Item 1A. Risk Factors
Our operations and financial results are subject to various risks and uncertainties, including those described below. The reader should consider and read carefully all of the risks and uncertainties described below, together with all of the other information contained in this Annual Report on Form 10-K, including the section titled “ Management’s Discussion and Analysis of Financial Condition and Results of Operations ” and our consolidated financial statements and the related notes. The risks described below are those which we believe are the material risks we face. The occurrence of any of the following risks or additional risks and uncertainties not presently known to us or that we currently believe to be immaterial could materially and adversely affect our business, financial condition, or results of operations. In such case, the trading price of our Class A common stock could decline.
Risks Related to Our Business, Products, Operations, and Industry
We have incurred net losses in the past, anticipate continuing to incur significant operating expenses in the future, and may not sustain consistent profitability.
We have incurred net losses in the past, and may incur net losses in the future. We expect to continue to incur significant operating expenses in the foreseeable future. This includes leveraging the investments made in our organization in prior years and continuing to implement initiatives designed to grow our business in a disciplined manner. These initiatives include increasing our overall customer base and expanding sales within our current customer base, continuing to penetrate international markets, investing in research and development to improve the capabilities of our platform (including AI capabilities), acquiring businesses, technology, talent, and related integration efforts, growing our distribution channels and channel partner ecosystem, deepening our user community, hiring additional employees and investing in our existing workforce, expanding our operations and infrastructures both domestically and internationally, and incurring expenses related to legal, accounting, and other administrative expenses aspects of operating as a public company. In particular, we intend to continue to expend significant funds to further develop our platform. This includes introducing new functionalities and adapting and growing our inside sales team and enterprise sales force. These efforts are aimed at driving new customer adoption and expanding use cases and integrations.
We have entered into non-cancellable multi-year capacity commitments with certain third-party cloud providers for cloud infrastructure services. These commitments require us to pay for such capacity irrespective of
Table of Contents
actual usage. These efforts may prove more expensive than we currently anticipate, and we may not succeed in increasing our revenue sufficiently, or at all, to offset these higher expenses and sustain profitability.
We may delay or re-evaluate these efforts due to any anticipated or actual adverse impact to our business as a result of, among other things, global economic and geopolitical uncertainties, fluctuating inflation and interest rates, tariffs, government shutdowns, regional conflicts, or other similar events or circumstances. In addition, growth of our revenue may slow, or revenue may decline for a number of reasons, including a decrease in our ability to attract and retain customers, a failure to increase our number of channel partners, an increase in competition, a decrease in growth of our overall market, a decrease in the term lengths of our contracts with customers, an inability to timely and cost-effectively introduce new products and services that are favorably received by customers and partners, and as a result of global economic conditions, such as fluctuating inflation and interest rates, that could cause our customers to reduce their spending levels with us. A shortfall in revenue could lead to operating results being below expectations because we may not be to quickly reduce our fixed operating expenses in response to short-term business changes. If we are to meet these risks and as we encounter them, our business and operating results may be affected.
The investments we have made in our organization may not be successful on the timeline we anticipate, or at all, and may not result in revenue or ARR growth. For instance, we anticipate that our customers will continue to increase adoption of our SaaS products in future periods. We cannot predict how increased adoption of our SaaS products will change the buying patterns of our customers or impact our future revenue or ARR. If we are unable to maintain or increase our revenue or ARR at a rate sufficient to offset the expected increase in our costs, our business, financial condition, and results of operations will be harmed, and we may not be able to maintain profitability over the long-term. Additionally, we have encountered, and may in the future encounter, risks and uncertainties frequently experienced by growing companies in rapidly changing industries, such as unforeseen operating expenses, difficulties, complications, delays, and other known or unknown factors that may result in losses in future periods. If our revenue or ARR growth does not meet our expectations in future periods, our business, financial condition, and results of operations may be , and we may not maintain in the future. If we are to sustain , the value of our business and Class A common stock may significantly decrease.
We may not be able to successfully manage our growth. If we are not able to grow efficiently, we may not be able to sustain consistent profitability, and our business, financial condition, and results of operations could be harmed, which has in the past caused and could in the future cause our stock price to decline.
We have experienced and may continue to experience rapid growth and organizational changes. We generated revenue of $1,610.6 million and $1,429.7 million for fiscal years 2026 and 2025, respectively, representing a growth rate of 13%. Our ARR was $1,852.6 million and $1,666.1 million at January 31, 2026 and 2025, respectively, representing a growth rate of 11%. However, the revenue or ARR growth of any prior quarterly or annual fiscal period should not be relied upon as a predictor of future performance. Even if our revenue and ARR continue to increase, our revenue and ARR growth rates may decline in the future as a result of a variety of factors, including the maturation of our business, increased competition, changes to technology, a decrease in the growth of our overall market, or our failure, for any reason, to continue to take advantage of growth opportunities. In addition, our past results may not be indicative of our future performance. Overall growth of our business depends on a number of additional factors, including our ability to:
• price our products effectively so that we are able to attract new customers and expand sales to our existing customers;
• expand the functionality and use cases for our products;
• maintain and expand the rates at which customers purchase and renew licenses to our platform;
• provide our customers with support that meets their needs;
• continue to introduce and sell our products to new markets;
• continue to develop new functionality for our platform and successfully further optimize our existing products and infrastructure;
• successfully identify and acquire or invest in businesses, products, or technologies that we believe could complement or expand our platform; and
• increase awareness of our brand on a global basis and successfully compete with other companies.
Table of Contents
We may not successfully accomplish any of these objectives. Further, actions we may decide to take in the future in our attempt to sustain profitability may not be successful in yielding our intended results and may not appropriately address either or both of the short-term and long-term strategy of our business. If the assumptions that we use to plan our business are incorrect, or change in reaction to changes in our market, or if we are unable to maintain consistent revenue, ARR, or revenue or ARR growth, our stock price could be volatile, and it may be difficult to sustain profitability.
Macroeconomic conditions, including volatile and weakened global economic conditions, and geopolitical tensions and conflicts, including changes to trade policies and regulations, present significant risks to us in several jurisdictions. Such conditions have in the past adversely affected and may in the future adversely affect our industry, business, and results of operations.
We have sales, product, and engineering operations in many countries, and some of our business activities are concentrated in one or more geographic areas. Moreover, sales outside the U.S. accounted for 54% of our revenue for fiscal year 2026. As a result, our operations and our financial results, including our ability to execute our business strategy, design, develop, or sell products, and the demand for our products, are at times adversely affected by a number of global and regional factors outside of our control.
Adverse changes in global or regional economic conditions periodically occur, including recession or slowing growth; changes or uncertainty in fiscal, monetary, or trade policy; volatility in foreign exchange markets; tighter credit; fluctuating inflation and interest rates; lower capital expenditures by businesses including on IT infrastructure; increases in unemployment; and lower consumer confidence and spending. Adverse changes in macroeconomic conditions can significantly harm demand for our products and make it more challenging to forecast our operating results and make business decisions, including prioritization of investments in our business. An economic downturn or increased uncertainty may also lead to increased credit and collectability risks, higher borrowing costs or reduced availability of the capital and credit markets, reduced liquidity, asset impairments, adverse impact on our partners, or failures of counterparties including financial institutions and insurers. Trade policies and have resulted and may in the future result in increased tariffs, trade , and other protectionist measures, which can make our products less competitive, reduce demand for our products, limit our ability to sell to certain customers, or or the movement of our products across borders. Increasing protectionism and economic nationalism may lead to further changes in trade policies and regulations, domestic sourcing initiatives, or other formal and informal measures that could make it more to sell our products in, or restrict our access to, some markets. They can also result in consumer confidence and economic growth or , and could cause our customers to reduce, , or alter the timing of their purchases with us. Sustained geopolitical tensions could lead to political and economic uncertainty globally, long-term changes in global trade and technology supply chains, domestic sourcing initiatives, and the decoupling of global trade networks, which could make it more to sell our products in, or restrict our access to, some markets and have a material effect on our business and growth prospects. For example, these types of conditions have in the past and could in the future the timing and attendance of key industry events, which we rely upon in part to generate sales of our products. If those events are in the future, our marketing investments, sales pipeline, and the ability to attract new customers and generate sales of our products could be and affected.
We can be adversely affected by other global and regional factors that periodically occur, including:
• inefficient infrastructure and other disruptions, such as supply chain interruptions, and large-scale outages, or unreliable provision of services from utilities, transportation, data hosting, or telecommunications providers;
• government restrictions on, or nationalization of, our operations in any country, or restrictions on our ability to repatriate earnings from or distribute compensations or other funds in a particular country;
• adverse changes relating to government grants, tax credits, or other government incentives, including more favorable incentives provided to competitors;
• differing employment practices and labor issues, including restricted access to talent;
• local business and cultural factors that differ from our current standards and practices;
• continuing uncertainty regarding social, political, immigration, tax, and trade policies in the U.S. and abroad;
• global tensions and conflict in areas where we have customers or employees; and
Table of Contents
• fluctuations in the market value of our domestic and international investments and in the capital and credit markets, which can be negatively affected by liquidity, credit deterioration or losses, interest rate changes, financial results, political risk, sovereign risk, or other factors.
Further, these conditions have affected and may continue to affect the rate of IT spending, could adversely affect our customers' ability or willingness to attend our events or to purchase our products and services, may have delayed and may in the future delay customer purchasing decisions, may have reduced and may in the future reduce the value and duration of customer subscription contracts, and may adversely affect our customer attrition rates. All of these risks and conditions could materially adversely affect our future sales and operating results.
We expect fluctuations in our financial results. As a result, we may not be able to accurately predict future results, and our past results may not be indicative of our future performance. If we fail to meet the expectations of securities analysts or investors with respect to our results of operations, our stock price could decline.
Our results of operations have fluctuated in the past and are expected to fluctuate in the future due to a variety of factors, many of which are outside of our control. As a result, our past results may not be indicative of our future performance. In addition to the other risks described herein, factors that may affect our results of operations include the following:
• fluctuations in demand for or usage of our platform and products;
• fluctuations in our mix of revenue from licenses and service arrangements;
• our ability to attract new customers and retain our existing customers;
• customer expansion rates and the pricing and quantity of licenses renewed;
• fluctuations in mix of revenue, cost of revenue, and gross margin from sales directly to end-customers or through channel partners including our strategic alliances;
• timing and amount of our investments to expand the capacity of our third-party cloud infrastructure providers;
• seasonality;
• investment in new products and features relative to investments in our existing infrastructure and products;
• the timing of customer purchases;
• fluctuations or delays in purchasing decisions in anticipation of new products or enhancements by us or our competitors;
• changes in customers’ budgets and in the timing of their budget cycles and purchasing decisions;
• our ability to control costs, including our operating expenses;
• the amount and timing of payment for operating expenses, particularly sales and marketing expenses, including commissions, and research and development expenses;
• the amount and timing of non-cash expenses, including stock-based compensation, impairments of goodwill or other assets, and other non-cash charges;
• the amount and timing of costs associated with recruiting, training, and integrating new employees and retaining and motivating existing employees;
• the effects of acquisitions and their integration;
• general economic conditions, both domestically and internationally, as well as economic conditions specifically affecting industries in which our customers participate;
• the impact of new accounting pronouncements;
• changes in regulatory or legal environments that may impact us, including by causing us to incur additional compliance obligations and expenses;
• changes in the competitive dynamics of our market, including consolidation among competitors or customers; and
Table of Contents
• significant security breaches of, technical difficulties with, or interruptions to the delivery and use of our products and platform.
We derive our revenue from the sale of our software licenses for use of our proprietary software, maintenance and support for our licenses, right to access certain products that are hosted by us (i.e., SaaS), and professional services. Under ASC 606, Revenue from Contracts with Customers , we recognize revenue when a customer obtains control of promised goods or as services are rendered. The amount of revenue recognized reflects the consideration that we expect to receive in exchange for these goods or services. Licenses revenue (including the term license portion of flexible deployment offerings) is recognized when we transfer control of the respective license to the customer. Revenue from SaaS and revenue from maintenance and support are recognized ratably over time since control passes to our customers over the arrangement’s contractual period. Professional services revenue is recognized as services are rendered.
The presentation of our financial results requires us to make estimates and assumptions that may affect revenue recognition. In some instances, we could reasonably use different estimates and assumptions, and changes in estimates may occur from period to period.
Given the foregoing factors, our actual results could differ significantly from our estimates. Comparing our revenue and operating results on a period-to-period basis may not be meaningful, and our past results may not be indicative of our future performance.
For more information on our revenue recognition policy, refer to Note 2, Summary of Significant Accounting Policies—Revenue Recognition , included in Part II, Item 8 of this Annual Report on Form 10-K.
Any of these and other factors, or the cumulative effect of some of these factors, may cause our results of operations to vary significantly. If our quarterly or annual results of operations fall below the expectations of securities analysts or investors who follow our stock, the price of our Class A common stock could decline substantially, and we have faced and could in the future face lawsuits that are costly and may divert management’s attention, including securities class action suits and derivative actions.
Because we derive substantially all of our revenue from our UiPath Platform™, failure of this platform to satisfy customer demands could adversely affect our business, financial condition, results of operations, and growth prospects.
We derive and expect to continue to derive substantially all of our revenue from our UiPath Platform™. As such, market adoption of our automation platform is critical to our continued success. Demand for our platform may be affected by a number of factors, many of which are beyond our control, including continued market acceptance and integration of our platform into our customers’ operations; the continued volume, variety, and velocity of automations that are generated through use of our platform; timing of development, and release of new offerings by our competitors; technological change, including in the areas of AI and ML systems; and the rate of growth in our market. Additionally, the utility of our platform and products relies in part on the ability of our customers to use our automation, AI and ML products in connection with other third-party software products that are important to our customers' businesses. If these third-party software providers were to modify the terms of their licensing arrangements with our customers in a manner that would reduce the utility of our products, or increase the cost to use our products in connection with these third-party software products, then our customers may no longer choose to adopt our platform or continue to use our products. If we are unable to continue to meet the demands of our customers and the developer community, our business operations, financial results, and growth prospects will be materially and affected.
In addition, as we expand our business, it is important that we continue to maintain a high level of customer service and satisfaction. If we are not able to continue to provide high levels of customer service, our reputation, as well as our business, financial condition, and results of operations could be harmed. As usage of our platform grows, we will need to continue to devote additional resources to improving and maintaining our infrastructure and integrating with third-party applications. In addition, we have needed and will continue to need to appropriately scale our internal business systems and our services organization, including customer support and professional services, to serve our growing customer base. Failure of, or delay in, these continuing efforts could result in impaired system performance and reduced customer satisfaction, resulting in decreased sales to new customers, lower dollar-based net retention rates, the issuance of service credits, or requested refunds, which would hurt our revenue growth and our reputation. Even if we are in our expansion efforts, they will be expensive and complex, and require the dedication of significant management time and attention. We have faced and could continue to face or service as a result of our efforts to scale our internal infrastructure. We cannot be sure
Table of Contents
that the expansion of and improvements to our internal infrastructure will be effectively implemented on a timely basis, if at all, and such failures could harm our business, financial condition, and results of operations.
Our business depends on our existing customers renewing their licenses and purchasing additional licenses and products from us and our channel partners. Declines or significant delays in renewals or purchases of additional licenses and products by our customers have from time to time harmed and could in the future harm our operating results.
