federal or state laws or regulations, and the use or adoption of AI technologies in our products and services may expose us to copyright infringement or other intellectual property misappropriation claims. Despite our precautions, it may be possible for unauthorized third parties to copy our technology and use information that we regard as proprietary to create products and services that compete with ours. Some license provisions protecting against unauthorized use, copying, transfer and disclosure of our offerings may be unenforceable under the laws of certain jurisdictions and foreign countries. In addition, the laws of some countries do not protect proprietary rights to the same extent as the laws of the United States. To the extent we expand our international activities, our exposure to unauthorized copying and use of our technology and proprietary information may increase.

We enter into confidentiality and invention assignment agreements with our employees and consultants and enter into confidentiality agreements with the parties with whom we have strategic relationships and business alliances. No assurance can be given that these agreements will be effective in controlling access to and distribution of our products and proprietary information. Further, these agreements may not prevent our competitors from independently developing technologies that are substantially equivalent or superior to our platform and offerings.

We may be required to spend significant resources to monitor and protect our intellectual property rights. Litigation may be necessary in the future to enforce our intellectual property rights and to protect our trade secrets. Such litigation could be costly, time consuming and distracting to management and could result in the impairment or loss of portions of our intellectual property. Furthermore, our efforts to enforce our intellectual property rights may be met with defenses, counterclaims and countersuits attacking the validity and enforceability of our intellectual property rights. Our inability to protect our proprietary technology against unauthorized copying or use, as well as any costly litigation, could delay further sales or the implementation of our platform and offerings, impair the functionality of our platform and offerings, delay introductions of new features or enhancements, result in our substituting inferior or more costly technologies into our platform and offerings, or injure our reputation.

Our use of “open source” software could negatively affect our ability to offer our platform and subject us to possible litigation.

A substantial portion of our cloud-based platform incorporates so-called “open source” software, and we may incorporate additional open source software in the future. Open source software is generally freely accessible, usable and modifiable. Certain open source licenses may, in certain circumstances, require us to offer the components of our platform that incorporate the open source software for no cost, that we make available source code for modifications or derivative works we create based upon, incorporating or using the open source software and that we license such modifications or derivative works under the terms of the particular open source license. If an author or other third party that distributes open source software we use were to allege that we had not complied with the conditions of one or more of these licenses, we could be required to incur significant legal expenses defending against such allegations and could be subject to significant damages, including being enjoined from the offering of the components of our platform that contained the open source software and being required to comply with the foregoing conditions, which could disrupt our ability to offer the affected software. We could also be subject to suits by parties claiming ownership of what we believe to be open source software. Litigation could be costly for us to defend, have a negative effect on our operating results and financial condition and require us to devote additional research and development resources to change our products.

Risks Related to Government Regulation

We are subject to governmental regulation and other legal obligations, particularly related to privacy, data protection and information security, and our actual or perceived failure to comply with such obligations could harm our business. Compliance with such laws could also impair our efforts to maintain and expand our customer base and business lines, and thereby decrease our revenue.

Our handling of data across our products and services is subject to a variety of laws and regulations, including regulation by various government agencies, including the U.S. Federal Trade Commission ("FTC"), and various state, local and foreign agencies. We collect personal data and other data from our customers, prospects, partners, third-party providers and publicly available sources. We also handle personal data about our customers’ customers. We use this information to provide services to our customers, to support, expand and improve our business. We may also share customers’ personal data with third parties as authorized by the customer or as described in our privacy policy.

The U.S. federal and various state and foreign governments have adopted or proposed limitations on the collection, processing, distribution, use, storage and safeguarding of personal data. In the United States, the FTC and many state attorneys general are applying federal and state privacy and consumer protection laws to impose standards for the online collection, use and dissemination of personal and other data. However, these obligations may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another and may conflict with other requirements or our practices. Any failure or perceived failure by us to comply with privacy or data security laws, policies, legal obligations or industry standards or any security incident that results in the unauthorized, disclosure, release or transfer of personal data or other customer data may result in governmental enforcement actions, litigation, fines and penalties and/or adverse publicity, and could cause our customers to lose trust in us, which could have an adverse effect on our reputation and business.

Laws and regulations governing privacy, data protection and cybersecurity are rapidly evolving, and changes to such laws and regulations could require us to change features of our platform or restrict our customers’ ability to collect and use email addresses, page viewing data and other personal data, which may reduce demand for our platform. Our failure to comply with federal, state and foreign privacy and cybersecurity laws and regulations could harm our ability to successfully operate our business and pursue our business goals.

For example, the California Consumer Privacy Act (the “CCPA”), as amended by the California Privacy Rights Act (the “CPRA”), among other things, require covered companies to provide new disclosures to California residents and afford such individuals the ability to opt out of the sales or sharing of their personal data. In addition to increasing our potential exposure to regulatory enforcement, the CCPA also provides for violations and a limited private right of action, which may increase our exposure to civil litigation.

Numerous other states have passed comprehensive privacy and data security laws, which impose obligations on covered businesses similar – but not identical – to those under the CCPA. A number of other states have proposed similar or sector specific privacy legislation, and the U.S. Congress is considering legislation that may preempt some or all of such U.S. state privacy laws, providing a more robust private right of action. Through executive and legislative action, the federal government has also taken steps to restrict data transactions involving persons affiliated with China, Russia, and other countries of concern. The evolving complexity of privacy and data security legislation in the U.S. may complicate our compliance efforts and further increase our risk of regulatory enforcement, penalties and litigation.

In addition, many foreign jurisdictions in which we do business, including the European Union, Japan, United Kingdom, Canada, Australia, and others have laws and regulations dealing with the collection and use of personal data obtained from their residents, which are more restrictive in certain respects than those in the U.S. Laws and regulations in these jurisdictions apply broadly to the collection, use, storage, disclosure and security of personal data that identifies or may be used to identify an individual. In relevant part, these foreign laws and regulations may affect our ability to engage in lead generation activities by imposing heightened requirements, such as affirmative opt-ins or other consent prior to sending commercial correspondence, obtaining leads or engaging in electronic tracking activities that aid our marketing and business intelligence. We may be required to modify our policies, procedures, and data processing measures in order to address requirements under these or other privacy, data protection, or cyber security regimes, and may face claims, litigation, investigations, or other proceedings regarding them and may incur related liabilities, expenses, costs, and operational losses.

In connection with the operation of some of our business lines, such as business intelligence services, we collect, process and share business contact information or other personal data individuals make available in their professional capacity. We may be subject to additional requirements under privacy and data protection laws that could lead to additional compliance costs, regulatory scrutiny, and reputational risks that may affect our business. For example, we may be required to send notifications to individuals and respond to higher volumes of data privacy requests, which may require substantial costs and expenses, or reduce the potential value of our business intelligence services. We may also receive data from third-party vendors (e.g., data brokers) in connection with such services. While we have implemented certain contractual measures with such vendors to protect our interests, we are ultimately unable to verify with complete certainty the source of such data, how it was received, and that such information was collected and is being shared with us in compliance with all applicable data privacy laws. Furthermore, the uncertain and shifting regulatory environment and trust climate may cause concerns regarding data privacy and may cause our vendors, customers, users, or our customers’ customers to decline to provide the data necessary to allow us to offer some of our services to our customers and users effectively, or could prompt individuals to opt out of our collection of their personal data. Concern regarding our use of the personal data collected when performing our services could keep prospective customers from subscribing to our services.

Within the European Union, the EU GDPR, and in the United Kingdom, the EU GDPR as incorporated into the laws of the United Kingdom ("UK") (the “UK GDPR” together with the EU GDPR, the “GDPR”), impose heightened obligations and risk upon our business and substantially increases the penalties to which we could be subject in the event of any non-compliance. Non-compliance with the GDPR and the related national data protection laws of the European Union Member States may result in monetary penalties of up to €20 million (£17.5 million) or 4% of worldwide annual revenue, whichever is higher.

The proliferation of privacy and data protection laws has heightened risks and uncertainties concerning cross-border transfers of personal data and other data, which could impose significant compliance costs and expenses on our business, increase our potential exposure to regulatory enforcement and/or litigation, and have a negative effect on our existing business and on our ability to attract and retain new customers. To enable the transfer of personal data outside of the European Union or United Kingdom, adequate safeguards must be implemented in compliance with data protection laws. On June 4, 2021, the European Commission published new versions of its Standard Contractual Clauses (“SCCs”), which are required for all transfers of personal data from the European Union to third countries (including the U.S). The United Kingdom is not subject to the new SCCs but has its own equivalent, being the international data transfer agreement and/or UK Addendum (“IDTAs”). Our customer agreements include the updated SCCs and UK IDTAs. Under the new SCCs and IDTAs, companies are also required to assess the risk of a data transfer on a case-by-case basis by undertaking a transfer impact assessment, and may be required to adopt additional measures to accomplish transfers of personal data to the United States and other third countries. There continue to be concerns about whether the SCCs will face additional challenges.

On July 10, 2023, the European Commission approved the EU-U.S. Data Privacy Framework (“DPF”) to support transfers of personal data from the EU to companies in the U.S. Because we have maintained our certification under the previously invalidated Privacy Shield, we have now automatically become subject to the DPF and are required to maintain policies and procedures to comply with the DPF principles. We may be subject to regulatory enforcement by the FTC if we are found to be noncompliant with any of the DPF principles, and this regulatory enforcement may lead to significant civil penalties.

Until the remaining legal uncertainties regarding SCCs, DPF and other transfer mechanisms are settled, we will continue to face uncertainty as to whether our customers will be permitted to transfer personal data to the United States for processing by us as part of our platform services. Our customers may view data transfer mechanisms as being too costly, too burdensome, too legally uncertain or otherwise objectionable and therefore decide not to do business with us.

We publicly post documentation regarding our practices concerning the collection, processing, use and disclosure of data. Although we endeavor to comply with our published policies and documentation, we may at times fail to do so or be alleged to have failed to do so. Any failure or perceived failure by us to comply with our privacy policies or any applicable privacy, security or data protection, information security or consumer-protection related laws, regulations, orders or industry standards could expose us to costly litigation, significant awards, fines or judgments, civil and/or criminal penalties or negative publicity, and could materially and adversely affect our business, financial condition and results of operations. The publication of our privacy policy and other documentation that provide promises and assurances about privacy and security can subject us to potential state and federal action if they are found to be deceptive, unfair, or misrepresentative of our actual practices, which could, individually or in the aggregate, materially and adversely affect our business, financial condition and results of operations.

If our privacy or data security measures fail to comply with current or future laws and regulations, we may be subject to claims, legal proceedings or other actions by individuals or governmental authorities based on privacy or data protection regulations and our commitments to customers or others, as well as negative publicity and a potential loss of business. Moreover, if future laws and regulations limit our subscribers’ ability to use and share personal data or our ability to store, process and share personal data, demand for our solutions could decrease, our costs could increase, and our business, results of operations and financial condition could be harmed.

Separately, as the regulatory framework for machine learning technology and AI evolves, new state laws and regulations are emerging, such as the Colorado AI Act which will go into effect on February 1, 2026, and California's AB 2013, which requires generative AI developers to post information on their websites regarding the data used to train their AI systems. It is possible that other new law and regulations will be adopted in the near future, or that existing laws and regulations may be interpreted in ways that would affect our business and the ways in which we use AI and machine learning technology, our financial condition and our results of operations, including as a result of the cost to comply with such laws or regulations. For example, the EU’s Artificial Intelligence Act (“AI Act”) - the world’s first comprehensive AI law - entered into force on August 1, 2024 and, with some exceptions, will begin to apply as of August 2, 2026. This legislation imposes significant obligations on providers and deployers of high-risk artificial intelligence systems, and encourages providers and deployers of artificial intelligence systems to account for EU ethical principles in their development and use of these systems. If we develop or use AI systems that are governed by the AI Act, it may necessitate ensuring higher standards of data quality, transparency, and human oversight, as well as adhering to specific ethical, accountability, and administrative requirements, some of which may increase our costs and compliance obligations. Further, potential government regulation related to AI use and ethics may also increase the cost of research and development in this area, and failure to properly remediate AI usage or ethics issues may cause public confidence in AI to be undermined, which could slow adoption of AI in our products and services.