Part of our growth strategy relies on our ability to deliver significant value in a short time to our customers, so that our customers will scale the use of our platform throughout their enterprise. Accordingly, our future success depends in part on our ability to exhibit this value and sell additional licenses and products to our existing customers, and our customers renewing their licenses with us and our channel partners when contract terms expire. Our license agreements primarily have annual terms, and some of our license agreements have multi-year terms. We generally do not sell standalone licenses with a term of less than one year. However, during the term of an annual contract or the last year of a multi-year contract, our customers may enter into an additional license agreement with a termination date that is coterminous with the anniversary date of such annual contract. Our customers have no obligation to renew their licenses for our products after the expiration of their license period. We provide some customers the opportunity to use our platform and products for free prior to purchasing a license. We also work with our customers to identify opportunities for follow-on sales to increase our footprint within their businesses.
In order for us to maintain or improve our results of operations, it is important that our customers renew or expand their licenses with us and our channel partners. We may not be able to accurately predict our renewals and dollar-based net retention rate given the diversity of our customer base in terms of size, industry, and geography. Our renewals and dollar-based net retention rate may decline or fluctuate as a result of a number of factors, many of which are outside our control, including the strength or weakness of our customers' businesses; continuing or new delays in renewals due to economic conditions; customer usage, including the ability of our customers to quickly integrate our products into their businesses and continually find new uses for our products within their businesses; cloud automation deployment or adoption issues; customer satisfaction with our products and platform capabilities and customer support; the ability of our platform to cost-effectively integrate with third-party software products; our prices; the capabilities and prices of competing products; mergers and acquisitions affecting our customer base; consolidation of affiliates’ multiple paid business accounts into a single paid business account or of business accounts in their entirety; the effects of global economic conditions; reductions in our customers’ spending on software solutions or their spending levels generally; perceived security or data privacy risks from the use of our products; changes in regulatory regimes that affect our customers or our ability to sell our products, including changes to sanctions and export control regimes; or changes in the views of the industry and public with regard to our products and automation products generally, including as a result of increased automation, use of AI, and of human workforces. These factors may also be if, consistent with our growth strategy, our customer base continues to grow to encompass larger enterprises, which may also require more sophisticated and sales efforts. If our customers do not purchase additional licenses and products from us or our customers to renew their licenses, our revenue may and our business, financial condition, and results of operations may be .
We continually review how best to market our platform to our customers and potential customers and how to organize, train, and deploy our sales teams for efficiency and effectiveness; however, if our efforts and the changes that we strive to implement on an ongoing basis are not successful, our platform adoption and our growth could be adversely affected.
If we are unable to attract new customers, our business, financial condition, and results of operations will be adversely affected.
To increase our revenue, we must continue to attract new customers. Our success will depend to a substantial extent on the widespread adoption of our platform and products as an alternative to existing solutions, including as an alternative to traditional systems relying on manual tasks and processes. Many enterprises have invested substantial personnel and financial resources to integrate traditional human-driven processes into their business architecture and, therefore, may be reluctant or unwilling to migrate to an automation solution. Accordingly, the adoption of automation solutions may be slower than we anticipate. A large proportion of our target market still uses traditional systems relying on manual tasks and processes for the major part of their operations. This market may need further education on the value of automation solutions in general and our platform and products in particular, and on how to integrate them into current operations. A lack of education as to how our automation platform and solutions operate may cause potential customers to prefer more traditional methodologies or their
Table of Contents
limited, internally-developed automated processes, to be cautious about investing in our platform and products, or to have difficulty integrating our platform and products into their business architecture. If we are unable to educate potential customers and change the market’s readiness to accept our technology, we may experience slower than projected growth and our business, financial condition, and results of operations may be harmed.
In addition, as our market matures, our products evolve, and competitors introduce lower cost or differentiated products that are perceived to be alternatives to our platform and products, our ability to sell licenses for our products could be impaired. Further, as various forms of AI, including generative and agentic AI, become more widely adopted and acceptable, if customers believe that our technology is not developing apace, our business and growth prospects could be harmed. The rapid evolution of AI may require the application of resources to develop, test, and maintain our products and services so that they are ethically designed to minimize unintended, harmful impacts. Similarly, sales of our platform and products could be adversely affected if customers or users within these organizations perceive that features incorporated into competitive products reduce the need for our products, or if they prefer to purchase other products that are bundled with solutions offered by other companies that operate in adjacent markets and compete with our products. As a result of these and other factors, we may be unable to attract new customers, which may have an adverse effect on our business, financial condition, and results of operations.
The markets in which we participate are competitive and if we do not compete effectively our business, financial condition, and results of operations could be harmed.
Our platform and products provide automation solutions that our customers can integrate throughout their businesses. Accordingly, we compete with enterprise platform vendors that are acquiring, building, or investing in automation and AI functionality or partnering with automation and AI providers, RPA software providers and adjacent automation and integration platform companies in markets such as BOAT, low-code, business process management, integration platform as a service, process mining, intelligent document processing, and test automation, among others. We also compete with companies that provide and support the traditional systems relying on manual tasks and processes that our platform and products are designed to replace, including companies that facilitate outsourcing of such tasks and processes to lower cost workers. Our customers may also internally develop their own automated solutions to address tasks particular to their business.
The agentic automation market is a fast-growing enterprise software market and is increasingly competitive. With the introduction of new technologies and market entrants, we expect that the competitive environment will remain intense going forward. For instance, as our market becomes increasingly driven by cloud-based solutions, native cloud providers may enter this market and provide competitive offerings at lower prices. Additionally, open source alternatives for automation that are offered at no cost may impact our ability to sell our products to certain customers who may prefer to rely on these tools. Our competitors may be able to respond more quickly to new or expanding technology, such as newly emerging generative and agentic AI technologies, and devote more resources to product development than we can. The speed of technological development may prove disruptive to some of our markets if we are unable to maintain the pace of innovation. Some of our actual and potential competitors have been acquired by other larger enterprises, have made or may make acquisitions, may enter into partnerships or other strategic relationships that may provide more comprehensive products than they individually had offered, or may achieve greater economies of scale than us. In addition, new entrants not currently considered to be competitors may enter the market through acquisitions, partnerships, or strategic relationships. As we look to market and sell our products and platform capabilities to potential customers with existing internal solutions, we must convince their internal stakeholders that our products and platform capabilities are to their current solutions. If we to do so, our business, financial condition, and results of operations may be .
If we fail to continue to differentiate our platform and products from those offered by our competitors, our business, financial condition, and results of operations may be harmed.
Our competitors vary in size and in the breadth and scope of the products offered. Many of our competitors and potential competitors have greater name recognition, longer operating histories, more established customer relationships, larger marketing budgets, and greater resources than we do. Further, other potential competitors not currently offering competitive solutions may expand their product or service offerings to compete with our products and platform capabilities. For instance, a number of our potential competitors already have close, integrated relationships with our customers and potential customers for other service offerings. If any of these potential competitors were to provide an automation solution within their current service offerings as a single, integrated solution, our customers and potential customers may choose to adopt the integrated solution due to administrative ease or other factors that are outside our control. Our current and potential competitors may also establish cooperative relationships among themselves or with third parties that may further enhance their resources and product offerings in our addressable market. Our competitors may be able to respond more quickly and effectively
Table of Contents
than we can, to new or changing opportunities, technologies, standards, and customer requirements. An existing competitor or new entrant could introduce new technology that reduces demand for our products and platform capabilities. In addition to product and technology competition, we face pricing competition. Some of our competitors offer their on-premises or SaaS solutions at a lower price, which has resulted in, and may continue to result in, pricing pressures.
For all of these reasons, we may not be able to compete successfully against our current or future competitors, and this competition could result in the failure of our platform to continue to achieve or maintain market acceptance, which would harm our business, financial condition, and results of operations.
If we fail to retain and motivate members of our management team or other key employees or to integrate new team members, or fail to attract additional qualified personnel to support our operations, our business and future growth prospects could be harmed.
Our success and future growth depend largely upon the continued services of our executive officers, particularly Daniel Dines, our CEO , co-founder, and Chairman, as well as our other key employees in the areas of research and development, and sales and marketing. Additionally, some members of our management team have been with us for a short period of time. From time to time, there have been and may continue to be changes in our executive management team or other key employees resulting from the hiring or the departure of these personnel. Our executive officers and other key employees are employed on an at-will basis, which means that these personnel could terminate their employment with us at any time. The loss of one or more of our executive officers, or the failure by our executive team to effectively work with our employees and lead UiPath, could harm our business.
Senior leadership transitions can be difficult to manage and may cause disruptions to our operations. Such transitions may also increase the likelihood of turnover amongst our employees and result in changes in our business strategy, which may create uncertainty, and negatively impact our ability to execute our business strategy quickly and effectively. Leadership transitions may also impact our relationships with our customers and other market participants, creating uncertainty among investors, employees, and others concerning our future direction and performance.
Further, we have in the past taken and may in the future take actions to streamline our senior management structure. Any of these changes may not achieve our desired results. As we experience personnel turnover, we have experienced and may continue to experience some loss of internal knowledge from time to time. The streamlining of our senior management team could introduce additional risks with fewer executives tasked with leading our organization.
Because of the complexity of our products and platform capabilities, we also are dependent on the continued service of our existing software engineers and our ability to recruit qualified new engineers. Competition for these personnel is intense, especially for engineers experienced in designing and developing AI, ML, and RPA applications. From time to time, we have experienced, and we expect to continue to experience, difficulty in hiring and retaining employees with appropriate qualifications. Potential candidates may not perceive our compensation package, including our equity awards, as favorably as employees hired in the past given the historical volatility in the price of our Class A common stock and in the public markets. In addition, our recruiting personnel, methodology, and approach has needed to be altered and may in the future need to be altered to address a changing candidate pool and profile. We may not be able to identify or implement such changes in a timely manner.
Many of the companies with which we compete for experienced personnel have greater resources than we have. If we hire employees from competitors or other companies, their former employers have attempted and may in the future attempt to assert that these employees, or we, have breached their legal obligations, resulting in a diversion of our time and resources. In addition, prospective and existing employees often consider the value of the equity awards they receive in connection with their employment. As some of our employees' perception of our equity awards has declined, and may decline from time to time due to reduced prices of our Class A common stock, if the Class A common stock continues to experience significant volatility, or volatility increases such that prospective employees believe there is limited upside to the value of our equity awards, it may adversely affect our ability to recruit and retain key employees.
Further, we believe that our culture has been a key contributor to our success to date and that the critical nature of the technology that we develop promotes a sense of greater purpose and fulfillment in our employees. We have developed a culture in which our employees adhere to our core tenets of being humble, bold, immersed, and fast. As our organization grows and evolves, including through restructuring actions, we have experienced and may continue to experience challenges in maintaining our corporate culture. If we fail to maintain important aspects of
Table of Contents
our culture, our ability to recruit and retain key employees may be adversely affected. If we fail to attract new personnel or fail to retain and motivate our current personnel, our business and future growth prospects could be harmed.
A limited number of customers represent a substantial portion of our revenue and ARR. If we fail to retain these customers, our revenue and ARR could decline significantly.
We derive a substantial portion of our revenue and ARR from sales to our top 10% of customers. As a result, our revenue and ARR could fluctuate materially and could be materially and disproportionately impacted by the purchasing decisions of these customers or any other future large customer. Any of our largest customers may decide to purchase less than they have in the past, may alter their purchasing patterns at any time with limited notice, or may decide not to continue to purchase our platform and products at all, any of which could cause our revenue and ARR to decline and adversely affect our financial condition and results of operations. If we do not further diversify our customer base, we will continue to be susceptible to risks associated with customer concentration.
We rely on our channel partners, including our strategic alliances, to generate a substantial amount of our revenue, and if we fail to expand and manage our distribution channels or fulfill our future service obligations, our revenue could decline and our growth prospects could suffer.
Our success significantly depends upon maintaining and growing our relationships with a variety of channel partners, and we anticipate that we will continue to depend on these partners in order to grow our business. Our channel partners enable us to extend our local and global reach, in particular with smaller customers and in geographies where we have less direct sales presence. For fiscal years 2026, 2025, and 2024, we derived a substantial amount of our revenue from sales through channel partners, and we expect to continue to derive a substantial amount of our revenue from channel partners in future periods. Our agreements with our channel partners are generally non-exclusive and do not prohibit them from working with our competitors or offering competing products, and many of our channel partners may have more established relationships with our competitors. If our channel partners choose to place greater emphasis on products of their own or those offered by our competitors, do not effectively market and sell our products, or fail to meet the needs of our customers, then our ability to grow our business and sell our products may be adversely affected. In addition, the loss of one or more of our larger channel partners, who may marketing our products with limited or no notice, and our possible to replace them, could affect our sales. Moreover, our ability to expand our distribution channels depends in part on our ability to educate our channel partners about our platform and products, which can be complex. Our to recruit additional channel partners, or any reduction or in their sales of our products or between channel sales and our direct sales and marketing activities may our business, financial condition, and results of operations. Even if we are , these relationships may not result in customer usage of our products or increased revenue. We also bear the risk that our channel partners will to comply with U.S. or international anti- or anti-competition laws, in which case we might be or otherwise as a result of the agency relationship with such partners.
In addition, the financial health of our channel partners and our continuing relationships with them are important to our success. Some of these channel partners may be unable to withstand adverse changes in economic conditions, which could result in insolvency or the inability of such partners to obtain credit to finance purchases of our products and services, which could negatively impact our future financial performance. In addition, weakness in the end-user market could negatively affect the cash flows of our channel partners who could, in turn, delay paying their obligations to us, which would increase our credit risk exposure. Our business could be harmed if the financial condition of some of these channel partners substantially weakened and we were unable to timely secure replacement channel partners.
Further, we from time to time enter into strategic alliance arrangements wherein we sell our products and services to a partner. These strategic alliances may include investments we make to enable the partner to create or enhance their automation practice. If the strategic alliance partner is unable to successfully create or expand their automation practice, we may not realize the benefits we expect.
These strategic alliances may also include non-cancelable commitments we make to these third-party alliance partners whereby we plan to leverage the partner’s products or services in arrangements with third-party customers. Should we be unable to deploy the partner’s products or services in arrangements with third-party customers, revenue, gross margin, profitability, and financial results in any given period may be materially and adversely impacted. Further, these strategic alliances are a vector for potential growth and expansion for us and these alliances may not be successful or as profitable as we project.
Table of Contents
If we and our channel partners fail to provide sufficient high-quality consulting, training, support, and maintenance resources to enable our customers to realize significant business value from our platform, we may see a decrease in customer adoption of our platform.
Our customers sometimes request consulting and training to assist them in integrating our platform into their business, and rely on our customer support personnel to resolve issues and realize the full benefits that our platform provides. As a result, an increase in the number of customers is likely to increase demand for consulting, training, support, and maintenance related to our products. Given that our customer base and products continue to grow, we will need to provide our customers with more consulting, training, support, and maintenance to enable them to realize significant business value from our platform. We rely on our ecosystem of partners that build, train, and certify skills on our technology, as well as deploy our technology on behalf of their customers. We have been increasing our channel partner and customer enablement through our UiPath Academy and other training initiatives designed to create an ecosystem of people that are skilled in the use and integration of our platform in business operations. However, if we and our channel partners are unable to provide sufficient high-quality consulting, training, integration, and maintenance resources, our customers may not effectively integrate our automation platform into their businesses or realize sufficient business value from our products to justify follow-on sales, which could impact our future financial performance. Additionally, if our channel partners fail to perform or if any of our channel partners reputational or brand , our customers may choose to not rely on our channel partners for consulting, training, integration, and maintenance resources. Further, some of our customers are industry leaders, and our contracts with them receive significant public attention. If we or our channel partners encounter in helping these customers implement our platform or if there is publicity regarding these engagements (even if unrelated to our services or products) our reputation could be and our future financial performance could be impacted. Finally, the investments required to meet the increased demand for our consulting services could our ability to deliver our consulting engagements at levels of , thereby impacting our overall and financial results.