We could face liability, or our reputation might be harmed, as a result of the activities of our customers, the content of their websites or the data they store on our servers.

As a provider of a cloud-based marketing, sales and customer service software platform, we may be subject to potential liability for the activities of our customers on or in connection with the data they store on our servers. Although our customer terms of use prohibit illegal use of our services by our customers and permit us to take down websites or take other appropriate actions for illegal use, customers may nonetheless engage in prohibited activities or upload or store content with us in violation of applicable law or the customer’s own policies, which could subject us to liability or harm our reputation. Furthermore, customers may upload, store, or use content on our customer platform that may violate our policy on acceptable use which prohibits content that is threatening, abusive, harassing, deceptive, false, misleading, vulgar, obscene, or indecent. While such content may not be illegal, use of our customer platform for such content could harm our reputation resulting in a loss of business.

Several U.S. federal statutes may apply to us with respect to various customer activities:

• The Digital Millennium Copyright Act of 1998 ("DMCA"), provides recourse for owners of copyrighted material who believe that their rights under U.S. copyright law have been infringed on the Internet. Under the DMCA, based on our current business activity as an Internet service provider that does not own or control website content posted by our customers, we generally are not liable for infringing content posted by our customers or other third parties, provided that we follow the procedures for handling copyright infringement claims set forth in the DMCA. Generally, if we receive a proper notice from, or on behalf, of a copyright owner alleging infringement of copyrighted material located on websites we host, and we fail to expeditiously remove or disable access to the allegedly infringing material or otherwise fail to meet the requirements of the safe harbor provided by the DMCA, the copyright owner may seek to impose liability on us. Technical mistakes in complying with the detailed DMCA take-down procedures could subject us to liability for copyright infringement.
• The Communications Decency Act of 1996 ("CDA"), generally protects online service providers, such as us, from liability for certain activities of their customers, such as the posting of defamatory or obscene content, unless the online service provider is participating in the unlawful conduct. Under the CDA, we are generally not responsible for the customer-created content hosted on our servers. Consequently, we do not monitor hosted websites or prescreen the content placed by our customers on their sites. However, the CDA does not apply in foreign jurisdictions and we may nonetheless be brought into disputes between our customers and third parties which would require us to devote management time and resources to resolve such matters and any publicity from such matters could also have an adverse effect on our reputation and therefore our business.
• In addition to the CDA, the Securing the Protection of our Enduring and Established Constitutional Heritage Act (the "SPEECH Act"), provides a statutory exception to the enforcement by a U.S. court of a foreign judgment for defamation under certain circumstances. Generally, the exception applies if the defamation law applied in the foreign court did not provide at least as much protection for freedom of speech and press as would be provided by the First Amendment of the U.S. Constitution or by the constitution and law of the state in which the U.S. court is located, or if no finding of defamation would be supported under the First Amendment of the U.S. Constitution or under the constitution and law of the state in which the U.S. court is located. Although the SPEECH Act may protect us from the enforcement of foreign judgments in the United States, it does not affect the enforceability of the judgment in the foreign country that issued the judgment. Given our international presence, we may therefore, nonetheless, have to defend against or comply with any foreign judgments made against us, which could take up substantial management time and resources and damage our reputation.

Although these statutes and case law in the United States have generally shielded us from liability for customer activities to date, court rulings in pending or future litigation may narrow the scope of protection afforded us under these laws. In addition, laws governing these activities are unsettled in many international jurisdictions, or may prove difficult or impossible for us to comply with in some international jurisdictions. Also, notwithstanding the exculpatory language of these bodies of law, we may become involved in complaints and lawsuits which, even if ultimately resolved in our favor, add cost to our doing business and may divert management’s time and attention. Finally, other existing bodies of law, including the criminal laws of various states, may be deemed to apply or new statutes or regulations may be adopted in the future, any of which could expose us to further liability and increase our costs of doing business.

Additionally, our end-to-end payment solution, as well as our Stripe payment processing integration (“Payments”), are both built within Commerce Hub and are susceptible to potentially illegal or improper uses, including money laundering, terrorist financing, fraudulent or illegal sales of goods or services, piracy of software, movies, music, and other copyrighted or trademarked information, bank fraud, securities fraud, pyramid or ponzi schemes, or the facilitation of other illegal or improper activity. While we engage a third party as our registered payment facilitator, the use of Payments for illegal or improper uses may subject us to claims (including claims brought by our third-party payment processor), government and regulatory requests, inquiries, or investigations that could result in liability, and harm our reputation. Moreover, certain activity that may be legal in one jurisdiction may be illegal in another jurisdiction, and a merchant may be found responsible for intentionally or inadvertently importing or exporting illegal goods, resulting in liability for us. Owners of intellectual property rights or government authorities may seek to bring legal action against providers of payments solutions, including Payments, that are peripherally involved in the sale of infringing or allegedly infringing items. Any threatened or resulting claims could result in reputational harm, and any resulting liabilities, loss of transaction volume, or increased costs could harm our business.

If Payments is used for illegal or improper uses, we may incur substantial losses as a result of claims from merchants and their buyers, including consumers. Allowances for transaction losses that we have established may be insufficient to cover incurred losses. Moreover, if measures to detect and reduce the risk of fraud are not effective and our loss rate is higher than anticipated, Payments and our business could be negatively impacted.

The standards that private entities use to regulate the use of email have in the past interfered with, and may in the future interfere with, the effectiveness of our customer platform and our ability to conduct business.

Our customers rely on email to communicate with their existing or prospective customers. Various private entities attempt to regulate the use of email for commercial solicitation. These entities often advocate standards of conduct or practice that significantly exceed current legal requirements and classify certain email solicitations that comply with current legal requirements as spam. Some of these entities maintain “blacklists” of companies and individuals, and the websites, internet service providers and internet protocol addresses associated with those entities or individuals that do not adhere to those standards of conduct or practices for commercial email solicitations that the blacklisting entity believes are appropriate. If a company’s internet protocol addresses are listed by a blacklisting entity, emails sent from those addresses may be blocked if they are sent to any internet domain or internet address that subscribes to the blacklisting entity’s service or purchases its blacklist.

From time to time, some of our internet protocol addresses may become listed with one or more blacklisting entities due to the messaging practices of our customers. There can be no guarantee that we will be able to successfully remove ourselves from those lists. Blacklisting of this type could interfere with our ability to market our customer platform and services and communicate with our customers and, because we fulfill email delivery on behalf of our customers, could undermine the effectiveness of our customers’ email marketing campaigns, all of which could have a material negative impact on our business and results of operations.

Existing federal, state and foreign laws regulate Internet tracking software, the senders of commercial emails and text messages, website owners and other activities, and could impact the use of our customer platform and potentially subject us to regulatory enforcement or private litigation.

Certain aspects of how our customers utilize our platform are subject to regulations in the United States, European Union and elsewhere. In recent years, U.S. and European lawmakers and regulators have expressed concern over the use of third-party cookies or web beacons for online behavioral advertising, and legislation adopted recently in the European Union requires informed consent for the placement of a cookie on a user’s device. Regulation of cookies and web beacons may lead to restrictions on our activities, such as efforts to understand users’ Internet usage. New and expanding “Do Not Track” regulations have recently been enacted or proposed that protect users’ right to choose whether or not to be tracked online. These regulations seek, among other things, to allow end users to have greater control over the use of private information collected online, to forbid the collection or use of online information, to demand a business to comply with their choice to opt out of such collection or use, and to place limits upon the disclosure of information to third-party websites. These policies could have a significant impact on the operation of our customer platform and could impair our attractiveness to customers, which would harm our business.

Many of our customers and potential customers in the healthcare, financial services and other industries are subject to substantial regulation regarding their collection, use and protection of data and may be the subject of further regulation in the future. Accordingly, these laws or significant new laws or regulations or changes in, or repeals of, existing laws, regulations or governmental policy may change the way these customers do business and may require us to implement additional features or offer additional contractual terms to satisfy customer and regulatory requirements, or could cause the demand for and sales of our customer platform to decrease and adversely impact our financial results.

In addition, the Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003 ("CAN-SPAM Act"), establishes certain requirements for commercial email messages and specifies penalties for the transmission of commercial email messages that are intended to deceive the recipient as to source or content. The CAN-SPAM Act, among other things, obligates the sender of commercial emails to provide recipients with the ability to opt out of receiving future commercial emails from the sender. The ability of our customers’ message recipients to opt out of receiving commercial emails may minimize the effectiveness of the email components of our customer platform. In addition, certain states and foreign jurisdictions, such as Australia, Canada and the European Union, have enacted laws that regulate sending email, and some of these laws are more restrictive than U.S. laws. For example, some foreign laws prohibit sending unsolicited email unless the recipient has provided the sender advance consent to receipt of such email, or in other words has “opted-in” to receiving it. A requirement that recipients opt into, or the ability of recipients to opt out of, receiving commercial emails may minimize the effectiveness of our platform.

While these laws and regulations generally govern our customers’ use of our customer platform, we may be subject to certain laws as a data processor on behalf of, or as a business associate of, our customers. For example, laws and regulations governing the collection, use and disclosure of personal data include, in the United States, rules and regulations promulgated under the authority of the Federal Trade Commission, the Health Insurance Portability and Accountability Act of 1996, the Gramm-Leach-Bliley Act of 1999 and state breach notification laws, and internationally, the GDPR and other privacy and data protection laws. If we were found to be in violation of any of these laws or regulations as a result of government enforcement or private litigation, we could be subjected to civil and criminal sanctions, including both monetary fines and injunctive action that could force us to change our business practices, all of which could adversely affect our financial performance and significantly harm our reputation and our business.

We are subject to governmental export controls and economic sanctions laws that could impair our ability to compete in international markets and subject us to liability if we are not in full compliance with applicable laws.

Our business activities are subject to various restrictions under U.S. and other global export controls and trade and economic sanctions laws, including the U.S. Commerce Department’s Export Administration Regulations and economic and trade sanctions regulations maintained by the U.S. Treasury Department’s Office of Foreign Assets Control. If we fail to comply with these laws and regulations, we and certain of our employees could be subject to civil or criminal penalties and reputational harm. Obtaining the necessary authorizations, including any required license(s), for a particular transaction may be time-consuming, is not guaranteed, and may result in the delay or loss of sales opportunities. Furthermore, export control laws and economic sanctions laws prohibit certain transactions with embargoed or sanctioned countries, governments, persons and entities. These sanctions laws with which we must comply may also change rapidly from time to time as a result of geopolitical events, such as the imposition of sanctions on Russia as a result of the conflict between Russia and Ukraine. Although we take precautions to prevent unlawful transactions and business relationships with sanction targets, the possibility exists that we could inadvertently provide our products and services to persons or entities prohibited by U.S and other global sanctions regimes. This could result in negative consequences to us, including government investigations, enforcement actions resulting in civil and/or criminal penalties and reputational harm.

Risks Related to Taxation

We may be subject to additional obligations to collect and remit sales tax and other taxes, and we may be subject to tax liability for past sales, which could harm our business.

State, local, and non-U.S. jurisdictions have differing rules and regulations governing sales, use, value added, digital service, and other taxes, and these rules and regulations are subject to varying interpretations that may change over time. In particular, the applicability of such taxes to our customer platform in various jurisdictions can be unclear. Further, these jurisdictions’ rules regarding tax nexus are complex and vary significantly. As a result, we could face the possibility of tax assessments and audits, and our liability for these taxes and associated penalties could exceed our original estimates. A successful assertion that we should be collecting additional sales, use, value added or other taxes in those jurisdictions where we have not historically done so and do not accrue for such taxes could result in substantial tax liabilities and related penalties for past sales, discourage customers from purchasing our application or otherwise harm our business and operating results.

Changes in tax laws or regulations that are applied adversely to us or our customers could increase the costs of our customer platform and adversely impact our business.

New income, sales, use or other tax laws, statutes, rules, regulations or ordinances could be enacted at any time. Any new taxes could adversely affect our domestic and international business operations, and our business and financial performance. Further, existing tax laws, statutes, rules, regulations or ordinances could be interpreted, changed, modified or applied adversely to us. These events could require us or our customers to pay additional tax amounts on a prospective or retroactive basis, as well as require us or our customers to pay fines and/or penalties and interest for past amounts deemed to be due. Additionally, new, changed, modified or newly interpreted or applied tax laws could increase our customers’ and our compliance, operating and other costs, as well as the costs of our platform. Any or all of these events could adversely impact our business, cash flows and financial performance. Furthermore, as our employees continue to work remotely from geographic locations across the United States and internationally, we may become subject to additional taxes and our compliance burdens with respect to the tax laws of additional jurisdictions may increase.

We are a multinational organization faced with increasingly complex tax issues in many jurisdictions, and we could be obligated to pay additional taxes in various jurisdictions.

As a multinational organization, we may be subject to taxation in several jurisdictions around the world with increasingly complex tax laws, the application of which can be uncertain. The amount of taxes we pay in these jurisdictions could increase substantially as a result of changes in the applicable tax principles, including increased tax rates, new tax laws or revised interpretations of existing tax laws and precedents, or challenges to our tax positions by tax authorities, any of which could have a material adverse effect on our liquidity, financial condition or operating results. New global tax developments may have a material impact to our business, cash flows, or financial results. Such developments, may include certain Organization for Economic Co-operation and Development's proposals including the implementation of global minimum tax under the Pillar Two model rules, the European Commission’s and certain major jurisdictions’ heightened interest in and taxation of companies participating in the digital economy. In addition, the authorities in these jurisdictions could review our tax returns and impose additional tax, interest and penalties, and the authorities could claim that various withholding requirements apply to us or our subsidiaries or assert that benefits of tax treaties are not available to us or our subsidiaries, or assert that we are subject to tax in a jurisdiction where we believe we have not established a taxable nexus, often referred to as a “permanent establishment” under international tax treaties, any of which could have a material impact on us, our financial condition or our operating results.

We may not be able to utilize a significant portion of our net operating loss carryforwards, which could adversely affect our profitability.

As of December 31, 2024, we had $640.0 million of U.S. federal and $723.7 million of state net operating loss carryforwards. U.S. federal net operating losses have an indefinite carryforward and state net operating losses begin to expire in 2027. The state net operating loss carryforwards could expire unused and be unavailable to offset future income tax liabilities, which could adversely affect our profitability. In addition, under Section 382 and Section 383 of the Internal Revenue Code of 1986, our ability to utilize net operating loss carryforwards or other tax attributes, such as research tax credits, in any taxable year may be further limited if we experience an “ownership change.” An ownership change generally occurs if one or more stockholders or groups of stockholders who own at least 5% of our stock increase their ownership by more than 50 percentage points over their lowest ownership percentage (by value) within a rolling three-year period. Similar rules may apply under state tax laws. We may have experienced an ownership change in the past, and future issuances of our stock or other transactions could cause an ownership change. It is possible that any such ownership change could have a material effect on the use of our net operating loss carryforwards or other tax attributes accrued prior to such ownership change, which could adversely affect our profitability.

Risks Related to Our Operating Results and Financial Condition

We have a history of losses and may not achieve or if achieved, sustain profitability in the future.

We generated a net income of $4.6 million in 2024, and net losses of $164.5 million in 2023, and $107.3 million in 2022. As of December 31, 2024, we had an accumulated deficit of $799.8 million. We will need to generate and sustain increased revenue levels in future periods to become consistently profitable, and, even if we do, we may not be able to maintain or increase our level of profitability. We have spent and intend to continue to expend significant funds on our marketing, sales, customer service, and general and administrative operations, the development and enhancement of our customer platform, scaling our data center infrastructure and services capabilities and expanding into new markets. Our efforts to grow our business may be more costly than we expect, and we may not be able to increase our revenue enough to offset our higher operating expenses. We may incur significant losses in the future for a number of reasons, including the other risks described in this Annual Report on Form 10-K, and unforeseen expenses, difficulties, complications and delays and other unknown events. If we are unable to achieve and sustain profitability, the market price of our common stock may decrease significantly.

From time to time, we may invest funds in social impact investment funds, and may receive no return on our investment or lose our entire investment.

From time to time, we may invest in social impact investment funds. As of December 31, 2024, we have invested $9.5 million in the Black Economic Development Fund and $7.5 million in support of Minority Depository Institutions to help close the racial wealth, health and opportunity gap. There is no guarantee as to the performance of this investment or any similar investments we make in the future. Depending on the performance of this investment and future investments we may make, we may not receive any return on our investment or we may lose our entire investment, which could have an adverse effect on our business.

We may experience quarterly fluctuations in our operating results due to a number of factors, which makes our future results difficult to predict and could cause our operating results to fall below expectations or our guidance.

Our quarterly operating results have fluctuated in the past and are expected to fluctuate in the future due to a variety of factors, many of which are outside of our control. As a result, our past results may not be indicative of our future performance, and comparing our operating results on a period-to-period basis may not be meaningful. In addition to the other risks described in this Annual Report on Form 10-K, factors that may affect our quarterly operating results include the following:

• changes in spending on software by our current or prospective customers;
• pricing our customer platform subscriptions effectively so that we are able to attract and retain customers without compromising our profitability;
• attracting new customers for our customer platform, increasing our existing customers’ use of our customer platform and providing our customers with excellent customer support;
• customer renewal rates and the amounts for which agreements are renewed;
• global awareness of our thought leadership and brand;
• changes in the competitive dynamics of our market, including consolidation among competitors or customers and the introduction of new products or product enhancements;
• changes to the commission plans, quotas and other compensation-related metrics for our sales representatives;
• the amount and timing of payment for operating expenses, particularly research and development, sales and marketing expenses and employee benefit expenses;
• the amount and timing of costs associated with recruiting, training and integrating new employees while maintaining our company culture;
• our ability to manage our existing business and future growth, including increases in the number of customers on our platform and the introduction and adoption of our customer platform in new markets outside of the United States;
• unforeseen costs and expenses related to the expansion of our business, operations and infrastructure, including disruptions in our hosting network infrastructure and privacy and data security;
• foreign currency exchange rate fluctuations;
• rising inflation in the economies in which we operate and our ability to control costs, including operating expenses; and
• general economic and political conditions in our domestic and international markets.

We may not be able to accurately forecast the amount and mix of future subscriptions, revenue and expenses and, as a result, our operating results may fall below our estimates or the expectations of public market analysts and investors. If our revenue or operating results fall below the expectations of investors or securities analysts, or below any guidance we may provide, the price of our common stock could decline.

If we do not accurately predict subscription renewal rates or otherwise fail to forecast our revenue accurately, or if we fail to match our expenditures with corresponding revenue, our operating results could be adversely affected.

Our customers have no obligation to renew their subscriptions for our services after the expiration of their contractual subscription period and some customers have elected not to renew. In addition, our customers may renew for fewer subscriptions, renew for shorter contract lengths or switch to lower cost offerings of our services. It is difficult to predict attrition rates given our varied customer base. Our attrition rates may increase or fluctuate as a result of various factors, including customer dissatisfaction with our services, customers’ spending levels, mix of customer base, competition, pricing increases or changes in the macroeconomic environment. If customers do not renew their subscriptions, do not purchase additional features or enhanced subscriptions or if attrition rates increase our operating results in future reporting periods may be significantly below the expectations of the public market, equity research analysts or investors, which could harm the price of our common stock.

Changes in accounting standards and subjective assumptions, estimates and judgments by management related to complex accounting matters could significantly affect our financial condition and results of operations.

We apply accounting principles and related pronouncements, implementation guidelines and interpretations to a wide range of matters that are relevant to our business, are highly complex and involve subjective assumptions, estimates and judgments by our management. Changes in these rules or their interpretation, or changes in underlying assumptions, estimates or judgments by our management, could significantly change our reported or expected financial performance.

Risks Related to Our Notes

Servicing our debt may require a significant amount of cash. We may not have sufficient cash flow from our business to pay our indebtedness, and we may not have the ability to raise the funds necessary to settle for cash conversions of the Notes or to repurchase the Notes for cash upon a fundamental change, which could adversely affect our business and results of operations.

In June 2020, we incurred indebtedness in the aggregate principal amount of $460.0 million in connection with the issuance of our 0.375% convertible senior notes due June 1, 2025 (the “2025 Notes”). While we expect to settle the principal amount of the 2025 Notes in cash in the first half of 2025 using our existing cash reserves, our ability to make scheduled payments of the principal of, to pay interest on or to refinance our indebtedness, including the Notes, and any future indebtedness will depend on our performance, which is subject to economic, financial, competitive and other factors beyond our control. Our business may not continue to generate cash flow from operations in the future sufficient to service our debt and make necessary capital expenditures. If we are unable to generate such cash flow, we may be required to adopt one or more alternatives, such as selling assets, restructuring debt or obtaining additional debt financing or equity capital on terms that may be onerous or highly dilutive. Our ability to refinance any future indebtedness will depend on the capital markets and our financial condition at such time. We may not be able to engage in any of these activities or engage in these activities on desirable terms, which could result in a default on our debt obligations. In addition, any of our future debt agreements may contain restrictive covenants that may prohibit us from adopting any of these alternatives. Our failure to comply with these covenants could result in an event of default which, if not cured or waived, could result in the acceleration of our debt.

In addition, holders of the Notes have the right to require us to repurchase their Notes upon the occurrence of a fundamental change at a fundamental change repurchase price equal to 100% of the principal amount of the Notes to be repurchased, plus accrued and unpaid interest, if any. Upon conversion of the Notes, unless we elect to deliver solely shares of our common stock to settle such conversion (other than paying cash in lieu of delivering any fractional share), we will be required to make cash payments in respect of the Notes being converted. We may not have enough available cash or be able to obtain financing at the time we are required to make repurchases of Notes surrendered therefor or Notes being converted. In addition, our ability to repurchase the Notes or to pay cash upon conversions of the Notes may be limited by law, by regulatory authority or by agreements governing our future indebtedness. Our failure to repurchase Notes at a time when the repurchase is required by the indenture governing the notes or to pay any cash payable on future conversions of the Notes as required by such indenture would constitute a default under such indenture. A default under the indenture or the fundamental change itself could also lead to a default under agreements governing our future indebtedness. If the repayment of the related indebtedness were to be accelerated after any applicable notice or grace periods, we may not have sufficient funds to repay the indebtedness and repurchase the Notes or make cash payments upon conversions thereof.

In addition, our indebtedness, combined with our other financial obligations and contractual commitments, could have other important consequences. For example, it could:

• make us more vulnerable to adverse changes in general U.S. and worldwide economic, industry and competitive conditions and adverse changes in government regulation;
• limit our flexibility in planning for, or reacting to, changes in our business and our industry;
• place us at a disadvantage compared to our competitors who have less debt; and
• limit our ability to borrow additional amounts to fund acquisitions, for working capital and for other general corporate purposes.

Any of these factors could materially and adversely affect our business, financial condition and results of operations. In addition, if we incur additional indebtedness, the risks related to our business and our ability to service or repay our indebtedness would increase.