If we are not able to introduce and release new features or services successfully and to make enhancements to our platform or products, particularly with respect to developing AI technologies, our business and results of operations could be adversely affected.
Our ability to attract new customers and to retain and increase revenue from existing customers depends in part on our ability to enhance and improve our platform and to introduce new features and services. To grow our business and remain competitive, we must continue to enhance our platform with features that reflect the constantly evolving nature of automation and AI technology and our customers’ evolving needs. Other companies may incorporate AI into their products more quickly or more successfully than us, or AI technology for code generation or application development could reduce demand for our platform, which could impair our ability to compete effectively and adversely affect our financial results. The success of new products, enhancements, and developments depends on several factors including, but not limited to, our anticipation of market changes and demands for product features, successful product design and timely release of new functionality, sufficient customer demand, and cost effectiveness of our product development efforts. In addition, because our platform is designed to operate with a variety of third-party systems, applications, data, and devices, we will need to continuously modify and our platform to keep pace with changes in such systems. We may not be in developing these modifications and . Furthermore, the addition of features and solutions to our platform will increase our research and development expenses. Any new features that we develop may not be introduced in a timely or cost- manner or may not the market acceptance necessary to generate sufficient revenue to justify the related expenses. It is to predict customer adoption of new features. Such uncertainty limits our ability to forecast our future results of operations and subjects us to a number of , including our ability to plan for and model future growth. In addition, significant between announcement and general availability of new functionality could affect our business. If we cannot address such uncertainties and develop new features, our software, or otherwise technological and competing technologies, our business and results of operations could be affected.
We also offer professional services including consulting and training and must continually adapt to assist our customers in deploying our platform in accordance with their specific automation strategies. If we cannot introduce new services or enhance our existing services to keep pace with changes in our customers’ deployment strategies, we may not be able to attract new customers, retain existing customers, expand customers' use of our software, or secure renewal contracts, which are important for the future of our business.
Table of Contents
We are subject to numerous risks associated with the evolving market for products with AI capabilities.
The markets and use cases for products with AI capabilities have been rapidly evolving, are difficult to predict, and may impact demand for our products, our sales cycles, our ability to forecast results from sales of these products, and the preferences of our customers and potential customers. The significant investments we have made to develop products and software to address increasing demand for AI capabilities may be insufficient, and we face significant hurdles, including whether demand will materialize, whether third-party software providers will develop functionality that allows their software to utilize the AI capabilities of our products, and whether we will be successful in developing, pricing, and packaging products that can compete with offerings by established competitors.
We have in the past invested and may in the future continue to invest in potentially disruptive technologies, through various vehicles such as acquisitions, equity or debt investments, joint ventures, or strategic partnerships. Such investments may not produce the expected results, may require more financial resources than anticipated, or may otherwise be unsuccessful, and the value of the investments may decline or be impaired, or our business may be adversely impacted.
Additionally, our use of AI technology in general may subject us to reputational, financial, legal, or regulatory risks. As we continue to incorporate AI technology into our products and services, any failures to address concerns relating to the responsible use of the evolving AI technology in our products and services may cause harm to our reputation or result in financial liability, and as such, may increase our costs to address or mitigate such risks and issues. AI technology may create ethical issues, generate defective algorithms, and present other risks that create challenges with respect to its adoption. In addition, evolving rules, regulations, and industry standards governing AI may require us to expend significant resources to modify, maintain, or align our business practices or products to comply with U.S. and non-U.S. rules and regulations, the nature of which cannot be determined at this time. Several jurisdictions around the globe, including the EU, South Korea, and certain U.S. states, have already proposed or enacted, or are considering, laws governing the development and use of AI. We expect other jurisdictions will adopt similar laws. Further, many countries and states are applying their existing data and consumer protection laws to AI technologies.
The regulatory environment surrounding the impact of the implementation of AI on our products and services may adversely affect our ability to produce and export products, and as a result, may cause harm to our reputation and result in financial liability.
Risks associated with our use of AI (including ML and large language models) may result in reputational harm or liability.
AI is enabled by or integrated into parts of our platform and may also be used directly or indirectly as part of our internal systems and processes. As such, AI remains a significant and growing element of our business and operations. As with many developing technologies, AI presents risks and challenges that could affect its further development, adoption, and use. AI algorithms and models may be flawed. Our AI-related efforts, particularly those related to generative and agentic AI, or the datasets that we use in training our systems, subject us to risks related to harmful or illegal content, accuracy, bias, intellectual property infringement or misappropriation, defamation, data privacy, cybersecurity, sanctions, and export controls, among others. Third-party AI capabilities that can be integrated with our platform or used in our internal systems and processes, including generative AI, could also produce false or "hallucinatory" inferences about customer data, enterprises, other information, or subject matter. The use of generative AI processes at scale is relatively new, and may lead to , , and risks that are significant or that we may not be to predict, especially if our direct or indirect use of these technologies in our products and internal systems and processes were to become more important to us over time. If the recommendations, forecasts, or analyses that AI applications, including AI agents, assist in producing are or , we could be subject to competitive or potential legal liability, including under existing and future legislation or regulations in the U.S., the EU, and other jurisdictions. The rapid evolution of AI may also require us to expend additional resources to help ensure that AI is implemented appropriately in order to minimize or impact which may affect our business, financial condition, and results of operations.
Some AI scenarios may present ethical issues, and the enablement or integration of AI into our platform or internal processes may subject us to new or heightened legal, regulatory, ethical, or other challenges, as this is an area of rapid development. We take into consideration these challenges when designing our technologies and implementing our business practices. For example, our platform includes data governance tools and other tools, which are intended to regulate and limit user access. In addition, we have developed internal responsible AI guidelines. However, we have no assurance that these tools or guidelines, nor their implementation, will be
Table of Contents
sufficient to protect us against evolving AI-related risks. As a result, if we face any claims or litigation relating to our use of AI, including its purported or real impact to human rights, data privacy, employment, or other societal issues, we may experience brand or reputational harm, as well as regulatory or legal scrutiny, which could have a material adverse effect on our operations and business outlook.
We target enterprise customers, and sales to these customers involve risks that may not be present or that are present to a lesser extent with sales to smaller entities.
Our enterprise sales force focuses on sales to large enterprise, organizational, and government agency customers. As of January 31, 2026, we had 2,565 customers with ARR of $100 thousand or more and 357 customers with ARR of $1 million or more, which accounted for approximately 89% and 52% of our revenue, respectively, for the period then ended. As of January 31, 2025, we had 2,292 customers with ARR of $100 thousand or more and 317 customers with ARR of $1 million or more, which accounted for approximately 87% and 51% of our revenue, respectively, for the period then ended. See the section titled “ Management’s Discussion and Analysis of Financial Condition and Results of Operations—Key Performance Metric ” for a description of ARR. Sales to large customers involve risks that may not be present or that are present to a lesser extent with sales to smaller entities, such as longer sales cycles, more complex customer requirements (and higher contractual risk as a result), substantial upfront sales costs, less favorable terms, and less predictability in completing some of our sales. For example, enterprise customers may require considerable time to evaluate and test our solution and those of our competitors prior to making a purchase decision and placing an order. A number of factors influence the length and variability of our sales cycle, including the need to educate potential customers about the uses and benefits of our automation platform and products, the discretionary nature of purchasing and budget cycles, and the competitive nature of evaluation and purchasing approval processes. As a result, the length of our sales cycle, from identification of the to deal , may vary significantly from customer to customer, with sales to large enterprises typically taking longer to complete and requiring organizational resources. Moreover, large enterprise customers often begin to deploy our products on a limited basis, but nevertheless demand configuration, integration services, and pricing negotiations, which increase our upfront investment in the sales effort with no guarantee that these customers will deploy our products widely enough across their organization to justify our substantial upfront investment.
Real or perceived errors, failures, or bugs in our platform and products could adversely affect our business, financial condition, results of operations, and growth prospects.
Our platform and products are complex and use novel technology. Undetected errors, failures, or bugs have occurred in our platform and products in the past and may occur in the future. Our platform and products are used throughout our customers’ business environments and with different operating systems, system management software, applications, devices, databases, servers, storage, middleware, custom and third-party applications and equipment, and networking configurations, which may cause errors or failures in the business environment into which our platform and products are deployed. This diversity of applications increases the likelihood of errors or failures in those business environments. Despite testing by us, real or perceived errors, failures, or bugs may not be found until our customers use our platform and products. Such failures or bugs can cause reputational damage, and in some cases can affect our revenue due to the impact of service level commitments that we offer to our customers.
Our platform and products also empower our customers to develop their own use cases for our automation platform and products. We cannot guarantee that these user-developed automations will be effective or that they do not include errors, failures, or bugs that then may be attributed, correctly or not, to our underlying technologies. For instance, our customers may use our products in a manner in which they were not intended to be used and that could cause our platform or products to be implicated in any resulting errors or failures. Real or perceived errors, failures, or bugs in our platform and products could result in negative publicity, loss of or delay in market acceptance of our platform and products, regulatory investigations and enforcement actions, to our brand, of our competitive position, by customers for sustained by them, or to meet the stated service level commitments in our customer agreements. In such an event, we may be required, or may choose, for customer relations or other reasons, to expend significant additional resources in order to help correct the . Any , , or bugs in our platform or products could also our ability to attract new customers, retain existing customers, or expand their use of our software, which would affect our business, financial condition, and results of operations.
Table of Contents
Incorrect or improper implementation or use of our platform and products could result in customer dissatisfaction and harm our business, financial condition, results of operations, and growth prospects.
Our automation platform and products and related services are designed to be deployed in a wide variety of technology environments, including in large-scale, complex technology environments across a wide range of use cases. We believe our future success will depend, at least in part, on our ability and the ability of our channel partners to support such deployments. Implementations of our platform may be technically complicated and it may not be easy to maximize the value of our platform without proper implementation and training. If our customers are unable to implement our platform successfully or in a timely manner, or if our customers perceive that the implementation of our platform is too complex or time-consuming, customer perceptions of us and our software may be impaired, our reputation and brand may suffer, and customers may choose not to renew their licenses or increase their purchases of our related services.
We regularly train our customers and channel partners in the proper use of, and the variety of benefits that can be derived from, our automation platform and products to maximize their potential. We and our channel partners often work with our customers to achieve successful implementations, particularly for large, complex deployments. Our failure or the failure of our channel partners to train customers on how to efficiently and effectively deploy and use our platform and products, or our failure or the failure of our channel partners to provide effective support or professional services to our customers, whether actual or perceived, may result in negative publicity or legal actions against us. Also, as we continue to expand our customer base, any actual or perceived failure by us or our channel partners to properly provide these services will likely result in lost for follow-on sales of our related services.
We rely upon third-party providers of cloud-based infrastructure to host our cloud-based products. Any disruption in the operations of these third-party providers, limitations on capacity, or interference with our use could adversely affect our business, financial condition, and results of operations.
Our continued growth depends in part on the ability of our existing and potential customers to continue to adopt and utilize our cloud-based products in conjunction with our platform. We outsource substantially all of the infrastructure relating to our cloud-based products to third-party hosting services. Customers of our cloud-based products expect to be able to access these products at any time, without material interruption or degradation of performance. Our cloud-based products depend on virtual cloud infrastructure hosted by third-party hosting services. UiPath protects these services by maintaining the configuration, architecture, features, and interconnection specifications, as well as the information stored in these virtual data centers, which is transmitted by third-party internet service providers. Any disruption as a result of cyberattacks or similar issues, or any limitation on the capacity of our third-party hosting services, could impede our ability to onboard new customers or expand the usage of our existing customers, or otherwise adversely affect our business, which could adversely affect our financial condition and results of operations. Due to the fact that we rely on third-party providers of cloud-based infrastructure to host our cloud-based products, it may become increasingly to maintain and their performance, especially during peak usage times and as our cloud capabilities become more complex and our user traffic increases, because we do not control the infrastructure supporting these services. In addition, any affecting our third-party hosting services’ infrastructure that may be caused by , natural , fire, flood, storm, earthquake, power , telecommunications , outbreaks of contagious diseases, military actions, terrorist or other attacks, and other similar events beyond our control could affect our cloud-based products. If our cloud-based products are , or if our users are to access our cloud-based products within a reasonable amount of time or at all, we may experience a of customers, or of market acceptance of our platform and products, in payment to us by customers, to our reputation and brand, legal us, and the of our resources. We may also incur significant costs for using alternative equipment or taking other actions in preparation for, or in reaction to, events that the third-party hosting services we use.
In the event that our service agreements with our third-party hosting services are terminated, or there is a lapse of service, elimination of services or features that we utilize, interruption of internet service provider connectivity, or damage to such facilities, we could experience interruptions in access to our cloud-based products as well as significant delays and additional expense in arranging or creating new facilities and services or re-architecting our cloud-based products for deployment on a different cloud infrastructure service provider, which could adversely affect our business, financial condition, and results of operations.
Table of Contents
Delays or difficulties associated with the design, implementation, or post-implementation use of information systems could adversely impact our business, financial condition, and results of operations.
We rely on information systems to manage our business, summarize our operating and financial results, and provide timely information to our management. For example, during fiscal year 2026, we completed a multi-year implementation of a new enterprise resource planning (ERP) system, a complex project with broad scope in which we invested significant financial and human capital. When implementing information systems, we may experience delays, unexpected costs, or other difficulties. Further, although we may run our existing technology in parallel with new technology for a period of time and although we conduct extensive testing to ensure that a new system is operating as intended, we may encounter post-implementation disruptions to, or difficulties in use of, new information systems that could require us to incur additional costs, or could impair, among other things, our ability to record sales, process transactions, collect receivables, and produce timely and accurate historical and forecasted financial information, which could adversely impact our business, financial condition, and results of operations.
Our key performance metric, ARR, and certain other operational data in this report are subject to assumptions and limitations and may not provide an accurate indication of our future or expected results.
ARR is based on numerous assumptions and limitations, is calculated using our internal data that has not been independently verified by third parties, and may not provide an accurate indication of our future or expected results. We define ARR as annualized invoiced amounts per solution SKU from subscription licenses and maintenance and support obligations assuming no increases or reductions in customers' subscriptions. ARR does not include the costs we may incur to obtain such subscription licenses or provide such maintenance and support. ARR also does not reflect nonrecurring rebates payable to partners (upon establishing sufficient history of their nonrecurring nature), the impact of nonrecurring incentives (such as one-time discounts provided under sales promotional programs), and any actual or anticipated reductions in invoiced value due to contract non-renewals or service cancellations other than for certain reserves (for example, those for credit losses or disputed amounts). As a result, ARR and our other operational data may not reflect our actual performance, and investors should consider these metrics in light of the assumptions used in calculating such metrics and limitations as a result thereof. In addition, investors should not place undue reliance on these metrics as an indicator of our future or expected results. Moreover, these metrics may differ from similarly titled metrics presented by other companies and may not be comparable to such other metrics. See the sections titled “ Management’s Discussion and Analysis of Financial Condition and Results of Operations—Key Performance Metric ” for additional information regarding our ARR.
We may require additional capital to support the growth of our business, and this capital may not be available on acceptable terms, if at all.
We have funded our operations initially through net proceeds from sales of equity securities and more recently primarily through customer collections. We cannot be certain whether our operations will consistently generate sufficient cash to fully fund our ongoing operations, our planned investments, or the growth of our business. Following our IPO, we focused on growing our business to take advantage of our market opportunities. While growth remains important, we are also focused on sustaining profitability. Any future investments we make to drive growth may require us to engage in equity or debt financings to secure additional funds. Financing may not be available on terms favorable to us, if at all. The effects of disruptions to and volatility of the credit and financial markets in the U.S. and worldwide from geopolitical and macroeconomic events could limit our access to financing and increase our costs of borrowing.
If adequate funds are not available on acceptable terms, we may be unable to invest in future growth opportunities, which could harm our business, financial condition, and results of operations. If we incur debt, the debt holders would have rights senior to holders of Class A common stock to make claims on our assets, and the terms of any future debt could restrict our operations, including the ability to pay dividends on our Class A common stock. Furthermore, if we issue additional equity securities, stockholders will experience dilution, and the new equity securities could have rights senior to those of our Class A common stock. Because a decision to issue securities in the future would depend on numerous considerations, including factors beyond our control, we cannot predict or estimate the amount, timing, or nature of any future issuances of debt or equity securities. As a result, our stockholders bear the risk of future issuances of debt or equity securities reducing the value of our Class A common stock and diluting their interests.
Table of Contents
If we fail to maintain and enhance our brand, our ability to expand our customer base will be impaired and our business, financial condition, and results of operations may suffer.
We believe that maintenance and enhancement of UiPath brand is important to support the marketing and sale of our existing and future products to new customers and expand sales of our platform and products to existing customers. We also believe that the importance of brand recognition will increase as competition in our market continues to increase. Successful maintenance and enhancement of our brand will depend largely on the effectiveness of our marketing efforts, our ability to provide reliable products that continue to meet the needs of our customers at competitive prices, our ability to maintain our customers’ trust, our ability to show that our products improve efficiency for our customers while improving engagement and satisfaction of their employees, our ability to continue to develop new functionality and use cases, our ability to successfully differentiate our products and platform capabilities from competitive products, and our ability to adequately obtain and protect our trademarks and trade names. Our brand promotion activities may not generate customer awareness or yield increased revenue, and even if they do, any increased revenue may not offset the expenses we incur in building our brand.
Our ability to maintain and enhance our brand may also be subject to factors that are outside of our control. For instance, media stories regarding the potential effects on employment of automation and AI technologies that replace traditional, human-driven systems are commonplace. Unfavorable publicity regarding the impact automation may have on unemployment levels could harm our brand and reputation, even if unrelated to our products. Such negative publicity could also reduce the potential demand and size of the market for our products and decrease our revenue.
Additionally, we may not be able to protect all of our registered or unregistered trademarks or trade names relevant to our brand, and our rights may be challenged, infringed, circumvented, declared generic, lapsed, or determined to be infringing on or dilutive of other marks. If we are unable to protect our rights in these trademarks and trade names, third parties may file for registration of trademarks similar or identical to our trademarks, thereby impeding our ability to build brand identity and possibly leading to market confusion. If we fail to successfully promote and maintain our brand, our business, financial condition, and results of operations may suffer.
Indemnity provisions in various agreements to which we are a party potentially expose us to substantial liability for infringement, misappropriation, or other violation of intellectual property rights, data protection, and other losses.
Our agreements with our customers and other third parties may include indemnification provisions under which we agree to indemnify or otherwise be liable to them for losses suffered or incurred as a result of claims of infringement, misappropriation, or other violation of intellectual property rights, data protection, damages caused by us to property or persons, or other liabilities relating to or arising from our software, services, or platform, our acts or omissions under such agreements, or other contractual obligations. Large indemnity payments could harm our business, financial condition, and results of operations. Although we attempt to contractually limit our liability with respect to such indemnity obligations, we are not always successful, and some of these indemnity provisions provide for uncapped liability and some survive termination or expiration of the applicable agreement. As such, we may still incur substantial liability related to such obligations, and we may be required to use of certain functions of our platform or products as a result of any such . Any with a customer or other third-party with respect to such obligations could have effects on our relationship with such customer or other third-party and other existing or prospective customers, reduce demand for our products and services, and affect our business, financial condition, and results of operations. In addition, although we carry general liability and cybersecurity insurance, our insurance may not be adequate to indemnify us for all liability that may be imposed or otherwise protect us from liabilities or with respect to compromises of customer data, and any such coverage may not continue to be available to us on acceptable terms or at all.
We have in the past engaged, and may in the future engage, in acquisition and investment activities, which could divert the attention of management, disrupt our business, dilute stockholder value, and adversely affect our results of operations and financial condition.
As part of our business strategy, we continually evaluate opportunities to acquire or invest in businesses, products, or technologies that we believe could complement or expand our products and solutions, enhance our technical capabilities, or otherwise offer growth opportunities. For example, in March 2025, we acquired Peak, a U.K.-based software company offering an AI platform that provides pricing and inventory intelligence to customers in manufacturing and retail, and in February 2026, we acquired WorkFusion, Inc., a U.S.-based software company specializing in AI agents for financial crimes compliance. In the future, we may be unable to identify suitable acquisition candidates and, even if we do, we may not be able to complete desired acquisitions on favorable terms,
Table of Contents
if at all. If we are unable to complete acquisitions, we may not be able to strengthen our competitive position or achieve our goals. Future acquisitions and investments may result in unforeseen operating difficulties and expenditures, including disruption of our ongoing operations, diversion of management attention, and increased expenses and liabilities. An acquisition may also negatively affect our financial results because it may:
• require us to incur charges or assume substantial debt;
• cause adverse tax consequences or unfavorable accounting treatment;
• expose us to claims and disputes by third parties, including intellectual property and privacy claims and disputes;
• not generate sufficient financial return to offset additional costs and expenses related to the acquisition;
• cause us to incur liabilities for activities of the acquired company before the acquisition;
• cause us to record impairment charges associated with goodwill or acquired intangible assets; and
• cause other unforeseen operating difficulties and expenditures.
Moreover, to pay for an acquisition or investment, we would use cash, incur debt, or issue equity securities, each of which may affect our financial condition or the value of our Class A common stock and (in the case of equity financing) could result in dilution to our stockholders.
In addition, a failure to successfully integrate the operations, personnel, or technologies of an acquired business could impact our ability to realize the full benefits of such an acquisition. If we are unable to achieve the anticipated strategic benefits of an acquisition, or if the integration, or the anticipated financial and strategic benefits, including any anticipated cost savings, revenue opportunities, or operational synergies, of such an acquisition are not realized as rapidly as or to the extent anticipated by us, our business, financial condition, and results of operations, could suffer.
Our practices and disclosures related to ESG matters expose us to risks that could adversely affect our reputation and performance.
Our ESG reports and statements reflect our current plans and goals and are not guarantees that we will be able to achieve them. Our failure to accomplish or accurately track and report on ESG goals on a timely basis, or at all, could adversely affect our reputation, financial performance, and growth, and expose us to increased scrutiny from the investment community as well as enforcement authorities.
Standards for tracking and reporting ESG (including sustainability, climate, and human capital) matters continue to evolve. New legal and regulatory ESG requirements and disclosures in the U.S., the EU, and elsewhere may lead to compliance risks and costs, may heighten scrutiny of our ESG practices, and may require us to change our current practices. Additionally, our selection of voluntary disclosure frameworks and standards, and the interpretation or application of those frameworks and standards, may change from time to time or differ from those of others. This may result in a lack of consistent comparative data from period to period or between UiPath and other companies in the same industry. Further, our processes and controls may not comply with evolving standards for identifying, measuring, and reporting ESG metrics; such standards may change over time, which could result in significant revisions to our current goals, reported progress in achieving such goals, or ability to achieve such goals in the future.
If our ESG practices do not meet evolving investor, customer, or other stakeholder expectations and standards, our reputation, our ability to attract or retain employees, and our attractiveness as an investment, business partner, acquirer, or service provider could be negatively impacted. Further, our failure or perceived failure to pursue or fulfill our goals and objectives, or to satisfy various reporting standards on a timely basis, or at all could have similar negative impacts or expose us to government enforcement actions and private litigation.
We have undertaken, and may in the future undertake, internal restructuring activities that could result in disruptions to our business or otherwise materially harm our results of operations or financial condition.
From time to time, we have undertaken and may continue to undertake internal restructuring activities in an effort to better align our resources with our business strategy. For example, we initiated a restructuring plan in July 2024 that was completed during the second quarter of fiscal year 2026. This follows an earlier restructuring plan we
Table of Contents
initiated in fiscal year 2023 that was completed during the second quarter of fiscal year 2024. We incur substantial costs to implement restructuring plans, and our restructuring activities may subject us to reputational risks and litigation risks and expenses. There can be no assurance that any restructuring activities that we have undertaken or may undertake in the future will achieve the cost savings, operating efficiencies, or other benefits that we may initially expect. In addition, restructuring activities may result in loss of institutional knowledge and expertise, attrition beyond our intended reduction in force, or a negative impact on employee morale and productivity or our ability to attract highly skilled employees. Internal restructurings can also require a significant amount of time and focus from management and other employees, which may attention from commercial operations. If any internal activities we have undertaken or undertake in the future to some or all of the expected benefits, our business, financial condition, and results of operations could be materially and affected.
Any future litigation against us could be costly and time-consuming to defend.
We are subject and may in the future become subject to legal proceedings and claims that arise in the ordinary course of business, such as claims brought by our customers in connection with commercial disputes or employment claims made by our current or former employees. In addition, we have been sued by potential class action plaintiffs and have been sued in several potential derivative actions in connection therewith. Litigation might result in substantial costs and may divert management’s attention and resources, which might seriously harm our business, financial condition, and results of operations. Insurance might not cover such claims, might not provide sufficient payments to cover all the costs to resolve one or more such claims, and might not continue to be available on terms acceptable to us. A claim brought us that is or could result in costs, potentially our business, financial condition, and results of operations.
Risks Related to Data Privacy and Cybersecurity
We and third parties with whom we do business are subject to stringent and evolving U.S. and foreign laws, regulations, and rules, contractual obligations, industry standards, policies, and other obligations related to data privacy and security. Our actual or perceived failure to comply with such obligations could lead to adverse business consequences, including regulatory investigations or actions; litigation (including class claims) and mass arbitration demands; fines and penalties; business disruptions; reputational harm; loss of revenue or profits; and loss of customers or sales.
In the ordinary course of business, we collect, receive, access, generate, transfer, store, disclose, share, make accessible, protect, secure, dispose of, and use (collectively, process) personal data and other sensitive information, including proprietary and confidential business data, trade secrets, intellectual property, financial information, geolocation information, social security numbers, government-issued identification information, and sensitive third-party data about employees, contractors, customers, suppliers, and others (collectively, sensitive information). Our data processing activities subject us to numerous data privacy and security obligations, such as various laws, codes, regulations, industry standards, external and internal privacy and security policies, contracts, and other obligations.
In the U.S., federal, state, and local governments have enacted numerous data privacy and security laws, including data breach notification laws, personal data privacy laws, and consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws (e.g., wiretapping laws). For example, the Health Insurance Portability and Accountability Act , as amended by the Health Information Technology for Economic and Clinical Health Act , imposes specific requirements relating to the privacy, security, and transmission of individually identifiable protected health information.
Numerous U.S. states have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal data. As applicable, such rights may include the right to access, correct, or delete certain personal data, and to opt out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and our ability to provide products and services. Certain states also impose stricter requirements for processing certain personal data, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for statutory fines for non-compliance. For example, the CCPA, as amended by the California Privacy Rights Act of 2020 (CPRA) (collectively CCPA), applies to personal data of consumers, business representatives, and employees who are California residents, and requires businesses to provide specific disclosure in privacy notices and honor requests of such individuals to exercise certain privacy rights. The CCPA provides for statutory fines and allows private litigants affected by certain data breaches to recover significant statutory damages. Similar laws are being
Table of Contents
considered in several other states, as well as at the federal and local levels, and we expect more states to pass similar laws in the future. These developments further complicate our compliance efforts, and increase legal risk and compliance costs for us, the third parties with whom we do business, and our customers.
Additionally, under various privacy laws and other obligations, we are required to obtain certain consents to process personal data. For example, some of our data processing practices may be challenged under wiretapping laws if we obtain consumer information from third parties through various methods, including chatbot and session replay providers, cookies, and via third-party pixels. These practices are subject to increased challenges by class action plaintiffs. Our inability or failure to obtain consent for these practices could result in adverse consequences, including class action litigation and mass arbitration demands. In the EEA , the Collective Redress Directive (effective June 2023) allows collective actions to be brought by a representative body against businesses if they breach legislation intended to protect EU consumers, including for data protection matters.
Outside the U.S., an increasing number of laws, regulations, and industry standards apply to data privacy and security. The EU GDPR , the U.K. GDPR (collectively, "GDPR"), Brazil’s LGPD , India's Digital Personal Data Protection Act, and China’s PIPL impose strict requirements for processing personal data. Violations may result in temporary or definitive bans on data processing, material fines, or private litigation related to processing of personal data brought by classes of data subjects or consumer protection organizations authorized by law to represent their interests. We may have to change our business practices to comply with such obligations. In Canada, the Personal Information Protection and Electronic Documents Act and various related provincial laws, as well as Canada's Anti-Spam Legislation, apply to our operations. As another example, the LGPD applies to our operations. The LGPD broadly regulates processing personal data of individuals in Brazil and imposes compliance obligations and penalties comparable to those of the EU GDPR. We also target customers and have operations in Asia and are subject to new and emerging data privacy regimes including China’s PIPL, Japan’s Act on the Protection of Personal Information, and Singapore’s Personal Data Protection Act. We are also subject to the EU DSA , which requires us to further change our products, policies, and procedures. These new regulations create additional reporting obligations and oblige us to our content moderation practices, update our internal procedures to allow users to notify of content, and create internal mechanisms to handle . to comply with the DSA obligations may result in material . In addition, privacy advocates and industry groups have proposed, and may propose, standards with which we are legally or contractually bound to comply.
Our employees and personnel use generative AI technologies to perform their work, and the disclosure and use of personal data in generative AI technologies is subject to various privacy laws and other privacy obligations. Governments have passed laws and are likely to pass additional laws regulating generative AI. Our use of this technology could result in additional compliance costs, regulatory investigations and actions, and lawsuits. We also use AI and ML to assist us in making certain decisions, which is regulated by certain privacy laws. For example, certain privacy laws extend rights to consumers (such as the right to delete certain personal data) and regulate automated decision-making, which may be incompatible with our use of AI and ML. These obligations may make it harder for us to conduct our business using AI and ML, lead to regulatory fines or penalties, require us to change our business practices, retrain our AI and ML, or prevent, or limit our use of AI and ML. Furthermore, the FTC has required other companies to turn over (or disgorge) valuable insights or trainings generated through the use of AI and ML, where the FTC alleges those companies have privacy and consumer protection laws. If we cannot use AI and ML, or that use is restricted, our business may be less , or we may be at a competitive . Furthermore, in the EU, the EU AI Act, which has extraterritorial scope, imposes obligations for providers and deployers of AI-related systems.
Certain jurisdictions have enacted data localization laws and cross-border personal data transfer laws, which could make it more difficult to transfer information across jurisdictions (such as transferring or receiving data that originates in the EU or in other foreign jurisdictions). For example, the EU Data Act imposes service switching obligations, requires vendors to assist with data portability to facilitate switching, and imposes requirements related to the cross-border transfer of non-personal data. We may incur substantial costs to comply with the EU Data Act, as well as become subject to substantial fines or civil litigation in the case of noncompliance. Further, existing mechanisms that facilitate cross-border personal data transfers may change or be invalidated. For example, absent appropriate safeguards or other circumstances, the EU GDPR generally restricts the transfer of personal data to countries outside of the EEA that the European Commission does not consider to provide an adequate level of data privacy and security, such as the U.S. The European Commission released a set of SCCs that are designed to be a valid mechanism to facilitate personal data transfers out of the EEA to these jurisdictions. Currently, these SCCs are a valid mechanism to transfer personal data outside of the EEA, but there exists some uncertainty regarding whether the SCCs will remain a valid mechanism. Additionally, the SCCs impose additional compliance ,
Table of Contents
such as conducting transfer impact assessments to determine whether additional security measures are necessary to protect the at-issue personal data.