The conditional conversion feature of the Notes, if triggered, may adversely affect our financial condition and operating results.

In the event the conditional conversion feature of the 2025 Notes is triggered, the holders thereof will be entitled to convert the 2025 Notes at any time during specified periods at their option. Because the last reported sale price of the Company’s common stock for at least 20 trading days during the period of 30 consecutive trading days ending on the last trading day of the calendar quarter ended December 31, 2024 was equal to or greater than 130% of the applicable conversion price on each applicable trading day, the 2025 Notes are convertible at the option of the holders thereof during the calendar quarter ending March 31, 2025. Between December 31, 2024 and and the date of filing this report, the Company settled $89.3 million of the principal balance of the 2025 Notes in cash in response to conversion notices received prior to December 31, 2024. Whether the Notes that remain outstanding will be convertible following the calendar quarter ended December 31, 2024 will depend on the continued satisfaction of this condition or another conversion condition in the future. If one or more holders elect to convert their Notes, unless we elect to satisfy our conversion obligation by delivering solely shares of our common stock (other than paying cash in lieu of delivering any fractional share), we would be required to settle a portion or all of our conversion obligation through the payment of cash, which could adversely affect our liquidity.

We are subject to counterparty risk with respect to the Capped Call Options.

In connection with the offering of the 2025 Notes, we purchased capped call options (“Capped Call Options”) with respect to our common stock for $50.6 million. The counterparties to the Capped Call Options are financial institutions, and we will be subject to the risk that one or more of the counterparties may default, fail to perform or exercise their termination rights under the Capped Call Options. Global economic conditions have, from time to time, resulted in the actual or perceived failure or financial difficulties of many financial institutions. If a counterparty to the Capped Call Options becomes subject to insolvency proceedings, we will become an unsecured creditor in those proceedings with a claim equal to our exposure at the time under such transaction. In addition, upon a default, failure to perform or a termination of the Capped Call Options by a counterparty, we may suffer more dilution than we currently anticipate with respect to our common stock. We can provide no assurances as to the financial stability or viability of the counterparties.

Risks Related to Our Common Stock

Our stock price may be volatile and you may be unable to sell your shares at or above the price you purchased them.

The trading prices of the securities of technology companies, including providers of software via the cloud-based model, have been highly volatile. Since shares of our common stock were sold in our initial public offering in October 2014 at a price of $25.00 per share, our stock price has ranged from $25.79 to $866.00 through December 31, 2024. The market price of our common stock may fluctuate significantly in response to numerous factors, many of which are beyond our control, including:

• actual or anticipated fluctuations in our revenue and other operating results, including as a result of the addition or loss of any number of customers;
• announcements by us or our competitors of significant technical innovations, acquisitions, strategic partnerships, joint ventures or capital commitments;
• the financial projections we may provide to the public, any changes in these projections or our failure to meet these projections;
• failure of securities analysts to initiate or maintain coverage of us, changes in ratings and financial estimates and the publication of other news by any securities analysts who follow our company, or our failure to meet these estimates or the expectations of investors;
• changes in operating performance and stock market valuations of cloud-based software or other technology companies, or those in our industry in particular;
• price and volume fluctuations in the trading of our common stock and in the overall stock market, including as a result of trends in the economy as a whole;
• sales of large blocks of our common stock or the dilutive effect of our Notes or any other equity or equity-linked financings;
• new laws or regulations or new interpretations of existing laws or regulations applicable to our business or industry, including data privacy and data security;
• lawsuits threatened or filed against us;
• changes in key personnel; and
• other events or factors, including changes in general economic, industry and market conditions and trends, international disputes, wars, and political stability.

In addition, the stock markets have experienced extreme price and volume fluctuations that have affected and continue to affect the market prices of equity securities of many technology companies. Stock prices of many technology companies have fluctuated in a manner unrelated or disproportionate to the operating performance of those companies.

In the past, stockholders have instituted securities class action litigation following periods of market volatility. If we were to become involved in securities litigation, it could subject us to substantial costs, divert resources and the attention of management from our business and adversely affect our business.

If we fail to maintain an effective system of disclosure controls and internal control over financial reporting, our ability to produce timely and accurate financial statements or comply with applicable regulations could be impaired.

As a public company we are subject to the reporting requirements of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), the Sarbanes-Oxley Act of 2002 (the “Sarbanes-Oxley Act”), the Dodd-Frank Wall Street Reform and Consumer Protection Act (the “Dodd-Frank Act”), and the rules and regulations of the New York Stock Exchange (the “NYSE”). We expect that compliance with these rules and regulations will continue to increase our legal, accounting and financial compliance costs, make some activities more difficult, time consuming and costly, and place significant strain on our personnel, systems and resources.

The Sarbanes-Oxley Act requires, among other things, that we assess the effectiveness of our internal control over financial reporting annually and the effectiveness of our disclosure controls and procedures quarterly. In particular, Section 404 of the Sarbanes-Oxley Act (“Section 404”), requires us to perform system and process evaluation and testing of our internal control over financial reporting to allow management to report on, and our independent registered public accounting firm to attest to, the effectiveness of our internal control over financial reporting. Our compliance with applicable provisions of Section 404 requires that we incur substantial accounting expenses and expend significant management time on compliance-related issues as we implement additional corporate governance practices and comply with reporting requirements. Moreover, if we are not able to comply with the requirements of Section 404 applicable to us in a timely manner, or if we or our independent registered public accounting firm identifies deficiencies in our internal control over financial reporting that are deemed to be material weaknesses, the market price of our stock could decline and we could be subject to sanctions or investigations by the SEC or other regulatory authorities, which would require additional financial and management resources.

Furthermore, investor perceptions of our company may suffer if deficiencies are found, and this could cause a decline in the market price of our stock. Irrespective of compliance with Section 404, any failure of our internal control over financial reporting could have a material adverse effect on our stated operating results and harm our reputation. If we are unable to implement these requirements effectively or efficiently, it could harm our operations, financial reporting, or financial results and could result in an adverse opinion on our internal controls from our independent registered public accounting firm. In addition, as a result of our hybrid culture, many of our employees – including those critical to maintaining an effective system of disclosure controls and internal control over financial reporting – are working, and are expected to continue to work, in a remote environment and not in the office environment from which they have historically performed their duties. While we have experience maintaining effective control systems with our employees working in remote environments, and risks that we have not contemplated may arise and result in our failure to maintain effective disclosure controls or internal control over financial reporting.

Anti-takeover provisions in our charter documents and Delaware law may delay or prevent an acquisition of our company.

Our amended and restated certificate of incorporation, amended and restated bylaws and Delaware law contain provisions that may have the effect of delaying or preventing a change in control of us or changes in our management. Our amended and restated certificate of incorporation and bylaws include provisions that:

• authorize “blank check” preferred stock, which could be issued by the board of directors without stockholder approval and may contain voting, liquidation, dividend and other rights superior to our common stock;
• provide for a classified board of directors whose members serve staggered three-year terms;
• specify that special meetings of our stockholders can be called only by our board of directors, the chairperson of the board of directors, the chief executive officer or the president;
• prohibit stockholder action by written consent;
• establish an advance notice procedure for stockholder approvals to be brought before an annual meeting of our stockholders, including proposed nominations of persons for election to our board of directors;
• provide that our directors may be removed only for cause;
• provide that vacancies on our board of directors may be filled only by a majority of directors then in office, even though less than a quorum;
• specify that no stockholder is permitted to cumulate votes at any election of directors;
• authorize our board of directors to modify, alter or repeal our amended and restated bylaws; and
• require supermajority votes of the holders of our common stock to amend specified provisions of our charter documents.

These provisions, alone or together, could delay or prevent hostile takeovers and changes in control or changes in our management.

In addition, because we are incorporated in Delaware, we are governed by the provisions of Section 203 of the Delaware General Corporation Law, which limits the ability of stockholders owning in excess of 15% of our outstanding voting stock to merge or combine with us in certain circumstances.

Any provision of our amended and restated certificate of incorporation or amended and restated bylaws or Delaware law that has the effect of delaying or deterring a change in control could limit the opportunity for our stockholders to receive a premium for their shares of our common stock, and could also affect the price that some investors are willing to pay for our common stock.

General Risks

Failure to comply with laws and regulations could harm our business.

Our business is subject to regulation by various federal, state, local and foreign governmental agencies, including agencies responsible for monitoring and enforcing employment and labor laws, workplace safety, environmental laws, consumer protection laws, anti-bribery laws, import/export controls, federal securities laws and tax laws and regulations. In certain jurisdictions, these regulatory requirements may be more stringent than those in the United States. Noncompliance with applicable regulations or requirements could subject us to investigations, sanctions, mandatory recalls, enforcement actions, disgorgement of profits, fines, damages, civil and criminal penalties or injunctions.

Adverse litigation results could affect our business.

From time to time we may become involved in legal proceedings or be subject to claims arising in the ordinary course of our business. Litigation can be lengthy, expensive and disruptive to our operations, and can divert our management’s attention away from running our core business. The results of our litigation also cannot be predicted with certainty. Even a favorable judgment may be subject to appeals leading to protracted litigation, additional costs and the prospect that our desired outcome will be overturned. An adverse decision could result in monetary damages or injunctive relief that could affect our business, operating results or financial condition.

Our ability to raise capital in the future may be limited, and our failure to raise capital when needed could prevent us from growing.

Our business and operations may consume resources faster than we anticipate. In the future, we may need to raise additional funds to invest in future growth opportunities. Additional financing may not be available on favorable terms, if at all. In addition, recent volatility in capital markets and lower market prices for many securities may affect our ability to access new capital through sales of shares of our common stock or issuance of indebtedness, which may materially harm our liquidity, limit our ability to grow our business, pursue acquisitions or improve our operating infrastructure and restrict our ability to compete in our markets.

If adequate funds are not available on acceptable terms, we may be unable to invest in future growth opportunities, which could seriously harm our business and operating results. If we incur debt, the debt holders could have rights senior to common stockholders to make claims on our assets, and the terms of any debt could restrict our operations, including our ability to pay dividends on our common stock. Furthermore, if we issue equity securities, stockholders will experience dilution, and the new equity securities could have rights senior to those of our common stock. The Notes are and any additional equity or equity-linked financings would be dilutive to our stockholders. Because our decision to issue securities in any future offering will depend on market conditions and other factors beyond our control, we cannot predict or estimate the amount, timing or nature of our future offerings. As a result, our stockholders bear the risk of our future securities offerings reducing the market price of our common stock and diluting their interest.

Catastrophic events could disrupt our business and adversely affect our financial condition and results of operations.

We rely on our network infrastructure and enterprise applications, internal technology systems and website for our development, marketing, operations, support, hosted services and sales activities. In addition, some of our businesses rely on third-party hosted services, and we do not control the operation of third-party data center facilities serving our customers from around the world, which increases our vulnerability. A disruption, infiltration or failure of these systems or third-party hosted services in the event of a major earthquake, fire, flood, tsunami or other weather event, power loss, telecommunications failure, software or hardware malfunctions, pandemics, cyber-attack, war, terrorist attack or other catastrophic event that we do not adequately address, could cause system interruptions, reputational harm, loss of intellectual property, delays in our product development, lengthy interruptions in our services, breaches of data security and loss of critical data. Any of these events could prevent us from fulfilling our customer demands or could negatively impact a country or region in which we sell our products, which could in turn decrease that country’s or region’s demand for our products. A catastrophic event that results in the destruction or disruption of any of our data centers or our critical business or information technology systems could severely affect our ability to conduct normal business operations and, as a result, our future operating results could be adversely affected. The adverse effects of any such catastrophic event would be exacerbated if experienced at the same time as another unexpected and adverse event.

The occurrence of regional epidemics or a global pandemic, may have an adverse effect on how we and our customers operate our businesses and our operating and financial results. Our operations may in the future be negatively affected by a range of external factors related to the pandemic that are not within our control, including the emergence and spread of more transmissible variants and the degree of transmissibility and severity thereof. The extent to which global pandemics, impact our financial condition or results of operations will depend on factors, such as the duration and scope of the pandemic, as well as whether there is a material impact on the businesses or productivity of our customers, partners, employee, suppliers and other partners. To the extent that a pandemic, harms our business and results of operations, many of the other risks described in this “Risk Factors” section, may be heightened.

Climate change may have a long-term impact on our business

While we seek to partner with organizations that mitigate their business risks associated with climate change, we recognize that there are inherent risks wherever business is conducted. Any of our primary locations may be vulnerable to the adverse effects of climate change. For example, our offices globally may experience climate-related events at an increasing frequency, including drought, water scarcity, heat waves, cold waves, wildfires and resultant air quality impacts and power shutoffs associated with wildfire prevention. While this danger has a low-assessed risk of disrupting normal business operations, it has the potential to disrupt employees’ abilities to commute to work or to work from home and stay connected effectively. Furthermore, it is more difficult to mitigate the impact of these events on our employees to the extent they work from home. Climate-related events, including the increasing frequency of extreme weather events and their impact on the U.S.’s, Europe’s and other major region’s critical infrastructure, have the potential to disrupt our business, our third-party suppliers and/or the business of our customers, and may cause us to experience higher attrition of our employees, losses and additional costs to maintain or resume operations. Regulatory developments, changing market dynamics and stakeholder expectations regarding climate change may impact our business, financial condition and results of operations. To inform our disclosures and take potential action as appropriate, we are working to align our reporting with emerging disclosure and accounting standards such as the Financial Stability Board’s Task Force on Climate-Related Financial Disclosures, the Sustainability Accounting Standards Board and the Global Reporting Initiative, as well as new disclosure requirements from regulators.

Cybersecurity represents an important component of our overall approach to business strategy, risk management and financial oversight. Our board of directors recognizes the critical importance of maintaining the trust and confidence of our customers, business partners and employees, and is actively involved in oversight of our risk management program. The board of directors performs this oversight function at the full board level, as well as through its standing committees that address risks inherent in their respective areas of oversight. The audit committee is responsible for assisting the board of directors in reviewing and assessing the quality and effectiveness of our cybersecurity policies, practices and procedures protecting our information technology systems, data, products and services across all business functions, and reporting its findings to the board of directors, which has final oversight responsibility over cybersecurity-related matters.

Our cybersecurity policies, standards, processes and practices are informed by industry-recognized standards. In general, we seek to address cybersecurity risks through a cross-functional approach that is designed to preserve the confidentiality, security and availability of the information that we collect and store.

Cyber Risk Management and Strategy

Under the board of directors’and audit committee’s oversight, we have implemented and maintain a risk management program that includes processes for the systematic identification, assessment and treatment (through mitigation, transfer, avoidance and/or acceptance) of cybersecurity risks. This risk management program addresses, but is not limited to, risks identified by internal auditors and assessors, threat intelligence providers, internal stakeholders, vulnerability management programs and security management programs. We also engage external independent assessors from time to time to conduct cyber risk assessments and to report both findings and recommendations to management.

Risk assessments: Our security team, in coordination with our enterprise risk management team, conducts periodic risk assessments to identify and analyze the business and security risks, vulnerabilities, emerging technologies, laws and regulations. Our internal audit team evaluates the results of these risk assessments to determine critical areas for audit as part of our annual internal audit plan. The results of the internal audits are reported to the audit committee, and the security team manages and maintains remediation strategies for identified risks.

Vendor risk management: As part of our risk management program, our vendor risk management teams are responsible for conducting due diligence on vendors submitted for risk evaluation where medium- or high-risk data are in scope. We require assessments of these third-party vendors prior to establishing a business relationship, and monitor high-risk vendors on an ongoing basis, as part of our efforts to require these vendors to maintain their commitments related to data security, availability and confidentiality. Our security team’s assessment of vendors’ security controls and processes is calibrated to the risk level assigned to the vendor.

Incident response: We employ a formal process to identify, track, prioritize and remediate cybersecurity incidents that may impact the confidentiality, integrity and availability of data stored and processed on our information systems. This process addresses event detection, triage and classification, investigation and escalation, containment and mitigation, recovery and corrective actions. We maintain a written incident response plan that establishes roles, responsibilities and procedures to guide incident response operations.

Policies and procedures: Our security and legal teams actively participate in industry and other advisory groups and monitor regulatory requirements to keep apprised of evolving risks. Policies and procedures, including our Written Information Security Policy, are periodically updated to adapt to evolving business conditions and information technology requirements.

We, like other companies in our industry, face a number of cybersecurity risks in connection with our business. Although risks from cybersecurity threats have to date not materially affected, and we do not believe they are reasonably likely to materially affect, us, our business strategy, results of operations or financial condition, we have, from time to time, experienced threats and security incidents relating to our and our third party vendors’ information systems. For more information, please see “Item 1A, Risk Factors.”

Governance Related to Cybersecurity Risks

Board oversight: Our board of directors has final oversight responsibility over cybersecurity-related matters. The full board of directors participates in interactive sessions with management, typically twice a year, dedicated to cybersecurity risks. These sessions, led by our Chief Information Security Officer (CISO), address a range of cybersecurity-related topics, such as recent developments related to the threat landscape, security controls, vulnerability assessments, third-party reviews, internal audits, technological trends and information security considerations arising with respect to our peers and third parties.

The audit committee assists the board of directors in fulfilling its oversight responsibilities with respect to the management of risks arising from cybersecurity threats, and our security team provides written reports to the audit committee for its review. The audit committee is responsible for reporting findings related to its review of these matters to the board of directors.

As appropriate, the board of directors also receives information regarding cybersecurity incidents as well as ongoing updates regarding mitigation of any such incidents until they have been resolved.

Management’s role in assessing and managing cybersecurity risk: Our risk management program for cybersecurity is led by the HubSpot Security & Privacy Committee, which we refer to as the Committee. The Committee oversees our information and technology risk management, compliance, and control functions, and serves as a forum for the discussion of issues involving information security and risk management.

The Committee’s members include senior members of management who are responsible for and collectively have experience in information security, information technology, data protection, risk management and compliance. This collaboration helps us incorporate cyber risk management across all of our significant risk management programs.

The Committee is chaired by the CISO, who works collaboratively across the Company to implement a program designed to protect our information systems from cybersecurity threats and to promptly respond to any cybersecurity incidents in accordance with our incident response and recovery plans. The CISO attends regular meetings with representatives from the legal, ERM and security teams to review newly identified cybersecurity risks and re-review previously identified risks. The Committee then determines how identified risks should be treated. The results of these risk review processes are included in periodic presentations to our executive leadership team and the audit committee.

Our CISO has over 25 years of experience working in security and infrastructure for SaaS and hosted services. She has a master's degree in cybersecurity and has maintained an active CISSP certification since 2012.The CISO reports to the Chief Technology Officer, who has overseen the cybersecurity team since 2020 and has led infrastructure teams at the Company for over 12 years.

Our corporate headquarters are located in Cambridge, Massachusetts, where we currently occupy approximately 205,000 square feet of office space under lease agreements that expire through 2035. We also maintain a number of international offices across the world. We believe that our existing facilities and offices are adequate to meet our needs for the foreseeable future.

From time to time we may become involved in legal proceedings or be subject to claims arising in the ordinary course of our business. Although the results of litigation and claims cannot be predicted with certainty, we currently believe that the ultimate costs to resolve any pending matter will not have a material adverse effect on our business, operating results, financial condition or cash flows. Regardless of the outcome, litigation can have an adverse impact on us because of defense and settlement costs, diversion of management resources and other factors.

The following discussion and analysis of our financial condition and results of operations should be read in conjunction with our consolidated financial statements and related notes that appear elsewhere in this Annual Report on Form 10-K. As discussed in the section titled “Special Note Regarding Forward-Looking Statements,” the following discussion and analysis contains forward-looking statements that involve risks and uncertainties, as well as assumptions that, if they never materialize or prove incorrect, could cause our results to differ materially from those expressed or implied by such forward-looking statements. Factors that could cause or contribute to such differences include, but are not limited to, those identified below, and those discussed in the section titled “Risk Factors” included under Part I, Item 1A within this Annual Report on Form 10-K. A discussion of our financial condition, results of operations, and cash flows for the year ended December 31, 2023 compared to the year ended December 31, 2022 is included in section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations” in Part II, Item 7 of our Annual Report on Form 10-K for the year ended December 31, 2023, filed on February 14, 2024.

Company Overview

We provide a customer platform that helps businesses connect and grow better. We deliver seamless connection for customer-facing teams with a unified platform that includes three layers: AI-powered engagement hubs, a Smart CRM, and a connected ecosystem that extends the customer platform with app marketplace integrations, a community network, and an academy of educational content.

Our AI-powered engagement hubs include Marketing, Sales, Service, Operations, Content, and Commerce, as well as other tools and integrations that enable companies to attract, engage, and delight customers throughout the customer lifecycle. Our customer platform features a central database of lead and customer interactions and integrated applications designed to help businesses attract visitors to their websites, convert visitors into leads, close leads into customers, transact with those customers, and delight them so they become promoters of those businesses.

Breeze is our AI that powers the customer platform, including our Smart CRM, engagement Hubs, and the connected ecosystem. The core of our customer platform is our Smart CRM: a unified data platform of lead and customer information that allows businesses to track their interactions with contacts and customers, manage their customer activities, report on their pipeline and sales, and manage and govern their team and business processes. Our customer platform was built to easily and seamlessly integrate third party applications to further customize to an individual company’s industry or needs. As data is becoming more important to our customers’ success and a differentiator for our business, there is a need to move quickly on data enrichment.

We designed and built our customer platform to serve a broad range of customers globally. Our customer platform starts completely free and grows with our customers to meet their needs at different stages in their life-cycles. It supports multiple languages and currencies and offers an array of sophisticated features, including content partitioning at the enterprise level for companies operating in or serving multiple countries.

We focus on selling to mid-market business-to-business, or B2B, companies, which we define as companies that have between two and 2,000 employees. While our customer platform was built to grow with any company, we focus on selling to mid-market businesses because we believe we have significant competitive advantages attracting and serving this market segment. These mid-market businesses seek an integrated, easy-to-implement and easy-to-use solution to reach customers and compete with organizations that have larger marketing, sales, and customer service budgets. We efficiently reach these businesses at scale through our proven inbound methodology, our Solutions Partners, and our “freemium” model. A Solutions Partner is a service provider that helps businesses with strategy, execution, and implementation of go-to-market activities and technology solutions. Our freemium model attracts customers who begin using our customer platform through our free products and then upgrade to our paid products. As of December 31, 2024, we had 8,246 full-time employees and 247,939 Customers of varying sizes in more than 135 countries, representing many industries.

Our customer platform is a multi-tenant, globally available software-as-a-service product delivered through APIs, web browsers or mobile applications. We sell our customer platform on a subscription basis. Our total revenue increased to $2.6 billion in 2024, from $2.2 billion in 2023, and from $1.7 billion in 2022, representing year-over-year increases of 21% in 2024 and 25% in 2023. We had net income of $4.6 million in 2024, net losses of $164.5 million in 2023, and $107.3 million in 2022.

We derive most of our revenue from subscriptions to our cloud-based customer platform and related professional services, which consist of customer on-boarding, training and consulting services. Subscription revenue accounted for 98% of our total revenue for the years ended December 31, 2024, 2023, and 2022. We sell multiple product plans at different base prices on a subscription basis, each of which includes our Smart CRM and integrated applications to meet the needs of the various customers we serve. We also generate revenue through usage and consumption-based models. Customers pay additional fees if the number of contacts stored and tracked in the customer’s database exceeds specified thresholds. We also generate additional revenue based on the purchase of additional subscriptions, products and seats, and the number of account users. Most of our Customers’ subscriptions are one year or less in duration.