In addition, Switzerland and the U.K. similarly restrict personal data transfers outside of those jurisdictions to countries such as the U.S. that they have determined do not provide an adequate level of personal data protection, and certain countries outside Europe (e.g. Brazil, China, Russia) have also passed or are considering laws requiring local data residency, or otherwise impeding the transfer of personal data across borders, any of which could increase the cost and complexity of doing business. Although there are currently various mechanisms that may be used to transfer personal data from the EEA, U.K., and Switzerland to the U.S. in compliance with law, such as the U.K.'s International Data Transfer Agreement/Addendum, the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework and the U.K. extensions thereto (which allows for transfers to relevant U.S.-based organizations who self-certify compliance and participate in the Framework), these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the U.S.
If we were unable to implement or maintain a valid compliance mechanism for cross-border data transfers, or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions (such as the EEA) at significant expense, increased exposure to regulatory actions, substantial fines and penalties, and injunctions against processing or transferring personal data from the EEA or other foreign jurisdictions. The inability to import personal data to the U.S. could significantly and negatively impact our business operations, including by limiting our ability to collaborate with parties that are subject to such cross-border data transfer or localization laws, or by requiring us to increase our personal data processing capabilities and infrastructure in foreign jurisdictions at significant expense. Additionally, companies that transfer personal data out of the EEA and U.K. to other jurisdictions, particularly to the U.S., are subject to increased from regulators, individual , and activist groups. Some European regulators have ordered certain companies to or permanently certain transfers out of the EEA for the GDPR's cross-border data transfer .
Regulators in the United States such as the Department of Justice are also increasingly scrutinizing certain personal data transfers and have proposed and may enact certain data export restrictions and localization requirements. For example, the Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons, which places additional restrictions on certain data transactions involving countries of concern (e.g., China, Russia, Iran) and covered individuals (i.e., individuals and entities who are designated as such by the U.S. Attorney General or considered "foreign persons" and are majority owned by, organized under the laws of, a primary resident in, or a contractor of, a covered person or country or concern, as applicable) that may impact certain business activities such as vendor engagements, employment of certain individuals, and investor agreements. Violation of the rule could lead to significant civil and criminal fines and penalties.
In addition to data privacy and security laws, we are contractually subject to industry standards adopted by industry groups, and we may become subject to additional such obligations in the future.
Our obligations related to data privacy and security, as well as consumers' data privacy expectations, are quickly changing, becoming increasingly stringent, and creating uncertainty.
Our business model materially depends on our ability to process personal data, so we are particularly exposed to the risks associated with the rapidly changing legal landscape. For example, we may be at heightened risk of regulatory scrutiny, and any changes in the regulatory framework could require us to fundamentally change our business model. We may at times fail or be perceived to have failed in our efforts to comply with our data privacy and security obligations. Moreover, despite our efforts, our personnel or the third parties with whom we do business may fail to comply with such obligations, which could negatively impact our business operations and compliance posture. For example, any failure by a third-party processor to comply with applicable laws, regulations, or contractual obligations could result in adverse effects, including inability to or interruption in our ability to operate our business and proceedings us by governmental entities or others.
If we or the third parties with whom we do business fail, or are perceived to have failed, to address or comply with data privacy and security obligations, we could face significant consequences, including, but not limited to: government enforcement actions (e.g., investigations, fines, penalties, audits, inspections, and similar); litigation including class action claims and mass arbitration demands; additional reporting requirements and oversight; temporary or permanent bans on processing personal data; orders to destroy or not use personal data; and imprisonment of company officials. In particular, plaintiffs have become increasingly more active in bringing privacy-
Table of Contents
related claims against companies, including class action claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations. Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; interruptions or stoppages in our business operations (including interruptions or stoppages of data collection needed to train our algorithms); inability to process personal data or to operate in certain jurisdictions; limited ability to develop or commercialize our products; expenditure of time and resources to any claim or ; publicity; or substantial changes to our business model or operations.
Additionally, we publish privacy policies, marketing materials and other statements, such as statements regarding our compliance with certain certifications or self-regulatory principles, regarding data privacy and security. Regulators are increasingly scrutinizing these statements, and if these policies, materials, or statements are found to be deficient, lacking in transparency, deceptive, unfair, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators, or other adverse consequences. Although we endeavor to comply with our privacy policies and other data protection obligations, we may at times fail to do so or may be perceived to have failed to do so. Moreover, despite our efforts, we may not be successful in achieving compliance if our employees, contractors, service providers, or vendors to comply with our published policies and documentation. Such could subject us to potential foreign, federal, state, and local action.
Claims that we have violated individuals’ privacy rights or failed to comply with privacy policies and other data protection obligations, even if we are not found liable, could be expensive and time-consuming to defend and could result in adverse publicity that could harm our business. We are also bound by contractual obligations related to data privacy and security (including related to industry standards), and our efforts to comply with such obligations may not be successful. For example, certain privacy laws, such as the GDPR and the CCPA, require our customers to impose specific contractual restrictions on their service providers. Additionally, some of our customer contracts require us to host personal data locally.
We have in the past received and may in the future receive inquiries from or be subject to investigations by data protection authorities regarding, among other things, our privacy, data protection, and information security practices. The result of such investigations has in the past impacted and could in the future impact our brand reputation, subject us to monetary remedies and costs, interrupt or require us to change our business practices, divert resources and the attention of management from our business, or subject us to other remedies that adversely affect our business .
If our information technology systems or data, or those of third parties with whom we do business, are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse consequences.
In the ordinary course of our business, we and the third parties with whom we do business process proprietary, confidential, and sensitive information, including personal data, intellectual property, and trade secrets. Cyberattacks, malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive information and information technology systems and those of the third parties with whom we do business. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer hackers, threat actors, "hacktivists," organized criminal threat actors, personnel (in cases of employee theft or misuse), and sophisticated nation-state and nation-state supported actors. Some actors now engage and are expected to continue to engage in cyberattacks, including without , nation-state actors for geopolitical reasons, in conjunction with military and defense activities. During times of geopolitical and other major , we, the third parties with whom we do business, and our customers may be to a heightened risk of these attacks, including , that could materially our systems and operations, supply chain, and ability to produce, sell, and distribute our goods and services.
We and the third parties with whom we do business may be subject to a variety of evolving threats. These include but are not limited to: social-engineering attacks including through deepfakes, which are difficult to identify as fake, and phishing attacks; malicious code such as viruses and worms; malware including as a result of advanced persistent threat intrusions; denial-of-service attacks; credential stuffing attacks; credential harvesting, personnel misconduct or error; ransomware attacks; supply chain attacks; software bugs; server malfunctions; software or hardware failures; loss of data or other information technology assets; adware; telecommunications failures; attacks enhanced or facilitated by AI; and other similar threats. In particular, ransomware attacks
Table of Contents
have become increasingly prevalent and can lead to significant interruptions in our operations, ability to provide our products or services, loss of sensitive data, loss of income, reputational harm, and diversion of resources. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments, for example as a result of applicable laws or regulations prohibiting such payments.
It may be difficult and costly to detect, investigate, mitigate, contain, and remediate a security incident. Our efforts to do so may not be successful. Actions taken by us or the third parties with whom we do business to detect, investigate, mitigate, contain, and remediate a security incident could result in outages, data losses, and disruptions of our business. Threat actors may also gain access to other networks and systems after a compromise of our networks and systems. For example, threat actors may use an initial compromise of one part of our environment to gain access to other parts of our environment, or leverage a compromise of our networks or systems to gain access to the networks or systems of third parties with whom we do business, such as through phishing or supply chain attacks.
We are incorporated into the supply chain of a large number of companies worldwide and, as a result, if our solutions are compromised, a significant number or, in some instances, all of our customers, and their data could be simultaneously affected. The potential liability and associated consequences we could suffer as a result of such a large-scale event could be catastrophic and result in irreparable harm. In addition, remote work has increased risks to our information technology systems and data, as many of our employees utilize network connections, computers, and devices outside of our premises or network, while working at home, in transit, and in public locations. Future or past business transactions, such as acquisitions or integrations, could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities' systems and technologies. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program.
We rely on third-party service providers, sub-processors, and technologies to operate critical business systems to process sensitive information in a variety of contexts, including without limitation, third-party providers of cloud-based infrastructure, LLMs, encryption and authentication technology, employee email, content delivery to customers, and other functions. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. We share sensitive information with and receive sensitive information from third parties. If our third-party service providers experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if our third-party service providers fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition, supply chain attacks have increased in frequency and , and we cannot guarantee that third parties and infrastructure in our supply chain or our third-party partners' supply chains have not been compromised.
While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect, mitigate, and remediate vulnerabilities in our information systems, such as our hardware and software and the hardware and software of third parties with whom we do business. We have not detected and in the future may not detect and remediate all such vulnerabilities including on a timely basis. Even if we have issued or otherwise made available patches or information to address vulnerabilities in our software applications, products, or services, our customers may be unwilling or unable to deploy such patches and use such information effectively and in a timely manner. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities, which could lead to such vulnerabilities being and result in a security .
Any of the previously identified or similar threats could cause a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, or disclosure of, or access to, our sensitive information or information technology systems, or those of the third parties with whom we do business. For example, we have in the past been the target of unsuccessful phishing attempts, and we expect that such attempts will continue in the future. A security incident or other interruption could disrupt our ability (and that of third parties with whom we do business) to provide our platform.
We may expend significant resources or modify our business activities to try to protect against security incidents. Certain data privacy and security obligations may require us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our information technology systems and sensitive information. Applicable data privacy and security obligations may require us, or we may voluntarily choose, to notify relevant stakeholders, including affected individuals, customers, regulators, and investors, of security
Table of Contents
incidents. Such disclosures are costly, and the disclosures or the failure to comply with such requirements could lead to adverse consequences.
If we or a third-party with whom we do business experience a security incident, or are perceived to have experienced a security incident, we may experience material adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and oversight; restrictions on processing sensitive information (including personal data); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; diversion of management attention; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may prevent customers from using or cause customers to stop using our platform and products, new customers from using our platform and products, and impact our ability to grow and operate our business.
A security incident may cause us to breach customer contracts. Our agreements with certain customers require us to use industry-standard or reasonable measures to safeguard personal information. We are also subject to laws that require us to use industry-standard or reasonable security measures to safeguard personal information. Our contracts may not contain limitations of liability, and even when they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. A security breach could lead to claims by our customers or other relevant stakeholders that we have failed to comply with such legal or contractual obligations. As a result, we could be subject to legal action or our customers could end their relationships with us. In some cases our customer agreements do not limit our remediation costs or liability with respect to data breaches.
In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive information about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position. Further, sensitive information belonging to us or our customers could be leaked, disclosed, or revealed as a result of, or in connection with, our employees', personnel's, or vendors' use of generative AI technologies. Any sensitive information (including confidential, competitive, proprietary, or personal data) that we input into a third-party generative AI or ML model could be leaked or disclosed to others, including if sensitive information is used to train the third party's AI or ML model. Additionally, when AI technologies ingest personal data and make connections using such data, those technologies may reveal other personal or sensitive information generated by the models.
We face unique threats and vulnerabilities as a SaaS company, including, but not limited to, adverse consequences resulting from any vulnerabilities in our platform and products and customer misuse of our platform and products. The reliability and continuous availability of our platform and products is critical to our success. However, software such as ours can contain errors, defects, security vulnerabilities, or software bugs that are difficult to detect and correct, particularly when such vulnerabilities are first introduced, or when new versions or enhancements of our platform or products are released. Additionally, even if we are able to develop a patch or other fix to address such vulnerabilities, such fix may be to push out to our customers, or otherwise be . Additionally, our business depends upon the appropriate and implementation of our platform and products by our customers. If our customers to use our platform or products according to our specifications, our customers may a security on their own systems or other consequences. Even if such an is unrelated to our security practices, it could result in us incurring significant economic and operational costs in , remediating, and implementing additional measures to further protect our customers from their own and could result in reputational .
Litigation resulting from security breaches may adversely affect our business. Unauthorized access to our platform, systems, networks, or physical facilities, or those of our vendors, could result in litigation with our customers or other relevant stakeholders. These proceedings could force us to spend money in defense or settlement, divert management’s time and attention, increase our costs of doing business, or adversely affect our reputation. We could be required to fundamentally change our business activities and practices or modify our products and platform capabilities in response to such litigation, which could have an adverse effect on our business. If a security breach were to occur and the confidentiality, integrity, or availability of personal data or sensitive information was disrupted, we could incur significant liability or our platform, systems, or networks may be perceived as less , which could affect our business and our reputation.
We cannot be sure that our insurance coverage will be adequate or sufficient to protect us from or to mitigate liabilities arising out of our privacy and security practices, that such coverage will continue to be available on commercially reasonable terms or at all, or that such coverage will pay future claims.
Table of Contents
Risks Related to Regulatory Compliance and Governmental Matters
We are subject to anti-corruption, anti-bribery, anti-money laundering, and similar laws, and noncompliance with such laws can subject us to criminal or civil liability and harm our business, financial condition, and results of operations.
We are subject to the U.S. FCPA , U.S. domestic bribery laws, the U.K. Bribery Act, and other anti-corruption and anti-money laundering laws in the countries in which we conduct activities. Due to the international scope of our operations, we must comply with these laws in each jurisdiction where we operate. Additionally, many anti-bribery and anti-corruption laws, including the FCPA, have long-arm statutes that can expand the applicability of these laws to our operations worldwide. Accordingly, we incur significant operational costs to support our ongoing compliance with anti-bribery and anti-corruption laws at all levels of our business. If we fail to comply with these laws we may be subject to significant penalties. Anti-corruption and anti-bribery laws are interpreted broadly to generally prohibit companies, their employees, and their third-party intermediaries from authorizing, offering, or providing, directly or indirectly, payments or benefits to recipients in the public or private sector. In connection with our international sales and business and sales to the public sector, we may engage with business partners and third-party intermediaries to market our products and to obtain necessary permits, licenses, and other regulatory approvals. In addition, we or our third-party intermediaries may have direct or indirect interactions with officials and employees of government agencies or state-owned or affiliated entities. We can be held liable for the or other activities of these third-party intermediaries, our employees, representatives, contractors, partners, and agents, even if we do not explicitly authorize such activities.
While we have policies and procedures to address compliance with such laws, we cannot provide assurance that all of our employees, agents, or other third parties will not take actions in violation of our policies and applicable law for which we may be ultimately held responsible. Our risks under these laws may be exacerbated as a result of our international sales and business.
Detecting, investigating, and resolving actual or alleged violations of anti-corruption laws can require a significant diversion of time, resources, and attention from senior management. In addition, noncompliance with anti-corruption, anti-bribery, or anti-money laundering laws could subject us to whistleblower complaints, investigations, sanctions, settlements, prosecution, enforcement actions, fines, damages, other civil or criminal penalties or injunctions, suspension or from contracting with certain persons, reputational , media coverage, and other collateral consequences. If any or are launched or governmental or other sanctions are imposed, or if we do not prevail in any civil or proceeding that may arise, our business, financial condition, and results of operations could be . In addition, responding to any action will likely result in a of management’s attention and resources and significant defense costs and other professional fees.