Subscriptions are billed in advance on various schedules. Because the mix of billing terms for orders can vary from period to period, the annualized value of the orders we enter into with our customers will not be completely reflected in deferred revenue at any single point in time. Accordingly, we do not believe that change in deferred revenue is an accurate indicator of future revenue.

Many of our customers purchase on-boarding, training, and consulting services, which are designed to help customers enhance their ability to attract, engage and delight their customers using our customer platform. We also generate revenue from Commerce Hub and a number of revenue-share agreements with other companies. Professional services and other revenue accounted for 2% of total revenue for the years ended December 31, 2024, 2023, and 2022.

We have focused on rapidly growing our business and plan to continue to make investments to help us address some of the challenges facing us to support this growth, such as demand for our customer platform by existing and new customers, significant competition from other customer platform providers and related applications and rapid technological change in our industry.

We believe that the growth of our business is dependent on many factors, including our ability to expand our customer base, increase adoption of our customer platform within existing customers, develop new products and applications to extend the functionality of our customer platform and provide a high level of customer service. We have invested and intend to continue investing for long-term growth. We intend to continue to invest in sales and marketing to support our growth. We plan to continue to invest in research and development as we continue to introduce new products and applications to extend the functionality of our customer platform. We intend to continue maintaining a high level of customer service and support which we consider critical for our continued success. We also plan to continue investing in our data center infrastructure and services capabilities in order to support continued future customer growth. We also expect to continue to incur additional general and administrative expenses as a result of both our growth and the infrastructure required to be a public company. We expect to use our cash flow from operations to fund these growth strategies and support our business and may break-even from a profitability perspective in the next 12 months.

Global Economic Conditions

Our results of operations may be significantly influenced by general macroeconomic conditions, including, but not limited to, the impact of pandemics, geo-political conflicts, foreign currency fluctuations, interest rates, inflation, recession risks, existing and new domestic and foreign laws and regulations, all of which are beyond our control. Fluctuations in foreign exchange rates and rising inflation have had, and may continue to have an adverse impact on our financial condition and operating results in future periods. As we continue to monitor the direct and indirect impacts of these circumstances, the broader implications of these macroeconomic events on our business, results of operations and overall financial position, particularly in the long term, remain uncertain. See Part I, Item 1A. "Risk Factors" for further discussion of the impact of these general macroeconomic factors and risks on our business.

Key Business Metrics

The following key business metrics are presented in this Annual Report on Form 10-K or in our press releases announcing our financial results which are furnished on Form 8-K. We use these key business metrics to evaluate our business, measure our performance, identify trends affecting our business and results of operations, formulate financial projections and make strategic decisions. These key business metrics may be calculated in a manner different than similar key business metrics used by other companies.

Customers. We believe that our ability to increase our customer base is an indicator of our market penetration, the growth of our business, and our potential future business opportunities as we continue to expand our sales force and invest in marketing efforts. We define our Customers at the end of a particular period as the number of business entities with one or more paid subscriptions to our customer platform either purchased directly with us or purchased from a Solutions Partner. A single customer may have separate paid subscriptions to our customer platform, but we count these as one Customer if certain customer-provided information such as company name, URL, or email address indicate that these subscriptions are managed by the same business entity.

Average Subscription Revenue per Customer. We believe that our ability to increase the Average Subscription Revenue per Customer is an indicator of our ability to grow the long-term value of our existing customer relationships. We define Average Subscription Revenue per Customer during a particular period as subscription revenue from our Customers during the period divided by the average Customers during the same period.

Net Revenue Retention. We believe that our ability to retain and expand a customer relationship is an indicator of the stability of our revenue base and the long-term value of our Customers. Net Revenue Retention is a measure of the percentage of recurring revenue retained from Customers over a given period of time. Our Net Revenue Retention for a given period is calculated by first dividing Retained Subscription Revenue by Retention Base Revenue in the given period, calculating the weighted average of these rates using the Retention Base Revenue for the period, and then annualizing the resulting rates. A definition of each of the key terms used to calculate Net Revenue Retention is included below.

Retained Subscription Revenue. Contractual Monthly Subscription Revenue of the same cohort of Customers as those that comprise the Retention Base Revenue at the end of the same month.

Retention Base Revenue. Contractual Monthly Subscription Revenue of our Customers as of the beginning of each month.

Contractual Monthly Subscription Revenue. The subscription fees contractually committed to be paid for a full month under our Customer agreements, converted into USD at fixed rates that are held consistent over time, excluding commissions owed to our Solutions Partners.

Key Components of Consolidated Statements of Operations

Revenue

We derive our revenue from two major sources, revenue from subscriptions to our customer platform and professional services and other revenue consisting mainly of on-boarding, training, consulting services fees, and Commerce Hub.

Subscription based revenue is derived from customers using our customer platform for their marketing, sales, service, operations, and content management needs. Our customer platform includes a system of engagement for efficiently engaging customers through SEO, web content, social, blogging, email, marketing automation, messaging, support ticketing, knowledge base, commerce, conversation routing, video hosting, and data enrichment. Over 1,700 integrations and applications are available for our users, across a wide range of categories, including integrations with leading social media, email, sales, video, analytics, content and webinar tools. All subscription fees that are billed in advance of service are recorded in deferred revenue. Subscription based revenue is recognized net of consideration paid to Solutions Partners when those Solutions Partners purchase a subscription to our customer platform.

Professional services and other revenue are derived primarily from customer on-boarding, training, and consulting services. Depending on which Hubs and services a customer purchases, they receive on-boarding guidance or one-on-one training from one of our on-boarding, inbound consultants, or technical consultants by web meetings. Training is generally sold in connection with a customer’s initial subscription and is billed in advance. The training is also available to be purchased separately following a customer’s purchase of its initial subscription and our Solutions Partners routinely provide the same training to customers. We also derive revenue from Commerce Hub and a number of revenue-share agreements with other companies based on mutually agreed upon terms.

Cost of Revenue, Operating and Other Expenses

Cost of Revenue

Cost of subscription revenue consists primarily of managed hosting providers and other third-party service providers, employee-related costs including payroll, benefits and stock-based compensation expense for our customer support team, amortization of capitalized software development costs and acquired technology, and allocated overhead costs, which we define as facilities, depreciation of fixed assets, and costs related to information technology.

Cost of professional services and other revenue consists primarily of personnel costs of our professional services organization, including salaries, benefits, bonuses and stock-based compensation, amortization of capitalized software development costs associated with our internally built software platform, as well as professional fees and allocated overhead costs, which we define as facilities, depreciation of fixed assets, and costs related to information technology. It also consists of costs associated with our other service offerings, including Commerce Hub.

We expect that the cost of subscription and professional services and other revenue will increase in absolute dollars as we continue to invest in growing our business. Over time, we expect to gain benefits of scale associated with our costs of hosting our customer platform relative to subscription revenues, resulting in improved subscription gross margin, exclusive of stock-based compensation. We expect professional services and other margins to break-even in the next 12 months, exclusive of stock-based compensation.

Research and Development

Research and development expenses consist primarily of personnel costs of our development team, including payroll, benefits and stock-based compensation expense, professional and contractor fees and allocated overhead costs. We capitalize certain software development costs that are attributable to developing new products and adding incremental functionality to our customer platform and amortize such costs as costs of subscription and cost of professional services and other revenue over the estimated life of the new product or incremental functionality, which is generally two years. We also capitalize certain development costs that are attributable to developing our internally developed software platforms and amortize such costs throughout the consolidated statement of operations over the estimated life of our internally developed software platforms, which is generally five years. We focus our research and development efforts on improving our products and developing new ones, delivering new functionality and enhancing the customer experience. We believe delivering new functionality for our customers is an integral part of our solution and provides our customers with access to a broad array of options and information critical to their marketing, sales, and customer service efforts. We expect to continue to make investments in and expand our offerings to enhance our customers’ experience and satisfaction and attract new customers. Over time, we expect research and development expenses to increase in absolute dollars as we continue to increase the functionality of our customer platform and remain consistent as a percentage of total revenue, exclusive of stock-based compensation expense.

Sales and Marketing

Sales and marketing expenses consist primarily of personnel costs of our sales and marketing employees, including sales commissions and incentives, benefits and stock-based compensation expense, marketing programs, including lead generation, costs of our annual INBOUND conference, other brand building expenses, amortization of intangible assets, professional and contractor fees and allocated overhead costs. Sales and marketing expenses also include commissions paid to our Solutions Partners in instances where the end customer purchases and pays for a subscription to our customer platform. We defer certain sales and Solutions Partner commissions related to acquiring new contracts and amortize them ratably over a period of benefit that we have determined to be approximately two to four years.

We plan to continue to invest in sales and marketing to grow our customer base and increase sales to existing customers. This growth will include adding sales personnel and expanding our marketing activities to continue to generate leads and build brand awareness. We expect sales and marketing expenses to increase in absolute dollars as we continue to develop our sales and marketing teams. Over time, we expect sales and marketing expenses will decline as a percentage of total revenue, exclusive of stock-based compensation.

General and Administrative

General and administrative expenses consist of personnel costs and related expenses for executive, finance, legal, human resources, employee-related information technology, administrative personnel, including payroll, benefits and stock-based compensation expense, professional fees for external legal, accounting and other consulting services, and allocated overhead costs. We expect that general and administrative expenses will increase on an absolute dollar basis as we incur the costs of compliance associated with being a publicly trade company, and remain relatively consistent as a percentage of total revenue, exclusive of stock-based compensation expense, as we focus on processes, systems and controls to enable our internal support functions to scale with the growth of our business. Over time, we expect general and administrative expenses to remain consistent as a percentage of total revenue, exclusive of stock-based compensation.

Restructuring

Restructuring expenses primarily consist primarily of lease consolidation charges and personnel costs, such as employee severance payments, benefits, and stock-based compensation expense, associated with our workforce reduction, which are described in Note 18 to our consolidated financial statements included elsewhere in this Annual Report on Form 10-K.

Other Income (Expense)

Interest income primarily consists of interest earned on invested cash and cash equivalents balances and investments. Interest expense primarily consists of amortization of issuance costs and contractual interest expense related to our Notes. Other income

(expense) primarily consists of the impact of foreign currency transaction gains and losses associated with monetary assets and liabilities and any gains, losses, or impairments on our strategic investments.

Income Tax Expense

Income tax expense consists of current and deferred taxes for U.S. and foreign jurisdictions.

Results of Operations

The following tables set forth certain consolidated financial data in dollar amounts and as a percentage of total revenue.

(in thousands)

50

* Percentages are based on actual values. Totals may not sum due to rounding.

Year Ended December 31, 2024 Compared to the Year Ended December 31, 2023

Revenue

(dollars in thousands)

Subscription revenue increased during 2024 due to the increase in Customers, which grew from 205,091 as of December 31, 2023 to 247,939 as of December 31, 2024. Average Subscription Revenue per Customer also decreased from $11,384 for the year ended December 31, 2023 to $11,343 for the year ended December 31, 2024. The growth in Customers was primarily driven by increased demand for our lower-priced Starter products, as well as Professional and Enterprise products from our new seats model. The decrease in Average Subscription Revenue per Customer was primarily driven by continued purchases of our lower-priced Starter products and the impact of our new seats pricing model, offset by a continued demand for our Professional and Enterprise products, the addition of customers from the acquisition of Clearbit, and the impact of foreign currency translation primarily attributable to the increase in the value of the U.S. Dollar relative to the Euro and British Pound Sterling.