Sales to government entities and highly regulated organizations are subject to a number of challenges and risks.
We currently sell and anticipate continuing to sell to U.S. federal, state, and local, and foreign governmental agency customers, as well as to customers in highly regulated industries such as financial services and healthcare. Sales to such customers are subject to a number of challenges and risks. Selling to such customers can be highly competitive, expensive, and time-consuming, often requiring significant upfront time and expense without any assurance that these efforts will generate a sale. These current and prospective customers may also be required to comply with stringent regulations in connection with purchasing and implementing our platform and products, or particular regulations regarding third-party vendors that may be interpreted differently by different customers. In addition, regulatory agencies may impose requirements on third-party vendors generally, or our company in particular, that we may not be able to meet or may not choose to meet. In addition, government customers and customers in these highly regulated industries often have a right to conduct audits of our systems, products, and practices. In the event that one or more customers determine that some aspect of our business does not meet regulatory requirements, we may be limited in our ability to continue or expand our business. In addition, if our platform and products do not meet the standards of new or existing regulations, we may be in breach of our contracts with these customers, allowing them to their agreements.
Government contracting requirements may also change and in doing so restrict our ability to sell into the government sector until we have attained the requisite approvals. Government demand and payment for our products are affected by public sector budgetary cycles and funding authorizations, with funding reductions or delays adversely affecting public sector demand for our products.
Table of Contents
These customers may also be subject to a rapidly evolving regulatory framework that may impact their ability to use our platform and products. Moreover, changes in the underlying statutory and regulatory conditions that affect these types of customers could harm our ability to efficiently provide them access to our platform and to grow or maintain our customer base. If we are unable to enhance our platform and products to keep pace with evolving requirements, or if new technologies emerge that are able to deliver competitive products at lower prices, more efficiently, more conveniently, or more securely than our platform, our business, financial condition, and results of operations could be adversely affected.
Further, governmental and highly regulated entities may demand contract terms that differ from our standard arrangements and are less favorable than terms agreed with private sector customers, including preferential pricing or “most favored nation” terms and conditions or contract provisions that are otherwise time-consuming and expensive to satisfy. In the U.S., applicable federal contracting regulations change frequently, and the President may issue executive orders requiring federal contractors to adhere to new compliance requirements after a contract is signed. If we undertake to meet special standards or requirements and do not meet them, we could be subject to significant liability from our customers or regulators. Even if we do meet these special standards or requirements, the additional costs associated with providing our platform to government and highly regulated customers could harm our results of operations. In addition, engaging in sales activities to foreign governments introduces additional compliance risks specific to the FCPA, the U.K. Bribery Act, and other similar statutory requirements prohibiting bribery and corruption in the jurisdictions in which we operate.
Additionally, governmental and highly regulated entities may have statutory, contractual, or other legal rights to terminate contracts with us or our partners for convenience or for other reasons. Any such termination may adversely affect our ability to contract with other government customers as well as our reputation, business, financial condition, and results of operations.
We are subject to governmental export and import controls that could impair our ability to compete in international markets or subject us to liability if we violate the controls.
Our business activities are subject to Trade Controls which may prohibit or restrict the sale or supply of certain products, including encryption items and other technology, and services to certain governments, persons, entities, countries, and territories, including those that are the target of comprehensive sanctions.
While we have implemented controls designed to promote and achieve compliance with applicable Trade Controls, our platform and products may have been provided in the past and could in the future be provided in violation of such laws, despite the precautions we take. Any failure to comply with applicable Trade Controls may materially affect us through reputational harm, as well as other negative consequences, including government investigations and penalties. Accordingly, we must incur significant operational costs to support our ongoing compliance with Trade Controls at all levels of our business.
Also, the U.S., the EU, and other jurisdictions have enacted Trade Controls that could limit our ability to distribute our platform and products, or could limit our customers’ ability to implement our platform and products in those countries. Changes in our platform or products or future changes in Trade Controls may create delays in the introduction of our platform and products in international markets or, in some cases, prevent the export or import of our platform and products to certain countries, governments, or persons altogether. Any change in Trade Controls could result in decreased use of our platform and products by, or decrease in our ability to export or sell our platform and products to, existing or potential customers. Any decreased use of our platform or products or limitation on our ability to export or sell our platform and products would adversely affect our business, financial condition, results of operations, and growth prospects.
For example, over time, the U.S. has imposed Trade Controls that restrict the export of U.S.-regulated products and technology in response to geopolitical actions. Such Trade Controls and any further restrictions that may be promulgated by relevant governmental authorities could adversely affect our business.
Risks Related to Our Intellectual Property
Any failure to obtain, maintain, protect, or enforce our intellectual property and proprietary rights could impair our ability to protect our proprietary technology and our brand.
Our success depends to a significant degree on our ability to obtain, maintain, protect, and enforce our intellectual property rights, including our proprietary technology, know-how, and our brand. We rely on a combination of trademarks, trade secret laws, patents, copyrights, service marks, contractual restrictions, and other intellectual property laws and confidentiality procedures to establish and protect our proprietary rights. However, the steps we
Table of Contents
take to obtain, maintain, protect, and enforce our intellectual property rights may be inadequate. We may not be able to protect our intellectual property rights if, for example, we are unable to enforce our rights against infringement or misappropriation, or if we do not detect unauthorized use of our intellectual property rights. In addition, because a significant portion of our intellectual property and related activities are concentrated in a limited number of jurisdictions, geopolitical and macroeconomic events impacting such jurisdictions could materially impair our ability to access, use, develop, license, transfer, or otherwise realize the value of our intellectual property. If we fail to protect our intellectual property rights adequately, our competitors may gain access to our proprietary technology and develop and commercialize substantially identical products, services, or technologies, and our business, financial condition, results of operations, or growth prospects may be .
In addition, defending our intellectual property rights may entail significant expense. Any patent, trademark, or other intellectual property rights that we have or may obtain may be challenged or circumvented by others or invalidated or held unenforceable through administrative processes, including re-examination, inter partes review, interference, and derivation proceedings and equivalent proceedings in foreign jurisdictions (e.g., opposition, invalidation, and cancellation proceedings), or litigation. Moreover, there can be no assurance that our pending patent applications will result in issued patents. Even if we continue to seek patent protection in the future, we may be unable to obtain or maintain patent protection for our technology. In addition, any patents issued from pending or future patent applications or licensed to us in the future may not be sufficiently broad to protect our proprietary technologies, may not provide us with competitive advantages, or may be by third parties. The U.S. Patent and Trademark Office and various foreign governmental patent and trademark agencies also require compliance with a number of procedural, documentary, fee payment, and other similar provisions during the patent and trademark application process and after a patent or trademark registration has been issued. There are situations in which can result in or of the patent, patent application, or trademark filing, resulting in partial or complete of patent or trademark rights in the relevant jurisdiction. If this occurs, our competitors might be to enter the market.
Furthermore, legal standards relating to the validity, enforceability, and scope of protection of intellectual property rights are uncertain. Despite our precautions, it may be possible for unauthorized third parties to copy our brands, products, and platform capabilities, and use information that we regard as proprietary to create brands and products that compete with ours. Effective patent, trademark, copyright, and trade secret protection may not be available to us or commercially feasible in every country in which our products are available. Further, intellectual property law, including statutory and case law, particularly in the U.S., is constantly developing, and any changes in the law could make it harder for us to enforce our rights. The value of our intellectual property could diminish if others assert rights in or ownership of our trademarks, patents, and other intellectual property rights, or adopt trademarks that are similar to our trademarks. We may be unable to successfully resolve these types of conflicts to our satisfaction. In some cases, or other actions may be necessary to protect or enforce our trademarks, patents, and other intellectual property rights or . In connection with our international activities, our exposure to copying and use of our products and platform capabilities and proprietary information may be increased. Moreover, policing use of our technologies, trade secrets, and intellectual property may be , expensive, and time-consuming, particularly in foreign countries where the laws may not be as protective of intellectual property rights as those in the U.S. and where mechanisms for enforcement of intellectual property rights may be or .
Accordingly, despite our efforts, we may be unable to prevent third parties from infringing upon, misappropriating, or otherwise violating our intellectual property rights. Any of the foregoing could adversely impact our business, financial condition, and results of operations.
We may become subject to intellectual property disputes, which are costly and may subject us to significant liability and increased costs of doing business.
We are from time to time subject to intellectual property disputes. Our success depends, in part, on our ability to develop and commercialize our products and services without infringing, misappropriating, or otherwise violating the intellectual property rights of third parties. However, we may not be aware that our products or services are infringing, misappropriating, or otherwise violating third-party intellectual property rights, and such third parties may bring claims alleging such infringement, misappropriation, or violation. For example, there may be issued patents of which we are not aware, held by third parties that, if found to be valid and enforceable, could be alleged to be infringed by our current or future technologies or products. There also may be pending patent applications of which we are not aware that may result in issued patents, which could be to be by our current or future technologies or products. Because patent applications can take years to issue and are often afforded confidentiality
Table of Contents
for some period of time, there may currently be pending applications, unknown to us, that later result in issued patents that could cover our current or future technologies or products.
Lawsuits can be time-consuming and expensive to resolve and can divert management’s time and attention. The software industry in which we operate is characterized by the existence of a large number of patents, copyrights, trademarks, trade secrets, and other intellectual and proprietary rights. Companies in the software industry are often required to defend against litigation claims based on allegations of infringement, misappropriation, or other violations of intellectual property rights. Our technologies may not be able to withstand any third-party claims against their use. In addition, many companies have the capability to dedicate substantially greater resources to enforce their intellectual property rights and to that may be brought them than we can. In a patent claim us, we may assert as a defense that we do not the relevant patent , that the patent is , or both. The of our defenses may depend on the patents asserted, the interpretation of these patents, or our ability to the asserted patents. However, we could be in non- or in our defense. In the U.S., issued patents a presumption of validity, and the party the validity of a patent claim must present clear and convincing evidence of , which is a high of proof. Conversely, the patent owner need only prove by a preponderance of the evidence, which is a lower of proof. Competitors and others may now and in the future have significantly larger and more mature patent portfolios than we have, which could prevent us from patent through our own patent portfolio. Any may also involve patent holding companies or other patent owners that have no relevant product revenue, and therefore, our patents may provide little or no as we would not be to assert them such entities or individuals.
An adverse result in any infringement or misappropriation proceeding could subject us to significant damages, injunctions, and reputational harm. If a third party is able to obtain an injunction preventing us from accessing such third-party intellectual property rights, or if we cannot license or develop alternative technology for any infringing aspect of our business, we may be forced to limit or stop sales of our relevant products and platform capabilities or cease business activities related to such intellectual property. Although we carry general liability and intellectual property insurance, our insurance may not cover potential claims of this type or may not be adequate to indemnify us for all liability that may be imposed. We cannot predict the outcome of lawsuits and cannot ensure that the results of any such actions will not have an effect on our business, financial condition, or results of operations. Any intellectual property to which we might become a party, or for which we are required to provide indemnification, may require us to do one or more of the following:
• cease selling or using products or services that incorporate the intellectual property rights that we allegedly infringe, misappropriate, or violate;
• make substantial payments for legal fees, settlement payments, or other costs or damages;
• obtain a license, which may not be available on reasonable terms or at all, to sell or use the relevant technology;
• redesign the allegedly infringing products to avoid infringement, misappropriation, or violation, which could be costly, time-consuming, or impossible;
• rebrand our products and services or be prevented from selling some of our products or services if third parties successfully oppose or challenge our trademarks or successfully claim that we infringe, misappropriate, or otherwise violate their trademarks or other intellectual property rights; and
• limit the manner in which we use our brands, or prevent us from using our brands in particular jurisdictions.
Even if the claims do not result in litigation or are resolved in our favor, these claims and the time and resources necessary to resolve them could divert the resources of our management and harm our business, financial condition, and results of operations. Moreover, there could be public announcements of the results of hearings, motions, or other interim proceedings or developments, and if securities analysts or investors perceive these results to be negative, the price of our Class A common stock could be adversely affected. The occurrence of infringement and misappropriation claims may grow as the market for our platform and products grows. Accordingly, our exposure to damages resulting from infringement claims could increase and this could exhaust our financial and management resources. Any of the foregoing could impact our business, financial condition, and results of operations.
Table of Contents
We may become involved in lawsuits to protect or enforce our intellectual property, which could be expensive, time consuming, and unsuccessful.
Third parties, including our competitors, could be infringing, misappropriating, or otherwise violating our intellectual property rights, and we may be required to spend significant resources to monitor and protect those rights. Litigation may be necessary in the future to enforce our intellectual property rights and to protect our trade secrets. Litigation brought to protect and enforce our intellectual property rights could be costly, time-consuming, and distracting to management, and could result in the impairment or loss of portions of our intellectual property.
Further, our efforts to enforce our intellectual property rights may be met with defenses, counterclaims, and countersuits attacking the validity and enforceability of our intellectual property rights, and if such defenses, counterclaims, or countersuits were successful, we could lose valuable intellectual property rights. An adverse determination of any litigation proceedings could put our intellectual property at risk of being invalidated or interpreted narrowly and could put our related patents, patent applications, and trademark filings at risk of being invalidated, not issued, or cancelled. Furthermore, because of the substantial amount of discovery required in connection with intellectual property litigation, there is a risk that some of our confidential or sensitive information could be compromised by disclosure in the event of litigation. In addition, during the course of there could be public announcements of the results of hearings, motions, or other interim proceedings or developments. If securities analysts or investors perceive these results to be , the price of our Class A common stock could be affected. Our to protect our proprietary technology copying or use, as well as any or of our management’s attention and resources, could further sales or the implementation of our products and platform capabilities, the functionality of our products and platform capabilities, introductions of new functionality, result in our substituting or more technologies into our products, or our reputation. Any of the foregoing could impact our business, financial condition, and results of operations.
If we are unable to protect the confidentiality of our trade secrets, our business and competitive position would be harmed.
We rely heavily on trade secrets and confidentiality agreements to protect our unpatented know-how, technology, and other proprietary information and to maintain our competitive position. However, trade secrets and know-how can be difficult to protect. We seek to protect these trade secrets and other proprietary technology in part by entering into non-disclosure and confidentiality agreements with parties who have access to them, such as our employees, consultants, and other third parties, including suppliers and other partners. However, we cannot guarantee that we have entered into such agreements with each party that has or may have had access to our proprietary information, know-how, and trade secrets. Moreover, no assurance can be given that these agreements will be effective in controlling access to, or distribution, use, misuse, misappropriation, reverse engineering, or disclosure of our proprietary information, know-how, and trade secrets. Further, these agreements may not prevent our competitors from independently developing technologies that are substantially equivalent or superior to our products and platform capabilities. These agreements may be breached, and we may not have adequate remedies for any such breach. For example, past employees have sought to source code relevant to certain of our products. While we have taken steps to that we are aware of, such steps may not ultimately be and we may not be aware of all such . Any of the foregoing could impact our business, financial condition, and results of operations.
We may be subject to claims that our employees, consultants, or advisors have wrongfully used or disclosed alleged trade secrets of their current or former employers or claims asserting ownership of what we regard as our own intellectual property.
Many of our employees and consultants are currently or were previously employed at other companies in our field, including our competitors or potential competitors. Although we try to ensure that our employees and consultants do not use the proprietary information or know-how of others in their work for us, we may be subject to claims that we or these individuals have used or disclosed intellectual property, including trade secrets or other proprietary information, of any such individual’s current or former employer. Litigation may be necessary to defend against these claims. If we fail in defending any such claims, in addition to paying monetary damages, we may lose valuable intellectual property rights or personnel. Even if we are successful in such , could result in substantial costs and be a to management.