Professional services and other revenue increased during 2024 primarily due to an increase in other revenue streams, including Commerce Hub.

Cost of Revenue, Gross Profit and Gross Margin Percentage

(dollars in thousands)

Total cost of revenue increased during 2024 primarily due to an increase in subscription and hosting costs, amortization of capitalized software development costs, amortization of acquired technology and employee-related costs, offset by a decrease in allocated overhead expenses. Gross margins remained relatively consistent year-over-year.

(dollars in thousands)

The increase in subscription cost of revenue for the year ended December 31, 2024 compared to the year ended December 31, 2023 was primarily due to the following:

(in thousands)

Subscription and hosting costs increased primarily due to growth in our Customer base from 205,091 at December 31, 2023 to 247,939 at December 31, 2024. Amortization of capitalized software development costs increased due to the increased number of developers working on our software platform as we continued to develop new products and increased functionality. We also saw higher subscription and hosting costs as we continued to focus on the security, reliability and performance of our customer platform. Amortization of acquired technology increased due to the acquired technology associated with our acquisition of Clearbit in December 2023. Employee-related costs increased as a result of increased headcount as we continue to grow our customer support organization to support our customer growth and improve service levels and offerings. Allocated overhead expenses decreased primarily due to the reduction of our leased space as a result of the global lease consolidation under the Restructuring Plan.

(dollars in thousands)

The increase in professional services and other cost of revenue for the year ended December 31, 2024 compared to the year ended December 31, 2023 was primarily due to the following:

(in thousands)

Allocated overhead and other expenses increased primarily due to increased costs associated with our other service offerings, including Commerce Hub. Employee-related costs decreased as we continue to leverage our Solutions Partners to deliver on-boarding and other professional services.

Research and Development

(dollars in thousands)

The increase in research and development expense for the year ended December 31, 2024 compared to the year ended December 31, 2023 was primarily due to the following:

(in thousands)

Employee-related costs increased as a result of increased headcount as we continued to grow our engineering organization to develop new products, increase functionality and to maintain our existing customer platform. Hosting expense increased due to incremental spend associated with our product development infrastructure that is unrelated to the hosting of our customer platform for our paying Customers. Allocated overhead expenses increased due to the increased proportional allocation of shared company expenses associated with the growth in research and development headcount relative to other departments. Professional fees increased due to an increase in the use of third-party services and contractors.

Sales and Marketing

(dollars in thousands)

The increase in sales and marketing expense for the year ended December 31, 2024 compared to the year ended December 31, 2023 was primarily due to the following:

(in thousands)

Employee-related costs increased as a result of increased headcount as we expanded our selling and marketing organizations to grow our customer base. Marketing programs increased due to the timing and size of certain marketing efforts as we made investments in attracting new customers. Solutions Partner commissions increased as a result of increased revenue generated through our Solutions Partners, partially offset by certain Solutions Partner commissions that are deferred and amortized over two to four years as we changed the duration of certain Solutions Partner commissions terms from lifetime to three years in 2023. Software and services expense increased as we continued to invest in tools to expand our sales and marketing efforts. Allocated overhead expenses increased due to an increase in shared company expenses associated with our systems and infrastructure. In addition, during 2023, we recorded a one-time write off of an intangible asset which did not recur in 2024.

General and Administrative

(dollars in thousands)

The increase in general and administrative expense for the year ended December 31, 2024 compared to the year ended December 31, 2023 was primarily due to the following:

(in thousands)

Employee-related costs increased as a result of increased headcount as we grew our business and required additional personnel to support our expanded operations. Professional fees increased primarily due to our acquisition in 2024. Customer credit card fees increased due to increased customer transactions as we continued to grow our business. Software and services expense increased as we continued to invest in tools to streamline operations across general and administrative functions. Allocated overhead expenses increased due to an increase in shared company expenses associated with infrastructure as we continued to grow our business.

Restructuring

(dollars in thousands)

Restructuring charges in 2024 consisted of variable facilities-related costs on unused space. Restructuring charges were $96.8 million in 2023 due to the implementation of the Restructuring Plan in the first quarter of 2023 and its continued execution throughout the year. Restructuring charges in 2023 primarily consisted of $26.8 million of severance, employee related benefits and other costs, and $70.0 million related to the termination and abandonment of leases globally. See Note 18 in the Notes to the Consolidated Financial Statements.

Interest Income

(dollars in thousands)

Interest income primarily consists of interest earned on invested cash and cash equivalents balances and investments. The increase during the year is due to a higher balance of cash invested and increases in yields on our investment balances.

Interest Expense

(dollars in thousands)

* not meaningful

Interest expense primarily consists of amortization of the debt issuance costs and contractual interest expense related to our 2025 Notes.

Other (Expense) Income

(dollars in thousands)

* not meaningful

The change in other expense during 2024 is primarily due to the following:

(in thousands)

Other income (expense) primarily consists of the impact of foreign currency transaction gains and losses associated with monetary assets and liabilities and any gains or impairments on our strategic investments. The increase in gain on strategic investments is due to gains of $21.2 million from observable price changes in the value of certain strategic investments in 2024 that did not occur in 2023. The increase in impairment of strategic investments is due to a $5.3 million loss recorded in 2024 from the decrease in value of our strategic investments compared to $1.7 million in 2023. The change in foreign currency gains and losses transactions is primarily attributable to the value of the U.S. Dollar relative to the Euro and British Pound Sterling.

Income Tax Expense

(dollars in thousands)

Income tax expense consists of current and deferred taxes for U.S. and foreign jurisdictions. The increase in income tax expense was primarily due to an increase in income generated in tax paying jurisdictions.

Liquidity and Capital Resources

Our principal sources of liquidity to date have been cash and cash equivalents, net accounts receivable, our common stock offerings, and our convertible notes offerings.

The following table shows cash and cash equivalents, working capital, net cash and cash equivalents provided by operating activities, net cash and cash equivalents used in investing activities, and net cash and cash equivalents provided by financing activities for the years ended December 31, 2024, 2023 and 2022:

(in thousands)

55

Our cash and cash equivalents at December 31, 2024 were held for working capital purposes and for a business acquisition (See Note 19 of the Notes to Consolidated Financial Statements). We believe our working capital is sufficient to support our operations for at least the next 12 months. At December 31, 2024, $184.3 million of our cash and cash equivalents was held in accounts outside the United States. We do not assert indefinite reinvestment of our foreign earnings because these earnings have been subject to United States Federal tax. While we have concluded that any incremental tax incurred upon ultimate distribution of these earnings to be immaterial, our current plans do not demonstrate a need to repatriate undistributed earnings to fund our U.S. operations.

Net Cash and Cash Equivalents Provided by Operating Activities

Net cash and cash equivalents provided by operating activities consists primarily of net income (loss) adjusted for certain non-cash items, including stock-based compensation, depreciation and amortization and other non-cash charges, net.

Net cash and cash equivalents provided by operating activities during the year ended December 31, 2024 primarily reflected our net income of $4.6 million, $51.7 million accretion of bond discounts and a $21.2 million gain on investments, offset by non-cash expenses that included $96.8 million of depreciation and amortization, $504.8 million in stock-based compensation, $5.3 million on impairment of strategic investments, $2.7 million provision for deferred income taxes, and $2.0 million of amortization of debt issuance costs. Working capital sources of cash and cash equivalents primarily included a $131.0 million increase in deferred revenue primarily resulting from the growth in the number of customers invoiced during the period, a $32.3 million decrease in right-of-use assets, and $89.0 million increase in accrued expenses and other liabilities. These sources of cash and cash equivalents were offset by a $4.4 million increase in prepaid expenses and other assets, a $41.5 million decrease in operating lease liabilities, a $4.6 million decrease in accounts payable related to timing of bill payments, a $96.7 million increase in deferred commissions, and a $48.4 million increase in accounts receivable as a result of increased billings to customers.

Net cash and cash equivalents provided by operating activities during the year ended December 31, 2023 primarily reflected our net loss of $164.5 million and $42.9 million accretion of bond discounts, offset by non-cash expenses that included $72.7 million of depreciation and amortization, restructuring charges of $67.3 million, $432.3 million in stock-based compensation, $1.7 million on impairment of strategic investments, and $2.0 million of amortization of debt issuance costs. Working capital sources of cash and cash equivalents primarily included a $109.9 million increase in deferred revenue primarily resulting from the growth in the number of customers invoiced during the period, a $29.2 million decrease in right-of-use assets, and $79.9 million increase in accrued expenses and other liabilities. These sources of cash and cash equivalents were offset by a $47.0 million increase in prepaid expenses and other assets, a $36.9 million decrease in operating lease liabilities, a $14.0 million decrease in accounts payable related to timing of bill payments, a $81.2 million increase in deferred commissions, and a $57.6 million increase in accounts receivable as a result of increased billings to customers.

Net Cash and Cash Equivalents Used in Investing Activities

Our investing activities have consisted primarily of purchases, maturities and sale of investments, property and equipment purchases, business acquisitions, purchase of intangible assets, purchases of strategic investments, and capitalization of software development costs. Capitalized software development costs are related to new products or improvements to our existing software platform that expands the functionality for our customers and for Company use.

Net cash and cash equivalents used in investing activities during the year ended December 31, 2024 consisted primarily of cash used for $2.0 billion purchases of investments, $15.5 million of purchases of strategic investments, $40.4 million for acquisition of a business, $37.9 million of purchased property and equipment, $1.2 million purchases of intangible assets, and $89.6 million of capitalized software development costs, offset by $1.7 billion received related to the maturity of investments, $2.0 million of proceeds from sale of investments, and $1.9 million of proceeds from a net working capital settlement.

Net cash and cash equivalents used in investing activities during the year ended December 31, 2023 consisted primarily of $1.6 billion purchases of investments, $33.7 million of purchased property and equipment, $14.4 million of purchases of strategic investments, $66.4 million of capitalized software development costs, and $142.1 million for a business acquisition. These uses of cash were offset by $1.5 billion received related to the maturity of investments.

Net Cash and Cash Equivalents Provided by Financing Activities

Our financing activities have consisted primarily of the issuance of common stock under our stock plans, and payments of employee taxes related to the net share settlement of stock-based awards.

For the year ended December 31, 2024, cash provided by financing activities consisted of $75.5 million of proceeds related to issuance of common stock under stock plans, offset by $21.9 million used for payment of employee taxes related to the net share settlement of stock-based awards.

For the year ended December 31, 2023, cash provided by financing activities consisted of $47.7 million of proceeds related to issuance of common stock under stock plans, offset by $10.7 million used for payment of employee taxes related to the net share settlement of stock-based awards.

Liquidity and Capital Resources Considerations

Contractual Obligations and Commitments

Contractual obligations are cash that we are obligated to pay as part of certain contracts that we have entered during our course of business. Our contractual obligations consist of operating lease liabilities that are included in our consolidated balance sheets and vendor commitments associated with agreements that are legally binding. As of December 31, 2024, the total obligation for operating leases was $356.6 million, of which $51.8 million is expected in the next twelve months. As of December 31, 2024, our vendor commitment was $681.0 million, of which $247.7 million is expected in the next twelve months. See Note 12 of the Notes to Consolidated Financial Statements included elsewhere in this Annual Report.

Convertible Senior Notes

As of December 31, 2024, the carrying value was $458.2 million for our 2025 Notes. The interest rate is fixed at 0.375% for the 2025 Notes and the notes are due June 1, 2025. The Company expects to settle the principal amount of the 2025 Notes in cash. Between December 31, 2024 and the date of filing this report, the Company settled $89.3 million of the principal balance of the 2025 Notes in cash in response to conversion notices received prior to December 31, 2024. See Note 10 and Note 19 of the Notes to Consolidated Financial Statements included elsewhere in this Annual Report.