In addition, while it is our policy to require our employees and contractors who may be involved in the conception or development of intellectual property to execute agreements assigning such intellectual property to us, we may be unsuccessful in executing such an agreement with each party who, in fact, conceives or develops
Table of Contents
intellectual property that we regard as our own. The assignment of intellectual property rights may not be self-executing, or the assignment agreements may be breached, and we may be forced to bring claims against third parties, or defend claims that they may bring against us, to determine the ownership of what we regard as our intellectual property. Any of the foregoing could adversely impact our business, financial condition, and results of operations.
We use open source software in our products, which could negatively affect our ability to sell our platform and products or subject us to litigation or other actions.
We use open source software in our products and we expect to continue to incorporate open source software into our products in the future. Few of the licenses applicable to open source software have been interpreted by courts, and there is a risk that these licenses could be construed in a manner that could impose unanticipated conditions or restrictions on our ability to commercialize our products. Moreover, we cannot ensure that we have not incorporated open source software in our products in a manner that is inconsistent with the terms of the applicable licenses or our current policies and procedures. If we fail to comply with these licenses, we may be subject to certain requirements, including requirements that we offer our products that incorporate the open source software for no cost, that we make available source code for modifications or derivative works we create based upon, incorporating, or using the open source software, and that we license such modifications or derivative works under the terms of applicable open source licenses. In addition, although we employ open source software license screening measures, if we were to combine our proprietary software products with open source software in a certain manner, we could, under certain open source licenses, be required to release the source code of our proprietary software products. If an author or other third party that distributes such open source software were to that we had not complied with the conditions of one or more of these licenses, we could be required to incur significant legal expenses such and could be subject to significant , from the sale of our products that contain the open source software, and required to comply with conditions or restrictions on these products, which could the distribution and sale of these products.
From time to time, there have been claims challenging the ownership rights in open source software against companies that incorporate it into their products, and the licensors of such open source software provide no warranties or indemnities with respect to such claims. As a result, we and our customers could be subject to lawsuits by parties claiming ownership of what we believe to be open source software. Litigation could be costly for us to defend, have a negative effect on our business, financial condition, and results of operations, or require us to devote additional research and development resources to change our products. Some open source projects have known vulnerabilities and architectural instabilities and are provided on an “as-is” basis, which, if not properly addressed, could negatively affect the performance of our products. If we inappropriately use or incorporate open source software subject to certain types of open source licenses that the proprietary nature of our products, we may be required to re-engineer such products, the sale of such products, or take other remedial actions, any of which could impact our business, financial condition, and results of operations.
If we cannot license rights to use technologies on reasonable terms, we may be unable to license rights that are critical to our business.
In the future, we may identify additional third-party intellectual property that we may need to license in order to engage in our business, including to develop or commercialize new products or services. However, such licenses may not be available to us on acceptable terms or at all. The licensing or acquisition of third-party intellectual property rights is a competitive area, and competitors may pursue strategies to license or acquire third-party intellectual property rights that we may consider attractive or necessary. These competitors may have an advantage over us due to their size, capital resources, and greater development or commercialization capabilities. In addition, companies that perceive us to be a competitor may be unwilling to assign or license rights to us. Even if such licenses were available, we might be required to pay the licensor substantial royalties based on sales of our products and services. Such royalties are a component of the cost of our products or services and impact the margins on our products and services. If we are unable to enter into the necessary licenses on acceptable terms or at all, it could adversely impact our business, financial condition, and results of operations.
Risks Related to Our International Operations
Our current operations are international in scope, and we may pursue further geographic expansion, creating a variety of operational challenges.
We currently operate internationally, and a component of our growth strategy involves the further expansion of our operations and customer base internationally. Customers outside the U.S. generated 54% and 56% of our
Table of Contents
revenue for fiscal years 2026 and 2025, respectively. Including the U.S., we have legal presence in 30 countries globally, as presented in the List of Subsidiaries of UiPath, Inc. filed as an exhibit to this Annual Report on Form 10-K. We are continuing to adapt to and develop strategies to further address international markets, but there is no guarantee that such efforts will have the desired effect. For example, we anticipate that we will need to establish relationships with new partners in order to expand into certain countries, and if we fail to identify, establish, and maintain such relationships, we may be unable to execute on our expansion plans. As of January 31, 2026, the majority of our full-time employees were located outside of the U.S. We expect that our international activities will continue to grow for the foreseeable future as we continue to pursue opportunities in existing and new international markets, which will require significant dedication of management attention and financial resources.
Our current and future international business and operations involve a variety of risks, including:
• slower than anticipated availability to and adoption of our platform and products by international businesses;
• changes in a specific country’s or region’s political, regulatory, or economic conditions;
• the need to adapt and localize our products for specific countries;
• greater difficulty collecting accounts receivable and longer payment cycles;
• potential changes in trade relations, regulations, laws, or tariffs;
• unexpected changes in laws or regulatory requirements, including tax laws and regulations;
• more stringent regulations relating to privacy and data security and the unauthorized use of or access to commercial and personal data, particularly in the EU;
• heightened risk or perceived risk related to privacy and data security in specific countries;
• differing and potentially more onerous labor regulations, especially in Europe, where labor laws are generally more advantageous to employees as compared to the U.S., including deemed hourly wage and overtime regulations in these locations;
• challenges inherent in efficiently managing, and the increased costs associated with, an increased number of employees over large geographic distances, including the need to implement appropriate systems, policies, benefits, and compliance programs that are specific to each jurisdiction;
• difficulties in managing a business in new markets with diverse cultures, languages, customs, legal systems, alternative dispute systems, and regulatory systems;
• increased travel, real estate, infrastructure, and legal compliance costs associated with international operations;
• currency exchange rate fluctuations and the resulting effect on our revenue and expenses, and the cost and risk of entering into hedging transactions if we chose to do so in the future;
• limitations on our ability to reinvest earnings from operations in one country to fund the capital needs of our operations in other countries;
• laws and business practices favoring local competitors or general market preferences for local vendors;
• limited or insufficient intellectual property protection or difficulties obtaining, maintaining, protecting, or enforcing our intellectual property rights, including our trademarks and patents;
• the impacts of political instability, military conflicts, or terrorist activities on our employees, our business, and the global economic environment;
• an outbreak of a contagious disease, which may cause us or our third-party providers or customers to temporarily suspend our or their respective operations in the affected city or country;
• exposure to liabilities under anti-corruption and anti-money laundering laws, including the FCPA, U.S. bribery laws, the U.K. Bribery Act, and similar laws and regulations in other jurisdictions;
• exposure to anti-competition laws in foreign jurisdictions that may conflict with or be more restrictive than similar U.S. anti-competition laws; and
• adverse changes to domestic and foreign tax laws and regulations, and the requirements of foreign exchange controls, which could make it difficult to repatriate earnings and cash.
Table of Contents
Any of these risks could adversely impact our business, financial condition, and results of operations. Failure to comply with international regulations as they evolve could harm our business, and compliance efforts may involve significant costs. If we invest substantial time and resources to further expand our international operations and are unable to do so successfully and in a timely manner, our business and results of operations will suffer.
We are exposed to fluctuations in currency exchange rates which affect our results of operations.
While our sales contracts are denominated predominantly in U.S. dollars, we also have sales contracts representing a large portion of our revenue denominated in foreign currencies. Therefore, a significant portion of our revenue has been and continues to be subject to fluctuations due to changes in foreign currency exchange rates. Additionally, for our foreign sales contracts denominated in U.S. dollars, periodic strengthening of the U.S. dollar has at times increased and could continue to increase the real cost of our products and platform capabilities to these customers outside of the U.S., which could adversely affect our results of operations.
Further, an increasing portion of our operating expenses are incurred outside the U.S. We conduct our business and incur costs in the local currency of most countries in which we operate. We incur currency transaction risk whenever one of our operating subsidiaries enters into either a purchase or a sales transaction using a different currency from the currency in which it operates, or holds assets or liabilities in a currency different from its functional currency. Changes in exchange rates can also affect our results of operations when the value of sales and expenses of foreign subsidiaries are translated to U.S. dollars. We cannot accurately predict the impact of future exchange rate fluctuations on our results of operations. Given the volatility of exchange rates, we may not be able to effectively manage our currency risks, and any volatility in currency exchange rates may have an adverse effect on our financial condition, cash flows, and profitability.
Risks Related to Tax and Accounting Matters
If we fail to maintain effective internal control over financial reporting, our ability to produce timely and accurate financial statements or comply with applicable laws and regulations could be impaired.
We are subject to the reporting requirements of the Exchange Act, SOX , the rules and regulations of the New York Stock Exchange, and other securities rules and regulations that impose various requirements on public companies. Our management and other personnel devote substantial time and resources to comply with these rules and regulations, which continue to evolve.
SOX requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. Our disclosure controls and procedures are designed to ensure that information required to be disclosed in our reports filed or submitted under the Exchange Act is recorded, processed, summarized, and reported within the time periods specified in the SEC’s rules and forms. In addition, they are designed to ensure that such information is accumulated and communicated to our management, including our CEO and CFO, as appropriate to allow timely decisions regarding required disclosure. However, our current controls and any new controls we develop may become inadequate because of changes in conditions in our business. Additionally, to the extent that we acquire other businesses, the acquired company may not have a sufficiently robust system of internal controls and we may uncover new deficiencies. Weaknesses in our internal controls may be discovered in the future. Any failure to develop or maintain effective controls, or any difficulties encountered in their implementation or , could our results of operations, may result in a of our financial statements for prior periods, may cause us to to meet our reporting obligations, could result in an opinion regarding our internal control over financial reporting from our independent registered public accounting firm, and could lead to or sanctions by regulatory authorities.
Section 404 of SOX requires our management to certify financial and other information in our quarterly and annual reports and provide an annual management report on the effectiveness of our internal control over financial reporting. We are also required to have our independent registered public accounting firm attest to, and issue an opinion on, the effectiveness of our internal control over financial reporting. If we are unable to assert that our internal control over financial reporting is effective, or if our independent registered public accounting firm issues an adverse opinion regarding or is unable to express an opinion regarding the effectiveness of our internal control over financial reporting, we could lose investor confidence in the accuracy and completeness of our financial reports, which could cause the price of our Class A common stock to decline.
Any failure to maintain effective disclosure controls and procedures and internal control over financial reporting could have a material and adverse effect on our business, financial condition, and results of operations.
Table of Contents
Our corporate structure and intercompany arrangements cause us to be subject to the tax laws of various jurisdictions, and we could be obligated to pay additional taxes, which could materially adversely affect our business, financial condition, results of operations, and growth prospects.
Our international operations and personnel have rapidly expanded to support our business in numerous international markets. We generally conduct our international operations through directly or indirectly wholly-owned subsidiaries, and we are or may be required to report our taxable income in various jurisdictions worldwide with increasingly complex tax laws based upon our business operations in those jurisdictions. Our intercompany relationships and agreements are subject to complex transfer pricing regulations administered by tax authorities in various jurisdictions with potentially divergent tax laws. Tax authorities may disagree with tax positions that we have taken. For example, the IRS or another tax authority could challenge our allocation of income by tax jurisdiction and the amounts paid between our affiliated companies pursuant to our intercompany arrangements and transfer pricing policies, including amounts paid with respect to our intellectual property in connection with our intercompany research and development cost sharing arrangement and legal structure. We are currently under audit in certain jurisdictions, and topics as described above have been raised in our current and prior tax audits in Romania and India, leading to disputes and litigation. While we believe our positions are reasonable, the administrative procedures to finalize these tax audits, , and are in process. In addition, while we have pursued risk management approaches with tax authorities in certain jurisdictions, such efforts may not fully eliminate the risk of future , audits, or adjustments.
The amount of taxes we pay in different jurisdictions may depend on the application of the tax laws of the various jurisdictions, including the U.S., to our international business activities, changes in tax rates, new or revised tax laws or interpretations of existing tax laws and policies, and our ability to operate our business in a manner consistent with our corporate structure and intercompany arrangements. The authorities in these jurisdictions could audit our tax returns or require us to file tax returns in jurisdictions in which we are not currently filing and could impose additional tax, interest, and penalties. In addition, the authorities could claim that various withholding requirements apply to us or our subsidiaries, assert that benefits of tax treaties are not available to us or our subsidiaries, or challenge our methodologies for valuing developed technology or intercompany arrangements, including our transfer pricing. If such a challenge or disagreement were to occur, and our position was not sustained, we could be required to pay additional taxes, interest, and penalties, which could result in one-time tax charges, higher effective tax rates, reduced cash flows, and lower overall profitability of our operations. Our financial statements may not include adequate accruals to cover such contingencies.
We are subject to periodic audits in the various jurisdictions in which we operate. We regularly assess the likelihood of adverse audit outcomes to determine the adequacy of our accruals for taxes. Although we believe our estimates are reasonable, the final outcome of audits could differ materially from our expectations. Further, tax authorities are increasingly using data analytics and AI in audit activities, the use of which could increase the frequency or intensity of audits.
Changes in tax laws or tax rulings could materially affect our financial condition, results of operations, and cash flows.
The tax regimes that we are subject to or operate under, including income and non-income taxes, may be subject to significant change. Changes in tax laws, regulations, or rulings, or changes in interpretations of existing laws and regulations, could materially affect our financial condition and results of operations and we must monitor such changes closely. For example, the One Big Beautiful Bill Act made many significant changes to the U.S. tax laws, especially with regard to international aspects of taxation. In particular, U.S. tax rules governing the capitalization, amortization, and deductibility of research and development and other technology-related expenditures may continue to evolve. Any such changes could increase our effective tax rate, reduce cash flows, or increase volatility in our tax provision. Similarly, as our operations are material in Romania, legislative changes have resulted in an alternative minimum corporate tax for fiscal years starting January 1, 2024 through January 1, 2027. Future guidance from the IRS and other tax authorities with respect to any existing or new laws may affect us, and certain aspects of such laws could be repealed or modified in future legislation.
In addition, the OECD has been working on a Base Erosion and Profit Sharing project and issued a report in 2015, an interim report in 2018, and has issued additional guidelines, model rules, and final proposals that may change various aspects of the existing framework under which our tax obligations are determined in many of the countries in which we do business. In particular, the OECD is coordinating the implementation of rules to be adopted with respect to nexus and profit allocation (Pillar One) and for a global minimum tax (Pillar Two). In January 2026, the OECD released additional implementation guidance and coordination measures reflecting the G7 side-by-
Table of Contents
side agreement, which further clarify certain operational, transitional, and interaction rules. Despite this additional guidance, the timing, scope and manner of implementation of Pillar Two continue to vary by jurisdiction, and uncertainty remains regarding the extent to which U.S. tax rules will align with, diverge from, or interact with these regimes.
Additionally, the European Commission and several countries have issued (and continue to issue) legislation and proposals that could change various aspects of the current tax framework under which we are taxed. These proposals include changes to the existing framework to calculate income tax, as well as proposals to change or impose new types of non-income taxes, including taxes based on a percentage of revenue or online sales (e.g. Romanian alternative minimum corporate tax, digital service taxes, equalization levies).
We continue to examine the impact of these and other tax reforms on our business, and cannot predict the timing and ultimate outcome or the potential impact they may have on our tax obligations, business, financial condition, and results of operations.
Due to the large and expanding scale of our international business activities, these types of changes to the taxation of our activities could increase our worldwide effective tax rate, increase the amount of taxes imposed on our business, and harm our financial position. Such changes may also apply retroactively to our historical operations and result in taxes greater than the amounts estimated and recorded in our financial statements.
We could be required to collect additional sales, use, transfer, or other indirect taxes or be subject to other tax liabilities that may increase the costs our customers would have to pay for our products and adversely affect our results of operations.
We currently collect and remit applicable sales, use, transfer, or other indirect taxes in jurisdictions where we, through our employees or economic activity, have a presence and where we have determined, based on applicable legal precedents, that sales or licensing of our products are classified as taxable. We do not currently collect and remit state and local excise, utility user or ad valorem taxes, fees, or surcharges in jurisdictions where we believe we do not have sufficient nexus. There is uncertainty as to what constitutes sufficient nexus for a state or local jurisdiction to levy taxes, fees, and surcharges for sales made over the internet, and there is also uncertainty as to whether our characterization of our products as not taxable in certain jurisdictions will be accepted by state and local tax authorities.
A number of states have considered or adopted laws that attempt to impose tax collection obligations on out-of-state companies. A successful assertion by one or more states requiring us to collect taxes where we presently do not do so, or to collect more taxes in a jurisdiction in which we currently do collect some taxes, could result in substantial tax liabilities, including taxes on past sales, as well as penalties and interest. The imposition by state governments or local governments of sales tax collection obligations on out-of-state sellers could also create additional administrative burdens for us and put us at a competitive disadvantage if they do not impose similar obligations on our competitors.
Our ability to use our NOLs to offset future taxable income may be subject to certain limitations.
Certain of our NOLs could expire unused and be unavailable to reduce future income tax liabilities because of their limited duration or because of restrictions under U.S. or foreign tax law. NOLs generated in taxable years beginning before January 1, 2018 are permitted to be carried forward for only 20 taxable years under applicable U.S. federal income tax law. Under current law, NOLs arising in taxable years beginning after December 31, 2020 may not be carried back. Moreover, under current law, NOLs generated in taxable years beginning after December 31, 2017 may be carried forward indefinitely, but the deductibility of such NOLs generally will be limited to 80% of current year taxable income. NOLs generated in taxable years beginning before January 1, 2024 are permitted to be carried forward for 7 taxable years under the Romania income tax law. NOLs generated in taxable years beginning after January 1, 2024 can be carried forward for 5 years, and the utilization of the NOLs is limited to 70% of current year taxable income.
In general, under Section 382 of the IRC , a corporation that undergoes an “ownership change” (as defined under Section 382 of the IRC and applicable Treasury Regulations) is subject to limitations on its ability to utilize its pre-change NOLs to offset future taxable income. We have identified Section 382 ownership changes in April 2017 and July 2020 and, accordingly, our NOLs are subject to limitation. We did not experience a subsequent ownership change in connection with the Series F Financing and our IPO. We do not believe that any Section 382 limitations will prevent us from fully utilizing our NOLs. It is possible that we have in the past undergone and may in the future undergo additional ownership changes that we have not identified and that could result in additional limitations on our NOLs. Furthermore, our ability to utilize NOLs of companies that we have acquired or may acquire
Table of Contents
in the future may be subject to limitations. There is also a risk that due to regulatory changes, such as suspensions on the use of NOLs, the adoption of alternative minimum taxes, turnover-based taxes, or similar regimes in certain jurisdictions, or for other unforeseen reasons, our existing NOLs could expire or otherwise be unavailable to reduce future income tax liabilities, including for state tax purposes. For these reasons, we may not be able to utilize a material portion of our NOLs, even if we sustain profitability, which could potentially result in increased future tax liability to us and could adversely affect our results of operations and financial condition.
Risks Related to Ownership of Our Class A Common Stock
The dual class structure of our common stock has the effect of concentrating voting control with Daniel Dines, our Chief Executive Officer, co-founder, and Chairman, which will limit stockholders' ability to influence the outcome of important decisions.
Our Class B common stock has 35 votes per share and our Class A common stock has one vote per share. Our CEO , co-founder, and Chairman, Daniel Dines, collectively with his controlled entities, holds all our outstanding shares of Class B common stock, and beneficially owned shares representing approximately 84% voting power of our outstanding capital stock as of January 31, 2026. As a result, Mr. Dines has the ability to control the outcome of matters requiring stockholder approval, including the election of directors and approval of significant corporate transactions, such as a merger or other sale of our company or our assets, even if his stock ownership represents less than 50% of the outstanding aggregate number of shares of our capital stock. This concentration of ownership will limit the ability of other stockholders to influence corporate matters and may cause us to make strategic decisions that could involve risks to other stockholders or that may not be aligned with other stockholders' interests. As a board member, Mr. Dines owes a fiduciary duty to our stockholders and is legally obligated to act in good faith and in a manner he reasonably believes to be in the best interests of our stockholders. As a stockholder, Mr. Dines is entitled to vote his shares in his own interests, which may not always be in the interests of our stockholders generally. Mr. Dines’ control may adversely affect the market price of our Class A common stock.
Further, transfers of our Class B common stock will generally result in those shares converting into shares of our Class A common stock, subject to limited exceptions, such as certain transfers effected for tax or estate planning purposes.
We have not elected to take advantage of the “controlled company” exemption to the corporate governance rules for publicly-listed companies but may do so in the future.
Because our CEO, co-founder, and Chairman, Daniel Dines, collectively with his controlled entities, holds all our outstanding shares of Class B common stock and beneficially owns shares representing in excess of 50% of the voting power of our outstanding capital stock, we are eligible to elect the “controlled company” exemption to the New York Stock Exchange corporate governance rules for publicly-listed companies. We have not elected to do so at this time. If we decide to rely on the “controlled company” exemption in the future, then under the New York Stock Exchange corporate governance rules for publicly-listed companies, we would not be required to have a majority of our board of directors be independent, nor would we be required to have a compensation committee or an independent nominating function. If we choose controlled company status in the future, our status as a controlled company could cause our Class A common stock to be less attractive to certain investors and adversely affect the market price of our Class A common stock.
Our dual class structure may impact the market price of our Class A common stock.
Our dual class structure, combined with the concentrated control of our CEO, co-founder, and Chairman, Daniel Dines, who holds all of the outstanding shares of our Class B common stock, may result in a lower or more volatile market price of our Class A common stock or in adverse publicity or other adverse consequences. Certain index providers have announced restrictions on including companies with multiple-class share structures in certain of their indexes. Given the sustained flow of investment funds into passive strategies that seek to track certain indexes, exclusion from stock indexes would likely preclude investment by many of these funds and could make our Class A common stock less attractive to other investors. As a result, the market price of our Class A common stock could be adversely affected.
Future sales of our Class A common stock in the public market could cause the market price of our Class A common stock to decline.
Sales of a substantial number of shares of our Class A common stock in the public market in the future, or the perception that these sales might occur, could depress the market price of our Class A common stock and could
Table of Contents
impair our ability to raise capital through the sale of additional equity securities. We are unable to predict the timing of or the effect that such sales may have on the prevailing market price of our Class A common stock.
In addition, there were 27,381,832 shares of Class A common stock issuable upon the exercise of options and upon the vesting and settlement of restricted stock units and performance stock units outstanding as of January 31, 2026. We have registered all of the shares of Class A common stock issuable upon exercise of outstanding options, vesting and settlement of outstanding restricted stock units and performance stock units, and other equity incentives we may grant in the future for public resale under the Securities Act. The shares of Class A common stock became eligible for sale in the public market to the extent such options are exercised or restricted stock units vested and settled, subject to compliance with applicable securities laws. Further, certain of our stockholders have rights, subject to some conditions, to require us to file registration statements covering the sale of their shares or to include their shares in registration statements that we may file for ourselves or other stockholders.
Sales, short sales, or hedging transactions involving our equity securities, whether or not we believe them to be prohibited, could adversely affect the price of our Class A common stock.
Anti-takeover provisions in our charter documents and under Delaware law could make an acquisition of our company more difficult, limit attempts by our stockholders to replace or remove our current management, and limit the market price of our Class A common stock.
In addition to the effects of our dual class structure, provisions in our amended and restated certificate of incorporation and second amended and restated bylaws may have the effect of delaying or preventing a change in control or changes in our management. Our amended and restated certificate of incorporation and second amended and restated bylaws include provisions that may frustrate or prevent any attempts by our stockholders to replace or remove our current management by making it more difficult for stockholders to replace members of our board of directors, which is responsible for appointing the members of our management.
In addition, because we are incorporated in Delaware, we are governed by the provisions of Section 203 of the Delaware General Corporation Law, which generally, subject to certain exceptions, prohibits a Delaware corporation from engaging in any of a broad range of business combinations with any “interested” stockholder for a period of three years following the date on which the stockholder became an “interested” stockholder. Any of the foregoing provisions could limit the price that investors might be willing to pay in the future for shares of our Class A common stock, and they could deter potential acquirers of our company, thereby reducing the likelihood that stockholders would receive a premium for their shares of our Class A common stock in an acquisition.
Our amended and restated certificate of incorporation provides that the Court of Chancery of the State of Delaware and the federal district courts of the U.S. will be the exclusive forums for substantially all disputes between us and our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers, or employees.
Our amended and restated certificate of incorporation provides that the Court of Chancery of the State of Delaware is the exclusive forum for the following types of actions or proceedings under Delaware statutory or common law:
• any derivative claim or cause of action brought on our behalf;
• any claim or cause of action asserting a breach of fiduciary duty;
• any claim or cause of action against us arising under the Delaware General Corporation Law;
• any claim or cause of action arising under or seeking to interpret our amended and restated certificate of incorporation or our second amended and restated bylaws; and
• any claim or cause of action against us that is governed by the internal affairs doctrine.
The provisions would not apply to suits brought to enforce a duty or liability created by the Exchange Act. Furthermore, Section 22 of the Securities Act creates concurrent jurisdiction for federal and state courts over all such Securities Act actions. Accordingly, both state and federal courts have jurisdiction to entertain such claims. To prevent having to litigate claims in multiple jurisdictions and the threat of inconsistent or contrary rulings by different courts, among other considerations, our amended and restated certificate of incorporation provides that the federal district courts of the U.S. will be the exclusive forum for resolving any complaint asserting a cause or causes of action arising under the Securities Act, including all causes of action asserted against any defendant to such complaint. For the avoidance of doubt, this provision is intended to and may be enforced by us, our officers and directors, the underwriters to any offering giving rise to such , and any other professional entity whose
Table of Contents
profession gives authority to a statement made by that person or entity and who has prepared or certified any part of the documents underlying the offering.
While the Delaware courts have determined that such choice of forum provisions are facially valid, a stockholder may nevertheless seek to bring a claim in a venue other than those designated in the exclusive forum provisions. In such instance, we would expect to vigorously assert the validity and enforceability of the exclusive forum provisions of our amended and restated certificate of incorporation. This may require significant additional costs associated with resolving such action in other jurisdictions and there can be no assurance that the provisions will be enforced by a court in those other jurisdictions.
These exclusive forum provisions may limit a stockholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with us or our directors, officers, or other employees, which may discourage lawsuits against us and our directors, officers, and other employees. If a court were to find either exclusive forum provision in our amended and restated certificate of incorporation to be inapplicable or unenforceable in an action, we may incur further significant additional costs associated with resolving the dispute in other jurisdictions, all of which could seriously harm our business.
General Risk Factors
Our stock price may be volatile, and the value of our Class A common stock may decline.
The market price of our Class A common stock may be highly volatile and may fluctuate or decline substantially as a result of a variety of factors, some of which are beyond our control, including:
• actual or anticipated fluctuations in our financial condition or results of operations;
• variance in our financial performance from expectations of securities analysts;
• changes in the pricing of our products and services;
• changes in our projected operating and financial results;
• changes in laws or regulations applicable to our platform and products;
• announcements by us or our competitors of significant business developments, acquisitions, or new products;
• significant data breaches, disruptions to, or other incidents involving our software;
• our involvement in litigation or governmental investigations;
• future sales of our Class A common stock by us or our stockholders;
• changes in senior management or key personnel;
• the issuance of new or changed securities analysts’ reports or recommendations;
• the trading volume of our Class A common stock;
• changes in the anticipated future size and growth rate of our market;
• economic and market conditions in general, or in our industry in particular; and
• technical factors in the public trading market for our Class A common stock that may produce price movements that may or may not comport with macro, industry, or company-specific fundamentals, including, without limitation, the sentiment of retail investors, the amount and status of short interest in our securities, access to margin debt, trading in options and other derivatives on our common stock, and other technical trading factors.
Accordingly, we cannot assure stockholders of the liquidity of an active trading market, the ability to sell their shares of our Class A common stock when desired, or the prices that they may obtain for their shares of our Class A common stock. The lack of an active market may impair stockholders' ability to sell their shares at the time they wish to sell them or at a price that they consider reasonable. The lack of an active market may also reduce the fair value of their shares. An inactive market may also impair our ability to raise capital to fund operations by selling shares and may impair our ability to acquire other companies or technologies by using our shares as consideration.
Broad market and industry fluctuations, as well as general economic, political, regulatory, and market conditions, may also negatively impact the market price of our Class A common stock. In addition, technology
Table of Contents
stocks have historically experienced high levels of volatility. In the past, companies that have experienced volatility in the market price of their securities have been subject to securities class action litigation. We have been and may in the future be the target of this type of litigation, which could result in substantial expenses and divert our management’s attention.
Our issuance of additional capital stock in connection with financings, acquisitions, investments, our equity incentive plans, or otherwise will dilute all other stockholders.
Although we have repurchased and may in the future repurchase shares of our Class A common stock to reduce dilution, we expect to continue to grant equity awards to employees and directors under our equity incentive plans, which will result in dilution to all other stockholders. We may also raise capital through equity financings in the future. Additionally, as part of our business strategy, we may acquire or make investments in companies, products, or technologies and issue equity securities to pay for any such acquisition or investment. Any such issuances of additional capital stock may cause stockholders to experience significant dilution of their ownership interests and the per share value of our Class A common stock to decline.
Our business, financial condition, results of operations, or cash flows could be significantly hindered by the occurrence of a natural disaster, public health crisis, military action, terrorist attack, or other catastrophic event.
Our business operations may be susceptible to outages due to fire, floods, unusual weather conditions, power loss, telecommunications failures, military actions, terrorist attacks, public health crises, and other events beyond our control. Natural disasters including tornados, hurricanes, floods, and earthquakes may damage the facilities of our customers or those of their suppliers or retailers or their other operations, which could lead to reduced revenue for our customers and thus reduced spending on our platform and products. In addition, a substantial portion of our operations rely on support from our headquarters in New York City and our office in Bucharest, Romania. To the extent that fire, floods, unusual weather conditions, power loss, telecommunications failures, military actions, terrorist attacks, public health crises, and other events beyond our control materially impact our ability to operate those offices, our business operations as a whole may be materially affected.
To the extent that such events disrupt our business or the businesses of our current or prospective customers, or adversely impact our reputation, such events could adversely affect our business, financial condition, results of operations, and cash flows.
If our estimates or judgments relating to our critical accounting estimates prove to be incorrect, our results of operations could be adversely affected.
The preparation of financial statements in conformity with U.S. GAAP requires management to make estimates and assumptions that affect the amounts reported in our consolidated financial statements. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances. The results of these estimates form the basis for making judgments about the carrying values of assets, liabilities, and equity, and the amount of revenue and expenses that are not readily apparent from other sources. Significant estimates and judgments relate to revenue recognition and income taxes. Our results of operations may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our results of operations to fall below the expectations of securities analysts and investors, resulting in a decline in the market price of our Class A common stock.
Table of Contents