Letters of Credit

As of December 31, 2024, we had a total of $4.1 million in letters of credit outstanding for office space. These irrevocable letters of credit are expected to remain in effect, in some cases, until 2029.

Off Balance Sheet Arrangements

We have no material off-balance sheet arrangements at December 31, 2024 or 2023 exclusive of items described above and indemnifications of officers, directors and employees for certain events or occurrences while the officer, director or employee is, or was, serving at our request in such capacity.

Critical Accounting Policies and Estimates

Our management’s discussion and analysis of financial condition and results of operations is based on our consolidated financial statements which have been prepared in accordance with accounting principles generally accepted in the United States of America. In preparing our financial statements, we make estimates, assumptions and judgments that can have a significant impact on our reported revenues, results of operations and net income or loss, as well as on the value of certain assets and liabilities on our balance sheet during and as of the reporting periods. These estimates, assumptions and judgments are necessary because future events and their effects on our results and the value of our assets cannot be determined with certainty and are made based on our historical experience and on other assumptions that we believe to be reasonable under the circumstances. These estimates may change as new events occur or additional information is obtained, and we may periodically be faced with uncertainties, the outcomes of which are not within our control and may not be known for a prolonged period of time. Because the use of estimates is inherent in the financial reporting process, actual results could differ from those estimates.

We believe that of our significant accounting policies, which are described in Note 2 “Summary of Significant Accounting Policies” to our consolidated financial statements, the following accounting policies and specific estimates involve a greater degree of judgment and complexity.

Revenue Recognition

We generate revenue from arrangements with multiple performance obligations, which typically include subscriptions to our online software solutions and professional and other services which include on-boarding, training, consulting services and our Commerce Hub. Our customers do not have the right to take possession of the online software products. Revenue from online software products and support is recognized ratably over the subscription period beginning on the date the online software product is made available to customers. We recognize revenue from on-boarding, training, consulting services, and Commerce Hub as the services are provided. Amounts billed that have not yet met the applicable revenue recognition criteria are recorded as deferred revenue.

We allocate the transaction price to each distinct performance obligation based on the standalone selling price (“SSP”) of each good or service. We calculate SSP for each type of online software product and professional service offering by averaging the selling price of all purchases within the trailing four calendar quarters. We generally use four quarters of transaction data to determine SSP as most of our customer arrangements are one year or less and pricing may be subject to change upon each customer’s renewal. In instances where there are not sufficient data points, or the average selling prices for a particular online software product or professional service offering are disparate, we estimate the SSP using other observable inputs, such as similar products or services. If the actual selling price for the sale of an online software product or professional service offering within a multiple performance obligation arrangement substantially differs from the SSP of that offering, we use the relative SSP to allocate the transaction price to the performance obligations in the contract.

Costs to Obtain a Contract with a Customer

Sales commissions earned by our sales force and Solutions Partners are considered incremental, recoverable costs of obtaining a contract with a customer. Sales commissions for initial contracts are deferred and then amortized on a straight-line basis over a period of benefit that we have determined to be approximately two to four years. The two to four-year period has been determined by taking into consideration the commitment term of the customer contract, the nature of the Company’s technology development life-cycle, and an estimated customer relationship period. Sales commissions for upgrade contracts are deferred and amortized on a straight-line basis over the remaining estimated customer relationship period of the related customer. While we do not anticipate any significant changes to the two to four year amortization period, if a change did occur it could produce a material impact on our financial statements. For example, if the commitment term of our customer contracts significantly increased, our deferred commission expense asset would increase, and our amortization expense would decrease in the period in which the change occurs.

Capitalized Software Development Costs

Software development costs consist of certain payroll and stock compensation costs incurred to develop functionality for our customer platform and internally-built software platforms, as well as certain upgrades and enhancements that are expected to result in enhanced functionality. We capitalize certain software development costs for new offerings as well as upgrades to our existing software platforms, while costs associated with planning new developments and maintaining our customer platform and internally built software platforms are expensed as incurred. We amortize these development costs over the estimated useful life of two to five years on a straight-line basis. We determined that a two to five year life is appropriate for our internal-use software based on our best estimate of the useful life of the internally developed software after considering factors such as continuous developments in the technology, obsolescence, and anticipated life of the service offering before significant upgrades. Management evaluates the useful lives of these assets on a quarterly basis and tests for impairment whenever events or changes in circumstances occur that could impact the recoverability of these assets.

We determine the amount of internal software costs to be capitalized based on the amount of time spent by our developers on projects in the application stage of development. There is judgment involved in estimating the time allocated to a particular project in the application stage. A significant change in the time spent on each project could have a material impact on the amount capitalized and related amortization expense in subsequent periods.

Business Combinations

We account for business acquisitions using the purchase method of accounting, in accordance with which assets acquired and liabilities assumed are recorded at their respective fair values at the acquisition date. Goodwill represents the excess of the purchase price over the estimated fair values of the assets acquired and liabilities assumed.

Significant judgment is used in determining fair values of assets acquired and liabilities assumed, as well as intangible assets and their estimated useful lives. Fair value and useful life determinations are based on, among other factors, estimates of replacement costs, future expected cash flows attributable to the acquired intangible assets and appropriate discount rates used in computing present values. Particularly for the acquisitions of Cacheflow and Clearbit, management applied judgment in estimating the fair values of the acquired developed technology intangible assets. For the acquisition of Cacheflow, management applied judgment in estimating the costs to rebuild the acquired technology. For the acquisition of Clearbit, the valuation involved estimates and assumptions with respect to forecasted revenue growth rates, the revenue attributable to the acquired intangible asset over its estimated economic life and the discount rate. These judgments may materially impact the estimates used in allocating the purchase price consideration to the fair value of assets acquired and liabilities assumed, as well as our current and future operating results. Actual results may vary from these estimates that may result in adjustments to goodwill and acquisition date fair values of assets and liabilities during a measurement period or upon a final determination of asset and liability fair values, whichever occurs first. Adjustments to the fair value of assets acquired and liabilities assumed made after the end of the measurement period are recorded within our operating results.

Recent Accounting Pronouncements

For information on recent accounting pronouncements, see Recent Accounting Pronouncements in the notes to the consolidated financial statements appearing elsewhere in this Annual Report on Form 10-K.

Foreign Currency Exchange Risk

We have foreign currency risks related to our revenue, cost of revenue, and operating expenses denominated in currencies other than the U.S. dollar. Since we translate foreign currencies into U.S. dollars for financial reporting purposes, currency fluctuations can have an impact on our financial results.

We have experienced and will continue to experience fluctuations in our net income (loss) as a result of transaction gains or losses related to revaluing monetary assets and liabilities that are denominated in currencies other than the functional currency of the entities in which they are recorded. In the first quarter of 2024, we implemented a hedging program intended to allow us to mitigate foreign exchange impacts, such as exposure to currency exchange rates in connection with significant transactions denominated in currencies other than the U.S. dollar, by entering into derivatives transactions such as foreign exchange forwards. See Note 15 in the Notes to the Consolidated Financial Statements appearing elsewhere in this Annual Report on Form 10-K.

Interest Rate Sensitivity

Our portfolio of cash and cash equivalents and short- and long-term investments is maintained in a variety of securities, including government agency obligations, corporate bonds and money market funds. Investments are classified as available-for-sale securities and carried at their fair market value with cumulative unrealized gains or losses recorded as a component of accumulated other comprehensive loss within stockholders' equity. A sharp rise in interest rates could have an adverse impact on the fair market value of certain securities in our portfolio. We do not currently hedge our interest rate exposure and do not enter into financial instruments for trading or speculative purposes.

Market Risk and Market Interest Risk

In June 2020, we issued $460.0 million aggregate principal amount of convertible senior notes due June 1, 2025, of which $459.0 million remained outstanding as of December 31, 2024. The fair value of the 2025 Notes is subject to interest rate risk, market risk and other factors due to the convertible feature. The fair value of the 2025 Notes will generally increase as our common stock price increases and will generally decrease as our common stock price declines in value. The interest and market value changes affect the fair value of the 2025 Notes but do not impact our financial position, cash flows or results of operations due to the fixed nature of the debt obligation. Generally, the fair values of the 2025 Notes will increase as interest rates fall and decrease as interest rates rise. Additionally, we carry the 2025 Notes at face value less unamortized discount on our balance sheet, and we present the fair value for required disclosure purposes only. The Federal Reserve has raised, and may continue to raise interest rates in an effort to combat high inflation. There continues to be uncertainty in the changing market and economic conditions, including the possibility of additional measures that could be taken by the Federal Reserve and other government agencies, related to concerns over inflation risk.

The table below provides a sensitivity analysis of hypothetical 10% changes of our stock price as of December 31, 2024 and the estimated impact on the fair value of the 2025 Notes. The selected scenarios are not predictions of future events, but rather are intended to illustrate the effect such event may have on the fair value of the Notes.

2025 Notes

59

(a) Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our Chief Executive Officer and Chief Financial Officer, has evaluated the effectiveness of our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended (the Exchange Act)), as of the end of the period covered by this Annual Report on Form 10-K. Based on such evaluation, our Chief Executive Officer and Chief Financial Officer have concluded that as of December 31, 2024, our disclosure controls and procedures were effective at the reasonable assurance level.

(b) Management’s Report on Internal Control Over Financial Reporting

Our management, with the participation of our Chief Executive Officer and Chief Financial Officer, is responsible for establishing and maintaining adequate internal control over financial reporting. Internal control over financial reporting is defined in Rules 13a-15(f) or 15d-15(f) promulgated under the Exchange Act as a process designed by, or under the supervision of, the company's principal executive and principal financial officers and effected by the company’s board of directors, management and other personnel, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles and includes those policies and procedures that:

• pertain to the maintenance of records that in reasonable detail accurately and fairly reflect the transactions and dispositions of the assets of the company;
• provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with generally accepted accounting principles, and that receipts and expenditures of the company are being made only in accordance with authorizations of management and directors of the company; and
• provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use or disposition of the company’s assets that could have a material effect on the financial statements.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

Management has excluded Cacheflow, which the Company acquired in October 2024, from its assessment of internal control over financial reporting as of December 31, 2024. Cacheflow is a wholly owned subsidiary of the Company whose total assets and total revenues excluded from management's assessment represented less than 1% each of the related consolidated financial statement amounts for the Company as of and for the year ended December 31, 2024.

Our management assessed the effectiveness of the Company’s internal control over financial reporting as of December 31, 2024. In making this assessment, our management used the criteria set forth by the Committee of Sponsoring Organizations of the Treadway Commission (“COSO”) in Internal Control — Integrated Framework (2013).

Based on our assessment, management, with the participation of our Chief Executive Officer and Chief Financial Officer, concluded that, as of December 31, 2024, our internal control over financial reporting was effective based on those criteria.

The effectiveness of the Company’s internal control over financial reporting as of December 31, 2024 has been audited by PricewaterhouseCoopers LLP, an independent registered public accounting firm, as stated in its report, which is included under Item 8 of this Annual Report on Form 10-K.

(c) Inherent Limitations of Internal Controls

Our management, including our Chief Executive Officer and Chief Financial Officer, does not expect that our disclosure controls and procedures or our internal control over financial reporting will prevent all errors and all fraud. A control system, no matter how well conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues and instances of fraud, if any, within the Company have been detected. These inherent limitations include the realities that judgments in decision-making can be faulty, and that breakdowns can occur because of a simple error or mistake. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people, or by management override of the control. The design of any system of controls also is based in part upon certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions. Over time, controls may become inadequate because of changes in conditions, or the degree of compliance with the policies or procedures may deteriorate. Because of the inherent limitations, misstatements due to error or fraud may occur and not be detected.

(d) Changes in Internal Control over Financial Reporting

No change in our internal control over financial reporting occurred during the quarter ended December 31, 2024 that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.